10041 matches found
firefox security update
140.13.0-1.0.1 - Update to 140.13.0 ESR Orabug: 39947841CVE-2026-15718CVE-2026-15719 CVE-2026-16349CVE-2026-16350CVE-2026-16351CVE-2026-16352CVE-2026-16353 CVE-2026-16354CVE-2026-16355CVE-2026-16356CVE-2026-16357CVE-2026-16358 CVE-2026-16359CVE-2026-16360CVE-2026-16361CVE-2026-16362CVE-2026-16363...
yggdrasil security update
0.4.9.2-3 - Rebuild yggdrasil against updated golang 0.4.9.2-2 - Rebuild yggdrasil against updated golang...
gstreamer1-plugins-base security update
1.22.12-8.2 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing CVE-2026-85150 Resolves: RHEL-253753 1.22.12-8.1 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246...
webkit2gtk3 security update
2.52.5-1 - Update to 2.52.5 2.52.4-1 - Update to 2.52.4 2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 - Update to 2.50.1 2.50.0-1 - Update to 2.50.0 2.48.5-1 - Update to 2.48.5 2.48.3-1 - Update to 2.48.3 2.48.2-1 - Update to 2.48.2 - Reenable JIT...
tomcat update
1:10.1.49-4 - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192648 tomcat: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-238208 tomcat: Information disclosure due to HTTP Authentication Header...
curl security update
7.76.1-40.el98.7 - add sasl service name to connection reuse checks CVE-2026-8458 7.76.1-40.el98.6 - detect proxy changes read from environment CVE-2026-8927...
389-ds-base security update
1.3.11.1-5.0.13 - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 Orabug: 39892253 1.3.11.1-5.0.11 - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 1.3.11.1-5.0.9 - Security fix for CVE-2026-9064 Orabug: 39570202 1.3.11.1-5.0.7 - Security fix for CVE-2025-1490...
yggdrasil-worker-package-manager security update
0.2.3-8 - Rebuild against updated golang...
kernel security, bug fix, and enhancement update
5.14.0-687.49.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
tomcat9 security update
1:9.0.120-1 - Resolves: RHEL-192649 Tomcat9: Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-192818 Tomcat9: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219582 Tomcat9: Insufficient documentation for EncryptInterceptor may lea...
python-lxml security update
4.2.3-5 - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 4.2.3-4 - Security fix for CVE-2021-43818 Resolves: rhbz2032569 4.2.3-3 - Security fix for CVE-2021-28957 Resolves: rhbz1941534 4.2.3-2 - Security fix for CVE-2020-27783: mXSS due to...
kernel security update
4.18.0-553.164.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
perl-Net-DNS security update
1.15-2 - Fix unbounded recursion in TSIG record processing CVE-2026-81928 - Resolves: RHEL-256266 1.15 - Resolves rhbz1544065 Update to 1.15 - Maintenance only 1.14-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.14-1 - Updated to 1.14 1.13-1 - Updated to 1.13 1.12-1 - Update...
perl-Net-DNS security update
1.29-6.1 - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG - Resolves: RHEL-256275...
tomcat security update
1:9.0.120-1 - Resolves: RHEL-192806 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-219561 Security constraint bypass via improper URL encoding in rewrite valve CVE-2026-59083 - Resolves: RHEL-219581 Insufficient documentation for EncryptInterceptor may lead to insecure...
.NET 10.0 security, bug fix, and enhancement update
10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315...
firefox security update
140.15.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.15.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.15.0-1 - Update to 140.15.0 ESR...
Unbreakable Enterprise kernel security update
5.15.0-324.217.5.3 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035522 CVE-2026-80844 - tcp: clear sockops cb flags before force-closing a child socket Sechang Lim...
tomcat security, bug fix, and enhancement update
1:9.0.120-1 - Resolves: RHEL-192825 HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix CVE-2026-32990 - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve CVE-2026-59083...
kernel security, bug fix, and enhancement update
6.12.0-211.56.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
.NET 8.0 security, bug fix, and enhancement update
8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252244...
libevent security update
2.1.8-11 - Fix CVE-2026-63385: HTTP header injection via CRLF in header values - Resolves: RHEL-253566 2.1.8-10 - Fix CVE-2026-63387: out-of-bounds write in evdns dnsnametolabels - Resolves: RHEL-249889 2.1.8-9 - Fix CVE-2026-63383: out-of-bounds read in decodetaginternal - Resolves: RHEL-250240...
