diff --git a/qemu.spec b/qemu.spec index 6006a702b98b57c2d8426938a9926f01727a9ecc..fb319fc2df68c0a7061c48b5cdddbb292165c089 100644 --- a/qemu.spec +++ b/qemu.spec @@ -1,6 +1,6 @@ Name: qemu Version: 4.1.0 -Release: 39 +Release: 40 Epoch: 2 Summary: QEMU is a generic and open source machine emulator and virtualizer License: GPLv2 and BSD and MIT and CC-BY @@ -661,56 +661,50 @@ getent passwd qemu >/dev/null || \ %endif %changelog +* Mon Jan 18 2021 Huawei Technologies Co., Ltd +- reorder the changelog + * Fri Jan 15 2021 Huawei Technologies Co., Ltd - memory: clamp cached translation in case it points to an MMIO region +* Fri Dec 11 2020 Huawei Technologies Co., Ltd +- slirp: check pkt_len before reading protocol header for fixing CVE-2020-29129 and CVE-2020-29130 + * Fri Dec 11 2020 Huawei Technologies Co., Ltd - hostmem: Fix up free host_nodes list right after visited * Wed Dec 9 2020 Huawei Technologies Co., Ltd - target/arm: Fix write redundant values to kvm +* Wed Nov 18 2020 Huawei Technologies Co., Ltd +- ati: check x y display parameter values + +* Fri Nov 13 2020 Huawei Technologies Co., Ltd +- json: Fix a memleak in parse_pair() + * Wed Nov 11 2020 Huawei Technologies Co., Ltd - hw: usb: hcd-ohci: check for processed TD before retire - hw: ehci: check return value of 'usb_packet_map' - hw: usb: hcd-ohci: check len and frame_number variables - hw/net/e1000e: advance desc_offset in case of null descriptor -* Fri Dec 11 2020 Huawei Technologies Co., Ltd -- slirp: check pkt_len before reading protocol header for fixing CVE-2020-29129 and CVE-2020-29130 - -* Fri Nov 13 2020 Huawei Technologies Co., Ltd -- json: Fix a memleak in parse_pair() +* Thu Oct 29 2020 Huawei Technologies Co., Ltd +- Bugfix: hw/acpi: Use max_cpus instead of cpus when build PPTT table * Wed Oct 21 2020 Huawei Technologies Co., Ltd - net: remove an assert call in eth_get_gso_type -* Wed Nov 18 2020 Huawei Technologies Co., Ltd -- ati: check x y display parameter values - -* Thu Oct 29 2020 Huawei Technologies Co., Ltd -- Bugfix: hw/acpi: Use max_cpus instead of cpus when build PPTT table - * Wed Oct 14 2020 Prasad J Pandit - pci: check bus pointer before dereference - hw/ide: check null block before _cancel_dma_sync -* Thu May 21 2020 BALATON Zoltan -- hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() -- hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() -- sm501: Convert printf + abort to qemu_log_mask -- sm501: Shorten long variable names in sm501_2d_operation -- sm501: Use BIT(x) macro to shorten constant -- sm501: Clean up local variables in sm501_2d_operation -- sm501: Replace hand written implementation with pixman where possible - -* Sat Sep 19 2020 Peng Liang -- target/arm: Update the ID registers of Kunpeng-920 - * Mon Sep 21 2020 Peng Liang - target/arm: only set ID_PFR1_EL1.GIC for AArch32 guest - target/arm: clear EL2 and EL3 only when kvm is not enabled +* Sat Sep 19 2020 Peng Liang +- target/arm: Update the ID registers of Kunpeng-920 + * Fri Sep 18 2020 Huawei Technologies Co., Ltd - hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-field.patch - hw-xhci-check-return-value-of-usb_packet_map.patch @@ -871,6 +865,15 @@ getent passwd qemu >/dev/null || \ - bt: use size_t type for length parameters instead of int - log: Add some logs on VM runtime path +* Thu May 21 2020 BALATON Zoltan +- hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() +- hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() +- sm501: Convert printf + abort to qemu_log_mask +- sm501: Shorten long variable names in sm501_2d_operation +- sm501: Use BIT(x) macro to shorten constant +- sm501: Clean up local variables in sm501_2d_operation +- sm501: Replace hand written implementation with pixman where possible + * Fri May 15 2020 Huawei Technologies Co., Ltd. - ide: Fix incorrect handling of some PRDTs in ide_dma_cb() - ati-vga: Fix checks in ati_2d_blt() to avoid crash