Re: [PULL for-9.2 0/1] 9p queue 2024-12-10

[Peter Maydell]

On Tue, 10 Dec 2024 at 10:11, Christian Schoenebeck
<qemu_oss@crudebyte.com> wrote:
>
> The following changes since commit 1cf9bc6eba7506ab6d9de635f224259225f63466:
>
>   Update version for v9.2.0-rc3 release (2024-12-03 17:56:12 +0000)
>
> are available in the Git repository at:
>
>   https://github.com/cschoenebeck/qemu.git tags/pull-9p-20241210
>
> for you to fetch changes up to d06a9d843fb65351e0e4dc42ba0c404f01ea92b3:
>
>   9pfs: fix regression regarding CVE-2023-2861 (2024-12-10 10:24:52 +0100)
>
> ----------------------------------------------------------------
> * Fix a regression regarding CVE-2023-2861 with security_model=passthrough
>   which caused certain sockets on guest to fail.
>
> ----------------------------------------------------------------

The commit message says it's a fix for a bug in commit f6b0de53fb,
which was in the 9.1 release. Is this really a regression since 9.1 ?

More generally, if you want to send a change on the day we're
due to make the final release, it needs to come with a clear
justification for why the bug is critical enough to force us
to delay the release by a week.

thanks
-- PMM