Описание
ELSA-2023-6409: libvirt security, bug fix, and enhancement update (MODERATE)
[9.5.0-7.0.1]
- The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744)
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
[9.5.0-7]
- util: use 'stubDriverType' instead of just 'stubDriver' (rhbz#2074209)
- util: add stub driver name to virPCIDevice object (rhbz#2074209)
- util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209)
- util: permit existing binding to VFIO variant driver (rhbz#2074209)
- util: probe stub driver from within function that binds to stub driver (rhbz#2074209)
- util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209)
- node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209)
- qemu: turn two multiline log messages into single line (rhbz#2074209)
- docs: update description of virsh nodedev-detach --driver option (rhbz#2074209)
- rpm: Fix typo in daemon name (rhbz#2236057)
- rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500)
[9.5.0-6]
- tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
- tests: Switch to firmware autoselection for hvf (rhbz#2196178)
- tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
- tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
- tests: Turn abi-update.xml into a symlink (rhbz#2196178)
- tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
- qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
- qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
- tests: Add some more DO_TESTABI_UPDATE macros (rhbz#2196178)
- tests: Add more tests for firmware selection (rhbz#2196178)
- tests: Update firmware descriptor files (rhbz#2196178)
- tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
- tests: Include microvm in firmwaretest (rhbz#2196178)
- qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
- qemu: Generate NVRAM path in more cases (rhbz#2196178)
- qemu: Filter firmware based on loader.readonly (rhbz#2196178)
- qemu: Match NVRAM template extension for new domains (rhbz#2196178)
- conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
- tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
- tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
- rpm: Reorder scriptlets (rhbz#2210058)
- rpm: Reduce use of with_modular_daemons (rhbz#2210058)
- rpm: Remove custom libvirtd restart logic (rhbz#2210058)
- rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
- rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
- rpm: Delete unused macros (rhbz#2210058)
[9.5.0-5]
- Revert 'qemu_passt: Actually use @logfd' (rhbz#2209191)
- Revert 'qemu_passt: Precreate passt logfile' (rhbz#2209191)
[9.5.0-4]
- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851)
[9.5.0-3]
- tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499)
- tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499)
- qemu: add run-with async-teardown capability (rhbz#2168499)
- qemu: allow use of async teardown in domain (rhbz#2168499)
- conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499)
- qemu: S390 does not provide physical address size (rhbz#2224016)
- nodedev: report mdev persistence properly (rhbz#2143158)
- node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158)
[9.5.0-2]
- nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158)
- nodedev: refactor mdevctl thread functions (rhbz#2143158)
- nodedev: update mdevs from the mdevctl thread (rhbz#2143158)
[9.5.0-1]
- Rebased to libvirt-9.5.0 (rhbz#2175785)
[9.5.0-0rc1.1]
- Rebased to libvirt-9.5.0-rc1 (rhbz#2175785)
- The rebase also fixes the following bugs: rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860 rhbz#2138150, rhbz#2171384
[9.4.0-1]
- Rebased to libvirt-9.4.0 (rhbz#2175785)
- The rebase also fixes the following bugs: rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946 rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709
[9.3.0-2]
- qemu_domin: Account for NVMe disks when calculating memlock limit on hotplug (rhbz#2014030)
[9.3.0-1]
- Rebased to libvirt-9.3.0 (rhbz#2175785)
- The rebase also fixes the following bugs: rhbz#2181235, rhbz#2176215, rhbz#2187133, rhbz#2178885, rhbz#2174700 rhbz#2160435, rhbz#2184966, rhbz#2187278, rhbz#2014030, rhbz#2185184 rhbz#2156300
[9.2.0-1]
- Rebased to libvirt-9.2.0 (rhbz#2175785)
- The rebase also fixes the following bugs: rhbz#2178885, rhbz#2000410, rhbz#2175582, rhbz#2154750, rhbz#2175449 rhbz#2181234, rhbz#2078693, rhbz#2176924, rhbz#2156300, rhbz#2173142 rhbz#2171973, rhbz#2178866, rhbz#2182961, rhbz#2174397, rhbz#2179030 rhbz#2161965, rhbz#2035985
[9.1.0-1]
- Rebased to libvirt-9.1.0 (rhbz#2175785)
- The rebase also fixes the following bugs: rhbz#2004850, rhbz#2137346, rhbz#2166235, rhbz#1961326
[9.0.0-7]
- qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
- qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)
[9.0.0-6]
- rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
- rpc: Don't warn about 'max_client_requests' in single-threaded daemons (rhbz#2145188)
[9.0.0-5]
- qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
- qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)
[9.0.0-4]
- qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
- qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
- qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
- qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
- qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)
[9.0.0-3]
- src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
- qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
- virsh: Make domif-setlink work more than once (rhbz#2165466)
- qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
- qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
- qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
- qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
- qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
- qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
- qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)
[9.0.0-2]
- vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
- domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
- docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
- qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
- conf: clarify some external TPM error messages (rhbz#2063723)
- qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
- qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
- qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
- rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)
[9.0.0-1]
- Rebased to libvirt-9.0.0 (rhbz#2124466)
- The rebase also fixes the following bugs: rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722 rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869 rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879 rhbz#1820437, rhbz#2151202
[8.10.0-2]
- qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
- qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
- qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
- qemu: Init ext devices paths on reconnect (rhbz#2150760)
[8.10.0-1]
- Rebased to libvirt-8.10.0 (rhbz#2124466)
- The rebase also fixes the following bugs: rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075 rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298
[8.9.0-2]
- RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
- spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)
[8.9.0-1]
- Rebased to libvirt-8.9.0 (rhbz#2124466)
- The rebase also fixes the following bugs: rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866 rhbz#1964855
[8.8.0-1]
- Rebased to libvirt-8.8.0 (rhbz#2124466)
- The rebase also fixes the following bugs: rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627 rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866
[8.7.0-1]
- Rebased to libvirt-8.7.0 (rhbz#2124466)
- The rebase also fixes the following bugs: rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211 rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641
[8.5.0-5]
- rpc: Pass OPENSSL_CONF through to ssh invocations (rhbz#2112348)
[8.5.0-4]
- qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
- qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
- qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
- qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
- qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
- qemu_migration: Store original migration params in status XML (rhbz#2107892)
- qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
- qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
- qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
- qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
- qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
- qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)
[8.5.0-3]
- qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
- qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
- qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
- qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
- qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
- qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
- qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
- virsh: Require --xpath for *dumpxml (rhbz#2103524)
- qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)
[8.5.0-2]
- domain_conf: Format more often (rhbz#2059511)
- domain_conf: Format iothread IDs more often (rhbz#2059511)
- qemu: Make IOThread changing more robust (rhbz#2059511)
- qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
- virsh: Implement --config for iothreadset (rhbz#2059511)
- docs: Document TPM portion of domcaps (rhbz#2103119)
- virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
- domcaps: Introduce TPM backendVersion (rhbz#2103119)
- qemu: Report supported TPM version in domcaps (rhbz#2103119)
- vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)
[8.5.0-1]
- Rebased to libvirt-8.5.0 (rhbz#2060313)
- The rebase also fixes the following bugs: rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009
[8.4.0-3]
- qemu: fd: Fix monitor usage of qemuFDPassDirectGetPath (rhbz#2092856)
[8.4.0-2]
- Revert 'RHEL: Fix virConnectGetMaxVcpus output' (rhbz#2095260)
[8.4.0-1]
- Rebased to libvirt-8.4.0 (rhbz#2060313)
- The rebase also fixes the following bugs: rhbz#2057768, rhbz#2081981, rhbz#2035163, rhbz#2075837, rhbz#2082540 rhbz#2075383
