10046 matches found
nginx security, bug fix, and enhancement update
1.20.1-28.0.1.el98.4 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-28.4 - Resolves: RHEL-190800 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves:...
openssl security update
1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783...
xorg-x11-server-Xwayland security update
21.1.3-20.3 - CVE fix for: CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191516...
xorg-x11-server security update
1.20.11-34.3 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493...
kernel security, bug fix, and enhancement update
4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
freerdp security update
2:2.11.7-7.4 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186991...
Unbreakable Enterprise kernel security update
5.15.0-322.203.3.3 - locking/rtmutex: Skip removewaiter when waiter is not enqueued Davidlohr Bueso Orabug: 39706512 - rtmutex: Use waiter::task instead of current in removewaiter Keenan Dong Orabug: 39706512 CVE-2026-43499 5.15.0-322.203.3.2 - KVM: x86/mmu: Ensure hugepage is in by slot before...
kernel security update
4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
buildah security update
1.43.1-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-3 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066...
kernel security update
5.14.0-687.24.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
libexif security update
0.6.22-2.0.1 - Backport fix for CVE-2026-40386 Orabug: 39574457 - Backport fix for CVE-2026-40385 Orabug: 39574457...
grafana security update
9.2.10-31.0.1 - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 9.2.10-31 - Resolves RHEL-183728: CVE-2026-39821...
golang security, bug fix, and enhancement update
1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...
Unbreakable Enterprise kernel security update
5.4.17-2136.357.3.2 - locking/rtmutex: Skip removewaiter when waiter is not enqueued Davidlohr Bueso Orabug: 39706958 - rtmutex: Use waiter::task instead of current in removewaiter Keenan Dong Orabug: 39706958 CVE-2026-43499 5.4.17-2136.357.3.1 - KVM: x86: Fix shadow paging use-after-free due to...
podman security, bug fix, and enhancement update
5.8.2-4.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-4 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-3982...
gstreamer1-plugins-good security update
1.22.12-7.1 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s this branch had regressed to a stale pre-1.22.12 base Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves:...
unbound security update
1.16.2-5.12 - Fix CVE-2026-40622 RHEL-184832 - Fix CVE-2026-44390 RHEL-186680 - Fix CVE-2026-41292 RHEL-187346 - Fix CVE-2026-42534 RHEL-187081...
tomcat security, bug fix, and enhancement update
1:9.0.87-2 - Resolves: RHEL-183993 Remove tomcat clustering JAR from RPM builds...
tigervnc security update
1.8.0-33.0.11 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 and CVE-2026-34352 Orabug: 39478221 1.8.0-33.0.9 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Orabug: 38694278 - Fix CVE-2025-62230: xorg-x11-server:...
nginx:1.26 security, bug fix, and enhancement update
1.26.3-9.0.1.2 - Require oracle-indexhtml 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack 2:1.26.3-10 - nginx: code execution and...
nginx:1.24 security, bug fix, and enhancement update
1.24.0-7.0.1.3 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.3 - Resolves: RHEL-191773 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or...
gstreamer1-plugins-bad-free security update
1.16.1-8.0.1 - Update origin URL Orabug: 36209826 1.16.1-8 - Fix for CVE-2026-52720: librfb framebuffer update rectangle validation Resolves: RHEL-184455 1.16.1-7 - Fix integer overflow in vmncdec CVE-2026-52722 Resolves: RHEL-184414...
unbound security update
1.24.2-3.2 - Fix CVE-2026-40622 RHEL-184840 Fix CVE-2026-44390 RHEL-186688 Fix CVE-2026-41292 RHEL-187352 Fix CVE-2026-42534 RHEL-187095...
libsolv security update
0.7.20-7 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178970...
gstreamer1-plugins-ugly-free security update
1.22.12-6.1 - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464...
xorg-x11-server security update
Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0.7 - Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 Orabug: 39440282 1.20.4-29.0.5 - Security update for CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 Orabug: 38691191 1.20.4-29.0.3 - Fix CVE-2025-49175,...
nodejs:22 security, bug fix, and enhancement update
nodejs 1:22.23.1-1 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338...
gstreamer1-plugins-bad-free security update
1.22.12-7.1 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 1.22.12-4.4 - Fix bytes/bits confusion in AV1 tile data size parsing CVE-2026-52718 Resolves: RHEL-184388 1.22.12-4.3 - Fix for CVE-2026-52719:...
oci-seccomp-bpf-hook security update
1.2.11-2 - rebuild for CVE-2026-33811 Resolves: RHEL-187325...
python-urllib3 security update
1.24.2-10 - Security fix for CVE-2026-44431 Resolves: RHEL-184858...
389-ds:1.4 security update
1.4.3.39-25 - Bump version to 1.4.3.39-25 - Resolves: RHEL-182162 - EMBARGOED CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-8.10.z - Resolves: RHEL-183102 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length...
cups security update
1:2.2.6-68 - RHEL-177947 CVE-2026-34980 cups: control character injection in option values...
edk2 security, bug fix, and enhancement update
20220126gitbb1bba3d77-13.el8.10 - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch RHEL-151949 - Resolves: RHEL-151949 FJ8.10 Bug How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests 20220126gitbb1bba3d77-13.el8.9 -...
gstreamer1-plugins-good security update
1.16.1-7 - Fix integer overflow vulnerabilities in wavpackdec CVE-2026-53705 Resolves: RHEL-184473...
libtasn1 security update
4.13-6 - Backport the fix for CVE-2025-13151 RHEL-139546...
libxml2 security update
2.9.7-21.6 - Fix CVE-2025-6170 RHEL-182012...
tomcat security, bug fix, and enhancement update
1:9.0.117-2 - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build...
kernel security, bug fix, and enhancement update
5.14.0-687.20.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
kernel security, bug fix, and enhancement update
5.14.0-687.22.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
aardvark-dns security update
2:1.17.1-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170152...
grafana-pcp security update
5.1.1-17 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 5.1.1-16 - Resolves RHEL-183820: CVE-2026-39821...
389-ds-base security update
2.8.0-8 - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-9.8.z - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...
perl-HTTP-Daemon security update
6.01-24 - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open - Resolves: RHEL-184825...
skopeo security update
1:1.22.2-7 - Rebuild for golang = 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898...
compat-openssl10 security update
1.1.0-2o-4.3 - Fix CVE-2026-45447: Fix double-free of caller-owned BIO in PKCS7verify...
grafana security update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
perl-HTTP-Daemon security update
6.12-6.1 - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open - Resolves: RHEL-184829...
grafana-pcp security update
5.1.1-16 - Resolves RHEL-183733: CVE-2026-39821 5.1.1-15 - Resolves RHEL-183733: CVE-2026-39821...
kernel security, bug fix, and enhancement update
5.14.0-687.19.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...