Security fix.  Sorry for the last-minute patch, I had completely
forgotten this one until the CVE number for it arrived today.
Given that the classic usb storage device is way more popular than
the uas (usb attached scsi) device the impact should be pretty low
and we might consider to not screw up our release schedule for this.

take care,
  Gerd

Gerd Hoffmann (1):
  uas: add stream number sanity checks.

 hw/usb/dev-uas.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

-- 
2.31.1



Reply via email to