diff --git a/libvirt.spec b/libvirt.spec index e3f3282c8ffd1d5b7e1ab2df50c2a9f995cd88fd..71e1c55579e526f8b0dffccde6bc8416bf043f75 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -262,7 +262,7 @@ Summary: Library providing a simple virtualization API Name: libvirt Version: 9.10.0 -Release: 8 +Release: 9 License: LGPLv2+ URL: https://libvirt.org/ @@ -314,6 +314,7 @@ Patch0040: Fix-off-by-one-error-in-udevListInterfacesByStatus.patch Patch0041: remote-check-for-negative-array-lengths-before-alloc.patch Patch0042: hotpatch-if-hotpatch_path-not-in-qemu.conf-the-hotpa.patch Patch0043: remote_driver-Restore-special-behavior-of-remoteDoma.patch +Patch0044: remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release} @@ -2605,6 +2606,9 @@ exit 0 %endif %changelog +* SAT May 18 2024 QingXiu 9.10.0-9 +- spec: remote_driver: fix the UAF causing UnicodeDecodeError + * Mon May 06 2024 laokz - 9.10.0-8 - spec: enable libvirt-daemon-kvm sub-package for riscv64 diff --git a/remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch b/remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch new file mode 100644 index 0000000000000000000000000000000000000000..af8043a12125684df6b1298d9510e7e05ddce4f8 --- /dev/null +++ b/remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch @@ -0,0 +1,27 @@ +From 10ec4fa6e9f1e6c72f2d7a1025d1e200ce94f8b0 Mon Sep 17 00:00:00 2001 +From: caozhongwang +Date: Sat, 18 May 2024 17:05:07 +0800 +Subject: [PATCH] remote_driver: fix the UAF causing "UnicodeDecodeError: + 'utf-8' codec can't decode byte XXX". + +Signed-off-by:xiuqing1 +--- + src/remote/remote_driver.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/src/remote/remote_driver.c b/src/remote/remote_driver.c +index a1a0edd7a2..9350e811d6 100644 +--- a/src/remote/remote_driver.c ++++ b/src/remote/remote_driver.c +@@ -1408,7 +1408,7 @@ remoteConnectGetType(virConnectPtr conn) + return NULL; + + /* Stash. */ +- return priv->type = ret.type; ++ return priv->type = g_steal_pointer(&ret.type); + } + + static int remoteConnectIsSecure(virConnectPtr conn) +-- +2.27.0 +