Re: [PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-21 Thread Daniel P . Berrangé
On Tue, Feb 21, 2023 at 09:15:15AM +0100, Philippe Mathieu-Daudé wrote: > On 20/2/23 18:41, Konstantin Kostiuk wrote: > > resolves: rhbz#2167436 > > "You are not authorized to access bug #2167436." > > > fixes: CVE-2023-0664 > > This commit description is rather scarce... > > I understand you

Re: [PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-21 Thread Konstantin Kostiuk
On Tue, Feb 21, 2023 at 10:15 AM Philippe Mathieu-Daudé wrote: > On 20/2/23 18:41, Konstantin Kostiuk wrote: > > resolves: rhbz#2167436 > > "You are not authorized to access bug #2167436." > > > fixes: CVE-2023-0664 > > This commit description is rather scarce... > > I understand you are trying

Re: [PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-21 Thread Mauro Matteo Cascella
Hi Philippe, On Tue, Feb 21, 2023 at 9:15 AM Philippe Mathieu-Daudé wrote: > > On 20/2/23 18:41, Konstantin Kostiuk wrote: > > resolves: rhbz#2167436 > > "You are not authorized to access bug #2167436." Please refer to https://bugzilla.redhat.com/show_bug.cgi?id=2167423. It should now be

Re: [PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-21 Thread Philippe Mathieu-Daudé
On 20/2/23 18:41, Konstantin Kostiuk wrote: resolves: rhbz#2167436 "You are not authorized to access bug #2167436." fixes: CVE-2023-0664 This commit description is rather scarce... I understand you are trying to fix a CVE, but we shouldn't play the "security by obscurity" card. How can

Re: [PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-20 Thread Yan Vugenfirer
Reviewed-by: Yan Vugenfirer On Mon, Feb 20, 2023 at 7:41 PM Konstantin Kostiuk wrote: > > resolves: rhbz#2167436 > fixes: CVE-2023-0664 > > Signed-off-by: Konstantin Kostiuk > --- > qga/installer/qemu-ga.wxs | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/qga/installer/qemu-ga.wxs

[PATCH 1/2] qga/win32: Remove change action from MSI installer

2023-02-20 Thread Konstantin Kostiuk
resolves: rhbz#2167436 fixes: CVE-2023-0664 Signed-off-by: Konstantin Kostiuk --- qga/installer/qemu-ga.wxs | 1 + 1 file changed, 1 insertion(+) diff --git a/qga/installer/qemu-ga.wxs b/qga/installer/qemu-ga.wxs index 51340f7ecc..feb629ec47 100644 --- a/qga/installer/qemu-ga.wxs +++