11088 matches found
apr-util security update
1.6.3-23.1 - Resolves: RHEL-236629 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 - Resolves: RHEL-236264 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 - Resolve...
python3.12-lxml security update
4.9.3-2.1 - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488...
389-ds:1.4 security, bug fix, and enhancement update
1.4.3.39-28 - Bump version to 1.4.3.39-28 - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USEONEBACKEND control in opsharedsearch rhel-8.10.z - Resolves: RHEL-220511 - EMBARGOED CVE-2026-1835...
perl-DBI security update
1.643-9.5 - Use Module::Load for safer package loading in DBI::Profile CVE-2026-19546 Related: RHEL-236831...
perl-DBI security update
1.643-26.4 - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830...
redis:7 security update
7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...
python-urllib3 security update
1.10.2-7.0.3 - Backport fix for CVE-2025-66471 Orabug: 39233228...
qt6-qt5compat security update
6.10.1-1.1 - Fix out-of-bounds read in QTextCodec::codecForName CVE-2026-9499 Resolves: RHEL-247204...
qt5-qtbase security update
5.15.3-9 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247206...
gpsd-minimal security update
3.26.1-2.0.1.el98.2 - Replaced upstream reference Orabug: 35865525 1:3.26.1-2.el98.2 - fix another command injection in gpsprof CVE-2026-60122...
thunderbird security update
140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...
qt5-qtbase security update
5.15.9-11.1 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName Resolves: RHEL-247216...
buildah security update
1.43.1-6.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-6 - Rebuild for golang CVE fixes - Resolves: RHEL-229833 RHEL-241142 RHEL-241389 RHEL-241658 RHEL-241706 RHEL-242148 RHEL-251830...
redis:6 security update
6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373...
mrtg security update
2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037...
python3.14-cryptography security update
45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249...
gstreamer1-plugins-bad-free security update
1.10.4-4.0.5 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...
kernel security, bug fix, and enhancement update
5.14.0-687.44.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
expat security update
2.5.0-2.2 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 2.5.0-2.1 - Fix CVE-2026-50219 - Resolves: RHEL-220979...
xz security update
1:5.6.2-4.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our environemnt - Resolves: CVE-2026-34743...
glib2 security update
2.80.4-22 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap 2.80.4-21 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.80.4-20 - Fix CVE-2026-58011: range validation in gdatetimeaddfull 2.80.4-19 - Fix CVE-2026-58012: buffer overflow in gregex.c with GREGEXRAW 2.80.4-18 - F...
expat security update
2.7.3-59 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog 2.7.3-58 - Fix CVE-2026-50219: forbid XMLParserFree/Reset from handlers 2.7.3-57 - expat: backport CVE-2026-45186 fix attribute collision check DoS 2.7.3-56 - Rebase to 2.7.3 and add VCS tag Thu Jun 05 2025...
skopeo security update
2:1.22.2-5 - Rebuild for golang CVE fixes - Resolves: RHEL-241177 RHEL-241425 RHEL-241563 RHEL-241763 RHEL-242151 RHEL-251832 2:1.22.2-4 - re-add test file installation to fix tier0 tests 2:1.22.2-3 - Rebuild for CVE-2026-27145...
gpsd security update
3.26.1-3.0.1.el102.2 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.2 - fix another command injection in gpsprof CVE-2026-60122...
xmlrpc-c security update
1.51.0-11.1 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928...
git-lfs security update
3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang...
thunderbird security update
140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR...
thunderbird security update
140.14.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.14.0 - Add OpenELA debranding 140.14.0-1 - Update to 140.14.0 ESR...
glib2 security update
2.68.4-19.10 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c...
python3.14-cryptography security update
45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249...
389-ds-base security, bug fix, and enhancement update
2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...
389-ds-base security, bug fix, and enhancement update
3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...
expat security update
2.5.0-6.3 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221014 2.5.0-6.2 - Fix CVE-2026-50219 - Resolves: RHEL-220981...
valkey security, bug fix, and enhancement update
8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
valkey security, bug fix, and enhancement update
8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...
kernel security, bug fix, and enhancement update
4.18.0-553.159.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
glibc security update
2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni Oracle history: Jul-15-2026 Cupertino Miranda - 2.39-126.0.1 - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi Jul-15-2026 Cupertino Miranda - 2.39-124.0.1 - Forward port Oracle changes t...
grafana-pcp security update
5.1.1-17.1 - Rebuild against updated golang - Resolves RHEL-241464 - Resolves RHEL-242181 - Resolves RHEL-241794 - Resolves RHEL-241448...
Unbreakable Enterprise kernel security update
5.4.17-2136.359.3.1 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974845 CVE-2026-80590 5.4.17-2136.359.3 - Partial revert of 'x86/alternatives: Optimize optimizenops' Harshit Mogalapalli Orabug: 39866546 - Revert 'x86/alternatives: Add altinstr.flags' Harsh...
php security, bug fix, and enhancement update
8.0.30-8 - Fix leak on double DatePeriod::construct call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 8.0.30-7 - Fix Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-143...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related:...
Unbreakable Enterprise kernel security update
6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...
kernel security update
6.12.0-211.51.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
buildah security update
1.43.1-5.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-5 - rebuild for CVE-2026-33810 - Resolves: RHEL-229833...
Unbreakable Enterprise kernel security update
5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...
wget security, bug fix, and enhancement update
1.19.5-16.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-16 - Resolves: RHEL-145875 - async unsafe code in signal handler context 1.19.5-15 - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Resolves: RHEL-212496 1.19.5-14 -...
grafana-pcp security update
5.1.1-18 - Rebuild against updated golang - Resolves RHEL-241670 - Resolves RHEL-242385 - Resolves RHEL-242345 - Resolves RHEL-242223 5.1.1-17 - Resolves RHEL-188284: Remove Lua ExclusiveArch macro for Konflux build...
grafana-pcp security update
5.3.0-8.1 - Rebuilt for updated golang - Resolves RHEL-241480, RHEL-251115, RHEL-242257, RHEL-242154, RHEL-241751 5.3.0-8 - Resolves RHEL-188287: Remove Lua ExclusiveArch macro for Konflux build...
qemu-kvm security update
7.2.0-43.el9 - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds load in searchchunk CVE-2026-65929 Stefan Hajnoczi Orabug: 39849747 CVE-2026-65929 - virtio: avoid packed vring virtioqueueempty...