ELSA-2026-18748

ULN >
Oracle Linux Errata repository >
ELSA-2026-18748

ELSA-2026-18748 - libvirt security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-06-30

Description

[11.10.0-12.3.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[11.10.0-12.3.el9_8]
- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt

[11.10.0-12.2.el9_8]
- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)

Related CVEs

CVE-2025-12748

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label

Oracle Linux 9 (aarch64)	libvirt-11.10.0-12.3.0.1.el9_8.src.rpm	9dde41bcf881fb721ccbba6d06ba224c545aa2a706f65a98b69fb01d732e115d	-	ol9_aarch64_appstream
	libvirt-11.10.0-12.3.0.1.el9_8.src.rpm	9dde41bcf881fb721ccbba6d06ba224c545aa2a706f65a98b69fb01d732e115d	-	ol9_aarch64_codeready_builder
	libvirt-11.10.0-12.3.0.1.el9_8.aarch64.rpm	4eaac74e03c0728467f1fe5f1c370d972a380bd91ad89101233bc328811114a2	-	ol9_aarch64_appstream
	libvirt-client-11.10.0-12.3.0.1.el9_8.aarch64.rpm	38d4c0b9e68bed033e169df865fb69d058e3661a5a9517088e54ab22e8f714f8	-	ol9_aarch64_appstream
	libvirt-client-qemu-11.10.0-12.3.0.1.el9_8.aarch64.rpm	02ddd59905a26092f92dde690809089dec5da6ef03a75aeba6c615f43e3204d1	-	ol9_aarch64_appstream
	libvirt-daemon-11.10.0-12.3.0.1.el9_8.aarch64.rpm	29101caa88c85cd060db3d01fec992924733178e47b65bb2c39f9304b46d33b0	-	ol9_aarch64_appstream
	libvirt-daemon-common-11.10.0-12.3.0.1.el9_8.aarch64.rpm	ee5471560d53935e1d0d885df9b22ce120d51fc47623a5da1447844ba6a8b59e	-	ol9_aarch64_appstream
	libvirt-daemon-config-network-11.10.0-12.3.0.1.el9_8.aarch64.rpm	adbcd6fa476660aa07594e527541cb16cda0ad9d43c0350c8dfe6729ad44db07	-	ol9_aarch64_appstream
	libvirt-daemon-config-nwfilter-11.10.0-12.3.0.1.el9_8.aarch64.rpm	715367b0095db332ec10e92593b1230d453fbe8c20788a1c08697cdc805e31bc	-	ol9_aarch64_appstream
	libvirt-daemon-driver-interface-11.10.0-12.3.0.1.el9_8.aarch64.rpm	569cbe7a4bab7e69863512036d2e0a0dc34f526752ac61a7fc64cc3a5a927b47	-	ol9_aarch64_appstream
	libvirt-daemon-driver-network-11.10.0-12.3.0.1.el9_8.aarch64.rpm	641c0a80f5dd9a823aac8d42588f734ef45522764e889101c4d0eaa89cac3183	-	ol9_aarch64_appstream
	libvirt-daemon-driver-nodedev-11.10.0-12.3.0.1.el9_8.aarch64.rpm	a7a81e9c349c4fec0b15dd7941536180452b59b5d2eb059c527def343a84256e	-	ol9_aarch64_appstream
	libvirt-daemon-driver-nwfilter-11.10.0-12.3.0.1.el9_8.aarch64.rpm	37098f98d55a7c60864c83dc7057a4dc991f798a1538af98405dc96dcd3b9ad6	-	ol9_aarch64_appstream
	libvirt-daemon-driver-qemu-11.10.0-12.3.0.1.el9_8.aarch64.rpm	5b704c65d8c108609638b1dfbf8c3026ad6c2bf6bee7e8c7f9ec98bc49284327	-	ol9_aarch64_appstream
