Wednesday, December 22, 2021

Re: UPDATE: QEMU 6.2.0

On 12/19/2021 1:07 PM, Daniel Dickman wrote:

> On Wed, Dec 15, 2021 at 12:22 AM Brad Smith <brad@comstyle.com> wrote:
>> Here is an update to QEMU 6.2.0.
>>
>> https://wiki.qemu.org/ChangeLog/6.2
>>
>>
> I didn't see it in the Changelog link but I think the current version
> suffers from CVE-2021-3713 which seems to be addressed in 6.2.0.

Looks like you're right.

https://github.com/qemu/qemu/search?o=desc&q=CVE&s=committer-date&type=commits

Searching the repo there are 8  - 9 other CVE mentoned in commits after
the UAS fix.

> Are you looking for the update to be committed or just tested at this
> point? I think the CVE makes me think we should commit this one
> soonish.
>
> What do you think?

Commited.

No comments:

Post a Comment