diff --git a/Cargo.lock b/Cargo.lock index d7d6189e5..064c751bc 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -427,7 +427,7 @@ checksum = "3a822ea5bc7590f9d40f1ba12c0dc3c2760f3482c6984db1573ad11031420831" [[package]] name = "cloud-hypervisor" -version = "51.1.0" +version = "51.2.0" dependencies = [ "anyhow", "api_client", diff --git a/cloud-hypervisor/Cargo.toml b/cloud-hypervisor/Cargo.toml index 9d7038a2f..c9113afe2 100644 --- a/cloud-hypervisor/Cargo.toml +++ b/cloud-hypervisor/Cargo.toml @@ -7,7 +7,7 @@ edition = "2024" homepage = "https://github.com/cloud-hypervisor/cloud-hypervisor" license = "Apache-2.0 AND BSD-3-Clause" name = "cloud-hypervisor" -version = "51.1.0" +version = "51.2.0" # Minimum buildable version: # Keep in sync with version in .github/workflows/build.yaml # Policy on MSRV (see #4318): diff --git a/release-notes.md b/release-notes.md index 1f2ff7415..225039cbc 100644 --- a/release-notes.md +++ b/release-notes.md @@ -1,3 +1,4 @@ +- [v51.2](#v512) - [v51.1](#v511) - [v51.0](#v510) - [Security Fixes](#security-fixes) @@ -419,6 +420,12 @@ - [Unit testing](#unit-testing) - [Integration tests parallelization](#integration-tests-parallelization) +# v51.2 + +This is a point release containing security fixes to a use-after-free +vulnerability in the `virtio-block` async I/O completion path +(#8220). Details can be found in GHSA-f47p-p25q-83rh (CVE-2026-45782). + # v51.1 This is a bug fix release. The following issues have been addressed: