<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20188</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-03-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[20250102-6]
- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20188.html" type="self" title="ELBA-2025-20188" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20250102" release="6.el9" epoch="30" arch="src">
          <filename>edk2-20250102-6.el9.src.rpm</filename>
          <sum type="sha256">f2b17ec0f908807251fbe8ff657c5b50281075ff0ce1aa1cbd782c5a86f2e976</sum>
        </package>
        <package name="edk2-ovmf" version="20250102" release="6.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20250102-6.el9.noarch.rpm</filename>
          <sum type="sha256">646f227d982e4ce0bf0914ffae7a845dc7c504f333d3e36fc0e60cc714554932</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-32774</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-03-20 00:00:00"/>
    <updated date="2025-03-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[20250102-6]
- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-32774.html" type="self" title="ELBA-2025-32774" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20250102" release="6.el9" epoch="30" arch="src">
          <filename>edk2-20250102-6.el9.src.rpm</filename>
          <sum type="sha256">f2b17ec0f908807251fbe8ff657c5b50281075ff0ce1aa1cbd782c5a86f2e976</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-23120</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-06-03 00:00:00"/>
    <updated date="2024-06-03 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>* Tue Feb 27 2024 Aaron Young
- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

* Tue Aug 22 2023 Aaron Young
- Create new 20230822.cvm release for OL9</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-23120.html" type="self" title="ELSA-2024-23120" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36763.html" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36764.html" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36765.html" id="CVE-2022-36765" type="cve" title="CVE-2022-36765" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45229.html" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45230.html" id="CVE-2023-45230" type="cve" title="CVE-2023-45230" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45231.html" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45232.html" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45233.html" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45234.html" id="CVE-2023-45234" type="cve" title="CVE-2023-45234" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45235.html" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20240227" release="5.el9" epoch="30" arch="src">
          <filename>edk2-20240227-5.el9.src.rpm</filename>
          <sum type="sha256">251d0211f620b3ca2d970fe55d50b336ed08b5f51572f891c32310d59c91c99c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12406</id>
    <title>libvirt security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-06-03 00:00:00"/>
    <updated date="2024-06-03 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-5.el9]
- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}

libvirt-python
[9.0.0-5.el9]
- Update to libvirt 9.0.0-5 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12406.html" type="self" title="ELSA-2024-12406" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1441.html" id="CVE-2024-1441" type="cve" title="CVE-2024-1441" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">8a36f51150438bea9ef5d523ee5cbe9a1f1a8d96ef65255155b6782d9e97248a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">90dd857eab8242f17988a66d4ec8fe4f4a392401086ebe53fa5e49dd1c685208</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">46388bbdac7f055383b35cf1121d2aece085f952d4f39c8889ecf727c8293892</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">ad1db785a77b0be84a8e5deda98216688832ddd3a8edceb3b69924b06a354683</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">29df1917c9ee491bbd571a279f014995312d72bfd883595c34072a7185aa41f6</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">c646b66d4ed57d2222a619a7798558f473bc9199c7aeb2b583638b3fa6434e39</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">5df477cf65e36ba3a5b5fab30e59a9a99fd30c253fb2620f346498936aa9720f</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">244e188011b3246799254ce40351d0b474f6f7d57701df95aad592a09c746f45</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">b5a32fb06613a9b1c482fe4bdd38c4d60c8de24430f8cab199fdd1ad8df87ddc</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">4172a3b055f9ea03e029e3e8774bddf5f3ac780c40f28e2e693589a33ad192e0</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">0b03cee96a8e9dbf490c542495ae0b5ce3d8760f0da40ccc5290fa5356faef87</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">66f33dad66dfea75202c8624051faa6dbbad5d860d8b9b85baf92de9f7877721</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">4012db2f8ab1ab582f8e430237463e0f7ea94aac4518912387da72bde2e81292</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">1a765636b8b60c2216390bd9b5e3185c5d458689b5e16a912a576d104e9f8c3c</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="5.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-5.el9.src.rpm</filename>
          <sum type="sha256">c798105da172aafa6814adde0c0342aa4b896828e595994afe571c992eaaeab0</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">c7f52eeba4c355ef9507f2a844b0f393e013096660aaf32cd7448d1075fdbdb4</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">52fa2e6240c2c2b2f64685715ef62551a4bc8240f8547e7f3c285facce1a1aa0</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">44f8625800fd10c2d954bc23bdbcba31eb41b435756e0690398b0ee60c536568</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">13f3330baf60d64d4308450eb4cac5be38b58d109902cacd74357079c47c724d</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">8cd49b83d5df856391abb9db4dd7f62ac24dc4cea41ff567082c60e330e40e74</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">4bf2e1ca72069c3bc92b05a1e48bc2d43bf601c96f4c8040d5431538f333d718</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">36da042c53da6cfc3a1e9cc77ceb079de21664c7f79d39d066f6adeffbafb868</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">8224339364abc87d1ba637554f8db453cc9ce4408f6c2b1809947a411d3414bf</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">346201793b1fa930a2808fab7b54bca3e665760c08c25e43a3738e1bd46bd40c</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">e7d10d6e724148ebc45a98279a909e0b67b245ab268b1c36869ed0082a539286</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">352ad684f85fb007073d7ca2f05287ebd5585e170bec196d926e33459e2f57aa</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">a7f7474025890f7a3281fbc57cc08ffc667eb19d0bb148fca5ae59017dcd580c</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="5.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-5.el9.src.rpm</filename>
          <sum type="sha256">7cb4d81d29f172d87a92b8486324ec1037e68d302c0beb38d7cc2f54d18e82d1</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">f75470a2d70c2639e0bf50da451508004b8abfb34e34714a19f7468cc14ab582</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">d22acf5d9624b762cd90e152a8c67cbc3b4ab3e26ae62c9f617c88c5cf67b21a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12409</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-06-03 00:00:00"/>
    <updated date="2024-06-03 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>* Tue Feb 27 2024 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12409.html" type="self" title="ELSA-2024-12409" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36763.html" id="CVE-2022-36763" type="cve" title="CVE-2022-36763" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36764.html" id="CVE-2022-36764" type="cve" title="CVE-2022-36764" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-36765.html" id="CVE-2022-36765" type="cve" title="CVE-2022-36765" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45229.html" id="CVE-2023-45229" type="cve" title="CVE-2023-45229" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45230.html" id="CVE-2023-45230" type="cve" title="CVE-2023-45230" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45231.html" id="CVE-2023-45231" type="cve" title="CVE-2023-45231" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45232.html" id="CVE-2023-45232" type="cve" title="CVE-2023-45232" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45233.html" id="CVE-2023-45233" type="cve" title="CVE-2023-45233" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45234.html" id="CVE-2023-45234" type="cve" title="CVE-2023-45234" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45235.html" id="CVE-2023-45235" type="cve" title="CVE-2023-45235" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2-ovmf" version="20240227" release="5.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20240227-5.el9.noarch.rpm</filename>
          <sum type="sha256">db73912e74092d198a49e76a65e6f143bb5552ed8c70019bf35d963e65486707</sum>
        </package>
        <package name="edk2" version="20240227" release="5.el9" epoch="30" arch="src">
          <filename>edk2-20240227-5.el9.src.rpm</filename>
          <sum type="sha256">251d0211f620b3ca2d970fe55d50b336ed08b5f51572f891c32310d59c91c99c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12407</id>
    <title>qemu-kvm security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-06-03 00:00:00"/>
    <updated date="2024-06-03 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[7.2.0-11.el9]
- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix 'used_memslot' tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}

[7.2.0-7.el9]
- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12407.html" type="self" title="ELSA-2024-12407" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-3750.html" id="CVE-2021-3750" type="cve" title="CVE-2021-3750" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-3019.html" id="CVE-2023-3019" type="cve" title="CVE-2023-3019" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-42467.html" id="CVE-2023-42467" type="cve" title="CVE-2023-42467" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-5088.html" id="CVE-2023-5088" type="cve" title="CVE-2023-5088" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-6683.html" id="CVE-2023-6683" type="cve" title="CVE-2023-6683" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-6693.html" id="CVE-2023-6693" type="cve" title="CVE-2023-6693" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-24474.html" id="CVE-2024-24474" type="cve" title="CVE-2024-24474" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-virtiofsd" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">796ab8178f84a932371797c01b62d0e192a3a8a56202d003c320ed9eba57427b</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">7a98f7c96faa7f4d30578656439ae13880124dd369dce855dc25c7de9f17bcd3</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="11.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-11.el9.src.rpm</filename>
          <sum type="sha256">7bc4933f9db19765cbd9b5e38db41c99f53dd21ecb712f61dc7ef7cf92847220</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">c571b73af5c7e96158b303a6a18a387a52ecc165cd427ecfb44106acfccf3a8b</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">48f6418d4198dc997b874dda267785c8951c7d9ca6682ece0f9b754760fd027a</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">b0d7621267055b41bcd313cbc584ab69382edc84ffa18c2afd919437f57a232d</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">debd595eccaf30852945325ad1d83e2fdf44ca6962d7c1b9f5be49b07e6b4db6</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">d115bbc792bb75934a2b5a8f76cdf6cff874616d5d34f4e5524bdf9d0f5da95e</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">b1a0b9f35b5a4d4e3e872ecc550d4dd3d176626a451a721fc2becad0e011873a</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">f528874e6bcab9f98fb257491b215c1fb915966053253bd20c59d51afa0a4e23</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="11.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-11.el9.x86_64.rpm</filename>
          <sum type="sha256">68f4f0b110c53610d3438f9f216c6730ed2a81200c480814636da73705548958</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12840</id>
    <title> libvirt  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2024-11-22 00:00:00"/>
    <updated date="2024-11-22 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-9.el9]
- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]

[9.0.0-8.el9]
- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]

[9.0.0-7.el9]
- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature 'fsrc' (Tim Wiederhake)
- cpu_map: Add missing feature 'fsrs' (Tim Wiederhake)
- cpu_map: Add missing feature 'fzrm' (Tim Wiederhake)

libvirt-python
[9.0.0-9.el9]
- Update to libvirt 9.0.0-9 (Karl Heubaum)

[9.0.0-8.el9]
- Update to libvirt 9.0.0-8 (Karl Heubaum)

[9.0.0-7.el9]
- Update to libvirt 9.0.0-7 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12840.html" type="self" title="ELBA-2024-12840" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">dd3e30a1c82ebf35627713a87db445cc0c17bfae9e33d4169b33741c5dba26c8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">bc9a36b813a0783c9499bd2da073046856a555ffba880488c7797a30e4c58801</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="9.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-9.el9.src.rpm</filename>
          <sum type="sha256">d852cada722f1660ddf3abefb18eae40b13e6d4011b482cc6d50ebea382dbd7d</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">133fd1e36ac169b66b408d0b3556d3a651b138ba24255f4d63626de8b04ae681</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">df3be95b9e2f3b2a51f7f47c75424ed3aab732213a3c87ba1716d52c4806c247</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">6ccbd03e4625a9bb0a40c77aaad169f21f1d9e31d1a62b46491fed94d5b9bbac</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">977b6a76ad2f57bb25cba1132694946f70cf7771efa77ee7862a82623f0d1b04</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">eb64039fe080513ca553c5cccec8832c6a1334325f29f228ba986757f00eba23</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">8d7e0b273ade249136c61c138ec13cbb8c25eb7cdeeaee48d5a51aa42c7c5fc7</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">cba54f737d0a737bcbb3a603e8a1708189d5f5c2405c02f00a85364cab7a41ff</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">f9defd3974374c38bd0094be3f7f2f24f9d9bb7cac5afaf8c3fd94c2cbf13a3f</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">bc4f1d90ea42d3d38a970d6ee8f669259bd336770c20901a65689382843d416d</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">72c5339af99310df60a22a85d75cb2b8a2fe66dd5385ce739e1558bd68c89769</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">e044e7d012db8225f558f0af81e44df5041dc211c1242f0a6d7a6993d24f58f6</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">d477b7d299c50e485b605146510b88ad7e01d9d4451d5e045d5c8690fd1e20ca</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">f4f8891b02c6a9ce13c783515f6a43d62fb1eb721bbab97afe5ccd27b82fd12e</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">c725f8cc1d240902781ca56a5376c50e2636b7677eb95c8b43665c8237628b99</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">9a83a0133fdd3cf46a9dc11a2b88d1dc9fa57a26aaef76527d7c9e794c90c965</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="9.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-9.el9.src.rpm</filename>
          <sum type="sha256">147d7c08bbca5a27ca0f3b7e371696412a255ff86036039a29160cf1309cb899</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">27ef04ab7ee102492198ffc5f05eee6aeaa5a68107db70009eff34aa70e28930</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">96109355608d9d2dd98534103046de75633f715bb8f7adae2005c602efbe1205</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">d5137de6140e140494bdd64e8032fed7f4e8aa1590a50ed5d8909f2f0dbc17ee</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">d9e4c45e42c86326151f78a08315b820714779bb708c33f996883af8d1eb5efc</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">3ced86f6e41dadd014f4122ff4474bf0f77057df2c14aa7e1de57508d461772f</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">72595c9b69a4d2c469936fae9d1e689ee676b876b9b816fa8723895bb4c84ec5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">99ab75bcfa3dba81b2265ad9e51a695444f14be26a9541469275e5bb39482370</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">6e99cae21e9ac8780ff970fdd11fb65779eb7518308a998c3c4e2d2a588a008f</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">a12324cec1959cab068764add2db25a05e201ce517bb9adb08f15538744cf104</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">87d5a337092a198c74216b0e9652bf789e977a87ab540008d0a28115b94f576d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="9.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-9.el9.x86_64.rpm</filename>
          <sum type="sha256">6631d82e3ae199473f8951a7f7696d5c59235acad7c07048a8433fabce4abd3c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2024-12841</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2024-11-22 00:00:00"/>
    <updated date="2024-11-22 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[7.2.0-17.el9]
- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]

