9454 matches found
java-21-openjdk security update
1:21.0.5.0.10-3.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.5.0.10-3 - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2024-10-15 @ 1pm PT. - Related: RHEL-61346 1:21.0.5.0.10-2 - Update to jdk-21.0.5+10 GA - Update release notes to...
java-1.8.0-openjdk security update
1.8.0.432.b06-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.432.b06-1 - Update to shenandoah-jdk8u432-b06 GA - Update release notes for shenandoah-8u432-b06. - Drop JDK-8281096,7,8/PR3836 patch following integration of upstream version - Regenerate JDK-8199936/PR3533 patch following...
edk2 security update
20240909 - Create new 20240909 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux...
edk2 security update
20240909-2 - Create new 20240909 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux...
edk2 security update
1.7.1 - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux kernel...
edk2 security update
1.7.1 - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access Orabug: 36990130 CVE-2024-1298 - EDK2: In the Linux kernel...
java-11-openjdk security update
1:11.0.25.0.9-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:11.0.25.0.9-2 - Update to jdk-11.0.25+9 GA - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58772 - This tarball is embargoed until 2024-10-15 @ 1pm PT. 1:11.0.25.0.8-0.2.ea - Update to...
kernel security update
5.14.0-427.40.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
webkit2gtk3 security update
2.46.1-1 - Update to 2.46.1...
httpd security update
2.4.6-99.0.5.1 - Differentiate trusted sources Orabug: 37100272CVE-2024-38476...
python-setuptools security update
0.9.8-7.0.1 - Fixes CVE-2024-6345 security issue Orabug: 37054994...
buildah security update
1.33.9-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.33.9-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/4dc26b9 - Resolves: RHEL-61116 2:1.33.7-5 - rebuild to...
skopeo security update
2:1.14.5-2 - rebuild for CVE-2024-34156 - Resolves: RHEL-57955...
containernetworking-plugins security update
1:1.4.0-6 - rebuild for CVE-2024-34156 - Resolves: RHEL-57915...
thunderbird security update
128.3.1-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.3.1 - Add OpenELA debranding 128.3.1-1 - Update to 128.3.1...
thunderbird security update
128.3.1-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.3.1 - Add OpenELA debranding 128.3.1-1 - Update to 128.3.1...
Unbreakable Enterprise kernel-container security update
5.4.17-2136.336.5.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37138988 5.4.17-2136.336.5 - uek-rpm: Add skxedaccommon.ko to nanomodules Sherry Yang Orabug: 37030127 - EDAC, i10nm: make skxcommon.o a separate module Arnd Bergmann Orabug: 37030127 - uek-rpm:...
podman security update
4.9.4-13.0.1 - Fixes issue of podman execvp error while using podmansh Orabug: 36073625 - Improved saving remote build context to tarfile in Podman daemon Orabug: 36495655 - Add devices on container startup, not on creation - Backport fast gzip for compression Orabug: 36420418 - overlay: Put shou...
OpenIPMI security update
2.0.32-5.0.1 - IPMI SMB kernel module name is ipmissif in all modern kernels. openipmi-helper script fixed. Orabug: 27093288 [email protected] 2.0.32-5 - Update the patch for CVE-2024-42934 to add a missing upstream commit from 2.0.36: 663e3cd3 2.0.32-4 - Backport two commits from 2.0.36...
container-tools:ol8 security update
aardvark-dns 2:1.10.1-2 - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman python-podman runc 1:1.1.12-5 - bump golang...
bind security update
32:9.11.4-26.0.1.P2.16 - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name...
firefox security update
128.3.1-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.3.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.1-1 - Update to 128.3.1...
Unbreakable Enterprise kernel security update
4.14.35-2047.541.4.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37137499 4.14.35-2047.541.4 - selftests: make order checking verbose in msgzerocopy selftest Zijian Zhang Orabug: 37063821 - selftests: fix OOM in msgzerocopy selftest Zijian Zhang Orabug: 37063821 -...
