11088 matches found
systemd security update
252-55.0.3.7 - serialize: don't allocate 1M on the stack just like that LINUX-16166 - Route logs from container mapped uids to the system journal Orabug: 38135007 - Drop delay when nspawn fails to reset loginuid Orabug: 37793135 - Improve logging for api bus connection and subscribers Orabug:...
kernel security update
6.12.0-124.13.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
kea security update
3.0.1-2 - Fixes CVE-2025-11232 3.0.1-1 - New version 3.0.1 - Fixes CVE-2025-40779...
podman security update
5.6.0-6.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.6.0-6 - update to the latest content of...
java-25-openjdk security update
1:25.0.1.0.8-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.1.0.8-2 - Remove superfluous backslashes that cause two alternative commands to be combined - Related: RHEL-120553 1:25.0.1.0.8-1 - Update to jdk-25.0.1+8 GA - Update release notes with features of JDK 25 - Mention finalisatio...
kernel security update
6.12.0-124.13.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
delve and golang security update
delve 1.25.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.25.2-1 - Update Delve to 1.25.2 1.24.1-3 - Update CI support golang 1.25.3-1 - Update to Go 1.25.3 1.25.1-1 - Update to Go1.25.1 -Resolves: RHEL-116849 1.25.0-5 - Disable race for risv64 1.25.0-4 - Revert DWARF5...
edk2 security update
20250905-4.el8 - Create new 20250905 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause "Protection Mechanism Failure" by local access Orabug: 38381983 CVE-2025-3770 - EDK2: EDK2 contains a vulnerability in BIOS where...
xorg-x11-server-Xwayland security update
24.1.5-5 - CVE fix for: CVE-2025-62229 RHEL-119965, CVE-2025-62230 RHEL-120014, CVE-2025-62231 RHEL-125004...
haproxy security update
3.0.5-4.1 - Fix denial of service vulnerability in mjson library CVE-2025-11230 Resolves: RHEL-126652...
kea security update
3.0.1-2 - Fixes CVE-2025-11232 3.0.1-1 - New version 3.0.1 - Fixes CVE-2025-40779...
ipa security update
4.12.2-24.0.1.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-24.1 - Resolves: RHEL-118447 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA...
bind security update
9.18.33-10.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.18.33-10.2 - Fix upstream reported regression in recent CVE fix CVE-2025-8677 32:9.18.33-10.1 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks CVE-2025-40778 - Prevent cache...
Unbreakable Enterprise kernel security update
6.12.0-105.51.5.1 - crypto: essiv - Check ssize for decryption and in-place encryption Herbert Xu Orabug: 38712788 CVE-2025-40019 - netfilter: nftables: reject duplicate device on updates Pablo Neira Ayuso Orabug: 38712786 CVE-2025-38678...
expat security update
2.7.1-3 - Fix CVE-2025-59375 - backport allocation tracking improvements 2.7.1-2 - https://issues.redhat.com/browse/RHELMISC-13073...
Unbreakable Enterprise kernel security update
5.4.17-2136.349.3.2 - crypto: essiv - Check ssize for decryption and in-place encryption Herbert Xu Orabug: 38705546 CVE-2025-40019...
pcs security update
0.12.1-1.el101.1 - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938...
openssl security update
3.5.1-4.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115885...
libsoup3 security update
3.6.5-6 - Fix integer overflow in date/time parsing 3.6.5-5 - Bump revision number 3.6.5-4 - Fix several CVEs...
python-kdcproxy security update
1.0.0-19 - Use DNS discovery for declared realms only CVE-2025-59088 Resolves: RHEL-122777 - Fix DoS vulnerability based on unbounded TCP buffering CVE-2025-59089 Resolves: RHEL-122776...
thunderbird security update
140.5.0-2.0.1 - Add Oracle prefs 140.5.0-2 - Update to 140.5.0 ESR...
qt6-qtsvg security update
6.9.1-2.1 - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699...
libtiff security update
4.6.0-6.1 - Fix buffer underflow in TIFFReadRGBAImageOriented. - Resolves: RHEL-112524...
podman security update
5.6.0-6.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.6.0-6 - update to the latest content of...
firefox security update
140.5.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.5.0-2 - Update to 140.5.0 ESR...
buildah security update
1.41.6-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.6-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 https://github.com/containers/buildah/commit/2ece502 - fixes 'Minor Incident CVE-2025-52881 buildah:...
qt6-qtquick3d security update
6.9.1-1.1 - Fix CVE-2025-11277 in bundled assimp library Resolves: RHEL-120981...
qt6-qtsvg security update
6.9.1-2.2 - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion guard to prevent stack overflow Resolves: RHEL-119719 6.9.1-2.1 - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699...
sssd security update
2.11.1-2.0.1.1 - Restore default debug level for ssscache Orabug: 32810448 2.11.1-2.1 - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems rhel-10.1.z...
Unbreakable Enterprise kernel security update
5.15.0-314.193.5.5 - crypto: essiv - Check ssize for decryption and in-place encryption Herbert Xu Orabug: 38705933 CVE-2025-40019...
libssh security update
0.11.1-4 - Rebuild due to broken build auto-tagging...
squid security update
7:6.10-6.1 - Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling 7:6.10-6 - Resolves: RHEL-86817 - "TCP connection to XX.XX.XX.XX/XXXX failed" message is output frequently on RHEL10...
valkey security update
8.0.6-2 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 8.0.4-3 - fix ImageMode: ensure ownership of /etc/valkey 8.0.4-2 - fix ImageMode: add tmpfiles.d entries for directories below /var 8.0.4-1 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and...
vim security update
9.1.083-6.0.1 - Remove upstream references Orabug: 31197557 2:9.1.083-6 - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial...
kernel security update
4.18.0-553.87.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
libtiff security update
4.0.3-35.0.1 - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools Orabug: 38658716 - fix CVE-2025-8177: buffer overflow thumbnail setrow Orabug: 38658716 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented Orabug: 38658716...
openssl security update
3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-4 - Fix CVE-2025-9230 Resolves: RHEL-115929 1:3.5.1-...
gimp:2.8 security update
gimp 2:2.8.22-26.3 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 2:2.8.22-26.2 - fix CVE-2025-5473 RHEL-95696 2:2.8.22-26.1 - fix CVE-2025-48797 RHEL-93503 - fix CVE-2025-48798 RHEL-93506...
libxml2 security update
2.9.13-14 - Rebuilt for the correct target in RHEL 9.7-z RHEL-119283 2.9.13-13 - Fix CVE-2025-9714 RHEL-119283...
firefox security update
140.5.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.5.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.5.0-1 - Update to 140.5.0 ESR...
kernel security update
5.14.0-611.11.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
postgresql security update
12.22-5.0.1 - Add backport of CVE-2025-8714 Orabug: 38667546 12.22-5 - Fix previous Backport 12.22-4 - Backport CVE-2025-8715 12.22-3 - Fix backport for CVE-2025-1094 12.22-2 - Backport fix for CVE-2025-1094 12.22-1 - Update to 12.22 - Fixes: CVE-2024-10976 CVE-2024-10978 12.20-1 - Update to 12.2...
expat security update
2.5.0-5.1 - Fix CVE-2025-59375 - Resolves: RHEL-114644...
kernel security update
5.14.0-611.7.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 248176...
qt5-qt3d security update
5.15.9-2.1 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120986...
redis:7 security update
7.2.11-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.11-1 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 7.2.10-1 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 7.2.8-1 - rebase to 7.2.8 for CVE-2025-21605 7.2.7-1 ...
thunderbird security update
140.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.5.0-1 - Update to 140.5.0 ESR...
buildah security update
1.41.6-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.6-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 https://github.com/containers/buildah/commit/2ece502 - fixes 'Minor Incident CVE-2025-52881 buildah:...
bind9.18 security update
32:9.18.29-5.2 - Fix upstream reported regression in recent CVE fix CVE-2025-8677 - Add upstream created test to this regression 32:9.18.29-5.1 - Refuse malformed DNSKEY records CVE-2025-8677 - Address various spoofing attacks CVE-2025-40778 - Prevent cache poisoning due to weak PRNG CVE-2025-407...