11088 matches found
thunderbird security update
140.17.0-1.0.1 - Add Oracle prefs 140.17.0-1 - Update to 140.17.0 ESR...
kernel security, bug fix, and enhancement update
5.14.0-687.56.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
nodejs:22 security update
nodejs 1:22.23.2-2 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 1:22.23.2-1 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 1:22.23.1-3 - deps:...
curl security update
8.12.1-4.el102.7 - fix http2 stream dependency tracking security issue CVE-2026-10536 - fix negotiate state check on connection reuse CVE-2026-5545 - fix proxy auth not cleared on proxy change CVE-2026-7168 - fix credentials not cleared on redirect CVE-2026-6253 - fix HTTP credentials leak on...
libxml2 security update
2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184...
curl security update
7.76.1-40.el98.8 - fix cookie injection via trailing dot super cookies CVE-2026-8924 - fix digest auth state leak on origin or credential change CVE-2026-11856...
cjose security update
0.6.2.2-7.2 - Fix CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption Resolves: RHEL-276901...
tftp security update
5.2-40.1 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260629...
flatpak-builder security update
1.2.3-1.1 - Disable git hooks when applying patches CVE-2026-86320 Resolves: RHEL-262193...
emacs security update
1:26.1-15.2 - Fix TRAMP user name shell injection vulnerability CVE-2026-79992 - Resolves: RHEL-248545 1:26.1-15.1 - Fix integer overflow in PBM image loader CVE-2026-77219 - Resolves: RHEL-248064...
mod_auth_openidc security update
2.4.16.11-1.1 - Resolves: RHEL-248048 - CVE-2026-54789 out-of-bounds read/write in oidcstatecookiescleanexpired when a state-prefixed cookie token contains no '=' separator...
mod_auth_openidc security update
1.8.8-9.0.1 - Backport fix for CVE-2026-54789 Orabug: 40056267...
Unbreakable Enterprise kernel security update
5.15.0-325.221.6.1 - x86/kexec: Add EFI config table identity mapping for kexec kernel Tao Liu Orabug: 40127851 - KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Sean Christopherson Orabug: 40127747 CVE-2026-80726 5.15.0-325.221.6 - scsi: qla2xxx: Preserve PURLS head o...
mod_auth_openidc:2.3 security update
cjose 0.6.1-5 - CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap Resolves: RHEL-256961 modauthopenidc 2.4.9.4-9 - Resolves: RHEL-248080 CVE-2026-54789 Denial of Service via malformed state cookie parsing...
sssd security update
2.12.0-3.0.1.el102.2 - Restore default debug level for ssscache Orabug: 32810448 2.12.0-3.2 - Resolves: RHEL-257112 - CVE-2026-87853 sssd: IDP prefix-match bypass in evalaccesstokenbuf 2.12.0-3.1 - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tre...
tftp security update
5.2-28 - fix buffer overflow in remap genmatchstring with inverse rules CVE-2026-85234 RHEL-260620...
kernel security update
4.18.0-553.172.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
python3.12 security update
3.12.15-1.0.1 - Remove upstream URL reference 3.12.15-1 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix fo...
python3.14 security update
3.14.8-1 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274141...
dovecot security update
1:2.3.21-19.8 - fix CVE-2026-33605: ManageSieve: denial of service via lone CR character causing protocol deadlock RHEL-251984 1:2.3.21-19.7 - fix CVE-2026-42007: fix use-after-free and info leak in sieve editheader extension RHEL-251945 1:2.3.21-19.6 - fix CVE-2026-40018: incorrect escaping of...
python3.12 security update
3.12.15-1.0.1 - Remove upstream URL reference 3.12.15-1 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix fo...
kernel security, bug fix, and enhancement update
6.12.0-211.64.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
kbd security update
2.0.4-11.1 - Fix CVE-2026-72693: openvt -u process matching more conservative Resolves: RHEL-235979...
