Fixed CVE: - CVE-2017-2620 (Severity = High) display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo
Reference https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html Removed patches (already in upstream): - target-ppc-fix-user-mode.patch Signed-off-by: Sona Sarmadi <[email protected]> --- meta/recipes-devtools/qemu/{qemu_2.8.0.bb => qemu_2.8.1.1.bb} | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) rename meta/recipes-devtools/qemu/{qemu_2.8.0.bb => qemu_2.8.1.1.bb} (87%) diff --git a/meta/recipes-devtools/qemu/qemu_2.8.0.bb b/meta/recipes-devtools/qemu/qemu_2.8.1.1.bb similarity index 87% rename from meta/recipes-devtools/qemu/qemu_2.8.0.bb rename to meta/recipes-devtools/qemu/qemu_2.8.1.1.bb index 19d7e8f..1d5bcf9 100644 --- a/meta/recipes-devtools/qemu/qemu_2.8.0.bb +++ b/meta/recipes-devtools/qemu/qemu_2.8.1.1.bb @@ -19,7 +19,6 @@ SRC_URI += " \ file://no-valgrind.patch \ file://pathlimit.patch \ file://qemu-2.5.0-cflags.patch \ - file://target-ppc-fix-user-mode.patch \ file://glibc-2.25.patch \ " @@ -28,8 +27,6 @@ SRC_URI += " \ file://0002-Introduce-condition-to-notify-waiters-of-completed-c.patch \ file://0003-Introduce-condition-in-TPM-backend-for-notification.patch \ file://0004-Add-support-for-VM-suspend-resume-for-TPM-TIS.patch \ - file://CVE-2016-9908.patch \ - file://CVE-2016-9912.patch \ " SRC_URI_append_class-native = " \ @@ -39,8 +36,8 @@ SRC_URI_append_class-native = " \ SRC_URI =+ "http://wiki.qemu-project.org/download/${BP}.tar.bz2"; -SRC_URI[md5sum] = "17940dce063b6ce450a12e719a6c9c43" -SRC_URI[sha256sum] = "dafd5d7f649907b6b617b822692f4c82e60cf29bc0fc58bc2036219b591e5e62" +SRC_URI[md5sum] = "a6a23a0c59fd0f8ec564b0fb89a79954" +SRC_URI[sha256sum] = "f62ab18a1fb9ff5b4c81ed44becc945b11581eff777618141bdb787da55d3638" COMPATIBLE_HOST_mipsarchn32 = "null" COMPATIBLE_HOST_mipsarchn64 = "null" -- 1.9.1 -- _______________________________________________ Openembedded-core mailing list [email protected] http://lists.openembedded.org/mailman/listinfo/openembedded-core
