mbox

[PULL,0/1] vnc: fix memory corruption (CVE-2015-5225)

Message ID 1440607222-18716-1-git-send-email-kraxel@redhat.com
State New
Headers show

Pull-request

git://git.kraxel.org/qemu tags/pull-cve-2015-5225-20150826-1

Message

Gerd Hoffmann Aug. 26, 2015, 4:40 p.m. UTC
Hi,

Here comes a vnc security fix.

please pull,
  Gerd

The following changes since commit 7df9671989c1cfa693764f9ae6349324b2ada02a:

  Merge remote-tracking branch 'remotes/pmaydell/tags/pull-target-arm-20150825-1' into staging (2015-08-25 16:24:06 +0100)

are available in the git repository at:


  git://git.kraxel.org/qemu tags/pull-cve-2015-5225-20150826-1

for you to fetch changes up to eb8934b0418b3b1d125edddc4fc334a54334a49b:

  vnc: fix memory corruption (CVE-2015-5225) (2015-08-26 17:54:33 +0200)

----------------------------------------------------------------
vnc: fix memory corruption (CVE-2015-5225)

----------------------------------------------------------------
Gerd Hoffmann (1):
      vnc: fix memory corruption (CVE-2015-5225)

 ui/vnc.c | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

Comments

Peter Maydell Aug. 26, 2015, 4:47 p.m. UTC | #1
On 26 August 2015 at 17:40, Gerd Hoffmann <kraxel@redhat.com> wrote:
>   Hi,
>
> Here comes a vnc security fix.
>
> please pull,
>   Gerd
>
> The following changes since commit 7df9671989c1cfa693764f9ae6349324b2ada02a:
>
>   Merge remote-tracking branch 'remotes/pmaydell/tags/pull-target-arm-20150825-1' into staging (2015-08-25 16:24:06 +0100)
>
> are available in the git repository at:
>
>
>   git://git.kraxel.org/qemu tags/pull-cve-2015-5225-20150826-1
>
> for you to fetch changes up to eb8934b0418b3b1d125edddc4fc334a54334a49b:
>
>   vnc: fix memory corruption (CVE-2015-5225) (2015-08-26 17:54:33 +0200)

So, are we planning to take the "make a stable release for CVE fixes"
approach we discussed at the QEMU summit for this?

(I'm currently applying it to master.)

thanks
-- PMM
Peter Maydell Aug. 26, 2015, 5:59 p.m. UTC | #2
On 26 August 2015 at 17:40, Gerd Hoffmann <kraxel@redhat.com> wrote:
>   Hi,
>
> Here comes a vnc security fix.
>
> please pull,
>   Gerd
>
> The following changes since commit 7df9671989c1cfa693764f9ae6349324b2ada02a:
>
>   Merge remote-tracking branch 'remotes/pmaydell/tags/pull-target-arm-20150825-1' into staging (2015-08-25 16:24:06 +0100)
>
> are available in the git repository at:
>
>
>   git://git.kraxel.org/qemu tags/pull-cve-2015-5225-20150826-1
>
> for you to fetch changes up to eb8934b0418b3b1d125edddc4fc334a54334a49b:
>
>   vnc: fix memory corruption (CVE-2015-5225) (2015-08-26 17:54:33 +0200)
>
> ----------------------------------------------------------------
> vnc: fix memory corruption (CVE-2015-5225)
>
> ----------------------------------------------------------------
> Gerd Hoffmann (1):
>       vnc: fix memory corruption (CVE-2015-5225)

Applied, thanks.

-- PMM