Ross Burton 78311acbd3 qemu: fix CVE-2017-15124 ...

VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to
be vulnerable to an unbounded memory allocation issue, as it did not throttle
the framebuffer updates sent to its client. If the client did not consume these
updates, VNC server allocates growing memory to hold onto this data. A malicious
remote VNC client could use this flaw to cause DoS to the server host.

Backport a series of patches from upstream to resolve this.

(From OE-Core rev: a93d8ed1bc97595492abfca92d606e20dbdfa617)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2018-02-16 18:05:39 +00:00

..

qemu

qemu: fix CVE-2017-15124

2018-02-16 18:05:39 +00:00

qemu-helper

nativesdk-qemu-helper: drop old Zaurus flash tools

2016-09-24 07:30:09 +01:00

nativesdk-qemu-helper_1.0.bb

python: fix RDEPENDS on several recipes, due to non-existent packages

2018-01-20 22:31:56 +00:00

qemu_2.11.0.bb

qemu: fix CVE-2017-15124

2018-02-16 18:05:39 +00:00

qemu-helper-native_1.0.bb

rm_work: Improve handling for addto_recipe_sysroot

2017-07-31 15:13:31 +01:00

qemu-targets.inc

meta: remove True option to getVar calls

2016-12-16 10:23:23 +00:00

qemu.inc

devtools: qemu: Remove obsolete '--with-system-pixman' option

2017-09-21 09:24:24 +01:00

qemuwrapper-cross_1.0.bb

qemuwrapper-cross: Add HOMEPAGE info into recipe file.

2017-09-21 09:05:50 +01:00