libvirt (8.0.0-1ubuntu7.19) jammy-security; urgency=medium

  * SECURITY UPDATE: Privileged arbitrary command execution in network driver.
    - debian/patches/CVE-2026-61477-pre1.patch: Add virschematest
      infrastructure to skip validating deliberately broken XML files in
      tests/virschematest.c
    - debian/patches/CVE-2026-61477-1.patch: Reject line breaks in DNS TXT
      record values in src/conf/network_conf.c
    - debian/patches/CVE-2026-61477-2.patch: Reject line breaks in DNS SRV
      domain and target in src/conf/network_conf.c
    - debian/patches/CVE-2026-61477-3.patch: Reject line breaks before
      writing dnsmasq DNS config in src/network/bridge_driver.c
    - debian/patches/CVE-2026-61477-4.patch: Add negative tests that feed
      XML numeric character references into the DNS TXT value and SRV
      domain/target attributes.
    - CVE-2026-61477
  * SECURITY UPDATE: Denial of service in XML parsing
    - debian/patches/CVE-2026-61478.patch: Fix crash searching for XML context
      string on errors in src/util/virxml.c
    - CVE-2026-61478
  * SECURITY UPDATE: Privilege escalation in Virtual TPM
    - debian/patches/CVE-2026-63622.patch: Do not follow symlinks in
      src/util/virfile.c
    - CVE-2026-63622
  * SECURITY UPDATE: Information disclosure in image cloning/conversion
    - debian/patches/CVE-2026-63623.patch: Create images with a private umask
      during qemu-img create/convert in src/storage/storage_util.c
    - CVE-2026-63623

 -- Kyle Kernick <kyle.kernick@canonical.com>  Fri, 14 Aug 2026 14:58:44 -0600

libvirt (8.0.0-1ubuntu7.18) jammy; urgency=medium

  * Fix a logic bug to improve performance for some interface types when
    setting ingress-only QoS rules (LP: #2155755)
    - d/p/ubuntu/lp2155755-split-virNetDevBandwidthClear-into-helpers.patch
    - d/p/ubuntu/lp2155755-only-clear-qdisc-for-defined-directions.patch

 -- Wesley Hershberger <wesley.hershberger@canonical.com>  Wed, 24 Jun 2026 13:14:58 -0500

libvirt (8.0.0-1ubuntu7.17) jammy; urgency=medium

  * Fix excessive memory allocation when physical_package_id is large
    (LP: #2153530).
    - d/p/ubuntu/lp2153530-fix-max-socket-calculation.patch: compute socket
      count from unique package IDs instead of the maximum value.

 -- Seyeong Kim <seyeong.kim@canonical.com>  Thu, 21 May 2026 03:50:35 +0000

libvirt (8.0.0-1ubuntu7.16) jammy; urgency=medium

  * Enable MSR kernel module load (LP: #2106791)
    In recent CPUs, some CPU features detection is done by reading
    Model Specific Registers (MSR). To do that, libvirt needs the
    msr kernel module to be loaded.
     - d/p/d/x86-install-modules-load.d-file-to-load-msr-module.patch
     - d/rules : install msr.conf file for libvirt-daemon-system only
       for affected arches (x86)
     - d/libvirt-daemon-system.postinst : trigger the module load

    The conf file is added to libvirt-daemon-system instead of libvirt-common
    in later releases. libvirt-common already breaks/replaces
    libvirt-daemon-system and therefore no further changes to allow upgrades
    are needed.

