Re: [Qemu-devel] [PULL 0/3] Net patches

[Peter Maydell]

On 15 September 2015 at 13:02, Stefan Hajnoczi <address@hidden> wrote:
> The following changes since commit 2752e5bedb26fa0c7291f810f9f534b688b2f1d2:
>
>   qapi: Fix cgen() for Python older than 2.7 (2015-09-14 18:02:59 +0100)
>
> are available in the git repository at:
>
>   git://github.com/stefanha/qemu.git tags/net-pull-request
>
> for you to fetch changes up to 737d2b3c41d59eb8f94ab7eb419b957938f24943:
>
>   net: avoid infinite loop when receiving packets(CVE-2015-5278) (2015-09-15 
> 12:51:14 +0100)
>
> ----------------------------------------------------------------
> This net pull request contains security fixes for qemu.git/master.  The 
> patches
> should also be applied to stable trees.
>
> The ne2000 NIC model has QEMU memory corruption issue.  Both ne2000 and e1000
> have an infinite loop.
>
> Please see the patches for CVE numbers and details on the bugs.
>
> ----------------------------------------------------------------

Applied to master, thanks.

-- PMM