diff --git a/1001-fix-CVE-2024-1441.patch b/1001-fix-CVE-2024-1441.patch new file mode 100644 index 0000000000000000000000000000000000000000..1c45eb9d92f0db6ff349ec17a0070de6c90edd9a --- /dev/null +++ b/1001-fix-CVE-2024-1441.patch @@ -0,0 +1,25 @@ +From b1cdcae3d6c9f5868706f31d81439bc53d62d0ec Mon Sep 17 00:00:00 2001 +From: Chunmei Xu +Date: Fri, 31 May 2024 10:34:26 +0800 +Subject: [PATCH 1/1] fix CVE-2024-1441 + +--- + src/interface/interface_backend_udev.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/interface/interface_backend_udev.c b/src/interface/interface_backend_udev.c +index fb6799e..4091483 100644 +--- a/src/interface/interface_backend_udev.c ++++ b/src/interface/interface_backend_udev.c +@@ -222,7 +222,7 @@ udevListInterfacesByStatus(virConnectPtr conn, + g_autoptr(virInterfaceDef) def = NULL; + + /* Ensure we won't exceed the size of our array */ +- if (count > names_len) ++ if (count >= names_len) + break; + + path = udev_list_entry_get_name(dev_entry); +-- +2.41.0 + diff --git a/libvirt.spec b/libvirt.spec index 99a70799288ff7ffd49c1298f2a13de832a77218..cf05a07ec0345aee82603465bf1d9f29027cad74 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -1,4 +1,4 @@ -%define anolis_release 4 +%define anolis_release 5 %define arches_qemu_kvm x86_64 aarch64 loongarch64 @@ -167,6 +167,9 @@ Patch0002: Implement-the-method-of-getting-host-info-for-loonga.patch Patch0003: Add-test-script-for-loongarch.patch Patch0004: conf-qemu-add-libvirt-support-reuse-id-for-hygon-CSV.patch Patch0005: cpu-Add-new-Dharma-CPU-model.patch + +Patch1001: 1001-fix-CVE-2024-1441.patch + Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release} Requires: libvirt-daemon-config-nwfilter = %{version}-%{release} @@ -2145,6 +2148,9 @@ exit 0 %changelog +* Fri May 31 2024 mgb01105731 - 9.10.0-5 +- fix CVE-2024-1441 + * Tue May 14 2024 Yanjing Zhou - 9.10.0-4 - Add new Dharma CPU model