[El-errata] ELSA-2026-74424 Important: Oracle Linux 9 libvirt security, bug fix, and enhancement update

Mon Oct 5 18:15:13 UTC 2026

Oracle Linux Security Advisory ELSA-2026-74424

http://linux.oracle.com/errata/ELSA-2026-74424.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libvirt-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-client-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-client-qemu-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-common-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-config-network-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-config-nwfilter-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-interface-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-network-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-nodedev-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-nwfilter-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-qemu-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-secret-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-core-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-disk-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-logical-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-mpath-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-rbd-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-driver-storage-scsi-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-kvm-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-lock-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-log-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-plugin-lockd-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-plugin-sanlock-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-daemon-proxy-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-devel-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-docs-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-libs-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-nss-11.10.0-12.7.0.1.el9_8.x86_64.rpm
libvirt-ssh-proxy-11.10.0-12.7.0.1.el9_8.x86_64.rpm

aarch64:
libvirt-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-client-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-client-qemu-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-common-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-config-network-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-config-nwfilter-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-interface-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-network-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-nodedev-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-nwfilter-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-qemu-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-secret-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-core-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-disk-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-iscsi-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-logical-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-mpath-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-rbd-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-driver-storage-scsi-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-kvm-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-lock-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-log-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-plugin-lockd-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-plugin-sanlock-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-daemon-proxy-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-devel-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-docs-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-libs-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-nss-11.10.0-12.7.0.1.el9_8.aarch64.rpm
libvirt-ssh-proxy-11.10.0-12.7.0.1.el9_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libvirt-11.10.0-12.7.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-18917
CVE-2026-63622

Description of changes:

[11.10.0-12.7.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]

[11.10.0-12.7.el9_8]
- remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917)
- qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549)
- qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549)
- qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549)
- qemu: Remove 'allowReboot' field (RHEL-242549)
- qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549)
- qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549)
- qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549)
- processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549)
- conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549)
- qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549)
- qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549)
- qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549)
- Add support for keeping VM running when panic notifier is used (RHEL-242549)

[11.10.0-12.6.el9_8]
- qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986)
- Add guest device info to virDomainGetGuestInfo (RHEL-243306)
- qemu_agent: Introduce guest-get-devices (RHEL-243306)
- qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306)
- qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306)
- virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306)

[11.10.0-12.5.el9_8]
- qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986)
- util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)

[11.10.0-12.4.el9_8]
- distro: Update URL in plans.fmf
- qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018)
- qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018)
- qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018)
- qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018)
- qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018)
- virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018)
- qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018)
- qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018)
- qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018)
- qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018)
- qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018)
- virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018)
- conf: Add fields for recording actually-selected virtio video device (RHEL-186018)
- qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018)
- qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018)
- qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018)
- qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018)
- qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018)
- qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018)
- qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018)