podman security, bug fix, and enhancement update

5.8.2-4.0.1 - Rework CNI/Netavark detection logic JIRA: EVG-3769 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-4 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-3982...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

Unbreakable Enterprise kernel security update

5.4.17-2136.357.3.2 - locking/rtmutex: Skip removewaiter when waiter is not enqueued Davidlohr Bueso Orabug: 39706958 - rtmutex: Use waiter::task instead of current in removewaiter Keenan Dong Orabug: 39706958 CVE-2026-43499 5.4.17-2136.357.3.1 - KVM: x86: Fix shadow paging use-after-free due to...

gstreamer1-plugins-good security update

1.22.12-7.1 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s this branch had regressed to a stale pre-1.22.12 base Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves:...

tomcat security, bug fix, and enhancement update

1:9.0.87-2 - Resolves: RHEL-183993 Remove tomcat clustering JAR from RPM builds...

unbound security update

1.16.2-5.12 - Fix CVE-2026-40622 RHEL-184832 - Fix CVE-2026-44390 RHEL-186680 - Fix CVE-2026-41292 RHEL-187346 - Fix CVE-2026-42534 RHEL-187081...

tigervnc security update

1.8.0-33.0.11 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 and CVE-2026-34352 Orabug: 39478221 1.8.0-33.0.9 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Orabug: 38694278 - Fix CVE-2025-62230: xorg-x11-server:...

nginx:1.26 security, bug fix, and enhancement update

1.26.3-9.0.1.2 - Require oracle-indexhtml 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack 2:1.26.3-10 - nginx: code execution and...

nginx:1.24 security, bug fix, and enhancement update

1.24.0-7.0.1.3 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.3 - Resolves: RHEL-191773 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or...

gstreamer1-plugins-bad-free security update

1.16.1-8.0.1 - Update origin URL Orabug: 36209826 1.16.1-8 - Fix for CVE-2026-52720: librfb framebuffer update rectangle validation Resolves: RHEL-184455 1.16.1-7 - Fix integer overflow in vmncdec CVE-2026-52722 Resolves: RHEL-184414...

unbound security update

1.24.2-3.2 - Fix CVE-2026-40622 RHEL-184840 Fix CVE-2026-44390 RHEL-186688 Fix CVE-2026-41292 RHEL-187352 Fix CVE-2026-42534 RHEL-187095...

gstreamer1-plugins-ugly-free security update

1.22.12-6.1 - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464...

openssh security update

9.9p1-23.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-23 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164739 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing...

python-jwcrypto security update

1.5.6-5 - Fix CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens...

corosync security update

3.1.10-1.1 - Resolves: RHEL-163802 - Resolves: RHEL-163823 - totemsrp: Return error if sanity check fails fixes CVE-2026-35091 - totemsrp: Fix integer overflow in membjoinsanity fixes CVE-2026-35092 3.1.10-1 - Resolves: RHEL-122945 - New upstream release RHEL-122945...

grafana-pcp security update

5.3.0-4 - Resolves RHEL-158485: CVE-2026-25679...

grafana security update

10.2.6-25 - Resolves RHEL-158484: CVE-2026-25679...

buildah security update

1.43.1-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 https://github.com/containers/buildah/commit/c6eb14c - fixes 'Buildah concurrent bearer token requests...

p11-kit security update

0.26.2-1 - Rebase to 0.26.2 0.26.1-1 - Rebase to 0.26.1 0.25.10-1 - Rebase to 0.25.10 0.25.9-1 - Rebase to 0.25.9...

iputils security update

20240905-5 - Fix CVE-2025-48964 iputils: iputils integer overflow RHEL-115832...

linux-sgx security update

2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora 2.26-4 - Drop sgx-mpa dep from sgx-pccs 2.26-3 - Add scriptlets for PCCS 2.26-2 - Enable pccsadmin everywhere 2.26-1 - Update to SGX 2.26 / DCAP 1.2...

unbound security update

1.24.2-7 - Recreate configure unconditionally 1.24.2-6 - Add byacc into BuildRequires 1.24.2-5 - Change the default of tls-use-system-policy-versions at build-time 1.24.2-4 - Switch TLS configuration to follow TLS sockets by crypto-policy again 1.24.2-3 - Export utils subpackage into AppStream...

postgresql18 security update

18.3-1.0.1 - Replace upstream reference 18.3-1 - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow...

gstreamer1-plugins-bad-free security update

1.22.12-7.1 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 1.22.12-4.4 - Fix bytes/bits confusion in AV1 tile data size parsing CVE-2026-52718 Resolves: RHEL-184388 1.22.12-4.3 - Fix for CVE-2026-52719:...

libsolv security update

0.7.20-7 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178970...

xorg-x11-server security update

Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0.7 - Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 Orabug: 39440282 1.20.4-29.0.5 - Security update for CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 Orabug: 38691191 1.20.4-29.0.3 - Fix CVE-2025-49175,...

nodejs:22 security, bug fix, and enhancement update

nodejs 1:22.23.1-1 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338...

