Summary
libvirt
[9.0.0-6.el9]
- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrange) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about 'max_client_requests' in single-threaded daemons (Peter Krempa) [Orabug: 36422853]
libvirt-python
[9.0.0-6.el9]
- Update to libvirt 9.0.0-6 (Karl Heubaum)
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libvirt | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-client | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-client-qemu | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-config-network | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-config-nwfilter | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-interface | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-network | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-nodedev | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-nwfilter | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-qemu | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-secret | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-core | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-disk | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-iscsi | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-logical | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-mpath | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-rbd | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-scsi | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-daemon-kvm | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-devel | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-docs | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-libs | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-lock-sanlock | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-nss | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | libvirt-wireshark | 30:9.0.0-6.el9 |
| Oracle Linux · 9 | python3-libvirt | 30:9.0.0-6.el9 |
Vulnerabilities 1
-
Medium 6.2
Libvirt: stack use-after-free in virnetclientioeventloop()
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOE…