ELSA-2026-75583

ELSA-2026-75583 - libvirt security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-05

Description


[11.10.0-12.9.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[11.10.0-12.9.el10_2]
- remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917)
- qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547)
- qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547)
- qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547)
- qemu: Remove 'allowReboot' field (RHEL-242547)
- qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547)
- qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547)
- qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547)
- processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547)
- conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547)
- qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547)
- qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547)
- qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547)
- Add support for keeping VM running when panic notifier is used (RHEL-242547)

[11.10.0-12.8.el10_2]
- qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982)
- Add guest device info to virDomainGetGuestInfo (RHEL-243305)
- qemu_agent: Introduce guest-get-devices (RHEL-243305)
- qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305)
- qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305)
- virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305)

[11.10.0-12.7.el10_2]
- qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982)
- util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)

[11.10.0-12.6.el10_2]
- qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019)
- qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019)
- qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019)
- qemu: validate: Validate VM config with qemuCaps influenced by (RHEL-186019)
- qemu: postparse: Process VM config with qemuCaps influenced by (RHEL-186019)
- virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019)
- qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019)
- qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019)
- qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019)
- qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019)
- qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019)
- virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019)
- conf: Add fields for recording actually-selected virtio video device (RHEL-186019)
- qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019)
- qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019)
- qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019)
- qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019)
- qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019)
- qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019)
- qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019)

[11.10.0-12.5.el10_2]
- vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267)
- vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267)


