firefox security update

140.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file...

postgresql16 security update

16.13-1.0.1 - Replace upstream reference Orabug: 37044148...

podman security update

5.8.2-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-1 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165012 7:5.8.1-1 - update to...

libssh security update

0.12.0-2 - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 0.12.0-1 - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825, RHEL-130042 - Add a Requires for crypto-policies instead of a Recommends Resolves: RHEL-139045...

tomcat security, bug fix, and enhancement update

1:9.0.117-2 - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build...

libtasn1 security update

4.13-6 - Backport the fix for CVE-2025-13151 RHEL-139546...

gstreamer1-plugins-good security update

1.16.1-7 - Fix integer overflow vulnerabilities in wavpackdec CVE-2026-53705 Resolves: RHEL-184473...

389-ds:1.4 security update

1.4.3.39-25 - Bump version to 1.4.3.39-25 - Resolves: RHEL-182162 - EMBARGOED CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-8.10.z - Resolves: RHEL-183102 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length...

libxml2 security update

2.9.7-21.6 - Fix CVE-2025-6170 RHEL-182012...

kernel security, bug fix, and enhancement update

5.14.0-687.22.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

python-tornado security update

6.5.5-1 - Update to 6.5.5 Resolves: RHEL-160935...

golang-github-openprinting-ipp-usb security update

0.9.27-6 - rebuilt to fix CVE-2026-27137, CVE-2026-25679 - fixed rebuild problem with redundant condition check in quirks.empty...

python3.12 security update

3.12.13-2.0.1 - Remove upstream URL reference 3.12.13-2 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-167886, RHEL-168120 3.12.13-1 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282...

vim security update

9.1.083-9.0.1.el102.2 - Remove upstream references Orabug: 31197557 2:9.1.083-9.2 - Resolves: RHEL-164952 vim: arbitrary command execution via modeline sandbox bypass 2:9.1.083-9.1 - RHEL-159616 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob function 2:9.1.083-9 -...

edk2 security, bug fix, and enhancement update

20220126gitbb1bba3d77-13.el8.10 - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch RHEL-151949 - Resolves: RHEL-151949 FJ8.10 Bug How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests 20220126gitbb1bba3d77-13.el8.9 -...

cups security update

1:2.2.6-68 - RHEL-177947 CVE-2026-34980 cups: control character injection in option values...

grafana-pcp security update

5.1.1-17 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 5.1.1-16 - Resolves RHEL-183820: CVE-2026-39821...

aardvark-dns security update

2:1.17.1-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170152...

389-ds-base security update

2.8.0-8 - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-9.8.z - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...

perl-HTTP-Daemon security update

6.12-6.1 - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open - Resolves: RHEL-184829...

perl-HTTP-Daemon security update

6.01-24 - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open - Resolves: RHEL-184825...

grafana-pcp security update

5.1.1-16 - Resolves RHEL-183733: CVE-2026-39821 5.1.1-15 - Resolves RHEL-183733: CVE-2026-39821...

grafana security update

10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...

kernel security, bug fix, and enhancement update

5.14.0-687.19.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

compat-openssl10 security update

1.1.0-2o-4.3 - Fix CVE-2026-45447: Fix double-free of caller-owned BIO in PKCS7verify...

skopeo security update

1:1.22.2-7 - Rebuild for golang = 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898...

postgresql:18 security update

pgaudit 18.0-1 - Update to 18.0 - Initial import for postgresql18 pgrepack 1.5.3-1 - Update to 1.5.3 - Initial import for postgresql18 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 pgvector 0.8.1-1 - Update to 0.8.1 - Initial...

nodejs:24 security, bug fix, and enhancement update

nodejs 1:24.18.0-1 - Update to version 24.18.0 nodejs-nodemon 3.0.3-3 - Keep BR on just npm 3.0.3-2 - Fix BR for nodejs-npm nodejs-packaging 2021.06-6 - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121569 2021.06-5 - nodejs.req to properly detect bundled deps...

freeipmi security update

1.6.18-1 - Update to 1.6.18, fixes CVE-2026-50031...

freeipmi security update

1.6.18-1 - Update to 1.6.18, fixes CVE-2026-50031...

python3.14-pip security update

25.2-5 - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pipinstallupgrade to run pip-3.14 - fix bash completion + remove unused metadata file 25.2-4 - Security fix for CVE-2026-8643: path traversal in wheel entry points...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 2:1.10.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 2:1.9.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related:...

openssl security update

3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...

