10033 matches found
buildah security update
1.43.3-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.3-2 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 2:1.43.3-1 - Update to buildah...
perl-DBI:1.641 security update
perl-DBI 1.641-10 - Fix number of tests Resolves: RHEL-247869 1.641-9 - Fix placeholder limit on :N and :pN style placeholders CVE-2026-73194 Resolves: RHEL-247869 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflo...
openexr security update
3.1.10-8.4 - fix CVE-2026-68515...
abrt security update
2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...
libxml2 security update
2.9.13-14.5 - Fix CVE-2026-86144 RHEL-256304 - Fix CVE-2026-86140 RHEL-256027 - Fix CVE-2026-74860 RHEL-256120 - Fix CVE-2026-86142 RHEL-256365 - Fix CVE-2026-86143 RHEL-256901 - Fix CVE-2026-86138 RHEL-256953...
ipa security, bug fix, and enhancement update
4.13.4-1.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.13.4-1 - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL rhel-9.8.z -...
unbound security update
1.16.2-5.14.4 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.16.2-5.14.3 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...
unbound security update
1.24.2-23 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-22 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 1.24.2-21 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Add unit test for the vulnerability too...
cockpit-image-builder security update
94.4-1.0.1 - Switch to old frotend Orabug: 38011073 Orabug: 37856296 Orabug: 37856375 - Replaced additional upstream url Orabug: 37856187 - Replaced upstream urls in documentation with oracle links Orabug: 37856187 94.4-1 - New upstream release...
kernel security, bug fix, and enhancement update
5.14.0-687.50.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
kernel security, bug fix, and enhancement update
5.14.0-687.51.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
libtiff security update
4.0.9-39 - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation RHEL-248298...
coreutils security update
8.30-21.0.1 - clean up empty file if cp is failed Orabug 15973168 - df --local: recognize afs, auristorfs, and smb3 as remote fs 1798030 - fix formatting of sha512sum1 man page 1688744 8.30-21 - sort: fix buffer under-read CVE-2025-5278 RHEL-216927...
perl-DBI security update
1.643-26.6 - Fix CVE-2026-73194: enforce placeholder range limit on :N style placeholders Resolves: RHEL-247316...
curl security update
8.12.1-4.6 - fix cookie injection via trailing dot super cookies CVE-2026-8924 - fix digest auth state leak on origin or credential change CVE-2026-11856 - fix netrc password lookup for non-matching login CVE-2026-8926 8.12.1-4.5 - fix proxy auth not cleared properly on NULL CVE-2026-9079 - fix...
tar security, bug fix, and enhancement update
2:1.30-13 - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also fixes CVE-2026-18508 escape from --one-top-level via hardlinks. - Upstream fix for build with libacl 2.4.0 - Backport upstream patches f...
libarchive security update
3.7.7-11 - Related: CVE-2026-16517 and CVE-2026-15028...
podman security update
5.8.2-9.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-9 - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 7:5.8.2-8 - update to the latest upstream commit 66780e9b - Resolves: RHEL-240087 7:5.8.2-7 - Rebuild for golang C...
postgresql security update
13.23-6 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix...
postgresql16 security update
16.15-1.0.1 - Replace upstream reference Orabug: 37044148 16.15-1 - Update to 16.15...
freerdp security update
2:2.11.7-13 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247353...
openssh security, bug fix, and enhancement update
8.0p1-33.0.1 - Update upstream references Orabug: 36587718 8.0p1-33 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 8.0p1-32 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen Related: RHEL-234763 8.0p1-3...
libxml2 security, bug fix, and enhancement update
2.9.7-21.8 - Lower xpath recursion limits RHEL-249282 2.9.7-21.8 - Fix CVE-2026-6653 RHEL-215616...
corosync security update
3.1.8-1.2 - Resolves: RHEL-251531 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665...
postgresql:16 security update
pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.15-1 - Update to 16.15 - Fix...
postgresql:15 security update
pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related: 212841...
containernetworking-plugins security update
1:1.9.0-4 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374...
postgresql:12 security update
12.22-10.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679 - Resolves: CVE-2026-14680, CVE-2026-1574...
postgresql:15 security update
pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel 1.4.0-2 - BuildRequires postgresql-server-devel 1.4.0-1 - Update to 1.4.0...
unbound security update
1.16.2-5.14.2 - Backport additional fix from 1.26.0 CVE-2026-50252 - Correct new warning in previous change CVE-2026-44690 1.16.2-5.14.1 - Fix CVE-2026-50252 cache poisoning via source port prediction...
apr-util security update
1.6.1-9.1 - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation CVE-2025-49506 - Resolves: RHEL-236267 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client CVE-2026-34502 - Resolves...
podman security update
5.8.2-7.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-7 - update to the latest upstream commit 66780e9b - rebuild with...
runc security update
4:1.4.2-3 - rebuild for CVE-2026-56860 - Resolves: RHEL-241703...
host-metering security update
1.2.0-4.0.3 - Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 Orabug: 39863765 1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233...
rsyslog security update
8.2510.0-2.0.1.el98.2 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246641 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against...
openexr security update
3.1.1-3.4 - fix CVE-2026-68515...
openssh security update
9.9p1-11.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...
firefox security update
140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.16.0-1 - Update to 140.16.0 ESR...
firefox security update
140.16.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.16.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.16.0-1 - Update to 140.16.0 ESR...
corosync security update
3.1.10-1.2 - Resolves: RHEL-251542 - totempg: Replace assert with check in deliverfn fixes CVE-2026-81665...
sudo security update
1.9.17p2-3.1 - CVE-2026-82474 sudo: execveat2 intercept/logsubcmds bypass Resolves: RHEL-255647...
firefox security update
140.13.0-1.0.1 - Update to 140.13.0 ESR Orabug: 39947841CVE-2026-15718CVE-2026-15719 CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353 CVE-2026-16354CVE-2026-16355CVE-2026-16356CVE-2026-16357CVE-2026-16358 CVE-2026-16359CVE-2026-16360CVE-2026-16361CVE-2026-16362CVE-2026-16363...
rsyslog security update
8.2510.0-5.2 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246633...
yggdrasil security update
0.4.9.2-3 - Rebuild yggdrasil against updated golang 0.4.9.2-2 - Rebuild yggdrasil against updated golang...
gstreamer1-plugins-base security update
1.22.12-8.2 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253753 1.22.12-8.1 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246...
webkit2gtk3 security update
2.52.5-1 - Update to 2.52.5 2.52.4-1 - Update to 2.52.4 2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 - Update to 2.50.1 2.50.0-1 - Update to 2.50.0 2.48.5-1 - Update to 2.48.5 2.48.3-1 - Update to 2.48.3 2.48.2-1 - Update to 2.48.2 - Reenable JIT...
curl security update
7.76.1-40.el98.7 - add sasl service name to connection reuse checks CVE-2026-8458 7.76.1-40.el98.6 - detect proxy changes read from environment CVE-2026-8927...
389-ds-base security update
1.3.11.1-5.0.13 - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 Orabug: 39892253 1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-1490...
tomcat update
1:10.1.49-4 - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header...