Skip to content
OpenAdvisories
Medium ALSA-2025:12527 1 CVE

Moderate: virt:rhel and virt-devel:rhel security update

Published Aug 4, 2025 · Updated Oct 29, 2026

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 145

ReleasePackageFixed in
AlmaLinux · 8 hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 hivex-devel 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-appliance 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-bash-completion 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gfs2 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gobject 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gobject-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-inspect-icons 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-java 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-java-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-javadoc 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-man-pages-ja 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-man-pages-uk 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-rescue 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-rsync 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-tools 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-tools-c 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-winsupport 8.10-1.module_el8.10.0+3768+dfd76e10
AlmaLinux · 8 libguestfs-xfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libnbd 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 libnbd-bash-completion 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 libnbd-devel 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 libtpms 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
AlmaLinux · 8 libtpms-devel 0.9.1-3.20211126git1ff6fe1f43.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-client 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-config-network 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-config-nwfilter 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-interface 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-network 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-nodedev 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-nwfilter 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-qemu 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-secret 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-core 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-disk 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-gluster 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi-direct 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-logical 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-mpath 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-rbd 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-driver-storage-scsi 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-daemon-kvm 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libvirt-devel 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-docs 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-libs 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-lock-sanlock 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-nss 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 libvirt-wireshark 8.0.0-23.4.module_el8.10.0+4031+06966654
AlmaLinux · 8 lua-guestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 nbdfuse 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 nbdkit 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-bash-completion 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-basic-filters 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-basic-plugins 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-curl-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-devel 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-example-plugins 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-gzip-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-gzip-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-linuxdisk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-nbd-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-python-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-server 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-ssh-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tar-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tar-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tmpdisk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-vddk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-xz-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 ocaml-libguestfs-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 ocaml-libnbd 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 ocaml-libnbd-devel 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 perl-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 perl-Sys-Guestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 perl-Sys-Virt 8.0.0-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-Sys-Virt 8.0.0-1.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 python3-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 python3-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 python3-libnbd 1.6.0-6.module_el8.10.0+3897+eb84924d
AlmaLinux · 8 python3-libvirt 8.0.0-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 qemu-guest-agent 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-img 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-block-curl 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-block-gluster 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-block-iscsi 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-block-rbd 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-block-ssh 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-common 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-core 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-docs 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-hw-usbredir 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-tests 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-ui-opengl 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 qemu-kvm-ui-spice 15:6.2.0-53.module_el8.10.0+4031+06966654.4
AlmaLinux · 8 ruby-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ruby-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ruby-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 seabios 1.16.0-4.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 seabios-bin 1.16.0-4.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 seavgabios-bin 1.16.0-4.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 SLOF 20210217-2.module_el8.10.0+3768+dfd76e10
AlmaLinux · 8 supermin 5.2.1-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 supermin-devel 5.2.1-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-devel 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-libs 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-tools 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-tools-pkcs11 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 virt-dib 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 virt-v2v 1:1.42.0-22.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 virt-v2v-bash-completion 1:1.42.0-22.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module_el8.9.0+3659+9c8643f3
AlmaLinux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module_el8.9.0+3659+9c8643f3

Vulnerabilities 1

  • Medium 5.9

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-49133
  • report
    https://bugzilla.redhat.com/2371585
  • advisory
    https://errata.almalinux.org/8/ALSA-2025-12527.html