Summary
The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.
The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)
Security Fix(es):
* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | libvirt | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-client | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-client-qemu | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-common | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-network | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-config-nwfilter | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-interface | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-network | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nodedev | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-nwfilter | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-qemu | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-secret | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-core | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-disk | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-iscsi | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-logical | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-mpath | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-rbd | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-driver-storage-scsi | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-kvm | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-lock | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-log | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-lockd | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-plugin-sanlock | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-daemon-proxy | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-devel | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-docs | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-libs | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux · 9 | libvirt-nss | 9.5.0-7.el9_3.alma.1 |
Vulnerabilities 1
-
Medium 6.5
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients co…