xterm security update

253-1.0.1 - fix xutf8.h to work with up-to-date Xlib - fix crash in combining character support CVE-2021-27135 orabug 32496959...

perl security update

4:5.26.3-417 - Fix CVE-2020-12723 bug 1909860 - Fix Time-Local tests to pass after year 2019 bug 1807120...

xterm security update

331-1.2 - Fix issue found by covcan - Related: rhbz1927567 331-1.1 - Backport security fix for CVE-2021-27135 - Resolves: rhbz1927567...

Unbreakable Enterprise kernel-container security update

...

nss security and bug fix update

3.53.1-17 - Fix various corner cases with ike v1 app b support. 3.53.1-16 - Fix the following CVE - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. 3.53.1-15 - Revert some policy changes the generate ABI runtime issues. 3.53.1-14 - Add...

kernel security, bug fix, and enhancement update

4.18.0-240.15.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x6...

Unbreakable Enterprise kernel-container security update

5.4.17-2036.103.3.1.el7 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 - xen-netback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 -...

Unbreakable Enterprise kernel security update

4.1.12-124.48.3.1 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492113 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich Orabug: 32492105 CVE-2021-26931 - xen-netback: don't 'handle' error by BUG Jan Beulich Orabug: 32492105 CVE-2021-26931 -...

Unbreakable Enterprise kernel security update

5.4.17-2036.103.3.1uek - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 - xen-netback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 -...

Unbreakable Enterprise kernel security update

4.14.35-2047.500.9.1 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 - xen-netback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 -...

dotnet security and bugfix update

2.1.521-1 - Update to .NET Core SDK 2.1.521 and Runtime 2.1.25 - Resolves: RHBZ1922272...

dotnet3.1 security and bugfix update

3.1.112-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.112-1 - Update to .NET Core SDK 3.1.112 and Runtime 3.1.12 - Resolves: RHBZ1923377...

dotnet5.0 security and bugfix update

5.0.103-1.0.1 - Add support for new Oracle release 5.0.103-1 - Update to .NET SDK 5.0.103 and Runtime 5.0.3 - Resolves: RHBZ1924765...

olcne security update

kubernetes 1.18.10-3 - Kata CVE-2020-28914 kata-proxy 1.11.5-1 - Added Oracle Specific Build Files for kata-proxy kata-shim 1.11.5-1 - Added Oracle Specific Build Files for kata-shim kata-ksm-throttler 1.11.5-1 - Added Oracle Specific Build Files for kata-ksm-throttler kata-runtime 1.11.5-1 - Add...

olcne security update

kata-runtime 1.7.3-1.0.7 - Address CVE-2020-28914 kata 1.7.3-1.0.12 - UEKR6 guest kernel support 1.7.3-1.0.11 - Address CVE-2020-28914 kubernetes 1.17.9-1.0.6 - Kata CVE-2020-28914 olcne 1.1.10-1 - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.54.1 - mwifiex: Fix possible buffer overflows in mwifiexcmd80211adhocstart Zhang Xiaohui Orabug: 32349209 CVE-2020-36158...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.54.1 - mwifiex: Fix possible buffer overflows in mwifiexcmd80211adhocstart Zhang Xiaohui Orabug: 32349209 CVE-2020-36158...

Unbreakable Enterprise kernel security update

2.6.39-400.330.1 - mwifiex: Fix possible buffer overflows in mwifiexcmd80211adhocstart Zhang Xiaohui Orabug: 32349211 CVE-2020-36158 2.6.39-400.329.1 - Fonts: Support FONTEXTRAWORDS macros for built-in fonts Peilin Ye Orabug: 32176268 CVE-2020-28915 - fbdev, newportcon: Move FONTEXTRAWORDS macros...

flatpak security update

1.0.9-10 - Fix CVE-2021-21261 1918771...

qemu security update

15:4.2.1-4.el7 - Document CVE-2020-25723 as fixed Mark Kanda Orabug: 32222397 CVE-2020-25084 CVE-2020-25723 - hw/net/e1000e: advance descoffset in case of null descriptor Prasad J Pandit Orabug: 32217517 CVE-2020-28916 - i386: Add 2nd Generation AMD EPYC processors Moger, Babu Orabug: 32217570 -...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.405.3.el7 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280 4.14.35-2025.405.2.el7 - nfs: Fix security label length not being reset Jeffrey Mitchell Orabug: 32350995 4.14.35-2025.405.1.el7 - net/rds: Fix gfpt parameter Hans Westgaard Ry Orabug: 32372162...

Unbreakable Enterprise kernel security update

4.14.35-2025.405.3 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280 4.14.35-2025.405.2 - nfs: Fix security label length not being reset Jeffrey Mitchell Orabug: 32350995 4.14.35-2025.405.1 - net/rds: Fix gfpt parameter Hans Westgaard Ry Orabug: 32372162 - uek-rpm:...

Unbreakable Enterprise kernel-container security update

5.4.17-2036.103.3.el7 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426610 5.4.17-2036.103.2.el7 - A/A Bonding: Fix a one-byte-off kmalloc Hakon Bugge Orabug: 32380824 - netfilter: add and use nfhookslowlist Florian Westphal Orabug: 32372530 CVE-2021-20177 - net/rds: F...

