Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

hivex
[1.3.18-23]
- Limit recursion in ri-records (CVE-2021-3622)
resolves: rhbz#1976194

libguestfs
[1.44.0-9.0.2]
- libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755]

libguestfs-winsupport
[8.10-1]
- Rebase to ntfs-3g 2022.10.3
- Fixes: CVE-2022-40284
- resolves: rhbz#2236373

libiscsi
[1.18.0-8]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

libnbd
[1.6.0-6.el8]
- Fix CVE-2024-7383 NBD server improper certificate validation
resolves: RHEL-52728

libtpms
[0.9.1-3.20211126git1ff6fe1f43]
- Fix CVE-2025-49133
Resolves: RHEL-96251

libvirt
[8.0.0-23.5.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)

libvirt-dbus
[1.3.0-2.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

libvirt-python
[8.0.0-2]
- [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)

nbdkit
[1.24.0-5]
- vddk: Add support for VDDK 8.0.0
resolves: rhbz#2143907

netcf
[0.2.8-12]
- Resolves: rhbz#1602628

perl-Sys-Virt
[8.0.0-1]
- Rebase to 8.0.0 release
- Resolves: rhbz#2012813

qemu-kvm
[6.2.0-53.el8.6]
- kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-120737]
- kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-120737]
- kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-120737]
- kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-120737]
- kvm-scsi-disk-Apply-error-policy-for-host_status-errors-.patch [RHEL-120737]
- Resolves: RHEL-120737
(qemu hit io error and crash scsi-disk.c:554: scsi_write_data: Assertion r->req.aiocb == NULL' failed)

[6.2.0-53.el8.5]
- kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120119]
- kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120119]
- Resolves: RHEL-120119
(CVE-2025-11234 virt:rhel/qemu-kvm: VNC WebSocket handshake use-after-free [rhel-8.10.z])

seabios
[1.16.0-4]
- seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2227373]
- seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2227373]
- Resolves: bz#2227373
(No bootable device with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks.)

sgabios
[1:0.20170427git-3]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

supermin
[5.2.1-2.0.1.el8]
- Rebuild [Orabug: 35720304]

swtpm
[0.7.0-4.20211109gitb79fd91]
- swtpm_localca: Test for available issuercert before creating CA
Resolves: rhbz#2100508

virt-v2v
[1:1.42.0-22]
- RHEL 8: If setfiles fails fall back to autorelabel
resolves: rhbz#XXX
- Reapply patches since we are using git format-patch --submodule=diff