[Pkg-libvirt-commits] [SCM] Libvirt Debian packaging branch, master, updated. debian/0.8.3-2

[Guido Günther]

The following commit has been merged in the master branch:
commit d554da3b3330d679fd7b9b71dbcf4d89ad0ba717
Author: Guido Günther <agx at sigxcpu.org>
Date:   Wed Sep 29 13:29:20 2010 +0200

    Explain disk image probing changes
    
    Closes: #594962

diff --git a/debian/libvirt-bin.NEWS b/debian/libvirt-bin.NEWS
index f265942..ad01126 100644
--- a/debian/libvirt-bin.NEWS
+++ b/debian/libvirt-bin.NEWS
@@ -7,3 +7,19 @@ libvirt (0.8.1-2) unstable; urgency=low
   anything.
 
  -- Guido Günther <agx at sigxcpu.org>  Mon, 12 Jul 2010 19:58:35 +0200
+
+libvirt (0.8.3-2) unstable; urgency=low
+
+  Disk format probing is disabled now by default for security reasons
+  (CVE-2010-2237). You need to explicitly add a driver type element to your
+  disk devices in the domain XML:
+
+      <disk ...>
+         <driver name='qemu' type='qcow2'/>
+         ...
+      </disk>
+
+  Alternatively you can reenable probing by setting allow_disk_format_probing=1
+  in /etc/libvirt/qemu.conf but this is insecure.
+
+ -- Guido Günther <agx at sigxcpu.org>  Wed, 29 Sep 2010 13:10:02 +0200

-- 
Libvirt Debian packaging