GNU bug report logs -
#39225
[PATCH 0/2] QEMU updates
Previous Next
To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 39225 in the body.
You can then email your comments to 39225 AT debbugs.gnu.org in the normal way.
Toggle the display of automated, internal messages from the tracker.
Report forwarded
to
guix-patches <at> gnu.org
:
bug#39225
; Package
guix-patches
.
(Tue, 21 Jan 2020 18:57:02 GMT)
Full text and
rfc822 format available.
Acknowledgement sent
to
Leo Famulari <leo <at> famulari.name>
:
New bug report received and forwarded. Copy sent to
guix-patches <at> gnu.org
.
(Tue, 21 Jan 2020 18:57:02 GMT)
Full text and
rfc822 format available.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
The security updates work with our current QEMU package of 4.1.1 as well
as 4.2.0.
I tested both 4.2.0 and the patched 4.1.1 by creating a vm-image and
running it with the "full" QEMU package, and the SLIRP networking works
fine in both cases.
Leo Famulari (2):
gnu: QEMU: Fix CVE-2020-{7039,7211}.
gnu: QEMU: Update to 4.2.0.
gnu/local.mk | 3 +
gnu/packages/patches/qemu-CVE-2020-7039.patch | 173 ++++++++++++++++++
gnu/packages/patches/qemu-CVE-2020-7211.patch | 49 +++++
...qemu-fix-documentation-build-failure.patch | 43 +++++
gnu/packages/virtualization.scm | 7 +-
5 files changed, 273 insertions(+), 2 deletions(-)
create mode 100644 gnu/packages/patches/qemu-CVE-2020-7039.patch
create mode 100644 gnu/packages/patches/qemu-CVE-2020-7211.patch
create mode 100644 gnu/packages/patches/qemu-fix-documentation-build-failure.patch
--
2.25.0
Merged 39225 39226.
Request was from
Leo Famulari <leo <at> famulari.name>
to
control <at> debbugs.gnu.org
.
(Tue, 21 Jan 2020 19:00:02 GMT)
Full text and
rfc822 format available.
Information forwarded
to
guix-patches <at> gnu.org
:
bug#39225
; Package
guix-patches
.
(Tue, 21 Jan 2020 20:15:02 GMT)
Full text and
rfc822 format available.
Message #12 received at 39225 <at> debbugs.gnu.org (full text, mbox):
[Message part 1 (text/plain, inline)]
Leo,
Leo Famulari 写道:
> The security updates work with our current QEMU package of 4.1.1
> as well
> as 4.2.0.
>
> I tested both 4.2.0 and the patched 4.1.1 by creating a vm-image
> and
> running it with the "full" QEMU package, and the SLIRP
> networking works
> fine in both cases.
Have you run the Guix System test suite with this new Qemu?
Both patches LGTM. Thanks!
T G-R
[signature.asc (application/pgp-signature, inline)]
Information forwarded
to
guix-patches <at> gnu.org
:
bug#39225
; Package
guix-patches
.
(Tue, 21 Jan 2020 21:53:02 GMT)
Full text and
rfc822 format available.
Message #15 received at 39225 <at> debbugs.gnu.org (full text, mbox):
[Message part 1 (text/plain, inline)]
On Tue, Jan 21, 2020 at 09:14:40PM +0100, Tobias Geerinckx-Rice wrote:
> Have you run the Guix System test suite with this new Qemu?
The basic and openssh tests did pass. I don't have the computing
resources or time to continue testing it. Can we use Cuirass on
<ci.guix.gnu.org> to test it more fully?
[signature.asc (application/pgp-signature, inline)]
Reply sent
to
Leo Famulari <leo <at> famulari.name>
:
You have taken responsibility.
(Sat, 25 Jan 2020 02:15:02 GMT)
Full text and
rfc822 format available.
Notification sent
to
Leo Famulari <leo <at> famulari.name>
:
bug acknowledged by developer.
(Sat, 25 Jan 2020 02:15:02 GMT)
Full text and
rfc822 format available.
Message #20 received at 39225-done <at> debbugs.gnu.org (full text, mbox):
[Message part 1 (text/plain, inline)]
On Tue, Jan 21, 2020 at 01:55:50PM -0500, Leo Famulari wrote:
> The security updates work with our current QEMU package of 4.1.1 as well
> as 4.2.0.
>
> I tested both 4.2.0 and the patched 4.1.1 by creating a vm-image and
> running it with the "full" QEMU package, and the SLIRP networking works
> fine in both cases.
Pushed as 3778b3d9d013a443eec7990c31f47f887f72fe59, along with a 3rd
patch that brings back the QEMU man pages. QEMU 4.0 began requiring the
use of Sphinx to build them:
https://wiki.qemu.org/ChangeLog/4.0#Build_Dependencies
[signature.asc (application/pgp-signature, inline)]
Reply sent
to
Leo Famulari <leo <at> famulari.name>
:
You have taken responsibility.
(Sat, 25 Jan 2020 02:15:02 GMT)
Full text and
rfc822 format available.
Notification sent
to
Leo Famulari <leo <at> famulari.name>
:
bug acknowledged by developer.
(Sat, 25 Jan 2020 02:15:02 GMT)
Full text and
rfc822 format available.
Reply sent
to
Leo Famulari <leo <at> famulari.name>
:
You have taken responsibility.
(Sat, 25 Jan 2020 02:15:02 GMT)
Full text and
rfc822 format available.
Notification sent
to
Leo Famulari <leo <at> famulari.name>
:
bug acknowledged by developer.
(Sat, 25 Jan 2020 02:15:03 GMT)
Full text and
rfc822 format available.
bug archived.
Request was from
Debbugs Internal Request <help-debbugs <at> gnu.org>
to
internal_control <at> debbugs.gnu.org
.
(Sat, 22 Feb 2020 12:24:04 GMT)
Full text and
rfc822 format available.
This bug report was last modified 4 years and 58 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.