Security fix. Sorry for the last-minute patch, I had completely forgotten this one until the CVE number for it arrived today.
Given that the classic usb storage device is way more popular than the uas (usb attached scsi) device the impact should be pretty low and we might consider to not screw up our release schedule for this. take care, Gerd Gerd Hoffmann (1): uas: add stream number sanity checks. hw/usb/dev-uas.c | 11 +++++++++++ 1 file changed, 11 insertions(+) -- 2.31.1