Stefan Hajnoczi fb6d1bbd24 block/curl: disable extra protocols to prevent CVE-2013-0249
There is a buffer overflow in libcurl POP3/SMTP/IMAP.  The workaround is
simple: disable extra protocols so that they cannot be exploited.  Full
details here:

  http://curl.haxx.se/docs/adv_20130206.html

QEMU only cares about HTTP, HTTPS, FTP, FTPS, and TFTP.  I have tested
that this fix prevents the exploit on my host with
libcurl-7.27.0-5.fc18.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
2013-02-08 11:14:20 -06:00
2013-01-10 15:11:53 -06:00
2013-01-26 13:15:35 +00:00
2012-12-19 08:29:06 +01:00
2013-01-18 19:06:57 +01:00
2013-02-07 13:13:39 -06:00
2013-02-05 20:51:37 -06:00
2012-10-24 10:26:22 +02:00
2013-02-01 15:53:11 -06:00
2013-01-21 09:17:16 +01:00
2013-01-30 16:03:57 +00:00
2013-02-01 15:53:11 -06:00
2013-02-06 15:52:07 +01:00
2013-02-01 15:53:11 -06:00
2013-02-06 15:52:31 +01:00
2012-09-07 09:02:44 +03:00
2012-11-01 13:10:06 +01:00
…
…
…
2013-02-06 08:29:21 -06:00
…
2012-12-20 23:08:47 +01:00
…
2013-01-30 10:42:29 +01:00
2013-01-26 13:15:35 +00:00
2012-12-20 23:09:25 +01:00
2013-01-17 10:24:52 -02:00
…
…
2013-02-01 11:02:55 -06:00
…
2013-02-06 18:33:47 -06:00
2013-01-15 04:09:14 +01:00

Read the documentation in qemu-doc.html or on http://wiki.qemu.org

- QEMU team
S
Description
Original Xbox Emulator for Windows, macOS, and Linux (Active Development)
Readme GPL-2.0
710 MiB
0 Stars 1 Watchers 0 Forks
Languages
C 82.3%
C++ 6.9%
Python 3.5%
Dylan 2.7%
Shell 1.5%
Other 2.9%