Unbreakable Enterprise kernel security update
5.4.17-2136.336.5.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37138988 5.4.17-2136.336.5 - uek-rpm: Add skxedaccommon.ko to nanomodules Sherry Yang Orabug: 37030127 - EDAC, i10nm: make skxcommon.o a separate module Arnd Bergmann Orabug: 37030127 - uek-rpm:...
e2fsprogs security update
1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304 1.45.4-3.0.5.el7 - e2fsprogs: bump version to 1.45.4-3.0.5 1.45.4-3.0.5 - Fix missing changelog entries to match the latest RHEL8 packages 1.45.4-3.0.3 - Fix build scripts to genera...
e2fsprogs security update
1.45.4-3.0.7.el7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...
firefox security update
128.3.1-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.3.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.1-1 - Update to 128.3.1...
.NET 8.0 security update
8.0.110-1.0.1 - Add support for Oracle Linux 8.0.110-1 - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60800 8.0.109-1 - Update to .NET SDK 8.0.109 and Runtime 8.0.9 - Resolves: RHEL-56679...
.NET 6.0 security update
6.0.135-1.0.1 - Add support for Oracle Linux 6.0.135-1 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60792...
.NET 6.0 security update
6.0.135-1.0.1 - Add support for Oracle Linux 6.0.135-1 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60798 6.0.134-1 - Update to .NET SDK 6.0.134 and Runtime 6.0.34 - Resolves: RHEL-56683...
.NET 8.0 security update
8.0.110-1.0.1 - Add support for Oracle Linux 8.0.110-1 - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60794...
systemd security update
219-78.0.17 - Backport secure pager invocation for CVE-2023-26604 Orabug: 37139943...
openssl security update
1:1.1.1k-14 - Backport fix SSLselectnext proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654...
python3-setuptools security update
39.2.0-10.0.3 - Back port fix for CVE-2024-6345 Orabug: 37054771...
firefox security update
128.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.0-1 - Update to 128.3.0...
thunderbird security update
128.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.3.0 - Add OpenELA debranding 128.3.0-1 - Update to 127.3.0...
e2fsprogs security update
1.45.4-3.0.7 - libext2fs: add sanity check to extent manipulation Srivathsa Dara Orabug: 37095032 CVE-2022-1304...
Important; Unbreakable Enterprise kernel security update
4.1.12-124.90.3.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132352...
Unbreakable Enterprise kernel security update
5.15.0-300.163.18.1 - vhost/scsi: null-ptr-dereference in vhostscsigetreq Haoran Zhang Orabug: 37132350...
thunderbird security update
128.3.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.3.0 - Add OpenELA debranding 128.3.0-1 - Update to 127.3.0...
go-toolset:ol8 security update
delve golang 1.21.13-3 - Add evp-digest-sign-final.patch - Resolves: RHEL-61109 go-toolset...
golang security update
1.21.13-4 - Fix CVE-2024-9355 - Resolves: RHEL-61046...
firefox security update
128.3.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.3.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.3.0-1 - Update to 128.3.0...
flatpak security update
1.0.9-13.0.1 - Fix CVE-2024-42472 Orabug: 37027734...
python-urllib3 security update
1.10.2-7.0.1 - CVE-2024-37891 fix Orabug: 37085188...
cups-filters security update
1.20.0-35.0.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.20.0-35 - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD...
ovirt-engine security update
4.4.10.7-1.0.33 - Fix external providers properties observability 4.4.10.7-1.0.32 - Upgrade bundled frontend dependency of jquery-ui 4.4.10.7-1.0.31 - Allow enrolling certificates in non-responsive state and Extend the lifetime of non-web certificates 4.4.10.7-1.0.30 - Fix network exception...
kernel security update
3.10.0-1160.119.1.0.5.el7.OL7 - wifi: mac80211: Avoid address calculations via out of bounds array indexing Kees Cook Orabug: 37092983...
krb5 security update
1.15.1-55.0.3 - Length check when parsing GSS token encapsulation Orabug: 36927256 - Add a simple DER support header Orabug: 36927256 - Fix vulnerabilities in GSS message token handling Orabug: 36927256 1.15.1-55.0.1 - Add recursion limit for ASN.1 indefinite lengths Orabug: 32582360 1.15.1-55 -...