[7.2.0-16.el9]
- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2024-12841.html" type="self" title="ELBA-2024-12841" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">7a22d8f21d988427979a425ac7d6dd2dc0be0c63a006973a11049e664f1d8428</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">c9b3acb72014222ee1eecdb3a7d4e36c943873b268b57e2bccc8f71bde143552</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">7ebe1dbbc712186e4e1be694cd0893a94080aa6b99bb2fce0c87991bc1ffc33a</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">077ab8955717052ae80ef7cd8fc8e9f0b37f92005028fd500dad2806b2632271</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">380a8dbe4da3980230c6f92fc289bd32c16a03cffab4b2e265ab2b65610cce5f</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">c5b01bd6052b36aa54084a1c7fc5bca5df64dd35d80b9bb5528803c1d051c650</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">7c4088c995c8dd90f12b4b65920cbb489d7bb0cca8a074a1d1ec040bc215be3b</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">19bd585ab457c17e486bb4c07ff34b403b376db882b4f4eeb3370e3ca1c75eaf</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">711c6c0d3a80f22e5fd4750899d8d244968d2d6e39c9b4dab45089ea10c3f6b3</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="17.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-17.el9.x86_64.rpm</filename>
          <sum type="sha256">7529906d007a194edd05b3a88f287390e5f92a68d543d438828fb3e969d6ffd3</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="17.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-17.el9.src.rpm</filename>
          <sum type="sha256">4bb1a40a6006c6000e75d47e521954b9a3b85f345d25281fbac537db6343a397</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9561</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2022-07-14 00:00:00"/>
    <updated date="2022-07-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>qemu-kvm
libvirt
libvirt-python
edk2
* Tue Jun 28 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220628 release for OL9

* Wed Jun 01 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220601 release for OL9

* Wed May 11 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220511 release for OL9

* Wed Apr 06 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}

* Mon Feb 07 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220207 build for OL9</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9561.html" type="self" title="ELBA-2022-9561" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-python" version="7.10.0" release="2.el9" epoch="30" arch="src">
          <filename>libvirt-python-7.10.0-2.el9.src.rpm</filename>
          <sum type="sha256">42b94d04b9ab9df2c818a7b5f20c705b0dd2b2c87ed662d127ffff689db0501e</sum>
        </package>
        <package name="libvirt" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">f15b2f1e05a1a55b0cf669d89dc8f50f909eeb1916903b937bca393c539b4a4c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">43df19ddbc9f23e73f5e0fd6c9aa3f2690aed93c19d3d10044ace09ac95a7938</sum>
        </package>
        <package name="libvirt-devel" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">94b86b188a921daeed068d5ab9b6fe6c9f4686bcba8fe22411d13538e9ab616e</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">5cb4d02e9db982c65e8f81ee85c7655072f7ffd7596ada7294d070055e8d7db2</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="3.el9" epoch="30" arch="src">
          <filename>qemu-kvm-6.1.1-3.el9.src.rpm</filename>
          <sum type="sha256">addf8ec983de53a261e0f4cabd2d01a2f5c4868ec408f0a69f2f362030c8b700</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">59dece7beab2adfaeabe0c1dcb61d3cb1a8fa72453857f90863c5ec39510ea20</sum>
        </package>
        <package name="libvirt-daemon" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">a52f2385c180645beeb49417fedd70f1635b9ab9a816df774da2fa4b4355ff25</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">9f09ffe243e739cc498486153a8e86b11660532c112525e2fd178af4cef8dfa5</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">7783625806da843f02cdb6ce0a65f2e3e95520201c5d4a1d5974e3da5ef1247c</sum>
        </package>
        <package name="libvirt-wireshark" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">2944616f69054960b278c07f36f80648a00ce0ffbc427b5247c941814c510c39</sum>
        </package>
        <package name="qemu-kvm-common" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">c0feb14e34e8d5ff8ffeac0c6451d8fdd3e4bdd63a95910353bfe3275e7df895</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">1f3d29381d6be7c54978731cb7ee9aca4a9c29e12fc1d6b50151fbba2f2c80e3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">a7d507be2afa4388724abdfa7c97ae7a20b554999027147febec951f83553852</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">49c0e5d81161024e432382e87d44410dba3deb0db6c271d2334c4675177e08bd</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">e3508fb6ddfd540202fc0112a513f51d798a7a283024ed8a49cf70d7fa8ca4ee</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">3726a9324d696c7133321de420a8de0e0c6e7d6bac631425c5eb9a5a4a158a9c</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">8fce7fc2876037cbfdbf6295c8c8f2fe57d6beb2833f995ba169cca61b3cfc1f</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">ad498be261e707528ff6b20cc708dacac631b464419b5472796c30d41545d35f</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">7d0bff6348e3b0f70c71f6ddd28407ce5ab72b2f0bdf244d06e75064d234f831</sum>
        </package>
        <package name="edk2-ovmf" version="20220628" release="1.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20220628-1.el9.noarch.rpm</filename>
          <sum type="sha256">74a0144f9d218c8baa112af98a182278ba625aee8a94442301654a3fb8b526a7</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">d6196a7839ec667bc8610712cc2364f2e85e61a7d0aef42c7f7856b1bff120f2</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">2a6ce6dae89c56dae11af96ad4102c578034cf5a3c89e2bce9674c8b6ceae988</sum>
        </package>
        <package name="qemu-guest-agent" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">70ada131698ab4ea81fbdd8540f9e810ab79ab6b5fba35f80abbffd745563c8f</sum>
        </package>
        <package name="python3-libvirt" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">b85b9406af4034e643b4dff0f67d605df0217293b90d6eb15b8e540f188f9e61</sum>
        </package>
        <package name="edk2" version="20220628" release="1.el9" epoch="30" arch="src">
          <filename>edk2-20220628-1.el9.src.rpm</filename>
          <sum type="sha256">82a0e2bc47612a19a536a3cf08bc5707a124490c857a593bf44f776cd0d6729a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">7c8fed8eaa17313b1e70e746b524d318313cc25c0e5d9b7fa338c1277915825e</sum>
        </package>
        <package name="qemu-kvm-core" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">85aad292454691c268898b588fcd6505d94f7a54a70a9fb9c484c7f7c50f9b10</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">2e200071fc0b40d6811862080aa607aed3b79fe18bba071109c9feffdcb6ca78</sum>
        </package>
        <package name="libvirt-libs" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">d96500e0f7dde0599998b593e2d733bfff7b1d16fdfb0639252234f9a04fceea</sum>
        </package>
        <package name="qemu-img" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">6623e01564ca81b18edf5678f08c45f7437fae8fcbd18ce5582d23065c177c3a</sum>
        </package>
        <package name="libvirt" version="7.10.0" release="2.el9" epoch="30" arch="src">
          <filename>libvirt-7.10.0-2.el9.src.rpm</filename>
          <sum type="sha256">3d4578291d23998ff09508f97942ea059ed057cf984ddec1da12e9977102e083</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">b9584010714e9c38e3c7ef12aa0073b8298fdf067a81e9bf32b3ef262a230cbe</sum>
        </package>
        <package name="libvirt-docs" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">5656fff964229a6d1a6675d96a1e508fd7c5a0b5614b5326d277c37e14b41f0b</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">b3cf689e3fac8839c13eded61718f9529c266278565239c8f8692e7bcdd19021</sum>
        </package>
        <package name="libvirt-nss" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">df8e022d1503aef9b0ff197afa0d1f35c24114cb61f17f4f006f419622038f07</sum>
        </package>
        <package name="qemu-virtiofsd" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">6c2687347bfd8e7e93c26c40016316f68eda100196a183512a32673890d04df8</sum>
        </package>
        <package name="libvirt-client" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">65511f58fbc05586b47fdb8f126bb91161c276d9e043fe8371629f69c30576fe</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">737a78e44af5723bf44e4ae9bd9d2fe85a1b02cf7e47c3c5e0ed216cfa7cdf37</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.1.1" release="3.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-6.1.1-3.el9.x86_64.rpm</filename>
          <sum type="sha256">4fd2dd9eaf6b74f7831431ef83d7b1f47300dbffb168d7fd2cc534fb6dc9dc1f</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">3ea68183e1e74b50c9664185060f3c86bfc94f81657fc2e45b657669609c12a2</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="7.10.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-7.10.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">481a78e58044f8df423921f9bad707da6cb174bb6033abb7e7f5a1866020e13e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20554</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-09-09 00:00:00"/>
    <updated date="2025-09-09 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[7.2.0-26.el9]
- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]

[7.2.0-24.el9]
- Revert 'migration: Temporarily re-enable our custom switchover event by default' (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20554.html" type="self" title="ELBA-2025-20554" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">ca9be61a009633c025f9d1f19cb18eead9b86ff199ea7186612a17ddc77e3219</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">3ed3109a671c6acb990e960be45e0f97fffe69ccaad1dc71d9a4eafc87532668</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">983f1e71336436a836f9a66fdec4311cc7b9809c243b0a077f2f03d75321711d</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">52dbd24eb5429689028ca9fd0b1ed21ca359d3231e6ca71b2c47b84cef386d2a</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">45c794b5f4aa3173ceae975c76f88e819fb79dfa69fbeac738986b5259deeca1</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">627b8cf9fb72aa38762fcb5c0d7bb15a2f4fdd5f0c974b1c1ce2426f15ec6eec</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">e7bcac1fd7288fe69e7813004759c51a4af1e25ccceda7ed8225d8f707f9989c</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">d5f4825aaac3e20e277df0fe0869c4b1fea9afbe5b21e502dfc7d02f5937ccd1</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">0e6fe0e51cdbe4cfb2c90254df6b9bb7176ae6e14a567fa650f0c06f1029243f</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="26.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-26.el9.x86_64.rpm</filename>
          <sum type="sha256">98d0c7f20731104556c8affbae41f85ac65c2227378dd8702beff507fa4fd885</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="26.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-26.el9.src.rpm</filename>
          <sum type="sha256">2f048f7e58e5c4fa2806972f4e599a41d79840759f081c3ae245034bb4f6870f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20536</id>
    <title> libvirt  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-08-22 00:00:00"/>
    <updated date="2025-08-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-12.el9]
- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]

[9.0.0-11.el9]
- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]

libvirt-python
[9.0.0-12.el9]
- Update to libvirt 9.0.0-12 (Karl Heubaum)

[9.0.0-11.el9]
- Update to libvirt 9.0.0-11 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20536.html" type="self" title="ELBA-2025-20536" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">05ea89c9959657e382ed1a43c54ec11e87a2db44e61ecb6f0c33b52ca4e69266</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">11f7ee1c3cc2f543bfa4bb8a6051954e9b31138aa0ed7b101b71311ae6f19f90</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">c9ff9a69ef4323f05ef0f7f03c518176753bcde74ff0952868443f1a0c672ad0</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">148e8d6a227b03d53e4218c7e420d021404dd72921bdaf02a18975ad959700a5</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">610fac0ea55548cb9243cbb5d0b5174c90af9d73d268929836f0f9f13554baf9</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">4a23afedac5a4ae029a9b2a40f86da70c7611a84d40c02ff6c3c054bd009da58</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">37a4dc698ba291318a10a081954007f9858ba65a4ab1673d87832d934eb3a0f5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">97e1b5561fecf4f4ae7ebb15687364ca81a3e0bc119a4854e23c3f2e9ca8e5b0</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="12.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-12.el9.src.rpm</filename>
          <sum type="sha256">235f75db3108ea8f72849862767e4c21d8de6fa837ba3cbd94ebb5a117a20d30</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">46b72d379f274355e52eb689fb1685a669e3cce17aa499f14f2474b5aa0dbd75</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">5c8133663d5b6473ea2ad053959b10c28fc732c6e088ddc91eef725e67cb6473</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">e6ee46f8bd91ea0290cc6099e566f83751a2de380b3fa1fd9e87c926f2329f8f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">a928642b6976e63d18db0036b3decd4e05a8cd6c39722db5516f2f7cba604958</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">51bbc1476e700ec88accbf43b4aab44fb3f10fef8989de947f3653afc3f627ca</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">1dca08cc0f9160b5d52b4dcd306c8a73d8fcc6dbb02e1a02e23ee7a4a1d5c4c1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">8e86683baf50607642e0b628512aa135e075e56f8d53b3f321b955f326c6dadd</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">8b6177fff2d41f639fe95815966530db6ed84aa9e7abecd3d46e5a0938c27d2b</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">2992e86bdb36fe56fe8ee63dd751a136168cd2828b089e311de0c28c78b5ad80</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">db9c690dfdca3cb191ed8325ca9d56cd62608be93aebe15da341304d7a5373b0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">0c4775df281cfb0931d90a810124cebad44746d4abc64d86354c2a7d8d7d7cd8</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">26abc024c0aa628d5aa6e5e67ef08f2ad2acf1afd11e3bcf1c6424874c7276d2</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">ba0c10dea50e204039c4e9e1d623d4cb3ea8d960eab080c250117e45e793998c</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">6b9f664be330f8555f04129e5fb468e0d52e5569f247058c5e3cf63e454669ea</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">16e78e93d335eeaa62ab3c2893c103285b81d85e3c2e41041189bdc8477b2e8f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">fee4aaf896540abbbc94b50eda2d4e4d6f6b169d3fdbce43411d77418a62cf21</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">6b9aea971e02c0eb8ec11799199fd44bf1843f21cef9657c07d486b063825eee</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">d83144f04b32ad993b8952cfa88d561a4910f3a61e83807aa1865ab85ba79799</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">2efdf04ebd8c376c32f78a06cbb7046cc4ba64dbb426438061bdc0a29c5bbba5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="12.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-12.el9.x86_64.rpm</filename>
          <sum type="sha256">89e79e1d1333d4c3aaa32918b1eb5cdefba508aceba7c004125dcd99a36fdccc</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="12.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-12.el9.src.rpm</filename>
          <sum type="sha256">4938b409b1819add3a4fa0eb854e834f422a9ed1117207a54e6b3bd2b23b47e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20537</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-08-22 00:00:00"/>
    <updated date="2025-08-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[7.2.0-23.el9]
- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]

