Re: [PULL 0/6] Firmware 20260508 patches

2026-05-11 Thread Stefan Hajnoczi 
Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/11.1 for any 
user-visible changes.


signature.asc
Description: PGP signature

[PULL 0/6] Firmware 20260508 patches

2026-05-08 Thread Gerd Hoffmann 
The following changes since commit ee7eb612be8f8886d48c1d0c1f1c65e495138f83:

  Merge tag 'single-binary-20260506' of https://github.com/philmd/qemu into 
staging (2026-05-06 10:45:02 -0400)

are available in the Git repository at:

  https://gitlab.com/kraxel/qemu.git tags/firmware-20260508-pull-request

for you to fetch changes up to b4680c02b8e838c75691656ee2c4450b454d1ca7:

  hw/uefi: avoid possibly unaligned variable_auth_2 struct field access 
(2026-05-08 09:12:11 +0200)


hw/uefi: collection of CVE fixes.



Gerd Hoffmann (6):
  hw/uefi: fix buffer overruns
  hw/uefi: verify pio_xfer_offset before calculating buffer checksum
  hw/uefi: fix ucs2 string helper functions
  hw/uefi: add name_size check to uefi_vars_mm_lock_variable()
  hw/uefi: verify data size before accessing it in wrap_pkcs7
  hw/uefi: avoid possibly unaligned variable_auth_2 struct field access

 hw/uefi/var-service-auth.c  | 21 +++
 hw/uefi/var-service-core.c  |  4 
 hw/uefi/var-service-pkcs7.c | 21 ---
 hw/uefi/var-service-utils.c | 42 +
 hw/uefi/var-service-vars.c  | 22 +++
 5 files changed, 71 insertions(+), 39 deletions(-)

-- 
2.54.0