[pve-devel] CVE in qemu

Alexandre DERUMIER aderumier at odiso.com
Fri May 2 04:04:19 CEST 2014


Hi Stefan, great work :)

can you already send your patches ?

----- Mail original ----- 

De: "Stefan Priebe" <s.priebe at profihost.ag> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: "pve-devel" <pve-devel at pve.proxmox.com>, "Dietmar Maurer" <dietmar at proxmox.com> 
Envoyé: Jeudi 1 Mai 2014 22:01:58 
Objet: Re: [pve-devel] CVE in qemu 

i got everything working except the keymap stuff. They dropped all 
legacy keyboard code like keymap_put and so on. 

I know not enough to port this one. 

Stefan 

Am 22.04.2014 07:52, schrieb Alexandre DERUMIER: 
>>> Thanks, any plans to Switch to qemu 2.0? 
> 
> I have had a look at this, some patches don't apply currently 
> 
> keymap.diff 
> 
> in vnc.c 
> seem that they are a lot of change since this commit: 
> http://git.qemu.org/?p=qemu.git;a=commitdiff;h=8d447d10b74e5116ed85ce2b890301b77774ec49 
> 
> 
> internal-snapshot-async.patch 
> 
> (I'm not sure, but we have now a qmp "blockdev-snapshot-internal-sync" for internal snapshot, 
> don't known for vmstate snasphot in external file) 
> 
> 
> and also backup patches 
> 
> 
> ----- Mail original ----- 
> 
> De: "Stefan Priebe - Profihost AG" <s.priebe at profihost.ag> 
> À: "Dietmar Maurer" <dietmar at proxmox.com> 
> Cc: "pve-devel" <pve-devel at pve.proxmox.com> 
> Envoyé: Mardi 22 Avril 2014 07:29:20 
> Objet: Re: [pve-devel] CVE in qemu 
> 
> 
> Thanks, any plans to Switch to qemu 2.0? 
> 
> Greets, 
> Stefan 
> 
> 
> Excuse my typo s ent from my mobile phone. 
> 
> Am 22.04.2014 um 07:12 schrieb Dietmar Maurer < dietmar at proxmox.com >: 
> 
> 
> 
> 
> 
> 
> uploaded a fixed version to pvetest: 
> 
> ftp://download.proxmox.com/debian/dists/wheezy/pvetest/binary-amd64/pve-qemu-kvm_1.7-8_amd64.deb 
> 
> 
> 
> 
> 
> From: pve-devel [ mailto:pve-devel-bounces at pve.proxmox.com ] On Behalf Of Stefan Priebe - Profihost AG 
> Sent: Sonntag, 20. April 2014 18:49 
> To: pve-devel 
> Subject: [pve-devel] CVE in qemu 
> 
> 
> cve.circl.lu/cve/CVE-2014-0… 
> 
> Greets, 
> Stefan 
> 
> 
> _______________________________________________ 
> pve-devel mailing list 
> pve-devel at pve.proxmox.com 
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel 
> 



More information about the pve-devel mailing list