[8.3.0-1]
- Rebased to libvirt-8.3.0 (rhbz#2060313)
- The rebase also fixes the following bugs: rhbz#1653327, rhbz#2075765, rhbz#2075464, rhbz#2078274, rhbz#2070380 rhbz#2073887, rhbz#2073867
[8.2.0-1]
- Rebased to libvirt-8.2.0 (rhbz#2060313)
- The rebase also fixes the following bugs: rhbz#1866400, rhbz#2065381, rhbz#2063903, rhbz#1901394, rhbz#2065399
[8.1.0-1]
- Rebased to libvirt-8.1.0 (rhbz#2060313)
- The rebase also fixes the following bugs: rhbz#1643868, rhbz#2045953, rhbz#1910856, rhbz#2051451, rhbz#1745868 rhbz#2040548, rhbz#2041665, rhbz#1999372, rhbz#2038045, rhbz#2045959 rhbz#2046024, rhbz#2040555, rhbz#2057067, rhbz#2037146, rhbz#2036300
[8.0.0-5]
- Make systemd unit ordering more robust (rhbz#1868537)
- util: Fix machined servicename (rhbz#1868537)
[8.0.0-4]
- qemu_command: Generate memory only after controllers (rhbz#2047271)
- qemu: Validate domain definition even on migration (rhbz#2048435)
[8.0.0-3]
- qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046170)
[8.0.0-2]
- build: Only install libvirt-guests when building libvirtd (rhbz#2042529)
- docs: Add man page for libvirt-guests (rhbz#2042529)
- remove sysconfig files (rhbz#2042529)
- spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644)
- qemu: fix inactive snapshot revert (rhbz#2039136)
- Revert 'report error when virProcessGetStatInfo() is unable to parse data' (rhbz#2043579)
[8.0.0-1]
- Rebased to libvirt-8.0.0 (rhbz#2001507)
- The rebase also fixes the following bugs: rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131
[8.0.0-0rc1.1]
- Rebased to libvirt-8.0.0-rc1 (rhbz#2001507)
- The rebase also fixes the following bugs: rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410 rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537
[7.10.0-1]
- Rebased to libvirt-7.10.0 (rhbz#2001507)
- The rebase also fixes the following bugs: rhbz#2024098, rhbz#1964223, rhbz#2018488, rhbz#2021437, rhbz#2022589 rhbz#2023605, rhbz#1431589, rhbz#2024435, rhbz#2016599, rhbz#1945501 rhbz#2023674
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
libvirt
9.5.0-7.0.1.el9_3
libvirt-client
9.5.0-7.0.1.el9_3
libvirt-client-qemu
9.5.0-7.0.1.el9_3
libvirt-daemon
9.5.0-7.0.1.el9_3
libvirt-daemon-common
9.5.0-7.0.1.el9_3
libvirt-daemon-config-network
9.5.0-7.0.1.el9_3
libvirt-daemon-config-nwfilter
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-interface
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-network
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-nodedev
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-nwfilter
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-qemu
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-secret
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-core
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-disk
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-iscsi
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-logical
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-mpath
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-rbd
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-scsi
9.5.0-7.0.1.el9_3
libvirt-daemon-kvm
9.5.0-7.0.1.el9_3
libvirt-daemon-lock
9.5.0-7.0.1.el9_3
libvirt-daemon-log
9.5.0-7.0.1.el9_3
libvirt-daemon-plugin-lockd
9.5.0-7.0.1.el9_3
libvirt-daemon-plugin-sanlock
9.5.0-7.0.1.el9_3
libvirt-daemon-proxy
9.5.0-7.0.1.el9_3
libvirt-devel
9.5.0-7.0.1.el9_3
libvirt-docs
9.5.0-7.0.1.el9_3
libvirt-libs
9.5.0-7.0.1.el9_3
libvirt-nss
9.5.0-7.0.1.el9_3
Oracle Linux x86_64
libvirt
9.5.0-7.0.1.el9_3
libvirt-client
9.5.0-7.0.1.el9_3
libvirt-client-qemu
9.5.0-7.0.1.el9_3
libvirt-daemon
9.5.0-7.0.1.el9_3
libvirt-daemon-common
9.5.0-7.0.1.el9_3
libvirt-daemon-config-network
9.5.0-7.0.1.el9_3
libvirt-daemon-config-nwfilter
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-interface
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-network
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-nodedev
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-nwfilter
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-qemu
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-secret
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-core
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-disk
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-iscsi
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-logical
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-mpath
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-rbd
9.5.0-7.0.1.el9_3
libvirt-daemon-driver-storage-scsi
9.5.0-7.0.1.el9_3
libvirt-daemon-kvm
9.5.0-7.0.1.el9_3
libvirt-daemon-lock
9.5.0-7.0.1.el9_3
libvirt-daemon-log
9.5.0-7.0.1.el9_3
libvirt-daemon-plugin-lockd
9.5.0-7.0.1.el9_3
libvirt-daemon-plugin-sanlock
9.5.0-7.0.1.el9_3
libvirt-daemon-proxy
9.5.0-7.0.1.el9_3
libvirt-devel
9.5.0-7.0.1.el9_3
libvirt-docs
9.5.0-7.0.1.el9_3
libvirt-libs
9.5.0-7.0.1.el9_3
libvirt-nss
9.5.0-7.0.1.el9_3
Связанные CVE
Связанные уязвимости
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
A flaw was found in libvirt. The virStoragePoolObjListSearch function ...