Related CVEs


CVE-2026-18917
CVE-2026-63622

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) libvirt-11.10.0-12.9.0.1.el10_2.src.rpm8ff9e4b07fedd4ccc008c16d55cd52421b8c8450f0702e7836883206813bf368-ol10_aarch64_appstream
libvirt-11.10.0-12.9.0.1.el10_2.src.rpm8ff9e4b07fedd4ccc008c16d55cd52421b8c8450f0702e7836883206813bf368-ol10_aarch64_codeready_builder
libvirt-11.10.0-12.9.0.1.el10_2.aarch64.rpm9241593b32cc334e87e55d7254ba59a231359627fea7c9bc31256458c9dd8191-ol10_aarch64_appstream
libvirt-client-11.10.0-12.9.0.1.el10_2.aarch64.rpm14b7cdd556d500bf5e7dec8f85dfaea847f0791d098f1af3c4b0900dc826482e-ol10_aarch64_appstream
libvirt-client-qemu-11.10.0-12.9.0.1.el10_2.aarch64.rpmf2df004da6394d53cc928dfc37a00ce19a6deb8190e1b3b4271c35fce97040a4-ol10_aarch64_appstream
libvirt-daemon-11.10.0-12.9.0.1.el10_2.aarch64.rpm364455e1517b4125613cce305ffe496d206b5668c99941fde5b08dd0ccd77417-ol10_aarch64_appstream
libvirt-daemon-common-11.10.0-12.9.0.1.el10_2.aarch64.rpm1e8ed008a2a1a541fb9602b46837ff586299ed50896da9d66917bfe26e6b4959-ol10_aarch64_appstream
libvirt-daemon-config-network-11.10.0-12.9.0.1.el10_2.aarch64.rpmb918107ed44b29c88584fa64124bbfccad8e41286b8d4a89d0b19fd8fb6d5412-ol10_aarch64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.9.0.1.el10_2.aarch64.rpm3c17b2329b6e74942a140edb46fd523cc5bff52bc2e81b610074791ae563ee1b-ol10_aarch64_appstream
libvirt-daemon-driver-interface-11.10.0-12.9.0.1.el10_2.aarch64.rpm0772b9d047c03742d5abf92568f12a6da32c3f9055d36b11f88210f50abd740c-ol10_aarch64_appstream
libvirt-daemon-driver-network-11.10.0-12.9.0.1.el10_2.aarch64.rpm0583164ece20ad438174e96b084f421310019a57df564997ce91b6baaa509179-ol10_aarch64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.9.0.1.el10_2.aarch64.rpme6d713a031033ebe2627a179c5a6932a5859090e34cdb12d15db7b021c571f7f-ol10_aarch64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.9.0.1.el10_2.aarch64.rpm6549866efdbcfa57393ff708f70f420835b2b3fd235c15989a6ee678301655d8-ol10_aarch64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.9.0.1.el10_2.aarch64.rpme5d630e0db5554422cc92eb6be1eeab3df62b90890660d2cba3ea96d3588130d-ol10_aarch64_appstream
libvirt-daemon-driver-secret-11.10.0-12.9.0.1.el10_2.aarch64.rpmbf9b3008c85b49e4fce662c75bb8dd59cbbe88020aec8880638c502224f431ac-ol10_aarch64_appstream
libvirt-daemon-driver-storage-11.10.0-12.9.0.1.el10_2.aarch64.rpm67e199c851660ab80fa12afd60bda1c065b5e02bce5798c403b6c2916b2a076c-ol10_aarch64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.9.0.1.el10_2.aarch64.rpmcb8ed7560c01a5812fdedf7ae08af55d843d1bf0ed130d4868e25924076ce33f-ol10_aarch64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.9.0.1.el10_2.aarch64.rpmb9158d24ba12c87521c314ce94f05d655ac7e2cf66956fb14a558935f12a31c0-ol10_aarch64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.9.0.1.el10_2.aarch64.rpmeb893ac7e48fd63747a372f69afe9f7eb5d7f1fb04593d1503812389f047b916-ol10_aarch64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.9.0.1.el10_2.aarch64.rpma92e8f94f7298610eacf58909ff46b29b52fdbc50274dec0aa55cb0d7e62ee64-ol10_aarch64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.9.0.1.el10_2.aarch64.rpm284bc4c26c5cdd3f4a5af840ebd8a40ecfa6a1cf46b0e935bf765e67645f113f-ol10_aarch64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.9.0.1.el10_2.aarch64.rpm75bed52046e7df25b0a27cff79747170303665019d5cfea641a84071b875289e-ol10_aarch64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.9.0.1.el10_2.aarch64.rpmd8f2114922e6238bc5f3f7c2e1f27fc7369d4962b9b48de706838c9070e1e0b8-ol10_aarch64_appstream
