.NET 9.0 security update

9.0.111-1.0.1 - Add support for Oracle Linux 9.0.111-1 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116856...

httpd security update

2.4.6-99.0.7.1 - Fixed security update CVE-2024-47252 CVE-2025-49812 Orabug: 38378160...

libssh security update

0.10.4-15 - Rebuild due to broken build auto-tagging 0.10.4-14 - Fix CVE-2025-5318 Resolves: RHEL-111730...

webkit2gtk3 security update

2.50.1-1 - Update to 2.50.1...

firefox security update

140.4.0-3.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.4.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.4.0-3 - Update to 140.4.0 ESR...

cups security update

1:1.6.3-52.0.1 - CVE-2025-58060: Authentication Bypass in CUPS Authorization Handling - Orabug: 38489251...

Unbreakable Enterprise kernel security update

5.15.0-313.189.5.1 - afunix: Don't leave consecutive consumed OOB skbs. Kuniyuki Iwashima Orabug: 38528187 CVE-2025-38236 - fs: writeback: fix use-after-free in markinodedirty Jiufei Xue Orabug: 38528183 CVE-2025-39866 - rtnetlink: Fix L3 stats disable handling in rtnloffloadxstatsfill Vijayendra...

kernel security update

5.14.0-570.52.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

kernel security update

4.18.0-553.79.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

vim security update

8.2.2637-22.0.1.1 - Remove upstream references Orabug: 31197557 2:8.2.2637-22.1 - RHEL-112006 CVE-2025-53905 vim: Vim path traversial - RHEL-112010 CVE-2025-53906 vim: Vim path traversal 2:8.2.2637-22 - RHEL-2159 vim: Heap Use After Free in function inscomplgetexp in vim/vim 2:8.2.2637-21 -...

webkit2gtk3 security update

2.50.0-1 - Update to 2.50.0...

ImageMagick security update

6.9.10.68-7.0.3 - Security update CVE-2025-57803 Orabug: 38455460 6.9.10.68-7.0.1 - Fix for CVE-2025-55154 Orabug: 38417011...

Unbreakable Enterprise kernel security update

5.4.17-2136.348.3 - hugetlbfs: take readlock on immap for PMD sharing Waiman Long Orabug: 38459576 - kallsyms: add modulekallsymsoneachsymbollocked Julian Pidancet Orabug: 37629344 Orabug: 38418686 - kallsyms: export modulekallsymsoneachsymbol Julian Pidancet Orabug: 37629344 Orabug: 38418686...

compat-libtiff3 security update

3.9.4-14 - fix CVE-2025-9900: Write-What-Where via TIFFReadRGBAImageOriented RHEL-112528...

vim security update

8.0.1763-21.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-21 - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal 2:8.0.1763-20 - fix issue...

udisks2 security update

2.8.4-1.0.1 - Fix index underflow in LoopSetup CVE-2025-8067 Orabug: 38444282...

iputils security update

20210202-11.0.1.3 - Upstream backport 'ping: Add SARESTART to saflags' Orabug: 34573399 20210202-11.3 - Bump release 20210202-11.2 - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-112001 20210202-11.1 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in...

redis security update

6.2.9-1.0.2 - Fix for CVE-2025-49844 Orabug: 38515582...

redis security update

6.2.19-1.0.1 - Fix for CVE-2025-49844 Orabug: 38515582...

redis security update

7.2.10-1.0.2 - Fix for CVE-2025-49844 Orabug: 38515582...

open-vm-tools security update

12.3.5-2.0.1.el8.1 - Fix spaces in vmware udev rule for scsi devices Orabug: 24461968 - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. Orabug: 22815019 - Increase timeout for scsi devices on VMWare guests by adding a udev rule. Orabug: 21819156 12.3.5-2.el8.1 -...

open-vm-tools security update

12.5.0-1.0.1.2 - Fix spaces in vmware udev rule for scsi devices Orabug: 24461968 - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. Orabug: 22815019 - Increase timeout for scsi devices on VMWare guests by adding a udev rule. Orabug: 21819156 12.5.0-1.el96.2 -...