	libvirt-daemon-driver-secret-11.10.0-12.3.0.1.el9_8.aarch64.rpm	3a678637c7f9f67beb029d907cad307cb782d0646b4babdea0dbf55100435737	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-11.10.0-12.3.0.1.el9_8.aarch64.rpm	5d0cc2b70089159f98229c7431475715234b210393c7b480446b1c4f928f801b	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-core-11.10.0-12.3.0.1.el9_8.aarch64.rpm	1702ee6ecd13f98d2b962e3c19eae353f372b1721e0b902643601e5e09eb1cfa	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-disk-11.10.0-12.3.0.1.el9_8.aarch64.rpm	44265d8ffb9b791efc90f1cbedee5bbcebddf6fd45e0aa7130cd2519710c0af2	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-iscsi-11.10.0-12.3.0.1.el9_8.aarch64.rpm	353734648e4eb432b3cac387710b2e86390a58db1fb0b5cf85c906d1513d80bf	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-logical-11.10.0-12.3.0.1.el9_8.aarch64.rpm	d724df63ab070dfb3327a97f68bf79b104b10b6051e5991336f9652ac00d8ee0	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-mpath-11.10.0-12.3.0.1.el9_8.aarch64.rpm	ee87e58fa3a00e486fb37eaaa649b09264dc0f9c9062eb7f492300d2409ba3fd	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-rbd-11.10.0-12.3.0.1.el9_8.aarch64.rpm	30ab51673bc97fcfe0908cf4fd0956db93fb0a69dfa825fd8aebd8b93e1e99aa	-	ol9_aarch64_appstream
	libvirt-daemon-driver-storage-scsi-11.10.0-12.3.0.1.el9_8.aarch64.rpm	791de1c9e58d13106e8ac05ef7d351449e34db44b9a8d9ca76f82bb697ebeced	-	ol9_aarch64_appstream
	libvirt-daemon-kvm-11.10.0-12.3.0.1.el9_8.aarch64.rpm	3f7d677f35be5f088730304b55506248744d8e1d29b449f90468ad12d16c700f	-	ol9_aarch64_appstream
	libvirt-daemon-lock-11.10.0-12.3.0.1.el9_8.aarch64.rpm	d274b7c30f272b4bad24470751dc224b94cd2db48d3bcb11a925820ccf931695	-	ol9_aarch64_appstream
	libvirt-daemon-log-11.10.0-12.3.0.1.el9_8.aarch64.rpm	9de5e9de33d7b0df3f3f1932d47a22b2ea3ee80e7a4eeef8eae5b44d5783b2cf	-	ol9_aarch64_appstream
	libvirt-daemon-plugin-lockd-11.10.0-12.3.0.1.el9_8.aarch64.rpm	89a6486391eac8b9a6daf6fb8a0055a940f8ed9ccdb6155744064c4fedd6ee3d	-	ol9_aarch64_appstream
	libvirt-daemon-plugin-sanlock-11.10.0-12.3.0.1.el9_8.aarch64.rpm	68732ac2c30ab34149f605bb9a772f08af9c6a21fa9af28d0de7dd490dc09bb0	-	ol9_aarch64_codeready_builder
	libvirt-daemon-proxy-11.10.0-12.3.0.1.el9_8.aarch64.rpm	fceaea2eda217a9913dffb3c9d02dde3b0f5786751ba344a91e8de039b94f97b	-	ol9_aarch64_appstream
	libvirt-devel-11.10.0-12.3.0.1.el9_8.aarch64.rpm	cd5329d5bd9e279093ca9912d88ea4319e14bd895f19a50462f9acaad84f2a24	-	ol9_aarch64_codeready_builder
	libvirt-docs-11.10.0-12.3.0.1.el9_8.aarch64.rpm	1589f6b54d83766827a588157879958e89c63c937aa33742b6baaba0399cfc75	-	ol9_aarch64_codeready_builder
	libvirt-libs-11.10.0-12.3.0.1.el9_8.aarch64.rpm	b71fcd29090db847a32ebe571d4619f6c6a364a8ad0dec737d42fef0c642b34c	-	ol9_aarch64_appstream
	libvirt-nss-11.10.0-12.3.0.1.el9_8.aarch64.rpm	70de5cf171fc3c88cbbe1d5903aa40282faaf37134a1a32477741d2535a508d0	-	ol9_aarch64_appstream
	libvirt-ssh-proxy-11.10.0-12.3.0.1.el9_8.aarch64.rpm	728c6e509f92f50149545a9203f95d827649d673d39e324459337333d7d2c6c4	-	ol9_aarch64_appstream

Oracle Linux 9 (x86_64)	libvirt-11.10.0-12.3.0.1.el9_8.src.rpm	9dde41bcf881fb721ccbba6d06ba224c545aa2a706f65a98b69fb01d732e115d	-	ol9_x86_64_appstream
	libvirt-11.10.0-12.3.0.1.el9_8.src.rpm	9dde41bcf881fb721ccbba6d06ba224c545aa2a706f65a98b69fb01d732e115d	-	ol9_x86_64_codeready_builder
	libvirt-11.10.0-12.3.0.1.el9_8.x86_64.rpm	58dac8dd0cef1bf768f50983ef55bbae2ffc97b21c17d84224b387746019811d	-	ol9_x86_64_appstream
	libvirt-client-11.10.0-12.3.0.1.el9_8.x86_64.rpm	51a6d6256851eaa17415b69f0b08bfe7df666176d19df54d47e24eca331ff61d	-	ol9_x86_64_appstream
	libvirt-client-qemu-11.10.0-12.3.0.1.el9_8.x86_64.rpm	c46c2d2715a81de7ff5f24a05a6e26789444bf7861bf3acbf9a08df365d4c663	-	ol9_x86_64_appstream
	libvirt-daemon-11.10.0-12.3.0.1.el9_8.x86_64.rpm	8c1ff53c445d77923453392ca329721765ca6730a23ae2df82285850b991dd78	-	ol9_x86_64_appstream
	libvirt-daemon-common-11.10.0-12.3.0.1.el9_8.x86_64.rpm	627c872c44ecadf3de08a1604dece611e843ff2c40ca5b24d20504aa36febfe0	-	ol9_x86_64_appstream
	libvirt-daemon-config-network-11.10.0-12.3.0.1.el9_8.x86_64.rpm	5cd5b4acd371d45f8de91b1b5275c35ccef855bf372332431c30e166932ccbdf	-	ol9_x86_64_appstream
	libvirt-daemon-config-nwfilter-11.10.0-12.3.0.1.el9_8.x86_64.rpm	94461c21a1f8404013d02a769eaecef945084be620dfdfb46eda3126605df242	-	ol9_x86_64_appstream
	libvirt-daemon-driver-interface-11.10.0-12.3.0.1.el9_8.x86_64.rpm	1626e35fcde8a3df74d697835dc67e3a8a66eed9eb7a1a28e963ae9967022ffb	-	ol9_x86_64_appstream
	libvirt-daemon-driver-network-11.10.0-12.3.0.1.el9_8.x86_64.rpm	a77c1c020713da6193c4e7a223ad4e51e7f381cacbbb6381c305ff9228a388c6	-	ol9_x86_64_appstream
	libvirt-daemon-driver-nodedev-11.10.0-12.3.0.1.el9_8.x86_64.rpm	b6c0d0845bdb395e5c61b4f9073415e8c9d86951c03a42bf23d1f06d9a87386e	-	ol9_x86_64_appstream
	libvirt-daemon-driver-nwfilter-11.10.0-12.3.0.1.el9_8.x86_64.rpm	9288025193cceaeee7dafa64b0f396c90ca8d99a50c2f9e147784cbfd7c5cca0	-	ol9_x86_64_appstream
	libvirt-daemon-driver-qemu-11.10.0-12.3.0.1.el9_8.x86_64.rpm	a9d5ef16e2c208541b9da0ba9fa3ecab8cadc0b440ad163bad843ebe9d3b7dfd	-	ol9_x86_64_appstream
	libvirt-daemon-driver-secret-11.10.0-12.3.0.1.el9_8.x86_64.rpm	0f756aea08a100086c3f957377f1465b7fa90a11425db2c84116ade0f83f0088	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-11.10.0-12.3.0.1.el9_8.x86_64.rpm	5f31a749eca96158c4a56dd165bb6cb1bbf73a4e9eb603622c46038c2d019192	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-core-11.10.0-12.3.0.1.el9_8.x86_64.rpm	e16584be29b5d818373ae6bba4dc9e5dc307cf507ff88c361c5c66c1ce57c1cd	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-disk-11.10.0-12.3.0.1.el9_8.x86_64.rpm	d8dab569b12b5b1c07fe79d2b4532b44d9c9fb00eafbe9af1b9fc6a460ed36ab	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-iscsi-11.10.0-12.3.0.1.el9_8.x86_64.rpm	8f14f30e83655693d4153b0474f6aa2b0eca37b585900bd136441f4d85a7dd8c	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-logical-11.10.0-12.3.0.1.el9_8.x86_64.rpm	005910f3b9e73f08b5824d2b798a8bfbf98ef79abe17fc3b2e7ba1e717741ba9	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-mpath-11.10.0-12.3.0.1.el9_8.x86_64.rpm	faaba921fcc396a50b249f01a43b2793498468f0afbc78b574c484570fc9c9e2	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-rbd-11.10.0-12.3.0.1.el9_8.x86_64.rpm	9e3a07b3410e19f02251fcde44d2c7077a5e7f158ec757790ee04fbc0de5ec82	-	ol9_x86_64_appstream
	libvirt-daemon-driver-storage-scsi-11.10.0-12.3.0.1.el9_8.x86_64.rpm	aee53248c2262b3236010ccb63df137dccbf9ef32a1d0b55e1087285368f2636	-	ol9_x86_64_appstream
	libvirt-daemon-kvm-11.10.0-12.3.0.1.el9_8.x86_64.rpm	c51012e7a65edf5f75c8c8d467f75347ab0352012cf8c2b201f67c7f5244e7ce	-	ol9_x86_64_appstream
	libvirt-daemon-lock-11.10.0-12.3.0.1.el9_8.x86_64.rpm	61763100048be5e55741eb36c732011b3d4b16b7bb878ddd5c920d58ed381749	-	ol9_x86_64_appstream
	libvirt-daemon-log-11.10.0-12.3.0.1.el9_8.x86_64.rpm	b43efd01d137ee5c5359d225d31b3da8b0017d74aa19fb46813c9604c450ad17	-	ol9_x86_64_appstream
	libvirt-daemon-plugin-lockd-11.10.0-12.3.0.1.el9_8.x86_64.rpm	3abbbf27c7665883b8a80d728935f90d7ee57c8e20a7cd45f0f29a073aebc85b	-	ol9_x86_64_appstream
	libvirt-daemon-plugin-sanlock-11.10.0-12.3.0.1.el9_8.x86_64.rpm	c27f7bc67f5663e3e9471c6b9813136727577ab1b8efb2c1f02dd0240ea99c25	-	ol9_x86_64_codeready_builder
	libvirt-daemon-proxy-11.10.0-12.3.0.1.el9_8.x86_64.rpm	f2a65e33c4ba811a81a59017ead3dbf8e76913c38a107acef6c2ff7aa4f0d714	-	ol9_x86_64_appstream
	libvirt-devel-11.10.0-12.3.0.1.el9_8.x86_64.rpm	8f723f170538a6a968fd7815bc8a614a3dcc85d8b6239aa08a01d78f108092dd	-	ol9_x86_64_codeready_builder
	libvirt-docs-11.10.0-12.3.0.1.el9_8.x86_64.rpm	59a472bb41cdc2f45f6f32dad74ddcf2bcf0841da0556865787fe52c11e7b041	-	ol9_x86_64_codeready_builder
	libvirt-libs-11.10.0-12.3.0.1.el9_8.x86_64.rpm	bd027ada47fa42c82052b0ccb3b59c7122b20ca19ee46991feb87e96f493a08b	-	ol9_x86_64_appstream
	libvirt-nss-11.10.0-12.3.0.1.el9_8.x86_64.rpm	966a1172edd09ec3ac348d138c7a48b780fdb8d592a11002835251fd08fc34c5	-	ol9_x86_64_appstream
	libvirt-ssh-proxy-11.10.0-12.3.0.1.el9_8.x86_64.rpm	48639cd3b91ea9e82b051c87c62c8aa9d77cef9687d1055a702d74e674bfd642	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

Technical information

Oracle Linux Support

Connect

Contact Us

Global contacts
Oracle 1-800-633-0691