From e90b271a19a13fe0dd5daca72e4e43d68d01aea3ee1631e91e7d901c24f523bd Mon Sep 17 00:00:00 2001 From: James Fehlig Date: Thu, 21 Mar 2024 15:35:26 +0000 Subject: [PATCH 1/2] - remote: check for negative array lengths before allocation CVE-2024-2494 bsc#1221815 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=1027 --- libvirt-10.1.0.tar.xz | 4 ++-- libvirt.changes | 7 +++++++ 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/libvirt-10.1.0.tar.xz b/libvirt-10.1.0.tar.xz index 7114ea9..958fd96 100644 --- a/libvirt-10.1.0.tar.xz +++ b/libvirt-10.1.0.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:ade801b96ee8a791c82304146fbb5716df701054649c940054a110cbe418f8e1 -size 9787492 +oid sha256:33d52f37a582cba99fbc3ee995508dae959e4e7db317211a8a1f2ea6551a547c +size 9787404 diff --git a/libvirt.changes b/libvirt.changes index 117f37e..c69abd4 100644 --- a/libvirt.changes +++ b/libvirt.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Mar 21 15:30:22 UTC 2024 - James Fehlig + +- remote: check for negative array lengths before allocation + CVE-2024-2494 + bsc#1221815 + ------------------------------------------------------------------- Tue Mar 5 21:20:53 UTC 2024 - James Fehlig From 4b639d885f627683646c882ff88271ba7964f8f2664c399095e6e294afa28194 Mon Sep 17 00:00:00 2001 From: James Fehlig Date: Thu, 21 Mar 2024 17:47:20 +0000 Subject: [PATCH 2/2] adjust last changelog entry OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=1028 --- libvirt.changes | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/libvirt.changes b/libvirt.changes index c69abd4..b7a9502 100644 --- a/libvirt.changes +++ b/libvirt.changes @@ -1,8 +1,8 @@ ------------------------------------------------------------------- Thu Mar 21 15:30:22 UTC 2024 - James Fehlig -- remote: check for negative array lengths before allocation - CVE-2024-2494 +- CVE-2024-2494: remote: check for negative array lengths before + allocation bsc#1221815 -------------------------------------------------------------------