11088 matches found
ruby:4.0 security, bug fix, and enhancement update
ruby 4.0.6-34 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 0.5.7-1 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 rubygem-pg...
ruby security update
2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420...
Unbreakable Enterprise kernel security update
6.12.0-205.92.4.2 - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp Dongli Zhang Orabug: 39844842 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39844812 CVE-2026-68480 - KVM: x86: Check for invalid/obsolete root after making MMU...
libpng12 security update
1.2.50-10.0.3 - Fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE Orabug: 39771480 1.2.50-10.0.1 - Fix CVE-2026-25646: heap buffer overflow in pngsetquantize Orabug: 39183864...
kernel security, bug fix, and enhancement update
6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
gpsd-minimal security update
3.26.1-2.0.1.el98.1 - Replaced upstream reference Orabug: 35865525 1:3.26.1-2.el98.1 - fix command injection in gpsprof CVE-2026-58459 1:3.26.1-2 - fix buffer overflow in NMEA2000 driver CVE-2025-67268 - fix integer underflow in handling of Navcom packets CVE-2025-67269...
libgcrypt security update
1.10.0-13fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35961378 - Update FIPS module name for Oracle Linux Orabug: 35961378 1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafte...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
ruby:3.3 security, bug fix, and enhancement update
ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 0.5.5-1 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 rubygem-pg...
php:8.3 security, bug fix, and enhancement update
php 8.3.32-1 - rebase to 8.3.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...
LibRaw security update
0.21.1-2.1 - Fix CVE-2026-51235 Resolves: RHEL-219221...
libgcrypt security update
1.8.5-8fips - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations Orabug: 33081130 - Change Epoch from 1 to 10 1.8.5-8 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext...
gpsd security update
3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...
kernel security, bug fix, and enhancement update
4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
glibc security update
2.28-251.0.4.40 - Forward port of Oracle patches Reviewed-by: David Faust Oracle history: July-13-2026 Cupertino Miranda - 2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by:...
kernel security, bug fix, and enhancement update
5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
openssh security update
9.9p1-9.0.1 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream references found with /usr/bin/ssh Orabug: 37814929 9.9p1-9 - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed in unintended parent...
Unbreakable Enterprise kernel security update
5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - KVM: x86/mmu: Rename directmap to...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
gnutls security update
3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 Orabug: 39674042...
kernel security, bug fix, and enhancement update
6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Unbreakable Enterprise kernel security update
6.12.0-204.92.4.4.3 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832867 CVE-2026-68480 6.12.0-204.92.4.4.2 - net: tap: set...
resource-agents security update
4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
kernel security, bug fix, and enhancement update
4.18.0-553.151.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
osbuild-composer security update
175-1.0.1 - Track github upstream...
Unbreakable Enterprise kernel security update
5.4.17-2136.358.2.0.1 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place Thomas Gleixner Orabug: 39832992 - x86/alternative: Support relocations in...
gimp security update
2:3.0.4-4.9 - fix CVE-2026-42169 2:3.0.4-4.8 - fix CVE-2026-66758 - fix CVE-2026-66759...
kernel security, bug fix, and enhancement update
5.14.0-687.34.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
freerdp security update
2:3.10.3-12.7 - Add codecID checks for CACHEBITMAPV3ORDER CVE-2026-55827 - Fix boundary checks in gdiBitmapDecompress CVE-2026-55827 Resolves: RHEL-194327...
glibc security update
2.34-274.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust Oracle history: June-30-2026 Cupertino Miranda - 2.34-272.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust June-5-2026 Cupertino Miranda ...
kernel security, bug fix, and enhancement update
6.12.0-211.42.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
kernel security update
5.14.0-687.33.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
nodejs24 security update
1:24.18.0-3.0.1 - Update upstream references 1:24.18.0-3 - Fix CVE-2026-13149 brace-expansion 1:24.18.0-2 - Fix CVE-2026-59873 and CVE-2026-59874 nodejs-tar...
sg3_utils security, bug fix, and enhancement update
1.48-7.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188123...
thunderbird security update
140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...
thunderbird security update
140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...
p11-kit security update
0.26.2-1 - Rebase to 0.26.2 Resolves: RHEL-147825 0.26.1-1 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 0.25.10-1 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 0.25.3-3 - Fix regression in trust where file creation fails for long cert labels Resolves:...
glibc security fix update
2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi Oracle history: May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by: David Faust May-7-2026 Cupertino Miranda - 2.28-251.0.4.34 - Forward port of Oracle patches Reviewed-by: Jos...
fence-agents security update
4.10.0-110.5 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 4.10.0-110.4 - fenceopenstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320...
php8.4 security, bug fix, and enhancement update
8.4.23-1 - rebase to 8.4.23...
ldns security update
1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701...
sg3_utils security, bug fix, and enhancement update
1.47-10.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188130...
libgcrypt security update
1.11.0-7 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext 1.11.0-6 - Disable annocheck on riscv64 fixes build Resolves: RHEL-88837...
mingw-glib2 security update
2.70.1-9 - Fix CVE-2026-58010: off-by-one error in gvstupleisnormal Resolves: RHEL-212164 2.70.1-8 - Fix CVE-2026-58011: gdatetimeaddfull range validation Resolves: RHEL-212184 2.70.1-7 - Fix CVE-2026-58013: memcmp buffer over-read in giochannel Resolves: RHEL-212234 2.70.1-6 - Fix CVE-2026-58012...
osbuild-composer security, bug fix, and enhancement update
175-1.0.1 - Track github upstream...
libgcrypt security update
1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext...
osbuild-composer security update
176-1.0.1 - Track github upstream...