Skip to content
OpenAdvisories
Medium ELSA-2025-12527 1 CVE

Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

Published Aug 4, 2025 · Updated Aug 4, 2025

Summary

hivex
libguestfs
[1.44.0-9.0.2]
- libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755]

libguestfs-winsupport
[8.10-1]
- Rebase to ntfs-3g 2022.10.3
- Fixes: CVE-2022-40284
- resolves: rhbz#2236373

libiscsi
libnbd
[1.6.0-6.el8]
- Fix CVE-2024-7383 NBD server improper certificate validation
resolves: RHEL-52728

libtpms
libvirt
[8.0.0-23.4.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)

libvirt-dbus
[1.3.0-2.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

libvirt-python
nbdkit
netcf
perl-Sys-Virt
qemu-kvm
[6.2.0-53.el8.4]
- kvm-target-s390x-report-deprecated-props-in-cpu-model-ex.patch [RHEL-88701]
- kvm-target-s390x-flag-te-and-cte-as-deprecated.patch [RHEL-88701]
- kvm-target-s390x-filter-deprecated-properties-based-on-m.patch [RHEL-88701]
- kvm-target-s390x-move-deprecated-props-to-CpuModelExpans.patch [RHEL-88701]
- kvm-redhat-Adjust-indentation-in-qapi-machine-target.jso.patch [RHEL-88701]
- Resolves: RHEL-88701
([RHEL 8.10 qemu] KVM - Live migration of guest fails from z16-z17 [rhel-8.10.z])

seabios
sgabios
supermin
[5.2.1-2.0.1.el8]
- Rebuild [Orabug: 35720304]

Fixed packages 129

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-java 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-tools 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-winsupport 0:8.10-1.module+el8.10.0+90308+7c659588
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libnbd 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 libnbd-devel 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 libtpms 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libtpms-devel 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-client 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-config-network 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-interface 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-network 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-secret 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-daemon-kvm 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libvirt-devel 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-docs 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-libs 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-lock-sanlock 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-nss 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 libvirt-wireshark 0:8.0.0-23.4.0.1.module+el8.10.0+90638+6d8ade84
Oracle Linux · 8 lua-guestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdfuse 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 nbdkit 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-devel 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-server 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ocaml-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-libnbd 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 ocaml-libnbd-devel 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 python3-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 python3-libnbd 0:1.6.0-6.module+el8.10.0+90410+bcde3bf4
Oracle Linux · 8 python3-libvirt 0:8.0.0-2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 qemu-guest-agent 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-img 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-block-curl 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-block-gluster 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-block-iscsi 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-block-rbd 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-block-ssh 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-common 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-core 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-docs 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-hw-usbredir 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-tests 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-ui-opengl 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 qemu-kvm-ui-spice 15:6.2.0-53.module+el8.10.0+90638+6d8ade84.4
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seabios 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seabios-bin 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seavgabios-bin 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 supermin 0:5.2.1-2.0.1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 supermin-devel 0:5.2.1-2.0.1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-devel 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-libs 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-tools 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-dib 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8

Vulnerabilities 1

  • Medium 5.9

    Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

    Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…