From el-errata at oss.oracle.com  Sat Aug  1 07:17:14 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:14 -0700
Subject: [El-errata] ELSA-2026-47011 Important: Oracle Linux 8 kernel
 security update
Message-ID: <mailman.324.1785568648.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47011

http://linux.oracle.com/errata/ELSA-2026-47011.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.148.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.148.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.148.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.148.1.el8_10.x86_64.rpm
perf-4.18.0-553.148.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.148.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.148.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.148.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.148.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.148.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.148.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.148.1.el8_10.aarch64.rpm
perf-4.18.0-553.148.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.148.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.148.1.el8_10.src.rpm

Related CVEs:

CVE-2026-53006




Description of changes:

[4.18.0-553.148.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.148.1]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006}



From el-errata at oss.oracle.com  Sat Aug  1 07:17:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:16 -0700
Subject: [El-errata] ELSA-2026-47755 Moderate: Oracle Linux 8 openssh
 security update
Message-ID: <mailman.325.1785568651.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47755

http://linux.oracle.com/errata/ELSA-2026-47755.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
openssh-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-askpass-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-cavs-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-clients-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-keycat-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-ldap-8.0p1-30.0.1.el8_10.x86_64.rpm
openssh-server-8.0p1-30.0.1.el8_10.x86_64.rpm
pam_ssh_agent_auth-0.10.3-7.30.0.1.el8_10.x86_64.rpm

aarch64:
openssh-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-askpass-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-cavs-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-clients-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-keycat-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-ldap-8.0p1-30.0.1.el8_10.aarch64.rpm
openssh-server-8.0p1-30.0.1.el8_10.aarch64.rpm
pam_ssh_agent_auth-0.10.3-7.30.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/openssh-8.0p1-30.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-55653
CVE-2026-55655




Description of changes:

[8.0p1-30.0.1]
- Update upstream references [Orabug: 36587718]

[8.0p1-30]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-185775
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185855



From el-errata at oss.oracle.com  Sat Aug  1 07:17:24 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:24 -0700
Subject: [El-errata] ELBA-2026-46513 Oracle Linux 9 openssl bug fix and
 enhancement update
Message-ID: <mailman.326.1785568658.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-46513

http://linux.oracle.com/errata/ELBA-2026-46513.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
openssl-3.5.5-6.0.1.el9_8.x86_64.rpm
openssl-devel-3.5.5-6.0.1.el9_8.i686.rpm
openssl-devel-3.5.5-6.0.1.el9_8.x86_64.rpm
openssl-libs-3.5.5-6.0.1.el9_8.i686.rpm
openssl-libs-3.5.5-6.0.1.el9_8.x86_64.rpm
openssl-perl-3.5.5-6.0.1.el9_8.x86_64.rpm

aarch64:
openssl-3.5.5-6.0.1.el9_8.aarch64.rpm
openssl-devel-3.5.5-6.0.1.el9_8.aarch64.rpm
openssl-libs-3.5.5-6.0.1.el9_8.aarch64.rpm
openssl-perl-3.5.5-6.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/openssl-3.5.5-6.0.1.el9_8.src.rpm



Description of changes:

[3.5.5-6.0.1]
- Replace upstream references [Orabug: 34340177]

[3.5.5.openela.0.1]
- Add OpenELA specific changes

[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
  Resolves: RHEL-210862



From el-errata at oss.oracle.com  Sat Aug  1 07:17:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:26 -0700
Subject: [El-errata] ELSA-2026-47040 Important: Oracle Linux 9 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.327.1785568661.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47040

http://linux.oracle.com/errata/ELSA-2026-47040.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.31.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.31.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.31.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.31.1.el9_8.x86_64.rpm
libperf-5.14.0-687.31.1.el9_8.x86_64.rpm
perf-5.14.0-687.31.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.31.1.el9_8.x86_64.rpm
rtla-5.14.0-687.31.1.el9_8.x86_64.rpm
rv-5.14.0-687.31.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.31.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.31.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.31.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.31.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.31.1.el9_8.aarch64.rpm
libperf-5.14.0-687.31.1.el9_8.aarch64.rpm
perf-5.14.0-687.31.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.31.1.el9_8.aarch64.rpm
rtla-5.14.0-687.31.1.el9_8.aarch64.rpm
rv-5.14.0-687.31.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.31.1.el9_8.src.rpm

Related CVEs:

CVE-2025-39797
CVE-2026-23002
CVE-2026-52973
CVE-2026-53281
CVE-2026-64017




Description of changes:

[5.14.0-687.31.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.31.1]
- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]



From el-errata at oss.oracle.com  Sat Aug  1 07:17:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:33 -0700
Subject: [El-errata] ELBA-2026-500111 Oracle Linux 9 xfsprogs bug fix update
Message-ID: <mailman.328.1785568667.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500111

http://linux.oracle.com/errata/ELBA-2026-500111.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
xfsprogs-6.18.0-1.0.4.el9.x86_64.rpm
xfsprogs-6.18.0-1.0.4.el9.i686.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.x86_64.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.i686.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el9.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/xfsprogs-6.18.0-1.0.4.el9.src.rpm



Description of changes:

[6.18.0-1.0.4]
- Fix patch increasing min log size to 100MiB so that it works with tiny fs.



From el-errata at oss.oracle.com  Sat Aug  1 07:17:41 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:41 -0700
Subject: [El-errata] ELBA-2026-500112 Oracle Linux 9 xfsprogs bug fix update
Message-ID: <mailman.329.1785568673.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500112

http://linux.oracle.com/errata/ELBA-2026-500112.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
xfsprogs-6.18.0-1.0.4.el9.i686.rpm
xfsprogs-6.18.0-1.0.4.el9.x86_64.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.i686.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.x86_64.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el9.x86_64.rpm

aarch64:
xfsprogs-6.18.0-1.0.4.el9.aarch64.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.aarch64.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/xfsprogs-6.18.0-1.0.4.el9.src.rpm



Description of changes:

[6.18.0-1.0.4]
- Fix patch increasing min log size to 100MiB so that it works with tiny fs.



From el-errata at oss.oracle.com  Sat Aug  1 07:17:48 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:48 -0700
Subject: [El-errata] ELSA-2026-35841 Important: Oracle Linux 10 nodejs24
 security, bug fix, and enhancement update
Message-ID: <mailman.330.1785568682.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-35841

http://linux.oracle.com/errata/ELSA-2026-35841.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs24-24.18.0-1.0.1.el10_2.x86_64.rpm
nodejs24-devel-24.18.0-1.0.1.el10_2.x86_64.rpm
nodejs24-docs-24.18.0-1.0.1.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-1.0.1.el10_2.x86_64.rpm
nodejs24-libs-24.18.0-1.0.1.el10_2.x86_64.rpm
nodejs24-npm-11.16.0-1.24.18.0.1.0.1.el10_2.noarch.rpm

aarch64:
nodejs24-24.18.0-1.0.1.el10_2.aarch64.rpm
nodejs24-devel-24.18.0-1.0.1.el10_2.aarch64.rpm
nodejs24-docs-24.18.0-1.0.1.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-1.0.1.el10_2.aarch64.rpm
nodejs24-libs-24.18.0-1.0.1.el10_2.aarch64.rpm
nodejs24-npm-11.16.0-1.24.18.0.1.0.1.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.18.0-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-6733
CVE-2026-6734
CVE-2026-9678
CVE-2026-9697
CVE-2026-11525
CVE-2026-12151
CVE-2026-42338
CVE-2026-48615
CVE-2026-48618
CVE-2026-48619
CVE-2026-48928
CVE-2026-48930
CVE-2026-48933
CVE-2026-48934
CVE-2026-48935




