11088 matches found
grafana security update
9.2.10-23 - Resolves RHEL-89949: CVE-2025-4123...
.NET 8.0 security update
8.0.116-1.0.1 - Add support for Oracle Linux 8.0.116-1 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89446...
microcode_ctl security update
4:20250211-1.0.1 - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized Orabug: 35710094 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no longer appropriate caveats for 06-2d-07 and...
iptraf-ng security update
1.2.2-1.el9 - New version 1.2.2 Andrea Claudi RHEL-77280 - Fix buffer overflow via ifaces.c Andrea Claudi RHEL-71493...
gstreamer1-plugins-good security update
1.22.12-4 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613,...
pcs security update
0.11.9-2 - Fixed restarting bundles Resolves: RHEL-79055 - Fixed deletion of misconfigured bundles Resolves: RHEL-79160 - Fixed filtering of resource clones in web console Resolves: RHEL-78653 - Updated bundled rubygem rack Resolves: RHEL-79500 0.11.9-1 - Rebased pcs to the latest sources see...
aardvark-dns security update
2:1.14.0-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 2:1.13.1-1 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277...
protobuf security update
3.14.0-16 - Rebuild 3.14.0-15 - Rebuild 3.14.0-14 - Applied patch for CVE-2022-1941 RHEL-40872 - Applied patch to make emacs dependency optional RHEL-40572...
xorg-x11-server-Xwayland security update
23.2.7-3 - CVE fix for: CVE-2025-26594 RHEL-80204, CVE-2025-26595 RHEL-80187, CVE-2025-26596 RHEL-80190, CVE-2025-26597 RHEL-80193, CVE-2025-26598 RHEL-80195, CVE-2025-26599 RHEL-80202, CVE-2025-26600 RHEL-80203, CVE-2025-26601 RHEL-80207 23.2.7-2 - Fix for CVE-2024-9632 - RHEL-61997...
nginx security update
1.20.1-22.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 - Update upstream references Orabug: 36579090 2:1.20.1-22 - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability CVE-2025-23419 2:1.20.1-21 - Resolves: RHEL-77486...
ruby:2.5 security update
ruby 2.5.9-114 - Fix integer overflow in searchinrange function in regexec.c CVE-2019-19012. Resolves: RHEL-87505 rubygem-abrt rubygem-bson rubygem-bundler 1.16.1-5 - Fix unexpected code execution in Gemfiles CVE-2021-43809 Resolves: RHEL-87017 rubygem-mongo rubygem-mysql2 rubygem-pg...
rust-bootupd security update
0.2.27-3 - spec: remove ExcludeArch ix86 as this is c9s Resolves: RHEL-77736, RHEL-79091 0.2.27-2 - Add git to the build requires Resolves: RHEL-77736, RHEL-79091 0.2.27-1 - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: RHEL-77736 0.2.25-1 - new version...
python3.12-cryptography security update
41.0.7-2 - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 41.0.7-1 - Update to 41.0.7, fixes CVE-2023-49083 41.0.5-2 - Rebuilt for timestamp .pyc invalidation mode 41.0.5-1 - Initial package - Fedora contributions by: Alfredo Moralejo Benjamin A. Beasley...
.NET 9.0 security update
9.0.106-1.0.1 - Add support for Oracle Linux 9.0.106-1 - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89451 9.0.105-2 - Update to .NET SDK 9.0.105 and Runtime 9.0.4 - Resolves: RHEL-85279...
redis:6 security update
6.2.18-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.18-1 - rebase to 6.2.18 for CVE-2025-21605...
openjpeg2 security update
2.4.0-8 - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 RHEL-72519,RHEL-72521...
corosync security update
3.1.9-2 - Resolves: RHEL-84616 - totemsrp: Check size of orftoken msg fixes CVE-2025-30472 3.1.9-1 - Resolves: RHEL-65699 - New upstream release RHEL-65699...
