# CVE-2026-48002: qemu vulnerability

CVE-2026-48002 is fixed in 122 products on 1 platform, first by ELSA-2026-50337, released June 23, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-48002
- Priority: High
- CVSS: 7.9 (IMPORTANT)
- EPSS: n/a
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 23, 2026

## Description

hivex [1.3.18-23] - Limit recursion in ri-records (CVE-2021-3622)   resolves: rhbz#1976194  [1.3.18-22.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504)   resolves: rhbz#1950501  [1.3.18] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.3.18] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.3.15-7] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [1.3.15-6] - Drop hivex-static subpackage   resolves: rhbz#1560207  [1.3.15-5] - Rebuild for OCaml 4.07.0.  [1.3.15-4] - Remove python2 support   resolves: rhbz#1559086  [1.3.15-3] - Add upstream patch to fix injection of LDFLAGS (RHBZ#1548536).  libguestfs [1.44.0-9.0.3] - libguestfs.spec: Allow kernel-uek in additional to kernel [Orabug: 38825835]  libguestfs-winsupport [8.10-1] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236373  [8.8-1] - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,   CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789   resolves: rhbz#2127240 rhbz#2127248   (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)  [8.6-1] - Rebase to ntfs-3g 2021.8.22 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,   CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,   CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254   resolves: rhbz#2004490  [8.2-1.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [8.2] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [8.0-4] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [8.0-3] - Fix for CVE-2019-9755   (heap-based buffer overflow leads to local root privilege escalation)   resolves: rhbz#1698503  [8.0-2] - Fix for ntfsclone crash (RHBZ#1601146).  [8.0-1] - Rebase to 2017.3.23. - Remove patches which are now upstream. - Resynch with Fedora package. - Enable all architectures for RHEL 8.  [7.2-2] - Fix for handling guest filenames with invalid or incomplete   multibyte or wide characters   resolves: rhbz#1301593  libiscsi [1.18.0-8] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [1.18.0-7.el8] - libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025] - Resolves: bz#1581025   (Remove --disable-werror from spec file)  [-] - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942] - Resolves: bz#1597942   (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)  [1.18.0-5.el8] - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541] - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541] - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541] - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541] - libiscsi-avoid-fallthrough.patch [bz#1634541] - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541] - Resolves: bz#1634541   (Fix important coverity issues (libiscsi))  [1.18.0-4.el8] - Fixed a build issue with the latest rdma-core  [1.18.0-2] - Fix rdma deps and don't restrict archs - Add --disable-werror to fix gcc8 build (bz #1556044) - Spec file cleanups (bz #1483290)  [1.18.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild  [1.18.0-1] - Rebased to version 1.18.0 - Added patch to fix gcc7 warnings  [1.15.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild  [1.15.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild  libnbd [1.6.0-6.el8] - Fix CVE-2024-7383 NBD server improper certificate validation   resolves: RHEL-52728  [1.6.0-5.el8] - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails   resolves: rhbz#2045718  [1.6.0-4.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [1.2.2] - Resolves: bz#1844296 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.2.2-1] - New stable release 1.2.2.  [1.2.1-1] - New stable release 1.2.1.  [1.2.0-1] - New stable release 1.2.0.  [1.0.3-1] - New upstream version 1.0.3. - Contains fix for remote code execution vulnerability. - Add new libnbd-security(3) man page.  [1.0.2-1] - New upstream version 1.0.2. - Remove patches which are upstream. - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842). - Fix previous commit message.  [1.0.1-2] - Add upstream patch to fix nbdsh (for nbdkit tests). - Fix interop tests on slow machines.  libtpms [0.9.1-3.20211126git1ff6fe1f43] - Fix CVE-2025-49133   Resolves: RHEL-96251  [0.9.1-2.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018)   Resolves: rhbz#2173964   Resolves: rhbz#2173970  [0.9.1-1.20211126git1ff6fe1f43] - Backport s_ContextSlotMask initialization fix   Resolves: rhbz#2111433  [0.9.1-0.20211126git1ff6fe1f43] - Rebase to 0.9.1 (sync with RHEL9)   Resolves: rhbz#2029355  [0.7.4-6.20201106git2452a24dab] - Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets   Resolves: rhbz#1999307  [0.7.4-5.20201106git2452a24dab] - Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM   Fixes: rhbz#1976816  [0.7.4-4.20201106git2452a24dab] - tpm2: CryptSym: fix AES output IV   Fixes: rhbz#1942904  [0.7.4-3.20201106git2452a24dab] - Add git as build dependency   Related: rhbz#1858821  [0.7.4-2.20201106git2452a24dab] - tpm2: Return properly sized array for b parameter for NIST P521 (HLK) #180   Fixes: rhbz#1858821  [0.7.4-1.20201106git2452a24dab] - Follow stable-0.7.0 branch to v0.7.4 with security-related fixes.   