redis:7 security update

7.2.10-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.10-1 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 7.2.8-1 - rebase to 7.2.8 for CVE-2025-21605 7.2.7-1 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 7.2.6-1 - rebase to 7.2.6 RHEL-26628...

apache-commons-beanutils security update

1.8.3-15.0.1 - Add SuppressPropertiesBeanIntrospector.SUPPRESSDECLARINGCLASS Orabug: 38176946CVE-2025-48734 1.8.3-15 - Fix CVE-2014-0114 - Fix CVE-2019-10086 1.8.3-14 - Mass rebuild 2013-12-27 1.8.3-13 - Add BuildRequires on apache-commons-parent = 26-7 - Remove BuildRequires on...

thunderbird security update

128.13.0-3.0.1 - Add Oracle prefs 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

kernel security update

6.12.0-55.24.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

nodejs:22 security update

nodejs 1:22.16.0-2 - Patch fix for CVE-2025-6965 Resolves: RHEL-103851 nodejs-nodemon nodejs-packaging...

firefox security update

128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0-1 - Update to 128.13.0 build1...

icu security update

67.1-10 - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664...

thunderbird security update

128.13.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.13.0 - Add OpenELA debranding 128.13.0-3 - Update to 128.13.0 build3 128.13.0-2 - Update to 128.13.0 build2 128.13.0-1 - Update to 128.13.0 build1...

unbound security update

1.20.0-12 - Fix CVE-2025-5994...

libtpms security update

0.9.1-5.20211126git1ff6fe1f43 - Fix CVE-2025-49133 Resolves: RHEL-96258...

sqlite security update

3.46.1-5 - Fix CVE-2025-6965 3.46.1-4 - Fix for CVE-2025-3277 - Resolves: RHEL-87295 3.46.1-3 - Enabled sqlite-session feature - Resolves: RHEL-77326 3.46.1-2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 3.46.1-1 - Update to 3.46.1 - https://www.sqlite.org/releaselog/3461.ht...

redis:6 security update

6.2.19-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.19-1 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367...

java-21-openjdk security update

1:21.0.8.0.9-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.8.0.9-1.1 - Update to jdk-21.0.8+9 GA - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2025-07-15 @ 1pm PT. - Resolves:...

kernel security update

5.14.0-570.30.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

perl security update

4:5.40.2-512.2 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir...

unbound security update

1.16.2-19.1 - Fix RebirthDay Attack CVE-2025-5994 - Resolves: RHEL-104128...

sqlite security update

3.26.0-20 - Fixes CVE-2025-6965...

perl security update

4:5.26.3-423 - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x...

nodejs:22 security update

nodejs 1:22.16.0-2 - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 1:22.15-1-1 - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 1:22.15.0-1 - Update to 22.15.0 - Drop upstream patches 1:22.13.1-4 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300...

unbound security update

1.16.2-5.9 - Fix RebirthDay Attack CVE-2025-5994 - Resolves: RHEL-104123...

icu security update

74.2-5 - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96667 74.2-4 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 74.2-3 - Resolves: RHEL-59365 Fix coverity warnings 74.2-2 - Bump release for June 2024 mass rebuild 74.2-1 - Update to 74.2 74.1-1 - Update to...

java-1.8.0-openjdk security update

1:1.8.0.462.b08-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.462.b08-1 - Update to 8u462-b08 GA - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the...

sqlite security update

3.34.1-8 - Fixes CVE-2025-6965...

kernel security update

4.18.0-553.64.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

perl security update

4:5.32.1-481.1 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir...

firefox security update

128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.13.0-1 - Update to 128.13.0 build1...

firefox security update

128.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.13.0-1 - Update to 128.13.0 build1...

sudo security update

1.8.23-10.0.1.3 - CVE-2025-32462 sudo: LPE via host option Orabug: 38187299...

apache-commons-vfs security update

2.0-11.0.1 - Simplify UriParser Orabug: 38161936CVE-2025-27553...

tigervnc security update

1.8.0-33.0.7 - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 Orabug: 38157695...

xorg-x11-server security update

1.20.4-29.0.3 - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 Orabug: 38157695 1.20.4-29.0.1 - Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 - CVE-2025-26601 Orabug: 37712847...

redis security update

6.2.19-1 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 6.2.18-1 - rebase to 6.2.18 for CVE-2025-21605 6.2.17-1 -- rebase to 6.2.17 for CVE-2024-46981 6.2.16-1 - rebase to 6.2.16 RHEL-26627...

sudo security update

1.9.15-8.p5.2 - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022...

git security update

2.47.3-1 - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679...

kernel security update

6.12.0-55.22.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

git security update

2.43.7-1 - update to 2.43.7 - Resolves: RHEL-102440, RHEL-102454, RHEL-102674, RHEL-102680...

cloud-init security update

23.4-7.0.2.el810.10 - Fixes regression in cloud-init with module ccwritefilesdeferred Orabug: 37382965 - Update IPv6 IMDS endpoint to ULA and drop NIC identifier Orabug: 35965980 - Enable IPv6 Orabug: 36502414 - Added missing services in rhel/systemd/cloud-init.service Orabug: 32183938 - Increase...

valkey security update

8.0.4-1 - update to 8.0.4 fixes CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 8.0.3.1 - rebase to 8.0.3 8.0.2.1 - rebase to 8.0.2 Resolves: RHEL-73273 7.2.6-2 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 7.2.6.1 - rebase to 7.2.6 - merge limit.conf in main service files -...

git security update

2.47.3-1 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681...

avahi security update

0.8-22.1 - Fix CVE-2024-52615 RHEL-94847...

kernel security update

4.18.0-553.63.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel security update

5.14.0-570.28.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

fence-agents security update

4.10.0-86.7 - bundled setuptools: fix CVE-2025-47273 Resolves: RHEL-95903 4.10.0-86.6 - fencekubevirt: use hard poweroff Resolves: RHEL-96183...

Unbreakable Enterprise kernel security update

6.12.0-101.33.4.3.el10uek - Revert 'Add normal counters' Boris Ostrovsky Orabug: 38171405 6.12.0-101.33.4.2.el10uek - sunrpc: handle SVCGARBAGE during svc auth processing as auth error Jeff Layton Orabug: 38178286 CVE-2025-38089 - mm: memcontrol: remove memcg from LRU on release instead of offlin...

tomcat9 security update

1:9.0.87-5.1 - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-31650 - Resolves: RHEL-71981 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337...

kernel security update

6.12.0-55.21.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

tomcat security update

1:9.0.87-1.el810.4 - Resolves: RHEL-91761 tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-31650 - Resolves: RHEL-71971 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337...

java-17-openjdk security update

1:17.0.16.0.8-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.16.0.8-2 - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101793 - Resolves: RHEL-102273 - Require...

kernel security update

4.18.0-553.62.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

tomcat security update

1:9.0.87-3.el96.1 - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITYUPDATE frame CVE-2025-31650 - Resolves: RHEL-71981 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 1:9.0.87-3 - Resolves: RHEL-82945 tomcat: Potential RCE and/or...