[7.2.0-22.el9]
- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]

[7.2.0-21.el9]
- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)

[7.2.0-20.el9]
- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert 'vfio/migration: Add save_{iterate,complete_precopy}_started trace events' (Maciej S. Szmigiero)
- Revert 'migration/ram: Add load start trace event' (Maciej S. Szmigiero)
- Revert 'migration: Add save_live_complete_precopy_{begin,end} handlers' (Maciej S. Szmigiero)
- Revert 'migration: Add qemu_loadvm_load_state_buffer() and its handler' (Maciej S. Szmigiero)
- Revert 'migration: Add load_finish handler and associated functions' (Maciej S. Szmigiero)
- Revert 'migration/multifd: Device state transfer support - receive side' (Maciej S. Szmigiero)
- Revert 'migration/multifd: Convert multifd_send_pages::next_channel to atomic' (Maciej S. Szmigiero)
- Revert 'migration/multifd: Device state transfer support - send side' (Maciej S. Szmigiero)
- Revert 'migration/multifd: Add migration_has_device_state_support()' (Maciej S. Szmigiero)
- Revert 'vfio/migration: Multifd device state transfer support - receive side' (Maciej S. Szmigiero)
- Revert 'vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property' (Maciej S. Szmigiero)
- Revert 'vfio/migration: Multifd device state transfer support - send side' (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20537.html" type="self" title="ELBA-2025-20537" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">daaf9c2bdf31c684ff7acb96e045a3ce2b19ebe7a89c16f33f7d73fbc6629dcf</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">ceeecb64480dfd980282de1c2952a730f23f00531acbf3c44a2abcb04b6d1f09</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">1fee468f3e676dae8cbbdc611c6c4a23bd8a5cb5628d1c0a9ba0396537c13c35</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">8d683f86278995976d1e972402de0d2deacce0bc85e506097857f21d5673846f</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">a2a8a95cbaba239125c57d2a994f3d15e5209b939bfd93be5e4558f48a779300</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">afb5383f103764bcb542b8b3f217041c603ec876bf0f388ba29ab55b025b47c8</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">819b54790b3fcafacae47214f0e97f85fe493d2593912eb5ed12dee571b1e4cf</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">c38c78e7995eb3f15201386485d1df552fab1c3caa6830d1bad72658d8deae0e</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">940b1962fe85a590ffa4fdc4637fa1e6592edbe9839e32033c98ae6c324887c3</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="23.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-23.el9.src.rpm</filename>
          <sum type="sha256">d9a651acd71bcacdaabf9ccbf83cc266aa36262edb8f92f44b57ea8d5e1e658d</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="23.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-23.el9.x86_64.rpm</filename>
          <sum type="sha256">1970bad86226f0a6ea200dcb7267cf7f9c1a8a86fa0d1009627bd316633c0099</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50328</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2026-06-19 00:00:00"/>
    <updated date="2026-06-19 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>* Fri May 22 2026 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20260522 release for OL9

* Tue Mar 31 2026 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20260331 release for OL9

* Fri Sep 05 2025 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20250905 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access [Orabug: 38381983] {CVE-2025-3770}
- EDK2: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means [Orabug: 38382190] {CVE-2024-38805}
- EDK2: EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network [Orabug: 38382286] {CVE-2024-38797}
- EDK2:  Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. [Orabug: 38413860] {CVE-2024-36331}
- Update to OpenSSL 3.5.1 which includes the following fixed CVEs:
  {CVE-2025-4575} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-9143}

* Thu Jan 02 2025 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}

* Mon Sep 09 2024 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50328.html" type="self" title="ELBA-2026-50328" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2-ovmf" version="20260522" release="1.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20260522-1.el9.noarch.rpm</filename>
          <sum type="sha256">69bfa36bc612d91de588bf3d6a4b0aeb367ffcec8821242553d9c3373a1a1011</sum>
        </package>
        <package name="edk2" version="20260522" release="1.el9" epoch="30" arch="src">
          <filename>edk2-20260522-1.el9.src.rpm</filename>
          <sum type="sha256">33495b09e3edd89e2f4f5248aefeedf3da7c68c419e5d1aa54f0d90c722bb5b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12673</id>
    <title>libvirt security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-09-19 00:00:00"/>
    <updated date="2024-09-19 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-6.el9]
- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrange) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about 'max_client_requests' in single-threaded daemons (Peter Krempa) [Orabug: 36422853]

libvirt-python
[9.0.0-6.el9]
- Update to libvirt 9.0.0-6 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12673.html" type="self" title="ELSA-2024-12673" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-4418.html" id="CVE-2024-4418" type="cve" title="CVE-2024-4418" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-client" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">b40670ee663b7a719ea92e6a3cf73069592a9709dcf65589f5fcb104729490fd</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">b0d3e7f3c1c5d1ff4923f9d909af964e66bab3c38706f6251b62f6283f8f1705</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">334cc082cb234b177530fe3b38e74f132c1f09a0e48f17327cd0a4ba4c2b6314</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">a9369b46fc5f7cda8ff368ddf709a3d1e081f783fc36f3ae35d5344ae521f3ba</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">56f87c9e002c2d569256c6a85aee7723e927dd8a17ad21473f44d30ab2e04dae</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">f384d9fc3d4a7fa88b325cc288d58fe47b1265efe0dc16fe2855abea0d720b7a</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">578d32419d0582ac17392758d48551cfeb255818b1f2f7aee1398c6fda2f6ace</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="6.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-6.el9.src.rpm</filename>
          <sum type="sha256">9e4b6c60fe002def65d7b25ded253dd5e707efe8f968d6e5681ebe360cbf0b3e</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">e5e1b936751dd59e993e4b67f52dd1ff7cc15bb929697a10aadc6c9d0c3f1aed</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">b005a2144cd892d6c1ff81a7d6b869fc30383088e0f0d1071b7741b4b40433dd</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="6.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-6.el9.src.rpm</filename>
          <sum type="sha256">be56277e475d26b43fe0e66eb31980b3e94a4f014519c052e60c328bbe843367</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">97ac6783c359958e98e3f500d2e7c070cdb70463a9e8fe5bc79dc28bbafa1c18</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">a3a5eba9ab703aaab2527d8c67190d34f1fc96b1a2d7dda06f99dc2abaacf350</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">08c5401ee2d26c665e3fb0a23a2f66ee3cb30ec1fc968fa27545b7f23edcd3bb</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">a8ebd216f240927b28574cd9a1670b293d855b829d3d81bd378dcfaa4c93dede</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">cc62856544727978dd5d13bbe6436191c192cb046483174094617eff00db380d</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">1946ee0f48eb612f01e06f96ac587454a13516ba7a0520523615cbaf84b40da0</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">5807cd5d2b46bf3a8ef06c72b4aa1a42e0b82d35cd3835141b3aca44da01a759</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">47458ae0ae48651d127c454d0f12b0d9ac848c812a9605d213ea14e1d80c4c9b</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">1fd4df54b29e582913f88beb46ae420d20fd89a6f347a2ff2fac3d73a52208df</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">14c1a175f13efa2c47919db20bd71844e094205860f9fc9ccff0f209436e8b89</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">d7d2e51fee604f9cd77e0301ce8eeaead7ce9e79a195f6d04c4c43da345b3245</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">9b8f94c198bec85ca3d795fc034cb73e666fccd4eae4a194c0c3818af74878ec</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">dd8847183b04402e8938f77c13c3030601158296c42b60ad3b5c3d298f21a6b5</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">600a84614c6f856317956d5f92863c1de87b2eb96d08cc262683b3f45bd99121</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">2398f66eee0d24dbe16b101c30ec25c21eddeb369023cea42c63431cebbd9143</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">2c2182d70b54698424af12d07d8c4e89f97ccd12b8c8cdd2b404efdf7a75be89</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">097407e76cc246447401e149876bae8332f899c6dfe7b0c6a3fc458630ef74f5</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">5962685b464dce65fe1cde1e248e7dad42c249c20c500a36c8170add32e1110b</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="6.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-6.el9.x86_64.rpm</filename>
          <sum type="sha256">8212d2436678a7f7d993c319c15f2c8ddc8ca2e1a954f954f9d4524ca864128f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12674</id>
    <title>qemu-kvm security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-09-19 00:00:00"/>
    <updated date="2024-09-19 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[7.2.0-15.el9]
- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daude) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daude) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daude) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daude) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12674.html" type="self" title="ELSA-2024-12674" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26327.html" id="CVE-2024-26327" type="cve" title="CVE-2024-26327" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-26328.html" id="CVE-2024-26328" type="cve" title="CVE-2024-26328" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-3446.html" id="CVE-2024-3446" type="cve" title="CVE-2024-3446" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-4467.html" id="CVE-2024-4467" type="cve" title="CVE-2024-4467" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">353971ccabc7d5d57c45d1326951bd475e535d73581c6066a4662eb71ad0be51</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">2a32d47fbbd2eedfa5c26a5b277016006c814521b43dbec4cf4a670170836ba9</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">a2b4e89dd7558fb72d528d263539806b377060e24f04b6085996425539e39488</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">e11dad6cad5f5eedd7a00c89854edef46a73214cb6a6b91913bb50b59ce362c2</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">263b612353cc63df0a6a214e0d353b905dd9f1fab0f4a9917c4a1bbe1a2827c4</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">ef2d4c90baeac59dc9f26f35d7d251e67c595383265e2fdb5c481465c6dcb643</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">14695027f48de49b95d28d0a96067ba929a6c204b107696e9d23fed6441ad980</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">b3cbad086da9561b7d68b8c5fa0cf644daa7aacdc4d5dbf1067d77ff6879563f</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">69fef11174346c775bbe8aa1aff2bc395d899d0541cc7122bd24536e160fdb45</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="15.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-15.el9.x86_64.rpm</filename>
          <sum type="sha256">2c27702b42e9863914ef3fbffc47381f667c58344822483b8cc0fa15d2687768</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="15.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-15.el9.src.rpm</filename>
          <sum type="sha256">946bd53ecdaf38e0d579e21a8fa1b34c78dd6ad9c124554bd70c7bac50d7f376</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-32790</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2023-12-07 00:00:00"/>
    <updated date="2023-12-07 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20230821]
- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  CVE-2019-14560
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

[20230613]
- Create new 20230613.cvm release for OL9

[20230227]
- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  CVE-2021-38578</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-32790.html" type="self" title="ELSA-2023-32790" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4304.html" id="CVE-2022-4304" type="cve" title="CVE-2022-4304" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4450.html" id="CVE-2022-4450" type="cve" title="CVE-2022-4450" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0215.html" id="CVE-2023-0215" type="cve" title="CVE-2023-0215" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0286.html" id="CVE-2023-0286" type="cve" title="CVE-2023-0286" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20230821" release="1.el9" epoch="30" arch="src">
          <filename>edk2-20230821-1.el9.src.rpm</filename>
          <sum type="sha256">b7b1dabdd6254cd3cd188c257335a04f731d59ab5e067843180e49b00abff949</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-12584</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-07-31 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[7.2.0-2.el9]
- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare)
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)

[7.2.0-1.el9]
- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use 'efi-virtio.rom' on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)

[6.1.1-4.el9]
- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert 'vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration' (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use 'queue_pairs' instead of 'queues' when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable 'acked_features' (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on '-cpu host' with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]

[6.1.1-3.el9]
- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]