Fixes: rhbz#1893444  libvirt [9.0.0-16.el8] - cpu_map: Add cpu model EPYC Genoa (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Ignore all vmx-* features in sync_qemu_features_i386.py (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'vnmi' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'stibp-always-on' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'null-sel-clr-base' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'no-nested-data-bp' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'lfence-always-serializing' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'auto-ibrs' (Tim Wiederhake) [Orabug: 38458531] - cpu_map: Add missing feature 'amd-psfd' (Tim Wiederhake) [Orabug: 38458531] - sync_qemu_features_i386: Ignore xen-vapic (Tim Wiederhake) [Orabug: 38458531]  [9.0.0-15.el8] - qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211] - resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]  [9.0.0-14.el8] - MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535] - conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535] - qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535] - conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535] - conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535] - qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535] - qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535] - conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535] - conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535] - qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535] - qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535] - qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535] - tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535] - tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535] - tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535] - tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535] - tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535] - news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535] - news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535] - docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535] - tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535] - qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535] - conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535] - qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535] - qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535] - drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535] - conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535] - conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535] - qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535] - qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535] - qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535] - conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535] - tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535] - qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535] - qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535] - qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535] - qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535] - qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535] - conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535] - conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535] - qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535] - qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535] - tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535] - tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535] - tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535] - tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535] - tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535] - tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535] - tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535] - docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535] - Revert 'conf: Fix migration in some firmware autoselection scenarios' (Wim ten Have) [Orabug: 38325535]  [9.0.0-13.el8] - qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711] - qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711] - qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711] - qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711] - qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711] - qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]  [9.0.0-12.el8] - Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]  [9.0.0-11.el8] - cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]  [9.0.0-10.el8] - cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'pbrsb-no' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'psdp-no' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'fbsdp-no' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'sbdr-ssdp-no' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'mcdt-no' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'cmpccxadd' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'avx-vnni-int8' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'avx-ne-convert' (Tim Wiederhake) [Orabug: 37296073] - cpu_map: Add missing feature 'avx-ifma' (Tim Wiederhake) [Orabug: 37296073]  [9.0.0-9.el8] - qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]  [9.0.0-8.el8] - qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]  [9.0.0-7.el8] - qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750] - conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703] - cpu_map: Add SapphireRapids CPU model (Lin Yang) - cpu_map: Add missing feature 'fsrc' (Tim Wiederhake) - cpu_map: Add missing feature 'fsrs' (Tim Wiederhake) - cpu_map: Add missing feature 'fzrm' (Tim Wiederhake)  libvirt-dbus [1.3.0-2.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [1.3.0] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.2.0-3] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [1.2.0-2] - util: fix virtDBusUtilDecodeUUID (rhbz#1647823)  [1.2.0-1] - Rebased to libvirt-dbus-1.2.0 (rhbz#1630196)  [1.0.0-1] - Rebase from Fedora  libvirt-python [9.0.0-16.el8] - Update to libvirt 9.0.0-16 (Karl Heubaum)  [9.0.0-15.el8] - Update to libvirt 9.0.0-15 (Karl Heubaum)  [9.0.0-14.el8] - Update to libvirt 9.0.0-14 (Karl Heubaum)  [9.0.0-13.el8] - Update to libvirt 9.0.0-13 (Mark Kanda)  [9.0.0-12.el8] - Update to libvirt 9.0.0-12 (Karl Heubaum)  [9.0.0-11.el8] - Update to libvirt 9.0.0-11 (Karl Heubaum)  [9.0.0-10.el8] - Update to libvirt 9.0.0-10 (Karl Heubaum)  [9.0.0-9.el8] - Update to libvirt 9.0.0-9 (Karl Heubaum)  [9.0.0-8.el8] - Update to libvirt 9.0.0-8 (Karl Heubaum)  [9.0.0-7.el8] - Update to libvirt 9.0.0-7 (Karl Heubaum)  nbdkit [1.24.0-5] - vddk: Add support for VDDK 8.0.0   resolves: rhbz#2143907  [1.24.0-4] - Fix build on RHEL 8.6 with qemu >= 6.1   resolves: rhbz#2045945  [1.24.0-3] - Fix CVE-2021-3716 NBD_OPT_STRUCTURED_REPLY injection on STARTTLS   resolves: rhbz#1994915  [1.24.0-2] - Fix data corruption in zero and trim on unaligned tail   resolves: rhbz#1990135  [1.24.0-1.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [1.16.2] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.16.2] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [1.4.2-5] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [1.4.2-4] - Remove misguided LDFLAGS hack which removed server hardening.   https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6   resolves: rhbz#1624149  [1.4.2-3] - Use platform-python   resolves: rhbz#1659159  netcf [0.2.8-12] - Resolves: rhbz#1602628  [0.2.8-11] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [0.2.8-10] - Remove artificial dependency on bridge-utils. rhbz #1605333  [0.2.8-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild  [0.2.8-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild  [0.2.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild  [0.2.8-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild  [0.2.8-5] - Rebuild for readline 7.x  [0.2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild  * Wed Oct 14 2015 Laine Stump <laine@redhat.com> - Improve performance with large number of interfaces    (Bug 1268384, Bug 1271341)  - recognize bond devices with no slaves  perl-Sys-Virt [8.0.0-1] - Rebase to 8.0.0 release - Resolves: rhbz#2012813  [7.10.0-1] - Rebase to 7.10.0 release - Resolves: rhbz#2012813  [7.8.0-2] - Fix bug passing flags when creating NWFilterBinding - Resolves: rhbz#2029647  [7.8.0-1] - Rebase to 7.8.0 release - Resolves: rhbz#2012813  [7.4.0-1.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [6.0.0] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [4.5.0-5] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [4.5.0-4] - Fix typed parameter memory handling (rhbz #1602346) - Fix missing NWFilterBinding module (rhbz #1615841)  [4.5.0-3] - Included BuildRequire: git to fix a building issue  [4.5.0-2] - Fix typed parameter memory handling (rhbz#1602346)  qemu-kvm [7.2.0-41.el8] - hw/virtio/virtio-crypto: validate asym session key size (Miguel Luis) [Orabug: 39480090] - virtio-net: validate RSS queue selectors in parser (Miguel Luis) [Orabug: 39480096] - ui: fix validation of VNC extended clipboard data length (Heechan Kang) [Orabug: 39442988] {CVE-2026-8343} - ui/vnc: fix OOB read updating VNC update frequency stats (Daniel P. Berrange) [Orabug: 39447326] {CVE-2026-48003} - ui/vnc: fix OOB write in lossy rect worker code (Daniel P. Berrange) [Orabug: 39447332] {CVE-2026-48002} - ui/vnc: fix OOB write in VNC stats array (Daniel P. Berrange) [Orabug: 39447332] {CVE-2026-48002} - tests/unit/test-blockjob: Disable complete_in_standby test (Peter Maydell) [Orabug: 39447937] - virtio-scsi: reset SCSI devices from main loop