Re: [Qemu-devel] [PULL 0/1] Slirp cve 2019 14378 patches

[Peter Maydell]

On Fri, 2 Aug 2019 at 12:18, Marc-André Lureau
<address@hidden> wrote:
>
> The following changes since commit 3bd6cbbb181b6ae60a1d1f33ccd325b45f71aa2a:
>
>   Update version for v4.1.0-rc3 release (2019-07-30 22:02:05 +0100)
>
> are available in the Git repository at:
>
>   https://github.com/elmarco/qemu.git tags/slirp-CVE-2019-14378-pull-request
>
> for you to fetch changes up to e1a4a24d262ba5ac74ea1795adb3ab1cd574c7fb:
>
>   slirp: update with CVE-2019-14378 fix (2019-08-02 15:14:56 +0400)
>
> ----------------------------------------------------------------
> Slirp CVE-2019-14378 pull request
>
> ----------------------------------------------------------------
>
> Marc-André Lureau (1):
>   slirp: update with CVE-2019-14378 fix

Changes here since the last submodule update:

126c04a Fix heap overflow in ip_reass on big packet input
113a219 Update README.md build instructions
bc814a7 build-sys: rename project to libslirp

Ideally we'd just take the fix and no other changes,
but a readme change is harmless and the build-sys
change only affects builds with meson which QEMU
doesn't use, so this should be OK.

thanks
-- PMM