[6.1.1-2.el9]
- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}

[6.1.1-1.el9]
- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use 'efi-virtio.rom' on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-12584.html" type="self" title="ELBA-2023-12584" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">3c4e864dee8ac1c0910dfa8e0797604db6c2c1404fc1757db30e16d50d090b24</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">d1cbe7947c795bb83479266ca4695ceb0dec028e08c09a80f559bcabdc9ec367</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">77bd4aa0af7e4153646f803626beafe77e800f998ac4bdda118a941ac1290a49</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="2.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-2.el9.src.rpm</filename>
          <sum type="sha256">fd5ae78506f933e01e305dbbb055931cd9ec9328cd3b873f799c95600fb2e2d4</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">8578fec9a2388f5c2bab25f4b3676cc11b97778350e165b5550416887a190e8f</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">cf68afb69120a12c26571f4304186a87abdc082e88a9f980eece605a8bfccc02</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">0a92aa9fef5d843db32691bf05c99060a9956991110735fa4eaabfb913b024bc</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">348eb8c2046dc7379564a586eb7ae863852b386b94ca1c0d5ba16cbb23d2ad7d</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">64359fab469f6f9dd5681c2994922c2a4a1ccc15a2ffe6bda62b98e377c27797</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">086531c870666fcc045fba327d2a62f9f6073330c31c89925fe023d4320246e0</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="2.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-2.el9.x86_64.rpm</filename>
          <sum type="sha256">a5232a223dbfd861ecf2017d536fdb95b119a7eaaf3e041fc3968433bad8665d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9869</id>
    <title> qemu-kvm security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2022-10-10 00:00:00"/>
    <updated date="2022-10-10 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>  </description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9869.html" type="self" title="ELSA-2022-9869" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4206.html" id="CVE-2021-4206" type="cve" title="CVE-2021-4206" />
      <reference href="https://linux.oracle.com/cve/CVE-2021-4207.html" id="CVE-2021-4207" type="cve" title="CVE-2021-4207" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-0216.html" id="CVE-2022-0216" type="cve" title="CVE-2022-0216" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-26353.html" id="CVE-2022-26353" type="cve" title="CVE-2022-26353" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-img" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">c6737c530a7444ff42c852dd82323e9054c483cd9a6ed4a79e5f215a85c20be1</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="4.el9" epoch="30" arch="src">
          <filename>qemu-kvm-6.1.1-4.el9.src.rpm</filename>
          <sum type="sha256">aad1c3dc5ff8e694786286faeb282bff40f25feb8d937652edc5c48273390b61</sum>
        </package>
        <package name="qemu-kvm-core" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">a22062b51378662cf7ddbfb7b682eda63f1e3d45612e1f1f3e1bac362a523787</sum>
        </package>
        <package name="qemu-guest-agent" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">aa025aaaf6d531db4c15ad269a49556572186c336151f02cc53581a6d5beb7bc</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">e5f0c9bc21ecf741bd5e62b1311f923c9deb1fb32fdf0625f094f2654ef9308e</sum>
        </package>
        <package name="qemu-kvm-common" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">dc30324a69d0419e96fb092b161acef35543cb53266f72a13f2dba6ca0c3e745</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">12f241a28a323685393cdff400119b57a1412bc39927168fee18ee196b6ef85e</sum>
        </package>
        <package name="qemu-virtiofsd" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">69a326d71f3e79d1b9b0a1aa19db649b483062b9bfdc4cc4b4ecbbda833bc4b1</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">e675943a8d79bb4f9e5ebce8236d717ca24ee18b7b446c0072bb149096091941</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">d8e622fec780d18830315a9e94481a96c029112d98c0cea4bb065d5bb6b75d87</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.1.1" release="4.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-6.1.1-4.el9.x86_64.rpm</filename>
          <sum type="sha256">a1f4cd2458c09d847de7d853fc304b02d89ec2a5235547cc04d79d83cf9f37c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12842</id>
    <title>edk2 security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-11-22 00:00:00"/>
    <updated date="2024-11-22 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>* Mon Sep 09 2024 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}

* Tue Feb 27 2024 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

* Tue Aug 22 2023 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20230822.cvm release for OL9

* Mon Aug 21 2023 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}

* Tue Jun 13 2023 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20230613.cvm release for OL9

* Mon Feb 27 2023 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12842.html" type="self" title="ELSA-2024-12842" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45236.html" id="CVE-2023-45236" type="cve" title="CVE-2023-45236" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-45237.html" id="CVE-2023-45237" type="cve" title="CVE-2023-45237" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-1298.html" id="CVE-2024-1298" type="cve" title="CVE-2024-1298" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-25742.html" id="CVE-2024-25742" type="cve" title="CVE-2024-25742" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2-ovmf" version="20240909" release="2.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20240909-2.el9.noarch.rpm</filename>
          <sum type="sha256">8034d62d05c1d1aafb1be6b5da5034858c6d20c812310a127c7749dbb06e8277</sum>
        </package>
        <package name="edk2" version="20240909" release="2.el9" epoch="30" arch="src">
          <filename>edk2-20240909-2.el9.src.rpm</filename>
          <sum type="sha256">c7127a777a806f801e2690c584a287565a426462ac8c625624ab8de334d216ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-13022</id>
    <title> libvirt  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-4.el9]
- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]

[9.0.0-3.el9]
- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]

[9.0.0-2.el9]
- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)

[9.0.0-1.el9]
- Update to libvirt 9.0.0-1 (Karl Heubaum)

libvirt-python
[9.0.0-4.el9]
- Update to libvirt 9.0.0-4 (Karl Heubaum)

[9.0.0-3.el9]
- Update to libvirt 9.0.0-3 (Karl Heubaum)

[9.0.0-2.el9]
- Update to libvirt 9.0.0-2 (Karl Heubaum)

[9.0.0-1.el9]
- Update to libvirt 9.0.0-1 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-13022.html" type="self" title="ELBA-2023-13022" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">2cfe103c733b15e352f6fc4885401a42a6c56687b2702be260e859a19458b24a</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">e4b23ea40ae4e02d5ce2c4481698ca745eb6bab516f00b59726bd6bdfcd53189</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">5c9c4ca6552a17ade24e78e06a0349eed130e6bf9f2874771d988d971ba53038</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">43c6b1f84957d473532152cf49f9b0bc899221b04dbce4dbf47afcab7d3a4694</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">19469b908f1493d5cad88f987a7e754c3d6db23acd1fad2a84bd29ed9cecbf21</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">d784e7c3fed74649aaa066a5207ea924e49ba98bf5556b681bd50fcd5c23d65a</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">87fcf1d3a6b593a7af911a9f4e87952c65f405f88fef6f85ad6a40989b9fd5d4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">435bd5e9e0da0cc9e847c8436cbf81ecffff6ffa6673bb98f06641e0aa827426</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">c51e525f1f49c7d823dc48d8efcb7bd8dd80fcd22d19f55d335376fe0e5b0423</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="4.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-4.el9.src.rpm</filename>
          <sum type="sha256">5499dab626475d1ae8326ead3cd21b1a57b845a7f2d2307e8192d360c8590a6b</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">fb116383f192ce85cb6af48177d27d3e6e62c95a073d6136452ab3b2c72f2445</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">a62ac21c4b7116ee1759a5a0a988653efcccfee712c24998cf26108127dc9b11</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">25ba5778727980c9dbcb4d852d4b2dd0e3e605499c54b81e134154d03ae54fdd</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">e02f89b6835bc35dd78705ed76b28a44e757e960baa6887809da90b8b9b6dcdc</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">e32d33828da65715cfc31a1b565701e678e6d3a6d6339ae6a066713d2bafbfad</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">29b90ce71968d223359b75fe503bc7fdd438acfb3da3f2fb4727e5070dd51266</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">9435fba40600c83aa252c11c2693632ab189b8df503d912ce274df66ca8c833c</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">3dccd6d6d1db5ae4c61de4bdce83b5b4337a91c9e10cacde7d79ad67921dfbfe</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">00c3811beee39f67cf6ebcf953ad6d6dc197766a73bb485a05fefca268797d88</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">a61f8e37a0bc774de710dffeb6bf76eba22bad166672a67321f14e73be18845d</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">33704fea477558fdfd69eac97f5abf7708795c7642e74ad9663a7bc763925e91</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">30b9fe184e4452b88915cda4c740aa2dd981d16890ef7fa0bc646b406ff18ca9</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">fac9a81c7965544d6055439f98c0a959729def05f6feb9c6f3eb941ba3b77fc3</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="4.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-4.el9.src.rpm</filename>
          <sum type="sha256">77d7dcacf15acc78fcdcb39cb12bdddccf6b9d91ae26666a067f3f1680c8ae80</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">3bb67b318d99066113b0ef19aa0127b79dbe8c3e5a2267764011783385b6469a</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">691b822ae35035c9717b25de53212e5e803cff722167e5ae780ccb60f7fedfd2</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">8cd6f2bee4cf4ef25c3ec09957aaefe305db8b26c85a388f39555129a0e4c224</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">10d466cf845d49aa6324559831ffeeeb64b5c92d085bf95c4c30b8168e2b230a</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">65805573b856c51f6a09fb5a7f3b71a46ebf7de35298e2ae05043c61c589716f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="4.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-4.el9.x86_64.rpm</filename>
          <sum type="sha256">38394cf05efdec17df5f92612a39f7a9a170eb17c06bb47e97ac579ceffff745</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-13023</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[7.2.0-6.1.el9]
- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)

[7.2.0-6.el9]
- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]

[7.2.0-5.el9]
- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrange) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)

[7.2.0-4.el9]
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of 'Migration disabled' (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]

[7.2.0-3.el9]
- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]

[7.2.0-2.el9]
- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare)
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-13023.html" type="self" title="ELBA-2023-13023" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-common" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">3483ba613f72adf11add769fef842b592c2182623afc63572de132e71485e3cc</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">2b74d4bd18a4ddcd4d3fe01be25c67c9cd41ac512f2f6a167f7a17ff0bbc7395</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">cb7bc3a08b14c32f81fc08784d7b56db6243e23b904594446140fba4e831d4d5</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">2d2ba069ef3b78fe4b1bb20617f04c4e2ac8e1f1b2baeb101a63edfaffab9492</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">fa063431d277c2db96e8698557c689a1cecc8c8773959c33b2d3da5e7e6ad4db</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="6.1.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-6.1.el9.src.rpm</filename>
          <sum type="sha256">1b909da54016580692a50d1293181f6dd2e2fb20b9b7178c03554cb6ae65d7c0</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">4a983fa419eddc7cfd83a81d631a0ce388514f78a5d648efc7d018d0bd80d12a</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">6653522887643006007dad28d6fbe546b19527cb8a2dd25aea52e55d1d7a6f40</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">9015afd6fab6b5ee6ced0700f960e64513b23f3f9498c3af855841ba16c2c6a6</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">714ac4d1da8f4f8f0dcc0bd9032ad84384d5a84ac7cacca9c29efc25dd858634</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="6.1.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-6.1.el9.x86_64.rpm</filename>
          <sum type="sha256">a9625537bdefdc2edcbd8c435dd20bd0f7161e3c202e2c98410868efe3540f6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-13024</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2023-12-06 00:00:00"/>
    <updated date="2023-12-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[20230821]
- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  CVE-2019-14560
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735

[20230613]
- Create new 20230613.cvm release for OL9

[20230227]
- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  CVE-2021-38578</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-13024.html" type="self" title="ELSA-2023-13024" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4304.html" id="CVE-2022-4304" type="cve" title="CVE-2022-4304" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-4450.html" id="CVE-2022-4450" type="cve" title="CVE-2022-4450" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0215.html" id="CVE-2023-0215" type="cve" title="CVE-2023-0215" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-0286.html" id="CVE-2023-0286" type="cve" title="CVE-2023-0286" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2-ovmf" version="20230821" release="1.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20230821-1.el9.noarch.rpm</filename>
          <sum type="sha256">247b3b8c585bc2d1ad584f7771d12455b7e8445d7ecfaf4d10bfb1c989052322</sum>
        </package>
        <package name="edk2" version="20230821" release="1.el9" epoch="30" arch="src">
          <filename>edk2-20230821-1.el9.src.rpm</filename>
          <sum type="sha256">b7b1dabdd6254cd3cd188c257335a04f731d59ab5e067843180e49b00abff949</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20123</id>
    <title> libvirt  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-02-20 00:00:00"/>
    <updated date="2025-02-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-10.el9]
- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'pbrsb-no' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'psdp-no' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'fbsdp-no' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'sbdr-ssdp-no' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'mcdt-no' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'cmpccxadd' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'avx-vnni-int8' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'avx-ne-convert' (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature 'avx-ifma' (Tim Wiederhake) [Orabug: 37296073]

