java-11-openjdk security update

1:11.0.25.0.9-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:11.0.25.0.9-2 - Update to jdk-11.0.25+9 GA - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58772 - This tarball is embargoed until 2024-10-15 @ 1pm PT. 1:11.0.25.0.8-0.2.ea - Update to...

webkit2gtk3 security update

2.46.1-1 - Update to 2.46.1...

httpd security update

2.4.6-99.0.5.1 - Differentiate trusted sources Orabug: 37100272CVE-2024-38476...

python-setuptools security update

0.9.8-7.0.1 - Fixes CVE-2024-6345 security issue Orabug: 37054994...

kernel security update

5.14.0-427.40.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

buildah security update

1.33.9-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.9-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/4dc26b9 - Resolves: RHEL-61116 2:1.33.7-5 - rebuild to...

skopeo security update

2:1.14.5-2 - rebuild for CVE-2024-34156 - Resolves: RHEL-57955...

containernetworking-plugins security update

1:1.4.0-6 - rebuild for CVE-2024-34156 - Resolves: RHEL-57915...

OpenIPMI security update

2.0.32-5.0.1 - IPMI SMB kernel module name is ipmissif in all modern kernels. openipmi-helper script fixed. Orabug: 27093288 [email protected] 2.0.32-5 - Update the patch for CVE-2024-42934 to add a missing upstream commit from 2.0.36: 663e3cd3 2.0.32-4 - Backport two commits from 2.0.36...

thunderbird security update

128.3.1-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.3.1 - Add OpenELA debranding 128.3.1-1 - Update to 128.3.1...

thunderbird security update

128.3.1-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.3.1 - Add OpenELA debranding 128.3.1-1 - Update to 128.3.1...

podman security update

4.9.4-13.0.1 - Fixes issue of podman execvp error while using podmansh Orabug: 36073625 - Improved saving remote build context to tarfile in Podman daemon Orabug: 36495655 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put shou...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.336.5.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37138988 5.4.17-2136.336.5 - uek-rpm: Add skxedaccommon.ko to nanomodules Sherry Yang Orabug: 37030127 - EDAC, i10nm: make skxcommon.o a separate module Arnd Bergmann Orabug: 37030127 - uek-rpm:...

container-tools:ol8 security update

aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman python-podman runc 1:1.1.12-5 - bump golang...

bind security update

32:9.11.4-26.0.1.P2.16 - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name...

Unbreakable Enterprise kernel security update

5.4.17-2136.336.5.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37138988 5.4.17-2136.336.5 - uek-rpm: Add skxedaccommon.ko to nanomodules Sherry Yang Orabug: 37030127 - EDAC, i10nm: make skxcommon.o a separate module Arnd Bergmann Orabug: 37030127 - uek-rpm:...

firefox security update

128.3.1-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.3.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.1-1 - Update to 128.3.1...

Unbreakable Enterprise kernel security update

4.14.35-2047.541.4.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37137499 4.14.35-2047.541.4 - selftests: make order checking verbose in msgzerocopy selftest Zijian Zhang Orabug: 37063821 - selftests: fix OOM in msgzerocopy selftest Zijian Zhang Orabug: 37063821 -...

e2fsprogs security update

1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...

firefox security update

128.3.1-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.3.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.1-1 - Update to 128.3.1...

e2fsprogs security update

1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 1.45.4-3.0.5.el7 - e2fsprogs: bump version to 1.45.4-3.0.5 1.45.4-3.0.5 - Fix missing changelog entries to match the latest RHEL8 packages 1.45.4-3.0.3 - Fix build scripts to genera...

.NET 8.0 security update

8.0.110-1.0.1 - Add support for Oracle Linux 8.0.110-1 - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60794...

openssl security update

1:1.1.1k-14 - Backport fix SSLselectnext proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654...

.NET 8.0 security update

8.0.110-1.0.1 - Add support for Oracle Linux 8.0.110-1 - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60800 8.0.109-1 - Update to .NET SDK 8.0.109 and Runtime 8.0.9 - Resolves: RHEL-56679...

