Change History (7)
comment:1 by , 21 months ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
comment:3 by , 21 months ago
qemu-8.0.3 landed on https://download.qemu.org. No release notes for point version, but looking at the commit list, it looks like there is a CVE-2023-2861 fixed: https://gitlab.com/qemu-project/qemu/-/commit/b9d2887be4e616cdaeedd0b7456bfaa71ee798af
comment:4 by , 21 months ago
The CVE only affects 9pfs: https://bugzilla.redhat.com/show_bug.cgi?id=2219266
And I don't think 9pfs is enabled in BLFS configuration.
comment:5 by , 21 months ago
We have "VirtFS support : NO" in the output of meson. And in our build the 9pfs and fsdev directories are empty. So the CVE should not affect BLFS unless an external dependency is used,
comment:6 by , 21 months ago
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Ok, no SA then... Fixed at 27ed278e0c
Note:
See TracTickets
for help on using tickets.
Taking mutter and gnome-shell to see whether it improves webrender in firefox on wayland.