openssl security update

3.5.5-2.0.1 - Replace upstream references Orabug: 34340177 1:3.5.5-2 - Fix CVE-2026-31790 Resolves: RHEL-161586 1:3.5.5-1 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves:...

containernetworking-plugins security update

1:1.9.0-2 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 1:1.9.0-1 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 1:1.8.0-1 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related:...

webkit2gtk3 security update

2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 - Update to 2.50.1 2.50.0-1 - Update to 2.50.0 2.48.5-1 - Update to 2.48.5 2.48.3-1 - Update to 2.48.3 2.48.2-1 - Update to 2.48.2 - Reenable JIT 2.48.1-1 - Update to 2.48.1 2.48.0-1 - Update to 2.48.0...

kernel security update

5.14.0-687.5.3 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 248176...

linux-sgx security update

2.26-7 - Fix pccs npm security flaws 2.26-6 - Port to pycryptography and pyasn1 and make keyring optional 2.26-5 - Sync specfile changes from Fedora 2.26-4 - Drop sgx-mpa dep from sgx-pccs 2.26-3 - Add scriptlets for PCCS 2.26-2 - Enable pccsadmin everywhere 2.26-1 - Update to SGX 2.26 / DCAP 1.2...

bind security update

9.16.23-40.0.1.el98.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.1 - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 32:9.16.23-40 - Add forgotten libdir/named into bind-chroot tmpfiles RHEL-135629 32:9.16.23-39 -...

libssh security update

0.10.4-18 - Resolves: RHEL-150661 - Resolves: CVE-2025-4877 - Resolves: CVE-2025-4878 - Resolves: CVE-2025-5351 - Resolves: CVE-2025-8114 - Resolves: CVE-2025-8277 - Resolves: CVE-2026-0964 - Resolves: CVE-2026-0965 - Resolves: CVE-2026-0966 - Resolves: CVE-2026-0967 - Resolves: CVE-2026-0968...

podman security update

5.8.2-1.0.2 - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.8.2-1 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of...

unbound security update

1.24.2-2 - Switch TLS configuration to follow TLS sockets by crypto-policy again RHEL-147860 - Change the default of tls-use-system-policy-versions at build-time 1.16.2-24 - Add new root key 38696 RHEL-77716 1.16.2-23 - Do not verify root.key in libs RHEL-64339 1.16.2-22 - Create root key if...

NetworkManager security update

1.54.3-2.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - Drop 777 permissions from the NetworkManager-dispatcher drop-in directory Orabug:...

p11-kit security update

0.26.2-1 - Rebase to 0.26.2 Resolves: RHEL-147825 0.26.1-1 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 0.25.10-1 - Update to new upstream release 0.25.10 Resolves: RHEL-115453...

qemu-kvm security update

10.1.0-17 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch RHEL-155947 RHEL-155948 - kvm-linux-aio-Put-all-parameters-into-qemulaiocb.patch RHEL-154174 - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch RHEL-154174 -...

buildah security update

1.43.1-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-1 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 2:1.43.0-3 - update to the latest content of...

grafana security update

10.2.6-21 - Resolves RHEL-158767: CVE-2026-25679...

python-jwcrypto security update

1.5.6-3 - Limit max plaintext size for JWE decompression Resolves: RHEL-166029...

gdk-pixbuf2 security update

Tue Apr 21 2026 Benjamin Otte [email protected] - 2.42.6-6.1 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069...

python-tornado security update

6.5.5-1 - Update to 6.5.5 Resolves: RHEL-160942...

vim security update

2:8.2.2637-26.0.1.el98.4 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.4 - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass 2:8.2.2637-26.3 - Related: RHEL-159630 rebuild to build with exception target 2:8.2.2637-26.2 - remove -O0 from flags...

systemd security update

252-67.0.1.el98.2 - serialize: don't allocate 1M on the stack just like that LINUX-16166 - Route logs from container mapped uids to the system journal Orabug: 38135007 - Drop delay when nspawn fails to reset loginuid Orabug: 37793135 - Improve logging for api bus connection and subscribers Orabug...