kernel security update

4.18.0-553.78.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-570.51.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Unbreakable Enterprise kernel security update

5.4.17-2136.347.6.4 - nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Jeff Layton Orabug: 38501612 CVE-2025-38724...

python3 security update

3.6.8-21.0.5 - tarfile now validates archives to ensure member offsets are non-negative Orabug: 38442771CVE-2025-8194...

perl-JSON-XS security update

1:3.04-4 - Resolves: RHEL-113630 - Fix CVE-2025-40928 - Package tests...

idm:DL1 security update

bind-dyndb-ldap 11.6-6 - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa 4.9.13-20.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.9.13-20 - Refactor ipatests for unique krbcanonicalname Resolves: RHEL-110061 4.9.13-19 - Enforce uniqueness across krbprincipalnam...

ipa security update

4.12.2-14.0.1.5 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-14.5 - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA 4.12.2-14.4 - Resolves: RHEL-1100...

perl-JSON-XS security update

1:4.04-1 - Update to 4.04 - Fix CVE-2025-40928...

squid security update

7:3.5.20-17.0.7.13 - Fixes CVE-2025-54574, add URN access disabling config options Orabug: 38350105 7:3.5.20-17.0.5.13 - Fixed cve 2023-46846 for http and icap request/response smuggling Orabug: 37326730...

Unbreakable Enterprise kernel security update

5.4.17-2136.347.6.3 - uek-rpm: Move ifb module to nano modules Harshit Mogalapalli Orabug: 38462132...

kernel security update

5.14.0-570.49.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

kernel security update

4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

mysql:8.0 security update

mecab mecab-ipadic mysql 8.0.43-1 - Rebase to MySQL 8.0.43 8.0.42-1 - Rebase to MySQL 8.0.42...

openssh security update

8.0p1-26.0.1 - Update upstream references Orabug: 36587718 8.0p1-26 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on CVE-2025-26465 Resolves: RHEL-109228...

aide security update

0.15.1-13.0.3 - aide security update CVE-2025-54389 Orabug: 38427919...

kernel security update

3.10.0-1160.119.1.0.12 - scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 Orabug: 38414589 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 Orabug: 38414589...

thunderbird security update

140.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.3.0 - Add OpenELA debranding 140.3.0-1 - Update to 140.3.0 ESR...

Unbreakable Enterprise kernel security update

5.4.17-2136.347.6.2 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro Orabug: 38453918 CVE-2025-38499 - vsock: Do not allow binding to VMADDRPORTANY Budimir Markovic Orabug: 38453914 - HID: core: ensure the allocated report buffer can contain the reserved report...

ImageMagick security update

6.9.10.68-7.0.1 - Fix for CVE-2025-55154 Orabug: 38417011...

kernel security update

5.14.0-570.46.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

firefox security update

140.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.3.0-1 - Update to 140.3.0...

Unbreakable Enterprise kernel security update

5.15.0-312.187.5.3 - HID: core: do not bypass hidhwrawrequest Benjamin Tissoires Orabug: 38454666 CVE-2025-38494 - vsock: Do not allow binding to VMADDRPORTANY Budimir Markovic Orabug: 38454665 CVE-2025-38618 - cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns Al Viro...

kernel security update

4.18.0-553.76.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

firefox security update

128.14.0-2.0.1 - Update to 128.14.0 Orabug: 38400668CVE-2025-9179CVE-2025-9180 CVE-2025-9181CVE-2025-9182CVE-2025-9185...

mysql security update

8.0.43-1 - Rebase to MySQL 8.0.43 8.0.42-1 - Rebase to MySQL 8.0.42...

gnutls security update

3.8.3-6.2fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux Orabug: 35925409 3.8.3-6.2 - keyupdate: rework the rekeying logic RHEL-107498 3.8.3-6.1 - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and...

gnutls security, bug fix, and enhancement update

3.8.3-6.2 - keyupdate: rework the rekeying logic RHEL-107498 3.8.3-6.1 - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395...

firefox security update

140.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.3.0-1 - Update to 140.3.0...