Change logs for libvirt source package in Oracular

  • libvirt (10.0.0-2ubuntu8.2) noble-security; urgency=medium
    
      * SECURITY UPDATE: stack use-after-free in virNetClientIOEventLoop()
        - debian/patches/CVE-2024-4418.patch: ensure temporary GSource is
          removed from client event loop in src/rpc/virnetclient.c.
        - CVE-2024-4418
    
     -- Marc Deslauriers <email address hidden>  Mon, 06 May 2024 09:12:37 -0400
  • libvirt (10.0.0-2ubuntu8.1) noble-security; urgency=medium
    
      * SECURITY UPDATE: off-by-one in udevListInterfacesByStatus()
        - debian/patches/CVE-2024-1441.patch: properly check count in
          src/interface/interface_backend_udev.c.
        - CVE-2024-1441
      * SECURITY UPDATE: crash in RPC library
        - debian/patches/CVE-2024-2494.patch: check values in
          src/remote/remote_daemon_dispatch.c, src/rpc/gendispatch.pl.
        - CVE-2024-2494
    
     -- Marc Deslauriers <email address hidden>  Thu, 18 Apr 2024 11:42:32 -0400
  • libvirt (10.0.0-2ubuntu8) noble; urgency=medium
    
      * Rebuild against new libpcap0.8t64.
    
     -- Gianfranco Costamagna <email address hidden>  Mon, 15 Apr 2024 10:17:16 +0200