From: Daniel P. Berrangé <berrange@redhat.com>
Date: Thu, 1 Jul 2021 11:38:45 +0000 (+0100)
Subject: Add news item for sVirt CVE fix
X-Git-Tag: v7.5.0~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=96f1bd13a0a6012928bb3b95c0e62e27cf80a5c2;p=thirdparty%2Flibvirt.git

Add news item for sVirt CVE fix

Reviewed-by: Andrea Bolognani <abologna@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---

diff --git a/NEWS.rst b/NEWS.rst
index 935b0d0aad..2fbbd2cd3c 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -11,6 +11,14 @@ For a more fine-grained view, use the `git log`_.
 v7.5.0 (unreleased)
 ===================
 
+* **Security**
+
+  * svirt: fix MCS label generation (CVE-2021-3631)
+
+    A flaw in the way MCS labels were generated could result in a VM's
+    resource not being fully protected from access by another VM were
+    it to be compromised. https://gitlab.com/libvirt/libvirt/-/issues/153
+
 * **Removed features**
 
   * xen: Remove support for Xen < 4.9