mbox

[PULL,for-9.1-rc4,0/1] NBD patches for 2024-08-26

Message ID 20240826135044.1692814-3-eblake@redhat.com
State New
Headers show

Pull-request

https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2024-08-26

Message

Eric Blake Aug. 26, 2024, 1:49 p.m. UTC
The following changes since commit f259e4cb8a8b4ef5463326fc214a7d8d7703d5de:

  Merge tag 'pull-trivial-patches' of https://gitlab.com/mjt0k/qemu into staging (2024-08-24 08:09:27 +1000)

are available in the Git repository at:

  https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2024-08-26

for you to fetch changes up to 3874f5f73c441c52f1c699c848d463b0eda01e4c:

  nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (2024-08-26 08:42:42 -0500)

----------------------------------------------------------------
NBD patches for 2024-08-26

- One more patch for CVE-2024-7409 (use-after-free on nbd-server-stop)

----------------------------------------------------------------
Eric Blake (1):
      nbd/server: CVE-2024-7409: Avoid use-after-free when closing server

 blockdev-nbd.c | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

Comments

Richard Henderson Aug. 27, 2024, 9:15 p.m. UTC | #1
On 8/26/24 23:49, Eric Blake wrote:
> The following changes since commit f259e4cb8a8b4ef5463326fc214a7d8d7703d5de:
> 
>    Merge tag 'pull-trivial-patches' of https://gitlab.com/mjt0k/qemu into staging (2024-08-24 08:09:27 +1000)
> 
> are available in the Git repository at:
> 
>    https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2024-08-26
> 
> for you to fetch changes up to 3874f5f73c441c52f1c699c848d463b0eda01e4c:
> 
>    nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (2024-08-26 08:42:42 -0500)
> 
> ----------------------------------------------------------------
> NBD patches for 2024-08-26
> 
> - One more patch for CVE-2024-7409 (use-after-free on nbd-server-stop)
> 
> ----------------------------------------------------------------
> Eric Blake (1):
>        nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
> 
>   blockdev-nbd.c | 12 ++++++++----
>   1 file changed, 8 insertions(+), 4 deletions(-)
> 


Applied, thanks.  Please update https://wiki.qemu.org/ChangeLog/9.1 as appropriate.

r~