Description of changes:

[1:24.18.0-1.0.1]
- Update upstream references

[1:24.18.0-1]
- Update to version 24.18.0

[1:24.14.1-3]
- De-bundle c-ares and libuv



From el-errata at oss.oracle.com  Sat Aug  1 07:17:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:51 -0700
Subject: [El-errata] ELSA-2026-42899 Important: Oracle Linux 10
 java-25-openjdk security update
Message-ID: <mailman.331.1785568684.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42899

http://linux.oracle.com/errata/ELSA-2026-42899.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.x86_64.rpm

aarch64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/java-25-openjdk-25.0.4.0.7-1.1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-60147
CVE-2026-41254
CVE-2026-46917
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47059
CVE-2026-47063




Description of changes:

[25.0.4.0.7-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.4.0.7-1.0]
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188883
- Resolves: RHEL-212294
- Resolves: RHEL-212296

[1:25.0.3.0.9-3.1]
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155327
- Related: RHEL-155339
- Resolves: RHEL-150977
- Resolves: RHEL-210972
- Resolves: RHEL-210993



From el-errata at oss.oracle.com  Sat Aug  1 07:17:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:17:52 -0700
Subject: [El-errata] ELSA-2026-47017 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.334.1785568689.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47017

http://linux.oracle.com/errata/ELSA-2026-47017.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.40.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.40.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.40.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.40.1.el10_2.x86_64.rpm
libperf-6.12.0-211.40.1.el10_2.x86_64.rpm
perf-6.12.0-211.40.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.40.1.el10_2.x86_64.rpm
rtla-6.12.0-211.40.1.el10_2.x86_64.rpm
rv-6.12.0-211.40.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.40.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.40.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.40.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.40.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.40.1.el10_2.aarch64.rpm
libperf-6.12.0-211.40.1.el10_2.aarch64.rpm
perf-6.12.0-211.40.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.40.1.el10_2.aarch64.rpm
rtla-6.12.0-211.40.1.el10_2.aarch64.rpm
rv-6.12.0-211.40.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.40.1.el10_2.src.rpm

Related CVEs:

CVE-2026-46086
CVE-2026-52993
CVE-2026-53006
CVE-2026-53281




Description of changes:

[6.12.0-211.40.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.40.1]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192215] {CVE-2026-53006}
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192181] {CVE-2026-52993}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190344] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190344]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179338] {CVE-2026-46086}
- rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc (Marc Dionne) [RHEL-178254]
- rxrpc: Fix the ACK parser to extract the SACK table for parsing (Marc Dionne) [RHEL-178254]
- rxrpc: Fix RESPONSE packet verification to extract skb to a linear buffer (Marc Dionne) [RHEL-178254]
- rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg (Marc Dionne) [RHEL-178254]
- crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks (Marc Dionne) [RHEL-178254]
- rxrpc: fix oversized RESPONSE authenticator length check (Marc Dionne) [RHEL-178254] {CVE-2026-31635}
- rxrpc: Fix integer overflow in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31633}
- rxrpc: Fix leak of rxgk context in rxgk_verify_response() (Marc Dionne) [RHEL-178254] {CVE-2026-31632}
- rxrpc: Fix buffer overread in rxgk_do_verify_authenticator() (Marc Dionne) [RHEL-178254] {CVE-2026-31631}
- rxgk: Fix potential integer overflow in length check (Marc Dionne) [RHEL-178254]
- rxrpc: Fix rxkad crypto unalignment handling (Marc Dionne) [RHEL-178254]
- rxrpc: Fix memory leaks in rxkad_verify_response() (Marc Dionne) [RHEL-178254]
- rxrpc: Fix missing error checks for rxkad encryption/decryption failure (Marc Dionne) [RHEL-178254]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Marc Dionne) [RHEL-178254] {CVE-2026-43500}
- rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (Marc Dionne) [RHEL-178254]
- rxrpc: only handle RESPONSE during service challenge (Marc Dionne) [RHEL-178254] {CVE-2026-31676}



From el-errata at oss.oracle.com  Sat Aug  1 07:18:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 01 Aug 2026 00:18:01 -0700
Subject: [El-errata] ELBA-2026-500113   xfsprogs  bug fix update
Message-ID: <mailman.335.1785568697.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500113

http://linux.oracle.com/errata/ELBA-2026-500113.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
xfsprogs-devel-6.18.0-1.0.4.el10.x86_64.rpm
xfsprogs-6.18.0-1.0.4.el10.x86_64.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el10.x86_64.rpm

aarch64:
xfsprogs-devel-6.18.0-1.0.4.el10.aarch64.rpm
xfsprogs-6.18.0-1.0.4.el10.aarch64.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/xfsprogs-6.18.0-1.0.4.el10.src.rpm



Description of changes:

[6.18.0-1.0.4]
- Fix patch increasing min log size to 100MiB so that it works with tiny fs.



From el-errata at oss.oracle.com  Mon Aug  3 21:20:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:20:15 -0700
Subject: [El-errata] ELSA-2026-24342 Moderate: Oracle Linux 7 python-tornado
 security update
Message-ID: <mailman.336.1785792030.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24342

http://linux.oracle.com/errata/ELSA-2026-24342.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
python-tornado-4.2.1-5.0.3.el7.x86_64.rpm
python-tornado-doc-4.2.1-5.0.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/python-tornado-4.2.1-5.0.3.el7.src.rpm

Related CVEs:

CVE-2026-31958
CVE-2026-35536




Description of changes:

[4.2.1-5.0.3]
- Backport fix for CVE-2026-31958 [Orabug: 39521310]
- Backport fix for CVE-2026-35536 [Orabug: 39521310]



From el-errata at oss.oracle.com  Mon Aug  3 21:20:17 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:20:17 -0700
Subject: [El-errata] ELSA-2026-24992 Important: Oracle Linux 7
 compat-libtiff3 security update
Message-ID: <mailman.337.1785792032.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-24992

http://linux.oracle.com/errata/ELSA-2026-24992.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
compat-libtiff3-3.9.4-12.0.3.el7.i686.rpm
compat-libtiff3-3.9.4-12.0.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/compat-libtiff3-3.9.4-12.0.3.el7.src.rpm

Related CVEs:

CVE-2026-4775




Description of changes:

[3.9.4-12.0.3]
- Backport fix for CVE-2026-4775 [Orabug: 39535879]

[3.9.4-12.0.1]
- Fixes CVE-2025-9900 buffer underflow [Orabug: 38523840]



From el-errata at oss.oracle.com  Mon Aug  3 21:29:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:29:52 -0700
Subject: [El-errata] ELBA-2026-47175 Oracle Linux 8 grubby bug fix and
 enhancement update
Message-ID: <mailman.338.1785792614.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47175

http://linux.oracle.com/errata/ELBA-2026-47175.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
grubby-8.40-51.0.1.el8_10.x86_64.rpm

aarch64:
grubby-8.40-51.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/grubby-8.40-51.0.1.el8_10.src.rpm



Description of changes:

[8.40-51.0.1]
- Support "uek-core" as possible kernel flavour [Orabug: 34691776]
- Do not add /boot twice for btrfs subvolumes [Orabug: 34380710]
- Fix update of kernel options using add or remove args [Orabug: 34748051]
- Also support "ueknano" as a possible kernel flavour [Orabug: 34420465]
- Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
- Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
- Set whatever entry before saved entry
- Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)

[8.40-51]
- Have grubby only manipulate relevant entries, fallback if empty
- Resolves: #RHEL-132931