thread (Stefan Hajnoczi) [Orabug: 39296894] - dma-helpers: prevent dma_blk_cb() vs dma_aio_cancel() race (Stefan Hajnoczi) [Orabug: 39296894] - scsi: protect req->aiocb with AioContext lock (Stefan Hajnoczi) [Orabug: 39296894] - virtio-iommu: add error check before assert (Manos Pitsidianakis) [Orabug: 39447244] - hw/virtio-iommu: Fix potential OOB access in virtio_iommu_handle_command() (Eric Auger) [Orabug: 39447244] - thread-pool: Allow at least 1 thread in thread_pool_adjust_max_threads_to_work() (Maciej S. Szmigiero) [Orabug: 39429151] - lsi53c895a: keep a reference to the device while SCRIPTS execute (Paolo Bonzini) [Orabug: 37517793] {CVE-2024-6519} - hw/scsi/lsi53c895a: fix memory leak in lsi_scsi_realize() (Zheng Huang) [Orabug: 37517793] {CVE-2024-6519} - hw/scsi/lsi53c895a: bump instruction limit in scripts processing to fix regression (Fiona Ebner) [Orabug: 37517793] {CVE-2024-6519} - hw/scsi/lsi53c895a: add timer to scripts processing (Sven Schnelle) [Orabug: 37517793] {CVE-2024-6519} - hw/scsi/lsi53c895a: add missing decrement of reentrancy counter (Sven Schnelle) [Orabug: 39429302] - hw/i386/amd_iommu: Move IOAPIC memory region initialization to the end (Sairaj Kodilkar) [Orabug: 39422329] - virtio-scsi: pass the same cdb_size to virtio_scsi_pop_req and virtio_scsi_handle_cmd_req_prepare (Paolo Bonzini) [Orabug: 39414097] {CVE-2026-5763} - softmmu: Support concurrent bounce buffers (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612} - system/physmem: Per-AddressSpace bounce buffering (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612} - system/physmem: Propagate AddressSpace to MapClient helpers (Mattias Nissler) [Orabug: 37509310] {CVE-2024-8612} - hw/pci: Ignore config-space data between 0x804-0x807 (Joao Martins) - hostmem-memfd: Documentation for memory-backend-memfd 'keep' property (William Roche) [Orabug: 38769121] - hostmem-memfd: Wire up MFD_MF_KEEP_UE_MAPPED via 'keep' property (William Roche) [Orabug: 38769121]  [7.2.0-38.el8] - multifd: Save number of pages for batch context pages (Elena Ufimtseva) [Orabug: 39001115] - migration: Introduce MigrateCleanupCtx for cleanup thread (Elena Ufimtseva) [Orabug: 39001115] - migration: Move qemu_mmap_node/qemu_munmap_node (Elena Ufimtseva) [Orabug: 39001115] - multifd: Allocate a large chunk for pages->cached (Elena Ufimtseva) [Orabug: 39214550] - migration: Defer multifd and hash cache cleanup (Elena Ufimtseva) [Orabug: 39215178] - multifd: Split multifd_send_shutdown (Elena Ufimtseva) [Orabug: 39215178] - migration: Rename background cleanup thread and mutex/cond (Elena Ufimtseva) [Orabug: 39215178]  [7.2.0-37.el8] - hashing: use mmap/munmap for isal functions (Elena Ufimtseva) [Orabug: 39165991] - multifd: replace allocations/free with mmap/munmap (Elena Ufimtseva) [Orabug: 39165991] - page_cache: use mmap() based data pool for cache items (Elena Ufimtseva) [Orabug: 39165991] - page_cache: change cache allocations to mmap (Elena Ufimtseva) [Orabug: 39165991] - migration: add mmap/munmap wrapper (Elena Ufimtseva) [Orabug: 39165991] - target/i386/kvm: Use zero if kvm_msr_entry_add() is called by getter (Dongli Zhang) [Orabug: 38965920] - target/i386/kvm: Use logical counter index for AMD PMU getter (Dongli Zhang) [Orabug: 38965920] - Document CVEs (Mark Kanda) {CVE-2025-54566} {CVE-2025-54567} {CVE-2025-8860} {CVE-2026-0665} {CVE-2026-3886} - hw/usb/hcd-ohci: check for MPS=0 to avoid infinite loop (Jenny Guanni Qu) [Orabug: 39160764] {CVE-2026-3890} - hyperv/syndbg: check length returned by cpu_physical_memory_map() (Paolo Bonzini) [Orabug: 39160749] {CVE-2026-3842} - block/vmdk: fix OOB read in vmdk_read_extent() (Halil Oktay) [Orabug: 39160776] {CVE-2026-2243} - cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 39173335] {CVE-2025-14876} - hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 39173335] {CVE-2025-14876}  [7.2.0-36.el8] - migration: Fix missing Error return in .load_setup() handlers (Maciej S. Szmigiero) [Orabug: 39154816] - migration: Fix missing Error return in .save_setup() handlers (Maciej S. Szmigiero) [Orabug: 39154816] - migration: qemu_savevm_state_setup(): Fix double PRECOPY_NOTIFY_SETUP call (Maciej S. Szmigiero) [Orabug: 39154816] - multifd: Fix device state transfer (Maciej S. Szmigiero) [Orabug: 39154816] - vfio/migration: Send VFIO_MIGRATION event before PRE_COPY_P2P transition (Avihai Horon) [Orabug: 39122260] - vfio/migration: Adapt to upstream uAPI for VFIO_PRECOPY_INFO_REINIT (Maciej S. Szmigiero) [Orabug: 39121536]  [7.2.0-35.el8] - migration: Disable switchover-ack-legacy by default for Exadata (Maciej S. Szmigiero) [Orabug: 37502472] - vfio/migration: Check VFIO_PRECOPY_INFO_REINIT during completion (Avihai Horon) [Orabug: 37502472] - vfio/migration: Implement VFIO_PRECOPY_INFO_REINIT (Avihai Horon) [Orabug: 37502472] - vfio/migration: Implement new switchover-ack mechanism (Avihai Horon) [Orabug: 37502472] - vfio/migration: Add Error ** parameter to vfio_migration_init() (Avihai Horon) [Orabug: 37502472] - vfio/migration: Re-query precopy size before