fence-agents security update

4.2.1-129.29 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217923...

fence-agents security update

4.10.0-110.6 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934...

isns-utils security update

0.101-4.1 - Fix CVE-2026-55995: prevent double-free in attrs.c error paths...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.5 - Revert 'x86/alternatives: Add altinstr.flags' Harshit Mogalapalli Orabug: 39859219 5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU...

java-1.8.0-openjdk security update

1:1.8.0.502.b07-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.502.b07-1.1 - Update to 8u502-b07 GA. - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 ...

gnutls security update

3.3.29-9.0.3 - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 Orabug: 39770407 - CVE-2026-42011 is not applicable to this baseline. 3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846...

gstreamer1-plugins-good security update

1.26.7-2.3 - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay CVE-2026-18649 Resolves: RHEL-224158...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

libarchive security update

3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...

dovecot security update

1:2.2.36-8 - update release number 1:2.2.36-7.1 - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts 1866752 - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation 1866757 - fix CVE-2020-12674 crash due to assert in RPA implementation 1866764 1:2.2.36-7 - generate...

gstreamer1-plugins-bad-free security update

1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...

libarchive security update

3.5.3-11 - Related: CVE-2026-14164 3.5.3-10 - Resolves: CVE-2026-14164...

libarchive security update

3.1.2-14.0.3 - Fix CVE-2026-4424 CVE-2026-5121 Orabug: 39219508 3.1.2-14.0.1 - rar: Fix double free Orabug: 38364091CVE-2025-5914...

nodejs-nodemon security update

3.1.14-3 - Fix CVE-2026-69152 - brace-expansion...

sudo security update

1.8.23-10.0.3.3 - Security update for CVE-2026-35535 Orabug: 39320917 1.8.23-10.0.1.3 - CVE-2025-32462 sudo: LPE via host option Orabug: 38187299...

evince security update

3.28.2-10.0.1 - Fix CVE-2026-46529 Orabug: 39757172...

ruby:3.3 security, bug fix, and enhancement update

ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg...

ruby:4.0 security, bug fix, and enhancement update

ruby 4.0.6-34 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 0.5.7-1 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 rubygem-pg...

dovecot security update

1:2.2.36-8.0.3 - Backport fix for CVE-2026-42006 Orabug: 39820967 1:2.2.36-8.0.1 - Backport fix for CVE-2025-59032 Orabug: 39573795 - Backport fix for CVE-2026-27856 Orabug: 39573795 - Backport fix for CVE-2026-27857 Orabug: 39573795 - Backport fix for CVE-2026-27858 Orabug: 39573795...

ruby security update

2.0.0.648-39.0.1 - Fix CVE-2026-42246 and CVE-2026-42258 Orabug: 39711420...

Unbreakable Enterprise kernel security update

6.12.0-205.92.4.2 - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp Dongli Zhang Orabug: 39844842 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39844812 CVE-2026-68480 - KVM: x86: Check for invalid/obsolete root after making MMU...

libpng12 security update

1.2.50-10.0.3 - Fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE Orabug: 39771480 1.2.50-10.0.1 - Fix CVE-2026-25646: heap buffer overflow in pngsetquantize Orabug: 39183864...

gpsd-minimal security update

3.26.1-2.0.1.el98.1 - Replaced upstream reference Orabug: 35865525 1:3.26.1-2.el98.1 - fix command injection in gpsprof CVE-2026-58459 1:3.26.1-2 - fix buffer overflow in NMEA2000 driver CVE-2025-67268 - fix integer underflow in handling of Navcom packets CVE-2025-67269...

kernel security, bug fix, and enhancement update

6.12.0-211.44.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

libgcrypt security update

1.10.0-13fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35961378 - Update FIPS module name for Oracle Linux Orabug: 35961378 1.10.0-13 - Bump version to fix wrong build target. 1.10.0.12 - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafte...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

ruby:3.3 security, bug fix, and enhancement update

ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 0.5.5-1 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 rubygem-pg...

php:8.3 security, bug fix, and enhancement update

php 8.3.32-1 - rebase to 8.3.32 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

LibRaw security update

0.21.1-2.1 - Fix CVE-2026-51235 Resolves: RHEL-219221...

glibc security update

2.28-251.0.4.40 - Forward port of Oracle patches Reviewed-by: David Faust Oracle history: July-13-2026 Cupertino Miranda - 2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by:...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

kernel security, bug fix, and enhancement update

6.12.0-211.43.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.4.3 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832867 CVE-2026-68480 6.12.0-204.92.4.4.2 - net: tap: set...

gnutls security update

3.3.29-9.0.1 - Regenerate PKCS11 test certificates Orabug: 39674042 - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 Orabug: 39674042...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - KVM: x86/mmu: Rename directmap to...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

kernel security, bug fix, and enhancement update

4.18.0-553.151.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

osbuild-composer security update

175-1.0.1 - Track github upstream...

resource-agents security update

4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...

Unbreakable Enterprise kernel security update

5.4.17-2136.358.2.0.1 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place Thomas Gleixner Orabug: 39832992 - x86/alternative: Support relocations in...

gimp security update

2:3.0.4-4.9 - fix CVE-2026-42169 2:3.0.4-4.8 - fix CVE-2026-66758 - fix CVE-2026-66759...

freerdp security update

2:3.10.3-12.7 - Add codecID checks for CACHEBITMAPV3ORDER CVE-2026-55827 - Fix boundary checks in gdiBitmapDecompress CVE-2026-55827 Resolves: RHEL-194327...

kernel security, bug fix, and enhancement update

5.14.0-687.34.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

glibc security update

2.34-274.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust Oracle history: June-30-2026 Cupertino Miranda - 2.34-272.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust June-5-2026 Cupertino Miranda ...

kernel security update

5.14.0-687.33.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

sg3_utils security, bug fix, and enhancement update

1.48-7.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188123...

kernel security, bug fix, and enhancement update

6.12.0-211.42.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...