libvirt (8.0.0-1ubuntu7.15) jammy-security; urgency=medium

  * SECURITY UPDATE: memory consumption DoS via XML parsing
    - debian/patches/CVE-2025-12748-pre1.patch: move unlinking corrupt save
      image file to caller in src/qemu/qemu_driver.c,
      src/qemu/qemu_saveimage.c, src/qemu/qemu_saveimage.h,
      src/qemu/qemu_snapshot.c.
    - debian/patches/CVE-2025-12748-pre2.patch: decompose qemuSaveImageOpen
      in src/qemu/qemu_driver.c, src/qemu/qemu_saveimage.c,
      src/qemu/qemu_saveimage.h, src/qemu/qemu_snapshot.c
    - debian/patches/CVE-2025-12748-pre3.patch: check for valid save image
      format when verifying image header in src/qemu/qemu_saveimage.c.
    - debian/patches/CVE-2025-12748-1.patch: add virDomainDefIDsParseString
      in src/conf/domain_conf.c, src/conf/domain_conf.h,
      src/libvirt_private.syms.
    - debian/patches/CVE-2025-12748-2.patch: check ACLs before parsing the
      whole domain XML in src/bhyve/bhyve_driver.c.
    - debian/patches/CVE-2025-12748-3.patch: check ACLs before parsing the
      whole domain XML in src/libxl/libxl_driver.c,
    - debian/patches/CVE-2025-12748-4.patch: check ACLs before parsing the
      whole domain XML in src/lxc/lxc_driver.c.
    - debian/patches/CVE-2025-12748-5.patch: check ACLs before parsing the
      whole domain XML in src/vz/vz_driver.c.
    - debian/patches/CVE-2025-12748-6.patch: check ACLs before parsing the
      whole domain XML in src/ch/ch_driver.c.
    - debian/patches/CVE-2025-12748-7.patch: check ACLs before parsing the
      whole domain XML in src/qemu/qemu_driver.c,
      src/qemu/qemu_migration.c, src/qemu/qemu_migration.h,
      src/qemu/qemu_saveimage.c, src/qemu/qemu_saveimage.h,
      src/qemu/qemu_snapshot.c.
    - debian/patches/CVE-2025-12748-8.patch: fix typo in bhyve driver in
      src/bhyve/bhyve_driver.c.
    - CVE-2025-12748
  * SECURITY UPDATE: incorrect world-readable permissions on snapshots
    - debian/patches/CVE-2025-13193.patch: set umask for qemu-img when
      creating external inactive snapshots in src/qemu/qemu_snapshot.c.
    - CVE-2025-13193

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 08 Dec 2025 13:08:06 -0500

libvirt (8.0.0-1ubuntu7.14) jammy; urgency=medium

  * d/p/u-aa/lp2120278-* : virt-aa-helper: Avoid duplicate when append rule
    (LP: #2120278)

 -- Hector Cao <hector.cao@canonical.com>  Tue, 14 Oct 2025 22:38:25 +0000

libvirt (8.0.0-1ubuntu7.13) jammy; urgency=medium

  * d/p/u/lp-2117467-virdevmapper-device-name-for-targets.patch:
    virdevmapper: Always use device name for finding targets. This ensures
    that all the target devices of a multipath device are added to the
    namespace/cgroup of the guest domain.
    Closes LP: #2117467.

 -- Bhavin Gandhi <bhavin192@geeksocket.in>  Tue, 22 Jul 2025 13:50:20 +0530

libvirt (8.0.0-1ubuntu7.12) jammy; urgency=medium

  * d/p/u/lp2106812-cpu_map-Drop-mpx-from-x86-cpu-models.patch:
    Memory protection extensions (MPX) were introduced in Intel Skylake
    generation CPUs and provided hardware support for bound checking. This
    feature will not be supported in Intel CPUs beginning with the Ice Lake
    generation. Remove missing mpx feature so that libvirts detects correctly
    CPU models (Icelake, ..) instead of the old Blackwell (LP: #2106812)