Unbreakable Enterprise kernel security update

5.4.17-2136.357.3.1 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo Bonzini Orabug: 39673892 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Sean Christopherson Orabug: 39673892 - KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only pare...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.2 - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Sean Christopherson Orabug: 39673886 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo Bonzini Orabug: 39673886 - KVM: x86: Fix shadow paging use-after-free due to unexpected...

glibc security update

2.34-272.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust Oracle history: June-5-2026 Cupertino Miranda - 2.34-270.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi May-20-2026 Cupertino Miranda - 2.34-266.0.1 -...

mariadb:11.8 security, bug fix, and enhancement update

galera 26.4.27-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete lp1184034 test case without using patches. 26.4.27-1 - Rebased to 26.4.27 26.4.26-1 - Rebased to 26.4.26 mariadb 3:11.8.8-1 - Rebase to 11.8.8 3:11.8.7-1 - Rebase to 11.8.7...

php:7.4 security update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php 7.4.33-4 - Fix XSS within status endpoint CVE-2026-6735 - Fix Stale SOAPGLOBALrefmap pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAPPERSISTENCESESSION CVE-2026-7261 - Fix Broken Apache map...

ruby:3.3 security update

ruby 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. CVE-2026-42246 Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. CVE-2026-42258 Resolves:...

ruby:2.5 security update

ruby 2.5.9-114 - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 rubygem-abrt 0.3.0-4 - Execute test suite unconditionally. - Upload correct sources. rubygem-bson 4.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild...

mariadb:10.11 security, bug fix, and enhancement update

galera 26.4.20-1.0.1 - Drop nmap-ncat requirement. Orabug: 34116228 - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. Orabug: 34116228 26.4.20-1 - Rebase to 26.4.20 26.4.19-1 - Rebase to 26.4.19 26.4.18-1 - Rebase to 26.4.18 26.4.16-1 - Rebase to 26.4.16...

php security update

8.0.30-6 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale SOAPGLOBALrefmap pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAPPERSISTENCESESSION...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.2 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo Bonzini Orabug: 39673880 - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta CVE-2026-46331 - netsched: actpedit: use RCU in tcfpeditdump Eric Dumazet Orabug: 39668752 -...

freerdp security update

2.1.1-5.0.9 - Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 Orabug: 39440279 2.1.1-5.0.7 - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676...

glib2 security update

2.56.1-9.0.5 - Fixes CVE-2025-14078 gvariant parser buffer underflow Orabug: 39418716 2.56.1-9.0.3 - Fixes CVE-2025-13601 gescapeuristring overflow Orabug: 38909821 2.56.1-9.0.1 - Fix overflow of GDBusConnection serial Orabug: 38666376...

ruby:3.3 security update

ruby 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181682 - Fix information disclosure via MITM attack bypassing TLS in net-imap. CVE-2026-42246 Resolves: RHEL-181759 - Fix command injection via Symbol arguments in net-imap. CVE-2026-42258 Resolves:...

container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah 2:1.33.14-3 - rebuild for CVE-2025-68121 - Resolves: RHEL-149262 cockpit-podman 84.1-1 - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1 - Related: Jira:RHEL-25557 conmon...

rrdtool security update

1.7.2-22 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257...

giflib security update

5.2.1-10.2 - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157133...

ruby:4.0 security update

ruby 4.0.3-33 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. CVE-2026-42245 Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. CVE-2026-42246 Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments...