ELSA-2026-74424

ELSA-2026-74424 - libvirt security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-02

Description


[11.10.0-12.7.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[11.10.0-12.7.el9_8]
- remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917)
- qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549)
- qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549)
- qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549)
- qemu: Remove 'allowReboot' field (RHEL-242549)
- qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549)
- qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549)
- qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549)
- processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549)
- conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549)
- qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549)
- qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549)
- qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549)
- Add support for keeping VM running when panic notifier is used (RHEL-242549)

[11.10.0-12.6.el9_8]
- qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986)
- Add guest device info to virDomainGetGuestInfo (RHEL-243306)
- qemu_agent: Introduce guest-get-devices (RHEL-243306)
- qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306)
- qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306)
- virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306)

[11.10.0-12.5.el9_8]
- qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986)
- util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)

[11.10.0-12.4.el9_8]
- distro: Update URL in plans.fmf
- qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018)
- qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018)
- qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018)
- qemu: validate: Validate VM config with qemuCaps influenced by (RHEL-186018)
- qemu: postparse: Process VM config with qemuCaps influenced by (RHEL-186018)
- virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018)
- qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018)
- qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018)
- qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018)
- qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018)
- qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018)
- virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018)
- conf: Add fields for recording actually-selected virtio video device (RHEL-186018)
- qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018)
- qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018)
- qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018)
- qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018)
- qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018)
- qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018)
- qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018)


