CBL Mariner 2.0 Security Update: libvirt (CVE-2024-2494)

The version of libvirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2494 advisory. - A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory fo...

CBL Mariner 2.0 Security Update: libvirt (CVE-2024-1441)

The version of libvirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1441 advisory. - An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of...

CBL Mariner 2.0 Security Update: libvirt (CVE-2024-2496)

The version of libvirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2496 advisory. - A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces function in libvirt. This issu...

Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

...

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

...

Libvirt: null pointer dereference in udevconnectlistallinterfaces()

...

Libvirt: off-by-one error in udevlistinterfacesbystatus()

...

OESA-2024-1743 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A race condition leading to a stack use-after-free flaw was found in libvirt. Due...

[SECURITY] Fedora 39 Update: libvirt-9.7.0-4.fc39

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Fedora: Security Advisory (FEDORA-2024-c2e7b82022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : libvirt (2024-c2e7b82022)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c2e7b82022 advisory. Fix crash in event loop CVE-2024-4418 Fix I/O stall when multiple threads issue RPC calls Fix leak of GSource object Fix leak of udev object referen...

OPENSUSE-SU-2024:11758-1 libvirt-8.0.0-1.1 on GA media

These are all security issues fixed in the libvirt-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13948-1 libvirt-10.3.0-2.1 on GA media

These are all security issues fixed in the libvirt-10.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13759-1 libvirt-10.1.0-1.1 on GA media

These are all security issues fixed in the libvirt-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13061-1 libvirt-9.5.0-2.1 on GA media

These are all security issues fixed in the libvirt-9.5.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11972-1 libvirt-8.2.0-1.1 on GA media

These are all security issues fixed in the libvirt-8.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13796-1 libvirt-10.1.0-2.1 on GA media

These are all security issues fixed in the libvirt-10.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10209-1 libvirt-2.5.0-1.1 on GA media

These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11008-1 libvirt-7.7.0-2.1 on GA media

These are all security issues fixed in the libvirt-7.7.0-2.1 package on the GA media of openSUSE Tumbleweed...

libvirt bug fix update

An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...