Skip to content
OpenAdvisories
Medium ELSA-2023-6409 1 CVE

Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 9)

Published Nov 12, 2023 · Updated Nov 12, 2023

Summary

[9.5.0-7.0.1]
- The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744)
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[9.5.0-7]
- util: use 'stubDriverType' instead of just 'stubDriver' (rhbz#2074209)
- util: add stub driver name to virPCIDevice object (rhbz#2074209)
- util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209)
- util: permit existing binding to VFIO variant driver (rhbz#2074209)
- util: probe stub driver from within function that binds to stub driver (rhbz#2074209)
- util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209)
- node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209)
- qemu: turn two multiline log messages into single line (rhbz#2074209)
- docs: update description of virsh nodedev-detach --driver option (rhbz#2074209)
- rpm: Fix typo in daemon name (rhbz#2236057)
- rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500)

[9.5.0-6]
- tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
- tests: Switch to firmware autoselection for hvf (rhbz#2196178)
- tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
- tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
- tests: Turn abi-update.xml into a symlink (rhbz#2196178)
- tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
- qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
- qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
- tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
- tests: Add more tests for firmware selection (rhbz#2196178)
- tests: Update firmware descriptor files (rhbz#2196178)
- tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
- tests: Include microvm in firmwaretest (rhbz#2196178)
- qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
- qemu: Generate NVRAM path in more cases (rhbz#2196178)
- qemu: Filter firmware based on loader.readonly (rhbz#2196178)
- qemu: Match NVRAM template extension for new domains (rhbz#2196178)
- conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
- tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
- tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
- rpm: Reorder scriptlets (rhbz#2210058)
- rpm: Reduce use of with_modular_daemons (rhbz#2210058)
- rpm: Remove custom libvirtd restart logic (rhbz#2210058)
- rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
- rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
- rpm: Delete unused macros (rhbz#2210058)

[9.5.0-5]
- Revert 'qemu_passt: Actually use @logfd' (rhbz#2209191)
- Revert 'qemu_passt: Precreate passt logfile' (rhbz#2209191)

[9.5.0-4]
- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)

[9.5.0-3]
- tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
- tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
- qemu: add run-with async-teardown capability (rhbz#2168499)
- qemu: allow use of async teardown in domain (rhbz#2168499)
- conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
- qemu: S390 does not provide physical address size (rhbz#2224016)
- nodedev: report mdev persistence properly (rhbz#2143158)
- node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)

[9.5.0-2]
- nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
- nodedev: refactor mdevctl thread functions (rhbz#2143158)
- nodedev: update mdevs from the mdevctl thread (rhbz#2143158)

[9.5.0-1]
- Rebased to libvirt-9.5.0 (rhbz#2175785)

[9.5.0-0rc1.1]
- Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
- The rebase also fixes the following bugs:
rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860
rhbz#2138150, rhbz#2171384

[9.4.0-1]
- Rebased to libvirt-9.4.0 (rhbz#2175785)
- The rebase also fixes the following bugs:
rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946
rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709

[9.3.0-2]
- qemu_domin: Account for NVMe disks when calculating memlock limit on hotplug (rhbz#2014030)

[9.3.0-1]
- Rebased to libvirt-9.3.0 (rhbz#2175785)
- The rebase also fixes the following bugs:
rhbz#2181235, rhbz#2176215, rhbz#2187133, rhbz#2178885, rhbz#2174700
rhbz#2160435, rhbz#2184966, rhbz#2187278, rhbz#2014030, rhbz#2185184
rhbz#2156300

[9.2.0-1]
- Rebased to libvirt-9.2.0 (rhbz#2175785)
- The rebase also fixes the following bugs:
rhbz#2178885, rhbz#2000410, rhbz#2175582, rhbz#2154750, rhbz#2175449
rhbz#2181234, rhbz#2078693, rhbz#2176924, rhbz#2156300, rhbz#2173142
rhbz#2171973, rhbz#2178866, rhbz#2182961, rhbz#2174397, rhbz#2179030
rhbz#2161965, rhbz#2035985

[9.1.0-1]
- Rebased to libvirt-9.1.0 (rhbz#2175785)
- The rebase also fixes the following bugs:
rhbz#2004850, rhbz#2137346, rhbz#2166235, rhbz#1961326

[9.0.0-7]
- qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
- qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)

[9.0.0-6]
- rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
- rpc: Don't warn about 'max_client_requests' in single-threaded daemons (rhbz#2145188)

[9.0.0-5]
- qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
- qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)

[9.0.0-4]
- qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
- qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
- qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
- qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
- qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
- qemuProcessRefreshDisks: Don't s

Fixed packages 31

ReleasePackageFixed in
Oracle Linux · 9 libvirt 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-client 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-client-qemu 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-common 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-config-network 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-config-nwfilter 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-interface 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-network 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-nodedev 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-nwfilter 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-qemu 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-secret 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-core 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-disk 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-iscsi 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-logical 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-mpath 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-rbd 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-driver-storage-scsi 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-kvm 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-lock 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-log 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-plugin-lockd 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-plugin-sanlock 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-daemon-proxy 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-devel 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-docs 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-libs 0:9.5.0-7.0.1.el9_3
Oracle Linux · 9 libvirt-nss 0:9.5.0-7.0.1.el9_3

Vulnerabilities 1