ELSA-2026-18326

ELSA-2026-18326 - libvirt security update

Type:SECURITY
Impact:MODERATE
Release Date:2026-07-21

Description


[11.10.0-12.4.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[11.10.0-12.4.el10_2]
- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-180449)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449)
- qemu_capabilities: Cache expanded CPU (RHEL-180449)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449)
- cpu: Introduce virCPUUpdateFeatures (RHEL-180449)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449)
- distro: Replace old gating with tmt

[11.10.0-12.3.el10_2]
- esx: Track VMs by instanceUuid instead of UUID (RHEL-177479)

[11.10.0-12.2.el10_2]
- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553)
- docs: Clarify host-model description in domain capabilities (RHEL-154553)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912)
- security: Cleanup hostdev label error logic (RHEL-159912)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159175)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159175)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175)
- conf: Introduce domain iommufd element (RHEL-159175)
- qemu: Implement iommufd (RHEL-159175)
- conf: Add iommufd fdgroup support (RHEL-159175)
- qemu: Implement iommufd fdgroup (RHEL-159175)
- tests: Add iommufd fdgroup test (RHEL-159175)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175)


Related CVEs


CVE-2025-12748

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) libvirt-11.10.0-12.4.0.1.el10_2.src.rpm3ef8bb7811947f68016602418bbcd0320065aee0b0cf1f6d4cedfe71438bbf6f-ol10_aarch64_appstream
libvirt-11.10.0-12.4.0.1.el10_2.src.rpm3ef8bb7811947f68016602418bbcd0320065aee0b0cf1f6d4cedfe71438bbf6f-ol10_aarch64_codeready_builder
libvirt-11.10.0-12.4.0.1.el10_2.aarch64.rpm541a4f9172a6aceb5387e084426e05a02be4afb3ac9a6066593933e1174aec9e-ol10_aarch64_appstream
libvirt-client-11.10.0-12.4.0.1.el10_2.aarch64.rpm942c2e5853442aec5fa87161ff7f789b05548cb2b62570b8e5d9f27026315409-ol10_aarch64_appstream
libvirt-client-qemu-11.10.0-12.4.0.1.el10_2.aarch64.rpma6a926a75712bb2ceccc82502b7acb5f64896c6f2eda7bf4f8123a65f68f2988-ol10_aarch64_appstream
libvirt-daemon-11.10.0-12.4.0.1.el10_2.aarch64.rpmf6c8671ff4f5dc76069f1aeae9cc6d5e91549933dfab7a3502c5e3e4d29f0c01-ol10_aarch64_appstream
libvirt-daemon-common-11.10.0-12.4.0.1.el10_2.aarch64.rpm0e3a03cd21873eef1cc21b874f559c3e4864ea6ff917e292545e420f2a335853-ol10_aarch64_appstream
libvirt-daemon-config-network-11.10.0-12.4.0.1.el10_2.aarch64.rpm91cfb57085c1653e2568701eeb8dee34e8c20124a184ed5367b35f66629b8a29-ol10_aarch64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.4.0.1.el10_2.aarch64.rpm6f7115909caf22eca8c33661a99cdde55137bd554a843741f3485d0044e4f85f-ol10_aarch64_appstream
libvirt-daemon-driver-interface-11.10.0-12.4.0.1.el10_2.aarch64.rpm1d882ca9747d31446bbaccf305c2753bee82ec59e999bb48bf020ba02a192510-ol10_aarch64_appstream
libvirt-daemon-driver-network-11.10.0-12.4.0.1.el10_2.aarch64.rpm8d8a2c5b9ee07ef3c357ef0a358cece144bd1ba67f01367d07b8cd96114b6ea5-ol10_aarch64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.4.0.1.el10_2.aarch64.rpm424795a7a655fe8471fed77419a122ad2d8caf4ce34e8dc52fe089580a1a84e2-ol10_aarch64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.4.0.1.el10_2.aarch64.rpmb30457e02b211746af5d6c25e0f7a10513e8cb865b253eb5c250c5fa4f4a0f47-ol10_aarch64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.4.0.1.el10_2.aarch64.rpmf6690f4852d5a6510d9649f4e915731c984dd87f5105a3b5441623737b946bef-ol10_aarch64_appstream
libvirt-daemon-driver-secret-11.10.0-12.4.0.1.el10_2.aarch64.rpmdab46a677ab0de83a623abb1bc026e455ffe8b50e823895f0793d9050374b374-ol10_aarch64_appstream
libvirt-daemon-driver-storage-11.10.0-12.4.0.1.el10_2.aarch64.rpm219e12ac730bc89b362e4437dadb0c4b9690037e927bfaf852034ff3591f9afb-ol10_aarch64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.4.0.1.el10_2.aarch64.rpmcdb460605f6510557dfb2378ba36668e0b1e4b4b913335263d8166804e7207fa-ol10_aarch64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.4.0.1.el10_2.aarch64.rpm6b67f16fd9deb35b6ac5760d06ed9cbb56cd6cdfbb442a20ef34e182817be1a0-ol10_aarch64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.4.0.1.el10_2.aarch64.rpm7f2aeffb24c2227d2a59b08e2d67b8323d003bfce0669e27161ed2550d4c59b1-ol10_aarch64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.4.0.1.el10_2.aarch64.rpmf1590a65edb8d348591a8c096b3e11aecb328e821799c957b29093bdb85fdc4a-ol10_aarch64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.4.0.1.el10_2.aarch64.rpmda460cf6e48f0b9a55dbb27832a58249672bed81315584308d1e6e2bb76121e0-ol10_aarch64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.4.0.1.el10_2.aarch64.rpm9963762102a60564765f97e65b4e20528767e349fe62234e60100e2b36c3edf0-ol10_aarch64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.4.0.1.el10_2.aarch64.rpmfb439c3a42650846dfa5fe7a8753b4d0b9f453858e5ad4703554091350c3e314-ol10_aarch64_appstream
libvirt-daemon-kvm-11.10.0-12.4.0.1.el10_2.aarch64.rpmc69c20ac478002dd9a64f1a294349d0c563c5c6ebbd4db6a3bcf5d155c74078b-ol10_aarch64_appstream
libvirt-daemon-lock-11.10.0-12.4.0.1.el10_2.aarch64.rpmdff76133767ca3b911816380984ecf28b1cef12b481568e9aa96512faf2e1093-ol10_aarch64_appstream
libvirt-daemon-log-11.10.0-12.4.0.1.el10_2.aarch64.rpmb5ff7b5c38e571350e1d636515b318ddd9045ac0495ab83fec84574579c63a1d-ol10_aarch64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.4.0.1.el10_2.aarch64.rpm3712ff8d413434e40c435e9a9a0556485e3ac8a5775cf8f041e22758a1e3089a-ol10_aarch64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.4.0.1.el10_2.aarch64.rpm8d28ea65762d74ede8982d1768be8359bbfaa07b920548188c439228465878eb-ol10_aarch64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.4.0.1.el10_2.aarch64.rpm2f0bc0082b860d3d64530af58a5deaffae96e9c09b23621f09cfff06603d45a2-ol10_aarch64_appstream
