ghostscript security update

9.27-19 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via...

lrzsz security, bug fix, and enhancement update

0.12.20-46 - Fix long-standing SIGSEGV bug when using the -s parameter without an argument RHEL-282148 0.12.20-45 - Backport tightened path handling from 0.13.1 CVE-2026-105840 0.12.20-44 - Remove 'Topipe' feature. CVE-2026-105841...

python36:3.6 security update

python36 3.6.8-39 - Provide /usr/bin/python3 explicitly - Resolves: RHEL-2113 python-distro 1.4.0-2 - Port from Fedora to RHEL8, part of the python36 module - Resolves: rhbz1678920 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils...

kernel security, bug fix, and enhancement update

4.18.0-553.174.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

wireshark security update

1:3.4.10-10.4 - Fix DoS via heap-based buffer overflow in SPDY dissector CVE-2026-95387 - Resolves: RHEL-272330 1:3.4.10-9.4 - Fix DoS vulnerability in H.245 protocol dissector CVE-2026-76927 - Resolves: RHEL-257656 1:3.4.10-9.3 - Fix DoS vulnerability in ESS protocol dissector CVE-2026-76919 -...

ghostscript security update

9.54.0-19.3 - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 9.54.0-19.2 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB...

libsoup security update

2.72.0-16.8 - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion 2.72.0-16.7 - CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth 2.72.0-16.6 - CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during...

ghostscript security update

10.02.1-16.3 - CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data 10.02.1-16.2 - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bypass via Type 5 shading OOB wri...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.3 - mm/pagewalk: fix stale walk-action escaping walkpmdrange Hyunwoo Kim Orabug: 40157478 CVE-2026-89754 - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157474 CVE-2026-98260 6.12.0-207.111.5.2 - PCI: Fix BAR resize for devices on a root bus Liz Fong-Jones...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.3 - exec: Cleanup POSIX timers right after dethread Hyunwoo Kim Orabug: 40157515 CVE-2026-98260 5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug:...

libsoup3 security update

3.6.5-20 - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly 3.6.5-19 - CVE-2026-102556 libsoup3: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion 3.6.5-18 - CVE-2026-102558 libsoup3: libsoup: Heap buffer overflow during WebSocket...

gstreamer1-plugins-base security update

1.10.4-2.0.5 - Backport fix for CVE-2026-18297 Orabug: 40057731 1.10.4-2.0.3 - Security update for CVE-2026-2921 Orabug: 39199326 1.10.4-2.0.1 - Fixed CVE-2024-47607,CVE-2024-47538 and CVE-2024-47615 Orabug: 37407070...

389-ds-base security, bug fix, and enhancement update

1.3.11.1-5.0.15 - Backport fix for CVE-2026-18453 Orabug: 39993665 - Backport fix for CVE-2026-18355 Orabug: 39993665 - Backport fix for CVE-2026-18922 Orabug: 39993665 - Backport fix for CVE-2026-76560 Orabug: 39993665 1.3.11.1-5.0.13 - Security update for CVE-2026-11770 CVE-2026-11788...

compat-libtiff3 security update

3.9.4-12.0.5 - Backport fix for CVE-2026-12912 Orabug: 39957703 3.9.4-12.0.3 - Backport fix for CVE-2026-4775 Orabug: 39535879 3.9.4-12.0.1 - Fixes CVE-2025-9900 buffer underflow Orabug: 38523840...

gstreamer1-plugins-good security update

1.10.4-2.0.7 - Backport fix for CVE-2026-18295 Orabug: 40083058 - Backport fix for CVE-2026-18296 Orabug: 40083058 - Backport fix for CVE-2026-18298 Orabug: 40083058 - Backport fix for CVE-2026-18299 Orabug: 40083058 1.10.4-2.0.5 - Fix CVE-2026-53705 Orabug: 39822536 1.10.4-2.0.3 - Security updat...

kernel security update

4.18.0-553.173.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

gstreamer1-plugins-bad-free security update

1.10.4-4.0.7 - Backport fix for CVE-2026-19387 Orabug: 40030729 1.10.4-4.0.5 - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 1.10.4-4.0.3 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 1.10.4-4.0.1 - Security update for CVE-2026-3082 Orabug: 39199326...

kernel security update

5.14.0-687.57.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

python-tornado security update

6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870...

tftp security update

5.2-50.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260604...

