5,088 results · Clear filters · Feed
-
High max 7.5ELSA-2026-19133 4 CVEs
Important: git-lfs security update (Oracle Linux 10)
[3.7.1-6] - Rebuild with new Golang [3.7.1-5] - Fix CVE-2026-39821 in vendored golang.org/x/net idna package [3.7.1-4] - Rebuild with new Golang
-
High max 8.6ELSA-2026-19146 1 CVE
Important: openexr security update (Oracle Linux 10)
[3.1.10-8.3] - fix CVE-2026-41142 - fix CVE-2026-42216 [3.1.10-8.2] - fix CVE-2026-34588
-
High max 9.1ELSA-2026-23231 3 CVEs
Important: unbound security update (Oracle Linux 10)
[1.24.2-15] - Fix CVE-2026-42534: Jostle logic bypass degrades resolution performance [1.24.2-14] - Fix CVE-2026-41292: DoS via excessive EDNS options [1.24.2-13] - Add upstream unit test for CVE-2026-40622 [1.24.2-12] - Fix CVE-2026-44390: DoS with large RRs…
-
High max 7.5ELSA-2026-24716 3 CVEs
Important: yggdrasil security update (Oracle Linux 10)
[0.4.9.2-1] - Update yggdrasil to 0.4.9.2 [0.4.9.1-1] - Update yggdrasil to 0.4.9.1 [0.4.9-5] - Bump release for rebuild [0.4.9-4] - Bump release for rebuild [0.4.9-3] - Bump release for rebuild
-
High max 7.5ELSA-2026-26456 1 CVE
Important: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 10)
[3.2.0-8] - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-10.2.z] - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overf…
-
High max 7.8ELSA-2026-32990 1 CVE
Important: cifs-utils security update (Oracle Linux 10)
[7.6-2] - resolves: RHEL-192935 - fix krb5 mount regression [7.6-1] - Update to version 7.6 - resolves: RHEL-185756 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego
-
High max 7.1ELSA-2026-42739 2 CVEs
Important: acl security update (Oracle Linux 10)
[2.4.0-1] - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207)
-
High max 8.1ELSA-2026-18289 1 CVE
Important: podman security update (Oracle Linux 10)
[5.8.2-5.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.8.2-5] - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 [7:5.8.2-4] - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-3…
-
High max 9.6ELSA-2026-18537 3 CVEs
Important: tomcat security update (Oracle Linux 10)
[1:10.1.49-3] - Related: RHEL-168577 Remove unnecessary patch [1:10.1.49-2] - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in Encrypt…
-
High max 7.5ELSA-2026-22120 11 CVEs
Important: golang security update (Oracle Linux 10)
[1.26.5-1.0.1] - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var [1.26.5-1] - Update to Go 1.26.5 (fips-1) [1.25.7-1] - Update to Go 1.25.7 (fips-1) [1.25.5-1] - Update to Go 1.25.5 (fips-1) [1.25.3-5] - gating.yaml: Add tier1 s390x tests [1.25.3-4] - Cl…
-
High max 9.3ELSA-2026-26228 2 CVEs
Important: hplip security update (Oracle Linux 10)
[3.23.12-10.5] - RHEL-192007 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 [3.23.12-10.4] - Fix more leaks in hpcups [3.23.12-10.3] - OSH fixes after CVE-2026-8631 [3.23.12-10.2] - CVE-2026-8631 hplip: Arbitrary code execution and privilege escalatio…
-
High max 9.8
Important: kernel security update (Oracle Linux 10)
[6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.5ELSA-2026-42096 1 CVE
Important: c-ares security update (Oracle Linux 10)
[1.34.6-2] - Fix double-free in process_timeouts() (CVE-2026-33630) Resolves: RHEL-192867
-
High max 7.5ELSA-2026-29195 4 CVEs
Important: buildah security update (Oracle Linux 10)
[1.43.1-4.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.1-4] - rebuild for CVE-2026-39822 - Resolves: RHEL-193643 [2:1.43.1-3] - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Resolves: RHEL-186266 …
-
High max 8.8ELSA-2026-41899 17 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8)
[9.0.119-1.0.1] - Add support for Oracle Linux [9.0.119-1] - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192469
-
High max 8.8ELSA-2026-42088 23 CVEs
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.52.5-1] - Update to 2.52.5
-
High max 7.5ELSA-2026-42090 1 CVE
Important: glib2 security update (Oracle Linux 8)
[2.56.4-170] - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 [2.68.4-169] - Add patch for CVE-2025-14087 and CVE-2025-14512 [2.56.4-168] - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase [2.56.4-167] - gdb…
-
High max 7.7ELSA-2026-39868 15 CVEs
Important: nodejs:24 security, bug fix, and enhancement update (Oracle Linux 8)
nodejs [1:24.18.0-1] - Update to version 24.18.0 Resolves: RHEL-168744 nodejs-nodemon [3.0.3-1] - Initial import into nodejs:24 module nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121576 [2021.06-5] …
-
High max 8.8ELSA-2026-40841 1 CVE
Important: maven:3.8 security update (Oracle Linux 8)
apache-commons-cli [1.5.0-5] - Rebuild to regenerate auto-requires [1.5.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild [1.5.0-3] - Rebuilt for java-17-openjdk as system jdk [1.5.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedor…
-
High max 8.8ELSA-2026-41896 17 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 9)
[9.0.119-1.0.1] - Add support for Oracle Linux [9.0.119-1] - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 [9.0.118-2] - Reduce time to detect hanging builds - Resolves: RHEL-191646