[8.40-50]
- Have grubby only manipulate and display relevant entries
- Resolves: #RHEL-132931



From el-errata at oss.oracle.com  Mon Aug  3 21:29:50 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:29:50 -0700
Subject: [El-errata] ELBA-2026-47120 Oracle Linux 8 fence-agents bug fix and
 enhancement update
Message-ID: <mailman.339.1785792644.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47120

http://linux.oracle.com/errata/ELBA-2026-47120.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-all-4.2.1-129.el8_10.26.x86_64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.26.x86_64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.26.x86_64.rpm
fence-agents-lpar-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-mpath-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.26.x86_64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.26.noarch.rpm

aarch64:
fence-agents-all-4.2.1-129.el8_10.26.aarch64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.26.aarch64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.26.aarch64.rpm
fence-agents-mpath-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.26.aarch64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.26.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.26.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/fence-agents-4.2.1-129.el8_10.26.src.rpm



Description of changes:

[4.2.1-129.26]
- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186317



From el-errata at oss.oracle.com  Mon Aug  3 21:29:48 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:29:48 -0700
Subject: [El-errata] ELBA-2026-47116 Oracle Linux 8 xfsdump bug fix and
 enhancement update
Message-ID: <mailman.340.1785792645.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47116

http://linux.oracle.com/errata/ELBA-2026-47116.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
xfsdump-3.1.8-8.el8_10.x86_64.rpm

aarch64:
xfsdump-3.1.8-8.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/xfsdump-3.1.8-8.el8_10.src.rpm



Description of changes:

[3.1.8-8]
- xfsrestore: only process subtrees that are selected
- Related: RHEL-31075, RHEL-179062



From el-errata at oss.oracle.com  Mon Aug  3 21:30:59 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:30:59 -0700
Subject: [El-errata] ELSA-2026-43218 Important: Oracle Linux 8 pki-deps:10.6
 security update
Message-ID: <mailman.341.1785792673.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-43218

http://linux.oracle.com/errata/ELSA-2026-43218.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
apache-commons-collections-3.2.2-10.module+el8.10.0+90642+1ede0e5a.noarch.rpm
apache-commons-lang-2.6-21.module+el8.10.0+90682+879b1f6e.noarch.rpm
apache-commons-net-3.6-3.module+el8.10.0+90642+1ede0e5a.noarch.rpm
bea-stax-api-1.2.0-16.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-fastinfoset-1.2.13-9.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-jaxb-api-2.2.12-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-jaxb-core-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
glassfish-jaxb-runtime-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
glassfish-jaxb-txw2-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
jackson-annotations-2.21-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-core-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-databind-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-jaxrs-json-provider-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-jaxrs-providers-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-module-jaxb-annotations-2.21.4-2.module+el8.10.0+90972+fe199724.noarch.rpm
jakarta-commons-httpclient-3.1-28.module+el8.10.0+90682+879b1f6e.noarch.rpm
javassist-3.18.1-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
javassist-javadoc-3.18.1-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
pki-servlet-engine-9.0.62-1.module+el8.10.0+90642+1ede0e5a.noarch.rpm
relaxngDatatype-2011.1-7.module+el8.10.0+90682+879b1f6e.noarch.rpm
slf4j-1.7.25-4.module+el8.10.0+90682+879b1f6e.noarch.rpm
slf4j-jdk14-1.7.25-4.module+el8.10.0+90682+879b1f6e.noarch.rpm
stax-ex-1.7.7-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
velocity-1.7-24.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xalan-j2-2.7.1-38.module+el8.10.0+90682+879b1f6e.noarch.rpm
xerces-j2-2.11.0-34.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xml-commons-apis-1.4.01-25.module+el8.10.0+90682+879b1f6e.noarch.rpm
xml-commons-resolver-1.2-26.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xmlstreambuffer-1.5.4-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
xsom-0-19.20110809svn.module+el8.10.0+90642+1ede0e5a.noarch.rpm

aarch64:
apache-commons-collections-3.2.2-10.module+el8.10.0+90642+1ede0e5a.noarch.rpm
apache-commons-lang-2.6-21.module+el8.10.0+90682+879b1f6e.noarch.rpm
apache-commons-net-3.6-3.module+el8.10.0+90642+1ede0e5a.noarch.rpm
bea-stax-api-1.2.0-16.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-fastinfoset-1.2.13-9.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-jaxb-api-2.2.12-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
glassfish-jaxb-core-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
glassfish-jaxb-runtime-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
glassfish-jaxb-txw2-2.2.11-12.module+el8.10.0+90642+1ede0e5a.noarch.rpm
jackson-annotations-2.21-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-core-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-databind-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-jaxrs-json-provider-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-jaxrs-providers-2.21.4-1.module+el8.10.0+90972+fe199724.noarch.rpm
jackson-module-jaxb-annotations-2.21.4-2.module+el8.10.0+90972+fe199724.noarch.rpm
jakarta-commons-httpclient-3.1-28.module+el8.10.0+90682+879b1f6e.noarch.rpm
javassist-3.18.1-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
javassist-javadoc-3.18.1-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
pki-servlet-engine-9.0.62-1.module+el8.10.0+90642+1ede0e5a.noarch.rpm
relaxngDatatype-2011.1-7.module+el8.10.0+90682+879b1f6e.noarch.rpm
slf4j-1.7.25-4.module+el8.10.0+90682+879b1f6e.noarch.rpm
slf4j-jdk14-1.7.25-4.module+el8.10.0+90682+879b1f6e.noarch.rpm
stax-ex-1.7.7-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
velocity-1.7-24.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xalan-j2-2.7.1-38.module+el8.10.0+90682+879b1f6e.noarch.rpm
xerces-j2-2.11.0-34.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xml-commons-apis-1.4.01-25.module+el8.10.0+90682+879b1f6e.noarch.rpm
xml-commons-resolver-1.2-26.module+el8.10.0+90642+1ede0e5a.noarch.rpm
xmlstreambuffer-1.5.4-8.module+el8.10.0+90682+879b1f6e.noarch.rpm
xsom-0-19.20110809svn.module+el8.10.0+90642+1ede0e5a.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-collections-3.2.2-10.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-lang-2.6-21.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-net-3.6-3.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/bea-stax-1.2.0-16.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/glassfish-fastinfoset-1.2.13-9.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/glassfish-jaxb-2.2.11-12.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/glassfish-jaxb-api-2.2.12-8.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jackson-annotations-2.21-1.module+el8.10.0+90972+fe199724.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jackson-core-2.21.4-1.module+el8.10.0+90972+fe199724.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jackson-databind-2.21.4-1.module+el8.10.0+90972+fe199724.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jackson-jaxrs-providers-2.21.4-1.module+el8.10.0+90972+fe199724.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jackson-modules-base-2.21.4-2.module+el8.10.0+90972+fe199724.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jakarta-commons-httpclient-3.1-28.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/javassist-3.18.1-8.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pki-servlet-engine-9.0.62-1.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/relaxngDatatype-2011.1-7.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/slf4j-1.7.25-4.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/stax-ex-1.7.7-8.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/velocity-1.7-24.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xalan-j2-2.7.1-38.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xerces-j2-2.11.0-34.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xml-commons-apis-1.4.01-25.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xml-commons-resolver-1.2-26.module+el8.10.0+90642+1ede0e5a.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xmlstreambuffer-1.5.4-8.module+el8.10.0+90682+879b1f6e.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xsom-0-19.20110809svn.module+el8.10.0+90642+1ede0e5a.src.rpm

Related CVEs:

CVE-2026-54513




Description of changes:

apache-commons-collections
[3.2.2-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.2.2-9]
- Remove workaround for symlink->directory rpm bug

[3.2.2-8]
- Allow testframework to still be built even with tests disabled, which is
  needed by other packages

[3.2.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.2.2-6]
- Temporarly disable running tests

[3.2.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.2.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.2.2-3]
- Add workaround for symlink->directory rpm bug

[3.2.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.2.2-1]
- Update to upstream version 3.2.2
- Merge two javadoc subpackages
- Install with XMVn
- Specfile cleanup

apache-commons-lang
[2.6-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.6-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.6-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.6-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.6-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.6-15]
- Drop old jakarta provides/obsoletes.

