udisks2 security update

2.9.0-16.1 - udiskslinuxmanager: Add lower bounds check to fdindex CVE-2025-8067 RHEL-109408...

postgresql:13 security update

pgaudit 1.5.0-1 - Update to version 1.5.0 Related: 1855776 pgrepack 1.4.6-3 - Release bump - enable gating 1.4.6-2 - Rebuild - Resolves:1954442 1.4.6-1 - Rebase to upstream release 1.4.6 1.4.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 1.4.5-1 - Initial packaging...

httpd security update

2.4.62-4.0.1.4 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-4.4 - Resolves: RHEL-99949 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade 2.4.62-4.1 - Resolves: RHEL-99972 - CVE-2024-47252 httpd: insufficient escaping of user-supplied data in modssl - Resolves...

postgresql:15 security update

pgaudit 1.7.0-1 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: 2128410 pgrepack 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 1.4.8-1 - Update to version 1.4.8 - Postgresql 15 is supported - Related: 212841...

mod_http2 security update

2.0.26-4.1 - Resolves: RHEL-99956 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module...

postgresql security update

13.22-1 - Update to 13.22 13.18-1 - Update to 13.18...

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pgrepack 1.5.1-1 - Update to 1.5.1 postgres-decoderbufs 2.4.0-1.Final - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql 16.10-1 - Update to 16.10...

python39:3.9 security update

modwsgi numpy python39 3.9.20-2 - Security fix for CVE-2025-8194 Resolves: RHEL-106359 python3x-pip python3x-setuptools 50.3.2-7 - Security fix for CVE-2025-47273 Resolves: RHEL-104339 python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python-ply python-psutil...

postgresql:16 security update

pgaudit pgrepack pgvector 0.6.2-2 - Enable Portable build - Resolves: RHEL-84405 postgres-decoderbufs postgresql 16.10-1 - Update to 16.10...

python3.11 security update

3.11.13-2.0.1 - Update rpm-macros description Orabug: 36024572 3.11.13-2 - Security fix for CVE-2025-8194 Resolves: RHEL-106338...

fence-agents security update

4.2.1-129.14 - fenceaws: add skiposshutdown parameter Resolves: RHEL-109814 4.2.1-129.13 - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104741 4.2.1-129.12 - fenceibmvpc: add apikey file support Resolves: RHEL-107506...

thunderbird security update

128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2 128.14.0-2 - Add missing translations 128.14.0-1 - Update to 128.14.0 build1...

aide security update

0.16.15.2 - CVE-2025-54389 aide: improper output neutralization enables bypassing resolves: RHEL-109907...

pam security update

1.3.1-38.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-38 - pamnamespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724...

python-cryptography security update

3.2.1-8 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97452...

python3 security update

3.6.8-71.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-71 - Security fix for CVE-2025-8194 Resolves: RHEL-106333...

thunderbird security update

128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2 128.14.0-2 - Add missing translations 128.14.0-1 - Update to 128.14.0 build1...

glibc security update

2.17-326.0.11.3 - Back port fix for CVE-2025-4802 Orabug: 38144086...

aide security update

0.16-103.2 RHEL 9.6.Z ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109910...

libxml2 security update

2.9.1-6.0.9.6 - Fix CVE-2025-7425: heap-use-after-free in xmlFreeID Orabug: 38290330...

python3.12 security update

3.12.11-2 - Security fix for CVE-2025-8194 Resolves: RHEL-106343...

kernel security update

5.14.0-570.37.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

kernel security update

4.18.0-553.71.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

firefox security update

128.14.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.14.0-2 - Add missing translations 128.14.0-1 - Update to 128.14.0 build1...

firefox security update

128.14.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.14.0-2 - Add missing translations...

pki-deps:10.6 security update

apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent 69-1 - Rebase to version 69 - Resolves: RHEL-103106 glassfish-fastinfoset glassfish-jaxb glassfish-jaxb-api jackson-annotations 2.19.1-1 - Rebase to upstream version 2.19.1 - Resolves: RHEL-103106...

tomcat security update

1:9.0.87-3.el96.3 - Resolves: RHEL-102200 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames CVE-2025-48989 1:9.0.87-3.el96.2 - Resolves: RHEL-108491 tomcat: Apache Commons FileUpload DOS via part headers CVE-2025-48976 - Resolves: RHEL-108499 tomcat: Dos in multipart upload...

tomcat security update

1:9.0.87-1.el810.6 - Resolves: RHEL-102193 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames CVE-2025-48989 1:9.0.87-1.el810.5 - Resolves: RHEL-108486 tomcat: Apache Commons FileUpload DOS via part headers CVE-2025-48976 - Resolves: RHEL-108494 tomcat: Dos in multipart upload...

libarchive security update

3.3.3-6 - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515...

libarchive security update

3.5.3-6 - Resolves: CVE-2025-5914...

python-zipp security update

3.20.1-2 - Make package buildable for epel=9 3.20.1-1 - Update to 3.20.1 rhbz2307990 3.20.0-1 - Update to 3.20.0 rhbz2304028 3.19.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora41MassRebuild 3.19.2-2 - Rebuilt for Python 3.13 3.19.2-1 - Update to 3.19.2 rhbz2290429 3.19.1-1 - Update to...

python-zipp security update

3.20.1-2 - Make package buildable for epel=9 3.20.1-1 - Update to 3.20.1 rhbz2307990 3.20.0-1 - Update to 3.20.0 rhbz2304028 3.19.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora41MassRebuild 3.19.2-2 - Rebuilt for Python 3.13 3.19.2-1 - Update to 3.19.2 rhbz2290429 3.19.1-1 - Update to...

xterm security update

366-12 - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 366-11 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430...

kernel security update

5.14.0-570.35.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

mingw-sqlite security update

3.26.0.0-2 - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix CVE-2023-7104 - Fix CVE-2025-6965 Resolves: RHEL-103830...

kernel security update

4.18.0-553.70.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

go-toolset:rhel8 security update

delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455 go-toolset 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455...

golang security update

1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106464...

libxml2 security update

2.9.1-6.0.7.6 - Fix CVE-2025-6021, CVE-2025-32414, CVE-2025-49794, CVE-2025-49796 - Orabug: 38255814...

kernel security update

5.14.0-570.33.2.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

webkit2gtk3 security update

2.48.5-1 - Update to 2.48.5...

webkit2gtk3 security update

2.48.5-1 - Update to 2.48.5...

konsole security update

4.10.5-5.0.1 - Clear the arguments if the command is not found Orabug: 38260855CVE-2025-49091...

git security update

1.8.3.1-25.0.1 - Fixed CVE-2025-48384 Orabug: 38234220...

thunderbird security update

128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

python3.11-setuptools security update

65.5.1-4 - Security fix for CVE-2025-47273 Resolves: RHEL-101113...

kernel security update

4.18.0-553.69.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Unbreakable Enterprise kernel security update

5.15.0-311.185.9 - nfs: ignore SBRDONLY when remounting nfs Li Lingfeng Orabug: 37781252 5.15.0-311.185.8 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38182400 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189328 5.15.0-311.185.7 - perf: Fix...

Unbreakable Enterprise kernel security update

5.4.17-2136.346.6 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38109070 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189315 5.4.17-2136.346.5 - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261486 CVE-2023-6931 - perf...

java-1.8.0-openjdk security update

1:1.8.0.462.b08-1.0.1 - Update to 8u462-b08 GA Orabug: 38248370 - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the latest update - This tarball is embargoed unt...