Go to file
Oguz Bektas ee8bd5bfbe add patch for CVE-2019-20382 (vnc disconnect memory leak)
oss-security email can be found here[0]

upstream commit here[1]

this effects our vncproxy. dominik and me tested if the issue is present
on our branch and it appears that it is.
in essence when we disconnect from a vnc connection, the memory isn't
free'd afterwards which causes the qemu process to use more and more
memory with each disconnect, which could lead to a dos scenario.

we tested the patch and it seems to mitigate the problem.

[0]: https://seclists.org/oss-sec/2020/q1/105
[1]: https://git.qemu.org/?p=qemu.git;a=commitdiff;h=6bf21f3d83e95bcc4ba35a7a07cc6655e8b010b0

Tested-by: Dominik Csapak <d.csapak@proxmox.com>
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
2020-03-05 13:34:29 +01:00
debian add patch for CVE-2019-20382 (vnc disconnect memory leak) 2020-03-05 13:34:29 +01:00
keycodemapdb bump version to 3.0.0-1 2018-09-07 14:52:23 +02:00
qemu@99c5874a9b Update and rebase to QEMU 4.1.1 2019-11-21 07:59:09 +01:00
.gitmodules import stable-4 build files 2017-04-05 11:39:09 +02:00
backup.txt correct link to vma spec to new repository url 2020-01-14 11:18:52 +01:00
Makefile fix qemu PKGVERSION 2019-07-02 13:32:06 +02:00
vma_spec.txt import stable-4 build files 2017-04-05 11:39:09 +02:00