Fiona Ebner b242e7f196 backport fix for CVE-2024-4467 ...

This prevents that malicious qcow2 images can already cause bad
effects if being queried via 'qemu-img info'.

For Proxmox VE, this is an additional safe guard, as currently it
directly creates and manages the qcow2 images used by VMs and does not
allow unprivileged users to import them.

Reference: https://access.redhat.com/security/cve/cve-2024-4467

Signed-off-by: Fiona Ebner <f.ebner@proxmox.com>

2024-07-03 13:50:07 +02:00

..

patches

backport fix for CVE-2024-4467

2024-07-03 13:50:07 +02:00

source

d/lintian: ignore missing source warning for linux-user vdso objects

2024-04-29 15:29:52 +02:00

changelog

bump version to 9.0.0-4

2024-07-01 14:02:00 +02:00

control

d/control: add python3-venv as build-dependency

2023-10-24 15:01:23 +02:00

copyright

d/copyright: drop trailing whitespace

2022-04-22 09:16:23 +02:00

docs

import stable-4 build files

2017-04-05 11:39:09 +02:00

kvm-ifdown

import stable-4 build files

2017-04-05 11:39:09 +02:00

kvm-ifup

update to 2.9.0-rc2 build files

2017-04-05 11:40:20 +02:00

Logo.bmp

import stable-4 build files

2017-04-05 11:39:09 +02:00

OVMF_CODE-pure-efi.fd

import stable-4 build files

2017-04-05 11:39:09 +02:00

OVMF_README.txt

import stable-4 build files

2017-04-05 11:39:09 +02:00

OVMF_VARS-pure-efi.fd

import stable-4 build files

2017-04-05 11:39:09 +02:00

parse-cpu-flags.pl

Write recognized CPUID flags into static file

2019-10-17 13:39:21 +02:00

parse-machines.pl

d/parse-machines: produce stable json output

2023-05-22 15:09:14 +02:00

pve-qemu-kvm.install

debian: normalize packaging files with wrap-and-sort -tkn

2023-05-22 12:05:13 +02:00

pve-qemu-kvm.links

debian: normalize packaging files with wrap-and-sort -tkn

2023-05-22 12:05:13 +02:00

pve-qemu-kvm.lintian-overrides

d/lintian-overrides: ignore groff line breakage/adjustment warnings

2023-05-22 15:09:14 +02:00

rules

d/rules: use disable-download option instead of git-submodules=ignore

2023-10-24 15:01:23 +02:00