Skip to content
OpenAdvisories
Medium ELSA-2024-9128 1 CVE

Moderate: libvirt security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Summary

[10.5.0-7.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[10.5.0-7]
- qemu: Refactor default panic model (RHEL-56451)
- qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
- qemu: Use pvpanic by default on aarch64 (RHEL-56451)

[10.5.0-6]
- udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)

[10.5.0-5]
- qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
- qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
- qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
- vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)

[10.5.0-4]
- virt-host-validate: Allow longer list of CPU flags (RHEL-39969)

[10.5.0-3]
- vmx: Be even more lax when trying to comprehend serial ports (RHEL-32182)

[10.5.0-2]
- vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
- tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
- tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
- qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
- qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
- qemu: migration: allow migration for virtiofs (RHEL-40135)
- virt-host-validate: Drop extra 'PASS' (RHEL-46868)
- qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)

[10.5.0-1]
- Rebased to libvirt-10.5.0 (RHEL-21381)
- The rebase also fixes the following bugs:
RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
RHEL-43309

[10.4.0-1]
- Rebased to libvirt-10.4.0 (RHEL-7489)
- The rebase also fixes the following bugs:
RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
RHEL-39400

[10.3.0-2]
- qemu: fix qemu command for pci hostdevs and ramfb='off' (RHEL-28808)

[10.3.0-1]
- Rebased to libvirt-10.3.0 (RHEL-29642)
- The rebase also fixes the following bugs:
RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728

[10.0.0-7]
- qemu: virtiofs: do not crash if cgroups are missing
- qemu: virtiofs: set correct label when creating the socket
- qemu: virtiofs: error out if getting the group or user name fails
- Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- qemu: Fix migration with custom XML (RHEL-30622)

[10.0.0-5]
- cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
- qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
- conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
- qemu: domain: Drop added features from migratable CPU (RHEL-25995)
- Add vmx-* features to Broadwell* (RHEL-25995)
- Add vmx-* features to Cascadelake* (RHEL-25995)
- Add vmx-* features to Conroe (RHEL-25995)
- Add vmx-* features to Cooperlake (RHEL-25995)
- Add vmx-* features to core{,2}duo (RHEL-25995)
- Add vmx-* features to Haswell* (RHEL-25995)
- Add vmx-* features to Icelake* (RHEL-25995)
- Add vmx-* features to IvyBridge* (RHEL-25995)
- Add vmx-* features to kvm* (RHEL-25995)
- Add vmx-* features to Nehalem* (RHEL-25995)
- Add vmx-* features to Penryn (RHEL-25995)
- Add vmx-* features to SandyBridge* (RHEL-25995)
- Add vmx-* features to SapphireRapids (RHEL-25995)
- Add vmx-* features to Skylake* (RHEL-25995)
- Add vmx-* features to Snowridge (RHEL-25995)
- Add vmx-* features to Westmere* (RHEL-25995)

[10.0.0-4]
- Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
- qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
- qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
- domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)

[10.0.0-3]
- remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
- conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
- qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
- qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
- qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
- qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
- remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
- util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
- qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
- qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
- virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
- util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
- virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
- virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
- schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
- tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
- Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
- tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
- util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
- tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
- virPCIVPDResourceGetKeywordPrefix: Fix loggin

Fixed packages 32

ReleasePackageFixed in
Oracle Linux · 9 libvirt 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-client 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-client-qemu 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-common 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-config-network 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-config-nwfilter 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-interface 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-network 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-nodedev 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-nwfilter 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-qemu 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-secret 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-core 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-disk 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-iscsi 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-logical 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-mpath 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-rbd 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-driver-storage-scsi 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-kvm 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-lock 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-log 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-plugin-lockd 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-plugin-sanlock 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-daemon-proxy 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-devel 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-docs 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-libs 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-nss 0:10.5.0-7.0.1.el9_5
Oracle Linux · 9 libvirt-ssh-proxy 0:10.5.0-7.0.1.el9_5

Vulnerabilities 1