On 3/5/20 1:29 PM, Oguz Bektas wrote: > oss-security email can be found here[0] > > upstream commit here[1] > > this effects our vncproxy. dominik and me tested if the issue is present > on our branch and it appears that it is. > in essence when we disconnect from a vnc connection, the memory isn't > free'd afterwards which causes the qemu process to use more and more > memory with each disconnect, which could lead to a dos scenario. > > we tested the patch and it seems to mitigate the problem. > > [0]: https://seclists.org/oss-sec/2020/q1/105 > [1]: > https://git.qemu.org/?p=qemu.git;a=commitdiff;h=6bf21f3d83e95bcc4ba35a7a07cc6655e8b010b0 > > Tested-by: Dominik Csapak <d.csa...@proxmox.com> > Signed-off-by: Oguz Bektas <o.bek...@proxmox.com> > --- > ...-fix-memory-leak-when-vnc-disconnect.patch | 1016 +++++++++++++++++ > debian/patches/series | 1 + > 2 files changed, 1017 insertions(+) > create mode 100644 > debian/patches/extra/0003-vnc-fix-memory-leak-when-vnc-disconnect.patch >
applied, thanks! _______________________________________________ pve-devel mailing list pve-devel@pve.proxmox.com https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