Unbreakable Enterprise kernel security update

5.4.17-2036.103.3 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426610 5.4.17-2036.103.2 - A/A Bonding: Fix a one-byte-off kmalloc Hakon Bugge Orabug: 32380824 - netfilter: add and use nfhookslowlist Florian Westphal Orabug: 32372530 CVE-2021-20177 - net/rds: Fix gfpt...

glibc security and bug fix update

2.17-322.0.2 - merge RH el7 u9 errata patches with Oracle patches Review-exception: Simple merge - merge RH el7 u9 patches with Oracle patches Review-exception: Simple merge - Four patches to match 3rd patch bundle from Marvell - modify MIPS values in elf/elf.h - add sysdeps/aarch64/sys/ifunc.h -...

qemu-kvm security and bug fix update

1.5.3-175.el79.3 - kvm-Suppress-prototype-warning-for-nss-headers.patch bz1884997 - Resolves: bz1884997 qemu-kvm FTBFS on rhel7.9 1.5.3-175.el79.2 - kvm-hw-net-vmxnettxpkt-fix-assertion-failure-in-vmxnet.patch bz1860960 - kvm-hw-core-loader-Fix-possible-crash-in-romcopy.patch bz1842923 - Resolves...

kernel security, bug fix, and enhancement update

3.10.0-1160.15.2.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.3 3.10.0-1160.15.2 - fs nfs: Fix...

perl security update

4:5.16.3-299 - Fix CVE-2020-10543 bug 1839272 - Fix CVE-2020-10878 bug 1839275 4:5.16.3-298 - Fix CVE-2020-12723 bug 1839278...

Unbreakable Enterprise kernel security update

4.1.12-124.47.3 - sysctl: handle overflow in procgetlong Christian Brauner Orabug: 31588015 4.1.12-124.47.2 - mwifiex: Fix possible buffer overflows in mwifiexcmdappendvsietlv Qing Xu Orabug: 31350932 CVE-2020-12653 - lockd: don't use interval-based rebinding over TCP Calum Mackay Orabug: 3143570...

flatpak security update

1.6.2-5 - Fix CVE-2021-21261 1918774...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.404.1.2.el7 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280...

Unbreakable Enterprise kernel-container security update

4.14.35-2025.404.1.2.el7 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280...

Unbreakable Enterprise kernel security update

4.14.35-2025.404.1.2 - Revert 'rds: Deregister all FRWR mr with freemr' aru kolappan Orabug: 32426280...

thunderbird security update

78.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.7.0-1 - Update to 78.7.0...

thunderbird security update

78.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.7.0-1 - Update to 78.7.0...

firefox security update

78.7.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.7.0-2 - Update to 78.7.0 build2 78.7.0-1 - Update to 78.7.0 build1...

firefox security update

78.7.0-2.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 78.7.0-2 - Update to 78.7.0 build2 78.7.0-1 - Update to 78.7.0 build1...

sudo security update

1.8.23-10.1 - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz1917729...

sudo security update

1.8.29-6.1 - RHEL 8.3.Z ERRATUM - CVE-2021-3156 Resolves: rhbz1917732...

sudo security update

1.8.6p3-29.0.2.el610.3 - backport the fix CVE-2021-3156.patch from ol7...

dnsmasq security update

2.79-13.1 - Fix various issues in dnssec validation CVE-2020-25681 - Accept responses only on correct sockets CVE-2020-25684 - Use strong verification on queries CVE-2020-25685...

dnsmasq security update

2.76-16.1 - Accept responses only on correct sockets CVE-2020-25684 - Use strong verification on queries CVE-2020-25685 - Handle multiple identical DNS queries better CVE-2020-25686 - Link against nettle for sha256 hash implementation...

xstream security update

1.3.1-12 - Rebuild with OpenJDK 7 1.3.1-11 - Fix remote code execution vulnerability - Resolves: CVE-2020-26217...

dotnet3.1 security and bugfix update

3.1.111-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.111-1 - Update to .NET Core SDK 3.1.111 and Runtime 3.1.11 - Resolves: RHBZ1907633...

dotnet5.0 security and bugfix update

5.0.102-2.0.1 - Add support for new Oracle release 5.0.102-2 - Rebuild with updated tests - Resolves: RHBZ1912684 5.0.102-1 - Update to .NET SDK 5.0.102 and Runtime 5.0.2 - Resolves: RHBZ1912684...

thunderbird security update

78.6.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.6.1-1 - Update to 78.6.1...

thunderbird security update

78.6.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.6.1-1 - Update to 78.6.1...

Unbreakable Enterprise kernel-container security update

5.4.17-2036.102.0.2.el7 - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253409 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch SeongJae...

Unbreakable Enterprise kernel security update

5.4.17-2036.102.0.2uek - xen-blkback: set ring-xenblkd to NULL after kthreadstop Pawel Wieczorkiewicz Orabug: 32260252 CVE-2020-29569 - xenbus/xenbusbackend: Disallow pending watch messages SeongJae Park Orabug: 32253409 CVE-2020-29568 - xen/xenbus: Count pending messages for each watch SeongJae...

Unbreakable Enterprise kernel security update

4.1.12-124.46.4.1 - target: fix XCOPY NAA identifier lookup Mike Christie Orabug: 32248041 CVE-2020-28374 4.1.12-124.46.4 - xen/events: block rogue events for some time Juergen Gross Orabug: 31984335 CVE-2020-27673 - xen/events: defer eoi in case of excessive number of events Juergen Gross Orabug...