-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jul 2024 21:35:28 +0200 Source: libvirt Binary: libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-system-systemd libvirt-daemon-system-sysv libvirt-doc Architecture: all Version: 7.0.0-3+deb11u3 Distribution: bullseye Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Guilhem Moulin Description: libvirt-daemon-config-network - Libvirt daemon configuration files (default network) libvirt-daemon-config-nwfilter - Libvirt daemon configuration files (default network filters) libvirt-daemon-system-systemd - Libvirt daemon configuration files (systemd) libvirt-daemon-system-sysv - Libvirt daemon configuration files (sysv) libvirt-doc - documentation for the libvirt library Closes: 990709 991594 1002535 1009075 1066058 1067461 Changes: libvirt (7.0.0-3+deb11u3) bullseye; urgency=medium . * Non-maintainer upload. * Fix CVE-2021-3631: SELinux MCS may be accessed by another machine. (Closes: #990709) * Fix CVE-2021-3667: Improper locking in the virStoragePoolLookupByTargetPath API. (Closes: #991594) * Fix CVE-2021-3975: Use-after-free vulnerability. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. * Fix CVE-2021-4147: Deadlock and crash in libxl driver. (Closes: #1002535) * libxl: Fix regression in domain shutdown. * Fix CVE-2022-0897: Missing locking in nwfilterConnectNumOfNWFilters. (Closes: #1009075) * Fix CVE-2024-1441: Off-by-one error in the udevListInterfacesByStatus() function. (Closes: #1066058) * Fix CVE-2024-2494: Missing check for negative array lengths in RPC server de-serialization routines. (Closes: #1067461) * Fix CVE-2024-2496: NULL pointer dereference in the udevConnectListAllInterfaces() function. Checksums-Sha1: fd00f2d85cfcd3e73d6f0106389b16ad217306c0 55820 libvirt-daemon-config-network_7.0.0-3+deb11u3_all.deb 1aed632600f9ffa14199badc16f327604c09956c 58544 libvirt-daemon-config-nwfilter_7.0.0-3+deb11u3_all.deb d37d34c0b66e988c72fc321836d41676e3f9b86a 106788 libvirt-daemon-system-systemd_7.0.0-3+deb11u3_all.deb 1a918537d4508ad84c8cfafb4303b1081d07c1b1 109392 libvirt-daemon-system-sysv_7.0.0-3+deb11u3_all.deb 03a9fdf14ffb39b512cbe09939798de45bc0994a 1835376 libvirt-doc_7.0.0-3+deb11u3_all.deb 5019929ee2450fd248066b6e312335a1f427ff32 14957 libvirt_7.0.0-3+deb11u3_all-buildd.buildinfo Checksums-Sha256: bdcb1728ccdb7d18eb468098b0ea901dac2506ffbf68d51945aec2fe168d2e8e 55820 libvirt-daemon-config-network_7.0.0-3+deb11u3_all.deb 2aa4f5e73fc80d40c961536e8b3bc78ca450d1078007c146bd6f26ab740020f8 58544 libvirt-daemon-config-nwfilter_7.0.0-3+deb11u3_all.deb e52c5dfc5a82b3c6065e23ab801b4043e50b45281e67b5e80a212fcb6af51ed6 106788 libvirt-daemon-system-systemd_7.0.0-3+deb11u3_all.deb c18861c091efbd6164610da619983a71ad348531a999f43425ef289e037e9340 109392 libvirt-daemon-system-sysv_7.0.0-3+deb11u3_all.deb 18e1fa5a5b182432385858cf53e76aa4f2446db7b8fc6468ca698eba8841bb22 1835376 libvirt-doc_7.0.0-3+deb11u3_all.deb 2f64ffac6387f4998adee9a9ada1808738c5400a8e835ce1eac2549e517bde3d 14957 libvirt_7.0.0-3+deb11u3_all-buildd.buildinfo Files: f70273ce703c4864ad1c6efacdf3e55a 55820 admin optional libvirt-daemon-config-network_7.0.0-3+deb11u3_all.deb c0537233a7242b01af9e0d4df8dec5a9 58544 admin optional libvirt-daemon-config-nwfilter_7.0.0-3+deb11u3_all.deb d12377d20db562817fe2768dff658822 106788 admin optional libvirt-daemon-system-systemd_7.0.0-3+deb11u3_all.deb 413b7adba42370ea6c58bc6bf15c7d29 109392 admin optional libvirt-daemon-system-sysv_7.0.0-3+deb11u3_all.deb daba92d024607accbad023417b47c356 1835376 doc optional libvirt-doc_7.0.0-3+deb11u3_all.deb af61d13573d9a27fba4b8735e732986f 14957 libs optional libvirt_7.0.0-3+deb11u3_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErEDrIdpJkzFMm6K+PyQET5WCY90FAma/w8IACgkQPyQET5WC Y90tnQ/+PV3kFcfMypifBFxsS0r6k7bT5sEjH2uq8r/Wi5/09O7j/3u8XYEYuuBH sFjEVRWD1BPIYRzr5J1ynFrTc2FC1cgA5NDHXaJmxk2FjO3+68bTrYwq0KN1NFM6 0vv+w59cXOIYr8lZ+lNVG04IB7XGMlS0XSWzBJWyxKP190esxZsVt4y9iMBTGX4w M2125ibSmLilYZd2IpkCwiJqUWTZhuLsuEm2wTuMa88wDwDVGCm6Eo7VF+j7FMT2 KZ+/3KQfnicdq56EJdIP3wChQNGBfvPrwq2iN+/YayuJK6NTe0Sy9qYnEbzgq6fb 8Z9TVewQ+dkFY5408ItqeswNxMfIGgn0I7fQkpps6fuhmiGN7ugKCtTdVEc5alRL aknsNuMIlBQnnziGZRY1R6+KrtWuMai4l5dExD4/5eap+zR5lF/2OnOeCDH31ru3 c/NmqZMfcCluZwHEm6JttXH0BlDaVUh0rzOBK+NuYONKoj7brkHg15Z+Ex7h8rnQ fl04Y/djcTG8CDhu3JaloysIrSC2uqMi1kYIJFSZdmMoPU4FJ5qIOezXxp3IQEDB q+EwggyedM1CpHRccqJyD0VeRtKUNXUr9cX9sHWJpSVor8vPMbrIYZvwCuYeMkAV dLjaYmBs6oP9P1mRGJb1BiuiAOwqqxMr5QFMBJnVzaNkpPzH85o= =rvlC -----END PGP SIGNATURE-----