Summary
[11.10.0-12.9.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
[11.10.0-12.9.el10_2]
- remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245266, CVE-2026-18917)
- qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242547)
- qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242547)
- qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242547)
- qemu: Remove 'allowReboot' field (RHEL-242547)
- qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242547)
- qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242547)
- qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242547)
- processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242547)
- conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242547)
- qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242547)
- qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242547)
- qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242547)
- Add support for keeping VM running when panic notifier is used (RHEL-242547)
[11.10.0-12.8.el10_2]
- qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224982)
- Add guest device info to virDomainGetGuestInfo (RHEL-243305)
- qemu_agent: Introduce guest-get-devices (RHEL-243305)
- qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243305)
- qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243305)
- virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243305)
[11.10.0-12.7.el10_2]
- qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224982)
- util: virFileChownFiles: do not follow symlinks (CVE-2026-63622)
[11.10.0-12.6.el10_2]
- qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186019)
- qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186019)
- qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186019)
- qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019)
- qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186019)
- virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186019)
- qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186019)
- qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186019)
- qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186019)
- qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186019)
- qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186019)
- virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186019)
- conf: Add fields for recording actually-selected virtio video device (RHEL-186019)
- qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186019)
- qemuDeviceVideoGetModel: Directly return picked model (RHEL-186019)
- qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186019)
- qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186019)
- qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186019)
- qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186019)
- qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186019)
[11.10.0-12.5.el10_2]
- vmx: Generate correct disk target device ID for superwide SCSI (RHEL-191267)
- vmx: Fix a case with 64 disks on one SCSI controller (RHEL-191267)
Fixed packages 32
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libvirt | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-client | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-client-qemu | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-common | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-config-network | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-config-nwfilter | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-interface | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-network | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-nodedev | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-nwfilter | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-qemu | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-secret | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-core | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-disk | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-iscsi | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-logical | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-mpath | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-rbd | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-driver-storage-scsi | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-kvm | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-lock | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-log | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-plugin-lockd | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-plugin-sanlock | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-daemon-proxy | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-devel | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-docs | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-libs | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-nss | 0:11.10.0-12.9.0.1.el10_2 |
| Oracle Linux · 10 | libvirt-ssh-proxy | 0:11.10.0-12.9.0.1.el10_2 |
Vulnerabilities 2
-
High 7.8
Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUM…
-
High 7.8
Libvirt: swtpm privilege escalation via symlink following
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, …