 -- Hector Cao <hector.cao@canonical.com>  Wed, 23 Apr 2025 03:41:12 +0200

libvirt (8.0.0-1ubuntu7.11) jammy; urgency=medium

  * d/p/u/lp-2077336-drop-tpm-tis-arch-validation-*.patch: Drop tpm-tis
    validation and fix armv7l VM creation. (LP: #2077336)

 -- Sergio Durigan Junior <sergio.durigan@canonical.com>  Wed, 04 Sep 2024 21:27:45 -0400

libvirt (8.0.0-1ubuntu7.10) jammy-security; urgency=medium

  * SECURITY UPDATE: off-by-one in udevListInterfacesByStatus()
    - debian/patches/CVE-2024-1441.patch: properly check count in
      src/interface/interface_backend_udev.c.
    - CVE-2024-1441
  * SECURITY UPDATE: crash in RPC library
    - debian/patches/CVE-2024-2494.patch: check values in
      src/remote/remote_daemon_dispatch.c, src/rpc/gendispatch.pl.
    - CVE-2024-2494
  * SECURITY UPDATE: null pointer deref in udevConnectListAllInterfaces()
    - debian/patches/CVE-2024-2496.patch: fix udev_device_get_sysattr_value
      return value check in src/interface/interface_backend_udev.c.
    - CVE-2024-2496

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 12 Apr 2024 13:48:21 -0400

libvirt (8.0.0-1ubuntu7.9) jammy; urgency=medium

  * d/p/u/lp2059272-qemu-Fix-potential-crash-during-driver-cleanup.patch:
    On QEMU driver cleanup, release (stop) the worker thread pool _first_,
    before other data used by possibly running worker threads (LP: #2059272)

 -- Mauricio Faria de Oliveira <mfo@canonical.com>  Wed, 27 Mar 2024 12:47:46 -0300

libvirt (8.0.0-1ubuntu7.8) jammy; urgency=medium

  * d/p/u/lp-2028057-*, d/libvirt0.install: Add named types and definitions,
    along with QEMU alias syncing for Intel SapphireRapids (LP: #2028057)

 -- Lena Voytek <lena.voytek@canonical.com>  Wed, 29 Nov 2023 14:52:52 -0700

libvirt (8.0.0-1ubuntu7.7) jammy; urgency=medium

  * When attempting to launch a VM with SGX enabled, there is an
    error reported that prevents VMs from being launched. Backport fix
    that fixes the main cause of that issue, which is the
    QOM_CPU_PATH macro and qom-get behavior (LP: #1982896).
    - d/p/b/qemu-monitor-json-get-cpux86-data-unexport.patch
    - d/p/b/qemu-process-update-and-verify-cpu-refactor-cleanup.patch
    - d/p/b/qemu-monitor-do-not-hardcode-qom-path-of-first-cpu.patch
    - d/p/b/qemu-domain-store-qompath-in-qemudomainvcpuprivate.patch
    - d/p/b/qemu-process-move-cpu-flag-querying-after-code-probing-cpus.patch
    - d/p/b/qemu-process-move-call-to-qemuprocessrefreshcpu-after-cpu-probe.patch
    - d/p/b/qemu-process-do-not-use-hardcoded-qom-path-for-cpu-for-probing-flags.patch

 -- Michal Maloszewski <michal.maloszewski@canonical.com>  Fri, 04 Aug 2023 10:42:25 +0200

libvirt (8.0.0-1ubuntu7.6) jammy; urgency=medium

  * d/p/u/lp-2024114-Avoid-memleak-in-virNodeDeviceGetPCIVPDDynamicCap.patch:
    fix memory leak PCI devices with VPD data (LP: #2024114) 

 -- Rafael Lopez <rafael.lopez@canonical.com>  Tue, 20 Jun 2023 11:54:15 +1000

# For older changelog entries, run 'apt-get changelog libvirt-doc'