sending VFIO_MIG_FLAG_DEV_INIT_DATA_SENT (Avihai Horon) [Orabug: 37502472] - migration: Check switchover-ack during switchover phase (Avihai Horon) [Orabug: 37502472] - migration: Make switchover-ack re-usable (Avihai Horon) [Orabug: 37502472] - migration: Refactor switchover-ack code (Avihai Horon) [Orabug: 37502472] - linux-headers: Bring initial bytes re-init uAPI (Avihai Horon) [Orabug: 37502472] - qemu-img: convert: add cli argument to use IO large buffers for convert (Akash Kulhalli) [Orabug: 37502472] - hw/core/machine: Limit x-orcl-vm-tsc-khz-post-loadvm to KVM (Mark Kanda) [Orabug: 39095032] - migration: add extra check for block in cache_fini (Elena Ufimtseva) [Orabug: 38885625] - migration: do not tear down hash cache in critical path (Elena Ufimtseva) [Orabug: 38885625] - migration: free cache->blocks in cache_fini() (Elena Ufimtseva) [Orabug: 39061395]  [7.2.0-34.el8] - migration: bugfix - free migration_ops correctly (Elena Ufimtseva) [Orabug: 38977316] - target/i386/kvm: set VM ioctl KVM_SET_TSC_KHZ post loadvm (Dongli Zhang) [Orabug: 38928409] - migration: introduce KVM function called post loadvm (Dongli Zhang) [Orabug: 38928409] - migration: add extra checks in multifd_ram_fill_packet (Elena Ufimtseva) [Orabug: 38949741] - migration: fix the error path semantic in multifd thread (Elena Ufimtseva) [Orabug: 38949741] - page_cache: dynamic cache allocation (Elena Ufimtseva) [Orabug: 38854239] [Orabug: 38949741] - multifd: return errors on packets filling (Elena Ufimtseva) [Orabug: 38854239] - migration: detect errors on hash initialization (Elena Ufimtseva) [Orabug: 38876780] - migration: propagate hashing errors (Elena Ufimtseva) [Orabug: 38876780] - migration/multifd: Handle allocation failures (Elena Ufimtseva) [Orabug: 38876780] - migration: Add Error** argument to ram_state_init() (Cedric Le Goater) [Orabug: 38876780] - migration: Add Error** argument to .load_setup() handler (Cedric Le Goater) [Orabug: 38876780] - migration: Add Error** argument to .save_setup() handler (Cedric Le Goater) [Orabug: 38876780] - migration: Add Error** argument to qemu_savevm_state_setup() (Cedric Le Goater) [Orabug: 38876780] - migration: Add Error** argument to vmstate_save() (Cedric Le Goater) [Orabug: 38876780] - migration: Always report an error in ram_save_setup() (Cedric Le Goater) [Orabug: 38876780] - qemu-file: Make qemu_fflush() return errors (Juan Quintela) [Orabug: 38876780] - qemu-file: remove shutdown member (Juan Quintela) [Orabug: 38876780] - vfio: Always report an error in vfio_save_setup() (Cedric Le Goater) [Orabug: 38876780] - migration/vmstate: Introduce vmstate_save_state_with_err (Tejus GK) [Orabug: 38876780] - migration/vfio: Remove x-orcl-device-dirty-page-tracking (Elena Ufimtseva) [Orabug: 38944077] - target/i386/kvm: write tsc_offset for parked vCPUs too (Dongli Zhang) [Orabug: 38853905] - accel/kvm:: move KVMParkedVcpu definition to header file (Dongli Zhang) [Orabug: 38853905] - target/i386/kvm: use vCPU 0 tsc_offset for all vCPUs (Dongli Zhang) [Orabug: 38853905] - target/i386/kvm: account downtime only with synchronized TSC (Dongli Zhang) [Orabug: 38853905] - target/i386/kvm: implement reset method for kvmclock (Dongli Zhang) [Orabug: 38853905]  [7.2.0-33.el8] - migration: Change default pages to scan to 8192 for Exadata (Elena Ufimtseva) [Orabug: 38732433] - meson: check if isa-l installed and enable it (Elena Ufimtseva) [Orabug: 38732433] - migration/page_cache: Improve isal-crypto-mb-sha256 cache-miss handling (Joao Martins) [Orabug: 38732433] - migration/page_cache: Add isal_crypto multi-buffer sha256 variant (Joao Martins) [Orabug: 38732433] - migration/page_cache: Add batching mode support for isa-l_crypto (Joao Martins) [Orabug: 38732433] - migration: Use algorithm table to initialize hashing (Elena Ufimtseva) [Orabug: 38732433] - migration: Add existing algorithms to description table (Elena Ufimtseva) [Orabug: 38732433] - migration: Add a unified description structure for hashing algorithms (Elena Ufimtseva) [Orabug: 38732433]  [7.2.0-32.el8] - spec: Provide aarch64 and mips user static packages (Mark Kanda)   These packages are for Oracle internal use only (not for external customers) - cpu: Only compile runstate_is_running() for system mode (Mark Kanda) - linux-user: Do not define struct sched_attr if libc headers do (Khem Raj)  [7.2.0-31.el8] - migration: Fix the cancellation/error path (Elena Ufimtseva) [Orabug: 38739293]  [7.2.0-30.el8] - live migration: scan and clear contiguous dirty pages regions of ram (Elena Ufimtseva) [Orabug: 38388170] - migration: add hash_rate trace point (Elena Ufimtseva) [Orabug: 38388170] - migration: add parameter to specify max number of contiguous pages (Elena Ufimtseva) [Orabug: 38388170] - multifd: send more pages then IOV_MAX (Elena Ufimtseva) [Orabug: 38388170] - io: fix use after free in websocket handshake code (Daniel P. Berrange) [Orabug: 38687831] {CVE-2025-11234}  seabios [1.16.0-4] - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2227373] - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2227373] - Resolves: bz#2227373   ('No bootable device' with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks.)  [1.16.0-3] - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787] - Resolves: bz#2101787   ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)  [1.16.0-2] - seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012] - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884] - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884] - Resolves: bz#2073012   (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0]) - Resolves: bz#2083884   (qemu reboot problem with seabios 1.16.0)  [1.16.0-1] - Rebase to upstream 1.16 tag [bz#2066828] - Resolves: bz#2066828   (rebase seabios to 1.16 release)  [1.15.0-1.el8] - Rebase to 1.15 (bz#2018392) - Resolves: bz#2018392  [1.15.0-1.el8] - pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921] - pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921] - Resolves: bz#2001921  [1.14.0-1.el8] - Rebase to 1.14 (bz#1809772) - Resolves: bz#1809772   (rebase seabios for RHEL AV-8.3.0)  [1.13.0-1.el8] - Rebase to 1.13 (bz#1793377) - Resolves: bz#1793377   (rebase seabios to 1.13)  [1.12.0-5.el8] - seabios-add-get_keystroke_full-helper.patch [bz#1693031] - seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031] - Resolves: bz#1693031   (On systems with more than 10 available boot devices, keys are uninintuitive)  [1.12.0-4.el8] - seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212] - seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212] - Resolves: bz#1705212   (Backport 1.12.1 patches to RHEL-AV 8.1.0)  sgabios [1:0.20170427git-3] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [1:0.20170427git-2] - Trigger a new sgabios build  [1:0.20170427git-1] - Switch to qemu sgabios repo, which has an extra bugfix  [1:0.20110622svn-13] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild  [1:0.20110622svn-12] - Allow disabling cross-compilation  [1:0.20110622svn-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild  [1:0.20110622svn-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild  [1:0.20110622svn-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild  [1:0.20110622svn-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild  [1:0.20110622svn-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild  supermin [5.2.1-2.0.1.el8] - Rebuild [Orabug: 35720304]  [5.2.1-2.el8] - Supermin should ignore +debug kernels   resolves: rhbz#2051332 - Add copy-patches script.  [5.2.1-1.el8] - Resolves: bz#2000225   (Rebase virt:rhel module:stream based on AV-8.6)  [5.1.19] - Resolves: bz#1810193   (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)  [5.1.19-9] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587   (Ensure modular RPM upgrade path)  [5.1.19-8] - Pass CFLAGS & LDFLAGS to final supermin link   resolves: rhbz#1624175  [5.1.19-7] - Rebuild for OCaml 4.07.0.  [5.1.19-6] - Drop dietlibc in RHEL 8   resolves: rhbz#1588067  [5.1.19-5] - Bump release and rebuild.  [5.1.19-4] - Reenable hardened build  swtpm [0.7.0-4.20211109gitb79fd91] - swtpm_localca: Test for available issuercert before creating CA   Resolves: rhbz#2100508  [0.7.0-3.20211109gitb79fd91] - Disable OpenSSL FIPS mode to avoid libtpms failures   Resolves: rhbz#2097947  [0.7.0-2.20211109gitb79fd91] - Add fix for CVE-2022-23645.   Resolves: rhbz#2056517  [0.7.0-1.20211109gitb79fd91] - Rebase to 0.7.0, disable TPM 1.2.   Resovles: rhbz#2029612  [0.6.0-2.20210607gitea627b3] - rebuilt with missing CFLAGS fix.  [0.6.0-1.20210607gitea627b3] - Update to 0.6.0.   Resolves: rhbz#1972783  [0.4.2-1.20201201git2df14e3] - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).   Resolves: rhbz#1906043  [0.4.0-3.20200828git0c238a2] - swtpm_setup: Add missing .config path when using /home/opc. Resolves: rhbz#1881418  [0.4.0-2.20200828git0c238a2] - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375   (fixes usage of swtpm-localca with passwords when signing keys)  [0.4.0-1.20200828git0c238a2] - Update to v0.4.0. Resolves: rhbz#1868375  virt-v2v [1:1.42.0-22] - RHEL 8: If setfiles fails fall back to autorelabel   resolves: rhbz#XXX - Reapply patches since we are using git format-patch --submodule=diff  [1:1.42.0-21] - Fix assertion failure when parsing OVA dir with trailing slash   resolves: rhbz#2028823 - For -o rhv-upload wait for VM creation task   resolves: rhbz#1985827 - If listing RPM applications fails, rebuild DB and retry (2089623) - Fix CVE-2022-2211 Denial of Service in --key parameter   resolves: rhbz#2102720  [1:1.42.0-18] - Additional fix for backing file specified without backing format   related: rhbz#2025769  [1:1.42.0-17] - Correct regexps used to fix schtasks command - Fix backing file specified without backing format   resolves: rhbz#2023279, rhbz#2025769  [1:1.42.0-16] - Implement cookie scripts for more reliable vCenter/HTTPS transfers   resolves: rhbz#2018173  [1:1.42.0-15] - v2v: windows: Do not fix NTFS heads in Windows Vista and later   resolves: rhbz#1995000  [1:1.42.0-14] - v2v: rhv-upload-plugin: Fix waiting for