[2.6-14]
- Use Requires: java-headless rebuild (#1067528)

[2.6-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[2.6-12]
- Rebuild

apache-commons-net
[3.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.6-1]
- Update to upstream version 3.6

[3.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.5-1]
- Update to upstream version 3.5

[3.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.4-2]
- Add workaround for suprious test failure (NET-586)

[3.4-1]
- Update to upstream version 3.4

[3.3-7]
- Disable failing test

[3.3-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

bea-stax
[1.2.0-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2.0-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2.0-14]
- Install with XMvn

[1.2.0-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2.0-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.2.0-9]
- Use .mfiles generated during build

[1.2.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.2.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

glassfish-fastinfoset
[1.2.13-9]
- Regenerate BRs

[1.2.13-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2.13-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2.13-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2.13-5]
- add missing build requires

[1.2.13-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2.13-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2.13-2]
- introduce license macro

[1.2.13-1]
- update to 1.2.13
- Fix URL
- Add license text

[1.2.12-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

glassfish-jaxb
[2.2.11-12]
- Update requiremnts to avoid conflicts with jaxb module packages

[2.2.11-11]
- Avoid dependencies on msv and glassfish-dtd-parser

[2.2.11-10]
- Disable TXW2 compiler module

[2.2.11-9]
- Reduce build deps

[2.2.11-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2.11-7]
- Specify CDDL license version

[2.2.11-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.11-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.2.11-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.2.11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

glassfish-jaxb-api
[2.2.12-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2.12-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.12-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.2.12-5]
- Regenerate BRs

[2.2.12-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.2.12-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.2.12-2]
- Update to 2.2.12-b141001.1542

[2.2.12-1]
- Update to 2.2.12

[2.2.9-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.2.9-5]
- Use Requires: java-headless rebuild (#1067528)

jackson-annotations
[2.21-1]
- Rebase to version 2.21
- Resolves: RHEL-188291

jackson-core
[2.21.4-1]
- Rebase to version 2.21.4
- Resolves: RHEL-188291

jackson-databind
[2.21.4-1]
- Rebase to upstream version 2.21.4
- Resolves: RHEL-188291

jackson-jaxrs-providers
[2.21.4-1]
- Rebase to upstream version 2.21.4
- Resolves: RHEL-188291

jackson-modules-base
[2.21.4-1]
- Update to version 2.21.4
- Resolves: RHEL-188291

jakarta-commons-httpclient
[1:3.1-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:3.1-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:3.1-26]
- Use build-jar-repository for locating dependencies

[1:3.1-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:3.1-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:3.1-23]
- Respect configured SO_TIMEOUT during SSL handshake
- Resolves: CVE-2015-5262

[1:3.1-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:3.1-21]
- Remove legacy Obsoletes/Provides

[1:3.1-20]
- Fix MITM security vulnerability
- Resolves: CVE-2014-3577

[1:3.1-19]
- Add alias for apache:commons-httpclient

javassist
[3.18.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.18.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.18.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.18.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.18.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[3.18.1-3]
- Simplify build dependencies

[3.18.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[3.18.1-1]
- Update to upstream version 3.18.1
- Remove workaround for rpm bug, can be removed in F-18
- Update to current packaging guidelines

[3.16.1-7]
- Use Requires: java-headless rebuild (#1067528)

[3.16.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

pki-servlet-engine
[1:9.0.62-1]
- Bump version number to avoid conflicts with tomcat

[1:9.0.30-4]
- Convert pki-servlet-engine into an alias for tomcat

[1:9.0.30-3]
- Reverts: rhbz#1969366 as it causes other issues

[1:9.0.30-2]
- Resolves: rhbz#1969366 CA instance installation fails with error message

[1:9.0.30-1]
- Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
- Update to JWS 5.3.0 distribution
- Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)

[1:9.0.7-16]
- Obsoleted pki-servlet-container

[1:9.0.7-15]
- Rename pki-servlet-container into pki-servlet-engine

[1:9.0.7-14]
- Update to JWS 5.0.2 distribution
- Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
- Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet

[1:9.0.7-13]
- Reinstate Maven artifacts and fix maven-metadata JAR path

[1:9.0.7-12]
- Add missing BuildRequires: systemd-units

relaxngDatatype
[2011.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2011.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2011.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2011.1-4]
- Add missing build-requires

[2011.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2011.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2011.1-1]
- Update to version released from new project location rhbz#981275
- Build/install with maven instead of ant
- Drop old javadoc rpm bug workaround

[1.0-12.5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-11.5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.0-10.5]
- Install license file with javadoc package
- Convert versioned javadoc to versionless
- Update to current packaging guidelines
- Remove msv provides and obsoletes

slf4j
[0:1.7.25-4]
- Disallow EventData deserialization by default (CVE-2018-8088)
- Resolves rhbz#1549928

[0:1.7.25-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.7.25-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.7.25-1]
- Update to upstream version 1.7.25

[0:1.7.22-4]
- Avoid absolute paths

[0:1.7.22-3]
- Avoid literal carriage return
- Remove Group tag

[0:1.7.22-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.7.22-1]
- Update to upstream version 1.7.22

[0:1.7.21-4]
- Install source JARs in separate package

[0:1.7.21-3]
- Remove build-requires on perl

stax-ex
[1.7.7-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.7.7-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.7.7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.7.7-5]
- regenerate build-requires

[1.7.7-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.7.7-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.7.7-2]
- introduce license macro

[1.7.7-1]
- update to 1.7.7

[1.7.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.7.1-7]
- Use Requires: java-headless rebuild (#1067528)

velocity
[0:1.7-24]
- Repack the tarball without binaries

[0:1.7-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.7-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.7-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.7-20]
- Add hsqldb conditional
- Switch to glassfish-servlet-api

[0:1.7-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.7-18]
- fix FTBFS rhbz#1240035
- fix BR list, change log4j with log4j12
- set javac source/target to 1.6
- disable Java8doc doclint
- remove werken-xpath Import/Export refences in manifest file
- resolve some rpmlint problems
- remove zero-length file
- introduce license macro

[0:1.7-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.7-16]
- Update to current packaging guidelines

[0:1.7-15]
- Require hsqldb-lib instead of hsqldb

xalan-j2
[0:2.7.1-38]
- Update license of subpackages

[0:2.7.1-37]
- Remove BR on xml-stylebook

[0:2.7.1-36]
- Repack the tarball without binaries

[0:2.7.1-35]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.7.1-34]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.7.1-33]
- Elimitate race condition when injecting JAR manifest
- Resolves: rhbz#1495250

[0:2.7.1-32]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.7.1-31]
- Fix missing jaxp_transformer_impl symlink after upgrade

[0:2.7.1-30]
- Install with XMvn
- Remove alternatives

[0:2.7.1-29]
- Build against glassfish-servlet-api

xerces-j2
[2.11.0-34]
- Fix license tag to include W3C

[2.11.0-33]
- Add requirement on javapackages-tools since scripts use
  java-functions.