libvirt-daemon-kvm-11.10.0-12.9.0.1.el10_2.aarch64.rpm381483e4943935cf4a238369f05f25db32ca10c43734072ac6d2b36eafb74d0e-ol10_aarch64_appstream
libvirt-daemon-lock-11.10.0-12.9.0.1.el10_2.aarch64.rpmb27ec8f0f2cd1d13fb9c55b5ff7017c6b279b097bf23cc12965f023c0f503812-ol10_aarch64_appstream
libvirt-daemon-log-11.10.0-12.9.0.1.el10_2.aarch64.rpm11afeadddce967eb96784284e0f1cb4cc432fffaed4f8fffd163228a8f6ba55e-ol10_aarch64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.9.0.1.el10_2.aarch64.rpm8c89168b2ab7422fa1b9d673e74acaa001e4f3625eb972ec84ae088c3bd08970-ol10_aarch64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.9.0.1.el10_2.aarch64.rpmb0058d6df825565ae8eddc52b2801c77361fb12f1596b63d235d0245bcb5ac87-ol10_aarch64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.9.0.1.el10_2.aarch64.rpmf6efbfae23212977ca63e485b41c2e5cbeb0d120cfa9eb91161e2fdc34d80014-ol10_aarch64_appstream
libvirt-devel-11.10.0-12.9.0.1.el10_2.aarch64.rpm40b1e951854d03feabf90a4e1ef0e4bdb8ae96868f6589ad3d71af5d181ced0c-ol10_aarch64_codeready_builder
libvirt-docs-11.10.0-12.9.0.1.el10_2.aarch64.rpm18bb401f89fc75535dadab669dfd97b3876ab36875a17302c93d206f2d6d0744-ol10_aarch64_codeready_builder
libvirt-libs-11.10.0-12.9.0.1.el10_2.aarch64.rpmbb6d387136896673981d6ec01979fd227a118c7869d5bac4cac71aa354c70aca-ol10_aarch64_appstream
libvirt-nss-11.10.0-12.9.0.1.el10_2.aarch64.rpm888200bc297019f67373bad259bf3266d239530ef34fe781e9535c17e809d1d0-ol10_aarch64_appstream
libvirt-ssh-proxy-11.10.0-12.9.0.1.el10_2.aarch64.rpmb1558049c209ff9aaffd50ea356ec4372b2ea31f77995a658a81eb6764a363f5-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) libvirt-11.10.0-12.9.0.1.el10_2.src.rpm8ff9e4b07fedd4ccc008c16d55cd52421b8c8450f0702e7836883206813bf368-ol10_x86_64_appstream
libvirt-11.10.0-12.9.0.1.el10_2.src.rpm8ff9e4b07fedd4ccc008c16d55cd52421b8c8450f0702e7836883206813bf368-ol10_x86_64_codeready_builder
libvirt-11.10.0-12.9.0.1.el10_2.x86_64.rpmed34858c706ce7a2d25083d71a2158aa17500e4f4516b8ea79eca0e14b75d69e-ol10_x86_64_appstream
libvirt-client-11.10.0-12.9.0.1.el10_2.x86_64.rpmd2d97296eaf6ac0c600b08f0c596bd609dd7193ffea382b938f8f42a975ca700-ol10_x86_64_appstream
libvirt-client-qemu-11.10.0-12.9.0.1.el10_2.x86_64.rpmcb76e94dbf89d278b1e96c00b9c0acce60671208eff37ef42c0ee5d6bcdadfed-ol10_x86_64_appstream
libvirt-daemon-11.10.0-12.9.0.1.el10_2.x86_64.rpmb095a93d9ac8834baca26db61af7d002905f3ffbbc319eb6bba3d9f70b665f60-ol10_x86_64_appstream
libvirt-daemon-common-11.10.0-12.9.0.1.el10_2.x86_64.rpmef4cb50b9cbed115e4ce417f27be5e879f2e20cd7180ddff96c33d8b3107deef-ol10_x86_64_appstream
libvirt-daemon-config-network-11.10.0-12.9.0.1.el10_2.x86_64.rpm5f3c24a9f06be753a3636a54de4492dea708b1c038e8cfa49d7cbb7f0596fee2-ol10_x86_64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.9.0.1.el10_2.x86_64.rpm30ddec3c630bee001b5210c82973e9d5fc7e2ea398b1549333403596142c011e-ol10_x86_64_appstream
libvirt-daemon-driver-interface-11.10.0-12.9.0.1.el10_2.x86_64.rpm4cc82bade4a164a463ce2a08d3f9c785bb8c3809382474ff16caeabd54fb75fa-ol10_x86_64_appstream
