Debian Package Tracker
Register | Log in
Subscribe

libvirt

Choose email to subscribe with

general
  • source: libvirt (main)
  • version: 9.9.0-1
  • maintainer: Debian Libvirt Maintainers (archive) (DMD)
  • uploaders: Andrea Bolognani [DMD] [DM] – Guido Günther [DMD]
  • arch: all any
  • std-ver: 4.6.2
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 5.0.0-4+deb10u1
  • oldstable: 7.0.0-3+deb11u2
  • old-bpo: 8.0.0-1~bpo11+1
  • stable: 9.0.0-4
  • testing: 9.9.0-1
  • unstable: 9.9.0-1
versioned links
  • 5.0.0-4+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 7.0.0-3+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 8.0.0-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 9.0.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 9.7.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 9.9.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • libnss-libvirt
  • libvirt-clients (12 bugs: 0, 9, 3, 0)
  • libvirt-clients-qemu
  • libvirt-daemon (53 bugs: 0, 45, 8, 0)
  • libvirt-daemon-config-network
  • libvirt-daemon-config-nwfilter
  • libvirt-daemon-driver-lxc
  • libvirt-daemon-driver-qemu (1 bugs: 0, 1, 0, 0)
  • libvirt-daemon-driver-storage-gluster
  • libvirt-daemon-driver-storage-iscsi-direct (1 bugs: 0, 1, 0, 0)
  • libvirt-daemon-driver-storage-rbd
  • libvirt-daemon-driver-storage-zfs
  • libvirt-daemon-driver-vbox
  • libvirt-daemon-driver-xen
  • libvirt-daemon-system (39 bugs: 0, 32, 7, 0)
  • libvirt-daemon-system-systemd (1 bugs: 0, 1, 0, 0)
  • libvirt-daemon-system-sysv
  • libvirt-dev
  • libvirt-doc
  • libvirt-l10n
  • libvirt-login-shell
  • libvirt-sanlock
  • libvirt-wireshark
  • libvirt0 (13 bugs: 0, 13, 0, 0)
action needed
6 bugs tagged patch in the BTS normal
The BTS contains patches fixing 6 bugs, consider including or untagging them.
Created: 2023-09-13 Last update: 2023-11-30 11:02
lintian reports 1 warning normal
Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.
Created: 2023-10-09 Last update: 2023-10-09 11:34
debian/patches: 2 patches to forward upstream low

Among the 5 debian patches available in version 9.9.0-1 of the package, we noticed the following issues:

  • 2 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2023-11-19 09:39
6 low-priority security issues in bullseye low

There are 6 open security issues in bullseye.

6 issues left for the package maintainer to handle:
  • CVE-2021-3631: (needs triaging) A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
  • CVE-2021-3667: (needs triaging) An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.
  • CVE-2021-3975: (needs triaging) A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
  • CVE-2021-4147: (needs triaging) A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
  • CVE-2022-0897: (needs triaging) A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).
  • CVE-2023-2700: (needs triaging) A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-11-09 18:08
1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:
  • CVE-2023-3750: (needs triaging) A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-07-20 Last update: 2023-11-09 18:08
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2022-12-22 Last update: 2022-12-22 18:00
news
[rss feed]
  • [2023-11-10] libvirt 9.9.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-11-06] Accepted libvirt 9.9.0-1 (source) into unstable (Andrea Bolognani)
  • [2023-10-15] libvirt 9.8.0-2 MIGRATED to testing (Debian testing watch)
  • [2023-10-13] Accepted libvirt 9.8.0-2 (source) into unstable (Andrea Bolognani)
  • [2023-10-13] libvirt 9.8.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-10-08] Accepted libvirt 9.8.0-1 (source) into unstable (Andrea Bolognani)
  • [2023-09-16] libvirt 9.7.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-09-13] Accepted libvirt 9.7.0-1 (source) into unstable (Andrea Bolognani)
  • [2023-08-23] Accepted libvirt 9.6.0-3 (source) into experimental (Andrea Bolognani)
  • [2023-08-20] Accepted libvirt 9.6.0-2 (source) into experimental (Andrea Bolognani)
  • [2023-08-17] libvirt 9.6.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-08-08] Accepted libvirt 9.6.0-1 (source) into unstable (Andrea Bolognani)
  • [2023-07-25] Accepted libvirt 9.5.0-2 (source) into unstable (Andrea Bolognani)
  • [2023-07-06] libvirt 9.5.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-07-03] Accepted libvirt 9.5.0-1 (source) into unstable (Andrea Bolognani)
  • [2023-06-02] Accepted libvirt 9.4.0-1 (source) into experimental (Andrea Bolognani)
  • [2023-05-29] libvirt 9.0.0-4 MIGRATED to testing (Debian testing watch)
  • [2023-05-26] Accepted libvirt 9.0.0-4 (source) into unstable (Andrea Bolognani)
  • [2023-05-21] Accepted libvirt 9.3.0-2 (source) into experimental (Andrea Bolognani)
  • [2023-05-04] Accepted libvirt 9.3.0-1 (source) into experimental (Andrea Bolognani)
  • [2023-04-23] libvirt 9.0.0-3 MIGRATED to testing (Debian testing watch)
  • [2023-04-15] Accepted libvirt 9.0.0-3 (source) into unstable (Andrea Bolognani)
  • [2023-04-11] Accepted libvirt 9.2.0-2 (source) into experimental (Andrea Bolognani)
  • [2023-04-04] Accepted libvirt 9.2.0-1 (source) into experimental (Andrea Bolognani)
  • [2023-03-09] libvirt 9.0.0-2 MIGRATED to testing (Debian testing watch)
  • [2023-03-05] Accepted libvirt 9.1.0-1 (source) into experimental (Andrea Bolognani)
  • [2023-03-01] Accepted libvirt 7.0.0-3+deb11u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Guido Günther)
  • [2023-02-26] Accepted libvirt 9.0.0-2 (source) into unstable (Andrea Bolognani)
  • [2023-01-31] libvirt 9.0.0-1 MIGRATED to testing (Debian testing watch)
  • [2023-01-28] Accepted libvirt 9.0.0-1 (source) into unstable (Andrea Bolognani)
  • 1
  • 2
bugs [bug history graph]
  • all: 189 193
  • RC: 0
  • I&N: 146 150
  • M&W: 43
  • F&P: 0
  • patch: 6
links
  • homepage
  • lintian (0, 1)
  • buildd: logs, checks, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • l10n (100, 32)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 9.6.0-1ubuntu2
  • 127 bugs (4 patches)
  • patches for 9.6.0-1ubuntu2

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing