11088 matches found
glib2 security update
2.56.4-177 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.56.4-176 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking 2.56.4-175 - Fix CVE-2026-58011: range validation in gdatetimeaddfull - Resolves: RHEL-212187 2.56.4-174 - Fix CVE-2026-58012: buffer overflow in gregex...
go-toolset:ol8 security, bug fix, and enhancement update
delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246426...
nginx:1.24 security update
1.24.0-7.0.1.4 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.4 - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217962 - nginx: NGIN...
pam security update
1.5.1-28.0.1.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-28.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191702...
openssl-fips-provider security update
3.0.7-11.0.1 - Drop OpenELA branding Orabug: 37274593 - Add bundle with Oracle Linux 9 OpenSSL FIPS module packages Orabug: 39910507 - Update extract-src.sh script to support non-hobbled openssl tarball Orabug: 39910507 3.0.7.openela.0.1 - Add OpenELA specific changes 3.0.7-11 - Update sources an...
nginx security update
1.20.1-28.0.1.el98.5 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-28.5 - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service...
libxml2 security update
2.12.5-10.3 - Fix CVE-2026-11979 RHEL-215571...
mingw-openssl security update
Mon Aug 17 2026 Uri Lublin - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 1.0.2k-3 - Rebuilt Related: rhbz1846152...
golang security, bug fix, and enhancement update
1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...
golang security, bug fix, and enhancement update
1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1 - Resolves: RHEL-246425 1.26.5-2 - Update to Go 1.26.5 fips-2 - Limit RANDbytes concurrency - Resolves: RHEL-215845...
httpd security update
2.4.63-13.0.1.el102.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.6 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 2.4.63-13.5 - Resolves:...
attr security update
2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121...
polkit security update
125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-...
gstreamer1-plugins-good security update
1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613...
kernel security, bug fix, and enhancement update
4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
assertj-core security update
3.19.0-9.1 - Fix CVE-2026-24400: prevent XXE attacks in XmlStringPrettyFormatter - Resolves: RHEL-183484...
assertj-core security update
3.24.2-9.1 - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter - Resolves: RHEL-183469...
kernel security, bug fix, and enhancement update
5.14.0-687.42.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
python-pyasn1 security update
0.4.8-7.1 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915...
python-pyasn1 security update
0.3.7-6.2 - Fix denial of service in Real type float method CVE-2026-59886 - Resolves: RHEL-217908...
xorg-x11-server security update
1.20.4-29.0.11 - Security update for CVE-2026-55999 Orabug: 39831768 1.20.4-29.0.9 - Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 Orabug: 39695293 Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0...
nginx:1.26 security update
1.26.3-9.0.1.3 - Require oracle-indexhtml 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and...
attr security update
2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128...
python3.12 security update
3.12.14-1.0.1 - Remove upstream URL reference 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227215 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193793...
gstreamer1-plugins-base security update
1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...
abrt security update
2.10.9-26.0.2 - Remove RHT patches - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.10.9-26.0.1 - Replaces sosreport to sos report in sosreport-event.conf Orabug: 38590929 - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm Orabug: 34184473 - Disable autoreporting on Oracle Linux...
nodejs24 security update
1:24.18.0-5.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.18.0-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:24.18.0-4 - Fix CVE-2026-13149 brace-expansion...
nginx:1.24 security update
1.24.0-3.4.0.1 - Remove Red Hat references Orabug: 29498217 1:1.24.0-3.4 - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-219309 - nginx:1.24/nginx: NGINX: Heap buffer over-read allows memory...
nginx security update
1.26.3-6.0.1.el102.6 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of...
python3.14 security update
3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227218...
pam security update
1.6.1-9.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704...
sqlite security update
3.26.0-21 - Fixes CVE-2026-11822 and CVE-2026-11824...
mod_http2 security, bug fix, and enhancement update
2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2...
httpd security update
2.4.62-13.0.1.el98.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.6 - Resolves: RHEL-190807 - httpd: use-after-free in modldap uldapconnectionfind via per-directory client cert list CVE-2026-29167 2.4.62-13.5 - Resolves: RHEL-192752 - modproxyhtml regression in...
qemu-kvm security, bug fix, and enhancement update
10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...
NetworkManager security update
1.40.16-21.0.1 - Add support for DADCONFLICT to nm-dispatcher - Drop 777 permissions from Networkmanager-dispatcher drop-in directory Orabug: 37581862 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - disable MPTCP handling by default Orabug: 35081472 - Fix...
sqlite security update
3.46.1-6 - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 - Resolves: RHEL-218247 - Resolves: RHEL-218282...
sqlite security update
3.34.1-11 - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 - Resolves: RHEL-218247 - Resolves: RHEL-218282...
grafana security, bug fix, and enhancement update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
gstreamer1-plugins-good security update
1.22.12-7.8 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 1.22.12-7.7 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 1.22.12-7.6 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 1.22.12-7.5 - Fix CVE-2026-1829...
cups-filters security update
1.28.7-27.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.28.7-27 - CVE-2026-64612 cups-filters: handle libpng errors via longjmp/setjmp to prevent process abo...
python3.12 security update
3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198...
389-ds-base security update
1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-14905 Orabug: 39146844 1.3.11.1-5.0.5 - Allow Uniqueness plugin to search uniqueness attributes using...
firefox security update
140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...
firefox security update
140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0-1 - Update to 140.14.0 ESR...
gstreamer1-plugins-base security update
1.26.7-2.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246574...
gstreamer1-plugins-good security update
1.16.1-7.7 - Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover Resolves: RHEL-246382 1.16.1-7.6 - Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder Resolves: RHEL-246561 1.16.1-7.5 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246618 1.16.1-7.4 - Fix...
python3.14 security update
3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227190 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227190 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227190...
NetworkManager security update
1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - Drop 777 permissions from t...