Part 1 is already reviewed: https://www.mail-archive.com/qemu-devel@nongnu.org/msg718150.html
However the CVE fix break Linux guests: https://www.mail-archive.com/qemu-devel@nongnu.org/msg720737.html This series fixes that, by checking the SD card image size is correct. Based-on: <20200630133912.9428-1-f4...@amsat.org> Philippe Mathieu-Daudé (2): tests/acceptance/boot_linux: Truncate SD card image to power of 2 hw/sd/sdcard: Do not allow invalid SD card sizes hw/sd/sd.c | 16 ++++++++++++++++ tests/acceptance/boot_linux_console.py | 15 +++++++++++++++ 2 files changed, 31 insertions(+) -- 2.21.3