libvirt-python
[9.0.0-10.el9]
- Update to libvirt 9.0.0-10 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20123.html" type="self" title="ELBA-2025-20123" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-wireshark" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">7a5042f18b8a4629779673eab943e81ff63e5e218b4dfca5224aaa6f3f2046ec</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="10.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-10.el9.src.rpm</filename>
          <sum type="sha256">f3f93ab1c3ca3bf57a66df2bddcf86dfa38650317ea212ed1c9b9adbf88d18e3</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">f5c123dca1638ac0638ed28d0cd3f3420a93764357e86e704c31729f3495d589</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="10.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-10.el9.src.rpm</filename>
          <sum type="sha256">7231345892458fe2488a965723f04a548a39fb5455cc47949ed3f93568fbf8ec</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">3765cf2b7a058666f6f7431333105c353d168702b420518984bf809d5558baf1</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">b90d047189692fefb0c4a5cc70d27b084c04a750c1c5a19733f8da5c8f9b7527</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">32efd2fed0ec766e3835cfd8ac807affb00b538116bb130ba6b6bb4bc074b8ea</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">69ad42a95322640e0e73df7540f4bbad0e1ff3433c2b2f29d9f597f9ff7a70ef</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">d159a9a30b397318617b27d3cd2bb5b5fd57772cd677d543ee2f0e098f2179b3</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">a1c31de296b39ec999348e815f87eb88256fadb3e9c5b73e67ad7e46b152ea7b</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">1db53616dad9f693b95d3f86dc853a3a7f2c1eb62ed3e8da7f9002c5e905ec24</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">c45143fe5fbd010c477e7b24e515aa2c1b8aa22c7701900d99b518ebc81f2b32</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">3379150cf19c6c63c475c1e7bf7d58b774c2366d2e99dfe7ace5029762e64b8e</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">c4576b6c956fd2f89692a0852786e3556d9f36e652206ba588dca7a358f49649</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">d5b8038c1a23789d4378aec8f33285cd488574e0eb5e9887c9fca369ecdc69cf</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">3b0a3bfa1264cf23e2b7510c1f418e5e66b558f222a977fab76db3e9bcea363c</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">885ef3e748a314db5f4b2ef339331888e1cc17a569d3252cf61ea48b29e1081a</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">cfa2f333eb9918040671a92a57052480afe5bf52f83bffb5f80fa673f71d437e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">fe28ae7033e071a0279b9c268daafcff4402717a145b40d6bec47de6714b8478</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">b0b29768eb3dfe27cf7aeb6c21e65e66e5b8f69add4ea415835dd1b808cd25a3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">d3b7106c28262b135879253fe3236dc52bb317e9cfd37318467bc146ba875cde</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">893ff979ab1284faf98f5dc59f17a5b6574eeb7eeb9f46690d4411df631bf508</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">e822708b4152e19ab8eef9c140132493d01b73298479ac6449732fcc1951b8b6</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">cf1df657dfd864a32ea8b1867bc9a16e6fce5d657b4e8f07e745ee54dd7227f2</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">f619b0b7d9a233fc962a89db28d9ff5fa29860e8b2cbce9029d4823e63e42d1a</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">f0afd987803937e70b4ee75ee235380cca2353d24c1926cc82b0e8bc7449ced8</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">bcbd82d3186800f44d29f06d34293d0a8a390c0f294c787737eed38982147ec9</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">781132056b7b98d3df47338aa4fd6cd63b3866a3843939f82234f6191487f7f0</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">e4d9ae4978b4ab18bf5ce956d86a0cd039b45912d90a88ab85927e245555bd67</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="10.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-10.el9.x86_64.rpm</filename>
          <sum type="sha256">15f3b4f32033e822a0884b100aafb60c1ea845bbc7a04395f56336878629c8bc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2024-12574</id>
    <title>qemu-kvm security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2024-08-07 00:00:00"/>
    <updated date="2024-08-07 00:00:00"/>
    <rights>Copyright 2024 Oracle, Inc.</rights>
    <description>[7.2.0-13.el9]
- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-Andre Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daude) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2024-12574.html" type="self" title="ELSA-2024-12574" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-3447.html" id="CVE-2024-3447" type="cve" title="CVE-2024-3447" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-virtiofsd" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">172405a66d60b702959eee60ebd188d4d711918ed1b2108d698d181ddc81be2b</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">9fc3fd432687d1df148c6b18211962b8a90d338c4cb482f2f677c5bc1d69697c</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">fe152bfec1a9ba531522cd92632232302433659a919485def577386b64f41997</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">bac10b390aca3162c8429a69e406d1a51588f0810aea44829ac43c58e149f124</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="13.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-13.el9.src.rpm</filename>
          <sum type="sha256">1555680bcbee8dcf1d1ede06928fedaa4b5b2dd933a51410c4532fc0557184d6</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">a00eb74c27bfa7220fc049155d4b3ea7ff14c2f508b54ef350b91130874589aa</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">3962990a41aaf968d85d82790c4ed5910bc2e3547157f1151323f3eab46f3674</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">fcda3dffad562522100bfad274cb7285c1c449143d830fa2b12fa44ed42850ec</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">149fbb8c755f3e143eabbfb3941fe10f30cc5b30e47f7851372e2689711c809c</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">400dcb559be110c0e653e5ae33310e351f9b58960dcc3314be348f2793ae4544</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="13.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-13.el9.x86_64.rpm</filename>
          <sum type="sha256">c9f34cfcbc8174f736752196e0d96ddfefb98f6320fe80f066fe6fd2ed9337bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-500220</id>
    <title>qemu-kvm security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2026-08-19 00:00:00"/>
    <updated date="2026-08-19 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[7.2.0-42.el9]
- migration: Enable multifd VFIO device state transfer by default for Exadata (Maciej S. Szmigiero) [Orabug: 39783645]
- vfio/migration: Add x-migration-load-config-after-iter VFIO property (Maciej S. Szmigiero) [Orabug: 39783615]
- tests/9p: add 3 xattr FID limit test cases (local fs driver) (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: add 3 xattr FID limit test cases (synth fs driver) (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: add virtio_9p_add_synth_driver_args() test client function (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: increase P9_MAX_SIZE for test client (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- hw/9pfs: add xattr count query interface to fs synth driver (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- hw/9pfs: enable xattr (mockup) support for synth fs driver (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: add Txattrcreate / Rxattrcreate test client functions (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: add Tclunk / Rclunk test client functions (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- tests/9p: add Tread / Rread test client functions (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- qemu-options: document 9pfs max_xattr option (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- hw/9pfs: add max_xattr option (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- hw/9pfs: add xattr FID limit to prevent memory exhaustion (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- hw/9pfs: cap Treaddir allocation (CVE-2026-9238) (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- 9pfs/xen: implement response_buffer_size callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- 9pfs/virtio: implement response_buffer_size callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- hw/9pfs: add response_buffer_size transport callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- hw/9pfs: cap negotiated msize to transport limit (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- 9pfs/xen: implement msize_limit callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- 9pfs/virtio: implement msize_limit callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- hw/9pfs: add msize_limit transport callback (Christian Schoenebeck) [Orabug: 39601986] {CVE-2026-9238}
- 9pfs: fix missing rename lock in v9fs_co_readdir_many (CVE-2026-48004) (sin99xx) [Orabug: 39478419] {CVE-2026-48004}
- tests/qtest/libqos: add qvirtqueue_reset_pool() for descriptor pool reset (Christian Schoenebeck) [Orabug: 39636027] {CVE-2026-8348}
- libvduse: fix buffer overflow in vduse_queue_read_indirect_desc() (Stefano Garzarella) [Orabug: 39447322] {CVE-2026-6425}
- libvhost-user: fix buffer overflow in virtqueue_read_indirect_desc() (Stefano Garzarella) [Orabug: 39447322] {CVE-2026-6425}
- virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914) (Stefan Hajnoczi) [Orabug: 39522394] {CVE-2026-48914}

[7.2.0-41.el9]
- hw/virtio/virtio-crypto: validate asym session key size (Miguel Luis) [Orabug: 39480090]
- virtio-net: validate RSS queue selectors in parser (Miguel Luis) [Orabug: 39480096]
- ui: fix validation of VNC extended clipboard data length (Heechan Kang) [Orabug: 39442988] {CVE-2026-8343}
- ui/vnc: fix OOB read updating VNC update frequency stats (Daniel P. Berrange) [Orabug: 39447326] {CVE-2026-48003}
- ui/vnc: fix OOB write in lossy rect worker code (Daniel P. Berrange) [Orabug: 39447332] {CVE-2026-48002}
- ui/vnc: fix OOB write in VNC stats array (Daniel P. Berrange) [Orabug: 39447332] {CVE-2026-48002}
- tests/unit/test-blockjob: Disable complete_in_standby test (Peter Maydell) [Orabug: 39447937]
- virtio-scsi: reset SCSI devices from main loop thread (Stefan Hajnoczi) [Orabug: 39296894]
- dma-helpers: prevent dma_blk_cb() vs dma_aio_cancel() race (Stefan Hajnoczi) [Orabug: 39296894]
- scsi: protect req-&gt;aiocb with AioContext lock (Stefan Hajnoczi) [Orabug: 39296894]
- virtio-iommu: add error check before assert (Manos Pitsidianakis) [Orabug: 39447244]
- hw/virtio-iommu: Fix potential OOB access in virtio_iommu_handle_command() (Eric Auger) [Orabug: 39447244]
- thread-pool: Allow at least 1 thread in thread_pool_adjust_max_threads_to_work() (Maciej S. Szmigiero) [Orabug: 39429151]
- lsi53c895a: keep a reference to the device while SCRIPTS execute (Paolo Bonzini) [Orabug: 37517793] {CVE-2024-6519}
- hw/scsi/lsi53c895a: fix memory leak in lsi_scsi_realize() (Zheng Huang) [Orabug: 37517793] {CVE-2024-6519}
- hw/scsi/lsi53c895a: bump instruction limit in scripts processing to fix regression (Fiona Ebner) [Orabug: 37517793] {CVE-2024-6519}
- hw/scsi/lsi53c895a: add timer to scripts processing (Sven Schnelle) [Orabug: 37517793] {CVE-2024-6519}
- hw/scsi/lsi53c895a: add missing decrement of reentrancy counter (Sven Schnelle) [Orabug: 39429302]
- hw/i386/amd_iommu: Move IOAPIC memory region initialization to the end (Sairaj Kodilkar) [Orabug: 39422329]
- virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare (Paolo Bonzini) [Orabug: 39414097] {CVE-2026-5763}
- softmmu: Support concurrent bounce buffers (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612}
- system/physmem: Per-AddressSpace bounce buffering (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612}
- system/physmem: Propagate AddressSpace to MapClient helpers (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612}
- hw/pci: Ignore config-space data between 0x804-0x807 (Joao Martins)
- hostmem-memfd: Documentation for memory-backend-memfd 'keep' property (William Roche) [Orabug: 38769121]
- hostmem-memfd: Wire up MFD_MF_KEEP_UE_MAPPED via 'keep' property (William Roche) [Orabug: 38769121]

