Skip to content
OpenAdvisories
Medium ELSA-2024-2236 1 CVE

Moderate: libvirt security update (Oracle Linux 9)

Published May 3, 2024 · Updated May 3, 2024

Summary

[10.0.0-6.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[10.0.0-6]
- qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386)
- qemu: virtiofs: set correct label when creating the socket (RHEL-7386)
- qemu: virtiofs: error out if getting the group or user name fails (RHEL-7386)

[10.0.0-5]
- cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
- qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
- conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
- qemu: domain: Drop added features from migratable CPU (RHEL-25995)
- Add vmx-* features to Broadwell* (RHEL-25995)
- Add vmx-* features to Cascadelake* (RHEL-25995)
- Add vmx-* features to Conroe (RHEL-25995)
- Add vmx-* features to Cooperlake (RHEL-25995)
- Add vmx-* features to core{,2}duo (RHEL-25995)
- Add vmx-* features to Haswell* (RHEL-25995)
- Add vmx-* features to Icelake* (RHEL-25995)
- Add vmx-* features to IvyBridge* (RHEL-25995)
- Add vmx-* features to kvm* (RHEL-25995)
- Add vmx-* features to Nehalem* (RHEL-25995)
- Add vmx-* features to Penryn (RHEL-25995)
- Add vmx-* features to SandyBridge* (RHEL-25995)
- Add vmx-* features to SapphireRapids (RHEL-25995)
- Add vmx-* features to Skylake* (RHEL-25995)
- Add vmx-* features to Snowridge (RHEL-25995)
- Add vmx-* features to Westmere* (RHEL-25995)

[10.0.0-4]
- Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
- qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
- qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
- domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)

[10.0.0-3]
- remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
- conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
- qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
- qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
- qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
- qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
- remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
- util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
- qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
- qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
- virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
- util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
- virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
- virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
- schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
- tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
- Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
- tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
- util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
- tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
- virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
- util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
- conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
- virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
- util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
- conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
- virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
- util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
- virPCIDeviceHasVPD: Refactor 'debug' messages (RHEL-22314)
- virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
- virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
- virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
- virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
- virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
- virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
- virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
- virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
- virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
- virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
- virt-admin: Add warning when connection to default daemon fails (RHEL-23170)

[10.0.0-2]
- tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
- conf: Report CPU clusters in capabilities XML (RHEL-7043)
- conf: Allow specifying CPU clusters (RHEL-7043)
- qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
- qemu: Use CPU clusters for guests (RHEL-7043)
- tests: Add test case for CPU clusters (RHEL-7043)
- qemu: Make monitor aware of CPU clusters (RHEL-7043)
- tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
- build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
- domain_validate: Check for domain address conflicts fully (RHEL-4452)
- qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)

[10.0.0-1]
- Rebased to libvirt-10.0.0 (RHEL-15267)
- The r

Fixed packages 31

ReleasePackageFixed in
Oracle Linux · 9 libvirt 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-client 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-client-qemu 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-common 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-config-network 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-config-nwfilter 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-interface 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-network 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-nodedev 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-nwfilter 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-qemu 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-secret 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-core 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-disk 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-iscsi 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-logical 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-mpath 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-rbd 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-driver-storage-scsi 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-kvm 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-lock 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-log 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-plugin-lockd 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-plugin-sanlock 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-daemon-proxy 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-devel 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-docs 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-libs 0:10.0.0-6.0.1.el9_4
Oracle Linux · 9 libvirt-nss 0:10.0.0-6.0.1.el9_4

Vulnerabilities 1