Oracle alert ELSA-2026-18748 (libvirt)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-18748 Moderate: Oracle Linux 9 libvirt security update | |
| Date: | Thu, 02 Jul 2026 09:57:44 -0700 | |
| Message-ID: | <mailman.11.1783011482.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-18748 http://linux.oracle.com/errata/ELSA-2026-18748.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: libvirt-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-client-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-client-qemu-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-common-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-config-network-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-config-nwfilter-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-interface-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-network-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-nodedev-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-nwfilter-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-qemu-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-secret-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-core-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-disk-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-iscsi-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-logical-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-mpath-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-rbd-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-driver-storage-scsi-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-kvm-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-lock-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-log-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-plugin-lockd-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-plugin-sanlock-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-daemon-proxy-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-devel-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-docs-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-libs-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-nss-11.10.0-12.3.0.1.el9_8.x86_64.rpm libvirt-ssh-proxy-11.10.0-12.3.0.1.el9_8.x86_64.rpm aarch64: libvirt-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-client-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-client-qemu-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-common-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-config-network-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-config-nwfilter-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-interface-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-network-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-nodedev-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-nwfilter-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-qemu-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-secret-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-core-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-disk-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-iscsi-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-logical-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-mpath-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-rbd-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-driver-storage-scsi-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-kvm-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-lock-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-log-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-plugin-lockd-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-plugin-sanlock-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-daemon-proxy-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-devel-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-docs-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-libs-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-nss-11.10.0-12.3.0.1.el9_8.aarch64.rpm libvirt-ssh-proxy-11.10.0-12.3.0.1.el9_8.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/libvirt-11.10.0-1... Related CVEs: CVE-2025-12748 Description of changes: [11.10.0-12.3.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [11.10.0-12.3.el9_8] - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt [11.10.0-12.2.el9_8] - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata