Skip to content
OpenAdvisories
Medium ELSA-2023-3822 1 CVE

Moderate: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8)

Published Feb 16, 2026 · Updated Feb 16, 2026

Summary

hivex
libguestfs
[1.44.0-9.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.44.0-9]
- Fix CVE-2022-2211 Denial of Service in --key parameter
resolves: rhbz#2101280

[1:1.44.0-8]
- Obsolete old libguestfs-benchmarking subpackage
resolves: rhbz#2091597

[1:1.44.0-7]
- Disable 5-level page tables when using -cpu max
resolves: rhbz#2084566
related: rhbz#2075424

[1:1.44.0-6]
- Backport support for -cpu max to allow RHEL 9 guests to be modified
resolves: rhbz#2075424

[1:1.44.0-5]
- Fix libguestfs failure with qemu 6.2, libvirt 7.10
resolves: rhbz#2035177

[1:1.44.0-4]
- Autodetect backing format for qemu-img create -b
- Move appliance to separate subpackage
- Read rpm database through librpm
resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094

[1.44.0-3.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1:1.40.2-28]
- daemon: lvm: Use lvcreate --yes to avoid interactive prompts
resolves: rhbz#1933640

libguestfs-winsupport
[8.8-1]
- Rebase to ntfs-3g 2022.5.17
- Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
resolves: rhbz#2127240 rhbz#2127248
(also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)

libiscsi
libnbd
[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718

[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]
- New stable release 1.2.2.

[1.2.1-1]
- New stable release 1.2.1.

[1.2.0-1]
- New stable release 1.2.0.

[1.0.3-1]
- New upstream version 1.0.3.
- Contains fix for remote code execution vulnerability.
- Add new libnbd-security(3) man page.

[1.0.2-1]
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.

[1.0.1-2]
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.

[1.0.1-1]
- New stable version 1.0.1.

[1.0.0-1]
- New upstream version 1.0.0.

[0.9.9-2]
- Rebuilt for Python 3.8

[0.9.9-1]
- New upstream version 0.9.9.

[0.9.8-4]
- Fix nbdkit dependencies so we're actually running the tests.
- Add glib2-devel BR so we build the glib main loop example.
- Add upstream patch to fix test error:
nbd_connect_unix: getlogin: No such device or address
- Fix test failure on 32 bit.

[0.9.8-3]
- Bump and rebuild to fix releng brokenness.
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/

[0.9.8-2]
- Rebuilt for Python 3.8

[0.9.8-1]
- New upstream version 0.9.8.
- Package the new nbd_*(3) man pages.

[0.9.7-1]
- New upstream version 0.9.7.
- Add libnbd-ocaml(3) man page.

[0.9.6-2]
- Add all upstream patches since 0.9.6 was released.
- Package the ocaml bindings into a subpackage.

[0.9.6-1]
- New upstream verison 0.9.6.

[0.1.9-1]
- New upstream version 0.1.9.

[0.1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.1.8-1]
- New upstream version 0.1.8.

[0.1.7-1]
- New upstream version 0.1.7.

[0.1.6-1]
- New upstream version 0.1.6.

[0.1.5-1]
- New upstream version 0.1.5.

[0.1.4-1]
- New upstream version 0.1.4.

[0.1.2-2]
- Enable libxml2 for NBD URI support.

[0.1.2-1]
- New upstream version 0.1.2.

[0.1.1-1]
- Fix license in man pages and examples.
- Add nbdsh(1) man page.
- Include the signature and keyring even if validation is disabled.
- Update devel subpackage license.
- Fix old FSF address in Python tests.
- Filter Python provides.
- Remove executable permission on the tar.gz.sig file.
- Initial release.

libtpms
[0.9.1-2.20211126git1ff6fe1f43]
- Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018)
Resolves: rhbz#2173964
Resolves: rhbz#2173970

libvirt
[8.0.0-19.0.2]
- qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage'
- qemu: Make 'struct _qemuMonitorMessage' private
- qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h
- qemu: qemuBlockGetNamedNodeData: Remove pointless error path
- qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter
- qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup [CVE-2023-2700]
- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() [CVE-2023-2700]

-[8.0.0-19.0.1
-- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
-- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)

[8.0.0-19]
- qemu: domain: Fix logic when tainting domain (rhbz#2174447)
- qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447)

[8.0.0-18]
- conf: Make VIR_DOMAIN_NET_TYPE_ETHERNET not share 'host view' (rhbz#2172578)

[8.0.0-17]
- vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2168116)

[8.0.0-16]
- qemu_namespace: Don't leak memory in qemuDomainGetPreservedMounts() (rhbz#2166573)

[8.0.0-15]
- nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011)
- util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011)
- util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011)
- util: make reuse of ccw device address format constant (rhbz#2165011)
- util: refactor ccw address constants into virccw (rhbz#2165011)
- util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011)
- util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011)
- util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011)
- conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011)
- util: add ccw device address parsing into virccw (rhbz#216501

Fixed packages 129

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-devel 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-java 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-tools 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-winsupport 0:8.8-1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libnbd 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libnbd-devel 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libtpms 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+21044+01700444
Oracle Linux · 8 libtpms-devel 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+21044+01700444
Oracle Linux · 8 libvirt 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-client 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-config-network 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-interface 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-network 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-secret 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-daemon-kvm 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 libvirt-devel 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-docs 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-libs 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-lock-sanlock 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-nss 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 libvirt-wireshark 0:8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 lua-guestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdfuse 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-devel 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-server 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-hivex 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-libguestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-libnbd 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ocaml-libnbd-devel 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 python3-libguestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 python3-libnbd 0:1.6.0-5.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 python3-libvirt 0:8.0.0-2.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 qemu-guest-agent 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-img 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-block-curl 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-block-gluster 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-block-iscsi 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-block-rbd 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-block-ssh 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-common 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-core 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-docs 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-hw-usbredir 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-tests 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-ui-opengl 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 qemu-kvm-ui-spice 15:6.2.0-32.module+el8.8.0+21044+01700444
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 seabios 0:1.16.0-3.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 seabios-bin 0:1.16.0-3.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 seavgabios-bin 0:1.16.0-3.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 supermin 0:5.2.1-2.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 supermin-devel 0:5.2.1-2.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 swtpm-devel 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 swtpm-libs 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 swtpm-tools 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 virt-dib 1:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
Oracle Linux · 8 virt-v2v 1:1.42.0-22.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-22.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module+el8.8.0+21112+1cc1a24b
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module+el8.8.0+21112+1cc1a24b

Vulnerabilities 1