[2.11.0-32]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.11.0-31]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.11.0-30]
- Remove unneeded dependency on dejavu-sans-fonts

[2.11.0-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.11.0-28]
- Fix missing jaxp_parser_impl symlink after upgrade

[2.11.0-27]
- Remove alternatives, there is no other provider
- Specfile cleanup

[2.11.0-26]
- Install with XMvn

[2.11.0-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

xml-commons-apis
[1.4.01-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.4.01-24]
- Elimitate race condition when injecting JAR manifest
- Resolves: rhbz#1495249

[1.4.01-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.4.01-22]
- Update to current packaging guidelines

[1.4.01-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.4.01-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4.01-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4.01-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.4.01-17]
- Don't generate duplicate Maven metadata

[1.4.01-16]
- Use .mfiles generated during build

xml-commons-resolver
[0:1.2-26]
- Add requirement on javapackages-tools since scripts use
  java-functions.

[0:1.2-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.2-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.2-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.2-22]
- Update to current packaging guidelines

[0:1.2-21]
- Fix rpm conditional

[0:1.2-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.2-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.2-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.2-17]
- Fix FTBFS.

xmlstreambuffer
[1.5.4-8]
- Avoid test dependencies

[1.5.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.5.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.5.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.5.4-4]
- add missing build requires: maven-plugin-bundle

[1.5.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.5.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.5.4-1]
- update to 1.5.4
- introduce license macro

[1.5.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.5.1-4]
- Use Requires: java-headless rebuild (#1067528)

xsom
[0-19.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0-18.20110809svn]
- Specify CDDL license version

[0-17.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0-16.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0-15.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0-14.20110809svn]
- Fix FTBFS

[0-13.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0-12.20110809svn]
- Fix junit BRs (#1107359)
- Fix FTBFS due to F21 XMvn changes

[0-11.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0-10.20110809svn]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild



From el-errata at oss.oracle.com  Mon Aug  3 21:31:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:31:03 -0700
Subject: [El-errata] ELSA-2026-47059 Important: Oracle Linux 8 nodejs:22
 security update
Message-ID: <mailman.344.1785792676.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47059

http://linux.oracle.com/errata/ELSA-2026-47059.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-22.23.1-2.module+el8.10.0+90976+97994de0.x86_64.rpm
nodejs-devel-22.23.1-2.module+el8.10.0+90976+97994de0.x86_64.rpm
nodejs-docs-22.23.1-2.module+el8.10.0+90976+97994de0.noarch.rpm
nodejs-full-i18n-22.23.1-2.module+el8.10.0+90976+97994de0.x86_64.rpm
nodejs-libs-22.23.1-2.module+el8.10.0+90976+97994de0.x86_64.rpm
nodejs-nodemon-3.1.14-1.module+el8.10.0+90976+97994de0.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.10.0+90968+e271b286.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90968+e271b286.noarch.rpm
npm-10.9.8-1.22.23.1.2.module+el8.10.0+90976+97994de0.x86_64.rpm
v8-12.4-devel-12.4.254.21-1.22.23.1.2.module+el8.10.0+90976+97994de0.x86_64.rpm

aarch64:
nodejs-22.23.1-2.module+el8.10.0+90976+97994de0.aarch64.rpm
nodejs-devel-22.23.1-2.module+el8.10.0+90976+97994de0.aarch64.rpm
nodejs-docs-22.23.1-2.module+el8.10.0+90976+97994de0.noarch.rpm
nodejs-full-i18n-22.23.1-2.module+el8.10.0+90976+97994de0.aarch64.rpm
nodejs-libs-22.23.1-2.module+el8.10.0+90976+97994de0.aarch64.rpm
nodejs-nodemon-3.1.14-1.module+el8.10.0+90976+97994de0.noarch.rpm
nodejs-packaging-2021.06-4.module+el8.10.0+90968+e271b286.noarch.rpm
nodejs-packaging-bundler-2021.06-4.module+el8.10.0+90968+e271b286.noarch.rpm
npm-10.9.8-1.22.23.1.2.module+el8.10.0+90976+97994de0.aarch64.rpm
v8-12.4-devel-12.4.254.21-1.22.23.1.2.module+el8.10.0+90976+97994de0.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-22.23.1-2.module+el8.10.0+90976+97994de0.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-nodemon-3.1.14-1.module+el8.10.0+90976+97994de0.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-packaging-2021.06-4.module+el8.10.0+90968+e271b286.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874




Description of changes:

nodejs
[1:22.23.1-2]
- Backport patches for various CVEs
  Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149
  Resolves: RHEL-193842 RHEL-193874 RHEL-208661

[1:22.23.1-1]
- Update to version 22.23.1
  Resolves: RHEL-176170
  Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338

[1:22.22.2-1]
- Update to version 22.22.2
  Resolves: RHEL-154019
  Fixes: CVE-2026-1528 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-27135 CVE-2026-1528

[1:22.22.0-1]
- Update to 22.22.0
  Resolves: RHEL-118152

[1:22.19.0-1]
- Update to 22.19.0
  Resolves: RHEL-100424

[1:22.16.0-2]
- Patch fix for sqlite CVE-2025-6965
  Resolves: RHEL-103835

[1:22.16.0-1]
- Update to 22.16.0
  Fixes: CVE-2025-23166
- Resolves: RHEL-91596 RHEL-92859

[1:22.15.0-1]
- Update to 22.15.0
- Drop upstream patches

[1:22.13.1-4]
- Patch fix for sqlite CVE-2025-31498
  Resolves: RHEL-87300

[1:22.13.1-3]
- Update c-ares to newest version with fix for CVE-2025-31498
  Resolves: RHEL-86581

nodejs-nodemon
[3.1.14-1]
- Rebase to 3.1.14
- Switch from using remys fork as a source to npm.
- Resolves: RHEL-208659

[3.0.1-1]
- Exclude ix86 arches from building.
  Related: RHEL-35991

[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

[2.0.20-1]
- Rebase to 2.0.20
  Resolves: CVE-2022-3517

[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com

[2.0.7-1]
- Resolves: RHBZ#1953991
- Update to 2.0.7 to resolve CVE-2020-28469

[2.0.3-1]
- Updated

[1.18.3-1]
- Resolves: #1615413
- Updated
- bundled

[1.11.0-2]
- rh-nodejs8 rebuild

nodejs-packaging
[2021.06-4]
- Exclude ix86 arches from building.
  Related: RHEL-35991

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream

[25-1]
- Fix incorrect bundled library detection for Requires



From el-errata at oss.oracle.com  Mon Aug  3 21:31:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:31:08 -0700
Subject: [El-errata] ELSA-2026-47060 Important: Oracle Linux 8 nodejs:24
 security update
Message-ID: <mailman.345.1785792683.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47060

http://linux.oracle.com/errata/ELSA-2026-47060.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.x86_64.rpm
nodejs-devel-24.18.0-2.module+el8.10.0+90975+7cc1ae68.x86_64.rpm
nodejs-docs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-full-i18n-24.18.0-2.module+el8.10.0+90975+7cc1ae68.x86_64.rpm
nodejs-libs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.x86_64.rpm
nodejs-nodemon-3.1.14-1.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-packaging-2021.06-6.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90975+7cc1ae68.noarch.rpm
npm-11.16.0-1.24.18.0.2.module+el8.10.0+90975+7cc1ae68.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.2.module+el8.10.0+90975+7cc1ae68.x86_64.rpm

aarch64:
nodejs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.aarch64.rpm
nodejs-devel-24.18.0-2.module+el8.10.0+90975+7cc1ae68.aarch64.rpm
nodejs-docs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-full-i18n-24.18.0-2.module+el8.10.0+90975+7cc1ae68.aarch64.rpm
nodejs-libs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.aarch64.rpm
nodejs-nodemon-3.1.14-1.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-packaging-2021.06-6.module+el8.10.0+90975+7cc1ae68.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90975+7cc1ae68.noarch.rpm
npm-11.16.0-1.24.18.0.2.module+el8.10.0+90975+7cc1ae68.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.2.module+el8.10.0+90975+7cc1ae68.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-24.18.0-2.module+el8.10.0+90975+7cc1ae68.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-nodemon-3.1.14-1.module+el8.10.0+90975+7cc1ae68.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-packaging-2021.06-6.module+el8.10.0+90975+7cc1ae68.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874




