Source: qemu
Version: 1:5.0-4
Severity: important
Tags: security upstream
Hi,
The following vulnerability was published for qemu. Unless mistaken
this issue is introduced with upstream 01a6dc95ec7f ("virtiofsd: set
maximum RLIMIT_NOFILE limit") in 5.0.0-rc0.
CVE-2020-10717[0]:
| virtiofsd: stay below fs.file-max sysctl value
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2020-10717
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10717
[1] https://www.openwall.com/lists/oss-security/2020/05/04/1
Regards,
Salvatore
