diff options
| author | Edward W. Koenig <kingbeowulf@gmail.com> | 2015-07-28 23:02:56 +0700 |
|---|---|---|
| committer | Willy Sudiarto Raharjo <willysr@slackbuilds.org> | 2015-07-28 23:04:44 +0700 |
| commit | 1c0a9d208699e93a07b6d203fe1d306f3263fff7 (patch) | |
| tree | 1a14c594ad5b06ec6354bf899f07302e42385934 /system/qemu/qemu.SlackBuild | |
| parent | ecff42fffdeec0731fe7d4bd53c14734f6fa52b0 (diff) | |
system/qemu: Patched for CVE-2015-5154.
Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>
Diffstat (limited to 'system/qemu/qemu.SlackBuild')
| -rw-r--r-- | system/qemu/qemu.SlackBuild | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/system/qemu/qemu.SlackBuild b/system/qemu/qemu.SlackBuild index 1da81e8417361..2d563cf528aeb 100644 --- a/system/qemu/qemu.SlackBuild +++ b/system/qemu/qemu.SlackBuild @@ -41,10 +41,11 @@ # 1.8 27-APR-2015 updated to version 2.3.0 # 1.9 14-MAY-2015 patched for "Venom" CVE-2015-3456 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=e907746266721f305d67bc0718795fedee2e824c # 2.0 11-JUL-2015 patched for Heap-based buffer overflow in the PCNET controller CVE-2015-3209 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f7c594c006289ad41169b854d70f5da6e400a2a +# 2.1 27-JUL-2015 patched for heap overflow flaw while processing certain ATAPI commands CVE-2015-5154 http://git.qemu.org/?p=qemu.git;a=commitdiff;h=e40db4c6d391419c0039fe274c74df32a6ca1a28;hp=f793d97e454a56d17e404004867985622ca1a63b PRGNAM=qemu VERSION=${VERSION:-2.3.0} -BUILD=${BUILD:-3} +BUILD=${BUILD:-4} TAG=${TAG:-_SBo} KVMGROUP=${KVMGROUP:-users} @@ -139,10 +140,13 @@ if [ "$LIBUSB" = "yes" ]; then fi # patch Venom bug CVE-2015-3456 -patch -p1 < $CWD/qemu_venom.patch +patch -p1 < $CWD/patches/qemu_venom.patch # patch PCNET controller bug CVE-2015-3209 -patch -p1 < $CWD/qemu_pcnet.patch +patch -p1 < $CWD/patches/qemu_pcnet.patch + +# patch ATAPI heap overflow bug CVE-2015-5154 +patch -p1 < $CWD/patches/qemu_atapi.patch PKG_CONFIG_PATH+="${USBSTATIC}" \ CFLAGS="$SLKCFLAGS" \ |