More details on the nature of the CVE are available here:
http://seclists.org/oss-sec/2013/q3/161
The following changes since commit d2f5ea9704af781d4cf14e4be08bb4e37a180260:
pc-testdev: add I/O port to test memory.c auto split/combine (2013-07-25
08:12:28 -0500)
are available in the git repository at:
git://github.com/mdroth/qemu.git qga-pull-2013-7-25
for you to fetch changes up to 340d51df5592c5c11fc3885f7bdedbe581b87366:
qga: escape cmdline args when registering win32 service (CVE-2013-2231)
(2013-07-25 14:49:04 -0500)
----------------------------------------------------------------
Laszlo Ersek (3):
qga/service-win32.c: diagnostic output should go to stderr
ga_install_service(): nest error paths more idiomatically
qga: escape cmdline args when registering win32 service (CVE-2013-2231)
qga/service-win32.c | 105 ++++++++++++++++++++++++++++++++++++++++++---------
1 file changed, 88 insertions(+), 17 deletions(-)
