Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-admin | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-bash-completion | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-client | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-config-network | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-config-nwfilter | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-interface | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-lxc | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-network | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-nodedev | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-nwfilter | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-qemu | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-secret | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-core | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-disk | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-gluster | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-iscsi | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-logical | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-mpath | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-rbd | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-driver-storage-scsi | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-kvm | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-daemon-lxc | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-debuginfo | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-devel | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-docs | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-libs | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-lock-sanlock | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-login-shell | 0:4.5.0-36.el7_9.7 |
| Red Hat · RHEL 7 ELS rhel_els:7 | libvirt-nss | 0:4.5.0-36.el7_9.7 |
Vulnerabilities 2
-
High 7.8
Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUM…
-
High 7.8
Libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, …
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2513065
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2520161
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69114.json
-
report
https://access.redhat.com/security/cve/CVE-2026-18917
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-18917
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-18917
-
report
https://access.redhat.com/security/cve/CVE-2026-63622
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-63622
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-63622