libpng security update

2:1.5.13-8.0.5 - Fix CVE-2026-33416 Orabug: 39836909 2:1.5.13-8.0.3 - Fix CVE-2026-25646 Orabug: 39093556 2:1.5.13-8.0.1 - Fix CVE-2025-64720 Orabug: 38824465...

python3.9 security update

3.9.25-7.0.1.el98.3 - Remove upstream URL reference 3.9.25-7.3 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 3.9.25-7.2 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 3.9.25-7.1 - Fix ssl.SSLError: ASN1: NOTENOUGHDATA not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207...

kernel security update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

libXfont2 security update

2.0.3-1.0.1 - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 Orabug: 39843361...

isns-utils security update

0.103-1.1 - Fix double-free vulnerability in attrs.c error paths CVE-2026-55995 Resolves: RHEL-219472...

udisks2 security update

2.11.0-2.0.1.el102.1 - Enable btrfs support for OL supported arches Orabug: 37464632 2.11.0-2.1 - Rework fstab mount authorization for as-user CVE-2026-7867 RHEL-173437...

kernel security, bug fix, and enhancement update

6.12.0-211.46.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

resource-agents security update

4.9.0-54.37 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217924...

gstreamer1-plugins-good security update

1.22.12-7.2 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162...

kernel security, bug fix, and enhancement update

5.14.0-687.38.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

postgresql security update

13.23-5 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 13.23-4 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 SSL/GSS init causes denial of service via uncontrolled recursion - Resolves: CVE-2026-6479...

isns-utils security update

0.101-4.1 - Fix CVE-2026-55995: prevent double-free in attrs.c error paths...

fence-agents security update

4.10.0-110.6 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934...

java-1.8.0-openjdk security update

1:1.8.0.502.b07-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.502.b07-1.1 - Update to 8u502-b07 GA. - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 ...

fence-agents security update

4.2.1-129.29 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217923...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.5 - Revert 'x86/alternatives: Add altinstr.flags' Harshit Mogalapalli Orabug: 39859219 5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU...

gstreamer1-plugins-good security update

1.26.7-2.3 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay CVE-2026-18649 Resolves: RHEL-224158...

gnutls security update

3.3.29-9.0.3 - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 Orabug: 39770407 - CVE-2026-42011 is not applicable to this baseline. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846...

libarchive security update

3.1.2-14.0.3 - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 3.1.2-14.0.1 - rar: Fix double free Orabug: 38364091CVE-2025-5914...

libarchive security update

3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...

libarchive security update

3.5.3-11 - Related: CVE-2026-14164 3.5.3-10 - Resolves: CVE-2026-14164...

dovecot security update

1:2.2.36-8 - update release number 1:2.2.36-7.1 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866752 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866757 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866764 1:2.2.36-7 - generate...

gstreamer1-plugins-bad-free security update

1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

nodejs-nodemon security update

3.1.14-3 - Fix CVE-2026-69152 - brace-expansion...

sudo security update

1.8.23-10.0.3.3 - Security update for CVE-2026-35535 Orabug: 39320917 1.8.23-10.0.1.3 - CVE-2025-32462 sudo: LPE via host option Orabug: 38187299...

dovecot security update

1:2.2.36-8.0.3 - Backport fix for CVE-2026-42006 Orabug: 39820967 1:2.2.36-8.0.1 - Backport fix for CVE-2025-59032 Orabug: 39573795 - Backport fix for CVE-2026-27856 Orabug: 39573795 - Backport fix for CVE-2026-27857 Orabug: 39573795 - Backport fix for CVE-2026-27858 Orabug: 39573795...

ruby:4.0 security, bug fix, and enhancement update

ruby 4.0.6-34 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 0.5.7-1 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 rubygem-pg...

ruby:3.3 security, bug fix, and enhancement update

ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg...

evince security update

3.28.2-10.0.1 - Fix CVE-2026-46529 Orabug: 39757172...

Unbreakable Enterprise kernel security update

6.12.0-205.92.4.2 - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp Dongli Zhang Orabug: 39844842 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39844812 CVE-2026-68480 - KVM: x86: Check for invalid/obsolete root after making MMU...

ruby security update

2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420...

libpng12 security update

1.2.50-10.0.3 - Fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE Orabug: 39771480 1.2.50-10.0.1 - Fix CVE-2026-25646: heap buffer overflow in pngsetquantize Orabug: 39183864...

kernel security, bug fix, and enhancement update

6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

gpsd-minimal security update

3.26.1-2.0.1.el98.1 - Replaced upstream reference Orabug: 35865525 1:3.26.1-2.el98.1 - fix command injection in gpsprof CVE-2026-58459 1:3.26.1-2 - fix buffer overflow in NMEA2000 driver CVE-2025-67268 - fix integer underflow in handling of Navcom packets CVE-2025-67269...

libgcrypt security update

1.10.0-13fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35961378 - Update FIPS module name for Oracle Linux Orabug: 35961378 1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafte...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

ruby:3.3 security, bug fix, and enhancement update

ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 0.5.5-1 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 rubygem-pg...

php:8.3 security, bug fix, and enhancement update

php 8.3.32-1 - rebase to 8.3.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...

LibRaw security update

0.21.1-2.1 - Fix CVE-2026-51235 Resolves: RHEL-219221...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

kernel security, bug fix, and enhancement update

5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

glibc security update

2.28-251.0.4.40 - Forward port of Oracle patches Reviewed-by: David Faust Oracle history: July-13-2026 Cupertino Miranda - 2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by:...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.4.3 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832867 CVE-2026-68480 6.12.0-204.92.4.4.2 - net: tap: set...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - KVM: x86/mmu: Rename directmap to...

gnutls security update

3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 Orabug: 39674042...

kernel security, bug fix, and enhancement update

4.18.0-553.151.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...