Package "libvirt-daemon"

Name: libvirt-daemon


Virtualization daemon

Latest version: 9.6.0-1ubuntu1.1
Release: mantic (23.10)
Level: updates
Repository: main
Head package: libvirt
Homepage: https://libvirt.org/


Download "libvirt-daemon"

Other versions of "libvirt-daemon" in Mantic

Repository Area Version
base main 9.6.0-1ubuntu1
security main 9.6.0-1ubuntu1.1


Version: 9.6.0-1ubuntu1.1 2024-04-15 20:07:00 UTC

  libvirt (9.6.0-1ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: off-by-one in udevListInterfacesByStatus()
    - debian/patches/CVE-2024-1441.patch: properly check count in
    - CVE-2024-1441
  * SECURITY UPDATE: crash in RPC library
    - debian/patches/CVE-2024-2494.patch: check values in
      src/remote/remote_daemon_dispatch.c, src/rpc/gendispatch.pl.
    - CVE-2024-2494
  * SECURITY UPDATE: null pointer deref in udevConnectListAllInterfaces()
    - debian/patches/CVE-2024-2496.patch: fix udev_device_get_sysattr_value
      return value check in src/interface/interface_backend_udev.c.
    - CVE-2024-2496

 -- Marc Deslauriers <email address hidden> Fri, 12 Apr 2024 13:40:18 -0400

CVE-2024-1441 An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `nam
CVE-2024-2494 A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length c
CVE-2024-2496 A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host inter

About   -   Send Feedback to @ubuntu_updates