.NET 6.0 security update

6.0.135-1.0.1 - Add support for Oracle Linux 6.0.135-1 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60792...

.NET 6.0 security update

6.0.135-1.0.1 - Add support for Oracle Linux 6.0.135-1 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60798 6.0.134-1 - Update to .NET SDK 6.0.134 and Runtime 6.0.34 - Resolves: RHEL-56683...

systemd security update

219-78.0.17 - Backport secure pager invocation for CVE-2023-26604 Orabug: 37139943...

firefox security update

128.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.0-1 - Update to 128.3.0...

python3-setuptools security update

39.2.0-10.0.3 - Back port fix for CVE-2024-6345 Orabug: 37054771...

thunderbird security update

128.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.3.0 - Add OpenELA debranding 128.3.0-1 - Update to 127.3.0...

Unbreakable Enterprise kernel security update

5.15.0-300.163.18.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132350...

e2fsprogs security update

1.45.4-3.0.7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...

Important; Unbreakable Enterprise kernel security update

4.1.12-124.90.3.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132352...

thunderbird security update

128.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.3.0 - Add OpenELA debranding 128.3.0-1 - Update to 127.3.0...

firefox security update

128.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.0-1 - Update to 128.3.0...

go-toolset:ol8 security update

delve golang 1.21.13-3 - Add evp-digest-sign-final.patch - Resolves: RHEL-61109 go-toolset...

golang security update

1.21.13-4 - Fix CVE-2024-9355 - Resolves: RHEL-61046...

flatpak security update

1.0.9-13.0.1 - Fix CVE-2024-42472 Orabug: 37027734...

python-urllib3 security update

1.10.2-7.0.1 - CVE-2024-37891 fix Orabug: 37085188...

cups-filters security update

1.20.0-35.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.20.0-35 - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD...

grafana security update

9.2.10-18 - Resolves RHEL-47191...

cups-filters security update

1.28.7-17.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.28.7-17 - fix rpmverify error 1.28.7-16 - CVE-2024-47175 cups-filters: remote command injection via...

krb5 security update

1.15.1-55.0.3 - Length check when parsing GSS token encapsulation Orabug: 36927256 - Add a simple DER support header Orabug: 36927256 - Fix vulnerabilities in GSS message token handling Orabug: 36927256 1.15.1-55.0.1 - Add recursion limit for ASN.1 indefinite lengths Orabug: 32582360 1.15.1-55 -...

ovirt-engine security update

4.4.10.7-1.0.33 - Fix external providers properties observability 4.4.10.7-1.0.32 - Upgrade bundled frontend dependency of jquery-ui 4.4.10.7-1.0.31 - Allow enrolling certificates in non-responsive state and Extend the lifetime of non-web certificates 4.4.10.7-1.0.30 - Fix network exception...

kernel security update

3.10.0-1160.119.1.0.5.el7.OL7 - wifi: mac80211: Avoid address calculations via out of bounds array indexing Kees Cook Orabug: 37092983...

389-ds-base security update

1.3.11.1-5.0.1 - Security fix for CVE-2024-5953 Orabug: 37016708CVE-2024-5953...

freeradius security update

3.0.13-15.0.1 - Fixes CVE-2024-3596 security issue Orabug: 36904288...

osbuild-composer security update

101-2.0.1 - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905...

Unbreakable Enterprise kernel security update

4.1.12-124.90.3 - SUNRPC: increase size of rpcwaitqueue.qlen from unsigned short to unsigned int Dai Ngo Orabug: 37055439 4.1.12-124.90.2 - scsi: lpfc: Fix possible memory leak in lpfcrcvpadisc Justin Tee Orabug: 36643241 CVE-2024-35930 - scsi: qla2xxx: Fix command flush on cable pull Quinn Tran...

osbuild-composer security update

101-2.0.1 - Rebuild on new golang to address CVE-2024-34156...