GNU bug report logs - #26134
QEMU and virglrenderer security CVE-2017-6386 CVE-2017-2620 CVE-2017-2630

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 26134 in the body.
You can then email your comments to 26134 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: guix-patches <at> gnu.org
Subject: QEMU and virglrenderer security CVE-2017-6386 CVE-2017-2620
 CVE-2017-2630
Date: Thu, 16 Mar 2017 17:39:45 -0400

[Message part 1 (text/plain, inline)]

[0001-gnu-virglrenderer-Fix-CVE-2017-6386.patch (text/plain, attachment)]

[0002-gnu-qemu-Fix-CVE-2017-2620-2630.patch (text/plain, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 26134 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Leo Famulari <leo <at> famulari.name>
Cc: 26134 <at> debbugs.gnu.org
Subject: Re: bug#26134: QEMU and virglrenderer security CVE-2017-6386
 CVE-2017-2620 CVE-2017-2630
Date: Thu, 16 Mar 2017 23:18:32 +0100

Leo Famulari <leo <at> famulari.name> writes:

> From 306ad14d580a8f8eb8366b8b32a54e22cf7c804e Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo <at> famulari.name>
> Date: Thu, 16 Mar 2017 14:13:08 -0400
> Subject: [PATCH 1/2] gnu: virglrenderer: Fix CVE-2017-6386.
>
> * gnu/packages/patches/virglrenderer-CVE-2017-6386.patch: New file.
> * gnu/local.mk (dist_patch_DATA): Add it.
> * gnu/packages/spice.scm (virglrenderer)[source]: Use it.

LGTM!

> From d4b92dc80b8a7e81e79b6a148b2ddbd98c3bc895 Mon Sep 17 00:00:00 2001
> From: Leo Famulari <leo <at> famulari.name>
> Date: Thu, 16 Mar 2017 14:58:13 -0400
> Subject: [PATCH 2/2] gnu: qemu: Fix CVE-2017-{2620,2630}.
>
> * gnu/packages/patches/qemu-CVE-2017-2620.patch,
> gnu/packages/patches/qemu-CVE-2017-2630.patch: New files.
> * gnu/local.mk (dist_patch_DATA): Add them.
> * gnu/packages/qemu.scm (qemu)[source]: Use them.

LGTM!

Thank you for applying these fixes!

-- 
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
https://elephly.net

Message #13 received at 26134-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: 26134-done <at> debbugs.gnu.org
Subject: Re: bug#26134: QEMU and virglrenderer security CVE-2017-6386
 CVE-2017-2620 CVE-2017-2630
Date: Thu, 16 Mar 2017 19:49:33 -0400

On Thu, Mar 16, 2017 at 11:18:32PM +0100, Ricardo Wurmus wrote:
> Leo Famulari <leo <at> famulari.name> writes:
> > Subject: [PATCH 1/2] gnu: virglrenderer: Fix CVE-2017-6386.
> 
> LGTM!
> 
> > Subject: [PATCH 2/2] gnu: qemu: Fix CVE-2017-{2620,2630}.
> 
> LGTM!

Pushed!

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.