[El-errata] ELSA-2026-58571 Moderate: Oracle Linux 10 qemu-kvm security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-58571

http://linux.oracle.com/errata/ELSA-2026-58571.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
qemu-guest-agent-10.1.0-16.el10_2.5.x86_64.rpm
qemu-img-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-audio-pa-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-block-blkio-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-block-curl-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-block-rbd-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-common-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-core-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-device-display-virtio-vga-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-device-usb-host-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-docs-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-tools-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-ui-egl-headless-10.1.0-16.el10_2.5.x86_64.rpm
qemu-kvm-ui-opengl-10.1.0-16.el10_2.5.x86_64.rpm
qemu-pr-helper-10.1.0-16.el10_2.5.x86_64.rpm

aarch64:
qemu-guest-agent-10.1.0-16.el10_2.5.aarch64.rpm
qemu-img-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-audio-pa-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-block-blkio-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-block-curl-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-block-rbd-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-common-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-core-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-device-usb-host-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-docs-10.1.0-16.el10_2.5.aarch64.rpm
qemu-kvm-tools-10.1.0-16.el10_2.5.aarch64.rpm
qemu-pr-helper-10.1.0-16.el10_2.5.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/qemu-kvm-10.1.0-16.el10_2.5.src.rpm

Related CVEs:

CVE-2026-48914




Description of changes:

[10.1.0-16.el10_2.5]
- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207389]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207389]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207389]
- Resolves: RHEL-207389
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-10.2.z])

[10.1.0-16.el10_2.4]
- kvm-blkdebug-Add-delay-ns-option.patch [RHEL-190702]
- kvm-block-Add-blk_co_start-end_request-and-BDRV_REQ_NO_Q.patch [RHEL-190702]
- kvm-block-Add-flags-parameter-to-blk_-_pdiscard.patch [RHEL-190702]
- kvm-ide-Minimal-fix-for-deadlock-between-TRIM-and-drain.patch [RHEL-190702]
- kvm-ide-Clean-up-ide_trim_co_entry-to-be-idiomatic-corou.patch [RHEL-190702]
- kvm-ide-test-Factor-out-wait_dma_completion.patch [RHEL-190702]
- kvm-ide-test-Test-reset-during-TRIM.patch [RHEL-190702]
- kvm-spec-Install-qtests-into-qemu-kvm-tests-package.patch [RHEL-190702]
- Resolves: RHEL-190702
  (qemu-kvm hung during drain after double pause [rhel-10.2.z])

[10.1.0-16.el10_2.3]
- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184529]
- Resolves: RHEL-184529
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-10.2.z])