openSUSE Build Service

José Ricardo Ziviani (jziviani) accepted request 911318 from

José Ricardo Ziviani (jziviani) about 3 years ago (revision 664)

- usb: unbounded stack allocation in usbredir
  (bsc#1186012, CVE-2021-3527)
  hw-usb-Do-not-build-USB-subsystem-if-not.patch
  hw-usb-host-stub-Remove-unused-header.patch
  usb-hid-avoid-dynamic-stack-allocation.patch
  usb-limit-combined-packets-to-1-MiB-CVE-.patch
  usb-mtp-avoid-dynamic-stack-allocation.patch
- usbredir: free call on invalid pointer in bufp_alloc
  (bsc#1189145, CVE-2021-3682)
  usbredir-fix-free-call.patch

José Ricardo Ziviani (jziviani) accepted request 910154 from

José Ricardo Ziviani (jziviani) about 3 years ago (revision 663)

- Add stable patches from upstream:
  block-nvme-Fix-VFIO_MAP_DMA-failed-No-sp.patch
  hw-net-can-sja1000-fix-buff2frame_bas-an.patch
  hw-pci-host-q35-Ignore-write-of-reserved.patch

José Ricardo Ziviani (jziviani) accepted request 908021 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 662)

- Disabled skiboot building for PowerPC due to the following issue:
  https://github.com/open-power/skiboot/issues/265
- Fix possible mremap overflow in the pvrdma
  (CVE-2021-3582, bsc#1187499)
  hw-rdma-Fix-possible-mremap-overflow-in-.patch
- Ensure correct input on ring init
  (CVE-2021-3607, bsc#1187539)
  pvrdma-Ensure-correct-input-on-ring-init.patch
- Fix the ring init error flow
  (CVE-2021-3608, bsc#1187538)
  pvrdma-Fix-the-ring-init-error-flow-CVE-.patch

José Ricardo Ziviani (jziviani) accepted request 903795 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 661)

- Fix qemu-supportconfig network-manager verification

José Ricardo Ziviani (jziviani) accepted request 903710 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 660)

- Fix stable issues found in upstream:
  hmp-Fix-loadvm-to-resume-the-VM-on-succe.patch
  hw-block-nvme-align-with-existing-style.patch
  hw-nvme-fix-missing-check-for-PMR-capabi.patch
  hw-nvme-fix-pin-based-interrupt-behavior.patch
  linux-user-aarch64-Enable-hwcap-for-RND-.patch
  qemu-config-load-modules-when-instantiat.patch
  qemu-config-parse-configuration-files-to.patch
  qemu-config-use-qemu_opts_from_qdict.patch
  runstate-Initialize-Error-to-NULL.patch
  target-i386-Exit-tb-after-wrmsr.patch
  tcg-Allocate-sufficient-storage-in-temp_.patch
  tcg-sparc-Fix-temp_allocate_frame-vs-spa.patch
  vhost-vdpa-don-t-initialize-backend_feat.patch
  vl-allow-not-specifying-size-in-m-when-u.patch
  vl-Fix-an-assert-failure-in-error-path.patch
  vl-plug-object-back-into-readconfig.patch
  vl-plumb-keyval-based-options-into-readc.patch
  x86-acpi-use-offset-instead-of-pointer-w.patch
- Update qemu-supportconfig plugin
- Fix an update-alternative warning when removing qemu-skiboot package
  bsc#1178678

José Ricardo Ziviani (jziviani) accepted request 901600 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 659)

- Use doc directive to build QEMU documentation

José Ricardo Ziviani (jziviani) accepted request 900339 from

Andrei Alexeyev (Akaricchi) over 3 years ago (revision 658)

Enable JACK audio plugin.

buildservice-autocommit accepted request 900191 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 657)

baserev update by copy to link target

José Ricardo Ziviani (jziviani) accepted request 900190 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 656)

Update bugs to correctly point to bsc#1186010

José Ricardo Ziviani (jziviani) accepted request 899990 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 655)

