11088 matches found
fetchmail security update
6.4.38-3.1 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 Resolves: RHEL-265187...
kernel security, bug fix, and enhancement update
5.14.0-687.59.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
lrzsz security, bug fix, and enhancement update
0.12.20-69 - Fix long-standing SIGSEGV bug when using the -s parameter without an argument RHEL-282106 0.12.20-68 - Backport tightened path handling from 0.13.1 CVE-2026-105840 0.12.20-67 - Remove 'Topipe' feature. CVE-2026-105841...
python3 security update
3.6.8-79.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-79 - Security fixes for CVE-2026-12345, CVE-2026-19445, CVE-2026-19553 Resolves: RHEL-272935, RHEL-276260, RHEL-274107...
gimp:2.8 security update
gimp 2:2.8.22-26.9 - fix CVE-2026-90947 - fix CVE-2026-90948 - fix CVE-2026-92248 - fix CVE-2026-97185 2:2.8.22-26.8 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18303 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-66758 - fix CVE-2026-18304 - fix CVE-2026-18307 2:2.8.22-26....
openssl security update
3.5.8-2.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...
ca-certificates security update
2025.2.80v9.0.304-80.2.0.1 - eMudhra: add 'emSign Root TLS CA - G3' and 'Comodo AAA Services root' to blocklist...
python3.12-urllib3 security update
1.26.19-3.2 - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282261 1.26.19-3.1 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration...
openssl security update
3.5.8-2.0.1 - Replace upstream references Orabug: 34340177 1:3.5.8-2 - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264479 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves:...
environment-modules security update
5.3.0-2.1 - fix command injection in bash Tab completion CVE-2026-85013...
librabbitmq security update
0.14.0-3.1 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service rhel-8.10.z denial of service rhel-8.10.z Resolves: RHEL-266736...
emacs security update
1:27.2-18.el98.3 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 - Resolves: RHEL-265110...
jackson-databind security update
2.21.6-1.1 - Resolves: RHEL-276419 - Fix CVE-2026-91777...
cockpit-files security update
36.1-1 - CVE-2026-91202 - Don't de-reference a symlink when creating a directory RHEL-263134 - CVE-2026-91205 - Don't de-reference a symlink when creating a directory RHEL-263141...
emacs security update
1:29.4-16 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 1:29.4-15 - tramp: restrict user name to prevent shell injection CVE-2026-79992 1:29.4-14 - image: fix integer overflow in pbmload CVE-2026-77219...
xorg-x11-server-Xwayland security update
24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536 Resolves: https://redhat.atlassian.net/browse/RHEL-277909 Resolves:...
libsoup security update
2.62.3-19 - CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly 2.62.3-18 - CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth 2.62.3-17 - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong...
perl-URI security update
5.09-3.1 - CVE-2026-19953 perl-URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization incorrect hostname encoding via missing Unicode normalization Resolves: RHEL-275730...
wireshark security update
4.4.2-10.0.1.el102.8 - Fix post script to not fail during initial installation Orabug: 37565359 1:4.4.2-10.8 - Fix Heap-based Buffer Overflow in Wireshark CVE-2026-95389 - Resolves: RHEL-272823 1:4.4.2-10.7 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves:...
hostapd security update
2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049...
perl-URI security update
1.73-4 - CVE-2026-19953 perl-URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization incorrect hostname encoding via missing Unicode normalization...
xorg-x11-server security update
1.20.11-34.5 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves:...
webkit2gtk3 security, bug fix, and enhancement update
2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further...
resteasy security update
3.0.26-20.1 - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode Decompression-Bomb DoS - Resolves: RHEL-278032 - Resolves: RHEL-277999...
xorg-x11-server-Xwayland security update
24.1.9-4.4 - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536 Resolves: https://redhat.atlassian.net/browse/RHEL-277865 Resolves:...
python3.14-urllib3 security update
2.6.3-6 - Fix a regression with Python 3.14.8 2.6.3-5 - Fix teststartclosedsocket with latest Python 2.6.3-4 - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser 2.6.3-3 - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception v...
python3.14-urllib3 security update
2.6.3-6 - Fix a regression with Python 3.14.8 2.6.3-5 - Fix teststartclosedsocket with latest Python 2.6.3-4 - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser 2.6.3-3 - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception v...
openexr security update
3.1.10-8.5 - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544...
hostapd security update
2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194042...
bubblewrap security update
0.4.0-3 - Security fix for CVE-2026-87766...
bubblewrap security update
0.10.0-5 - Fix CVE-2026-87766: harden sandbox mount paths 0.10.0-4 - Add tmt plans...
bubblewrap security update
0.6.3-1.1 - Fix CVE-2026-87766 path traversal through symlinked mount targets - Use OPATH for parent directory traversal during setup - Resolves: RHEL-256871...
mariadb11.8 security update
3:11.8.8-2 - Release bump for pcre2 CVE fixes - Resolves: CVE-2026-103111, CVE-2026-86145, CVE-2026-89161...
perl-URI security update
5.27-3.1 - CVE-2026-19953 perl-URI: URI for Perl: Security bypass due to incorrect hostname encoding via missing Unicode normalization hostname encoding via missing Unicode normalization Resolves: RHEL-274901...
webkit2gtk3 security, bug fix, and enhancement update
2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further...
openssl security update
3.5.8-2.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-2 - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves:...
Unbreakable Enterprise kernel security update
6.12.0-207.111.5.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167669 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167684 CVE-2026-99999...
Unbreakable Enterprise kernel security update
5.4.17-2136.360.3.1 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167666 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...
Unbreakable Enterprise kernel security update
5.15.0-325.221.6.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167656 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...
grafana security update
9.2.10-35.0.1 - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 9.2.10-35 - CVE-2026-15815 grafana: PLUGIN ARCHIVE EXTRACTION ESCAPES THE PLUGIN DIRECTORY, ALLOWING CODE EXECUTION - Resolves RHEL-253157 9.2.10-34 - CVE-2026-42504 grafana: Golang MIME: Denial o...
hplip security, bug fix, and enhancement update
3.26.6-1.3 - fix LEDM scanner regression 3.26.6-1.2 - fix OSH issues 3.26.6-1.1 - Create right dir 3.26.6-1 - RHEL-266547 IMAGE-MODE missing /var/lib/hp on image-mode 3.26.6-1 - Rebase to 3.26.6...
kernel security update
5.14.0-687.58.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
rpcbind security update
1.2.7-3.1 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows unauthenticated remote denial of service Resolves: RHEL-266672...
rpcbind security update
1.2.6-7.1 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows unauthenticated remote denial of service - Resolves: RHEL-266677...
kernel security, bug fix, and enhancement update
6.12.0-211.66.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
rpcbind security update
1.2.5-11 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows unauthenticated remote denial of service Resolves: RHEL-266668...
wireshark security update
1:2.6.2-21 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Resolves: RHEL-257649 1:2.6.2-20 - Fix DoS vulnerability in ESS protocol dissector CVE-2026-76919 - Resolves: RHEL-257614 1:2.6.2-19 - Fix DoS via C12.22 protocol dissector crash CVE-2026-76886 - Resolves: RHEL-247378...
idm:DL1 security, bug fix, and enhancement update
bind-dyndb-ldap 11.6-6 - Fix rpminspect warnings Resolves: RHEL-22497 custodia 0.6.0-3 - Require platform-python-setuptools instead of python3-setuptools - Resolves: rhbz1650508 ipa 4.9.13-21.3.0.2 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.9.13-21.3 - Updated the...
hplip security, bug fix, and enhancement update
3.26.6-1.3 - Fix LEDM scanning 3.26.6-1.2 - fix OSH issues 3.26.6-1.1 - really fix missing /var/lib/hp 3.26.6-1 - Rebase to 3.26.6 3.21.2-6.6 - RHEL-257310 IMAGE-MODE missing /var/lib/hp on image-mode...