9p security fix 2023-06-08

[PULL 0/1] 9p security fix 2023-06-08

Christian Schoenebeck posted 1 patch 10 months, 3 weeks ago

Download series mbox

fsdev/virtfs-proxy-helper.c | 27 +++++++++++++++++++++++++--
hw/9pfs/9p-util.h           | 39 +++++++++++++++++++++++++++++++++++++++
2 files changed, 64 insertions(+), 2 deletions(-)

Expand all Fold all

[PULL 0/1] 9p security fix 2023-06-08

Posted by Christian Schoenebeck 10 months, 3 weeks ago

The following changes since commit 45ae97993a75f975f1a01d25564724c7e10a543f:

  Merge tag 'pull-tricore-20230607' of https://github.com/bkoppelmann/qemu into staging (2023-06-07 11:45:22 -0700)

are available in the Git repository at:

  https://github.com/cschoenebeck/qemu.git tags/pull-9p-20230608

for you to fetch changes up to f6b0de53fb87ddefed348a39284c8e2f28dc4eda:

  9pfs: prevent opening special files (CVE-2023-2861) (2023-06-08 17:04:58 +0200)

----------------------------------------------------------------
* Fix for CVE-2023-2861.

----------------------------------------------------------------
Christian Schoenebeck (1):
      9pfs: prevent opening special files (CVE-2023-2861)

 fsdev/virtfs-proxy-helper.c | 27 +++++++++++++++++++++++++--
 hw/9pfs/9p-util.h           | 39 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 64 insertions(+), 2 deletions(-)

Re: [PULL 0/1] 9p security fix 2023-06-08

Posted by Richard Henderson 10 months, 3 weeks ago

On 6/8/23 08:09, Christian Schoenebeck wrote:
> The following changes since commit 45ae97993a75f975f1a01d25564724c7e10a543f:
> 
>    Merge tag 'pull-tricore-20230607' ofhttps://github.com/bkoppelmann/qemu  into staging (2023-06-07 11:45:22 -0700)
> 
> are available in the Git repository at:
> 
>    https://github.com/cschoenebeck/qemu.git  tags/pull-9p-20230608
> 
> for you to fetch changes up to f6b0de53fb87ddefed348a39284c8e2f28dc4eda:
> 
>    9pfs: prevent opening special files (CVE-2023-2861) (2023-06-08 17:04:58 +0200)
> 
> ----------------------------------------------------------------
> * Fix for CVE-2023-2861.

Applied, thanks.  Please update https://wiki.qemu.org/ChangeLog/8.1 as appropriate.


r~