bind9.16 security, bug fix, and enhancement update
32:9.16.23-0.22-16 - Backport 'Do not use headerprev in expirelruheaders' from upstream. 32:9.16.23-0.22-15 - Reenable unit tests during build 32:9.16.23-0.22.14 - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NS...
firefox security update
140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.17.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.17.0-1 - Update to 140.17.0 ESR...
openssl security update
3.5.8-2.0.1 - Replace upstream references Orabug: 34340177 1:3.5.8-2 - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264479...
dogtag-pki security update
11.9.0-6.0.1 - Treat Oracle Linux the same as RHEL when selecting the Tomcat app server version. 11.9.0-8 - Update jackson bundled to 2.21.6 - Resolves: RHEL-259220...
kernel security, bug fix, and enhancement update
6.12.0-211.63.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
perl-DBI security update
1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271960...
kernel security, bug fix, and enhancement update
5.14.0-687.56.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
openssl security update
3.5.8-2.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-2 - Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Resolves: RHEL-264466...
bind security update
32:9.11.36-16.16 - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs CVE-2026-80274 - Reject oversized negative cached records early CVE-2026-19667...
python3.14 security update
3.14.8-1 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274128...
cjose security update
0.6.2.2-7.1 - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962...
rust-sequoia-sq security, bug fix, and enhancement update
1.4.0.1-2.0.1 - Put 'Requires' openssl-libs in correct placeholder Orabug: 38742109 - Hard require needed openssl-libs Orabug: 38742109 1.4.0.1-2 - Introduce alias for ML-DSA keys during key generation 1.4.0.1-1 - Update to 1.4.0 and fix CVE-2026-42784 1.3.1.1-2 - Remove bundled capnproto...
firefox security update
140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.17.0-1 - Update to 140.17.0 ESR...
virtuoso-opensource security update
1:6.1.6-7.0.3 - Backport fix for CVE-2025-61021 Orabug: 40002840 1:6.1.6-7.0.1 - Back port fix for CVE-2024-57656 Orabug:37856848...
Unbreakable Enterprise kernel security update
5.15.0-325.220.5 - octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng Orabug: 39951718 - batman-adv: Remove stale reason member from batadvtpvars Vijayendra Suman Orabug: 39966037 - Revert 'octeontx2-pf: Fix leak of SQ timestamp buffer on teardown' Vijayendra Suman Orabug: 39967930 -...
python3.12 security update
3.12.15-1 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for...
rust-rpm-sequoia security update
1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784...
freerdp security update
2:2.11.7-7.8 - Backport several CVE fixes CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964 Resolves: RHEL-260758, RHEL-260785, RHEL-260803, RHEL-260849, RHEL-260871 Resolves: RHEL-260902...
sg3_utils security, bug fix, and enhancement update
1:1.37-19.0.3 - Backport fix for CVE-2026-16313 Orabug: 40020335...
firefox security update
140.17.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.17.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.17.0-1 - Update to 140.17.0 ESR...
Unbreakable Enterprise kernel security update
6.12.0-207.111.5.1 - selftests/mm/khugepaged: include kselftest.h in khugepaged Sherry Yang Orabug: 40099804 6.12.0-207.111.5 - Rename ONOS kernel flavor to OSP for OL9 and OL10 Vijay Kumar Orabug: 40055216 - tcp: Remove hashinfo test for inet6?lookuprunsklookup. Kuniyuki Iwashima Orabug: 4005230...
perl-DBI security update
1.643-9.7 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271974...
vim security update
8.0.1763-32.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-32 - RHEL-271024 vim: vim: Ex command injection via crafted filename in signjump 2:8.0.1763-32 - RHEL-257017 CVE-2026-73073 arbitrary Ex...
perl-DBI security update
1.643-26.7 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271970...
rust-sequoia-sqv security update
1.3.0.2-1 - Update openpgp crate to fix CVE-2026-42784...
Unbreakable Enterprise kernel security update
5.4.17-2136.360.3 - IB/mlx4: delete allocated idmapentry while sending REJ Praveen Kumar Kannoju Orabug: 39999072 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 399821...