krb5 security update
1.21.1-6.0.1 - Fixed race condition in krb5setpassword Orabug: 33609767 1.21.1-6 - Prevent overflow when calculating ulog block size CVE-2025-24528 Resolves: RHEL-76759 1.21.1-5 - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74374 - kdb5util: fix DB entry flags on modification Resolves...
xorg-x11-server security update
1.20.11-28 - CVE fix for: CVE-2025-26594 RHEL-80201, CVE-2025-26595 RHEL-80186, CVE-2025-26596 RHEL-80188, CVE-2025-26597 RHEL-80191, CVE-2025-26598 RHEL-80192, CVE-2025-26599 RHEL-80199, CVE-2025-26600 RHEL-80198, CVE-2025-26601 RHEL-80200 1.20.11-27 - CVE fix for CVE-2024-9632 - Backport fix fo...
osbuild and osbuild-composer security update
osbuild 141-1.0.1 - Add runner for ol8 and ol9 Orabug: 36400619 141-1 - New upstream release 140-1 - New upstream release 139-1 - New upstream release 138-1 - New upstream release 137-1 - New upstream release 136-1 - New upstream release 135-1 - New upstream release 132-1 - New upstream release...
python3.9 security update
3.9.21-2 - Security fix for CVE-2025-0938 Resolves: RHEL-77263...
grub2 security update
2.06-104.0.1 - Update grub2 dependencies to match new Secure Boot certificate chain of trust Orabug: 37766761 - Fix typo in SBAT metadata Orabug: 37693946 - Allow installation of grub2 only with shim-aa64 that allows booting it Orabug: 37693946 - net/dns: Fix removal of DNS server Orabug: 3753962...
python-requests security update
2.25.1-9 - Security fix for CVE-2024-35195 Resolves: RHEL-37609...
keylime-agent-rust security update
0.2.2-2 - Update openssl crate to version 0.10.70 to fix CVE-2025-24898...
openssh security update
8.7p1-45.0.2 - Upstream references found with /usr/bin/ssh Orabug: 37814929 8.7p1-45.0.1 - upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand Orabug: 37647064 - Update upstream references Orabug: 36564626 8.7p1-45 - Fix missing error codes set and invalid error code checks in...
php security update
8.0.30-2 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix...
rsync security update
3.2.5-3 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 3.2.5-2 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Ra...
gstreamer1-plugins-base security update
1.22.12-4 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 1.22.12-3 - Rebuild - Resolves:...
python3.12 security update
3.12.9-1 - Update to 3.12.9 - Security fix for CVE-2025-0938 Resolves: RHEL-77261 3.12.8-1 - Update to 3.12.8 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64886, RHEL-70320 3.12.6-1 - Update to 3.12.6 Resolves: RHEL-57417...
python3.11 security update
3.11.11-2 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 3.11.11-1 - Update to 3.11.11 Resolves: RHEL-64883 3.11.10-1 - Update to 3.11.10 Resolves: RHEL-57412...
gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update
gstreamer1 1.22.12-3 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-2 - Rebuild - Resolves: RHEL-38511, RHEL-41157 1.22.12-1 - Update to 1.22.12 1.22.9-1 - 1.22.9 1.22.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora40MassRebuild 1.22.8-2 - Rebuilt for...
gnutls security update
3.8.3-6 - Bump nettle dependency to 3.10.1 RHEL-52740 3.8.3-5 - Backport the fix for CVE-2024-12243 RHEL-78580...
libtasn1 security update
4.16.0-9 - Backport the fix for CVE-2024-12133 RHEL-78580...
perl-Module-ScanDeps security update
1.30-6 - Resolves: RHEL-68282 - Fix CVE-2024-10224 - Package tests...
kernel security update
5.14.0-570.12.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 5.14.0-570.12.16.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the...
git-lfs security update
3.6.1-1 - Update to 3.6.1 - Resolves: RHEL-73940 3.6.0-1 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 3.4.1-3 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 3.4.1-2 - Rebuild with new Golang - Resolves: RHEL-32571 3.4.1-1 - Update to...
