Summary
libvirt
[9.0.0-5.el9]
- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}
libvirt-python
[9.0.0-5.el9]
- Update to libvirt 9.0.0-5 (Karl Heubaum)
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libvirt | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-client | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-client-qemu | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-config-network | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-config-nwfilter | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-interface | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-network | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-nodedev | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-nwfilter | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-qemu | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-secret | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-core | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-disk | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-iscsi | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-logical | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-mpath | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-rbd | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-scsi | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-daemon-kvm | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-devel | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-docs | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-libs | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-lock-sanlock | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-nss | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | libvirt-wireshark | 30:9.0.0-5.el9 |
| Oracle Linux · 9 | python3-libvirt | 30:9.0.0-5.el9 |
Vulnerabilities 1
-
Medium 5.5CVE-2024-1441 Public exploit
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…