[ubuntu/focal-security] libvirt 6.0.0-0ubuntu8.16 (Accepted)

[Marc Deslauriers]

libvirt (6.0.0-0ubuntu8.16) focal-security; urgency=medium

  * SECURITY UPDATE: crash via double-free memory issue
    - debian/patches/CVE-2020-25637-1.patch: gendispatch: handle empty
      flags in src/rpc/gendispatch.pl.
    - debian/patches/CVE-2020-25637-2.patch: add support for filtering
      @acls by uint params in src/remote/remote_protocol.x,
      src/rpc/gendispatch.pl.
    - debian/patches/CVE-2020-25637-3.patch: require write acl for guest
      agent in src/libxl/libxl_driver.c, src/qemu/qemu_driver.c,
      src/remote/remote_protocol.x.
    - debian/patches/CVE-2020-25637-4.patch: set ifname to NULL after
      freeing in src/qemu/qemu_agent.c.
    - CVE-2020-25637
  * SECURITY UPDATE: sVirt SELinux confinement flaw
    - debian/patches/CVE-2021-3631.patch: fix SELinux label generation
      logic in src/security/security_selinux.c.
    - CVE-2021-3631
  * SECURITY UPDATE: improper locking issue
    - debian/patches/CVE-2021-3667.patch: unlock object on ACL fail in
      src/storage/storage_driver.c.
    - CVE-2021-3667
  * SECURITY UPDATE: segmentation fault during VM shutdown
    - debian/patches/CVE-2021-3975.patch: add missing lock in
      qemuProcessHandleMonitorEOF in src/qemu/qemu_process.c.
    - CVE-2021-3975
  * SECURITY UPDATE: DoS via libxl driver
    - debian/patches/CVE-2021-4147-pre1.patch: fix domain shutdown in
      src/libxl/libxl_domain.c.
    - debian/patches/CVE-2021-4147-1.patch: disable death events after
      receiving a shutdown event in src/libxl/libxl_domain.c,
      src/libxl/libxl_domain.h.
    - debian/patches/CVE-2021-4147-2.patch: rename libxlShutdownThreadInfo
      struct in src/libxl/libxl_domain.c.
    - debian/patches/CVE-2021-4147-3.patch: modify name of shutdown thread
      in src/libxl/libxl_domain.c.
    - debian/patches/CVE-2021-4147-4.patch: handle domain death events in a
      thread in src/libxl/libxl_domain.c.
    - debian/patches/CVE-2021-4147-5.patch: search for virDomainObj in
      event handler threads in src/libxl/libxl_domain.c.
    - debian/patches/CVE-2021-4147-6pre1.patch: avoid virHashFree by
      rearranging code in src/libxl/libxl_logger.c.
    - debian/patches/CVE-2021-4147-6.patch: protect access to libxlLogger
      files hash table in src/libxl/libxl_logger.c.
    - CVE-2021-4147
  * SECURITY UPDATE: DoS via nwfilter driver
    - debian/patches/CVE-2022-0897.patch: fix crash when counting number of
      network filters in src/nwfilter/nwfilter_driver.c.
    - CVE-2022-0897

libvirt (6.0.0-0ubuntu8.15) focal; urgency=medium

  * d/p/u/lp-1927519-virt-aa-helper-Purge-profile-if-corrupted.patch:
    avoid issues due to corrupted apparmor profiles (LP: #1927519)

libvirt (6.0.0-0ubuntu8.14) focal; urgency=medium

  * Fixup backport of "util: Add phys_port_name support on virPCIGetNetName"
    to include the incorrectly removed "firstEntryName = NULL;" line, which
    caused a regression bringing up network pools. (LP: #1943481)
    - d/p/u/lp-1892132-Add-phys_port_name-support-on-virPCIGetNetName.patch

libvirt (6.0.0-0ubuntu8.13) focal; urgency=medium

  * Add support for switchdev NICs that link representor ports to parent PCI
    device. (LP: #1892132)
    - d/p/u/lp-1892132-Add-phys_port_name-support-on-virPCIGetNetName.patch
    - d/p/u/lp-1892132-add-virNetDevGetPhysPortName.patch

libvirt (6.0.0-0ubuntu8.12) focal; urgency=medium

  * d/p/u/lp-1929202-*: fix pre-creation of images during migration
    (LP: #1929202)

libvirt (6.0.0-0ubuntu8.11) focal; urgency=medium

  * d/p/ubuntu/lp-1906266-virStorageFileGetMetadataRecurse-Allow-format-probin:
    relax restrictions on format probing for compat with older images
    (LP: #1906266)

libvirt (6.0.0-0ubuntu8.10) focal; urgency=medium

  * d/p/ubuntu-aa/lp-1890858-unix-socket.patch: avoid issues of some users
    to connect to libvirtd (LP: #1890858)

libvirt (6.0.0-0ubuntu8.9) focal; urgency=medium

  * d/p/u/lp-1921754*: add EPYC-Rome-v2 as v1 missed IBRS and thereby fails
    on some HW/Guest combinations e.g. Windows 10 on Threadripper
    (LP: #1921754)
  * d/p/u/lp-1921880*: add EPYC-Milan features and named cpu type support
    (LP: #1921880)
  * d/p/u/lp-1922907: add ability to parse cpu stepping and thereby correctly
    differentiate skylake and cascadelake chips (LP: #1922907)

libvirt (6.0.0-0ubuntu8.8) focal; urgency=medium

  * d/p/lp1915811-*: Fix NUMA topology population for machines with high number
  of CPUs (LP: #1915811)

libvirt (6.0.0-0ubuntu8.7) focal; urgency=medium

  * d/p/u/lp-1913266-qemu-Add-virtio-related-options-to-vsock.patch: allow
    vsock to work in secure execution environments. (LP: #1913266)

libvirt (6.0.0-0ubuntu8.6) focal; urgency=medium

  * Improve flaky smoke-lxc test (LP: #1899180)
    - d/t/control, d/t/smoke-lxc: retry service restart and skip test if
      failing; This was flaky on some release/architectures
    - d/t/smoke-lxc: retry check_domain being flaky on arm64

libvirt (6.0.0-0ubuntu8.5) focal; urgency=medium

  * d/p/ubuntu/lp-1887490-*: add named types and definitions for EPYC-Rome
    chips (LP: #1887490)

libvirt (6.0.0-0ubuntu8.4) focal; urgency=medium

  * avoid stale libvirt capability cache (LP: #1874647)
    - when host cpu changes (e.g. nested with different configuration)
    - when s390x protvirt or AMD SEV changes
    - d/p/ubuntu/lp-1874647-*

Date: 2022-04-21 13:01:10.435335+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libvirt/6.0.0-0ubuntu8.16
-------------- next part --------------
Sorry, changesfile not available.