From: Peter Maydell <peter.maydell@linaro.org>
Date: Fri, 8 Apr 2022 09:43:30 +0000 (+0100)
Subject: Merge tag 'fixes-20220408-pull-request' of git://git.kraxel.org/qemu into staging
X-Git-Tag: v7.0.0-rc4~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=dde8689d1fe82e295a278ba4bf1abd9be5c7bcab;p=thirdparty%2Fqemu.git

Merge tag 'fixes-20220408-pull-request' of git://git.kraxel.org/qemu into staging

two cursor/qxl related security fixes.

# gpg: Signature made Fri 08 Apr 2022 05:37:16 BST
# gpg:                using RSA key A0328CFFB93A17A79901FE7D4CB6D8EED3E87138
# gpg: Good signature from "Gerd Hoffmann (work) <kraxel@redhat.com>" [full]
# gpg:                 aka "Gerd Hoffmann <gerd@kraxel.org>" [full]
# gpg:                 aka "Gerd Hoffmann (private) <kraxel@gmail.com>" [full]
# Primary key fingerprint: A032 8CFF B93A 17A7 9901  FE7D 4CB6 D8EE D3E8 7138

* tag 'fixes-20220408-pull-request' of git://git.kraxel.org/qemu:
  ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
  display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
---

dde8689d1fe82e295a278ba4bf1abd9be5c7bcab