Unbreakable Enterprise kernel security update
6.12.0-206.104.4.4 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035125 CVE-2026-80844 - RDMA/nldev: Fix locking when accessing mr-pd Jason Gunthorpe Orabug: 400289...
openssl security update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...
sudo security, bug fix, and enhancement update
1.9.17-6 - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass 1.9.17-5.p2 - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'...
Unbreakable Enterprise kernel security update
5.4.17-2136.359.3.2 - sctp: prevent peer transport count overflow Asim Viladi Oglu Manizada Orabug: 40036878 CVE-2026-74469 - pppoe: reload header pointer after devhardheader Asim Viladi Oglu Manizada Orabug: 40036877 CVE-2026-68121 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Og...
.NET 9.0 security, bug fix, and enhancement update
9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274...
unbound security update
1.24.2-20 - Backport additional fix of locks during initialization 1.24.2-19 - Fix CVE-2026-50252: prevent cache poisoning via shared ports 1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 ...
libsoup3 security update
3.6.5-14 - Fix CVE-2026-85197: http2 crash after connection destroyed 3.6.5-13 - Fix CVE-2026-15711: Reject oversized WebSocket control frames 3.6.5-12 - Fix CVE-2026-15709: bound decompressed WebSocket message size 3.6.5-11 - Add patches for CVE-2026-4271 and CVE-2026-5119 3.6.5-10 - Add patch f...
libsoup security update
2.62.3-15 - Backport patch for CVE-2026-15711...
image-builder security update
72.0.0-1.0.3 - Rebuild for CVE-2026-25681, CVE-2026-27136, CVE-2026-41178, CVE-2026-42502...
image-builder security update
72.0.0-1.0.3 - Rebuild for CVE-2026-25681, CVE-2026-27136, CVE-2026-41178, CVE-2026-42502...
coreutils security update
9.5-8.0.1.el102.1 - clean up empty file if cp is failed Orabug 15973168 9.5-8.1 - uniq: fix CVE-2026-56391 RHEL-216794 - fix read overrun with -w - unexpand: fix CVE-2026-56392 and related crashes RHEL-216784 - fix direct.sh and unexpand/mb.sh tests - fix unexpand/expand crash on invalid multibyt...
libsoup security update
2.72.0-16.3 - Fix CVE-2026-15711: Reject oversized WebSocket control frames 2.72.0-16.2 - Backport patch for CVE-2026-15709...
tesseract security update
4.1.1-3 - Resolves: CVE-2026-73066...
openssl security update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...
unbound security update
1.24.2-3.6 - Backport additional fix from 1.26.0 CVE-2026-50252 1.24.2-3.5 - Fix CVE-2026-50252 RHEL-243479...
libevent security update
2.1.13-1 - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385...
.NET 10.0 security, bug fix, and enhancement update
10.0.112-1.0.1 - Add support for Oracle Linux 10.0.112-1 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319...
.NET 9.0 security, bug fix, and enhancement update
9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278...
rsync security, bug fix, and enhancement update
3.2.7-1 - Resolves: RHEL-248836 - Rebase rsync to version 3.2.7 in RHEL9...
rsync security, bug fix, and enhancement update
3.5.0-3 - Related: RHEL-246094 - OPATH for directory travesal full fix 3.5.0-2 - Related: RHEL-246094 - OPATH for directory traversal 3.5.0-1 - Resolves: RHEL-246094 - Rebase rsync to version 3.5.0 in RHEL10 - Resolves: RHEL-245337 - Directory escape via TOCTOU CVE-2026-53783 - Resolves:...
postgresql:16 security update
pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pgrepack 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 1.4.8-1 - Resolves: RHEL-3636 - Initial import for PG 16...
firewalld security update
1.3.4-20.0.1 - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI Orabug: 30257573 - discard empty RH-Satellite-6.xml Orabug: 30328734 - Remove capsule file as well, since it references removed config Orabug: 33513329 1.3.4-20 - fixpolicy: use PKACTIONCONFIG for...
postgresql:18 security update
pgaudit 18.0-1 - Update to 18.0 - Initial import for postgresql18 pgrepack 1.5.3-1 - Update to 1.5.3 - Initial import for postgresql18 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 pgvector 0.8.1-1 - Update to 0.8.1 - Initial...
microcode_ctl security update
4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...
microcode_ctl security, bug fix, and enhancement update
4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...
rsyslog security update
8.2510.0-2.0.1.el98.1 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2510.0-2.1 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699...