Oracle Errata System Oracle Linux 5.11 2026-07-22T10:04:39 Oracle Linux 10 [11.10.0-12.4.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [11.10.0-12.4.el10_2] - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-180449) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-180449) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-180449) - qemu_capabilities: Always sort features in host-model CPU (RHEL-180449) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-180449) - qemu_capabilities: Cache expanded CPU (RHEL-180449) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-180449) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-180449) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-180449) - cpu: Introduce virCPUUpdateFeatures (RHEL-180449) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-180449) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-180449) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-180449) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-180449) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-180449) - distro: Replace old gating with tmt [11.10.0-12.3.el10_2] - esx: Track VMs by instanceUuid instead of UUID (RHEL-177479) [11.10.0-12.2.el10_2] - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154553) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154553) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154553) - docs: Clarify host-model description in domain capabilities (RHEL-154553) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159912) - security: Cleanup hostdev label error logic (RHEL-159912) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159912) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159175) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159175) - conf: Refactor virHostdevIsPCIDevice (RHEL-159175) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159175) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159175) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159175) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159175) - conf: Introduce domain iommufd element (RHEL-159175) - qemu: Implement iommufd (RHEL-159175) - conf: Add iommufd fdgroup support (RHEL-159175) - qemu: Implement iommufd fdgroup (RHEL-159175) - tests: Add iommufd fdgroup test (RHEL-159175) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159175) MODERATE Copyright 2026 Oracle, Inc. CVE-2025-12748 cpe:/a:oracle:linux:10::appstream cpe:/a:oracle:linux:10::codeready_builder