rpm-ostree security update
2025.5-1 - Rebase to 2025.5 Resolves: RHEL-78697 2025.4-1 - Rebase to 2025.4 Resolves: RHEL-68131 2025.3-1 - Rebase to 2025.3 Resolves: RHEL-68131 2025.2-1 - Rebase to 2025.2 Resolves: RHEL-68131 2025.1-1 - Rebase to 2025.1 Resolves: RHEL-68131...
bootc security update
1.1.6-3 - Backport https://github.com/containers/bootc/pull/1167 - Resolves: RHEL-82293 1.1.5-2 - Sync specfile from upstream - Resolves: RHEL-80264 - Resolves: RHEL-81981 1.1.5-1 - Update to 1.1.5 - Resolves: RHEL-77733 1.1.4-2 - Cherry pick patches for bootc-status-updated - Resolves: RHEL-7286...
kernel security update
4.18.0-553.52.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
libjpeg-turbo security update
1.5.3-14 - updated previous fix RHEL-87364 1.5.3-13 - fix CVE-2020-13790: heap-based buffer over-read in getrgbrow RHEL-87364...
yelp and yelp-xsl security update
yelp 2:3.28.1-3.1 - Fix CVE-2025-3155 RHEL-85922 yelp-xsl 3.28.0-2.1 - Fix CVE-2025-3155 RHEL-85922...
Unbreakable Enterprise kernel security update
6.12.0-1.23.3.1 - x86/bhi: Do not set BHIDISS in 32-bit mode Pawan Gupta Orabug: 37920680 - x86/bpf: Add IBHF call at end of classic BPF Daniel Sneddon Orabug: 37920680 - x86/bpf: Call branch history clearing sequence on exit Daniel Sneddon Orabug: 37920680 - selftest/x86/bugs: Add selftests for...
Unbreakable Enterprise kernel security update
5.15.0-308.179.6.2 - x86/bhi: Do not set BHIDISS in 32-bit mode Pawan Gupta Orabug: 37920681 - x86/bpf: Add IBHF call at end of classic BPF Daniel Sneddon Orabug: 37920681 - x86/bpf: Call branch history clearing sequence on exit Daniel Sneddon Orabug: 37920681 - selftest/x86/bugs: Add selftests f...
thunderbird security update
128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file - Force use of gcc-toolset-13 due to clang dependency 128.10.0 - Add OpenELA debranding 128.10.0-1 - Update to 128.10.0 build1...
java-1.8.0-openjdk security update
1:1.8.0.442.b06-1.0.3 - Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 Orabug: 37840723...
emacs security update
1:27.2-11.el95.2 - Fix arbitrary code execution via Lisp macro expansion RHEL-69395...
python39:3.9 security update
modwsgi 4.7.1-7.1 - Resolves: RHEL-87514 - CVE-2022-2255 python39:3.9/modwsgi: Trusted Proxy Headers Removing Bypass numpy python39 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python-ply python-psutil python-psycopg2...
Unbreakable Enterprise kernel security update
5.4.17-2136.343.5.1 - nvme: fix deadlock between reset and scan Bitao Hu Orabug: 37920457 5.4.17-2136.343.5 - sctp: sysctl: authenable: avoid using current-nsproxy Matthieu Baerts NGI0 Orabug: 37846673 - sctp: sysctl: cookiehmacalg: avoid using current-nsproxy Matthieu Baerts NGI0 Orabug: 3784666...
Unbreakable Enterprise kernel security update
5.15.0-308.179.6 - net: bridge: IP defragmentation failing for jumboframes Venkat Venkatsubra Orabug: 37847171 - uek-rpm: remove .el9 from shim version Samasth Norway Ananda Orabug: 37834731 - RDS: avoid using offlined CPU during reconnect Arumugam Kolappan Orabug: 37783021 - net/mlx5e: Rely on...