firefox security, bug fix, and enhancement update

153.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 153.5.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 153.5.0-1 - Update to 153.5.0 ESR 140.15.0-1 - Update to 140.15.0...

flatpak security update

1.12.9-4.6 - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272190 1.12.9-4.5 - Avoid path traversal deletion via deploy export/bin CVE-2026-97023 Resolves: RHEL-272030...

bind security update

9.18.33-15.0.1.el102.13 - Hard require needed openssl-libs Orabug: 38742109 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-15.13 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. 32:9.18.33-15.12 - Prevent assertion failure in dns6...

freeipmi security, bug fix, and enhancement update

1.6.20-1 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. 1.6.19-1 - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509...

skopeo security update

1:1.22.2-9 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279016 - Resolves: RHEL-287514...

nodejs22 security update

1:22.23.2-3.0.2 - Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder - Expose the block-switch error and add malformed-stream regression coverage - Require the fixed Oracle Linux 10 system Brotli build...

nodejs24 security update

24.21.0-1.0.2 - Fix out-of-bounds write in bundled Brotli decoder CVE-2026-111497 - Require fixed OL10 system Brotli for builds without bundled Brotli...

nodejs:24 security update

nodejs 1:24.21.0-1.0.1 - Fix out-of-bounds write in bundled Brotli decoder CVE-2026-111497 - Expose the decoder block-switch error and add regression coverage - Require the patched system Brotli for shared builds nodejs-nodemon nodejs-packaging...

nodejs:22 security update

nodejs 1:22.23.2-2.0.1 - Backport upstream fix for CVE-2026-111497 in the bundled Brotli decoder - Expose the block-switch error and add malformed-stream regression coverage - Require the fixed Oracle Linux 8 system Brotli build nodejs-nodemon nodejs-packaging...

firefox security, bug fix, and enhancement update

153.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 153.5.0-1 - Update to 153.5.0 ESR 140.15.0-1 - Update to 140.15.0 ESR 140.12.0-1 - Update to 140.12.0 ESR 140.11.0-1 - Update to 140.11....

lrzsz security, bug fix, and enhancement update

0.12.20-58 - Fix long-standing SIGSEGV bug when using the -s parameter without an argument RHEL-282108 0.12.20-57 - Backport tightened path handling from 0.13.1 CVE-2026-105840 0.12.20-56 - Remove 'Topipe' feature. CVE-2026-105841...

flatpak security update

1.16.0-9.6 - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272185 1.16.0-9.5 - Avoid path traversal deletion via deploy export/bin CVE-2026-97023 Resolves: RHEL-272031...

httpd security update

2.4.63-13.0.1.el102.8 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.8 - Related: RHEL-275253 - httpd: Arbitrary code execution via oversized Host header in modvhostalias CVE-2026-63292 - Resolves: RHEL-280355 - httpd: Denial of Service via modrewrite lookahead...

kernel security, bug fix, and enhancement update

4.18.0-553.178.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

xdg-dbus-proxy security update

0.1.5-4.1 - Message filtering bypass via reply serial allows sandbox escape CVE-2026-94422 Resolves: RHEL-271542...

libreswan security update

5.3.3-1.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 5.3.3-1 - update to 5.3.3 to fix CVE-2026-94453, CVE-2026-77207, CVE-2026-77205, and CVE-2026-77206...

oci-seccomp-bpf-hook security update

1.2.11-3 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287608 1.2.11-2 - rebuild with golang to fix CVE-2026-33811 - Resolves: RHEL-187133...

grafana security update

10.2.6-23.7 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-290771 10.2.6-23.6 - Rebuild against updated golang - Resolves RHEL-287510 - Resolves RHEL-279380 - Resolves RHEL-279012 - Resolves RHEL-278733 10.2.6-23.5 - Resolves RHEL-25315...

brotli security update

1.1.0-8.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497...

grafana security update

10.2.6-28.9 - Rebuild against updated golang - Resolves RHEL-290737 10.2.6-28.9 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting in Unified Alerting - Resolves RHEL-290765 10.2.6-28.8 - Rebuild against updated golang - Resolves RHEL-287475 - Resolves...

python-urllib3 security update

1.26.5-8.2 - CVE-2026-97687 python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override Resolves: RHEL-282326 1.26.5-8.1 - CVE-2026-97689 python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282267...

postfix security update

2:2.10.1-9.0.1 - Fix CVE-2026-43964 buffer over-read Orabug: 39905988 - Allow build on Linux 5.x kernels Orabug: 39905988...

brotli security update

1.0.9-10.0.1 - Fix out-of-bounds write in the Brotli decoder CVE-2026-111497...

bind9.18 security update

32:9.18.29-14.11 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver...

libreswan security update

4.15-11.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 4.15-11 - Backport fixes for CVE-2026-94453, CVE-2026-77206, and CVE-2026-77207 RHEL-281889, RHEL-281998, RHEL-281985...

xz security update

5.2.5-8.1 - Fix: a buffer overflow in lzmaindexappend - Add test for the issue above needs a special build config to actually fail - does not fail in our environment - Resolves: CVE-2026-34743...

freeipmi security, bug fix, and enhancement update

1.6.20-1 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. 1.6.19-1 - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509...

flatpak security update

1.12.9-9 - Use fd-relative operations for files/etc during runtime deploy CVE-2026-97024 Resolves: RHEL-272181 1.12.9-8 - Avoid path traversal deletion via deploy export/bin CVE-2026-97023 Resolves: RHEL-272023...

gcc-toolset-15-gcc security update

15.2.1-7.1 - fix CVE-2026-102010, PR libstdc++/127656 RHEL-272094...

freeipmi security, bug fix, and enhancement update

1.6.20-1 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. 1.6.19-1 - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509...

kernel security update

4.18.0-553.179.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

ca-certificates security update

2026.2.92v9.0.319-100.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-100.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-100.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 fr...

kernel security, bug fix, and enhancement update

6.12.0-211.68.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

perl:5.32 security update

perl 4:5.32.1-475 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-247945 perl-Algorithm-Diff 1.1903-10 - Rebuild with enable hardening bug 1636329 perl-Archive-Tar 2.38-5 - Fix CVE-2026-9538: Denial of Service via crafted tar header with large entry size Resolve...

unbound security update

1.6.6-5.0.3 - Fix CVE-2026-81642 DNSKEY digest buffer overflow and add regression test Orabug: 40081199 1.6.6-5.0.1 - Fix CVE-2023-50387 and CVE-2023-50868 Orabug: 37387426...

ca-certificates security update

2026.2.92v9.0.319-90.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-90.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-90.1 - Removing: AAA Certificate Services root CA - Removing: emSign ECC Root CA - G3 from...

golang-github-openprinting-ipp-usb security update

0.9.27-7.4 - rebuilt with golang-1.26.10-1.el102...

ca-certificates security update

2025.2.80v9.0.304-71.0.2 - eMudhra: add 'emSign ECC Root CA - G3' and 'Comodo AAA Services root' to blocklist 2025.2.80v9.0.304-71.0.1 - Resolve ELBA-2025-22492 Orabug: 38712242 - Update to CKBI 2.80v9.0.304 from NSS 3.114 - Adding: - Certificate 'TWCA CYBER Root CA' - Certificate 'TWCA Global Ro...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420 1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CM...

perl-DBI:1.641 security update

perl-DBI 1.641-11 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting read during numeric type casting Resolves: RHEL-271961 1.641-10 - Fix number of tests Resolves: RHEL-247869 1.641-9 - Fix placeholder limit on :N and :pN style placeholders...

ca-certificates security update

2026.2.92v9.0.319-81.3 - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch 2026.2.92v9.0.319-81.2 - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates 2026.2.92v9.0.319-81 - Update to CKBI 2.92v9.0.319 from NSS 3.131.1 Removing: - emSign Root CA - C1 Adding: -...

kernel security, bug fix, and enhancement update

5.14.0-687.60.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

buildah security update

1.43.1-7.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-7 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287469...

grafana-pcp security update

5.1.1-17.2 - Rebuild against updated golang - Resolves RHEL-287511 - Resolves RHEL-279381 - Resolves RHEL-278739...

kernel security update

4.18.0-553.177.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

postgresql16-pgvector security update

0.8.7-1 - CVE-2026-103484 postgresql16-pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build execution via out-of-bounds write during IVFFlat index build - Resolves: RHEL-282041...

php:8.3 security update

php 8.3.36-1 - rebase to 8.3.36 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...

grafana-pcp security update

5.1.1-19 - Rebuild against updated golang - Resolves RHEL-287631 - Resolves RHEL-279256 - Resolves RHEL-278603...

httpd security update

2.4.62-13.0.1.el98.9 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.9 - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in modvhostalias CVE-2026-63292 - Resolves: RHEL-280369 - httpd: Denial of Service via modrewrite lookahead...

expat security update

2.7.3-63 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc 2.7.3-62 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over- read in XMLParseBuffer 2.7.3-61 - CVE-2026-66046 expat: Expat: Denial of Service via quadratic complexity in attribu...