10033 matches found
curl security update
8.12.1-4.4 - fix proxy environment variable change detection CVE-2026-8927 8.12.1-4.el102.3 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - fix proxy connection reuse with wrong credentials CVE-2026-3784...
389-ds-base security update
2.8.0-9 - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser rhel-9.8.z - Resolves:...
curl security update
8.12.1-4.4 - fix proxy environment variable change detection CVE-2026-8927 8.12.1-4.el102.3 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - fix proxy connection reuse with wrong credentials CVE-2026-3784...
curl security update
7.76.1-40.el98.5 - fix missing %patch macros for Patch46 and Patch47 7.76.1-40.el98.4 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - tests: disable flaky test 1206 on x8664 FTP PORT timeout under valgrind...
gstreamer1-plugins-good security update
1.22.12-7.4 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 1.22.12-7.3 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060...
nodejs22 security update
1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 1:22.23.1-6 - Fix for CVE-2026-69152 1:22.23.1-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:22.23.1-4 - Fix CVE-2026-13149 npm/brace-expansion 1:22.23.1-3 - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 node-tar...
libssh security update
0.12.0-3 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175...
.NET 9.0 security, bug fix, and enhancement update
9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235473...
grafana security update
10.2.6-23.1 - fix CVE-2026-42127: cap request body size and validate public dashboard access - Resolves RHEL-219382...
ruby4.0 security, bug fix, and enhancement update
4.0.6-36 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211310 Resolves: RHEL-193660...
ruby security, bug fix, and enhancement update
3.3.12-14 - Upgrade to Ruby 3.3.12. Resolves: RHEL-211300 Resolves: RHEL-193659...
nodejs:24 security update
nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...
nodejs:22 security update
nodejs 1:22.23.1-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 1:22.23.1-3 - Backport patch: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-224135 RHEL-224144 1:22.23.1-2 -...
xorg-x11-server security update
1.20.4-29.0.9 - Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 Orabug: 39695293 Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0.7 - Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472...
.NET 9.0 security, bug fix, and enhancement update
9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477...
nghttp2 security update
1.68.0-3.2 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055...
java-17-openjdk security update
1:17.0.20.0.8-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.0.8-1.1 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Add .0 to prelease 1:17.0.20.0.8-1.1 - Sync NEWS from private-gnuandrew-rhel-8.5-vanilla 1:17.0.20.0.8-1.1 - Set tzdata requires and build...
python-idna security update
3.7-6 - Fix CVE-2026-45409: quadratic time complexity in IDNA validation 3.7-5 - rpminspect: Disable the unicode inspection...
bind security update
9.16.23-40.0.1.el98.8 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-40.8 - Fix NSEC3 signer validation CVE-2026-10723 32:9.16.23-40.7 - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names 32:9.16.23-40.6 - Fix RPZ name-too-long wildcard expansion...
bind9.16 security update
32:9.16.23-0.22.12 - Fix NSEC3 signer validation CVE-2026-10723 - Resolves: RHEL-213499 32:9.16.23-0.22.11 - Reject out-of-zone NSEC next owner names CVE-2026-13321 - Resolves: RHEL-213313 32:9.16.23-0.22.10 - Fix CVE-2026-11622: reference-counted DNS cache slab headers - Resolves: RHEL-213396...
bind security update
32:9.11.36-16.14 - Validate NSEC3 signer matches owning zone CVE-2026-10723 32:9.11.36-16.12 - Prevent accepting unsigned NSEC/NSEC3 records CVE-2026-13204 32:9.11.36-16.11 - Reject out-of-zone NSEC entries in DNSSEC validation CVE-2026-13321 32:9.11.36-16.10 - Reject RRSIG records with invalid...
kernel security, bug fix, and enhancement update
5.14.0-687.39.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
dhcpcd security update
10.0.6-11 - Fix CVE-2026-14258...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471...
osbuild-composer security update
176-1.0.1 - Track github upstream...
freerdp security update
2:3.10.3-12.8 - Backport several CVE fixes CVE-2026-64620, CVE-2026-64621, CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983, Resolves: RHEL-223604...
freerdp security update
2:2.11.7-11 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213173, RHEL-222796, RHEL-222972, RHEL-223606...
dracut security update
049-246.git20260728.0.1 - Refactor getucodefile Orabug: 36989953 - Revert the fixes for bugs 33676753 and 33888951 due to regressions Orabug: 35656614 - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch Orabug: 35268918 - Enable the code to create ifcfg file Orabug:...
kernel security, bug fix, and enhancement update
6.12.0-211.47.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
iscsi-initiator-utils security, bug fix, and enhancement update
6.2.1.11-1.git4b3e853.0.1.el98.2 - iscsi validate interface IP against target address family Orabug: 39491394 - iscsi delay reconnect until interface has valid IP Orabug: 38441836 - Correct the typos in email addresses in changelog in OL9.5 Orabug: 37910459 - Change the order of restart iscsi...
nghttp2 security update
1.43.0-6.2 - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055...
iscsi-initiator-utils security, bug fix, and enhancement update
6.2.1.11-1.git4b3e853.0.1.el102.2 - Validate interface IP against target address family Orabug: 39491397 - iscsi delay reconnect until interface has valid IP Orabug: 38445491 - Change the order of restart iscsi services in spec file Orabug: 37749406 - Change the loglevel of logdebug message in...
kernel security update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
dracut security update
107-9.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...
grafana security update
9.2.10-32.0.1.el810.1 - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 9.2.10-32.1 - Resolves RHEL-219393: CVE-2026-42127 - Resolves RHEL-211017: CVE-2026-33377...
dracut security update
057-120.git20260728.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship Oracle IMA certificate Orabug: 35992862 - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate Orabug: 35992862 -...
gnome-remote-desktop security update
49.3-4 - Backport connection throttling...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468...
.NET 10.0 security, bug fix, and enhancement update
10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478...
freerdp security update
2:2.11.7-7.5 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605...
python-idna security update
2.10-8 - Security fix for CVE-2026-45409 Resolves: RHEL-215653...
gstreamer1-plugins-good security update
1.10.4-2.0.5 - Fix CVE-2026-53705 Orabug: 39822536 1.10.4-2.0.3 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326 1.10.4-2.0.1 - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and - CVE-2024-47607 Orabug: 37407070...
pipewire security update
1.4.11-1 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828...
glib2 security update
2.56.1-9.0.7 - Fixes CVE-2026-58016 Orabug: 39844471 2.56.1-9.0.5 - Fixes CVE-2025-14078 gvariant parser buffer underflow Orabug: 39418716 2.56.1-9.0.3 - Fixes CVE-2025-13601 gescapeuristring overflow Orabug: 38909821 2.56.1-9.0.1 - Fix overflow of GDBusConnection serial Orabug: 38666376...
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
isns-utils security update
0.99-1.1 - Fix double-free vulnerabilities in attrs.c error paths CVE-2026-55995...
perl-DBI:1.641 security update
perl-DBI 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 Resolves: RHEL-193298 1.641-5 - Fix stack overflow and buffer overflow in DBI.x...
grafana security, bug fix, and enhancement update
10.2.6-28.4 - Resolves RHEL-211020: CVE-2026-33377 10.2.6-28.3 - Resolves RHEL-211376: CVE-2026-8609 10.2.6-28.2 - Resolves RHEL-210981: CVE-2026-33376 10.2.6-28.1 - Resolves RHEL-211389: CVE-2026-33382 10.2.6-28 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build...