[7.2.0-38.el9]
- multifd: Save number of pages for batch context pages (Elena Ufimtseva) [Orabug: 39001115]
- migration: Introduce MigrateCleanupCtx for cleanup thread (Elena Ufimtseva) [Orabug: 39001115]
- migration: Move qemu_mmap_node/qemu_munmap_node (Elena Ufimtseva) [Orabug: 39001115]
- multifd: Allocate a large chunk for pages-&gt;cached (Elena Ufimtseva) [Orabug: 39214550]
- migration: Defer multifd and hash cache cleanup (Elena Ufimtseva) [Orabug: 39215178]
- multifd: Split multifd_send_shutdown (Elena Ufimtseva) [Orabug: 39215178]
- migration: Rename background cleanup thread and mutex/cond (Elena Ufimtseva) [Orabug: 39215178]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-500220.html" type="self" title="ELSA-2026-500220" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-6519.html" id="CVE-2024-6519" type="cve" title="CVE-2024-6519" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-8612.html" id="CVE-2024-8612" type="cve" title="CVE-2024-8612" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-48002.html" id="CVE-2026-48002" type="cve" title="CVE-2026-48002" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-48003.html" id="CVE-2026-48003" type="cve" title="CVE-2026-48003" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-48004.html" id="CVE-2026-48004" type="cve" title="CVE-2026-48004" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-48914.html" id="CVE-2026-48914" type="cve" title="CVE-2026-48914" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-5763.html" id="CVE-2026-5763" type="cve" title="CVE-2026-5763" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-6425.html" id="CVE-2026-6425" type="cve" title="CVE-2026-6425" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-8343.html" id="CVE-2026-8343" type="cve" title="CVE-2026-8343" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-8348.html" id="CVE-2026-8348" type="cve" title="CVE-2026-8348" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-9238.html" id="CVE-2026-9238" type="cve" title="CVE-2026-9238" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-guest-agent" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">847563701b2696e501cefdadb000f07f2b812dbfb53e0f1886e983a2cce5cda7</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">1eb1dfe950545184c7a13b90d9d2d054fcf0639ee8c3dcf6509e2f471ef7486a</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">04887a49c657aa834832c61056e8670d0f6fd8a645ec755e831071b48c1d785c</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">87df679c07027f83054905b17927178505c6e36a19a67421fb3d31c8c75b1014</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">27b58e34b6e32425717f39e8e9ec1ed3d2e3c4755b486a9dafa8733a384394f0</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">611ab7562f3e43e3af96b92445f9aad6ca72805c7a372ed18763675a91eb47e3</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-img-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">22e32744c4e2260f08edbad40b51c19e75c69aed2a1fe854b54bb3ae39c98174</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="42.el9" epoch="31" arch="src">
          <filename>qemu-kvm-7.2.0-42.el9.src.rpm</filename>
          <sum type="sha256">d4cc38faf01e5d91df5ad8087aa15715eefb938aa2aed68c9a6249d20d75a0a9</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">d269c1813cba746a95d48710f9e19bce1c7167f1f7b5cf954e37fceb60ed53a9</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-device-usb-host-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">b9cefb3d8e6248b89cb63594773971c52f8e9d3ba549457e24b5f6a8f7bccf00</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">0b0d1e0d10f5ffdf6510653449866467cf2a81e2b9a386a57324b43af7ec7946</sum>
        </package>
        <package name="qemu-virtiofsd" version="7.2.0" release="42.el9" epoch="31" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-42.el9.x86_64.rpm</filename>
          <sum type="sha256">479ad7305a9455a977b8ac2b51aab3ff8fcbe4953678dcab4bb81d82325602b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2025-28047</id>
    <title>edk2 security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2025-12-11 00:00:00"/>
    <updated date="2025-12-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[20250905-4]
- Create new 20250905 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access [Orabug: 38381983] {CVE-2025-3770}
- EDK2: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means [Orabug: 38382190] {CVE-2024-38805}
- EDK2: EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network [Orabug: 38382286] {CVE-2024-38797}
- EDK2:  Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. [Orabug: 38413860] {CVE-2024-36331}
- Update to OpenSSL 3.5.1 which includes the following fixed CVEs:
  {CVE-2025-4575} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-9143}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2025-28047.html" type="self" title="ELSA-2025-28047" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36331.html" id="CVE-2024-36331" type="cve" title="CVE-2024-36331" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38797.html" id="CVE-2024-38797" type="cve" title="CVE-2024-38797" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-38805.html" id="CVE-2024-38805" type="cve" title="CVE-2024-38805" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-3770.html" id="CVE-2025-3770" type="cve" title="CVE-2025-3770" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20250905" release="4.el9" epoch="30" arch="src">
          <filename>edk2-20250905-4.el9.src.rpm</filename>
          <sum type="sha256">da1f73a1937799cbde2f2686a38c086a850b1737b18fdedafcc9a31efc5083bc</sum>
        </package>
        <package name="edk2-ovmf" version="20250905" release="4.el9" epoch="30" arch="noarch">
          <filename>edk2-ovmf-20250905-4.el9.noarch.rpm</filename>
          <sum type="sha256">9a6f627223b03d8ff86404c9b6040a27d7d7aa84dc6f7da39b0397ae99b6e5cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-20125</id>
    <title> qemu-kvm  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2025-02-21 00:00:00"/>
    <updated date="2025-02-21 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[7.2.0-18.el9]
- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daude) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daude) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daude) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daude) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daude) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daude) [Orabug: 35710551]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-20125.html" type="self" title="ELBA-2025-20125" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-virtiofsd" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">e190909abc4815722b180a143e273da5e09bdae5dcc33528fe41291102b868ed</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">70fa8d4231ee3a1b51a42e9ff793548558ffce983e38d5736a62f74fe2a3565d</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">5b952119144cb6e920bc4836cd785aab04fcf3efac62da5746c02c62042f0900</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">16922f4a6c903134854b719e37ff00aea9ec0922c1fcc3e17b2b1209cefd4fd3</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">0e2b537b82a753a16b06d2f68fd1ee007c930474584282c981e8a9e493f49aa4</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">fa4777840d6f79dd654bca5fcb194fd235938917d53c9ebce5aebd0690bc4f94</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">07ddda00e59e1b8d95c47e7a0c25ff37d8d43faa12cc0aaf10707d9e0923bd52</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">deceb452982f2aea84edefe3d5259ef37d7dad3995b9f3b242a47a1ffc14ecd4</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">94bed098491ead53ff38beefef8768881fd2d1b947ca251b39b731577661f584</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="18.el9" epoch="30" arch="src">
          <filename>qemu-kvm-7.2.0-18.el9.src.rpm</filename>
          <sum type="sha256">29be86995da430de0e6e8369390486f46ad1b3ee678914d46c482ca390ffb842</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="18.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-18.el9.x86_64.rpm</filename>
          <sum type="sha256">b590d9267dcebc7dc6781cd4dd15c73ac0b17ad35043d9f64373d7b381c573fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2023-12328</id>
    <title> qemu-kvm security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 9</release>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-16 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[6.1.1-6.el9]
- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]

[6.1.1-5.el9]
- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2023-12328.html" type="self" title="ELSA-2023-12328" />
      <reference href="https://linux.oracle.com/cve/CVE-2023-1544.html" id="CVE-2023-1544" type="cve" title="CVE-2023-1544" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-kvm-block-curl" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-curl-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">610b75ece96f8d1641a9e912bab6954d6fe9cea50dd7d5f368c80a3ede99111b</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-rbd-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">de59fbe7a7bd60db2e981c174089af2394eb1d43a40506a1c3b12a5eb1046f21</sum>
        </package>
        <package name="qemu-virtiofsd" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-virtiofsd-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">37fb4d18e3293bbd071760cdb131821028a3b726dba0b10feadafce24b0a43f1</sum>
        </package>
        <package name="qemu-kvm-common" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-common-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">87df8359115e0594533fa411e7273cc7cd81ea4bc19683e510d1e4131ce2518f</sum>
        </package>
        <package name="qemu-img" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-img-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">dfe7e1e1222e1c6cb76a4cda17338992ec22f79c6805277b4746d65fc73ffc9a</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="6.el9" epoch="30" arch="src">
          <filename>qemu-kvm-6.1.1-6.el9.src.rpm</filename>
          <sum type="sha256">32f86ebe66c31010e7429ad489f16abd622a80a5a8d5710a63691f20edd7927e</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">7d667547794cf327b430e98bcd9ab692439fa73784b82775931b5a133c16d80a</sum>
        </package>
        <package name="qemu-guest-agent" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-guest-agent-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">f08008d652410f92d30ff4df4814e29e2ffbca63a0d0b9efe818b5741a9b1e05</sum>
        </package>
        <package name="qemu-kvm" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">f8b83762bf9a21b4f7cf59badd8f36643a2fac8d4ec7415e1f88eb56714c691d</sum>
        </package>
        <package name="qemu-kvm-core" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-core-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">5a94497e2c1b7b8c63efea1364d20f15072ff3ef0dff7344f83f5d94da9388a4</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.1.1" release="6.el9" epoch="30" arch="x86_64">
          <filename>qemu-kvm-block-ssh-6.1.1-6.el9.x86_64.rpm</filename>
          <sum type="sha256">f298324a68f26f8ff8b24027e1d9da96915461177f4f610536327f8a24563335</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50240</id>
    <title> libvirt  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2026-04-24 00:00:00"/>
    <updated date="2026-04-24 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>libvirt
[9.0.0-16.el9]
- cpu_map: Add cpu model EPYC Genoa (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Ignore all vmx-* features in sync_qemu_features_i386.py (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'vnmi' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'stibp-always-on' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'null-sel-clr-base' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'no-nested-data-bp' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'lfence-always-serializing' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'auto-ibrs' (Tim Wiederhake) [Orabug: 38458531]
- cpu_map: Add missing feature 'amd-psfd' (Tim Wiederhake) [Orabug: 38458531]
- sync_qemu_features_i386: Ignore xen-vapic (Tim Wiederhake) [Orabug: 38458531]

[9.0.0-15.el9]
- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]

[9.0.0-14.el9]
- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert 'conf: Fix migration in some firmware autoselection scenarios' (Wim ten Have) [Orabug: 38325535]

[9.0.0-13.el9]
- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]

libvirt-python
[30:9.0.0-16.el9]
- ol9/libvirt-python.spec: Update to libvirt-python 9.0.0-16 (Karl Heubaum)

[9.0.0-15.el9]
- Update to libvirt 9.0.0-15 (Karl Heubaum)

[9.0.0-14.el9]
- Update to libvirt 9.0.0-14 (Karl Heubaum)

[9.0.0-13.el9]
- Update to libvirt 9.0.0-13 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50240.html" type="self" title="ELBA-2026-50240" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">7fc6ef3ab1a2667c31b42c3d894924c3fd9880be75eb7c4e72e936661e5c7a3c</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-lock-sanlock-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">ebccfc0412c940665141abfee8cea3662da2370d48d8b60be15e83d531943920</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">4fb3b5c0c1f212b3df59da854bb8c073ff53e73a9d0c67b5177b3b8e224f89ad</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">abe201780e8db2ddc9a860c2255394010f25c49e8d001b172c9134f95def466f</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">93697260216500440788b8d2082d2e5a61933f644be70a85b607c97801f8a2be</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">bfca72d58df85794003ff1f56cf8075ba3f56cfb7bb0c61610f4de14c440c1db</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">f2ef5e21cec7480d9310303e615c277061a71317b97cbb6fa26901d7b611b1eb</sum>
        </package>
        <package name="libvirt-libs" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">80166dc6163cd4a0a84e69780f28630ef4b7732edb98e1f39997a305450e837e</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">f5da5dfd9a43b5c82a0371e1d90bcad0f31e39baf241359b1452239ab1e00dd1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">698720caf9333db3d43bc1a1f1265d1f90af1a21dec6ce78153e8cde0b23cd04</sum>
        </package>
        <package name="libvirt-client" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">ee0f3b4b68df1f27845ce0d5f5270b6ff8b9ebf1b75cf08ce5a9a7d66c1248ba</sum>
        </package>
        <package name="libvirt-python" version="9.0.0" release="16.el9" epoch="30" arch="src">
          <filename>libvirt-python-9.0.0-16.el9.src.rpm</filename>
          <sum type="sha256">a42c31263dfeec234b76dca4617b78c9ebf3dcf798ad751e159ff372846363ca</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">17a6a9b9a8c0f8edcfe3f4902af8fe85513e4fc65827cd0c0b703464af2665cf</sum>
        </package>
        <package name="libvirt-wireshark" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">b8834320db8331cfa3e89394d745ce5cce533e894bfbb2a6f8a4084471edd711</sum>
        </package>
        <package name="libvirt-nss" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">9f55538b0dcec152189419e1351886b43486d0a69dffff42e871162b0c0c12a0</sum>
        </package>
        <package name="python3-libvirt" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">5cf5dcb0da1237e79751e8fc567f6b358f1fe419b13ca86511bfff5f310b69f6</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">23e437af45e0aadf79f07c93a4a596dd373a2c541a2e5779853096e77b84946a</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">fcc4b70fb25895c69d9eb4e5be84c3406e68eae71094c3687c2525aaefac1088</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">a42c880a2c9174ab061333574d57028913a751d20483cbca40fde3a91956dab9</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">1f8ba830a247d31e8dc5596d07dfeaac6493faf9094fde9c227bdca495bcc1aa</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">2ecb6d18957d61c92c06a8d72b3b6f51ed7857068a21d667578b6846f27ed807</sum>
        </package>
        <package name="libvirt" version="9.0.0" release="16.el9" epoch="30" arch="src">
          <filename>libvirt-9.0.0-16.el9.src.rpm</filename>
          <sum type="sha256">75fc3a35934de8c526acc36957095a438968fdf7f3098e9d739938fc4e61048e</sum>
        </package>
        <package name="libvirt-client-qemu" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">94f56d1a19325a5f946898150602cdef02c34be3bd937e5fc67f41eb47db2099</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">b9654df32a6021658f8b1f0b2613bc7e17462f807517e132ae8071f678ab6033</sum>
        </package>
        <package name="libvirt-docs" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">5ed14fe77ba6c993d429bfbeda60a7b547d9c8f5353547c710880091336e7cee</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">7cbb3d8c57390ae55898b8c8ab9b4c54a41e4f08772ab925fd4fbc51a0eb096d</sum>
        </package>
        <package name="libvirt-daemon" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">a01e1f8a0517384b71a78f6baa24b81f3e0fb0d0884591c9a872f709172c82ef</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">d6a9c309f4f4afecc670dd73cb705478015ec438c504bfb02055b0d1d0613b4b</sum>
        </package>
        <package name="libvirt-devel" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">5f32d98ff55ca1163ed7eb2a416620e78b37898b2d5283b87fdaf830a61eb551</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="9.0.0" release="16.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-9.0.0-16.el9.x86_64.rpm</filename>
          <sum type="sha256">6c8a57ba6aa67a0ce467773cae968559e126e717cf25093c5e5e115f9d1c7e33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2026-50241</id>
    <title>qemu-kvm security update</title>
    <severity>Moderate</severity>
    <release>Oracle Linux 9</release>
    <issued date="2026-04-24 00:00:00"/>
    <updated date="2026-04-24 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[7.2.0-37.el9]
- hashing: use mmap/munmap for isal functions (Elena Ufimtseva) [Orabug: 39165991]
- multifd: replace allocations/free with mmap/munmap (Elena Ufimtseva) [Orabug: 39165991]
- page_cache: use mmap() based data pool for cache items (Elena Ufimtseva) [Orabug: 39165991]
- page_cache: change cache allocations to mmap (Elena Ufimtseva) [Orabug: 39165991]
- migration: add mmap/munmap wrapper (Elena Ufimtseva) [Orabug: 39165991]
- target/i386/kvm: Use zero if kvm_msr_entry_add() is called by getter (Dongli Zhang) [Orabug: 38965920]
- target/i386/kvm: Use logical counter index for AMD PMU getter (Dongli Zhang) [Orabug: 38965920]
- Document CVEs (Mark Kanda) {CVE-2025-54566} {CVE-2025-54567} {CVE-2025-8860} {CVE-2026-0665} {CVE-2026-3886}
- hw/usb/hcd-ohci: check for MPS=0 to avoid infinite loop (Jenny Guanni Qu) [Orabug: 39160764] {CVE-2026-3890}
- hyperv/syndbg: check length returned by cpu_physical_memory_map() (Paolo Bonzini) [Orabug: 39160749] {CVE-2026-3842}
- block/vmdk: fix OOB read in vmdk_read_extent() (Halil Oktay) [Orabug: 39160776] {CVE-2026-2243}
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 39173335] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 39173335] {CVE-2025-14876}