libvirt-devel-11.10.0-12.4.0.1.el10_2.aarch64.rpm8b7e230289a86eb888e752bb909aec8c99f246d3869188fbd9e8c01db0807dd8-ol10_aarch64_codeready_builder
libvirt-docs-11.10.0-12.4.0.1.el10_2.aarch64.rpma7964a06e6248175d7bb0042258d8149997b6a5de13709d4d95a326295a0bb6f-ol10_aarch64_codeready_builder
libvirt-libs-11.10.0-12.4.0.1.el10_2.aarch64.rpmbc9ed8efe52da0d2e79674bc7a052f75bf452d41f9ef69f4a24fdcd6b2dbbf21-ol10_aarch64_appstream
libvirt-nss-11.10.0-12.4.0.1.el10_2.aarch64.rpmed9ea67be0d30440228186fcb47cc80f99fc18e82f86a885cdbcfe1c47d67d38-ol10_aarch64_appstream
libvirt-ssh-proxy-11.10.0-12.4.0.1.el10_2.aarch64.rpm1a919054147e8487e0f9bb259a0c6554281e87ca0b12b746302c53876053a274-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) libvirt-11.10.0-12.4.0.1.el10_2.src.rpm3ef8bb7811947f68016602418bbcd0320065aee0b0cf1f6d4cedfe71438bbf6f-ol10_x86_64_appstream
libvirt-11.10.0-12.4.0.1.el10_2.src.rpm3ef8bb7811947f68016602418bbcd0320065aee0b0cf1f6d4cedfe71438bbf6f-ol10_x86_64_codeready_builder
libvirt-11.10.0-12.4.0.1.el10_2.x86_64.rpmea41d6206f75d2f0fb7cf318035d051c5ce6002f6d878c11d93201232c7aa1d8-ol10_x86_64_appstream
libvirt-client-11.10.0-12.4.0.1.el10_2.x86_64.rpmbaa0e94e4095551621a000894cf3a6596d5e1c17235d7bb23582dc3c38339ebd-ol10_x86_64_appstream
libvirt-client-qemu-11.10.0-12.4.0.1.el10_2.x86_64.rpme08247f09e695e40b86e44e441bd4ca699c4463745402a5432afba47e336437d-ol10_x86_64_appstream
libvirt-daemon-11.10.0-12.4.0.1.el10_2.x86_64.rpm4e179b8f429e42419a51d8bb5fcc7dc29a87b11cd1e5b56483070a2d1a9bc1f9-ol10_x86_64_appstream
libvirt-daemon-common-11.10.0-12.4.0.1.el10_2.x86_64.rpme3c57d347547ee42d0ea52bc043938700a2c66f1ec501ca70305dbc05dc98ff5-ol10_x86_64_appstream
libvirt-daemon-config-network-11.10.0-12.4.0.1.el10_2.x86_64.rpm6e19d33f32f1da3b40965b78e02bd539436f5ea761eaa7b12981032f8bfc6707-ol10_x86_64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.4.0.1.el10_2.x86_64.rpm9ced05533c2741b94de3db1786b72af013e200778c8d3eca8c6d44a64b939182-ol10_x86_64_appstream
libvirt-daemon-driver-interface-11.10.0-12.4.0.1.el10_2.x86_64.rpm584fe0c23cc00ba96d538d42d95d15b597bf3c342c8ae6bc91e9b346624a0965-ol10_x86_64_appstream
libvirt-daemon-driver-network-11.10.0-12.4.0.1.el10_2.x86_64.rpm2dd94bd7dcde8eb43221d770b9304be4c042792d79425175b4da5f2aed01a5fe-ol10_x86_64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.4.0.1.el10_2.x86_64.rpm18b3613ccbc6edbd4bbe11935fab27870654c69ba72ad788dacf77f0156ef1f2-ol10_x86_64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.4.0.1.el10_2.x86_64.rpmf57fef376581f042f32cb662cbaff769af7d363a6c428470e7cec13b4343bc57-ol10_x86_64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.4.0.1.el10_2.x86_64.rpma71c5c7b19c07d5cf59fe24e6e3197efd93e4d5a21ddbafe1b101c9d33c02ec9-ol10_x86_64_appstream
libvirt-daemon-driver-secret-11.10.0-12.4.0.1.el10_2.x86_64.rpm23a6ac7812837cf129da91a6ef0f75e2ed392d3cced7381fc822ece462b7032b-ol10_x86_64_appstream