finalize   resolves: rhbz#1976024  [1:1.42.0-13] - docs: Fix version of virt-v2v which added UEFI for OpenStack   related: rhbz#1872100 - v2v: Increase Linux minimum root filesystem to 100 MB   resolves: rhbz#1764569  [1:1.42.0-12] - v2v: Fix conversion of BitLocker guests   resolves: rhbz#1959051  [1:1.42.0-11] - v2v: windows: Allow qxldod.inf as synonym for qxl.inf   resolves: rhbz#1926102 - v2v: Increase required free space in Windows to 100 MB   resolves: rhbz#1949147 - docs: Document how to remove 'Out of HTTP sessions' limit - v2v: Disable readahead for VMware curl sources too   resolves: rhbz#1848862 - v2v: Allow output to block devices   resolves: rhbz#1868690 - docs: -o openstack: Clarify name of file containing OpenStack auth   resolves: rhbz#1871754 - docs: UEFI guest conversion to -o openstack is supported   resolves: rhbz#1872100 - v2v: Turn pnp_wait.exe warning into a debug message   resolves: rhbz#1903960 - v2v: windows: Fix schtasks /SD parameter   resolves: rhbz#1895323

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | hivex-devel ol 8 | 0:1.3.18-23.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-appliance ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-bash-completion ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-gfs2 ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-gobject ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-gobject-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-inspect-icons ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-java ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-java-devel ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-javadoc ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-man-pages-ja ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-man-pages-uk ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-rescue ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-rsync ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-tools ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-tools-c ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-winsupport ol 8 | 0:8.10-1.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libguestfs-xfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libiscsi ol 8 | 0:1.18.0-8.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libiscsi-devel ol 8 | 0:1.18.0-8.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libiscsi-utils ol 8 | 0:1.18.0-8.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libnbd ol 8 | 0:1.6.0-6.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libnbd-bash-completion ol 8 | 0:1.6.0-6.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libnbd-devel ol 8 | 0:1.6.0-6.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libtpms ol 8 | 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libtpms-devel ol 8 | 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-client ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-client-qemu ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-config-network ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-config-nwfilter ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-interface ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-network ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-nodedev ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-nwfilter ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-qemu ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-secret ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-core ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-disk ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-gluster ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-iscsi ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-iscsi-direct ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-logical ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-mpath ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-rbd ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-driver-storage-scsi ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-daemon-kvm ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-dbus ol 8 | 0:1.3.0-2.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-devel ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-docs ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-libs ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-lock-sanlock ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-nss ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | libvirt-wireshark ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | lua-guestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdfuse ol 8 | 0:1.6.0-6.