Latest activity
-
bbgeek17 replied to the thread Official status of support for multiple backup solutions.Whether it works and whether it is supported are two different things. Supported means it is being tested. Considering that PBS uses bitmap to track changes between backups of the running VM, and that this is an interface provided by QEMU, it is... -
CCarlos Gomes reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with
Like.
Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just... -
CCarlos Gomes reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929
-
Sshelterx reacted to nodoame's post in the thread High VM-EXIT and Host CPU usage on idle with Windows Server 2025 with Like.
I can confirm EnablePerCpuClockTickScheduling=2 fixes / works around the issue. CPU load returns to 23H2 levels and CPU cores assigned to the VM are able to enter deeper C states as expected. Thank you! I've attached this info to the QEMU ticket...
-
VictorSTS replied to the thread Official status of support for multiple backup solutions.Because we could suppose that there is no support, which seems more or less expected given the way QEMU creates backups, but we we can as well think that there is no problem running different backup solutions given that no vendor or PVE docs... -
Oookouif replied to the thread [BUG] LXC Console: xterm.js black overlay blocks Start button & causes termproxy timeout when stopped.Hi, Sorry for the late reply. I've been busy setting up my network environment, but I appreciate you taking the time to respond! Here is my pct config 100: text arch: amd64 cores: 2 features: nesting=1 hostname: SubConverter-Extended memory...
-
IIsThisThingOn replied to the thread Official status of support for multiple backup solutions.True, but at the same time, why would I want Support from Proxmox for my backup tool? IMHO it does not matter, what PVE supports. If I use VEEM for my proxmox backup, the only thing that matters is IMHO that VEEAM supports backing up a PVE host...
-
Sschmaedeck reacted to pve7bug's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thanks to the Proxmox team for reviewing my report. At least they took it seriously, unlike the users on this forum who think that a Debian 11 installation is hacked simply because it's EOL (and no, the OpenSSH bug doesn't affect Debian 11; it's...
-
ZZnuff reacted to pve7bug's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thanks to the Proxmox team for reviewing my report. At least they took it seriously, unlike the users on this forum who think that a Debian 11 installation is hacked simply because it's EOL (and no, the OpenSSH bug doesn't affect Debian 11; it's...
-
j.theisen replied to the thread KVM NX huge page recovery burns a core per guest on kernel 7.0.x.Thanks for clarifying at all! Will try to verify it now on an "old" Xeon E5-2620 v4 which should still be affected. Best regards Jonas -
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.respectfully disagree, although proxmox updated the package for other reasons they did not know of the vulnerability at the time, it is important to research why to improve code in the future, as well to diagnose if it has actually been fixed in...
-
Vvaschthestampede replied to the thread Unexpected backup failures.In local 10 x WDC_WUH722020BLE6L4 (20TB) in RAID-Z1 (ZFS). In iSCSI 7 x ST16000NM001G-2KK103 (16TB) in RAID5.
-
Ggasherbrum reacted to pve7bug's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Thanks to the Proxmox team for reviewing my report. At least they took it seriously, unlike the users on this forum who think that a Debian 11 installation is hacked simply because it's EOL (and no, the OpenSSH bug doesn't affect Debian 11; it's...
-
Ggasherbrum replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.nice work! and proxmox also posted a security bulletin, great to see all around
-
Ggasherbrum reacted to leesteken's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929
-
Ggasherbrum reacted to asdpiasdjoi's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Found it. It is a complete compromise of the web interface. No pre-requisites, just a vulnerable proxmox version. There was a bug patched in pve-access-control (potentially by accident) in 2023. I will submit it to MITRE so a CVE can be issued...
-
Aasdpiasdjoi replied to the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth.The *immediate* fix, then. Yes, absolutely, you should be on PVE 9 by now. I don't think anyone is contesting that. I understand your frustration around change management. Most businesses should have either certifications or insurance that...
-
bbgeek17 replied to the thread Official status of support for multiple backup solutions.I think it's safe to say there is no official support for 3rd party products. The qualification matrix would be very complex, these are competing products, why would any vendor undertake this endeavor? Blockbridge : Ultra low latency all-NVME...
-
Ccfgmgr reacted to Johannes S's post in the thread Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth with Like.
Then you are still vulnerable due to the known and unknown security issues in PVE8 (which is EOL) and Debian Bookworm. The fix is to upgrade to the latest supported version of PVE aka PVE9 with every updated installed. Everything else is just...
-
PPatryk122PL posted the thread AMD Radeon GPU Passthrough - Infamous reset bug in Proxmox VE: Installation and configuration.Hello, I'm not going to repeat what other users said / recommended - there are plenty of tutorials that more or less can get your AMD gpu working for VM passthrough. My problem lays with very old and still preset in 9000 radeon gpu series issue...