9855 matches found
xorg-x11-server-Xwayland security update
24.1.9-4.3 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191518 Resolves: https://redhat.atlassian.net/browse/RHEL-191517...
xorg-x11-server-Xwayland security update
24.1.9-4.3 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191532 Resolves: https://redhat.atlassian.net/browse/RHEL-191524...
dbus-broker security update
28-9 - Fix session bus denial of service via EMFILE during peer setup. Resolves: RHEL-233014 28-8 - Switch from useradd to systemd sysusers Resolves: RHEL-109036...
wget security, bug fix, and enhancement update
1.21.1-11 - Resolves: RHEL-220497 - async unsafe code in signal handler context 1.21.1-10 - Fix CVE-2026-58471: buffer overflow in convertfname - Resolves: RHEL-194521 1.21.1-9 - Resolves: RHEL-210636 - Fix integer+buffer overflow in htmlquotestring...
wget security, bug fix, and enhancement update
1.24.5-8 - Resolves: RHEL-220498 - async unsafe code in signal handler context 1.24.5-7 - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 1.24.5-6 - Fix integer and buffer overflow in htmlquotestring Resolves: RHEL-210625...
libxml2 security update
2.9.13-14.4 - Fix CVE-2026-11979 RHEL-215568 2.9.13-14.3 - Fix CVE-2026-6653 RHEL-215619...
tar security, bug fix, and enhancement update
2:1.34-13 - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary directory at an archive-controlled path outside the extraction tree. The fix for CVE-2025-45582 already prevents exploiting this problem, so i...
gimp security update
2:3.0.4-4.10 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18302 - fix CVE-2026-18303 - fix CVE-2026-18304 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-18307 - fix CVE-2026-18308...
freerdp security update
2:2.11.7-7.6 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241...
gzip security update
1.12-2 - Fix an issue with a temporary file creations when mktemp is missing 41991 - Fix a global buffer overflow vulnerability in the LZH decompression logic 41992 Resolves: CVE-2026-41991 Resolves: CVE-2026-41992...
pipewire security update
1.4.11-1.2 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 1.4.11-1.1 - Fix stack exhaustion via unbounded alloca in pulse-server CVE-2026-14330 Resolves: RHEL-249317...
nodejs:24 security update
nodejs 1:24.19.0-1 - Update to version 24.19.0 nodejs-nodemon 3.1.14-3 - Fix CVE-2026-69152 - brace-expansion 3.1.14-2 - Correction to sources for 3.1.14. 3.1.14-1 - Update to version 3.1.14 3.0.3-3 - Keep BR on just npm 3.0.3-2 - Fix BR for nodejs-npm nodejs-packaging 2021.06-6 - Properly handle...
iperf3 security update
3.9-17.1 - Resolves: RHEL-236176 - Add JSON value checks for getparameters CVE-2026-71217...
glib2 security update
2.56.4-177 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.56.4-176 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking 2.56.4-175 - Fix CVE-2026-58011: range validation in gdatetimeaddfull - Resolves: RHEL-212187 2.56.4-174 - Fix CVE-2026-58012: buffer overflow in gregex...
golang security, bug fix, and enhancement update
1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...
mingw-openssl security update
Mon Aug 17 2026 Uri Lublin - Fix CVE-2024-5535 SSLselectnextproto buffer overread Resolves: RHEL-45673 1.0.2k-3 - Rebuilt Related: rhbz1846152...
libxml2 security update
2.12.5-10.3 - Fix CVE-2026-11979 RHEL-215571...
attr security update
2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121...
httpd security update
2.4.63-13.0.1.el102.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.6 - Resolves: RHEL-190812 - httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 2.4.63-13.5 - Resolves:...
kernel security, bug fix, and enhancement update
4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
polkit security update
125-4.0.1.el102.1 - Increase timeout to avoid defunct processes Orabug: 26930744 125-4.1 - NOTICE jrybar: the record 125-4 below was added in manually after Ymir's initial - commit 125-3.1. For some reason, 125-3.1 for rhel-10.2 was based on contents - of rhel-10.0 release instead of version 125-...
gstreamer1-plugins-good security update
1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613...
assertj-core security update
3.24.2-9.1 - Fix CVE-2026-24400: add XXE protection to XmlStringPrettyFormatter - Resolves: RHEL-183469...
assertj-core security update
3.19.0-9.1 - Fix CVE-2026-24400: prevent XXE attacks in XmlStringPrettyFormatter - Resolves: RHEL-183484...
kernel security, bug fix, and enhancement update
5.14.0-687.42.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
attr security update
2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128...
python3.12 security update
3.12.14-1.0.1 - Remove upstream URL reference 3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227215 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves: RHEL-193793...
xorg-x11-server security update
1.20.4-29.0.11 - Security update for CVE-2026-55999 Orabug: 39831768 1.20.4-29.0.9 - Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 Orabug: 39695293 Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0...
python-pyasn1 security update
0.3.7-6.2 - Fix denial of service in Real type float method CVE-2026-59886 - Resolves: RHEL-217908...
python-pyasn1 security update
0.4.8-7.1 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915...
nginx:1.26 security update
1.26.3-9.0.1.3 - Require oracle-indexhtml 2:1.26.3-13 - Fixes CVE-2026-56434 and CVE-2026-60005 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and...
abrt security update
2.10.9-26.0.2 - Remove RHT patches - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.10.9-26.0.1 - Replaces sosreport to sos report in sosreport-event.conf Orabug: 38590929 - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm Orabug: 34184473 - Disable autoreporting on Oracle Linux...
nginx:1.24 security update
1.24.0-3.4.0.1 - Remove Red Hat references Orabug: 29498217 1:1.24.0-3.4 - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-219309 - nginx:1.24/nginx: NGINX: Heap buffer over-read allows memory...
gstreamer1-plugins-base security update
1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...
python3.14 security update
3.14.7-2 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 3.14.7-1 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 3.14.6-1 - Update to Python 3.14.6 Related: RHEL-227218...
nodejs24 security update
1:24.18.0-5.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.18.0-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:24.18.0-4 - Fix CVE-2026-13149 brace-expansion...
pam security update
1.6.1-9.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704...
nginx security update
1.26.3-6.0.1.el102.6 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 - Resolves: RHEL-217956 - nginx: NGINX: Memory disclosure and denial of...
mod_http2 security, bug fix, and enhancement update
2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2...
httpd security update
2.4.62-13.0.1.el98.6 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.6 - Resolves: RHEL-190807 - httpd: use-after-free in modldap uldapconnectionfind via per-directory client cert list CVE-2026-29167 2.4.62-13.5 - Resolves: RHEL-192752 - modproxyhtml regression in...
sqlite security update
3.26.0-21 - Fixes CVE-2026-11822 and CVE-2026-11824...
firefox security update
140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0-1 - Update to 140.14.0 ESR...
qemu-kvm security, bug fix, and enhancement update
10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...
firefox security update
140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...
389-ds-base security update
1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-14905 Orabug: 39146844 1.3.11.1-5.0.5 - Allow Uniqueness plugin to search uniqueness attributes using...
grafana security, bug fix, and enhancement update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
cups-filters security update
1.28.7-27.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.28.7-27 - CVE-2026-64612 cups-filters: handle libpng errors via longjmp/setjmp to prevent process abo...
python3.12 security update
3.12.14-1 - Update to Python 3.12.14 Resolves: RHEL-227198...