Package "libvirt-clients"
| Name: |
libvirt-clients
|
Description: |
Programs for the libvirt library
|
| Latest version: |
8.0.0-1ubuntu7.10 |
| Release: |
jammy (22.04) |
| Level: |
security |
| Repository: |
main |
| Head package: |
libvirt |
| Homepage: |
https://libvirt.org/ |
Links
Download "libvirt-clients"
Other versions of "libvirt-clients" in Jammy
Changelog
|
libvirt (8.0.0-1ubuntu7.10) jammy-security; urgency=medium
* SECURITY UPDATE: off-by-one in udevListInterfacesByStatus()
- debian/patches/CVE-2024-1441.patch: properly check count in
src/interface/interface_backend_udev.c.
- CVE-2024-1441
* SECURITY UPDATE: crash in RPC library
- debian/patches/CVE-2024-2494.patch: check values in
src/remote/remote_daemon_dispatch.c, src/rpc/gendispatch.pl.
- CVE-2024-2494
* SECURITY UPDATE: null pointer deref in udevConnectListAllInterfaces()
- debian/patches/CVE-2024-2496.patch: fix udev_device_get_sysattr_value
return value check in src/interface/interface_backend_udev.c.
- CVE-2024-2496
-- Marc Deslauriers <email address hidden> Fri, 12 Apr 2024 13:48:21 -0400
|
| Source diff to previous version |
| CVE-2024-1441 |
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `nam |
| CVE-2024-2494 |
A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length c |
| CVE-2024-2496 |
A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host inter |
|
|
libvirt (8.0.0-1ubuntu7.5) jammy-security; urgency=medium
* SECURITY UPDATE: DoS via nwfilter driver
- debian/patches/CVE-2022-0897.patch: fix crash when counting number of
network filters in src/nwfilter/nwfilter_driver.c.
- CVE-2022-0897
* SECURITY UPDATE: DoS via memleak in SR-IOV PCI device capabilities
- debian/patches/CVE-2023-2700.patch: resolve leak in
virPCIVirtualFunctionList cleanup in src/util/virpci.c.
- CVE-2023-2700
-- Marc Deslauriers <email address hidden> Fri, 26 May 2023 10:08:33 -0400
|
| CVE-2022-0897 |
A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the `driver->nwfilters` mutex before i |
| CVE-2023-2700 |
A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory |
|
About
-
Send Feedback to @ubuntu_updates
