ELBA-2025-23328

ELBA-2025-23328 - qemu-kvm bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2025-12-18

Description

[9.1.0-29.el9_7.3]
- kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120125]
- kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120125]
- Resolves: RHEL-120125
(CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-9.7.z])

[9.1.0-29.el9_7.2]
- kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120125]
- kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120125]
- Resolves: RHEL-120125
(CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-9.7.z])

[9.1.0-29.el9_7.1]
- kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-120502]
- Resolves: RHEL-120502
([rhel9] Backport 'arm/kvm: report registers we failed to set' [rhel-9.7.z])

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-9.1.0-29.el9_7.3.src.rpm	20affb40e97d779bc71aa69d01f57f2cd420acaeaf7555427ffdea46e9314215	-	ol9_aarch64_appstream
	qemu-guest-agent-9.1.0-29.el9_7.3.aarch64.rpm	d51c0d9e88050615957db29d0b37361c2b188f6fe0ae8284b79427245ee1e3ba	-	ol9_aarch64_appstream
	qemu-img-9.1.0-29.el9_7.3.aarch64.rpm	f455571467cd861057a588f1edc84529a3ee0b09766e0305d0dddd0755e77a2f	-	ol9_aarch64_appstream
	qemu-kvm-9.1.0-29.el9_7.3.aarch64.rpm	c24e78116d8fd4ba0e9fe09f7c82fb433ee204bac88164f35970d2272691332c	-	ol9_aarch64_appstream
	qemu-kvm-audio-pa-9.1.0-29.el9_7.3.aarch64.rpm	6ce39d50260b77bb5cd0987b128f5cf2947691d752aed1577f08e179d2d2af7d	-	ol9_aarch64_appstream
	qemu-kvm-block-blkio-9.1.0-29.el9_7.3.aarch64.rpm	aa16ec64b108cb663668aa144e1474708f539c9c21cc8198a5ee4747e0644e41	-	ol9_aarch64_appstream
	qemu-kvm-block-curl-9.1.0-29.el9_7.3.aarch64.rpm	d077230518a7518d720e07d326225a66184840454e2dd805970ad3dbaf33623f	-	ol9_aarch64_appstream
	qemu-kvm-block-rbd-9.1.0-29.el9_7.3.aarch64.rpm	9be0afbe9c4d62c5575737d7e3cd3dce2097650591ff2426b7f9ed3e7c415566	-	ol9_aarch64_appstream
	qemu-kvm-common-9.1.0-29.el9_7.3.aarch64.rpm	30207459d2f252513005786099cc5fc03b676004af065fa155366b519cb0225b	-	ol9_aarch64_appstream
	qemu-kvm-core-9.1.0-29.el9_7.3.aarch64.rpm	f45fb18a8d54dc0b820e7eca80b7a3332e5eb0c35d8a1e221469eeb55ba08931	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-9.1.0-29.el9_7.3.aarch64.rpm	3ab0db88e9b62d8b564dd236c13333ddf4984adbb1ba1520f8afbaafd2728782	-	ol9_aarch64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-9.1.0-29.el9_7.3.aarch64.rpm	43c78c72eac6117bfab2258207b194dc8831fc4540b6c7dcc17497bea89397df	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-host-9.1.0-29.el9_7.3.aarch64.rpm	82f64b8436aecb9f4a7d9a5484ebad1c6fcb4af932d9bfc90270d79f4c132d34	-	ol9_aarch64_appstream
	qemu-kvm-device-usb-redirect-9.1.0-29.el9_7.3.aarch64.rpm	d4fca1b9cce409655e94fbbc8fa855fe21f2bef86302e9f1840b4ddfa6fbb9a8	-	ol9_aarch64_appstream
	qemu-kvm-docs-9.1.0-29.el9_7.3.aarch64.rpm	194f834fd403acc9c5ea6837d0cd3b3faec7867ec1225e1d790cf9fe59367fdd	-	ol9_aarch64_appstream
	qemu-kvm-tools-9.1.0-29.el9_7.3.aarch64.rpm	a6d81f7322555e49ff4701ab04f561497d0810799a2513e9072caa7571740272	-	ol9_aarch64_appstream