 -- Hector Cao <hector.cao@canonical.com>  Wed, 04 Feb 2026 11:49:12 +0100

libvirt (8.0.0-1ubuntu7.15) jammy-security; urgency=medium

  * SECURITY UPDATE: memory consumption DoS via XML parsing
    - debian/patches/CVE-2025-12748-pre1.patch: move unlinking corrupt save
      image file to caller in src/qemu/qemu_driver.c,
      src/qemu/qemu_saveimage.c, src/qemu/qemu_saveimage.h,
      src/qemu/qemu_snapshot.c.
    - debian/patches/CVE-2025-12748-pre2.patch: decompose qemuSaveImageOpen
      in src/qemu/qemu_driver.c, src/qemu/qemu_saveimage.c,
      src/qemu/qemu_saveimage.h, src/qemu/qemu_snapshot.c
    - debian/patches/CVE-2025-12748-pre3.patch: check for valid save image
      format when verifying image header in src/qemu/qemu_saveimage.c.
    - debian/patches/CVE-2025-12748-1.patch: add virDomainDefIDsParseString
      in src/conf/domain_conf.c, src/conf/domain_conf.h,
      src/libvirt_private.syms.
    - debian/patches/CVE-2025-12748-2.patch: check ACLs before parsing the
      whole domain XML in src/bhyve/bhyve_driver.c.
    - debian/patches/CVE-2025-12748-3.patch: check ACLs before parsing the
      whole domain XML in src/libxl/libxl_driver.c,
    - debian/patches/CVE-2025-12748-4.patch: check ACLs before parsing the
      whole domain XML in src/lxc/lxc_driver.c.
    - debian/patches/CVE-2025-12748-5.patch: check ACLs before parsing the
      whole domain XML in src/vz/vz_driver.c.
    - debian/patches/CVE-2025-12748-6.patch: check ACLs before parsing the
      whole domain XML in src/ch/ch_driver.c.
    - debian/patches/CVE-2025-12748-7.patch: check ACLs before parsing the
      whole domain XML in src/qemu/qemu_driver.c,
      src/qemu/qemu_migration.c, src/qemu/qemu_migration.h,
      src/qemu/qemu_saveimage.c, src/qemu/qemu_saveimage.h,
      src/qemu/qemu_snapshot.c.
    - debian/patches/CVE-2025-12748-8.patch: fix typo in bhyve driver in
      src/bhyve/bhyve_driver.c.
    - CVE-2025-12748
  * SECURITY UPDATE: incorrect world-readable permissions on snapshots
    - debian/patches/CVE-2025-13193.patch: set umask for qemu-img when
      creating external inactive snapshots in src/qemu/qemu_snapshot.c.
    - CVE-2025-13193

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 08 Dec 2025 13:08:06 -0500

libvirt (8.0.0-1ubuntu7.14) jammy; urgency=medium

  * d/p/u-aa/lp2120278-* : virt-aa-helper: Avoid duplicate when append rule
    (LP: #2120278)

 -- Hector Cao <hector.cao@canonical.com>  Tue, 14 Oct 2025 22:38:25 +0000

libvirt (8.0.0-1ubuntu7.13) jammy; urgency=medium

  * d/p/u/lp-2117467-virdevmapper-device-name-for-targets.patch:
    virdevmapper: Always use device name for finding targets. This ensures
    that all the target devices of a multipath device are added to the
    namespace/cgroup of the guest domain.
    Closes LP: #2117467.

 -- Bhavin Gandhi <bhavin192@geeksocket.in>  Tue, 22 Jul 2025 13:50:20 +0530

libvirt (8.0.0-1ubuntu7.12) jammy; urgency=medium

  * d/p/u/lp2106812-cpu_map-Drop-mpx-from-x86-cpu-models.patch:
    Memory protection extensions (MPX) were introduced in Intel Skylake
    generation CPUs and provided hardware support for bound checking. This
    feature will not be supported in Intel CPUs beginning with the Ice Lake
    generation. Remove missing mpx feature so that libvirts detects correctly
    CPU models (Icelake, ..) instead of the old Blackwell (LP: #2106812)

 -- Hector Cao <hector.cao@canonical.com>  Wed, 23 Apr 2025 03:41:12 +0200

libvirt (8.0.0-1ubuntu7.11) jammy; urgency=medium

  * d/p/u/lp-2077336-drop-tpm-tis-arch-validation-*.patch: Drop tpm-tis
    validation and fix armv7l VM creation. (LP: #2077336)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Wed, 04 Sep 2024 21:27:45 -0400

libvirt (8.0.0-1ubuntu7.10) jammy-security; urgency=medium

  * SECURITY UPDATE: off-by-one in udevListInterfacesByStatus()
    - debian/patches/CVE-2024-1441.patch: properly check count in
      src/interface/interface_backend_udev.c.
    - CVE-2024-1441
  * SECURITY UPDATE: crash in RPC library
    - debian/patches/CVE-2024-2494.patch: check values in
      src/remote/remote_daemon_dispatch.c, src/rpc/gendispatch.pl.
    - CVE-2024-2494
  * SECURITY UPDATE: null pointer deref in udevConnectListAllInterfaces()
    - debian/patches/CVE-2024-2496.patch: fix udev_device_get_sysattr_value
      return value check in src/interface/interface_backend_udev.c.
    - CVE-2024-2496

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 12 Apr 2024 13:48:21 -0400

# For older changelog entries, run 'apt-get changelog libvirt-daemon-system-systemd'
