grafana-pcp security update

5.3.0-8.2 - Rebuilt against updated golang - Resolves RHEL-287474, RHEL-279348, RHEL-278699...

php:8.2 security update

php 8.2.35-1 - rebase to 8.2.35 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd 2.0.3-4 - build for PHP 8.1 2070040 2.0.3-3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 2.0.3-2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz1971065...

php:8.2 security update

libzip 1.7.3-1 - update to 1.7.3 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available 1.5.1-1 - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no mo...

podman security update

5.8.2-10.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-10 - update to the latest upstream commit bd9083e0 - Resolves: RHEL-271981...

postgresql18-pgvector security update

0.8.7-0.1 - CVE-2026-103484 postgresql18-pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build execution via out-of-bounds write during IVFFlat index build - Resolves: RHEL-282040...

cockpit-machines security update

348.1-1.0.1 - Apply the patch for upstream reference Orabug: 39248919 - Replace upstream references Orabug: 34340088 348.1-1 - CVE-2026-92768 RHEL-263127 - CVE-2026-92747 RHEL-263114 - CVE-2026-92745 RHEL-263111...

iperf3 security update

3.17.1-6.2 - DoS via UDP receive worker infinite loop CVE-2026-102253 - Resolves: RHEL-273152...

openssh security update

8.0p1-34.0.1 - Update upstream references Orabug: 36587718 8.0p1-34 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI...

grafana security update

9.2.10-36.0.1 - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 9.2.10-36 - Rebuild against updated golang - Resolves RHEL-287629 - Resolves RHEL-279255 - Resolves RHEL-278945 - Resolves RHEL-278602...

expat security update

2.5.0-6.7 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - Resolves: RHEL-272833 2.5.0-6.6 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over-read in XMLParseBuffer over-read in XMLParseBuffer - Resolves: RHEL-277510...

podman security update

5.8.2-11.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-11 - Rebuild for CVE-2026-111943 - Resolves: RHEL-287477...

.NET 8.0 security, bug fix, and enhancement update

8.0.132-1.0.1 - Add support for Oracle Linux 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800...

php security update

8.0.30-8.1 - Fix FILTERSANITIZEENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN...

fetchmail security update

6.4.24-1.1 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 Resolves: RHEL-265182...

go-toolset:ol8 security, bug fix, and enhancement update

delve 1.26.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.26.1-1 - Update to Delve 1.26.1 - Related: RHEL-183712 1.25.2-1 - Update to Delve 1.25.2 Sync from CentOS Stream 9 - Related: RHEL-121223 1.24.1-1 - Rebase to 1.24.1 - Skip unsupported tests - Resolves: RHEL-83451...

librsvg2 security update

2.50.7-3.1 - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities...

cockpit-machines security update

348.1-1.0.1 - Replace upstream references Orabug: 34340088 348.1-1 - CVE-2026-92768 RHEL-263124 - CVE-2026-92747 RHEL-263120 - CVE-2026-92745 RHEL-263113...

python-oci-sdk security update

2.187.0-1.0.5 - Fix multiple CVEs in pyjwt, aiohttp, pyOpenSSL, multidict...

qt5-qtbase security update

5.15.9-11.2 - Fix CVE-2026-19248: unbounded recursion and ON2 behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670...

golang security, bug fix, and enhancement update

1.26.10-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.10-1 - Update to Go 1.26.10 fips-1 - Resolves: RHEL-287192...

php:7.4 security update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available 1.5.1-1 - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no more referenced in libzip.pc...

.NET 10.0 security, bug fix, and enhancement update

10.0.113-1.0.1 - Add support for Oracle Linux 10.0.113-1 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809...

openexr security update

3.1.1-3.5 - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544...

xorg-x11-server-Xwayland security update

21.1.3-20.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93523, CVE-2026-93524 Resolves: https://redhat.atlassian.net/browse/RHEL-277856 Resolves:...

.NET 8.0 security, bug fix, and enhancement update

8.0.132-1.0.1 - Add support for Oracle Linux 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277794...

openssh security update

9.9p1-13.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...

jackson-core security update

2.21.6-1.2 - Resolves: RHEL-286626 - CVE-2026-89425 jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing unbounded StringBuilder growth during malformed token processing 2.21.6-1.1 - Resolves: RHEL-272199 - Fix CVE-2026-89407...

librsvg2 security update

2.57.1-10 - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities...

librsvg2 security update

2.42.7-6 - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities duplicated entities - Resolves: RHEL-267981...

golang security, bug fix, and enhancement update

1.26.10-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.10-1 - Update to Go 1.26.10 fips-1...

php8.4 security update

8.4.27-1 - rebase to 8.4.27...

fetchmail security update

6.4.24-1.1 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 Resolves: RHEL-265195...

php security update

8.3.36-1 - rebase to 8.3.36 8.3.35-1 - rebase to 8.3.35...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277797...

.NET 9.0 security, bug fix, and enhancement update

9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801...

.NET 10.0 security, bug fix, and enhancement update

10.0.113-1.0.1 - Add support for Oracle Linux 10.0.113-1 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808...

.NET 8.0 security, bug fix, and enhancement update

8.0.132-2.0.1 - Add support for Oracle Linux 8.0.132-2 - Fix apphost hash duplication under compiler optimizations on ppc64le - Resolves: RHEL-277790 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277790...

ca-certificates security update

2025.2.80v9.0.305-91.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist...

pcs security update

0.10.18-2.0.1.el810.10 - Replaced HAM-logo 0.10.18-2.el810.10 - Fixed CVE-2026-82397, CVE-2024-14029 by patching bundled Tornado Resolves: RHEL-271884, RHEL-271929...

python-urllib3 security update

1.26.19-4.2 - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282258 1.26.19-4.1 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420...

kernel security, bug fix, and enhancement update

4.18.0-553.176.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

rust-sequoia-sq security update

1.4.0.1-4.0.1 - Put 'Requires' openssl-libs in correct placeholder Orabug: 38742109 - Hard require needed openssl-libs Orabug: 38742109 1.4.0.1-4 - Fix CVE-2026-93657 1.4.0.1-3 - Fix CVE-2026-93599...

openssh security update

9.9p1-29.0.1 - Upstream references found with /usr/bin/ssh Orabug: 37824421 9.9p1-29 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276225 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276232 - CVE-2026-60000: Fix DoS via...

glycin-loaders security update

1.0.1-2 - Backport CVE-2026-96889 fix to vendored librsvg...

kernel security, bug fix, and enhancement update

6.12.0-211.67.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

ca-certificates security update

2025.2.80v9.0.305-102.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist...

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pgrepack 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 1.4.8-1 - Resolves: RHEL-3636 - Initial import for PG 16...

postgresql:18 security update

pgaudit 18.0-1 - Update to 18.0 - Initial import for postgresql18 pgrepack 1.5.3-1 - Update to 1.5.3 - Initial import for postgresql18 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 pgvector 0.8.7-1 - Update to 0.8.7 - Fixes...