openssh security update

9.9p1-7.0.2 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 9.9p1-7.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37814929 9.9p1-7 + 0.10.4-9 - Version bump 9.9p1-5 + 0.10.4-8 - CVE-2026-3497: Fix information disclosu...

gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update

gstreamer1-plugins-bad-free 1.22.12-7 - Rebuild to fix missing binaries due to buildsystem oversight 1.22.12-6 - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 gstreamer1-plugins-base 1.22.12-8 - Rebuild again -7 was build in wrong target 1.22.12-7 - Rebuild to fix missing binaries due t...

firefox security update

140.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file...

freeipmi security update

1.6.17-1 - Update to 1.6.17, fixes CVE-2026-33554...

mingw-glib2 security update

2.78.6-3 - Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in gescapeuristring...

python3.12 security update

3.12.13-2.0.1 - Remove upstream URL reference 3.12.13-2 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 3.12.13-1 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282...

python3.14 security update

3.14.4-2 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 3.14.4-1 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 3.14.3-2 - Security fix...

golang security update

1.26.2-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.2-1 - Update to Go 1.26.2 fips-2 - Resolves: RHEL-169929 1.26.1-1 - Update to Go 1.26.1 - Resolves: RHEL-153434 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves:...

.NET 10.0 security update

10.0.109-1.0.1 - Add support for Oracle Linux 10.0.109-1 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181555 10.0.106-2 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163381 10.0.104-2 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152949...

firefox security update

140.9.1-1.0.1 - Update to 140.9.1 ESR Orabug: 39324689CVE-2026-5731CVE-2026-5732 CVE-2026-5734CVE-2026-33416CVE-2026-33636 140.9.0-1.0.1 - Update to 140.9.0 ESR Orabug: 39361657CVE-2026-4684CVE-2026-4685 CVE-2026-4686CVE-2026-4687CVE-2026-4688CVE-2026-4689CVE-2026-4690...

firefox security update

140.9.0-1.0.1 - Update to 140.9.0 ESR Orabug: 39361657CVE-2026-4684CVE-2026-4685 CVE-2026-4686CVE-2026-4687CVE-2026-4688CVE-2026-4689CVE-2026-4690 CVE-2026-4691CVE-2026-4692CVE-2026-4693CVE-2026-4694CVE-2026-4695 CVE-2026-4696CVE-2026-4697CVE-2026-4698CVE-2026-4699CVE-2026-4700...

.NET 8.0 security update

8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181052 8.0.126-2 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163413 8.0.125-2 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152929...

.NET 9.0 security update

9.0.118-1.0.1 - Add support for Oracle Linux 9.0.118-1 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181550 9.0.116-2 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389 9.0.115-2 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152941...

poppler security update

20.11.0-14 - Fix integer overflow in tilingPatternFill CVE-2026-10118 - Resolves: RHEL-180567...

postgresql-jdbc security update

42.2.14-4 - Limit SCRAM PBKDF2 iterations to prevent DoS via malicious server - Resolves: CVE-2026-42198...

firefox security update

140.8.0-2.0.1 - Update to 140.8.0 ESR Orabug: 39361647CVE-2026-2447CVE-2026-2757 CVE-2026-2758CVE-2026-2759CVE-2026-2760CVE-2026-2761CVE-2026-2762 CVE-2026-2763CVE-2026-2764CVE-2026-2765CVE-2026-2766CVE-2026-2767 CVE-2026-2768CVE-2026-2769CVE-2026-2770CVE-2026-2771CVE-2026-2772...

nodejs24 security update

1:24.14.1-2.0.2 - Rebuild to correct NVR 1:24.14.1-2.0.1 - Update upstream references...

freerdp security update

2.1.1-5.0.7 - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24679 CVE-2026-24684 CVE-2026-31806 Orabug: 39272429 2.1.1-5.0.5 - Fixed CVE-2026-26955 CVE-2026-26956 Orabug: 39189643 2:2.2.0-5.0.3 - Fixed...

libyang security update

1.0.184-2 - DoS or arbitrary code execution via maliciously crafted LYB binary blob - Resolves: RHEL-177017 - CVE-2026-44673...

java-1.8.0-openjdk security update

1.8.0.492.b09-1.0.1 - Update to 8u492-b09 GA Orabug: 39247147CVE-2026-22007CVE-2026-22013 CVE-2026-22016CVE-2026-22018CVE-2026-22021CVE-2026-23865CVE-2026-34268 1.8.0.482.b08-1.0.1 - Update to 8u482-b08 GA. Orabug: 38893614 - Update release notes for 8u482-b08. - Resolves: RHEL-142689 - Resolves:...

frr security update

7.5.1-24.0.1 - Fix POSTIN scriptlet Orabug: 34712485 7.5.1-24 - Fix off-by-one error in FlowSpec operator array bounds checking CVE-2026-37457 - Resolves: RHEL-174676...

unbound security update

1.16.2-5.11 - Fix CVE-2026-42944 RHEL-177909 - Fix CVE-2026-42959 RHEL-177809...

bind security update

32:9.11.36-16.8 - Fix GSS-API resource leak CVE-2026-3039 - Invalid handling of CLASS != IN CVE-2026-5946...

Unbreakable Enterprise kernel security update

5.4.17-2136.356.4.2 - arm64: errata: Mitigate TLBI errata on various Arm CPUs Mark Rutland Orabug: 39017592 CVE-2025-10263 - arm64: tlb: Add ARM64WORKAROUNDREPEATTLBISYNC Mark Rutland Orabug: 39017592 - ARM: uek: Disable CONFIGQCOMFALKORERRATUM1003 Boris Ostrovsky Orabug: 39017592 - arm64: tlb:...

Unbreakable Enterprise kernel security update

5.15.0-321.202.5.1 - arm64: errata: Mitigate TLBI errata on various Arm CPUs Mark Rutland Orabug: 39017590 CVE-2025-10263 - arm64: tlb: Add ARM64WORKAROUNDREPEATTLBISYNC Mark Rutland Orabug: 39017590 - ARM: uek: Disable CONFIGNVIDIACARMELCNPERRATUM Boris Ostrovsky Orabug: 39017590 - arm64: tlb:...

Unbreakable Enterprise kernel security update

6.12.0-203.76.7.3 - arm64: errata: Mitigate TLBI errata on various Arm CPUs Mark Rutland Orabug: 39017589 CVE-2025-10263 - arm64: tlb: Add ARM64WORKAROUNDREPEATTLBISYNC Mark Rutland Orabug: 39017589 - arm64: tlb: allow XZR argument to TLBI ops Mark Rutland Orabug: 39017589 - arm64: cputype: Add...

kernel security update

4.18.0-553.129.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

ImageMagick security update

6.9.10.68-7.0.11 - Fix CVE-2026-32636 Orabug: 39375225 6.9.10.68-7.0.9 - Fix CVE-2026-28691 and CVE-2026-28693 Orabug: 39174244 6.9.10.68-7.0.7 - Fixes Local File Disclosure via Path Traversal CVE-2026-25965 Orabug: 39118995 - Fixes Memory allocation with excessive without limits in the internal...

vim security update

8.0.1763-23.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-23 - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass 2:8.0.1763-22.3 - Relates:...

bind9.16 security update

32:9.16.23-0.22.6 - Fix GSS-API resource leak CVE-2026-3039 - Invalid handling of CLASS != IN CVE-2026-5946...

samba security update

4.19.4-16.0.1 - s3: winbindd: winbinddpam: fix leak in extractpacvrfysigs Orabug: 36518285 - s3:passdb: Do not leak memory in pdbtdb Orabug: 36371377 - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 Orabug: 30205755 4.19.4-16 - resolves: RHEL-156322 - Fix...