Description of changes:

nodejs
[1:24.18.0-2]
- Backport patches for various CVEs
  Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149
  Resolves: RHEL-194176 RHEL-194179 RHEL-208658

[1:24.18.0-1]
- Update to version 24.18.0
  Resolves: RHEL-168744

[1:24.14.1-2]
- Update bundled nghttp2 to 1.68.1
  Related: RHEL-151374

[1:24.14.1-1]
- Update to 24.14.0
  Resolves: RHEL-151374

[1:24.13.0-1]
- Update to 24.13.0
  Resolves: RHEL-135257

[1:24.4.1-1]
- Initial import of nodejs:24

nodejs-nodemon
[3.1.14-1]
- Rebase to 3.1.14
- Switch from using remys fork as a source to npm.
- Resolves: RHEL-208657

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
  Resolves: RHEL-121576

[2021.06-5]
- nodejs.req to properly detect bundled deps

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream



From el-errata at oss.oracle.com  Mon Aug  3 21:30:46 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:30:46 -0700
Subject: [El-errata] ELSA-2026-41948 Important: Oracle Linux 8
 javapackages-tools:201801 security update
Message-ID: <mailman.346.1785792717.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-41948

http://linux.oracle.com/errata/ELSA-2026-41948.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ant-antlr-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-bcel-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-bsf-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-log4j-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-oro-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-regexp-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-resolver-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-xalan2-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-commons-logging-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-commons-net-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-contrib-1.0-0.32.b3.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-contrib-javadoc-1.0-0.32.b3.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-javadoc-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-javamail-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jdepend-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jmf-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jsch-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-junit-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-C++-2.7.7-56.module+el8.10.0+90622+accb6b48.x86_64.rpm
antlr-javadoc-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-manual-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-tool-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-manual-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-swing-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-testutil-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-xz-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
aopalliance-javadoc-1.0-17.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-beanutils-1.9.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-beanutils-javadoc-1.9.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-cli-javadoc-1.4-4.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-codec-javadoc-1.11-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-compress-javadoc-1.18-1.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-exec-1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-exec-javadoc-1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-io-javadoc-2.6-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-jxpath-javadoc-1.3-29.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-lang3-javadoc-3.7-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-logging-javadoc-1.2-13.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-net-javadoc-3.6-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-parent-43-2.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-ivy-2.4.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-ivy-javadoc-2.4.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-parent-19-2.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-resource-bundles-2-20.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bnd-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bnd-javadoc-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bndlib-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
assertj-core-3.8.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
assertj-core-javadoc-3.8.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
atinject-javadoc-1-28.20100611svn86.module+el8.10.0+90622+accb6b48.noarch.rpm
atinject-tck-1-28.20100611svn86.module+el8.10.0+90622+accb6b48.noarch.rpm
bcel-6.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
bcel-javadoc-6.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
beust-jcommander-1.71-5.module+el8.10.0+90622+accb6b48.noarch.rpm
beust-jcommander-javadoc-1.71-5.module+el8.10.0+90622+accb6b48.noarch.rpm
bnd-maven-plugin-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
bsf-2.4.0-30.module+el8.10.0+90622+accb6b48.noarch.rpm
bsf-javadoc-2.4.0-30.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-javadoc-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-manual-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
byaccj-1.15-17.module+el8.10.0+90622+accb6b48.x86_64.rpm
cal10n-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cal10n-javadoc-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cdi-api-javadoc-1.2-8.module+el8.10.0+90622+accb6b48.noarch.rpm
cglib-3.2.4-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cglib-javadoc-3.2.4-7.module+el8.10.0+90622+accb6b48.noarch.rpm
easymock-3.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
easymock-javadoc-3.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
exec-maven-plugin-1.6.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
exec-maven-plugin-javadoc-1.6.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-compendium-1.4.0-26.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-compendium-javadoc-1.4.0-26.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-core-1.4.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-core-javadoc-1.4.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-foundation-1.2.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-foundation-javadoc-1.2.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-parent-4-5.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-utils-1.10.4-2.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-utils-javadoc-1.10.4-2.module+el8.10.0+90622+accb6b48.noarch.rpm
forge-parent-38-11.module+el8.10.0+90622+accb6b48.noarch.rpm
fusesource-pom-1.11-3.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-annotation-javadoc-1.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jms-1.1.1-25.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jms-javadoc-1.1.1-25.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jpa-1.1.1-21.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jpa-javadoc-1.1.1-21.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-parent-poms-1.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-annotation-api-javadoc-1.2-13.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-el-javadoc-3.0.1-0.7.b08.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-jsp-api-javadoc-2.3.2-0.9.b01.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-legal-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-master-pom-8-11.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-servlet-api-javadoc-3.1.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
google-guice-javadoc-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guava20-javadoc-20.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
guava20-testlib-20.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-assistedinject-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-bom-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-extensions-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-grapher-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-jmx-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-jndi-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-multibindings-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-parent-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-servlet-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-testlib-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-throwingproviders-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
hamcrest-demo-1.3-23.module+el8.10.0+90622+accb6b48.noarch.rpm
hamcrest-javadoc-1.3-23.module+el8.10.0+90622+accb6b48.noarch.rpm
hawtjni-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
hawtjni-javadoc-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-client-cache-4.5.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-client-javadoc-4.5.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-core-javadoc-4.4.10-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-project-9-2.module+el8.10.0+90622+accb6b48.noarch.rpm
isorelax-0-0.23.release20050331.module+el8.10.0+90622+accb6b48.noarch.rpm
isorelax-javadoc-0-0.23.release20050331.module+el8.10.0+90622+accb6b48.noarch.rpm
ivy-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jakarta-oro-2.0.8-23.module+el8.10.0+90622+accb6b48.noarch.rpm
jakarta-oro-javadoc-2.0.8-23.module+el8.10.0+90622+accb6b48.noarch.rpm
jansi-javadoc-1.17.1-1.module+el8.10.0+90622+accb6b48.noarch.rpm
jansi-native-javadoc-1.7-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-demo-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-javadoc-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-manual-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-maven-plugin-2.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-maven-plugin-javadoc-2.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-javadoc-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-manual-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
javamail-1.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javamail-javadoc-1.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javapackages-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-demo-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-javadoc-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jboss-interceptors-1.2-api-javadoc-1.0.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
jboss-parent-20-4.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-demo-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdependency-1.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jdependency-javadoc-1.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-javadoc-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom2-2.0.6-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom2-javadoc-2.0.6-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-demo-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-javadoc-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jflex-1.6.1-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jflex-javadoc-1.6.1-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jline-javadoc-2.14.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jsch-javadoc-0.1.54-6.module+el8.10.0+90622+accb6b48.noarch.rpm
jsoup-javadoc-1.11.3-3.module+el8.10.0+90622+accb6b48.noarch.rpm
jsr-305-javadoc-0-0.22.20130910svn.module+el8.10.0+90622+accb6b48.noarch.rpm
jtidy-1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48.noarch.rpm
jtidy-javadoc-1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48.noarch.rpm
jul-to-slf4j-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
junit-javadoc-4.12-9.module+el8.10.0+90622+accb6b48.noarch.rpm
junit-manual-4.12-9.module+el8.10.0+90622+accb6b48.noarch.rpm
jvnet-parent-4-10.module+el8.10.0+90622+accb6b48.noarch.rpm
jzlib-demo-1.1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
jzlib-javadoc-1.1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
log4j-over-slf4j-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven2-javadoc-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-antrun-plugin-1.8-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-antrun-plugin-javadoc-1.8-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-archiver-3.2.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-archiver-javadoc-3.2.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-manager-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-resolver-1.0-18.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-resolver-javadoc-1.0-18.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-transfer-0.9.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-transfer-javadoc-0.9.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-assembly-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-assembly-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-cal10n-plugin-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-clean-plugin-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-clean-plugin-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-common-artifact-filters-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-common-artifact-filters-javadoc-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-compiler-plugin-3.7.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-compiler-plugin-javadoc-3.7.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-analyzer-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-analyzer-javadoc-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-plugin-3.0.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-plugin-javadoc-3.0.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-tree-3.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-tree-javadoc-3.