ruby:3.3 security update

ruby 3.3.8-4 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68632 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 - Fix Denial of Service in CGI::Cookie.parse. CVE-2025-27219 - Fix userinfo leakage in URIjoin, URImerge and URI+. CVE-2025-27221 rubygem-abrt 0.4.0-1 - Updat...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

kernel security update

6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Orac...

libsoup security update

2.62.2-2.0.5 - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 Orabug: 38085184 - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 2.62.2-2.0.3 - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in - soupheaderparseparamliststrict Orabug: 37557504...

thunderbird security update

128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1...

gimp security update

2:2.8.22-1.0.3 - Fixes CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Orabug: 38110877 - Fixes CVE-2025-48797 Multiple heap buffer overflows in TGA parser - Fixes CVE-2025-48798 Multiple use after free in XCF parser...

python-tornado security update

4.2.1-5.0.1 - Fixed CVE-2025-47287 Raise errors instead of logging Orabug: 38049949...

python3.12 security update

3.12.9-2.0.1.2 - Remove upstream URL reference 3.12.9-2.2 - Enable PAC and BTI protections for aarch64 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211 3.12.9-2.1 - Apply Intel's...

corosync security update

3.1.9-1.1 - Resolves: RHEL-84612 - totemsrp: Check size of orftoken msg fixes CVE-2025-30472...

pcs security update

0.12.0-3.el100.2 - Rebased pcs to the latest sources see CHANGELOG.md Resolves: RHEL-7681, RHEL-21050, RHEL-22423, RHEL-35407, RHEL-44347, RHEL-63186, RHEL-66607, RHEL-76176, RHEL-81938 - Rebased HA Cluster Management add-on to the latest sources Resolves: RHEL-30686, RHEL-30695, RHEL-30698,...

thunderbird security update

128.12.0-1.0.1 - Add Oracle prefs 128.12.0-1 - Update to 128.12.0 build1...

python3.12 security update

3.12.9-1.1 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211...

python3.11 security update

3.11.11-2.1 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98045, RHEL-98015, RHEL-98238, RHEL-98177, RHEL-98206...

thunderbird security update

128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1...

pam security update

1.3.1-37.0.1 - pamlimits: fix use after free in pamsmopensession Orabug: 36272695 1.3.1-37 - pamnamespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724...

python3.11 security update

3.11.13-1.0.1 - Update rpm-macros description Orabug: 36024572 3.11.13-1 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98037, RHEL-98006, RHEL-98223, RHEL-98114, RHEL-98200...

python3.12 security update

3.12.11-1 - Update to 3.12.11 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98040, RHEL-98010, RHEL-97808, RHEL-98070, RHEL-98213...

python3.9 security update

3.9.21-2.1 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219...

firefox security update

128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.12.0-1 - Update to 128.12.0 build1...

osbuild-composer security update

134.1-2.0.1 - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names JIRA: OLDIS-35893 - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux...

firefox security update

128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.12.0-1 - Update to 128.12.0 build1...

skopeo security update

1:1.18.1-2 - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 1:1.18.1-1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 https://github.com/containers/skopeo/commit/bfd0850 - fixes 'CVE-2025-27144 skopeo...

.NET 9.0 security update

9.0.107-1.0.1 - Add support for Oracle Linux 9.0.107-1 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 9.0.106-2 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 9.0.105-2 - Update to .NET SDK 9.0.105 and Runtime 9.0.4 - Resolves: RHEL-85281 9.0.104-2 -...

javapackages-tools:201801 security update

ant ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild antlr aopalliance apache-commons-beanutils 1.9.3-5 - Fix improper access control vulnerabilities - Resolves: CVE-2019-10086, CVE-2025-48734 apache-commons-cli apache-commons-codec apache-commons-collectio...

firefox security update

128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.12.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.12.0-1 - Update to 128.12.0 build1...

python3 security update

3.6.8-70.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-70 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-981...

sudo security update

1.9.5p2-1.0.1 - Fixes sudo -s unclosed sessions when usepty option used Orabug: 36952911 1.9.5p2-10.1 RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014...

osbuild-composer security update

134.1-2.0.1 - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names JIRA: OLDIS-35893 - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux...

firefox security update

128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

thunderbird security update

128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

podman security update

6:5.4.0-10.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.4.0-10 - rebuild to resolve CVE-2025-22871 - Pick latest f rom...

firefox security update

128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

skopeo security update

1:1.18.1-2 - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 1:1.18.1-1 - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 https://github.com/containers/skopeo/commit/bfd0850 - fixes 'CVE-2025-27144 skopeo...

thunderbird security update

128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

glibc security update

2.34-168.0.1.20 - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi Oracle history:...

sudo security update

1.9.5p2-10.1 RHEL 9.6.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100016...

firefox security update

128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...

libblockdev security update

2.28-7.0.1 - enable btrfs support Orabug: 30792917 2.28-7 - Don't allow suid and dev set on fs resize CVE-2025-6019 Resolves: RHEL-96034...

grafana security update

10.2.6-18 - Resolves RHEL-89943: CVE-2025-4123 10.2.6-16 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana 10.2.6-15 - Resolves RHEL-84627: CVE-2025-30204...

libsoup3 security update

3.6.5-3.el100.6 - Fix CVE-2025-4035, CVE-2025-4948, CVE-2025-32049, CVE-2025-32907 3.6.5-3 - Add patch to hopefully fix http2-body-size-test timeouts 3.6.5-2 - Add patch to hopefully fix server-test timeouts 3.6.5-1 - Update to 3.6.5 and add patches for CVEs...

perl-FCGI security update

1:0.82-13.1 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters...

.NET 8.0 security update

8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 8.0.115-2 - Update to .NET SDK 8.0.115 and Runtime 8.0.15 - Resolves: RHEL-85275 8.0.114-2...

.NET 9.0 security update

9.0.107-1.0.1 - Add support for Oracle Linux 9.0.107-1 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 9.0.106-2 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 9.0.105-2 - Update to .NET SDK 9.0.105 and Runtime 9.0.4 - Resolves: RHEL-85281 9.0.104-2 -...

python-setuptools security update

69.0.3-12 - Security fix for CVE-2025-47273 69.0.3-11 - Change the test source location...

kernel security update

5.14.0-570.24.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

gvisor-tap-vsock security update

6:0.8.5-2 - Rebuild on new golang to fix CVE-2025-22871 6:0.8.5-1 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 6:0.8.4-1 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83030...

ghostscript security update

10.02.1-16 - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow 10.02.1-15 - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef...