134956ceaf
Update changelog with bug and CVE number * lib/uri.c: Fix indices in SSH command array. Fixes bsc#1253059, bsc#1255432 - CVE-2025-14946
Charles Arnold2025-12-22 22:13:21 +00:00
05cb5fe9b9
Update spec file with installed but unpackaged files.
Charles Arnold2025-12-16 17:11:00 +00:00
e0284e2bb3
- Update to version 1.24.0: * Version 1.24.0. * docs: Finalize release notes for libnbd 1.24 * ci/lcitool/projects/libnbd.yml: Add 'tar' as an explicit dependency * misc: Require libxml2 / URI support for these tests * tests: Add an explicit 'requires_uri' for URI support * ci: Update various OS versions * generator: Rework description of nbd_set_tls_priority * Version 1.23.13. * tests: Add a test of tls-priority * lib: In nbd_get_uri return tls-priority if non-default * lib: Add tls-priority to URIs, but disable it by default * generator/API.ml: Arrange tls-* URI parameters in order * lib: Use the TLS priority from the handle * lib: Add nbd_get_tls_priority and nbd_set_tls_priority * rust: Allow piped links in POD documentation * lib/crypto.c: Support extra client keys for hybrid PQC * configure: Print TLS priority in summary output * vector: Fine-tune vector_reserve behavior * misc: Fix tab-completion of -h/--help options * Version 1.23.12. * docs: Add outline release notes for libnbd 1.24 * misc: Rename -f/--fast as --fast-zero * misc/nbddiscard.pod: Document --check & --fast in alphabetical order * misc/nbddiscard.pod: Document short and long options in synopsis * sh: Add an example of writing to the disk using nbdsh * sh: Link to nbdkit(1) * sh: Link to nbddump from the hexdump example * misc: Add nbdzero --fast * misc: Add nbddiscard --check
Charles Arnold2025-12-16 16:31:18 +00:00
6fa7c6c570
- bsc#1253059 - libnbd: Unsanitized hostnames in nbd+ssh URIs allow remote execution uri-Sanitize-user-provided-hostnames.patch
slfo-1.2
Charles Arnold2025-11-20 11:36:02 -07:00
d7d642ce6a
Accepting request 1315531 from Virtualization
Ana Guerrero2025-11-05 15:18:44 +00:00
da13c84d07
- Update to version 1.22.5: * Version 1.22.5. * lib/uri.c: Fix indices in SSH command array * uri: Sanitize user-provided hostnames * examples/connect-benchmark.c: Include <stdatomic.h> or fall back * docs: Minor copyediting to export name documentation
Charles Arnold2025-10-28 16:13:03 +00:00
27eba402f6
Accepting request 1304457 from Virtualization
Ana Guerrero2025-09-14 16:50:04 +00:00
758494ba09
- Update to version 1.22.4: * Version 1.22.4. * docs: nbd_connect_uri: Combine export name sections together * docs: nbd_connect_uri: Minor copyedits * docs: nbd_connect_uri: Split up URI parsing section * lib/uri.c: Use uri_query_list functions to free * lib/uri.c: Add static annotation to parse_bool * docs: Clarify documentation for export names in nbd_connect_uri * docs: Add S<...> around qemu versions to avoid distracting linebreak * generator: rust: Parse S<...> (non-breaking spaces) in POD * generator: rust: Allow nested X<..X<..>..> expressions in POD * generator: Don't list nbd_is_uri as a "flag call" * generator: Clarify documentation for nbd_set_private_data * ocaml: Small tweaks to the generated documentation * ci: Remove fedora-40, alpine-320, add fedora-42, alpine-322 * common: utils: Add const to <vector>_duplicate variable decls * copy, info: Use new vector_array_append functions in a couple of places * common: utils: vector: Fix vector_uniq prototype and add a test * common: utils: vector: Add range functions for insert, append and remove * common: utils: vector: Prefer vector_reset over free() * common: utils: vector: Add new vector_uniq function * common/utils: Add convenient string_append_format function
Charles Arnold2025-09-05 21:00:12 +00:00
95a57114cd
- Update to version 1.22.3: * Version 1.22.3. * ublk: Remove unused EXPECTED_VERSION * todo: Remove a couple of minor features that have been implemented * info: Tolerate nbdkit slop on large extents * generator: Avoid const-correctness warnings in golang * maint: Spelling fixes * ci: Disable cross-builds of Rust * rust: Allow cargo build --target $RUST_TARGET to be set
Charles Arnold2025-07-31 16:59:59 +00:00
ca182658fe
- Update to version 1.12.2: * Version 1.12.2. * Fix for CVE-2022-0485 Silent data corruption when using nbdcopy(1). * New APIs get_pread_initialize set_pread_initialize Control whether libnbd clears the pread buffer to avoid leaking memory contents if the client does not properly handle errors. These were added as part of the fix for CVE-2022-0485 (Eric Blake). get_request_block_size set_request_block_size Control whether libnbd requests block size constraints from the server during negotiation (Eric Blake). * Error messages about incorrect URIs in nbd_connect_uri(3) have been improved to make common mistakes clearer for the user. * New syntax: nbdinfo [ CMD ... ] allowing you to query the properties of an NBD server directly. * nbdcopy(1) new --queue-size option to control the maximum size of the internal buffer (Nir Soffer). * nbdcopy(1) now names the source and destination handles to make it easier to understand debug output. * New OCaml NBD.with_handle helper which ensures that NBD.close is always called even if the inner code throws an exception. * The OCaml bindings now consistently use the correct types for buffer sizes everywhere (Laszlo Ersek). * Several improvements and fixes to the golang bindings and tests. The golang bindings have been relicensed to LGPLv2+ like the rest of the library and are now published as a golang
Charles Arnold2022-05-16 17:01:42 +00:00
33411e32cd
- Enable building the ocaml bindings for libnbd. virt-v2v has added a dependency on ocaml bindings from libnbd beginning with virt-v2v version 2.0.0. libnbd.spec
Charles Arnold2022-05-13 15:22:33 +00:00