qemu: apply patch for CVE-2020-27617

An assert(3) failure issue was found in the networking helper functions of QEMU. It could occur in the eth_get_gso_type() routine, if a packet does not have a valid networking L3 protocol (ex. IPv4, IPv6) value. A guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. Fixes: CVE-2020-27617
2020-11-02 14:01:01 +01:00
parent 92781c27bd
commit 0c54b757e9
2 changed files with 44 additions and 0 deletions
@@ -82,6 +82,7 @@ stdenv.mkDerivation rec {
    ./no-etc-install.patch
    ./fix-qemu-ga.patch
    ./9p-ignore-noatime.patch
+    ./CVE-2020-27617.patch
  ] ++ optional nixosTestRunner ./force-uid0-on-9p.patch
    ++ optionals stdenv.hostPlatform.isMusl [
    (fetchpatch {