Summary: | <net-libs/libslirp-4.3.1-r1: Multiple vulnerabilities (CVE-2020-{29129,29130}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | zmedico |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | B3 [noglsa] | ||
Package list: |
net-libs/libslirp-4.3.1-r1
|
Runtime testing required: | --- |
Description
Sam James
2020-11-26 20:17:41 UTC
Please apply if it looks OK to you, thanks! The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d30c6855d7a1a594e6259685a4dc22e1bb6acf93 commit d30c6855d7a1a594e6259685a4dc22e1bb6acf93 Author: Zac Medico <zmedico@gentoo.org> AuthorDate: 2020-11-26 20:50:17 +0000 Commit: Zac Medico <zmedico@gentoo.org> CommitDate: 2020-11-26 20:52:42 +0000 net-libs/libslirp: Revbump to 4.3.1-r1 Fixes CVE-2020-29129 and CVE-2020-29130. Bug: https://bugs.gentoo.org/756910 Package-Manager: Portage-3.0.10, Repoman-3.0.2 Signed-off-by: Zac Medico <zmedico@gentoo.org> .../libslirp-4.3.1-bug-756910-check-pkt_len.patch | 48 ++++++++++++++++++++++ net-libs/libslirp/libslirp-4.3.1-r1.ebuild | 39 ++++++++++++++++++ 2 files changed, 87 insertions(+) Thanks! Let us know when ready to stable. Ready? Ready. x86 stable (In reply to Zac Medico from comment #5) > Ready. Thanks! arm64 stable amd64 done ppc64 stable Please cleanup. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cdf57f779c7c6d4950229619bfbc46b33a6d69e4 commit cdf57f779c7c6d4950229619bfbc46b33a6d69e4 Author: Zac Medico <zmedico@gentoo.org> AuthorDate: 2020-12-19 00:05:26 +0000 Commit: Zac Medico <zmedico@gentoo.org> CommitDate: 2020-12-19 00:06:29 +0000 net-libs/libslirp: remove vulnerable 4.3.1 for bug 756910 Bug: https://bugs.gentoo.org/756910 Package-Manager: Portage-3.0.12, Repoman-3.0.2 Signed-off-by: Zac Medico <zmedico@gentoo.org> net-libs/libslirp/libslirp-4.3.1.ebuild | 35 --------------------------------- 1 file changed, 35 deletions(-) Thanks Zac. Needs vote. GLSA Vote: No Repository is clean, all done! |