]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ff4c47a) | patch
qemu: Let empty default VNC password work as documented
authorJiri Denemark <jdenemar@redhat.com>
Tue, 28 Jun 2016 12:39:58 +0000 (14:39 +0200)
committerDaniel P. Berrange <berrange@redhat.com>
Thu, 30 Jun 2016 11:11:07 +0000 (12:11 +0100)
commitcaa4c280cd34f0ff0fb9a3879ccc0ceaffc3b802
tree512fb982600f2d40df5ba40b7b4bb2012e34cda0tree
parentff4c47a9f4f49eebebf9f2c0be8f704f10100008commit | diff
qemu: Let empty default VNC password work as documented

CVE-2016-5008

Setting an empty graphics password is documented as a way to disable
VNC/SPICE access, but QEMU does not always behaves like that. VNC would
happily accept the empty password. Let's enforce the behavior by setting
password expiration to "now".

https://bugzilla.redhat.com/show_bug.cgi?id=1180092

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
(cherry picked from commit bb848feec0f3f10e92dd8e5231ae7aa89b5598f3)
src/qemu/qemu_hotplug.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git