OpenEXR security update

2.2.0-12.3 - fix CVE-2026-59184 - fix CVE-2026-59981 - fix CVE-2026-59189 - fix CVE-2026-59186 2.2.0-12.2 - fix CVE-2026-68515...

pcre2 security update

10.44-1.5.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.44-1.5 - Fix and bump release, resolve the issue of build not attaching to errata 10.44-1.4 - Backport CVE fixes for CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161...

flatpak security update

1.12.9-4.0.1 - Restore the flatpak-builder 1.0.0 subpackage Orabug: 40105180 - Move flatpak-session-helper back into flatpak Orabug: 40105180 1.12.9-4 - Import to OL7 Orabug: 39695281 1.12.9-4 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165633 - Fi...

microcode_ctl security, bug fix, and enhancement update

20260812-1.0.2 - disable late update for 06-ad-01 20260812-1.0.1 - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized - ensure UEK also rebuilds initramfs - enable early update for 06-4f-01 - enable early and late load on RHCK 4:20260812-1 - Update Intel CPU...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug: 39784995 - eventpoll: rename epremovesafe back to epremove Christian Brauner Orabug: 39784995 - eventpoll: drop...

libreoffice security update

7.1.8.1-15.0.1.el98.3 - Added the --with-hamcrest option to configure. - Replace colors with Oracle colors Orabug: 32120093 1:7.1.8.1-15.el98.3 - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in...

xorg-x11-server security update

1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169...

thunderbird security update

140.17.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.17.0 - Add OpenELA debranding 140.17.0-1 - Update to 140.17.0 ESR...

python-tornado security update

6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274866...

librabbitmq security update

0.11.0-7.1 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service rhel-8.10.z to denial of service rhel-8.10.z Resolves: RHEL-266750...

kernel security, bug fix, and enhancement update

6.12.0-211.65.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

pcre2 security update

10.40-7.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.40-7 - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161...

hplip security update

3.26.6-3 - Fix LEDM scanning 3.26.6-2 - fix OSH issues 3.26.6-1 - Rebase to 3.26.6...

gd security update

2.3.2-3.1 - Fix buffer overflow and use of uninitialized memory in GIF decoding CVE-2026-9672 Related: RHEL-259613...

microcode_ctl security, bug fix, and enhancement update

20260812-1.0.2 - disable late update for 06-ad-01 20260812-1.0.1 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710094 - ensure UEK also rebuilds initramfs Orabug: 34280058 - enable early update for 06-4f-01 - remove no longer appropriate...

flatpak-builder security update

1.2.3-2 - Disable git hooks when applying patches CVE-2026-86320 Resolves: RHEL-262183...

environment-modules security update

5.6.1-2.1 - fix command injection in bash Tab completion CVE-2026-85013 RHEL-260562...

gd security update

2.3.3-20.1 - Fix LZW decompression in GIF handling CVE-2026-9672 Resolves: RHEL-259570...

dovecot security update

1:2.3.16-18.8 - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character RHEL-251989 1:2.3.16-18.7 - fix CVE-2026-42007: use-after-free in pigeonhole editheader RHEL-251952 1:2.3.16-18.6 - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands...

pcre2 security update

10.32-4 - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage...

rsyslog security update

8.2102.0-15.0.1.el810.3 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2102.0-15.3 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246632 8.2102.0-15.2 - Backport: imptcp: guard regex-framing match against...

flatpak security update

1.16.0-9.4 - Avoid symlink path traversal in revokefs writer CVE-2026-96808 Resolves: RHEL-267891 - Prevent arbitrary write as root via extra-data extraction CVE-2026-96275 Resolves: RHEL-267432 - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271519 1.16.0-9....

flatpak-builder security update

1.4.4-1.1 - Disable git hooks when applying patches CVE-2026-86320 Resolves: RHEL-262185...

nodejs:22 security update

nodejs 1:22.23.2-2 - Patches pacote CVE and updates undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259888 RHEL-255268 nodejs-nodemon 3.1.14-2 - Rebase npm/brace-expansion to 5.0.9 Fixes: CVE-2026-69152 Resolves: RHEL-223760 nodejs-packaging 2021.06-4 - Exclude ix86 arches fro...

compat-openssl10 security update

1:1.0.2o-4.4 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

flatpak security update

1.12.9-4.4 - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271518 1.12.9-4.3 - Avoid symlink path traversal in revokefs writer CVE-2026-96808 Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction CVE-2026-96275 Resolves: RHEL-26743...

flatpak security update

1.12.9-7 - Use gsize for OCI delta sizes and harden delta parser CVE-2026-96280 Resolves: RHEL-271507 1.12.9-6 - Avoid symlink path traversal in revokefs writer CVE-2026-96808 Resolves: RHEL-267897 - Prevent arbitrary write as root via extra-data extraction CVE-2026-96275 Resolves: RHEL-267425...

jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update

jackson-core 2.21.6-1 - Rebase to version 2.21.6 - Resolves: RHEL-259227 jackson-databind 2.21.6-1 - Rebase to version 2.21.6 - Resolves: RHEL-259227 jackson-jaxrs-providers 2.21.6-1 - Rebase to version 2.21.6 - Resolves: RHEL-259227 jackson-modules-base 2.21.6-1 - Rebase to version 2.21.6 -...

emacs security update

1:27.2-18.el98.2 - Fix integer overflow in pbmload image validation RHEL-248067 1:27.2-18.el98.1 - Restrict Tramp user name to fix CVE-2026-79992 RHEL-248552...

compat-openssl11 security update

1:1.1.1k-5.6 - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 1:1.1.1k-5.5 - Fixes CVE-2026-63072: Heap buffer overflow in CMS key unwrapping Resolves: RHEL-246280...