Summary
[10.0.0-6.2.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
[10.0.0-6.2.el9_4]
- qemu: Fix migration with custom XML (RHEL-32654)
[10.0.0-6.1.el9_4]
- Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441, RHEL-25081)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libvirt | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-client | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-client-qemu | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-common | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-config-network | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-config-nwfilter | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-interface | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-network | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-nodedev | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-nwfilter | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-qemu | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-secret | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-core | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-disk | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-iscsi | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-logical | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-mpath | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-rbd | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-scsi | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-kvm | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-lock | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-log | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-plugin-lockd | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-plugin-sanlock | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-daemon-proxy | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-devel | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-docs | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-libs | 0:10.0.0-6.2.0.1.el9_4 |
| Oracle Linux · 9 | libvirt-nss | 0:10.0.0-6.2.0.1.el9_4 |
Vulnerabilities 2
-
Medium 6.2
Libvirt: negative g_new0 length can lead to unbounded memory allocation
A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a cra…
-
Medium 5.5CVE-2024-1441 Public exploit
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…