Summary
[3.9.0-14.el7_5.4]
- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)
[3.9.0-14.el7_5.3]
- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)
Fixed packages 30
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libvirt | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-admin | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-client | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-config-network | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-config-nwfilter | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-interface | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-lxc | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-network | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-nodedev | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-nwfilter | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-qemu | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-secret | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-core | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-disk | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-gluster | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-iscsi | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-logical | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-mpath | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-rbd | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-scsi | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-kvm | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-daemon-lxc | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-devel | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-docs | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-libs | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-lock-sanlock | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-login-shell | 0:3.9.0-14.el7_5.4 |
| Oracle Linux · 7 | libvirt-nss | 0:3.9.0-14.el7_5.4 |
Vulnerabilities 2
-
Unscored —
libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5…
-
Unscored —
qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU repl…