Soumya Sambu ae2c4f104b qemu: Fix CVE-2023-3180 ...

A flaw was found in the QEMU virtual crypto device while handling
data encryption/decryption requests in virtio_crypto_handle_sym_req.
There is no check for the value of `src_len` and `dst_len` in
virtio_crypto_sym_op_helper, potentially leading to a heap buffer
overflow when the two values differ.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-3180

(From OE-Core rev: 2038b5e977481cac2e9e35101a467fbd5268231e)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2023-10-11 03:54:46 -10:00

..

classes

externalsrc: fix dependency chain issues

2023-08-30 04:52:36 -10:00

classes-global

staging.bbclass: do not add extend_recipe_sysroot to prefuncs of prepare_recipe_sysroot

2023-06-14 04:14:25 -10:00

classes-recipe

kernel.bbclass: Add force flag to rm calls

2023-10-04 05:21:28 -10:00

conf

bitbake.conf: add bunzip2 in HOSTTOOLS

2023-10-04 05:21:27 -10:00

files

classes: files: Extend overlayfs-etc class

2022-09-09 12:24:43 +01:00

lib

patch.py: use --absolute-git-dir instead of --show-toplevel to retrieve gitdir

2023-10-04 05:21:27 -10:00

recipes-bsp

grub: submit determinism.patch upstream

2023-07-04 05:32:29 -10:00

recipes-connectivity

inetutils: remove obsolete cruft from do_configure

2023-10-04 05:21:28 -10:00

recipes-core

glibc: stable 2.37 branch updates.

2023-10-05 14:19:57 -10:00

recipes-devtools

qemu: Fix CVE-2023-3180

2023-10-11 03:54:46 -10:00

recipes-extended

mdadm: skip running 04update-uuid and 07revert-inplace testcases

2023-09-04 04:13:25 -10:00

recipes-gnome

gtk4: upgrade 4.10.4 -> 4.10.5

2023-08-30 04:52:35 -10:00

recipes-graphics

pixman: Remove duplication of license MIT

2023-09-04 04:13:25 -10:00

recipes-kernel

linux-firmware: add firmware files for NXP BT chipsets

2023-10-04 05:21:27 -10:00

recipes-multimedia

libwebp: Fix CVE-2023-5129

2023-10-04 05:21:26 -10:00

recipes-rt

recipes: Default to https git protocol where possible

2023-05-18 04:29:33 -10:00

recipes-sato

webkitgtk: fix CVE-2023-32435

2023-09-13 06:21:25 -10:00

recipes-support

curl: Add CVE-2023-28320 follow-up fix

2023-09-29 04:33:43 -10:00

site

site: remove glib site values

2023-02-19 07:47:53 +00:00

COPYING.MIT

…

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00