[7.2.0-36.el9]
- migration: Fix missing Error return in .load_setup() handlers (Maciej S. Szmigiero) [Orabug: 39154816]
- migration: Fix missing Error return in .save_setup() handlers (Maciej S. Szmigiero) [Orabug: 39154816]
- migration: qemu_savevm_state_setup(): Fix double PRECOPY_NOTIFY_SETUP call (Maciej S. Szmigiero) [Orabug: 39154816]
- multifd: Fix device state transfer (Maciej S. Szmigiero) [Orabug: 39154816]
- vfio/migration: Send VFIO_MIGRATION event before PRE_COPY_P2P transition (Avihai Horon) [Orabug: 39122260]
- vfio/migration: Adapt to upstream uAPI for VFIO_PRECOPY_INFO_REINIT (Maciej S. Szmigiero) [Orabug: 39121536]

[7.2.0-35.el9]
- migration: Disable switchover-ack-legacy by default for Exadata (Maciej S. Szmigiero) [Orabug: 37502472]
- vfio/migration: Check VFIO_PRECOPY_INFO_REINIT during completion (Avihai Horon) [Orabug: 37502472]
- vfio/migration: Implement VFIO_PRECOPY_INFO_REINIT (Avihai Horon) [Orabug: 37502472]
- vfio/migration: Implement new switchover-ack mechanism (Avihai Horon) [Orabug: 37502472]
- vfio/migration: Add Error ** parameter to vfio_migration_init() (Avihai Horon) [Orabug: 37502472]
- vfio/migration: Re-query precopy size before sending VFIO_MIG_FLAG_DEV_INIT_DATA_SENT (Avihai Horon) [Orabug: 37502472]
- migration: Check switchover-ack during switchover phase (Avihai Horon) [Orabug: 37502472]
- migration: Make switchover-ack re-usable (Avihai Horon) [Orabug: 37502472]
- migration: Refactor switchover-ack code (Avihai Horon) [Orabug: 37502472]
- linux-headers: Bring initial bytes re-init uAPI (Avihai Horon) [Orabug: 37502472]
- qemu-img: convert: add cli argument to use IO large buffers for convert (Akash Kulhalli) [Orabug: 37502472]
- hw/core/machine: Limit x-orcl-vm-tsc-khz-post-loadvm to KVM (Mark Kanda) [Orabug: 39095032]
- migration: add extra check for block in cache_fini (Elena Ufimtseva) [Orabug: 38885625]
- migration: do not tear down hash cache in critical path (Elena Ufimtseva) [Orabug: 38885625]
- migration: free cache-&gt;blocks in cache_fini() (Elena Ufimtseva) [Orabug: 39061395]

[7.2.0-34.el9]
- migration: bugfix - free migration_ops correctly (Elena Ufimtseva) [Orabug: 38977316]
- target/i386/kvm: set VM ioctl KVM_SET_TSC_KHZ post loadvm (Dongli Zhang) [Orabug: 38928409]
- migration: introduce KVM function called post loadvm (Dongli Zhang) [Orabug: 38928409]
- migration: add extra checks in multifd_ram_fill_packet (Elena Ufimtseva) [Orabug: 38949741]
- migration: fix the error path semantic in multifd thread (Elena Ufimtseva) [Orabug: 38949741]
- page_cache: dynamic cache allocation (Elena Ufimtseva) [Orabug: 38854239] [Orabug: 38949741]
- multifd: return errors on packets filling (Elena Ufimtseva) [Orabug: 38854239]
- migration: detect errors on hash initialization (Elena Ufimtseva) [Orabug: 38876780]
- migration: propagate hashing errors (Elena Ufimtseva) [Orabug: 38876780]
- migration/multifd: Handle allocation failures (Elena Ufimtseva) [Orabug: 38876780]
- migration: Add Error** argument to ram_state_init() (Cedric Le Goater) [Orabug: 38876780]
- migration: Add Error** argument to .load_setup() handler (Cedric Le Goater) [Orabug: 38876780]
- migration: Add Error** argument to .save_setup() handler (Cedric Le Goater) [Orabug: 38876780]
- migration: Add Error** argument to qemu_savevm_state_setup() (Cedric Le Goater) [Orabug: 38876780]
- migration: Add Error** argument to vmstate_save() (Cedric Le Goater) [Orabug: 38876780]
- migration: Always report an error in ram_save_setup() (Cedric Le Goater) [Orabug: 38876780]
- qemu-file: Make qemu_fflush() return errors (Juan Quintela) [Orabug: 38876780]
- qemu-file: remove shutdown member (Juan Quintela) [Orabug: 38876780]
- vfio: Always report an error in vfio_save_setup() (Cedric Le Goater) [Orabug: 38876780]
- migration/vmstate: Introduce vmstate_save_state_with_err (Tejus GK) [Orabug: 38876780]
- migration/vfio: Remove x-orcl-device-dirty-page-tracking (Elena Ufimtseva) [Orabug: 38944077]
- target/i386/kvm: write tsc_offset for parked vCPUs too (Dongli Zhang) [Orabug: 38853905]
- accel/kvm:: move KVMParkedVcpu definition to header file (Dongli Zhang) [Orabug: 38853905]
- target/i386/kvm: use vCPU 0 tsc_offset for all vCPUs (Dongli Zhang) [Orabug: 38853905]
- target/i386/kvm: account downtime only with synchronized TSC (Dongli Zhang) [Orabug: 38853905]
- target/i386/kvm: implement reset method for kvmclock (Dongli Zhang) [Orabug: 38853905]

[7.2.0-33.el9]
- migration: Change default pages to scan to 8192 for Exadata (Elena Ufimtseva) [Orabug: 38732433]
- meson: check if isa-l installed and enable it (Elena Ufimtseva) [Orabug: 38732433]
- migration/page_cache: Improve isal-crypto-mb-sha256 cache-miss handling (Joao Martins) [Orabug: 38732433]
- migration/page_cache: Add isal_crypto multi-buffer sha256 variant (Joao Martins) [Orabug: 38732433]
- migration/page_cache: Add batching mode support for isa-l_crypto (Joao Martins) [Orabug: 38732433]
- migration: Use algorithm table to initialize hashing (Elena Ufimtseva) [Orabug: 38732433]
- migration: Add existing algorithms to description table (Elena Ufimtseva) [Orabug: 38732433]
- migration: Add a unified description structure for hashing algorithms (Elena Ufimtseva) [Orabug: 38732433]

[7.2.0-32.el9]
- spec: Provide aarch64 and mips user static packages (Mark Kanda)
  These packages are for Oracle internal use only (not for external customers)
- cpu: Only compile runstate_is_running() for system mode (Mark Kanda)
- linux-user: Do not define struct sched_attr if libc headers do (Khem Raj)

[7.2.0-31.el9]
- migration: Fix the cancellation/error path (Elena Ufimtseva) [Orabug: 38739293]

[7.2.0-30.el9]
- live migration: scan and clear contiguous dirty pages regions of ram (Elena Ufimtseva) [Orabug: 38388170]
- migration: add hash_rate trace point (Elena Ufimtseva) [Orabug: 38388170]
- migration: add parameter to specify max number of contiguous pages (Elena Ufimtseva) [Orabug: 38388170]
- multifd: send more pages then IOV_MAX (Elena Ufimtseva) [Orabug: 38388170]
- io: fix use after free in websocket handshake code (Daniel P. Berrange) [Orabug: 38687831] {CVE-2025-11234}

[7.2.0-29.el9]
- hw/core/machine.c: Add vhost-scsi-pci num_queues = 1 to hw_compat_7_2_exadata (Greg Jumper) [Orabug: 38544462]
- target/i386/kvm: account blackout downtime for kvm-clock and guest TSC (Dongli Zhang) [Orabug: 38307402]
- cpus: resume hotplugged vCPU only when the guest is running (Dongli Zhang) [Orabug: 38307402]
- system/qdev-monitor: move drain_call_rcu call under if (!dev) in qmp_device_add() (Dmitrii Gavrilov) [Orabug: 38298220]
- acpi: pcihp: allow repeating hot-unplug requests (Igor Mammedov) [Orabug: 38257990]
- hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint (Peter Maydell) [Orabug: 37517799] {CVE-2024-8354}
- target/i386: Introduce GraniteRapids-v2 model (Tao Su) [Orabug: 38330786]
- target/i386: Add AVX512 state when AVX10 is supported (Tao Su) [Orabug: 38330786]
- target/i386: Add feature dependencies for AVX10 (Tao Su) [Orabug: 38330786]
- target/i386: add CPUID.24 features for AVX10 (Tao Su) [Orabug: 38330786]
- target/i386: add AVX10 feature and AVX10 version property (Tao Su) [Orabug: 38330786]
- target/i386: return bool from x86_cpu_filter_features (Paolo Bonzini) [Orabug: 38330786]
- target/i386: do not rely on ExtSaveArea for accelerator-supported XCR0 bits (Paolo Bonzini) [Orabug: 38330786]
- target/i386: Call accel-agnostic x86_cpu_get_supported_cpuid() (Philippe Mathieu-Daude) [Orabug: 38330786]
- target/i386: Add new CPU model GraniteRapids (Tao Su) [Orabug: 38330786]

[7.2.0-28.el9]
- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2026-50241.html" type="self" title="ELSA-2026-50241" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36350.html" id="CVE-2024-36350" type="cve" title="CVE-2024-36350" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-36357.html" id="CVE-2024-36357" type="cve" title="CVE-2024-36357" />
      <reference href="https://linux.oracle.com/cve/CVE-2024-8354.html" id="CVE-2024-8354" type="cve" title="CVE-2024-8354" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-11234.html" id="CVE-2025-11234" type="cve" title="CVE-2025-11234" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-14876.html" id="CVE-2025-14876" type="cve" title="CVE-2025-14876" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-54566.html" id="CVE-2025-54566" type="cve" title="CVE-2025-54566" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-54567.html" id="CVE-2025-54567" type="cve" title="CVE-2025-54567" />
      <reference href="https://linux.oracle.com/cve/CVE-2025-8860.html" id="CVE-2025-8860" type="cve" title="CVE-2025-8860" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-0665.html" id="CVE-2026-0665" type="cve" title="CVE-2026-0665" />
      <reference href="https://linux.oracle.com/cve/CVE-2026-2243.html" id="CVE-2026-2243" type="cve" title="CVE-2026-2243" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="qemu-virtiofsd" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-virtiofsd-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">edd4162e965f6ba3d762b9f269aa465426eb20dea91bb23096d1cc67bdd7b56b</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="37.el9" epoch="31" arch="src">
          <filename>qemu-kvm-7.2.0-37.el9.src.rpm</filename>
          <sum type="sha256">e7ae62133db914b08d4d142033d15266375160df5812d82be932f65c94e95c8c</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">7715d20fad62495cc0a093008f5a81723edd7f7fa1a7150eac6bb060b36a6a95</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-rbd-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">a7cfeced82def3fd3a62c5c18182661d7edf4e1fb8ee990c57724ca8a3905c1a</sum>
        </package>
        <package name="qemu-img" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-img-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">d102b1e77cebbf26927a331fdcc1adc5c5f127052cb064b3dd955bbc7e523c75</sum>
        </package>
        <package name="qemu-kvm-common" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-common-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">4039d505d8f51da6ac7d234c8a813b25580094d2b78da19baa7cf362f0a3901e</sum>
        </package>
        <package name="qemu-kvm-core" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-core-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">fc12ba34bd6c5dff8d35cf197c23a73cc1ca2921bff49f93d3566cd185316813</sum>
        </package>
        <package name="qemu-guest-agent" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-guest-agent-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">873e34181daf8f472b5f841797cc69fce5403699c2122cd027f81aaf99b5dbf5</sum>
        </package>
        <package name="qemu-kvm" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">a5bed2f1b663af7ceb066e2fb20c74b4ab0914e6b52bd669d35949f954f606fb</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-device-usb-host-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">1c9ca0dc0b653710cd56d231880d6ba094dcdccd7154167927ef7519a05544f3</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-ssh-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">b3efc381c4f50107af724408dbd87761ac3bfc5d57bbf90940292afeda360ddd</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="7.2.0" release="37.el9" epoch="31" arch="x86_64">
          <filename>qemu-kvm-block-curl-7.2.0-37.el9.x86_64.rpm</filename>
          <sum type="sha256">00cae2c2b2ef2214ff28d9145bdc4b7e3c35fdaf12fb45efb4e3c8eb5e62c0cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-50172</id>
    <title> qemu-kvm, libvirt bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2026-03-25 00:00:00"/>
    <updated date="2026-03-25 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>qemu-kvm
[10.1.4-3.el9]
- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]

[10.1.4-2.el9]
- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)

[10.1.4-1.el9]
- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cedric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennee)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennee)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daude)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daude)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daude)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennee)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null pathname for statx()/fstatat() (Jean-Christian CIRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cedric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cedric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cedric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cedric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cedric Le Goater)
- Fix const qualifier build errors with recent glibc (Cedric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert 'nvme: Fix coroutine waking' (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennee)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennee)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)

[10.1.3-2.el9]
- Update epoch value (Karl Heubaum)

[10.1.3-1.el9]
- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cedric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daude)
- ui/vdagent: fix windows agent regression (Marc-Andre Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daude)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Vossen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrange)
- tests/functional: fix formatting of exception args (Daniel P. Berrange)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine's AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine's AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennee)
- tests: move test_kvm to share.linaro.org (Alex Bennee)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennee)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennee)
- tests: move test_virt assets to share.linaro.org (Alex Bennee)
- tests: move test_xen assets to share.linaro.org (Alex Bennee)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrange)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrange)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring 'key encipherment' usage in x509 certs (Daniel P. Berrange)
- io: fix use after free in websocket handshake code (Daniel P. Berrange) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrange)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrange)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to 'num_initial_regions' (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)

[10.1.2-1.el9]
- Update for QEMU 10.1.2.