- Improve compatibility with gcc 11:
  target-sh4-Return-error-if-CPUClass-get_.patch
  tcg-arm-Fix-tcg_out_op-function-signatur.patch
- Enable zstd compression option to qcow2

buildservice-autocommit accepted request 897978 from

Dirk Mueller (dirkmueller) over 3 years ago (revision 654)

baserev update by copy to link target

José Ricardo Ziviani (jziviani) accepted request 898228 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 653)

- Fix out-of-bounds write in virgl_cmd_get_capset
  CVE-2021-3546 bsc#1185981
  vhost-user-gpu-abstract-vg_cleanup_mappi.patch
- Fix memory leaks found in the virtio vhost-user GPU device
  CVE-2021-3544
  vhost-user-gpu-fix-leak-in-virgl_cmd_res.patch
  vhost-user-gpu-fix-leak-in-virgl_resourc.patch
  vhost-user-gpu-fix-memory-disclosure-in-.patch
  vhost-user-gpu-fix-memory-leak-in-vg_res.patch
  vhost-user-gpu-fix-memory-leak-while-cal.patch
  vhost-user-gpu-fix-OOB-write-in-virgl_cm.patch
- Fix information disclosure due to uninitialized memory read
  CVE-2021-3545 bsc#1185990
  vhost-user-gpu-fix-resource-leak-in-vg_r.patch

José Ricardo Ziviani (jziviani) accepted request 897171 from

Dirk Mueller (dirkmueller) over 3 years ago (revision 652)

- disable sheepdog, it was dropped upstream (
  https://gitlab.com/qemu-project/qemu/-/commit/09ec85176e4095be15f233ebc870d5680123f024)
  and fails to build with gcc 11 on non-x86

buildservice-autocommit accepted request 895371 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 651)

baserev update by copy to link target

José Ricardo Ziviani (jziviani) accepted request 895224 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 650)

- Fix CVE-2021-3527 in usb/redir:
  usb-redir-avoid-dynamic-stack-allocation.patch
- Fix issues found upstream:
  hw-block-nvme-consider-metadata-read-aio.patch
  sockets-update-SOCKET_ADDRESS_TYPE_FD-li.patch
  vfio-ccw-Permit-missing-IRQs.patch
  vhost-user-blk-Check-that-num-queues-is-.patch
  vhost-user-blk-Don-t-reconnect-during-in.patch
  vhost-user-blk-Fail-gracefully-on-too-la.patch
  vhost-user-blk-Get-more-feature-flags-fr.patch
  vhost-user-blk-Make-sure-to-set-Error-on.patch
  virtio-blk-Fix-rollback-path-in-virtio_b.patch
  virtio-Fail-if-iommu_platform-is-request.patch
  virtiofsd-Fix-side-effect-in-assert.patch
  monitor-qmp-fix-race-on-CHR_EVENT_CLOSED.patch

José Ricardo Ziviani (jziviani) accepted request 893867 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 649)

- Don't need to use hardcoded versions of jquery.js, which is only used in documention files. This changes allows different jquery.js version in qemu.spec file.

José Ricardo Ziviani (jziviani) accepted request 893847 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 648)

- Brotli VLA error was already fixed in v5.2 but the patches wasn't
  included in v6.0. This change fixes that
- Patches added:
  brotli-fix-actual-variable-array-paramet.patch
  hw-rx-rx-gdbsim-Do-not-accept-invalid-me.patch
  ui-Fix-memory-leak-in-qemu_xkeymap_mappi.patch

José Ricardo Ziviani (jziviani) accepted request 893748 from

Martin Liška (marxin) over 3 years ago (revision 647)

- Add fix-brotli-vla-error.patch in order to fix bsc#1181922.

buildservice-autocommit accepted request 890186 from

José Ricardo Ziviani (jziviani) over 3 years ago (revision 646)

baserev update by copy to link target

Bruce Rogers (bfrogers) accepted request 891073 from

Bruce Rogers (bfrogers) over 3 years ago (revision 645)

- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)

Places

Revisions of qemu

Places