Incomplete privilege checks for outgoing remote migration
Betroffene Pakete
qemu-server, pve-container
Details
Outgoing remote migrations were previously allowed with just VM.Migrate on the source side. While a regular, intra-cluster migration does not, a remote migration effectively gives access to the guest's configuration, and potentially allows removing the guest on the source side. Corresponding additional privilege checks were added.
This issue was reported privately by Project Loupe, and additionally by Vítor Fonte <[email protected]>.
Behoben in
- qemu-server >= 9.2.13
- pve-container >= 6.1.15
Diese Seite ist eine inoffizielle Kopie des offiziellen Beitrags im Proxmox-Forum (öffnet in neuem Tab). Prüfe vor jeder Maßnahme das Original. Der Text des Advisories wird so auf Englisch angezeigt, wie Proxmox ihn veröffentlicht hat.