11088 matches found
pacemaker security update
2.1.7-5.6.0.1 - Upstream reference in pacemaker crmreport binary Orabug: 32825154 - Replace bug url Orabug: 34202300 2.1.7-5.6 - Fix integer overflows in remote message decompression code CVE-2026-10649 - Resolves: RHEL-181157...
perl-DBI:1.641 security update
perl-DBI 1.641-5 - Fix stack overflow and buffer overflow in DBI.xs CVE-2026-9698 Resolves: RHEL-184974 1.641-4 - BR: perlblib, perlFileHandle for tests 1.641-3 - Rebuild with enable hardening bug 1636329 1.641-2 - Rebuilding for multicontext errata test purposes rhbz1666480 1.641-1 - 1.641 bump...
kernel security, bug fix, and enhancement update
5.14.0-687.25.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
cifs-utils security, bug fix, and enhancement update
7.6-2 - resolves: RHEL-192982 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego...
kernel security update
4.18.0-553.144.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
python3 security update
3.6.8-77.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-77 - Security fix for CVE-2026-15308 Resolves: RHEL-193772...
python3.12 security update
3.12.13-3 - Security fix for CVE-2026-15308 Resolves: RHEL-193776...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-4 - switch source URL from GitHub to the internal GitLab sustaining-engineering repo - update to the latest content of release-1.33 commit 2cbee78 - bump golang.org/x/crypto to v0.53.0 to fix...
kernel update
5.14.0-687.23.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
kernel update
4.18.0-553.143.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
libxml2 security update
2.9.13-14.2 - Fix CVE-2025-6170 RHEL-182016...
host-metering security update
1.2.0-4.0.1 - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 Orabug: 39352233...
podman security update
5.8.2-5.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-5 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646...
PackageKit security update
1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...
vim security update
8.2.2637-26.0.1.el98.10 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.10 - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave 2:8.2.2637-26.9 - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete 2:8.2.2637-26.8 - RHEL-185874 CVE-2026-47167...
glibc security update
2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi Oracle history: May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by: David Faust May-7-2026 Cupertino Miranda - 2.28-251.0.4.34 - Forward port of Oracle patches Reviewed-by: Jos...
cups security update
1:2.3.3op2-39 - RHEL-177957 CVE-2026-34980 cups: control character injection in option values...
gegl04 security update
0.4.62-1.1 - Fix CVE-2026-2050: buffer overflow in rgbereadnewrle - Resolves: RHEL-188264...
git-lfs security update
3.7.1-4.2 - Rebuild with new Golang - Resolves: RHEL-187329...
go-toolset:ol8 security, bug fix, and enhancement update
delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 golang 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586 1.26.5-1 - Update to Go 1.26.5 fips-1 ...
git-lfs security update
3.4.1-12 - Rebuild with new Golang - Resolves: RHEL-187191...
qemu-kvm security update
10.1.0-17.el98.4 - kvm-virtio-blk-add-missing-VIRTIOBLKTSCSICMD-size-ch.patch RHEL-184527 - Resolves: RHEL-184527 CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling rhel-9.8.z...
buildah security update
1.43.1-4.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-4 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645...
LibRaw security update
0.21.1-2 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461...
389-ds-base security update
1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-14905 Orabug: 39146844 1.3.11.1-5.0.5 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules Orabug: 38388205...
libsolv security update
0.7.24-6 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178982...
perl-XML-LibXML security update
1:2.0206-5.1 - Fix out-of-bounds UTF-8 heap read in node name validation CVE-2026-8177 - Resolves: RHEL-186532...
python-pillow security update
5.1.1-22 - Security fix for CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380 Resolves: RHEL-192830, RHEL-192770, RHEL-192684, RHEL-192731...
nginx:1.24 security, bug fix, and enhancement update
1.24.0-3.0.1.3 - Remove Red Hat references Orabug: 29498217 1:1.24.0-3.3 - Resolves: RHEL-191779 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188406 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted...
openexr security update
3.1.1-3.3 - fix CVE-2026-41142 - fix CVE-2026-42216...
perl-DBI security update
1.643-9.1 - Fix possible stack overflow and buffer overflow in DBI.xs CVE-2026-9698 - Resolves: RHEL-184984...
vim security update
8.0.1763-27.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-27 - RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186648 CVE-2026-52858 vim: possible code execution wi...
gegl security update
0.2.0-40 - Fix buffer overflow in rgbereadnewrle CVE-2026-2050 Resolves: RHEL-188260...
gimp security update
2:3.0.4-4.5 - fix CVE-2026-58379 - Resolves: RHEL-192170...
freerdp security update
2:2.11.7-10 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186983...
kernel security, bug fix, and enhancement update
4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
nginx security, bug fix, and enhancement update
1.20.1-28.0.1.el98.4 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-28.4 - Resolves: RHEL-190800 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves:...
kernel security, bug fix, and enhancement update
4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
xorg-x11-server security update
1.20.11-34.3 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493...
xorg-x11-server-Xwayland security update
21.1.3-20.3 - CVE fix for: CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191516...
openssl security update
1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783...
libreoffice security update
6.4.7.2-21.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. - Remove Red Hat branding - Change vendor to RESF 1:6.4.7.2-21 - Fix CVE-2026-8357 buffer overflow in Calc formula compiler with...
libreoffice security update
1:7.1.8.1-15.0.1.el98.2 - Added the --with-hamcrest option to configure. - Replace colors with Oracle colors Orabug: 32120093 1:7.1.8.1-15.el98.2 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186057...
freerdp security update
2:2.11.7-7.4 - Fix incorrect bounds checks in planar codec CVE-2026-45700 Resolves: RHEL-186991...
Unbreakable Enterprise kernel security update
5.15.0-322.203.3.3 - locking/rtmutex: Skip removewaiter when waiter is not enqueued Davidlohr Bueso Orabug: 39706512 - rtmutex: Use waiter::task instead of current in removewaiter Keenan Dong Orabug: 39706512 CVE-2026-43499 5.15.0-322.203.3.2 - KVM: x86/mmu: Ensure hugepage is in by slot before...
kernel security update
5.14.0-687.24.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
buildah security update
1.43.1-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-3 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066...
kernel security update
4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...