Related CVEs


CVE-2026-18917
CVE-2026-63622

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) libvirt-11.10.0-12.7.0.1.el9_8.src.rpmb7250d317e8ba26a2e330eecefb781172b8ec14e597a2ed38e4f71f6ea6c2664-ol9_aarch64_appstream
libvirt-11.10.0-12.7.0.1.el9_8.src.rpmb7250d317e8ba26a2e330eecefb781172b8ec14e597a2ed38e4f71f6ea6c2664-ol9_aarch64_codeready_builder
libvirt-11.10.0-12.7.0.1.el9_8.aarch64.rpmc0418eda33c40bba1c64c1c03b455799e5c2e9949e95011bf82f71a75cf44fdb-ol9_aarch64_appstream
libvirt-client-11.10.0-12.7.0.1.el9_8.aarch64.rpmcd6f8aba05a522b20fb183a37b74b232eacdccfabe700716289eb3f4c16e42a1-ol9_aarch64_appstream
libvirt-client-qemu-11.10.0-12.7.0.1.el9_8.aarch64.rpm217537d912b1440bac4c8e1206584d118ec73db554ee50c81275e9548b259477-ol9_aarch64_appstream
libvirt-daemon-11.10.0-12.7.0.1.el9_8.aarch64.rpmf79c16f4c45bc2aa6b6fe1c6cab6296a49f8d08cc5f9df50f47820f5010aae25-ol9_aarch64_appstream
libvirt-daemon-common-11.10.0-12.7.0.1.el9_8.aarch64.rpmedff41cc5d77c455c70d8fed1cd40b4a9567d701857e50130994fe522ed5c7ea-ol9_aarch64_appstream
libvirt-daemon-config-network-11.10.0-12.7.0.1.el9_8.aarch64.rpm8e9cdbbdf5de21ea6fe518e56ddbe8db81a41dc20d6096bf9a3e4f55b0ab721e-ol9_aarch64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.7.0.1.el9_8.aarch64.rpm928417cb6466b765531fc7412516706fe22912dcaf975e8262aceb321b6cda80-ol9_aarch64_appstream
libvirt-daemon-driver-interface-11.10.0-12.7.0.1.el9_8.aarch64.rpmff4e2cd9cc3775af92b83b25176190c12eef5198a425e9eb7ef419b1b476cea2-ol9_aarch64_appstream
libvirt-daemon-driver-network-11.10.0-12.7.0.1.el9_8.aarch64.rpm65e3a537c9e1b717521247be868198094b3c44186a1fd67dfc5ac168e7ad435e-ol9_aarch64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.7.0.1.el9_8.aarch64.rpm09a2b30428fdea71b82bfe2c0519e1a42380a62f7c0442ec0edfcaaa274e2a15-ol9_aarch64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.7.0.1.el9_8.aarch64.rpm5a67a1bda05aa9350c18d55bfaa4dcd82df21aabbb259a8756846efc8b1ad894-ol9_aarch64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.7.0.1.el9_8.aarch64.rpm0133c2df5ff3d968ec286192e83031e55163cb037e0040dcffe810ac282bc0b3-ol9_aarch64_appstream
libvirt-daemon-driver-secret-11.10.0-12.7.0.1.el9_8.aarch64.rpm97158d70287d8f72969efa84b94660c888c806406a88caa741399f3e99e73263-ol9_aarch64_appstream
libvirt-daemon-driver-storage-11.10.0-12.7.0.1.el9_8.aarch64.rpm0e00c64b5bd3e38ae51340a555a77222d5ecc0c0ef59cff777de1e205c780331-ol9_aarch64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.7.0.1.el9_8.aarch64.rpme8f445e67651de1d275c4fff25757c07a55619930d82d3a3d6a4f9e7063460d3-ol9_aarch64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.7.0.1.el9_8.aarch64.rpme8da52711cb425c7f649e84e762582071ab5fc3dc5921987d1e6391e9d5627b1-ol9_aarch64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.0.1.el9_8.aarch64.rpma1c5949fc5428ab1d439c3dd5d698a6ae4bdaa216cefab2bec0ed897326514de-ol9_aarch64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.7.0.1.el9_8.aarch64.rpm2617e88b3eb5e1d289d4387f78b9c180950ecba607c951483b242d940784c651-ol9_aarch64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.7.0.1.el9_8.aarch64.rpme95bf0000c9942171121e96e5665d9e48d30000da8b2bddaa1d6b6c48f46d1b1-ol9_aarch64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.7.0.1.el9_8.aarch64.rpmb00e22ed78744bd73f7740b678ca8a3894121f0e14dec55958a477dbd33c8865-ol9_aarch64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.7.0.1.el9_8.aarch64.rpm5c8a5955f964832ef8d306bfc11e877fdaf44e85cf0e307d35279f07134f3352-ol9_aarch64_appstream
libvirt-daemon-kvm-11.10.0-12.7.0.1.el9_8.aarch64.rpmb677fa8f46f5846a1c799fd166738293acd5f69f2abb916ed567df4721ff2604-ol9_aarch64_appstream
libvirt-daemon-lock-11.10.0-12.7.0.1.el9_8.aarch64.rpm2b68106ac849123e924cffe6edc00c59a5e2fe6d9a212518b60fc4448b96d9fa-ol9_aarch64_appstream
libvirt-daemon-log-11.10.0-12.7.0.1.el9_8.aarch64.rpmd1864f1b2cd226a06d7a2bd6065c10375a5fe85d2fbddb24529c4309c256ae7d-ol9_aarch64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.7.0.1.el9_8.aarch64.rpmc5720b5399ecbb03144ef070ca483a01f26a3b7b2f94516f679eff3828cbe684-ol9_aarch64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.7.0.1.el9_8.aarch64.rpmc4d1fde6542d835f5d38e98cba2ac2367a312704e23c6be35997542eade670eb-ol9_aarch64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.7.0.1.el9_8.aarch64.rpm7e6e29f7c17949911b536e96df2fdf7c88ba689690a17f8f828462a8137ab828-ol9_aarch64_appstream
libvirt-devel-11.10.0-12.7.0.1.el9_8.aarch64.rpmd14eb0712370c701654dc7b23a62e15feaf170aad9fce549781786610ca9ec20-ol9_aarch64_codeready_builder
libvirt-docs-11.10.0-12.7.0.1.el9_8.aarch64.rpma6feb0d4651d7fbc191033ed68c79e45c4c1257d6ca4848355fa52438f2d6b3d-ol9_aarch64_codeready_builder
libvirt-libs-11.10.0-12.7.0.1.el9_8.aarch64.rpm1f633e1efc0752d48f5041cc5b975d96ad32c9b5c6be49161088c6a82bf3dfdb-ol9_aarch64_appstream
libvirt-nss-11.10.0-12.7.0.1.el9_8.aarch64.rpm6cd12d5dadda77ea28b0afdab9e64e106c12e872fcafc4fd99c2ae0e4159f595-ol9_aarch64_appstream
libvirt-ssh-proxy-11.10.0-12.7.0.1.el9_8.aarch64.rpm22f107254f6bc39f1b0dc523ec13bf33ce756c2648d15cfc65860762d837c3ad-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) libvirt-11.10.0-12.7.0.1.el9_8.src.rpmb7250d317e8ba26a2e330eecefb781172b8ec14e597a2ed38e4f71f6ea6c2664-ol9_x86_64_appstream
libvirt-11.10.0-12.7.0.1.el9_8.src.rpmb7250d317e8ba26a2e330eecefb781172b8ec14e597a2ed38e4f71f6ea6c2664-ol9_x86_64_codeready_builder
libvirt-11.10.0-12.7.0.1.el9_8.x86_64.rpm9ad2c5680ab226e142f79456c44aee4b54a0dd35e75aeec0ecdadd4950f7152d-ol9_x86_64_appstream
libvirt-client-11.10.0-12.7.0.1.el9_8.x86_64.rpm05c335585c4b5f4e808ec2bc6ffdefb710ad0cb5f042e423739b2a0096755fc4-ol9_x86_64_appstream
libvirt-client-qemu-11.10.0-12.7.0.1.el9_8.x86_64.rpm1e5f2250358d800879a0226d1ca7c5fae422bacc4083b022e42015aa6aee92ad-ol9_x86_64_appstream
libvirt-daemon-11.10.0-12.7.0.1.el9_8.x86_64.rpm0ce277524349d2f6dd001d6bf4875a383aec039acad09302b385c6c8fc3cda09-ol9_x86_64_appstream
libvirt-daemon-common-11.10.0-12.7.0.1.el9_8.x86_64.rpme8ae789d07aa63bec1a782ba134f3fcac19f5b5390f6ad2a54ef3c98f1c47051-ol9_x86_64_appstream
libvirt-daemon-config-network-11.10.0-12.7.0.1.el9_8.x86_64.rpme7951f52024a344c74f7432c4604bbee53dc6c3f9ae2b5d7cea92599ac6e4b9e-ol9_x86_64_appstream
libvirt-daemon-config-nwfilter-11.10.0-12.7.0.1.el9_8.x86_64.rpmea501d86c402e5003738bdacd58d39a099ec90f8c2f0846061ca177c27fb2247-ol9_x86_64_appstream
libvirt-daemon-driver-interface-11.10.0-12.7.0.1.el9_8.x86_64.rpmd49704bd6b849fa3ea7923e00cf11542d900764aed94204afd3bf53f787820c9-ol9_x86_64_appstream
libvirt-daemon-driver-network-11.10.0-12.7.0.1.el9_8.x86_64.rpm7ab75a04a40dd4a4814eee4f9d11cdcc5fff6b53a66f01eb6e69fe64ce1c8d8e-ol9_x86_64_appstream
