UbuntuUpdates.org

Package "libvirt-common"

Name: libvirt-common

Description:

virtualization library - common files
Latest version: 12.0.0-1ubuntu5.5
Release: resolute (26.04)
Level: security
Repository: main
Head package: libvirt
Homepage: https://libvirt.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libvirt-common"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libvirt-common" in Resolute

Repository Area Version
base main 12.0.0-1ubuntu5
updates main 12.0.0-1ubuntu5.5

Changelog

Version: 12.0.0-1ubuntu5.5 2026-09-28 13:07:27 UTC

libvirt (12.0.0-1ubuntu5.5) resolute-security; urgency=medium

  * SECURITY UPDATE: integer overflow in NodeGetFreePages RPC handler
    - debian/patches/CVE-2026-18917.patch: remote: Fix integer overflow in RPC
      handler for virNodeGetFreePages in src/remote/remote_daemon_dispatch.c.
    - CVE-2026-18917
  * SECURITY UPDATE: symlink-following flaw
    - debian/patches/CVE-2026-77159.patch: qemu: tpm: Avoid following symlinks
      when chown'ing log file in src/qemu/qemu_tpm.c.
    - CVE-2026-77159

 -- Marc Deslauriers Wed, 23 Sep 2026 14:46:22 -0400
Source diff to previous version
CVE-2026-18917 A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This fla
CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile wi

Version: 12.0.0-1ubuntu5.3 2026-08-19 18:08:35 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates