11088 matches found
unbound security update
1.24.2-23 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-22 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 1.24.2-21 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Add unit test for the vulnerability too...
openexr security update
3.1.10-8.4 - fix CVE-2026-68515...
kernel security, bug fix, and enhancement update
5.14.0-687.51.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
libarchive security update
3.7.7-11 - Related: CVE-2026-16517 and CVE-2026-15028...
curl security update
8.12.1-4.6 - fix cookie injection via trailing dot super cookies CVE-2026-8924 - fix digest auth state leak on origin or credential change CVE-2026-11856 - fix netrc password lookup for non-matching login CVE-2026-8926 8.12.1-4.5 - fix proxy auth not cleared properly on NULL CVE-2026-9079 - fix...
perl-DBI security update
1.643-26.6 - Fix CVE-2026-73194: enforce placeholder range limit on :N style placeholders Resolves: RHEL-247316...
libtiff security update
4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298...
postgresql security update
13.23-6 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix...
tar security, bug fix, and enhancement update
2:1.30-13 - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also fixes CVE-2026-18508 escape from --one-top-level via hardlinks. - Upstream fix for build with libacl 2.4.0 - Backport upstream patches f...
podman security update
5.8.2-9.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-9 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 7:5.8.2-8 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 7:5.8.2-7 - Rebuild for golang C...
coreutils security update
8.30-21.0.1 - clean up empty file if cp is failed Orabug 15973168 - df --local: recognize afs, auristorfs, and smb3 as remote fs 1798030 - fix formatting of sha512sum1 man page 1688744 8.30-21 - sort: fix buffer under-read CVE-2025-5278 RHEL-216927...
corosync security update
3.1.8-1.2 - Resolves: RHEL-251531 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665...
libxml2 security, bug fix, and enhancement update
2.9.7-21.8 - Lower xpath recursion limits RHEL-249282 2.9.7-21.8 - Fix CVE-2026-6653 RHEL-215616...
openssh security, bug fix, and enhancement update
8.0p1-33.0.1 - Update upstream references Orabug: 36587718 8.0p1-33 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 8.0p1-32 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen Related: RHEL-234763 8.0p1-3...
containernetworking-plugins security update
1:1.9.0-4 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374...
freerdp security update
2:2.11.7-13 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247353...
postgresql:12 security update
12.22-10.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679 - Resolves: CVE-2026-14680, CVE-2026-1574...
postgresql:15 security update
pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel 1.4.0-2 - BuildRequires postgresql-server-devel 1.4.0-1 - Update to 1.4.0...
postgresql:15 security update
pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related: 212841...
postgresql:16 security update
pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.15-1 - Update to 16.15 - Fix...
postgresql16 security update
16.15-1.0.1 - Replace upstream reference Orabug: 37044148 16.15-1 - Update to 16.15...
apr-util security update
1.6.1-9.1 - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 - Resolves: RHEL-236267 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 - Resolves...
unbound security update
1.16.2-5.14.2 - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 1.16.2-5.14.1 - Fix CVE-2026-50252 cache poisoning via source port prediction...
runc security update
4:1.4.2-3 - rebuild for CVE-2026-56860 - Resolves: RHEL-241703...
host-metering security update
1.2.0-4.0.3 - Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 Orabug: 39863765 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233...
podman security update
5.8.2-7.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-7 - update to the latest upstream commit 66780e9b - rebuild with...
rsyslog security update
8.2510.0-2.0.1.el98.2 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against...
firefox security update
140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.16.0-1 - Update to 140.16.0 ESR...
firefox security update
140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.16.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.16.0-1 - Update to 140.16.0 ESR...
openssh security update
9.9p1-11.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...
corosync security update
3.1.10-1.2 - Resolves: RHEL-251542 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665...
openexr security update
3.1.1-3.4 - fix CVE-2026-68515...
rsyslog security update
8.2510.0-5.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246633...
yggdrasil security update
0.4.9.2-3 - Rebuild yggdrasil against updated golang 0.4.9.2-2 - Rebuild yggdrasil against updated golang...
sudo security update
1.9.17p2-3.1 - CVE-2026-82474 sudo: execveat2 intercept/logsubcmds bypass Resolves: RHEL-255647...
firefox security update
140.13.0-1.0.1 - Update to 140.13.0 ESR Orabug: 39947841CVE-2026-15718CVE-2026-15719 CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353 CVE-2026-16354CVE-2026-16355CVE-2026-16356CVE-2026-16357CVE-2026-16358 CVE-2026-16359CVE-2026-16360CVE-2026-16361CVE-2026-16362CVE-2026-16363...
gstreamer1-plugins-base security update
1.22.12-8.2 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253753 1.22.12-8.1 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246...
webkit2gtk3 security update
2.52.5-1 - Update to 2.52.5 2.52.4-1 - Update to 2.52.4 2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 - Update to 2.50.1 2.50.0-1 - Update to 2.50.0 2.48.5-1 - Update to 2.48.5 2.48.3-1 - Update to 2.48.3 2.48.2-1 - Update to 2.48.2 - Reenable JIT...
tomcat update
1:10.1.49-4 - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header...
389-ds-base security update
1.3.11.1-5.0.13 - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 Orabug: 39892253 1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-1490...
curl security update
7.76.1-40.el98.7 - add sasl service name to connection reuse checks CVE-2026-8458 7.76.1-40.el98.6 - detect proxy changes read from environment CVE-2026-8927...
yggdrasil-worker-package-manager security update
0.2.3-8 - Rebuild against updated golang...
kernel security, bug fix, and enhancement update
5.14.0-687.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
tomcat9 security update
1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...
kernel security update
4.18.0-553.164.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
python-lxml security update
4.2.3-5 - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 4.2.3-4 - Security fix for CVE-2021-43818 Resolves: rhbz2032569 4.2.3-3 - Security fix for CVE-2021-28957 Resolves: rhbz1941534 4.2.3-2 - Security fix for CVE-2020-27783: mXSS due to...
tomcat security update
1:9.0.120-1 - Resolves: RHEL-192806 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219561 Security constraint bypass via improper URL encoding in rewrite valve CVE-2026-59083 - Resolves: RHEL-219581 Insufficient documentation for EncryptInterceptor may lead to insecure...
Unbreakable Enterprise kernel security update
5.15.0-324.217.5.3 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035522 CVE-2026-80844 - tcp: clear sockops cb flags before force-closing a child socket Sechang Lim...
perl-Net-DNS security update
1.15-2 - Fix unbounded recursion in TSIG record processing CVE-2026-81928 - Resolves: RHEL-256266 1.15 - Resolves rhbz1544065 Update to 1.15 - Maintenance only 1.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.14-1 - Updated to 1.14 1.13-1 - Updated to 1.13 1.12-1 - Update...