libvirt-daemon-driver-nodedev-11.10.0-12.7.0.1.el9_8.x86_64.rpm92fc25a7e84fd740649fa4e1c4ac208ac1fba950cebc151d0b40b347b577de5b-ol9_x86_64_appstream
libvirt-daemon-driver-nwfilter-11.10.0-12.7.0.1.el9_8.x86_64.rpm8622eec7ccac84cf0423b519b2a095587a6f4001e0bc922fbf7611072099c6e3-ol9_x86_64_appstream
libvirt-daemon-driver-qemu-11.10.0-12.7.0.1.el9_8.x86_64.rpma021fdefff31a4b5f48ff9db63d02efbd9174124dc1cb78340341aab51e549f4-ol9_x86_64_appstream
libvirt-daemon-driver-secret-11.10.0-12.7.0.1.el9_8.x86_64.rpmb98a50eaff4374cce22115442650c25e7758b6cfb604224976f5e62fd8a291f5-ol9_x86_64_appstream
libvirt-daemon-driver-storage-11.10.0-12.7.0.1.el9_8.x86_64.rpmdd54cbd4591f6f2577828954d25b91afb9f92cfe80bb7f376b725a3f093e4ef6-ol9_x86_64_appstream
libvirt-daemon-driver-storage-core-11.10.0-12.7.0.1.el9_8.x86_64.rpmbe54dc0d08e0809280aed44beb8a6fc2e424b58e889c0e26606a26d78a3ac0ac-ol9_x86_64_appstream
libvirt-daemon-driver-storage-disk-11.10.0-12.7.0.1.el9_8.x86_64.rpma372eaea80fc82b61085b32f070e5f0f6ff59beb838401173c4fc935e975e4f8-ol9_x86_64_appstream
libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.0.1.el9_8.x86_64.rpm3bd2e7daf264d3e88a521e438b40a43701e4705cb9050c36709411b1a31ed804-ol9_x86_64_appstream
libvirt-daemon-driver-storage-logical-11.10.0-12.7.0.1.el9_8.x86_64.rpm7461584e3650f4c349307cbdd2fa1e69de3f8944b8c6d79165373e9848866039-ol9_x86_64_appstream
libvirt-daemon-driver-storage-mpath-11.10.0-12.7.0.1.el9_8.x86_64.rpmcf341953a404a972eb6e1dc914b58dd6cbca8929eaca6a6f24078d40dbef602d-ol9_x86_64_appstream
libvirt-daemon-driver-storage-rbd-11.10.0-12.7.0.1.el9_8.x86_64.rpm4399eca21ea8ec26dea6195a7124c7496d62de66e26c5ebda5dd821a16083aaf-ol9_x86_64_appstream
libvirt-daemon-driver-storage-scsi-11.10.0-12.7.0.1.el9_8.x86_64.rpmb19e69e2b08048e6f808f91b59c180adab58705b1491fbfbb8ab334075d8bf78-ol9_x86_64_appstream
libvirt-daemon-kvm-11.10.0-12.7.0.1.el9_8.x86_64.rpm969aa85bee2597991e473b00c615d1a49e8941b75723b89684fe86434652621d-ol9_x86_64_appstream
libvirt-daemon-lock-11.10.0-12.7.0.1.el9_8.x86_64.rpmc5e3d86e47587ac70794ccd864a12c5db7759b343525372f94a02046c0cf67e5-ol9_x86_64_appstream
libvirt-daemon-log-11.10.0-12.7.0.1.el9_8.x86_64.rpmd4387ac33e9b3a0b61ccd054ae52bb58f2f67411cfbebe1a6ceac7a51cee8fbd-ol9_x86_64_appstream
libvirt-daemon-plugin-lockd-11.10.0-12.7.0.1.el9_8.x86_64.rpmb0f21f96c38729a33ec1080f2aca6a54cc0a27866acf40cc56b7dd41364fc16b-ol9_x86_64_appstream
libvirt-daemon-plugin-sanlock-11.10.0-12.7.0.1.el9_8.x86_64.rpmc692294546ca4e08ecaef8f637a554b8a81c4b25684e5ba63fe711f996fbc83a-ol9_x86_64_codeready_builder
libvirt-daemon-proxy-11.10.0-12.7.0.1.el9_8.x86_64.rpm1dbc46c979c241216f9831984951e16eca146a72ec181fad4f3fddf59c7a00b1-ol9_x86_64_appstream
libvirt-devel-11.10.0-12.7.0.1.el9_8.x86_64.rpmd85ee650496a95cd90cd430a012cf77595b8270b962a0b0460296561a1e6be42-ol9_x86_64_codeready_builder
libvirt-docs-11.10.0-12.7.0.1.el9_8.x86_64.rpmc21f8a5fbc9237141b92c58d232ac4ab8f9d14d32620ced20243337f2463c174-ol9_x86_64_codeready_builder
libvirt-libs-11.10.0-12.7.0.1.el9_8.x86_64.rpm337337bc55408f9c0455ef89128721cb8319506268846c19725bfd908f43df9f-ol9_x86_64_appstream
libvirt-nss-11.10.0-12.7.0.1.el9_8.x86_64.rpm56517948d958986652f4bc0beac5d5be3480c1d3909993ffb1f3038e5a1a384b-ol9_x86_64_appstream
libvirt-ssh-proxy-11.10.0-12.7.0.1.el9_8.x86_64.rpm25ebdf2614a9dd16e6ca97c04388d4170b87bb80bd5cb520c2fac16908933051-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete