From 1e5b1227cfc474a609f00f4a19e798c4e31cbf97 Mon Sep 17 00:00:00 2001 From: melikamp Date: Mon, 13 Jul 2015 07:54:06 +0700 Subject: system/qemu: Patched to fix CVE-2015-3209. Signed-off-by: Willy Sudiarto Raharjo --- system/qemu/qemu.SlackBuild | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'system/qemu/qemu.SlackBuild') diff --git a/system/qemu/qemu.SlackBuild b/system/qemu/qemu.SlackBuild index c9c7c4698f..1da81e8417 100644 --- a/system/qemu/qemu.SlackBuild +++ b/system/qemu/qemu.SlackBuild @@ -40,10 +40,11 @@ # 1.7 01-JAN-2015 updated to 2.2.0 ; build and link static libusb option (rw, tm, SBo list) # 1.8 27-APR-2015 updated to version 2.3.0 # 1.9 14-MAY-2015 patched for "Venom" CVE-2015-3456 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=e907746266721f305d67bc0718795fedee2e824c +# 2.0 11-JUL-2015 patched for Heap-based buffer overflow in the PCNET controller CVE-2015-3209 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f7c594c006289ad41169b854d70f5da6e400a2a PRGNAM=qemu VERSION=${VERSION:-2.3.0} -BUILD=${BUILD:-2} +BUILD=${BUILD:-3} TAG=${TAG:-_SBo} KVMGROUP=${KVMGROUP:-users} @@ -140,6 +141,9 @@ fi # patch Venom bug CVE-2015-3456 patch -p1 < $CWD/qemu_venom.patch +# patch PCNET controller bug CVE-2015-3209 +patch -p1 < $CWD/qemu_pcnet.patch + PKG_CONFIG_PATH+="${USBSTATIC}" \ CFLAGS="$SLKCFLAGS" \ CXXFLAGS="$SLKCFLAGS" \ -- cgit v1.2.3