libvirt-daemon-driver-storage-11.10.0-12.4.0.1.el10_2.x86_64.rpm8dc1dfd0992627811062b80a4f2cdc293885ee41dc6e3dce3143544f5b072e3d-ol10_x86_64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.4.0.1.el10_2.x86_64.rpm737b68718d3c485dbe3146e8daf78d92c4db04c1a314393a8100f3b5afdd7f09-ol10_x86_64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.4.0.1.el10_2.x86_64.rpm298fed056b597df0c8841e8e59b256588d2f8b87e093f44f2401231528827f30-ol10_x86_64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.4.0.1.el10_2.x86_64.rpm675b5b5719fdac3563547f75b9225212fce13ef573daa7a6b343e6430bcaa18f-ol10_x86_64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.4.0.1.el10_2.x86_64.rpm3b8a19aa39db599c2b6251097b261dc993efcaca7586b4855755c2f71cdfdf67-ol10_x86_64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.4.0.1.el10_2.x86_64.rpm38f765ee7611001cc7f0a58556663698bd6e353324aa7a2bd07d62cf5c8238fd-ol10_x86_64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.4.0.1.el10_2.x86_64.rpmb250e8ba2b3ce287fbfaccedcc5da5ef7f35627dd421251f43e0f6eb7babe786-ol10_x86_64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.4.0.1.el10_2.x86_64.rpm4f83e7610c57e4a2ace7ff76a563ff8584f9d9c4a2405605eb27c0d37789bcff-ol10_x86_64_appstream
libvirt-daemon-kvm-11.10.0-12.4.0.1.el10_2.x86_64.rpm35997c1584bd7e0db53898c16b0cf048107e917417e1aa2db72955e6c62ec30b-ol10_x86_64_appstream
libvirt-daemon-lock-11.10.0-12.4.0.1.el10_2.x86_64.rpm46bfd07db2b59c4511aeba8628774c420e952604f8893cd423f88c12053c3386-ol10_x86_64_appstream
libvirt-daemon-log-11.10.0-12.4.0.1.el10_2.x86_64.rpmdd2751cea1d8757b314160d544b4a63bad50941be3710a783af23ea4dda6d1e4-ol10_x86_64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.4.0.1.el10_2.x86_64.rpme2ae9cc556cf99b515dc7ec00508eaa4815f811e82b01cd56d291f5e46492ef7-ol10_x86_64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.4.0.1.el10_2.x86_64.rpm3600e18d3b9b29361bd7de2190343a76bb059ee431fc6019fb84ecbc795a590e-ol10_x86_64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.4.0.1.el10_2.x86_64.rpmbafb1421c0440339da3bd4e203c9ee61d72bddf79be9064698326e1e74050fcf-ol10_x86_64_appstream
libvirt-devel-11.10.0-12.4.0.1.el10_2.x86_64.rpm38d19c386506908bc2fe326eb59cbcbe40692922aaa81127da401b91e308f706-ol10_x86_64_codeready_builder
libvirt-docs-11.10.0-12.4.0.1.el10_2.x86_64.rpm66d3c60cbc988f9c1651dd6d1b0cf53001f30c56318f168162db18147f106116-ol10_x86_64_codeready_builder
libvirt-libs-11.10.0-12.4.0.1.el10_2.x86_64.rpmf43b3816c97f00d5c1af097f2daa4035d6f6bd99e571aa4584238bd53f19382c-ol10_x86_64_appstream
libvirt-nss-11.10.0-12.4.0.1.el10_2.x86_64.rpm6284dd5907c7b07c69432d1edfacbcdf085f9bd785d66c3baf8c180578a900f1-ol10_x86_64_appstream
libvirt-ssh-proxy-11.10.0-12.4.0.1.el10_2.x86_64.rpmbe4139984eae6371b80b30345840bc3563c53fec0f585d3c9cc5dc76b70fc523-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete