[OE-core] [master][krogoth][PATCH 1/2] qemu: Security fix CVE-2016-2857

[Joshua G Lock]

On Mon, 2016-05-09 at 14:27 -0700, akuster808 wrote:
> On 5/6/16 8:51 AM, Alexander Kanavin wrote:
> > 
> > On 05/06/2016 06:47 PM, akuster808 wrote:
> > 
> > > 
> > > I can not reproduce this issue. I have used two different build
> > > systems.
> > > I have another I will try.
> > > 
> > > so the testcase be?
> > > 
> > > 1) bitbake core-image-sato
> > > 2) runqemu qemux86
> > 3) verify that you have a bunch of .gir and .typelib files on that
> > image (or in target sysroot)
> yeah. they are there. wonder how to reproduce this issue?? host os
> release??

I discovered this issue on an Ubuntu 14.04.4 host (gcc 4.8.4) where
neither qemu-native nor gobject-introspection were available in the
sstate-cache. I can revert the qemu upgrade and attempt to reproduce
again if it would help?

Joshua

> 
> - armin
> > 
> > 
> > 
> > Alex
> >