	qemu-pr-helper-9.1.0-29.el9_7.3.aarch64.rpm	dca80b094d4669b8a38a78e2716a6184c6ed13c31797fd5e3bcb489f23297d7a	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	qemu-kvm-9.1.0-29.el9_7.3.src.rpm	20affb40e97d779bc71aa69d01f57f2cd420acaeaf7555427ffdea46e9314215	-	ol9_x86_64_appstream
	qemu-guest-agent-9.1.0-29.el9_7.3.x86_64.rpm	c23b260ff8eb82f510e31d738b84b5ce232ff9e08d8f26aae4a019ff5da68503	-	ol9_x86_64_appstream
	qemu-img-9.1.0-29.el9_7.3.x86_64.rpm	795b4f8498ab630f8d55a186d99207c5473c1b1dc6a88a0c7e2f09f80df9b23e	-	ol9_x86_64_appstream
	qemu-kvm-9.1.0-29.el9_7.3.x86_64.rpm	5dc40243745b3a1b268f4a72d327c3e511297c22cc055f8bcc3afcf4a25f134a	-	ol9_x86_64_appstream
	qemu-kvm-audio-pa-9.1.0-29.el9_7.3.x86_64.rpm	aeab411fc70b2fcf4d94baaea89c3f761d1915503d59b107683cb7de0a0f2889	-	ol9_x86_64_appstream
	qemu-kvm-block-blkio-9.1.0-29.el9_7.3.x86_64.rpm	b3f9cf3112aa0bcf3b88afeaa93520e5b868dc02cb4c0c056f571f5751770248	-	ol9_x86_64_appstream
	qemu-kvm-block-curl-9.1.0-29.el9_7.3.x86_64.rpm	b252d9bcb85679221f0f19a8dcf53c03a78c5385035edc6893ca8857709fd1ab	-	ol9_x86_64_appstream
	qemu-kvm-block-rbd-9.1.0-29.el9_7.3.x86_64.rpm	1d90ee210672929511f904a2cfb591f235448ba86064bdf57f7ba58c6588aae0	-	ol9_x86_64_appstream
	qemu-kvm-common-9.1.0-29.el9_7.3.x86_64.rpm	0185868f935524e9cf6a063029e60af6d50fc592dd3705fd143f98481bf4ec57	-	ol9_x86_64_appstream
	qemu-kvm-core-9.1.0-29.el9_7.3.x86_64.rpm	7809fa9d8351a25f99b84788de7f728c39be31289a0a80a6398d1d2293ba4e4c	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-9.1.0-29.el9_7.3.x86_64.rpm	8f1e12034475bf95ba67d779c7d5ebdc77b3a0ef127e27cd1196bc5892b0e3bf	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-gpu-pci-9.1.0-29.el9_7.3.x86_64.rpm	373b5a434fd57524fd1113db7f48b670853600f7a0624b6f900910f8652a3abf	-	ol9_x86_64_appstream
	qemu-kvm-device-display-virtio-vga-9.1.0-29.el9_7.3.x86_64.rpm	697f365d4c6555521362cec31aa1acfe69eecfc126aa3e34fdfc9af74904f497	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-host-9.1.0-29.el9_7.3.x86_64.rpm	6c72fdc50c37dc8ce28c506b76d45118a2cfb5e339642e11e0ab1dd3aaf4f5d4	-	ol9_x86_64_appstream
	qemu-kvm-device-usb-redirect-9.1.0-29.el9_7.3.x86_64.rpm	32e3b984792ac0dfce21c60badaf24cee27e8485615a53079861d09a6a9a6be9	-	ol9_x86_64_appstream
	qemu-kvm-docs-9.1.0-29.el9_7.3.x86_64.rpm	09b59b2d039a43a8a64c95c50e45ae21fa23e0dde5b005f4414b7a15abb1e573	-	ol9_x86_64_appstream
	qemu-kvm-tools-9.1.0-29.el9_7.3.x86_64.rpm	aba970ef70aa47f70700cd0ad35d6d53a360404ec7cdcc2e15d06fe694bc5d1c	-	ol9_x86_64_appstream
	qemu-kvm-ui-egl-headless-9.1.0-29.el9_7.3.x86_64.rpm	9c05b470526074854f4f94b8eb0975d9111aac9f2164e4a8f9ab926925bec534	-	ol9_x86_64_appstream
	qemu-kvm-ui-opengl-9.1.0-29.el9_7.3.x86_64.rpm	8dcb896324ff37da3cc12730498ad53c8ec15add712de4988ddc17f67fb760c9	-	ol9_x86_64_appstream
	qemu-pr-helper-9.1.0-29.el9_7.3.x86_64.rpm	db2e47c73b5e21f81cbcb00ddd3d971543dbd29656eb5cc6ce5a2ad8118ce366	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team