kernel security update

5.14.0-570.35.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

openjpeg2 security update

2.5.2-4.1 - fix OpenJPEG OOB heap memory write CVE-2025-54874...

go-toolset:ol8 security update

delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455 go-toolset 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455...

kernel security update

4.18.0-553.70.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

golang security update

1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106464...

Unbreakable Enterprise kernel security update

6.12.0-102.36.5.2 - iommu/vt-d: Fix misplaced domainattached assignment Ban ZuoXiang Orabug: 38294635 6.12.0-102.36.5.1 - net/sched: Always pass notifications when child class becomes empty Lion Ackermann Orabug: 38217337 6.12.0-102.36.5 - uek-rpm: Enable few modules related to various subsystems...

golang security update

1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106464...

kernel security update

6.12.0-55.27.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Lin...

webkit2gtk3 security update

2.48.5-1 - Update to 2.48.5...

libxml2 security update

2.9.1-6.0.7.6 - Fix CVE-2025-6021, CVE-2025-32414, CVE-2025-49794, CVE-2025-49796 - Orabug: 38255814...

kernel security update

5.14.0-570.33.2.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

webkit2gtk3 security update

2.48.5-1 - Update to 2.48.5...

thunderbird security update

128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

git security update

1.8.3.1-25.0.1 - Fixed CVE-2025-48384 Orabug: 38234220...

konsole security update

4.10.5-5.0.1 - Clear the arguments if the command is not found Orabug: 38260855CVE-2025-49091...

python-requests security update

2.32.4-1 - Update to 2.32.4 - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs Resolves: RHEL-105460...

python3.11-setuptools security update

65.5.1-4 - Security fix for CVE-2025-47273 Resolves: RHEL-101113...

kernel security update

4.18.0-553.69.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Unbreakable Enterprise kernel security update

5.4.17-2136.346.6 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38109070 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189315 5.4.17-2136.346.5 - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261486 CVE-2023-6931 - perf...

Unbreakable Enterprise kernel security update

5.15.0-311.185.9 - nfs: ignore SBRDONLY when remounting nfs Li Lingfeng Orabug: 37781252 5.15.0-311.185.8 - net/mlx5: Add poll-eq API to be used by ULP's Praveen Kumar Kannoju Orabug: 38182400 - net/rds: poll eq during user-reset Praveen Kumar Kannoju Orabug: 38189328 5.15.0-311.185.7 - perf: Fix...

kernel security update

6.12.0-55.25.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Lin...

libxml2 security update

2.12.5-9 - Fix CVE-2025-32415 RHEL-100174 - Fix CVE-2025-32414 RHEL-99861...

java-1.8.0-openjdk security update

1:1.8.0.462.b08-1.0.1 - Update to 8u462-b08 GA Orabug: 38248370 - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the latest update - This tarball is embargoed unt...

libxml2 security update

2.9.13-12 - Fix CVE-2025-32415 RHEL-100182 - Fix CVE-2025-32414 RHEL-99873...

firefox security update

128.13.0-1.0.1 - Update to 128.13.0 Orabug: 38256809CVE-2025-8027CVE-2025-8028 CVE-2025-8029CVE-2025-8030CVE-2025-8031CVE-2025-8032CVE-2025-8033 CVE-2025-8034CVE-2025-8035...

gdk-pixbuf2 security update

2.36.12-7 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102346...

glibc security update

2.39-46.0.1 - Forward port Oracle changes. Reviewed-by: David Faust Oracle history: July-15-2025 Cupertino Miranda - 2.39-43.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi March-5-2025 Cupertino Miranda - 2.39-37.0.1 - Forward port Oracle changes to 2.39-37. Reviewed-by: Jose E...

python-requests security update

2.20.0-6 - Security fix for CVE-2024-47081 Resolves: RHEL-102420...

libxml2 security update

2.9.7.21.3 - Fix CVE-2025-32415 RHEL-100177 2.9.7.21.2 - Fix CVE-2025-7425 RHEL-102797 2.9.7-21.1 - Fix CVE-2025-6021 RHEL-96498 - Fix CVE-2025-49794 RHEL-96398 - Fix CVE-2025-49796 RHEL-96424...

glibc security update

2.34-168.0.1.23 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history:...

jq security update

1.7.1-8.el100.1 - jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 - jq: AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt CVE-2025-48060...

sqlite security update

3.7.17-8.0.1.1 - Fix for CVE-2025-6965 Orabug: 38260859...

kernel security update

4.18.0-553.66.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

python3.12-setuptools security update

68.2.2-5 - Security fix for CVE-2025-47273 Resolves: RHEL-101118...

mod_security security update

2.9.6-2.1 - Resolves: RHEL-100102 - CVE-2025-48866 modsecurity: ModSecurity Denial of Service Vulnerability...

qt5-qt3d security update

5.15.9-2 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-105000 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105005...

gdk-pixbuf2 security update

2.42.12-4 - jpeg: Be more careful with chunked icc data...

ncurses security update

6.2-10.20210508.el96.2 - remove execute permissions from ANNOUNCE file RHEL-102738 6.2-10.20210508.el96.1 - guard against corrupt terminfo data in string conversion CVE-2022-29458 RHEL-100139...

glibc security update

2.28-251.0.3.25 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi Oracle history: June-9-2025 Cupertino Miranda - 2.28-251.0.3.22 - Forward port of Oracle patches Reviewed-by: David Faust April-14-2025 Cupertino Miranda - 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by:...

gdk-pixbuf2 security update

2.42.6-6 - Fix an oversight - Related: RHEL-102354 2.42.6-5 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354...

kernel security update

5.14.0-570.32.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

python-setuptools security update

0.9.8-7.0.3 - Fix CVE-2025-47273 Orabug: 38247921...

python3-setuptools security update

39.2.0-10.0.5 - Back port fix for CVE-2025-47273 Orabug: 38229296...

virt:ol and virt-devel:ol security update

hivex libguestfs 1.44.0-9.0.2 - libguestfs.spec: Add btrfs-progs RPM to appliance Orabug: 35634755 libguestfs-winsupport 8.10-1 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz2236373 libiscsi libnbd 1.6.0-6.el8 - Fix CVE-2024-7383 NBD server improper certificate validation...

python-requests security update

2.25.1-10 - Security fix for CVE-2024-47081 Resolves: RHEL-105461...

libxml2 security update

2.9.13-11 - Fix CVE-2025-7425 RHEL-102806...

libxml2 security update

2.9.7.21.2 - Fix CVE-2025-7425 RHEL-102797 2.9.7-21.1 - Fix CVE-2025-6021 RHEL-96498 - Fix CVE-2025-49794 RHEL-96398 - Fix CVE-2025-49796 RHEL-96424...

libblockdev security update

2.18-5.0.1 - Don't allow suid and dev set on fs resize CVE-2025-6019 - Orabug: 38176252...

kernel security update

3.10.0-1160.119.1.0.10 - net: atlantic: fix aqvec index out of range error Chia-Lin Kao CVE-2022-50066 Orabug: 38201271 - net: atm: fix use after free in lecsend Dan Carpenter CVE-2025-22004 Orabug: 38201271...

jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

jackson-annotations 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-core 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-103636 jackson-databind 2.19.1-1 - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-jaxrs-providers 2.19.1-1 - Update to version 2.19.1 -...