10033 matches found
ghostscript security update
9.54.0-19.1 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter...
libvirt security, bug fix, and enhancement update
11.10.0-12.7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 11.10.0-12.7.el98 - remote: Fix integer overflow in RPC handler for virNodeGetFreePages CVE-2026-18917 RHEL-245282, CVE-2026-18917 - qemu: Always assume support for 'QEMUCAPSSETACTION' RHEL-242549 - qemu: Remove unused...
ghostscript security update
10.02.1-16.1 - RHEL-264925 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter...
gvfs security update
1.36.2-22 - Fix heap buffer overflow in SFTP backend CVE-2026-84268 Resolves: RHEL-252300...
libpcap security update
14:1.10.0-4.1 - Fix CVE-2026-0799: add bounds checks for BPF scratch memory register indices in the BPF interpreter Related: RHEL-256935...
gvfs security update
1.48.1-8.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252312, RHEL-257348...
thunderbird security update
140.16.0-1 - Add Oracle prefs file 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...
webkit2gtk3 security update
2.54.0-1 - Update to 2.54.0...
rsync security, bug fix, and enhancement update
3.1.3-28 - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches...
gvfs security update
1.54.4-4.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252305, RHEL-257341 1.54.4-4 - udisks2: Correct add to hash table for items which can clash in the monitor RHEL-143935...
libpcap security update
14:1.10.4-7.1 - Fix CVE-2026-0799: validate BPF scratch memory register indices in the BPF interpreter to prevent out-of-bounds memory access Resolves: RHEL-256921...
openssh security update
9.9p1-12.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...
gdb security update
16.3-3.1.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi Oracle history: March-06-2026 Claudiu Zissulescu - 16.3-3.0.1 - Merge Oracle patches for ol9-u8. Reviewed-by: Jose E. Marchesi August-05-2025 Claudiu Zissulescu - 16.3-2.0.1 - Merge Oracle patches for ol9-u7. Reviewed-b...
gdb security update
16.3-3.1.0.1 Merge Oracle patches for ol10-u2 Reviewed-by: Jose E. Marchesi Oracle history: March-4-2026 Claudiu Zissulescu - 16.3-3.0.1 Merge Oracle patches for ol10-u2 Reviewed-by: David Faust ' August-29-2025 Claudiu Zissulescu - 16.3-2.0.1 - Merge Oracle patches for ol10-u1 Reviewed-by: Jose ...
expat security update
2.7.3-61 - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribute processing 2.7.3-60 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input 2.7.3-59 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog 2.7.3-58 - Fix CVE-2026-50219...
pki-core security update
11.7.1-2.0.1 - Replaced upstream graphical references Orabug: 33952704 11.7.0-2 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix...
gawk security update
5.3.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467 Resolves: CVE-2026-40468 Resolves: CVE-2026-40553...
freerdp security update
2:3.10.3-12.13 - Abort after PROTOCOLFAILEDNEGO CVE-2026-91949 Resolves: RHEL-264913 2:3.10.3-12.12 - Fix several regressions in CVE-2026-73241 Resolves: RHEL-257781...
dogtag-pki security update
11.9.0-5.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-5 - RHEL-245469 CVE-2026-76561 dogtag-pki: ExternalProcessConstraint executable allow-list - RHEL-248585 CVE-2026-80110 dogtag-pki: ACLFilter sort order fix...
gawk security update
4.2.1-5 - Fix use-after-free in dogetlineredir CVE-2026-40467 Resolves: RHEL-222601 4.2.1-4.1 - Fix integer overflow in dosub and parseescape CVE-2026-40468 Resolves: RHEL-222771...
gawk security update
5.1.0-6.1 - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467 Resolves: CVE-2026-40468 Resolves: CVE-2026-40553...
nodejs:24 security, bug fix, and enhancement update
nodejs 1:24.21.0-1 - Update to version 24.21.0 nodejs-nodemon 3.1.14-3 - Fix CVE-2026-69152 - brace-expansion 3.1.14-2 - Correction to sources for 3.1.14. 3.1.14-1 - Update to version 3.1.14 3.0.3-3 - Keep BR on just npm 3.0.3-2 - Fix BR for nodejs-npm nodejs-packaging 2021.06-6 - Properly handle...
expat security update
2.5.0-4 - Fix CVE-2026-66046 in expat - Resolves: RHEL-260142 2.5.0-3 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-268995...
corosync security update
3.1.10-1.2 - Resolves: RHEL-251541 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665...
glib2 security update
2.56.1-9.0.9 - Backport fix for CVE-2026-15588 Orabug: 39995948 - Backport fix for CVE-2026-58010 Orabug: 39995948 - Backport fix for CVE-2026-58011 Orabug: 39995948 - Backport fix for CVE-2026-58012 Orabug: 39995948 - Backport fix for CVE-2026-58013 Orabug: 39995948 - Backport fix for...
firefox security update
140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.16.0-1 - Update to 140.16.0 ESR...
xmlrpc-c security update
1.32.5-1905.0.1.svn2451 - Backport fix for CVE-2026-15928 Orabug: 39957695...
ruby:4.0 security update
ruby 4.0.6-35 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion CVE-2026-80212 Resolves: RHEL-252035 4.0.6-34 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 4.0.3-33 - Fix Net::IMAP ResponseReader quadratic...
kernel security, bug fix, and enhancement update
5.14.0-687.53.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
thunderbird security update
140.16.0-1.0.1 - Add Oracle prefs 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227...
libXfont2 security update
2.0.3-1.0.3 - Backport fix for CVE-2026-44950 Orabug: 39960840 - Backport fix for CVE-2026-59679 Orabug: 39960840 2.0.3-1.0.1 - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 Orabug: 39843361...
ruby:3.3 security update
ruby 3.3.12-9 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix...
ruby:3.3 security update
ruby 3.3.12-9 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252036 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181682 - Fix...
ruby security, bug fix, and enhancement update
3.0.7-168 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252044 3.0.7-167 - Fix information disclosure via MITM attack bypassing TLS in net-imap. CVE-2026-42246 Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap...
openssh security update
9.9p1-27.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-27 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinteraction between agent locking and the...
expat security update
2.5.0-6.5 - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - Resolves: RHEL-260179 2.5.0-6.4 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-269002...
resteasy security update
3.0.26-20 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553...
ipa security, bug fix, and enhancement update
4.13.4-1.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.13.4-1 - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval reachable before authorization check allows environment disclosure and denial of...
ruby security update
3.3.12-15 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252031...
osbuild-composer security update
101.5-3.0.1 - go.mod: update github.com/labstack/echo/v4 to v4.15.3 Resolves: RHEL-213908 - go.mod: update go.opentelemetry.io/otel to v1.44.0 Resolves: RHEL-239503 - Rebuild against updated golang Resolves: RHEL-177172, RHEL-234031, RHEL-251840, RHEL-251061 - Fix CVE-2025-22866 CVE-2026-32281...
freerdp security update
2.1.1-5.0.13 - Backport fix for CVE-2026-55192 Orabug: 40040632 - Backport fix for CVE-2026-55194 Orabug: 40040632 2.1.1-5.0.11 - Backport fix for CVE-2026-64624 Orabug: 39964800 - Backport fix for CVE-2026-67299 Orabug: 39964800 - Backport fix for CVE-2026-68580 Orabug: 39964800 2.1.1-5.0.9 -...
ruby4.0 security update
4.0.6-37 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion CVE-2026-80212 Resolves: RHEL-252032...
libxml2 security update
2.12.5-10.4 - Fix CVE-2026-86144 RHEL-256302 - Fix CVE-2026-86140 RHEL-256024 - Fix CVE-2026-74860 RHEL-255957 - Fix CVE-2026-86142 RHEL-256368 - Fix CVE-2026-86143 RHEL-256896 - Fix CVE-2026-86138 RHEL-256948...
libxml2 security update
2.9.7-21.9 - Fix CVE-2026-86144 RHEL-256306 - Fix CVE-2026-86140 RHEL-256021 - Fix CVE-2026-74860 RHEL-255956 - Fix CVE-2026-86143 RHEL-256895 - Fix CVE-2026-86138 RHEL-256950...
skopeo security update
1:1.22.2-8 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268...
abrt security update
2.1.11-60.0.7 - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...
perl-DBI security update
1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327...
thunderbird security update
140.16.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.16.0 - Add OpenELA debranding 140.16.0-1 - Update to 140.16.0 ESR 140.15.0-1 - Update to 140.15.0 ESR...
unbound security update
1.24.2-3.8 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-3.7 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...