[10.1.1-1.el9]
- Update for QEMU 10.1.1.

[10.1.0-1.el9]
- Update for QEMU 10.1.0.

[7.2.0-28.el9]
- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]

libvirt
[12.0.0-5.el9]
- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]

[12.0.0-4.el9]
- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)

[12.0.0-3.el9]
- Update epoch value (Karl Heubaum)

[12.0.0-2.el9]
- Update epoch value (Karl Heubaum)

[12.0.0-1.el9]
- Update to libvirt 12.0.0 (Karl Heubaum)

[9.0.0-15.el9]
- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]

[9.0.0-14.el9]
- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert 'conf: Fix migration in some firmware autoselection scenarios' (Wim ten Have) [Orabug: 38325535]

[9.0.0-13.el9]
- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]

libvirt-python
[12.0.0-5.el9]
- Update to libvirt 12.0.0-5 (Mark Kanda)

[12.0.0-4.el9]
- Update to libvirt 12.0.0-4 (Mark Kanda)

[12.0.0-3.el9]
- Update to libvirt 12.0.0-3 (Karl Heubaum)

[12.0.0-2.el9]
- Update epoch value (Karl Heubaum)

[12.0.0-1.el9]
- Update to libvirt-python 12.0.0 (Karl Heubaum)

[9.0.0-15.el9]
- Update to libvirt 9.0.0-15 (Karl Heubaum)

[9.0.0-14.el9]
- Update to libvirt 9.0.0-14 (Karl Heubaum)

[9.0.0-13.el9]
- Update to libvirt 9.0.0-13 (Karl Heubaum)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-50172.html" type="self" title="ELBA-2026-50172" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="libvirt-ssh-proxy" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-ssh-proxy-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">29750b90051da64842596648ab5248e6fca0e36fa620acee2f629dc816aa7aff</sum>
        </package>
        <package name="python3-libvirt" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>python3-libvirt-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">23f174e6ee2e284c7e069bc493e71fcdc650ee551f466209ffad9de7fe415212</sum>
        </package>
        <package name="libvirt-client-qemu" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-qemu-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">3b6347b1a07cdbb2d61b935d657cc1416dfeb729ecf859cc18af341c0d3ad29d</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-secret-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">abf6a6f593e911efb5a988d0a7cb55de168b764adbc5b65f4e0ef91b703923d2</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-kvm-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">22a2288fcf93a2114f3636e0f2c97ecea296d1da5d08327a32a2ea350b3b1bc9</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-disk-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">4ecc45ba5e03ecb13063471e8ae0b53a6adf8d31ff178db47dabbbc065435723</sum>
        </package>
        <package name="libvirt-daemon-plugin-lockd" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-plugin-lockd-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">7dbea017a18a48f325da70e2ea72151d9f3a86458a3d9484ee0148b7044c32da</sum>
        </package>
        <package name="libvirt-daemon-log" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-log-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">f0c72162e11140d9c25762e0494a508c3fbe7161d9b901c41e32e5410e5f2937</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-interface-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">420f3b21ef69564894ca8f3bc922e0833519e6206c70e61379b45f6e690cd7e4</sum>
        </package>
        <package name="libvirt-libs" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-libs-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">9e49844ad935449a63f48ab5b67890e9d43ff197f288687a4fe5ad38d70256a8</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-device-display-virtio-gpu-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">021b64cae0567e2d2b86ee0cb8472834883744005e9f4b1212bc202f8d1c2204</sum>
        </package>
        <package name="libvirt" version="12.0.0" release="5.el9" epoch="30" arch="src">
          <filename>libvirt-12.0.0-5.el9.src.rpm</filename>
          <sum type="sha256">b0e3f2a56c176644fc1fbfb35fb56c7b76ccd57613cf61d8cee2ca30e5fa1a84</sum>
        </package>
        <package name="libvirt-client" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-client-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">d43549c680b987fd11136ecf4324cfc29b6facd8848e40d645e2b4f5d4bc9bee</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-scsi-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">d3c5fffb86580edbb3801da1bc3cc923889bb697b352acec62ab9323aef40d6a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-mpath-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">6e135b8ff647d3f54b010d439039ef8cd129fd9751a51d1f4b4aad0b94538dd1</sum>
        </package>
        <package name="qemu-kvm-common" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-common-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">6632c4bb6d77cf5c6435978f22aaace7dc3369c8c338d1bd3e1ea3b559211221</sum>
        </package>
        <package name="libvirt-python" version="12.0.0" release="5.el9" epoch="30" arch="src">
          <filename>libvirt-python-12.0.0-5.el9.src.rpm</filename>
          <sum type="sha256">159c9c7391c19627c0fe463777b833264eab63264d5da63bf0c20d62e473cff8</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-gpu-pci" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-device-display-virtio-gpu-pci-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">c92c21ff4c66aef87e62337aa069b2e0148b8add651d6d463562fbe76909202e</sum>
        </package>
        <package name="libvirt-docs" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-docs-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">40d504323b839801543e4120733ddd765fd3998def72f072856a11200699bbf1</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-block-rbd-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">6b0e47b32cabf99d63892fb621fb5370c8247c041f41b3c532598ffc38653203</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-logical-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">50029d9bedd8123b962889ffeec687cbbbaa0ee50e3dfcf37741876a3f3fb727</sum>
        </package>
        <package name="libvirt-daemon-lock" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-lock-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">6529afc0694ec7708b60fdafa8387f1d05655a7df10901310bfb0908ec2cea29</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-nwfilter-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">8f7e1a7f1f7304183be45764beb0c200e23d7067410d3ad140c34ac061bc8b39</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-network-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">925376dbb80c21437cb4abb7ccb149420ae681134499bbff669c5af75707c082</sum>
        </package>
        <package name="qemu-kvm" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">657261d1f62e9d33d0f74097c71a25de9071145b032fc5782555897a53b5c5ce</sum>
        </package>
        <package name="qemu-kvm-ui-dbus" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-ui-dbus-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">c4a3aa64dc07a29b564cd830d629bff0c68b7b19143d9c25e08b6a4e0f1baefd</sum>
        </package>
        <package name="libvirt-devel" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-devel-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">9df0096f800c3696654acf692f25e66d265a0a475c9a66f014187cd7f128edb8</sum>
        </package>
        <package name="qemu-kvm-device-usb-host" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-device-usb-host-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">829d854fb61ce265510fe8c2b647abc3a921fd0d7631b86bde0d504dd0339f10</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-iscsi-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">28e2cc1f9e025e77f4312fa6e1d53aed3c448678b28ab22c132403b63841a64d</sum>
        </package>
        <package name="qemu-guest-agent" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-guest-agent-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">04041db2bcd41c43a2713a9728b4081966495a966c2ebf4da05258f9036947bf</sum>
        </package>
        <package name="qemu-kvm-tools" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-tools-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">e7e875b5d81daa114e71e8814cabc99c4b55fccff2aaa5d7451f496d1505c55c</sum>
        </package>
        <package name="libvirt" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">a5d309da9101de5afc6dcbe1970cca90267c69a6834d31d7443c788edb0b7912</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nodedev-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">e67a1acea8ba7c323a35f158eef89c25182266d8fdf95329fed03fa9bb5b3a56</sum>
        </package>
        <package name="libvirt-daemon-proxy" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-proxy-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">ae75a6fe4c6fb7f0f0c840203acfd848d1d8e073f63988172ae60850c66a3091</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-config-network-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">24c4a4801fa14b30674edb185c8978073e56b342e84caa77e6bd232f626a5a59</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-block-ssh-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">3cf57b27d03ccd7b3eafc6bc20912fe7a209a8a5d75e8e470533c7e7f24b7b32</sum>
        </package>
        <package name="libvirt-daemon" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">52e18f6a98d5f0f25c2915ac03335b1ccb8c5b5ef92cc8b80285067e9753681c</sum>
        </package>
        <package name="qemu-kvm-block-blkio" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-block-blkio-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">a1725d3b0bd91eee3b514113eff27c2a2255052c26c5cfd8247449f98c361496</sum>
        </package>
        <package name="qemu-kvm-docs" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-docs-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">0f44ab10ba43a2f8b7944373c257566f2e735aca935606ef32fee0743b193a6a</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-nwfilter-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">38d9ec66d3840d726d98e80f29a46eb27e1217d0eebd4c22092e943117dddb39</sum>
        </package>
        <package name="qemu-kvm-device-display-virtio-vga" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-device-display-virtio-vga-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">40ec2138fd04b7ef32d2023928e09a8f92a3cc9bf685a6cded0bb20b696ed485</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-core-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">6681e2ba173fbf8e55986a0cad1ce42adeddcfa872a9e5822f760caed4a38b90</sum>
        </package>
        <package name="qemu-kvm-core" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-core-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">66ae831eac82ba012bb918f5dc5f55b4d3e5eaa9f29ab3a4091bcd17d3e267f3</sum>
        </package>
        <package name="qemu-pr-helper" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-pr-helper-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">02b44a86a7c65a4a0906c948fe42d140cd515dcf599740bcc16164202464a322</sum>
        </package>
        <package name="qemu-kvm-audio-dbus" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-audio-dbus-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">67f7b78aed514796b1a3c0da4b7e07308c00eb86488aa3fd45f830d2a3a55b96</sum>
        </package>
        <package name="qemu-kvm" version="10.1.4" release="3.el9" epoch="32" arch="src">
          <filename>qemu-kvm-10.1.4-3.el9.src.rpm</filename>
          <sum type="sha256">f604198701c72d51a11b23d3f664da36bea270fd72d09799d424c67370b620d3</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-block-curl-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">7fcc86b9297c64b28d908e998f1729d66d84d41c3887af7ecd95fab28de8cc77</sum>
        </package>
        <package name="libvirt-wireshark" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-wireshark-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">01b8acc22b6481f2a1e0da18ff4a548adbae3ec9f8ed24c023165f0c801df829</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">d01756c02de7b0f8be869a65fc3dd0d7a5fb086c222de002b6e4035e0afc480c</sum>
        </package>
        <package name="libvirt-nss" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-nss-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">800fe3a0571ab33f91bc8fcb1d26725aacf743ba6fdc87ce4bf2c94c082c6dc2</sum>
        </package>
        <package name="qemu-img" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-img-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">75c04497743cb48a11e27911f5b8d17d03cdd0a3d0a76562deb129745e9da406</sum>
        </package>
        <package name="libvirt-daemon-common" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-common-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">cf2c00e2c406fd3574250b6b42bc08396b4d06502ba392a5651f49163c7c8830</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-storage-rbd-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">f22898a83422c24493470efc84d4fd780d03baa155a20d3a7cecfa1b990c7552</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="10.1.4" release="3.el9" epoch="32" arch="x86_64">
          <filename>qemu-kvm-block-iscsi-10.1.4-3.el9.x86_64.rpm</filename>
          <sum type="sha256">4eae7e0c1b70b8a1e5c631f1bd43a778134c5c6e463d60ad3f5be93f397fcf01</sum>
        </package>
        <package name="libvirt-daemon-plugin-sanlock" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-plugin-sanlock-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">df53d3205be212c04082965cc4b7eec35cf5a0d12912b0059f76bec5786fa9e7</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="12.0.0" release="5.el9" epoch="30" arch="x86_64">
          <filename>libvirt-daemon-driver-qemu-12.0.0-5.el9.x86_64.rpm</filename>
          <sum type="sha256">4abfda3d538557a91a2bc58906040f481b43b7e76c7d4cd2cd049603e3803914</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-9563</id>
    <title> edk2  bug fix update</title>
    <release>Oracle Linux 9</release>
    <issued date="2022-07-14 00:00:00"/>
    <updated date="2022-07-14 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>* Tue Jun 28 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220628 release for OL9

* Wed Jun 01 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220601 release for OL9

* Wed May 11 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220511 release for OL9

* Wed Apr 06 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}

* Mon Feb 07 2022 Aaron Young &lt;aaron.young@oracle.com&gt;
- Create new 20220207 build for OL9</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-9563.html" type="self" title="ELBA-2022-9563" />
    </references>
    <pkglist>
      
      <collection short="ol9_x86_64_kvm_utils">
        <name>ol9_x86_64_kvm_utils</name>
        <package name="edk2" version="20220628" release="1.el9" epoch="30" arch="src">
          <filename>edk2-20220628-1.el9.src.rpm</filename>
          <sum type="sha256">82a0e2bc47612a19a536a3cf08bc5707a124490c857a593bf44f776cd0d6729a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>