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-core-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-javadoc-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-logging-api-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-apt-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-confluence-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-docbook-simple-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-fml-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-latex-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-rtf-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-modules-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-twiki-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-xdoc-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-xhtml-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sink-api-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sitetools-1.7.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sitetools-javadoc-1.7.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-test-docs-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-tests-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-api-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-javadoc-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-plugin-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-rules-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-failsafe-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-file-management-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-file-management-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-filtering-3.1.1-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-filtering-javadoc-3.1.1-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-hawtjni-plugin-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-install-plugin-2.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-install-plugin-javadoc-2.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-2.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-javadoc-2.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-plugin-1.10-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-plugin-javadoc-1.10-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-jar-plugin-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-jar-plugin-javadoc-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-javadoc-3.5.4-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-model-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-monitor-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-parent-27-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-annotations-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-build-helper-1.9.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-build-helper-javadoc-1.9.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-bundle-3.5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-bundle-javadoc-3.5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-descriptor-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-plugin-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-registry-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugins-pom-28-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-harness-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-javadoc-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-tools-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-annotations-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-ant-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-api-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-beanshell-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-generators-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-java-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-javadoc-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-javadocs-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-model-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-profile-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-project-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-remote-resources-plugin-1.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-remote-resources-plugin-javadoc-1.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-api-3.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-api-javadoc-3.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-impl-3.0.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-impl-javadoc-3.0.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-javadoc-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-test-util-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-classpath-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-file-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-http-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resources-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resources-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-ant-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-beanshell-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-interpreter-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-interpreter-javadoc-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-settings-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shade-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shade-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-22-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-incremental-1.1-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-incremental-javadoc-1.1-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-io-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-io-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-utils-javadoc-3.2.1-0.1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-source-plugin-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-source-plugin-javadoc-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-javadoc-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-provider-junit-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-provider-testng-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-report-parser-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-report-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-test-tools-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-toolchain-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-verifier-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-verifier-javadoc-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-ftp-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-http-lightweight-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-javadoc-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-providers-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
mockito-1.10.19-17.module+el8.10.0+90622+accb6b48.noarch.rpm
mockito-javadoc-1.10.19-17.module+el8.10.0+90622+accb6b48.noarch.rpm
modello-1.9.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
modello-javadoc-1.9.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
mojo-parent-40-6.module+el8.10.0+90622+accb6b48.noarch.rpm
munge-maven-plugin-1.0-11.module+el8.10.0+90622+accb6b48.noarch.rpm
munge-maven-plugin-javadoc-1.0-11.module+el8.10.0+90622+accb6b48.noarch.rpm
objectweb-asm-javadoc-6.2-5.module+el8.10.0+90622+accb6b48.noarch.rpm
objectweb-pom-1.5-7.module+el8.10.0+90622+accb6b48.noarch.rpm
objenesis-2.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
objenesis-javadoc-2.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-annotation-6.0.0-7.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-annotation-javadoc-6.0.0-7.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-compendium-6.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-compendium-javadoc-6.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-core-6.0.0-6.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-core-javadoc-6.0.0-6.module+el8.10.0+90622+accb6b48.noarch.rpm
os-maven-plugin-1.2.3-9.module+el8.10.0+90622+accb6b48.noarch.rpm
os-maven-plugin-javadoc-1.2.3-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-ant-factory-1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-ant-factory-javadoc-1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-archiver-3.6.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-archiver-javadoc-3.6.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-bsh-factory-1.0-0.19.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-bsh-factory-javadoc-1.0-0.19.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-build-api-0.0.7-20.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-build-api-javadoc-0.0.7-20.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cipher-javadoc-1.7-14.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-classworlds-javadoc-2.5.2-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cli-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cli-javadoc-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-extras-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-javadoc-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-pom-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-api-1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-api-javadoc-1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-factories-pom-1.0-0.15.alpha11.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-components-pom-1.3.1-10.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-component-javadoc-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-component-metadata-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-container-default-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-javadoc-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-i18n-1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-i18n-javadoc-1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-api-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-javadoc-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-jline-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interpolation-javadoc-1.22-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-io-3.0.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-io-javadoc-3.0.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-languages-0.9.10-3.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-languages-javadoc-0.9.10-3.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-pom-5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-resources-1.0-0.23.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-resources-javadoc-1.0-0.23.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-sec-dispatcher-javadoc-1.4-26.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-utils-javadoc-3.1.0-3.module+el8.10.0+90967+1f61ac17.1.noarch.rpm
plexus-velocity-1.2-4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-velocity-javadoc-1.2-4.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-easymock-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-mockito-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-support-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-common-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-core-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-javadoc-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-junit4-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-reflect-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-testng-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
python3-javapackages-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
qdox-2.0-3.M9.module+el8.10.0+90622+accb6b48.noarch.rpm
qdox-javadoc-2.0-3.M9.module+el8.10.0+90622+accb6b48.noarch.rpm
regexp-1.5-26.module+el8.10.0+90622+accb6b48.noarch.rpm
regexp-javadoc-1.5-26.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-javadoc-0.3.3-7.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-mojos-0.3.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-mojos-javadoc-0.3.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-ext-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-javadoc-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-jcl-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-log4j12-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-manual-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-sources-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
sonatype-oss-parent-7-14.module+el8.10.0+90622+accb6b48.noarch.rpm
sonatype-plugins-parent-8-12.module+el8.10.0+90622+accb6b48.noarch.rpm
spec-version-maven-plugin-1.2-11.module+el8.10.0+90622+accb6b48.noarch.rpm
spec-version-maven-plugin-javadoc-1.2-11.module+el8.10.0+90622+accb6b48.noarch.rpm
spice-parent-26-8.module+el8.10.0+90622+accb6b48.noarch.rpm
testng-6.14.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
testng-javadoc-6.14.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
weld-parent-34-5.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-demo-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-javadoc-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-manual-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-xsltc-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xbean-4.8-1.module+el8.10.0+90622+accb6b48.noarch.rpm
xbean-javadoc-4.8-1.module+el8.10.0+90622+accb6b48.noarch.rpm
xmlunit-1.6-7.module+el8.10.0+90622+accb6b48.noarch.rpm
xmlunit-javadoc-1.6-7.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-api-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-bisect-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-connector-aether-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-connector-ivy-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-core-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-install-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-javadoc-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-minimal-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-mojo-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-parent-pom-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-resolve-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-subst-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-tools-pom-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xz-java-javadoc-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm

