Summary
[10.5.0-7.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
[10.5.0-7]
- qemu: Refactor default panic model (RHEL-56451)
- qemu: Sometimes the default panic model doesn't exist (RHEL-56451)
- qemu: Use pvpanic by default on aarch64 (RHEL-56451)
[10.5.0-6]
- udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235) (CVE-2024-8235, RHEL-55373)
[10.5.0-5]
- qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
- qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
- qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
- vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)
[10.5.0-4]
- virt-host-validate: Allow longer list of CPU flags (RHEL-39969)
[10.5.0-3]
- vmx: Be even more lax when trying to comprehend serial ports (RHEL-32182)
[10.5.0-2]
- vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
- tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
- tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
- qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
- qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
- qemu: migration: allow migration for virtiofs (RHEL-40135)
- virt-host-validate: Drop extra 'PASS' (RHEL-46868)
- qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)
[10.5.0-1]
- Rebased to libvirt-10.5.0 (RHEL-21381)
- The rebase also fixes the following bugs:
RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
RHEL-43309
[10.4.0-1]
- Rebased to libvirt-10.4.0 (RHEL-7489)
- The rebase also fixes the following bugs:
RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
RHEL-39400
[10.3.0-2]
- qemu: fix qemu command for pci hostdevs and ramfb='off' (RHEL-28808)
[10.3.0-1]
- Rebased to libvirt-10.3.0 (RHEL-29642)
- The rebase also fixes the following bugs:
RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728
[10.0.0-7]
- qemu: virtiofs: do not crash if cgroups are missing
- qemu: virtiofs: set correct label when creating the socket
- qemu: virtiofs: error out if getting the group or user name fails
- Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
- remote: check for negative array lengths before allocation (CVE-2024-2494)
- qemu: Fix migration with custom XML (RHEL-30622)
[10.0.0-5]
- cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
- qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
- conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
- qemu: domain: Drop added features from migratable CPU (RHEL-25995)
- Add vmx-* features to Broadwell* (RHEL-25995)
- Add vmx-* features to Cascadelake* (RHEL-25995)
- Add vmx-* features to Conroe (RHEL-25995)
- Add vmx-* features to Cooperlake (RHEL-25995)
- Add vmx-* features to core{,2}duo (RHEL-25995)
- Add vmx-* features to Haswell* (RHEL-25995)
- Add vmx-* features to Icelake* (RHEL-25995)
- Add vmx-* features to IvyBridge* (RHEL-25995)
- Add vmx-* features to kvm* (RHEL-25995)
- Add vmx-* features to Nehalem* (RHEL-25995)
- Add vmx-* features to Penryn (RHEL-25995)
- Add vmx-* features to SandyBridge* (RHEL-25995)
- Add vmx-* features to SapphireRapids (RHEL-25995)
- Add vmx-* features to Skylake* (RHEL-25995)
- Add vmx-* features to Snowridge (RHEL-25995)
- Add vmx-* features to Westmere* (RHEL-25995)
[10.0.0-4]
- Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
- qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
- qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
- domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)
[10.0.0-3]
- remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
- conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
- qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
- qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
- qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
- qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
- qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
- remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
- util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
- qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
- qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
- virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
- util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
- virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
- virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
- schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
- tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
- Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
- tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
- util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
- tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
- util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
- virPCIVPDResourceGetKeywordPrefix: Fix loggin
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libvirt | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-client | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-client-qemu | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-common | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-config-network | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-config-nwfilter | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-interface | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-network | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-nodedev | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-nwfilter | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-qemu | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-secret | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-core | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-disk | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-iscsi | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-logical | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-mpath | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-rbd | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-driver-storage-scsi | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-kvm | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-lock | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-log | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-plugin-lockd | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-plugin-sanlock | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-daemon-proxy | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-devel | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-docs | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-libs | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-nss | 0:10.5.0-7.0.1.el9_5 |
| Oracle Linux · 9 | libvirt-ssh-proxy | 0:10.5.0-7.0.1.el9_5 |
Vulnerabilities 1
-
Medium 6.2
Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference…