11088 matches found
qt6-qtbase security update
6.8.1-9 - qt5: qt6: QtCore Assertion Failure Denial of Service CVE-2025-5455...
nodejs22 security update
1:22.16.0-1 - Update to version 22.16.0 1:22.15.0-3 - Make grep Source stricter in nodejs-tarball 1:22.15.0-2 - Add unit-test during build for nodejs22 1:22.15.0-1 - Update to version 22.15.0 1:22.13.1-6 - Update c-ares with fix for CVE-2025-31498 1:22.13.1-5 - Revert 'Generate only versioned rpm...
grafana security update
10.2.6-18 - Resolves RHEL-89943: CVE-2025-4123 10.2.6-16 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana 10.2.6-15 - Resolves RHEL-84627: CVE-2025-30204...
.NET 8.0 security update
8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 8.0.115-2 - Update to .NET SDK 8.0.115 and Runtime 8.0.15 - Resolves: RHEL-85275 8.0.114-2...
grafana security update
10.2.6-18 - Resolves RHEL-89943: CVE-2025-4123 10.2.6-16 - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana 10.2.6-15 - Resolves RHEL-84627: CVE-2025-30204...
thunderbird security update
128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...
iputils security update
20240905-2.1 - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping RHEL-94582...
libblockdev security update
3.2.0-4.0.1 - enable btrfs support Orabug: 30792917 3.2.0-4 - Don't allow suid and dev set on fs resize - CVE-2025-6019...
grafana-pcp security update
5.2.2-3 - Resolves RHEL-89218: CVE-2025-22871...
java-21-openjdk security update
1:21.0.7.0.6-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.7.0.6-1 - Update to jdk-21.0.7+6 GA - Update release notes to 21.0.7+6 - Rebase FIPS support against 21.0.7+5 - Require tzdata 2025a due to upstream inclusion of JDK-8347965 - This tarball is embargoed until 2025-04-15 @ 1pm P...
expat security update
2.7.1-1 - Fix behavior change caused by fix for CVE-2024-8176 2.7.0-1 - Fix CVE-2024-8176...
apache-commons-beanutils security update
1.9.4-21 - Fix improper access control vulnerability - Resolves: CVE-2025-48734...
firefox security update
128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...
golang-github-openprinting-ipp-usb security update
0.9.27-3 - rebuild to fix CVE-2025-22871...
ruby security update
3.3.8-10 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 - Fix Denial of Service in CGI::Cookie.parse. CVE-2025-27219 Resolves: RHEL-86116 - Fix userinfo leakage in URIjoin, URImerge and URI+. CVE-2025-27221...
sqlite security update
3.46.1-4 - Fix for CVE-2025-3277 - Resolves: RHEL-87295...
thunderbird security update
128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...
freerdp security update
2:3.10.3-3 - Initialize function pointers after resource allocation - Fixes CVE-2025-4478 - Resolves: RHEL-91583...
exiv2 security update
0.28.3-3.2 - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106...
osbuild-composer security update
101-4.0.1 - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl JIRA: OLDIS-38123 - Increase default /boot size...
git security update
2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-74175...
tomcat9 security update
1:9.0.87-5 - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813...
python-jinja2 security update
3.1.6-1 - Update to 3.1.6 - Security fix for CVE-2025-27516 Resolves: RHEL-85058...
tomcat security update
1:10.1.36-1 - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813 - Resolves: RHEL-87272 tomcat: DoS in examples web application CVE-2024-54677 - Resolves: RHEL-87273 tomcat: Authenticati...
libarchive security update
3.7.7-2 - Fix for CVE-2024-57970 - Resolves: RHEL-79877...
libarchive security update
3.7.7-3 - Resolves: CVE-2025-25724...
unbound security update
1.20.0-10 - Prevent unbounded name compression CVE-2024-8508...
libvpx security update
1.14.1-3 - Add patch for double free Resolves: RHEL-93905...
podman security update
6:5.4.0-10.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.4.0-10 - rebuild to resolve CVE-2025-22871 - Pick latest f rom...
buildah security update
2:1.39.4-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.39.4-2 - Rebuild on new golang to fix CVE-2025-22871 2:1.39.4-1 - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Related: RHEL-80817 2:1.39.3-1 - update to...
delve security update
1.24.1-2.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.24.1-2 - Rebuild without changes...
mod_proxy_cluster security update
1.3.22-1.el100.2 - Resolves: RHEL-82256 - Update deprecated misspeled EnableMCPMReceive directive 1.3.22-1.el100.1 - Resolves: RHEL-80796 - Rebase modproxycluster to upstream 1.3.22.Final release 1.3.22-1 - Resolves: RHEL-80480 Rebase modproxycluster to upstream 1.3.22.Final release...
mod_auth_openidc security update
2.4.15-4.el100.1 - Fix CVE-2025-31492...
yggdrasil security update
0.4.5-3 - Fix CVE-2025-3931...
ipa security update
4.12.2-15.0.1.el100.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-15.el100.1 - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-89144...
krb5 security update
1.21.3-8.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.3-8 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88705 - Don't issue RC4 session keys by default CVE-2025-3576 Resolves: RHEL-88047 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-74295...
ghostscript security update
10.02.1-16 - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow 10.02.1-15 - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef...
golang security update
1.23.9-1 - Update to 1.23.9...
nodejs22 security update
1:22.16.0-1 - Update to version 22.16.0 1:22.15.0-3 - Make grep Source stricter in nodejs-tarball 1:22.15.0-2 - Add unit-test during build for nodejs22 1:22.15.0-1 - Update to version 22.15.0 1:22.13.1-6 - Update c-ares with fix for CVE-2025-31498 1:22.13.1-5 - Revert 'Generate only versioned rpm...
gstreamer1-plugins-bad-free security update
1.24.11-2 - fix for CVE-2025-3887 Resolves: RHEL-93045...
wireshark security update
1:4.4.2-3.0.1 - Fix post script to not fail during initial installation Orabug: 37565359 1:4.4.2-3 - Resolves: RHEL-80274 - Increasing NVR due to a build error 1:4.4.2-2 - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udeva...
gvisor-tap-vsock security update
6:0.8.5-2 - Rebuild on new golang to fix CVE-2025-22871 6:0.8.5-1 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 6:0.8.4-1 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83030...
delve and golang security update
delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.24.1-1 - Update Delve to 1.24.1 1.22.1-6 - plans/ci.fmf: Update repo golang 1.23.7-1 - Update to 1.23.7 - golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints CVE-2024-45341 -...
xz security update
1:5.6.2-4 - Fix: heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 - Resolves: RHEL-86029...
kea security update
2.6.3-1 - New version 2.6.3 - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 - kea.conf: Remove /tmp/ from socket-name for existing configurations - kea.conf: Set pseudo-random password for default config to secure fresh install and allow CA startup without user intervention - kea.conf:...
git-lfs security update
3.6.1-2 - Rebuild with new Golang...
valkey security update
8.0.3.1 - rebase to 8.0.3...
Unbreakable Enterprise kernel security update
6.12.0-100.28.2.el10uek - sched/eevdf: Fix se-slice being set to U64MAX and resulting crash Omar Sandoval - certs: Add new Oracle Linux Driver Signing key 1 certificate Sherry Yang Orabug: 37967533 - Revert 'block: sysfs option to change ioticks granularity' Gulam Mohamed Orabug: 37921776 - RDS:...