-
High max 9.8ELSA-2026-41906 13 CVEs
Important: httpd security, bug fix, and enhancement update (Oracle Linux 9)
[2.4.62-13.0.1.el9_8.5] - Replace index.html with Oracle's index page oracle_index.html. [2.4.62-13.5] - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix [2.4.62-13.4] - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buff…
-
High max 8.8ELSA-2026-41898 17 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 9)
[10.0.110-1.0.1] - Add support for Oracle Linux [10.0.110-1] - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 [10.0.109-2] - Reduce time to detect hanging builds - Resolves: RHEL-191641
-
High max 8.8ELSA-2026-38796 1 CVE
Important: plexus-utils security update (Oracle Linux 9)
[3.3.0-14] - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165350
-
High max 8.8ELSA-2026-41894 17 CVEs
Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 9)
[8.0.129-1.0.1] - Add support for Oracle Linux [8.0.129-1] - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 [8.0.128-2] - Reduce time to detect hanging builds - Resolves: RHEL-191652
-
High max 4.3ELSA-2026-41905 1 CVE
Important: dovecot security update (Oracle Linux 9)
[1:2.3.16-18.1] - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468)
-
High max 8.8ELSA-2026-42062 23 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.52.5-1] - Update to 2.52.5
-
High max 7.5ELSA-2026-42089 1 CVE
Important: glib2 security update (Oracle Linux 9)
[2.68.4-19.2] - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632
-
High max 8.1ELSA-2026-40895 2 CVEs
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update (Oracle Linux 9)
jackson-annotations [2.21-1] - Update to version 2.21 - Resolves: RHEL-188300 jackson-core [2.21.4-1] - Update to version 2.21.4 - Resolves: RHEL-188300 jackson-databind [2.21.4-1] - Update to version 2.21.4 - Resolves: RHEL-188300 jackson-jaxrs-providers [2.…
-
High max 7.5ELSA-2026-25225 1 CVE
Important: mod_http2 security update (Oracle Linux 10)
[2.0.29-4.2] - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 [2.0.29-4.1] - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.29-4] - Resolves: RHEL-16626…
-
High max 7.5ELSA-2026-41892 2 CVEs
Important: libtiff security, bug fix, and enhancement update (Oracle Linux 10)
[4.6.0-8.4] - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374) - make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281) [4.6.0-8.3] - reintroduce ignore option -i as it is required for …
-
High max 9.8ELSA-2026-19160 3 CVEs
Important: firefox security update (Oracle Linux 10)
[140.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.12.0-1] - Update to 140.12.0 ESR [140.11.0-1] - Update to 140.11.0 ESR [140.10.2-1] - Up…
-
High max 8.8ELSA-2026-41895 16 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 10)
[9.0.119-1.0.1] - Add support for Oracle Linux [9.0.119-1] - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192473 [9.0.118-2] - Reduce time to detect hanging builds - Resolves: RHEL-191644
-
High max 8.8ELSA-2026-41897 16 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 10)
[10.0.110-1.0.1] - Add support for Oracle Linux [10.0.110-1] - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192463 [10.0.109-2] - Reduce time to detect hanging builds - Resolves: RHEL-191640
-
High max 7.5ELSA-2026-19128 1 CVE
Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)
[0.2.3-7] - Bump release for rebuild [0.2.3-6] - Bump release for rebuild
-
High max 9.8ELSA-2026-21380 18 CVEs
Important: firefox security update (Oracle Linux 10)
[140.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.12.0-1] - Update to 140.12.0 ESR [140.11.0-1] - Update to 140.11.0 ESR [140.10.2-1] - Up…
-
High max 4.3ELSA-2026-41988 1 CVE
Important: dovecot security update (Oracle Linux 10)
[1:2.3.21-19.1] - fix CVE-2026-42006: fix imap_parser list_count_limit to actually work (RHEL-188477)
-
High max 9.6ELSA-2026-19153 4 CVEs
Important: thunderbird security update (Oracle Linux 10)
[140.12.0-1.0.1] - Add Oracle prefs [140.12.0-1] - Update to 140.12.0 ESR [140.11.0-1] - Update to 140.11.0 ESR [140.10.1-1] - Update to 140.10.1 ESR
-
High max 7.5ELSA-2026-26532 1 CVE
Important: dracut security update (Oracle Linux 10)
[107-8.0.1] - Suppress stderr for btrfs subvolume check [Orabug: 39059254] - fips: add logic for /boot subvolume on BTRFS [Orabug: 36028061] - Skip unneeded FIPS logic on UEK with special FIPS [Orabug: 38138800] [Orabug: 38709306] - Include correct modprobe i…
-
High max 8.8ELSA-2026-41893 17 CVEs
Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 10)
[8.0.129-1.0.1] - Add support for Oracle Linux [8.0.129-1] - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192468 [8.0.128-2] - Reduce time to detect hanging builds - Resolves: RHEL-191650
-
High max 8.8ELSA-2026-41937 2 CVEs
Important: sssd security update (Oracle Linux 10)
[2.12.0-3.0.1.el10_2.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.12.0-3.1] - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 ss…