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-bash-completion ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-basic-filters ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-basic-plugins ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-curl-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-devel ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-example-plugins ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-gzip-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-gzip-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-linuxdisk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-nbd-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-python-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-server ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-ssh-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-tar-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-tar-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-tmpdisk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-vddk-plugin ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | nbdkit-xz-filter ol 8 | 0:1.24.0-5.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | netcf ol 8 | 0:0.2.8-12.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | netcf-devel ol 8 | 0:0.2.8-12.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | netcf-libs ol 8 | 0:0.2.8-12.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | perl-Sys-Guestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | perl-Sys-Virt ol 8 | 0:8.0.0-1.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | perl-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | python3-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | python3-libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | python3-libnbd ol 8 | 0:1.6.0-6.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | python3-libvirt ol 8 | 0:9.0.0-16.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu Debian 13.5 (trixie) | 1:10.0.12+ds-0+deb13u1 | [DEBIAN-CVE-2026-48002](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48002.md) | Jul 12, 2026 |
| Linux | qemu Debian 14 | 1:11.0.3+ds-1 | [DEBIAN-CVE-2026-48002](https://patchblox.com/security/data/fix/linux/debian-cve-2026-48002.md) | Jul 12, 2026 |
| Linux | qemu-guest-agent ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-guest-agent ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-img ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-img ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-block-curl ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-block-curl ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-block-gluster ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-block-iscsi ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-block-iscsi ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-block-rbd ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-block-rbd ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-block-ssh ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-block-ssh ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-common ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-common ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-core ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-core ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-kvm-device-usb-host ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-kvm-device-usb-host ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | qemu-virtiofsd ol 8 | 15:7.2.0-41.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | qemu-virtiofsd ol 9 | 31:7.2.0-42.el9 | [ELSA-2026-500220](https://patchblox.com/security/data/fix/linux/elsa-2026-500220.md) | Aug 19, 2026 |
| Linux | ruby-hivex ol 8 | 0:1.3.18-23.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | ruby-libguestfs ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | seabios ol 8 | 0:1.16.0-4.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | seabios-bin ol 8 | 0:1.16.0-4.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | seavgabios-bin ol 8 | 0:1.16.0-4.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | sgabios ol 8 | 1:0.20170427git-3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | sgabios-bin ol 8 | 1:0.20170427git-3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | supermin ol 8 | 0:5.2.1-2.0.1.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | supermin-devel ol 8 | 0:5.2.1-2.0.1.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | swtpm ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | swtpm-devel ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | swtpm-libs ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | swtpm-tools ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | swtpm-tools-pkcs11 ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | virt-dib ol 8 | 1:1.44.0-9.0.3.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | virt-v2v ol 8 | 1:1.42.0-22.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | virt-v2v-bash-completion ol 8 | 1:1.42.0-22.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | virt-v2v-man-pages-ja ol 8 | 1:1.42.0-22.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |
| Linux | virt-v2v-man-pages-uk ol 8 | 1:1.42.0-22.module+el8.10.0+90906+a4794619 | [ELSA-2026-50337](https://patchblox.com/security/data/fix/linux/elsa-2026-50337.md) | Jun 23, 2026 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.