glib2 security update

2.80.4-4.el100.6 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845...

glib2 security update

2.56.4-166 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848...

glibc security update

2.39-43.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi Oracle history: March-5-2025 Cupertino Miranda - 2.39-37.0.1 - Forward port Oracle changes to 2.39-37. Reviewed-by: Jose E. Marchesi Jan-22-2025 Cupertino Miranda - 2.39-32.0.1 - Integration of relevant Oracle patches...

glib2 security update

2.68.4-16.2 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845...

python3.12-setuptools security update

68.2.2-5 - Security fix for CVE-2025-47273 Resolves: RHEL-101131...

pcs security update

0.10.18-2.0.1.6 - Replace HAM-logo.png with a generic one 0.10.18-2.el810.6 - Fixed CVE-2024-49761 by updating rubygem rexml Resolves: RHEL-98708...

kernel security update

5.14.0-570.26.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

emacs security update

1:26.1-15 - Restore definition of variable 'enable-dir-local-variables' RHEL-92830 1:26.1-14 - Fix arbitrary code execution via Lisp macro expansion RHEL-69394...

go-toolset:ol8 security update

delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.24.4-1 - Update to Go 1.24.4 fips-1 - Resolves: RHEL-85264 go-toolset 1.24.4-1 - Update to Go 1.24.4 fips-1 - Resolves: RHEL-85264...

socat security update

1.7.4.1-2 - add fix for CVE-2024-54661 Resolves: RHEL-70095 - switch to autopatch, remove unused patches...

lz4 security update

1.8.3-5 - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 1.8.3-4 - Fix CVE-2019-17543 - Resolves: RHEL-87362...

python-setuptools security update

39.2.0-9 - Security fix for CVE-2025-47273 Resolves: RHEL-96802...

firefox security update

128.12.0-1.0.1 - Update to 128.12.0 Orabug: 38141310CVE-2025-6424CVE-2025-6425 CVE-2025-6429CVE-2025-6430...

Unbreakable Enterprise kernel security update

5.15.0-310.184.5.2 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error Jeff Layton CVE-2025-38089 - netsched: schsfq: move the limit validation Octavian Purdila CVE-2025-37752 - netsched: schsfq: use a temporary work area for validating configuration Octavian Purdila - netsched:...

Unbreakable Enterprise kernel security update

5.4.17-2136.345.5.3 - x86/bpf: Classic BPF program can fail when BHB barrier is used Alexandre Chartre Orabug: 38167806 5.4.17-2136.345.5.2 - Add Zen34 clients Borislav Petkov AMD Orabug: 38023241 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips...

cloud-init security update

24.4-3.0.1.2 - NetworkManagerActivator brings up interface failed when using sysconfig renderer RHEL-18981 - Include module ccwritefilesdeferred in config template Orabug: 36959464 - Fix Oracle Datasource network, getdata methods and increase retries Orabug: 37065979 - Fix log file permission...

cloud-init security update

24.4-4.0.1.el96.3 - Fix Oracle Datasource network and getdata methods for OCI OL Orabug: 35950168 - Fix log file permission Orabug: 35302969 - Update detection logic for OL distros in config template Orabug: 34845400 - Added missing services in rhel/systemd/cloud-init.service Orabug: 32183938 -...

python3.11-setuptools security update

65.5.1-4 - Security fix for CVE-2025-47273 Resolves: RHEL-101126...

golang security update

1.24.4-1 - Update to Go 1.24.4 fips-1 1.24.3-3 - Update to Go 1.24.3 fips-3 1.24.3-2 - Update to Go 1.24.3 fips-2 1.24.3-1 - Update to Go 1.24.3...

perl-File-Find-Rule security update

0.33-5.0.1 - Use 3 arg open in grep Orabug: 38120380CVE-2011-10007...

libxml2 security update

2.9.7-21.1 - Fix CVE-2025-6021 RHEL-96498 - Fix CVE-2025-49794 RHEL-96398 - Fix CVE-2025-49796 RHEL-96424 2.9.7-21 - Fix integer overflow RHEL-74345...

gnome-remote-desktop security update

0.1.8-4 - Backport connection throttling Resolves: RHEL-92791...

libxml2 security update

2.9.13-10 - Fix CVE-2025-6021 RHEL-96507 - Fix CVE-2025-49794 RHEL-96405 - Fix CVE-2025-49796 RHEL-96431...

kernel security update

4.18.0-553.60.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

libxml2 security update

2.12.5-7 - Refresh patches from upstream RHEL-96395, RHEL-96408 and RHEL-96421 2.12.5-6 - Fix CVE-2025-6021 RHEL-96495 - Fix CVE-2025-49794 RHEL-96395 - Fix CVE-2025-49795 RHEL-96408 - Fix CVE-2025-49796 RHEL-96421...

golang security update

1.24.4-1 - Update to Go 1.24.4 fips-1 - Resolves: RHEL-101074 1.23.10-1 - Update to Go 1.23.10 - Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874 - Resolves: RHEL-96000...

mpfr security update

3.1.1-4.0.1 - Fixes buffer overflow in mpfrstrtofr CVE-2014-9474 Orabug: 38103811...

gnome-remote-desktop security update

40.0-11 - Backport connection throttling Resolves: RHEL-92795...

gnome-remote-desktop security update

47.3-2 - Backport connection throttling Resolves: RHEL-92787...

container-tools:ol8 security update

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman 4.9.4-22.0.1 - Fixes issue of container created in cgroupv2 not start in cgroupv1 Orabug: 36136813 - Fixes container...

podman security update

5.4.0-12.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 5:5.4.0-12 - update to the latest content of...

perl-File-Find-Rule-Perl security update

1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007...

libvpx security update

1.3.0-8.0.1 - Fixes CVE-2025-5283 vpxcodecencinitmulti fix double free on init fail Orabug: 38103810...

podman security update

6:5.4.0-12.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.4.0-12 - update to the latest content of...

jq security update

1.6-11 - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt - Resolves: RHEL-92987 1.6-10 - Fix CVE-2024-23337 jq has signed integer overflow in jv.c:jvparraywrite - Resolves: RHEL-92968...

jq security update

1.6-17.el9.2 - Fix CVE-2025-48060 - Resolves: RHEL-92990 1.6-17.el9.1 - Fix CVE-2024-23337 - Resolves: RHEL-92972 1.6-17 - Fix SAST findings in jq 1.6 - Resolves: RHEL-28653 1.6-16 - Make jq 1.6 fast - Resolves: RHEL-13431...

kernel security update

6.12.0-55.20.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

xorg-x11-server-Xwayland security update

24.1.5-4 - CVE fix for: CVE-2025-49175 RHEL-97129, CVE-2025-49176 RHEL-97135, CVE-2025-49177 RHEL-97141, CVE-2025-49178 RHEL-97147, CVE-2025-49179 RHEL-97153, CVE-2025-49180 RHEL-97159 24.1.5-3 Rebuild for 10.0.z required due to issue when releasing original erratum. - CVE fix for: CVE-2025-26594...

ipa security update

4.6.8-5.0.3.el79.17 - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 Orabug: 38085890...

Unbreakable Enterprise kernel security update

5.4.17-2136.344.4.3 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - KVM: SVM: Advertize TSA CPUID bits to guests Borislav Petkov AMD Orabug:...

glibc security update

2.34-168.0.1.20 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history: June-9-2025 Cupertino Miranda - 2.34-168.0.1.19 - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust May-17-2025 Cupertino Miranda - 2.34-168.0.1.14 - Forward-port Oracle patches fo...

Unbreakable Enterprise kernel security update

5.15.0-309.180.4.2 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350...

kernel security update

5.14.0-570.25.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

python-setuptools security update

53.0.0-13.1 - Security fix for CVE-2025-47273 Resolves: RHEL-96807...

buildah security update

2:1.39.4-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.39.4-2 - Rebuild on new golang to fix CVE-2025-22871 2:1.39.4-1 - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Related: RHEL-80817 2:1.39.3-1 - update to...

socat security update

1.7.4.1-6.1 - add fix for CVE-2024-54661 Resolves: RHEL-70096 - switch to autopatch, remove unused patches...

Unbreakable Enterprise kernel security update

6.12.0-100.28.2.2.el10uek - Add Zen34 clients Borislav Petkov AMD Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129827 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129827...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...