Summary: | <app-emulation/qemu-5.1.0-r1: Out of bounds read/write in USB emulation (CVE-2020-14364) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | critical | CC: | slyfox, tamiko, virtualization |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://www.openwall.com/lists/oss-security/2020/08/24/3 | ||
Whiteboard: | A1 [glsa++] | ||
Package list: |
app-emulation/qemu-5.1.0-r2
|
Runtime testing required: | --- |
Description
John Helmert III
![]() ![]() ![]() ![]() Upstream commit: https://gitlab.com/qemu-project/qemu/-/commit/b946434f2659a182afc17e155be6791ebfb302eb The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bf5b7df71d5fa17a248529f6e8180098c1adc667 commit bf5b7df71d5fa17a248529f6e8180098c1adc667 Author: Sergei Trofimovich <slyfox@gentoo.org> AuthorDate: 2020-09-20 08:22:57 +0000 Commit: Sergei Trofimovich <slyfox@gentoo.org> CommitDate: 2020-09-20 08:23:26 +0000 app-emulation/qemu: backport USB oob access (CVE-2020-14364) Reported-by: John Helmert III (ajak) Bug: https://bugs.gentoo.org/743649 Package-Manager: Portage-3.0.7, Repoman-3.0.1 Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org> .../files/qemu-5.1.0-usb-oob-CVE-2020-14364.patch | 90 +++ app-emulation/qemu/qemu-5.1.0-r1.ebuild | 846 +++++++++++++++++++++ 2 files changed, 936 insertions(+) Thanks. Please stable when ready. (In reply to John Helmert III (ajak) from comment #3) > Thanks. Please stable when ready. Ready? arm64 done amd64 done x86 stable. Maintainer(s), please cleanup. Security, please add it to the existing request, or file a new one. Unable to check for sanity:
> no match for package: app-emulation/qemu-5.1.0-r1
(In reply to Agostino Sarubbo from comment #7) > x86 stable. > > Maintainer(s), please cleanup. > Security, please add it to the existing request, or file a new one. Done in https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09d8b2d015074015e7c732b8119bacf18283fe95. This issue was resolved and addressed in GLSA 202011-09 at https://security.gentoo.org/glsa/202011-09 by GLSA coordinator Sam James (sam_c). This issue was resolved and addressed in GLSA 202011-09 at https://security.gentoo.org/glsa/202011-09 by GLSA coordinator Sam James (sam_c). |