freerdp security update

2:3.10.3-12.2 - Update CLEARVBARENTRY size after alloc CVE-2026-33984 - Fail progressiverfxquantsub on invalid values CVE-2026-33983 Resolves: RHEL-162947, RHEL-162963 2:3.10.3-12.1 - Rebuilt for errata Resolves: RHEL-155980 2:3.10.3-12 - Fix use of nscprocessmessage - Increase timeout for...

edk2 security update

20251114-5.0.1 - Replace upstream references Orabug:36569119 20251114-5 - edk2-add-uefi-vars-firmware-json-files.patch RHEL-150696 - Resolves: RHEL-150696 edk2: Add JSON descriptors for uefi-vars builds 20251114-4 - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch RHEL-134956 -...

golang security update

1.26.2-2.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.2-2 - Do not ignore any tests in check 1.26.2-1 - Update to Go 1.26.2 fips-2 1.26.1-1 - Update to Go 1.26.1 1.25.7-1 - Update to Go 1.25.7 fips-1 1.25.5-1 - Update to Go 1.25.5 fips-1 1.25.3-5 - gating.yaml: Add tier1 s390x...

python-urllib3 security update

1.24.2-10 - Security fix for CVE-2026-44431 Resolves: RHEL-184858...

oci-seccomp-bpf-hook security update

1.2.11-2 - rebuild for CVE-2026-33811 Resolves: RHEL-187325...

openssl security update

3.5.5-2.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.5-2 - Fix CVE-2026-31790 Resolves: RHEL-161574 1:3.5.5-1 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves:...

delve security update

1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update Delve to version 1.26.1...

qemu-kvm security update

10.1.0-16 - kvm-linux-aio-Put-all-parameters-into-qemulaiocb.patch RHEL-158224 - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch RHEL-158224 - kvm-block-iouring-avoid-potentially-getting-stuck-after.patch RHEL-158224 - kvm-io-uring-Resubmit-tails-of-short-writes.patch RHEL-158224 -...

python3.14 security update

3.14.4-2 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 3.14.4-1 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-168121, RHEL-167887 3.14.3-2 - Security fix...

NetworkManager security update

1.56.0-1.0.1 - Add connectivity check via Oracle servers Orabug: 32051972 1:1.56.0-1 - Update to 1.56.0 1:1.55.91-1 - Update to 1.56.0 rc2 - Fix CVE-2025-9615 RHEL-111772 1:1.55.90-1 - Update to 1.56.0 rc1 - Support setting protocol version of HSR/PRP RHEL-100764 - Support interlink for HSR/PRP...

mingw-glib2 security update

2.87.0-1 - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in gescapeuristring...

luksmeta security update

10-1 - Align to upstream release 10...

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

gstreamer1-plugins-bad-free 1.26.7-2 - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 1.26.7-1 - Update to 1.26.7 Resolves: RHEL-126057 1.26.2-1 - Update to 1.26.2 Resolves: DESKTOP-1858 gstreamer1-plugins-base 1.26.7-2 - Add patch for CVE-2026-2921 Resolves:...

skopeo security update

2:1.22.2-1 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 1:1.22.0-3 - enable sequoia - Resolves: RHEL-56364 1:1.22.0-2 - Rebuild for new golang to...

freeipmi security update

1.6.17-1 - Update to 1.6.17...

tomcat security update

1:10.1.36-3.el101.1 - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 1:10.1.49-1 - Resolves: RHEL-150099 Rebase tomcat package to enable PQC features 1:10.1.36-4 - Resolves: RHEL-124493 tomcat: Directory traversal via rewrite with...

crun security update

1.27-2 - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090...

kernel security update

6.12.0-211.7.3.el102.OL10 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted...

kernel security, bug fix, and enhancement update

5.14.0-687.20.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

sudo security update

1.9.17-4.p2 - Bump release number - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls 1.9.17-3.p2 - Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls 1.9.17-2.p2 - Resolves:...

systemd security update

257-23.0.1.el102.1 - Fix detection of Oracle Virtualization or BM envs Orabug: 37531877 - Avoid udevadm warnings when using udev valid configs Orabug: 37503197 - allow dm remove ioctl to co-operate with UEK3 Orabug: 18467469 - set 'RemoveIPC=no' in logind.conf as default Orabug: 22224874 - Fix...

glibc security update

2.39-121.0.1 - Forward port Oracle changes to 2.39-121. - Reviewed-by: David Faust Oracle history: April-2-2026 Cupertino Miranda - 2.39-113.0.1 - Reverted to version 2.39-113. - Reviewed-by: David Faust February-3-2026 Cupertino Miranda - 2.39-99.0.1 - Forward port Oracle changes to 2.39-99. -...

galera and mariadb11.8 security update

galera 26.4.25-1 - Rebased to 26.4.25 26.4.24-1 - Rebase to 26.4.24 26.4.23-1 - Rebase to 26.4.23 26.4.22-1 - Rebase to 26.4.22 26.4.21-2 - Add sysusers.d config file to allow rpm to create users/groups automatically mariadb11.8 3:11.8.6-2 - Added a fix for SIGSEGV when using skip-grant-tables -...