[CLSA-2026:1791982489] Fix CVE(s): CVE-2026-18917, CVE-2026-63622
Type:
security
Severity:
Important
Release date:
2026-10-14 12:55:01 UTC
Description:
* SECURITY UPDATE: integer overflow in the virNodeGetFreePages RPC handler - debian/patches/CVE-2026-18917.patch: check for multiplication overflow in remoteDispatchNodeGetFreePages() - CVE-2026-18917 * SECURITY UPDATE: virFileChownFiles() follows symlinks - debian/patches/CVE-2026-63622.patch: use lstat() and lchown() in virFileChownFiles() so symlinks are not followed - CVE-2026-63622 * debian/patches/tests-virnetsockettest-skip-ssh-as-root.patch: skip virnetsockettest SSH cases when the test suite runs as root
CVEs fixed:
Updated packages:
  • libnss-libvirt_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:6cbbcdaf8bc900a589a6cf8ee3fb716218f00fcb
  • libvirt-clients_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:951bcfbe0929d0368fb0600ab7824384288fda44
  • libvirt-daemon_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:d048165c40a6faf3454fb0fd6372f577f6f511e8
  • libvirt-daemon-config-network_7.0.0-3+deb11u4+tuxcare.els1_all.deb
    sha:4d5e82a45cad683a0a9078af770df885168f66d1
  • libvirt-daemon-config-nwfilter_7.0.0-3+deb11u4+tuxcare.els1_all.deb
    sha:63ba309346f8583851bfbe1cf197c56a76668710
  • libvirt-daemon-driver-lxc_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:8df9df236e244fa014d4bf5c45deac1825961748
  • libvirt-daemon-driver-qemu_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:ff2b3515791fb15d2f29869ff7c12e730c6d40e9
  • libvirt-daemon-driver-storage-gluster_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:25b31c7c741880ffca5326acd79d4882737212be
  • libvirt-daemon-driver-storage-iscsi-direct_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:6e9d82b1d3e3fb5a37a23b0a1cd9e3a6edd4ba80
  • libvirt-daemon-driver-storage-rbd_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:f020341e9750846b4e071087f7f36932f8a65d6f
  • libvirt-daemon-driver-storage-zfs_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:51959f2dd75c322f7df0164db6767bf75fb27c9d
  • libvirt-daemon-driver-vbox_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:05e8bc9d36b0100c71d124d0a6950cebd9765e97
  • libvirt-daemon-driver-xen_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:0a3fd79a549c7417ef1cf059fb9f142da868b944
  • libvirt-daemon-system_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:f4b8cbf4943bb62ec2c67e5194b4071a9f26571b
  • libvirt-daemon-system-systemd_7.0.0-3+deb11u4+tuxcare.els1_all.deb
    sha:f1dd5634e63dc3a7242aa824e198f78cb8d956ad
  • libvirt-daemon-system-sysv_7.0.0-3+deb11u4+tuxcare.els1_all.deb
    sha:5b02e78d71fe3aba5d10c0ee3b4e13e0c8e57ab4
  • libvirt-dev_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:0b31577174eb117c7031315b931e4c555001adda
  • libvirt-doc_7.0.0-3+deb11u4+tuxcare.els1_all.deb
    sha:bca7ffc82ba3127a1924991f3abb53533f9c239f
  • libvirt-login-shell_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:bc94d25d40322f9e4b697483e5c25f4198bb101d
  • libvirt-sanlock_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:9d8483dd45385f6ef8f24635d0ba5089d9544f1b
  • libvirt-wireshark_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:ebe3107bbbf61e9eba986eee700b4763690e4edc
  • libvirt0_7.0.0-3+deb11u4+tuxcare.els1_amd64.deb
    sha:76afe6b323ef557c789c807aa1a24ee8c4e1d486
  • libnss-libvirt_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:0562b0f62c9f3bf3f06be862f1a97ca0bd897221
  • libvirt-clients_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:9b14359b715535aaaff13fe4b3f642d271e0a86e
  • libvirt-daemon_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:b9c636cd0762eaf8c2affd7fb9a42cde1018e2b9
  • libvirt-daemon-driver-lxc_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:aa082959c69efaf2dd0a871bac133f7fefaf45a6
  • libvirt-daemon-driver-qemu_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:02d1c7df2ae176ef910ba21cbfd5855b880bfda2
  • libvirt-daemon-driver-storage-gluster_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:26963c882c0ec10426da3379328122a263669f6c
  • libvirt-daemon-driver-storage-iscsi-direct_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:c9415fed9c9866992cd35e1ce5bc610c57495343
  • libvirt-daemon-driver-storage-rbd_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:a6b5fb751221560e0a8b261bf7c1d96048b14c7c
  • libvirt-daemon-driver-storage-zfs_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:76b7b8ee74bb4e4d926dec124f4cd46f101095ee
  • libvirt-daemon-driver-xen_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:d7eb42fc9ac97a807154b8b868bf341de49bbb47
  • libvirt-daemon-system_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:ca2de1229d6dd5351d4682bcee19df4c3ad08588
  • libvirt-dev_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:6d03eedfb769a8d0aadb3663b2c3f84cc4f13ef2
  • libvirt-login-shell_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:fa0ecc26434bbfc333315e3e51648a84b1b631f4
  • libvirt-sanlock_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:0a9bad80426432236a528c1d662d80edc933d177
  • libvirt-wireshark_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:a304a882716acbc7c43b29801da8bd0a2c1b3852
  • libvirt0_7.0.0-3+deb11u4+tuxcare.els1_arm64.deb
    sha:53f1341c3ed3097d6e8ebcc1ddb1fa763fda9cfd
  • libnss-libvirt_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:e2cfb25fba7514e268aa9124dc4352f6fecb8145
  • libvirt-clients_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:c7fd13fa106e0b0979bd99f7af173262f7dfcaac
  • libvirt-daemon_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:998eb49abbd1596a89ce7ac47098c2714ebb9bfd
  • libvirt-daemon-driver-lxc_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:392f0e5dcf61458d417351dba892196bb39eebdc
  • libvirt-daemon-driver-qemu_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:16498dba4cb9da559d425bc762b054fe14790e7b
  • libvirt-daemon-driver-storage-gluster_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:7854ff74dc824180832525c81bdb81f087d3dd3c
  • libvirt-daemon-driver-storage-iscsi-direct_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:cd007dd6f6ed6fa51256f3480def5e3c2094c688
  • libvirt-daemon-driver-storage-rbd_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:091a4bb98d629a50b73ab29172968452869e5459
  • libvirt-daemon-driver-storage-zfs_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:7c8d53cf20c04771552dc111eef5b107bbafd459
  • libvirt-daemon-system_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:77ec7e568795e31fc67bf152a442b20e2cd12582
  • libvirt-dev_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:6d20523453d35c5919d6d40cd4fc1f162fed216c
  • libvirt-login-shell_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:fe67eae7b42dd2d8f3f801379a9682ed82d81432
  • libvirt-sanlock_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:5b147ad49448168dc0d3fbd795508e12996e4cb6
  • libvirt-wireshark_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:31483c1c95542b55d6c3df19d4b91e015e7259ba
  • libvirt0_7.0.0-3+deb11u4+tuxcare.els1_armel.deb
    sha:545ef1fa0f7c715fa914c356b0e618cd0bbd0a19
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.