libvirt - Debian Package Tracker

general

source: libvirt (main)
version: 9.7.0-1
maintainer: Debian Libvirt Maintainers (archive) (DMD)
uploaders: Andrea Bolognani [DMD] [DM] – Guido Günther [DMD]
arch: all any
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 5.0.0-4+deb10u1
oldstable: 7.0.0-3+deb11u2
old-bpo: 8.0.0-1~bpo11+1
stable: 9.0.0-4
testing: 9.7.0-1
unstable: 9.7.0-1

versioned links

5.0.0-4+deb10u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
7.0.0-3+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
8.0.0-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.0.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
9.7.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnss-libvirt
libvirt-clients (12 bugs: 0, 9, 3, 0)
libvirt-clients-qemu
libvirt-daemon (53 bugs: 0, 45, 8, 0)
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-lxc
libvirt-daemon-driver-qemu (1 bugs: 0, 1, 0, 0)
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi-direct (1 bugs: 0, 1, 0, 0)
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-zfs
libvirt-daemon-driver-vbox
libvirt-daemon-driver-xen
libvirt-daemon-system (37 bugs: 0, 31, 6, 0)
libvirt-daemon-system-systemd (1 bugs: 0, 1, 0, 0)
libvirt-daemon-system-sysv
libvirt-dev
libvirt-doc
libvirt-l10n
libvirt-login-shell
libvirt-sanlock
libvirt-wireshark
libvirt0 (13 bugs: 0, 13, 0, 0)

action needed

A new upstream version is available: 9.8.0 high

A new upstream version 9.8.0 is available, you should consider packaging it.

Created: 2023-09-30 Last update: 2023-10-08 02:40

7 bugs tagged patch in the BTS normal

The BTS contains patches fixing 7 bugs, consider including or untagging them.

Created: 2023-09-13 Last update: 2023-10-08 02:32

3 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit d43f9d62135530576df002721f9850524288ee8c
Merge: a3a1f2e07 c52c88529
Author: Andrea Bolognani <eof@kiyuko.org>
Date:   Tue Oct 3 22:46:13 2023 +0200

    Update upstream source from tag 'upstream/9.8.0'
    
    Update to upstream version '9.8.0'
    with Debian dir b0f84df98c89c4e1e3841798b863485c99cfeb6b

commit c52c88529fbe885319aa2a8395a0dd7ca5e9be52
Author: Andrea Bolognani <eof@kiyuko.org>
Date:   Tue Oct 3 22:45:46 2023 +0200

    New upstream version 9.8.0

commit a3a1f2e074736f875762db15b60c4370c0ef8659
Author: Pino Toscano <pino@debian.org>
Date:   Sun Oct 1 22:01:40 2023 +0200

    Enable the rbd/ceph storage driver only on 64bit architectures
    
    It will not be supported soon on 32bit architectures.
    
    Closes: #1053168

Created: 2023-10-03 Last update: 2023-10-03 23:10

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2023-09-14 Last update: 2023-09-14 12:34

6 low-priority security issues in bullseye low

There are 6 open security issues in bullseye.

6 issues left for the package maintainer to handle:

CVE-2021-3631: (needs triaging) A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
CVE-2021-3667: (needs triaging) An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.
CVE-2021-3975: (needs triaging) A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
CVE-2021-4147: (needs triaging) A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVE-2022-0897: (needs triaging) A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).
CVE-2023-2700: (needs triaging) A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-09-16 04:38

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2023-3750: (needs triaging) A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-07-20 Last update: 2023-09-16 04:38

debian/patches: 2 patches to forward upstream low

Among the 5 debian patches available in version 9.7.0-1 of the package, we noticed the following issues:

2 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2023-09-14 11:54

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2022-12-22 Last update: 2022-12-22 18:00

news

[rss feed]

[2023-09-16] libvirt 9.7.0-1 MIGRATED to testing (Debian testing watch)
[2023-09-13] Accepted libvirt 9.7.0-1 (source) into unstable (Andrea Bolognani)
[2023-08-23] Accepted libvirt 9.6.0-3 (source) into experimental (Andrea Bolognani)
[2023-08-20] Accepted libvirt 9.6.0-2 (source) into experimental (Andrea Bolognani)
[2023-08-17] libvirt 9.6.0-1 MIGRATED to testing (Debian testing watch)
[2023-08-08] Accepted libvirt 9.6.0-1 (source) into unstable (Andrea Bolognani)
[2023-07-25] Accepted libvirt 9.5.0-2 (source) into unstable (Andrea Bolognani)
[2023-07-06] libvirt 9.5.0-1 MIGRATED to testing (Debian testing watch)
[2023-07-03] Accepted libvirt 9.5.0-1 (source) into unstable (Andrea Bolognani)
[2023-06-02] Accepted libvirt 9.4.0-1 (source) into experimental (Andrea Bolognani)
[2023-05-29] libvirt 9.0.0-4 MIGRATED to testing (Debian testing watch)
[2023-05-26] Accepted libvirt 9.0.0-4 (source) into unstable (Andrea Bolognani)
[2023-05-21] Accepted libvirt 9.3.0-2 (source) into experimental (Andrea Bolognani)
[2023-05-04] Accepted libvirt 9.3.0-1 (source) into experimental (Andrea Bolognani)
[2023-04-23] libvirt 9.0.0-3 MIGRATED to testing (Debian testing watch)
[2023-04-15] Accepted libvirt 9.0.0-3 (source) into unstable (Andrea Bolognani)
[2023-04-11] Accepted libvirt 9.2.0-2 (source) into experimental (Andrea Bolognani)
[2023-04-04] Accepted libvirt 9.2.0-1 (source) into experimental (Andrea Bolognani)
[2023-03-09] libvirt 9.0.0-2 MIGRATED to testing (Debian testing watch)
[2023-03-05] Accepted libvirt 9.1.0-1 (source) into experimental (Andrea Bolognani)
[2023-03-01] Accepted libvirt 7.0.0-3+deb11u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Guido Günther)
[2023-02-26] Accepted libvirt 9.0.0-2 (source) into unstable (Andrea Bolognani)
[2023-01-31] libvirt 9.0.0-1 MIGRATED to testing (Debian testing watch)
[2023-01-28] Accepted libvirt 9.0.0-1 (source) into unstable (Andrea Bolognani)
[2023-01-13] libvirt 8.10.0-3 MIGRATED to testing (Debian testing watch)
[2023-01-04] Accepted libvirt 8.10.0-3 (source) into unstable (Andrea Bolognani)
[2022-12-15] Accepted libvirt 8.10.0-2 (source amd64 all) into experimental (Debian FTP Masters) (signed by: Guido Günther)
[2022-12-11] Accepted libvirt 7.0.0-3+deb11u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Guido Günther)
[2022-12-10] libvirt 8.10.0-1 MIGRATED to testing (Debian testing watch)
[2022-12-07] Accepted libvirt 8.10.0-1 (source) into unstable (Andrea Bolognani)

bugs [bug history graph]

all: 188 192
RC: 0
I&N: 144 148
M&W: 43
F&P: 1
patch: 7

links

homepage
lintian (0, 1)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
l10n (100, 33)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 9.6.0-1ubuntu1
129 bugs (4 patches)
patches for 9.6.0-1ubuntu1