libvirt-daemon-driver-network-11.10.0-12.9.0.1.el10_2.x86_64.rpm8528478868010daf0044103fd1a70db9ed02f991b24c38db1cde1c2cbef34513-ol10_x86_64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.9.0.1.el10_2.x86_64.rpm050cc852642f210ec326df51639e9e0424e37becb7fa101806b74680850893ef-ol10_x86_64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.9.0.1.el10_2.x86_64.rpm93a2ab4f26e91121136b9196cc98b714244c7c091de57d3e7b742fe855fe82ab-ol10_x86_64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.9.0.1.el10_2.x86_64.rpmcc5243167d095c8688d94133edf71c8060bfc809c433950904cbe667f46ce988-ol10_x86_64_appstream
libvirt-daemon-driver-secret-11.10.0-12.9.0.1.el10_2.x86_64.rpm6c9ce4d764bac9ebba9dada500b32ed3b9706cf99e71b6a3383e31011680fb2c-ol10_x86_64_appstream
libvirt-daemon-driver-storage-11.10.0-12.9.0.1.el10_2.x86_64.rpmc18435346eca9e8c4d7a191f7e3b623a5699b75f4f7639a51c756f2c8a6984e2-ol10_x86_64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.9.0.1.el10_2.x86_64.rpm76ab4c3a207f6b2a9da58d5e42025fa7c8e0f838e03cae47f5a14712f7d16ef5-ol10_x86_64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.9.0.1.el10_2.x86_64.rpmad2f61e8233fc0e720be609d754ab771455121d4ec237f676503df8ad2f8f165-ol10_x86_64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.9.0.1.el10_2.x86_64.rpmc757691f6884b6fc6cf96e000acf7939901483704af88bff704848bb87c8bb0c-ol10_x86_64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.9.0.1.el10_2.x86_64.rpmb8428697c27e951cb8363c1469d35c8b5da2214b47cef717536b0efa241bfac2-ol10_x86_64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.9.0.1.el10_2.x86_64.rpm5c2dc2ee113784bef700b859cce60854ccb7e5e0f3b115627d43f70d2ccd6da8-ol10_x86_64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.9.0.1.el10_2.x86_64.rpma6e69a1f46a4657c63cc354c5f9c0cdd1dbf156bc802e4c8f8d9fcef87d5d5f1-ol10_x86_64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.9.0.1.el10_2.x86_64.rpmf0411747e9b3de97db9ebb93a52fe151dc56a59c636b0aa5e6285f338ed8df8a-ol10_x86_64_appstream
libvirt-daemon-kvm-11.10.0-12.9.0.1.el10_2.x86_64.rpmbc7a2dd8f30c8f2ff1afb24f477bb999c24f677353af535b785baaeff327ce3f-ol10_x86_64_appstream
libvirt-daemon-lock-11.10.0-12.9.0.1.el10_2.x86_64.rpm0832aa8b99c017186a84c63b803cdd26c0e1b0f29bb4ccc4e5a444114722909b-ol10_x86_64_appstream
libvirt-daemon-log-11.10.0-12.9.0.1.el10_2.x86_64.rpm379276c3a63f7c9fb1f4cd15c7f21995aafd94381b14fd59b81e8a2192f6258d-ol10_x86_64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.9.0.1.el10_2.x86_64.rpm59316f88fe21093578a0e82c9f247ad59e48d1ceaa0dab262fdb6aba71889fca-ol10_x86_64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.9.0.1.el10_2.x86_64.rpmf0c9d1301e268af574b9e4910da02eaa6b003ba7a00c39b00c848b0ff2108736-ol10_x86_64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.9.0.1.el10_2.x86_64.rpm00c1a582e8e7b0fe912458a9dd3bf55a936afbd1fa63faf2b2e27c0d806eef14-ol10_x86_64_appstream
libvirt-devel-11.10.0-12.9.0.1.el10_2.x86_64.rpm30533bef68af4ef67429f88ed5a6d8b07fb687cb9c749fb85417dd160d1284c9-ol10_x86_64_codeready_builder
libvirt-docs-11.10.0-12.9.0.1.el10_2.x86_64.rpm30b9b214e6712fcbbcdef829d63f8ab423fd1a63fddd45b2a0f1a6974171c044-ol10_x86_64_codeready_builder
libvirt-libs-11.10.0-12.9.0.1.el10_2.x86_64.rpm5c0265457770b8081aa0635dd0c229d0b44c3db16b8339246bf4b411cd8e0c40-ol10_x86_64_appstream
libvirt-nss-11.10.0-12.9.0.1.el10_2.x86_64.rpmfa7dfc5081df7182d398eecebeec97cc52859ce04f81fcbd1966bcd3cf350d56-ol10_x86_64_appstream
libvirt-ssh-proxy-11.10.0-12.9.0.1.el10_2.x86_64.rpmfc1562f99c7f438aceef290455e636362e61f5cf5c9fa41bb4878aefa40fce0d-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete