[SECURITY] Fedora 44 Update: cockpit-machines-357-1.fc44

Cockpit component for managing libvirt virtual machines...

[SECURITY] Fedora 45 Update: php-libvirt-0.5.8-7.fc45

PHP language bindings for Libvirt API. For more details see: http://www.libvirt.org/php/...

[SECURITY] Fedora 45 Update: libvirt-glib-5.0.0-11.fc45

This package provides integration between libvirt and the glib event loop...

[SECURITY] Fedora 45 Update: libvirt-sandbox-0.8.0-22.fc45

This package provides a command for running applications within a sandbox using libvirt...

[SECURITY] Fedora 45 Update: libvirt-12.6.0-2.fc45

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

[SECURITY] Fedora 45 Update: cockpit-machines-357-1.fc45

Cockpit component for managing libvirt virtual machines...

RockyLinux 9 : libvirt (RLSA-2026:74424)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffe...

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

libvirt: swtpm privilege escalation via symlink following

A flaw was found in libvirt. A local attacker, specifically a process running as the confined swtpm user, could exploit a symlink-following vulnerability in the virFileChownFiles function. By planting a symbolic link within the swtpm state directory, the attacker could trick the root-level libvir...

Important: Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

An update for libvirt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 9 : libvirt (RHSA-2026:74424)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74424 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...

Oracle Linux 9 : libvirt (ELSA-2026-74424)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74424 advisory. - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - util: virFileChownFiles: do not...

libvirt security, bug fix, and enhancement update

11.10.0-12.7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.7.el98 - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - qemu: Always assume support for 'QEMUCAPSSETACTION' RHEL-242549 - qemu: Remove unused...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2021_1762)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211762 advisory. libvirt: double free in qemuAgentGetInterfaces in qemuagent.c CVE-2020-25637 QEMU: heap buffer overflow in msixtablemmiowrite in hw/pci/msix.c CVE-2020-278...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_2560)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242560 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition,...

CentOS Linux 7 [TuxCare] Security Update: libvirt-client / libvirt-daemon-driver-lxc / etc (CENTOS7:CLSA-2025:1745585902)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1745585902 advisory. - A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issue can occur when detaching a host...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc (crlsa-2026_18748)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618748 advisory. libvirt: Denial of service in XML parsing CVE-2025-12748 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

AlmaLinux 9.2 [TuxCare] Security Update: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (ALMALINUX9.2:CLSA-2026:1779709803)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779709803 advisory. - A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before...

Rocky Linux 8.6 [CIQ] Security Update: libvirt-dbus / libvirt-dbus-debuginfo / libvirt-dbus-debugsource Multiple Vulnerabilities (ciqsa-2026_0840)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260840 advisory. This advisory aggregates security fixes for the libvirt-dbus SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 8.6 [CIQ] Security Update: python3-libvirt / python3-libvirt-debuginfo Multiple Vulnerabilities (ciqsa-2026_0841)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260841 advisory. This advisory aggregates security fixes for the libvirt-python SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...