Univention Bugzilla – Bug 57199
libvirt: Multiple issues (5.0)
Last modified: 2024-04-03 13:10:58 CEST
New Debian libvirt 5.0.0-4+deb10u2A~5.0.7.202404020757 fixes: This update addresses the following issues: 5.0.0-4+deb10u2 (Sun, 31 Mar 2024 15:22:37 +0200) * Non-maintainer upload by the LTS Security Team. * Fix CVE-2020-10703: NULL pointer dereference in the libvirt API that is responsible for fetching a storage pool based on its target path. * Fix CVE-2020-12430: Memory leak in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. * Fix CVE-2020-25637: Double free memory issue in the libvirt API that is responsible for requesting information about network interfaces of a running QEMU domain. * Fix CVE-2021-3631: SELinux MCS may be accessed by another machine. * Fix CVE-2021-3667: Improper locking in the virStoragePoolLookupByTargetPath API. * Fix CVE-2021-3975: Use-after-free vulnerability. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. * Fix CVE-2021-4147: Deadlock and crash in libxl driver. * Fix CVE-2022-0897: Missing locking in nwfilterConnectNumOfNWFilters. * Fix CVE-2024-1441: Off-by-one error in the udevListInterfacesByStatus() function. * Fix CVE-2024-2494: Missing check for negative array lengths in RPC server de-serialization routines. * Fix CVE-2024-2496: NULL pointer dereference in the udevConnectListAllInterfaces() function.
--- mirror/ftp/pool/main/libv/libvirt/libvirt_5.0.0-4+deb10u1A~5.0.0.202006121716.dsc +++ apt/ucs_5.0-0-errata5.0-7/source/libvirt_5.0.0-4+deb10u2A~5.0.7.202404020757.dsc @@ -1,11 +1,40 @@ -5.0.0-4+deb10u1A~5.0.0.202006121716 [Fri, 12 Jun 2020 17:16:34 +0200] Univention builddaemon <buildd@univention.de>: +5.0.0-4+deb10u2A~5.0.7.202404020757 [Tue, 02 Apr 2024 07:57:41 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package - 0001-Bug-35768-Bug-39685-Remove-UCS-dependencies - 0021-Bug-19329-Allow-MD5-signatures - 0022-Bug-21860-Default-to-kvm32 - 0025-Bug-40318-libvirt-Handle-qemu-kvm-1.1.2-migration-in - 0026-Bug-21501-add-slash-screen-support + 0001-Bug-35768-Bug-39685-Remove-UCS-dependencies.patch + 0021-Bug-19329-Allow-MD5-signatures.quilt + 0022-Bug-21860-Default-to-kvm32.quilt + 0025-Bug-40318-libvirt-Handle-qemu-kvm-1.1.2-migration-in.quilt + 0026-Bug-21501-add-slash-screen-support.quilt + +5.0.0-4+deb10u2 [Sun, 31 Mar 2024 15:22:37 +0200] Guilhem Moulin <guilhem@debian.org>: + + * Non-maintainer upload by the LTS Security Team. + * Fix CVE-2020-10703: NULL pointer dereference in the libvirt API that is + responsible for fetching a storage pool based on its target path. + * Fix CVE-2020-12430: Memory leak in the virDomainListGetStats libvirt API + that is responsible for retrieving domain statistics when managing QEMU + guests. (Closes: #959447) + * Fix CVE-2020-25637: Double free memory issue in the libvirt API that is + responsible for requesting information about network interfaces of a + running QEMU domain. (Closes: #971555) + * Fix CVE-2021-3631: SELinux MCS may be accessed by another machine. + (Closes: #990709) + * Fix CVE-2021-3667: Improper locking in the + virStoragePoolLookupByTargetPath API. (Closes: #991594) + * Fix CVE-2021-3975: Use-after-free vulnerability. The + qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called + using multiple threads without being adequately protected by a monitor + lock. + * Fix CVE-2021-4147: Deadlock and crash in libxl driver. (Closes: #1002535) + * Fix CVE-2022-0897: Missing locking in nwfilterConnectNumOfNWFilters. + (Closes: #1009075) + * Fix CVE-2024-1441: Off-by-one error in the udevListInterfacesByStatus() + function. (Closes: #1066058) + * Fix CVE-2024-2494: Missing check for negative array lengths in RPC server + de-serialization routines. (Closes: #1067461) + * Fix CVE-2024-2496: NULL pointer dereference in the + udevConnectListAllInterfaces() function. 5.0.0-4+deb10u1 [Thu, 05 Dec 2019 00:22:14 +0100] Guido Günther <agx@sigxcpu.org>: <http://piuparts.knut.univention.de/5.0-7/#9116028262655752763>
OK: bug OK: yaml OK: announce_errata OK: patch OK: piuparts [5.0-7] ea7d208384 Bug #57199: libvirt 5.0.0-4+deb10u2A~5.0.7.202404020757 doc/errata/staging/libvirt.yaml | 40 ++++++++++++++++++---------------------- 1 file changed, 18 insertions(+), 22 deletions(-) [5.0-7] 64c7f01587 Bug #57199: libvirt 5.0.0-4+deb10u2A~5.0.7.202404020757 doc/errata/staging/libvirt.yaml | 47 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+)
<https://errata.software-univention.de/#/?erratum=5.0x1013>