aarch64:
ant-antlr-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-bcel-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-bsf-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-log4j-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-oro-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-regexp-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-resolver-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-apache-xalan2-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-commons-logging-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-commons-net-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-contrib-1.0-0.32.b3.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-contrib-javadoc-1.0-0.32.b3.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-javadoc-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-javamail-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jdepend-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jmf-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-jsch-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-junit-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-C++-2.7.7-56.module+el8.10.0+90622+accb6b48.aarch64.rpm
antlr-javadoc-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-manual-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
antlr-tool-2.7.7-56.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-manual-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-swing-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-testutil-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
ant-xz-1.10.5-1.module+el8.10.0+90622+accb6b48.noarch.rpm
aopalliance-javadoc-1.0-17.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-beanutils-1.9.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-beanutils-javadoc-1.9.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-cli-javadoc-1.4-4.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-codec-javadoc-1.11-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-compress-javadoc-1.18-1.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-exec-1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-exec-javadoc-1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-io-javadoc-2.6-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-jxpath-javadoc-1.3-29.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-lang3-javadoc-3.7-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-logging-javadoc-1.2-13.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-net-javadoc-3.6-3.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-commons-parent-43-2.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-ivy-2.4.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-ivy-javadoc-2.4.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-parent-19-2.module+el8.10.0+90622+accb6b48.noarch.rpm
apache-resource-bundles-2-20.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bnd-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bnd-javadoc-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
aqute-bndlib-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
assertj-core-3.8.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
assertj-core-javadoc-3.8.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
atinject-javadoc-1-28.20100611svn86.module+el8.10.0+90622+accb6b48.noarch.rpm
atinject-tck-1-28.20100611svn86.module+el8.10.0+90622+accb6b48.noarch.rpm
bcel-6.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
bcel-javadoc-6.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
beust-jcommander-1.71-5.module+el8.10.0+90622+accb6b48.noarch.rpm
beust-jcommander-javadoc-1.71-5.module+el8.10.0+90622+accb6b48.noarch.rpm
bnd-maven-plugin-3.5.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
bsf-2.4.0-30.module+el8.10.0+90622+accb6b48.noarch.rpm
bsf-javadoc-2.4.0-30.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-javadoc-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
bsh-manual-2.0-13.b6.module+el8.10.0+90622+accb6b48.noarch.rpm
byaccj-1.15-17.module+el8.10.0+90622+accb6b48.aarch64.rpm
cal10n-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cal10n-javadoc-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cdi-api-javadoc-1.2-8.module+el8.10.0+90622+accb6b48.noarch.rpm
cglib-3.2.4-7.module+el8.10.0+90622+accb6b48.noarch.rpm
cglib-javadoc-3.2.4-7.module+el8.10.0+90622+accb6b48.noarch.rpm
easymock-3.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
easymock-javadoc-3.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
exec-maven-plugin-1.6.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
exec-maven-plugin-javadoc-1.6.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-compendium-1.4.0-26.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-compendium-javadoc-1.4.0-26.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-core-1.4.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-core-javadoc-1.4.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-foundation-1.2.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-osgi-foundation-javadoc-1.2.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-parent-4-5.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-utils-1.10.4-2.module+el8.10.0+90622+accb6b48.noarch.rpm
felix-utils-javadoc-1.10.4-2.module+el8.10.0+90622+accb6b48.noarch.rpm
forge-parent-38-11.module+el8.10.0+90622+accb6b48.noarch.rpm
fusesource-pom-1.11-3.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-annotation-javadoc-1.0-23.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jms-1.1.1-25.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jms-javadoc-1.1.1-25.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jpa-1.1.1-21.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-jpa-javadoc-1.1.1-21.module+el8.10.0+90622+accb6b48.noarch.rpm
geronimo-parent-poms-1.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-annotation-api-javadoc-1.2-13.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-el-javadoc-3.0.1-0.7.b08.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-jsp-api-javadoc-2.3.2-0.9.b01.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-legal-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-master-pom-8-11.module+el8.10.0+90622+accb6b48.noarch.rpm
glassfish-servlet-api-javadoc-3.1.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
google-guice-javadoc-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guava20-javadoc-20.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
guava20-testlib-20.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-assistedinject-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-bom-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-extensions-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-grapher-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-jmx-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-jndi-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-multibindings-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-parent-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-servlet-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-testlib-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
guice-throwingproviders-4.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
hamcrest-demo-1.3-23.module+el8.10.0+90622+accb6b48.noarch.rpm
hamcrest-javadoc-1.3-23.module+el8.10.0+90622+accb6b48.noarch.rpm
hawtjni-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
hawtjni-javadoc-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-client-cache-4.5.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-client-javadoc-4.5.5-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-core-javadoc-4.4.10-4.module+el8.10.0+90622+accb6b48.noarch.rpm
httpcomponents-project-9-2.module+el8.10.0+90622+accb6b48.noarch.rpm
isorelax-0-0.23.release20050331.module+el8.10.0+90622+accb6b48.noarch.rpm
isorelax-javadoc-0-0.23.release20050331.module+el8.10.0+90622+accb6b48.noarch.rpm
ivy-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jakarta-oro-2.0.8-23.module+el8.10.0+90622+accb6b48.noarch.rpm
jakarta-oro-javadoc-2.0.8-23.module+el8.10.0+90622+accb6b48.noarch.rpm
jansi-javadoc-1.17.1-1.module+el8.10.0+90622+accb6b48.noarch.rpm
jansi-native-javadoc-1.7-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-demo-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-javadoc-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-manual-7.0.2-6.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-maven-plugin-2.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
javacc-maven-plugin-javadoc-2.6-25.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-javadoc-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
java_cup-manual-0.11b-8.module+el8.10.0+90622+accb6b48.noarch.rpm
javamail-1.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javamail-javadoc-1.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
javapackages-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-demo-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jaxen-javadoc-1.1.6-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jboss-interceptors-1.2-api-javadoc-1.0.0-8.module+el8.10.0+90622+accb6b48.noarch.rpm
jboss-parent-20-4.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-demo-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdependency-1.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jdependency-javadoc-1.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jdepend-javadoc-2.9.1-18.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom2-2.0.6-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom2-javadoc-2.0.6-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-demo-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jdom-javadoc-1.1.3-17.module+el8.10.0+90622+accb6b48.noarch.rpm
jflex-1.6.1-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jflex-javadoc-1.6.1-12.module+el8.10.0+90622+accb6b48.noarch.rpm
jline-javadoc-2.14.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
jsch-javadoc-0.1.54-6.module+el8.10.0+90622+accb6b48.noarch.rpm
jsoup-javadoc-1.11.3-3.module+el8.10.0+90622+accb6b48.noarch.rpm
jsr-305-javadoc-0-0.22.20130910svn.module+el8.10.0+90622+accb6b48.noarch.rpm
jtidy-1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48.noarch.rpm
jtidy-javadoc-1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48.noarch.rpm
jul-to-slf4j-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
junit-javadoc-4.12-9.module+el8.10.0+90622+accb6b48.noarch.rpm
junit-manual-4.12-9.module+el8.10.0+90622+accb6b48.noarch.rpm
jvnet-parent-4-10.module+el8.10.0+90622+accb6b48.noarch.rpm
jzlib-demo-1.1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
jzlib-javadoc-1.1.3-8.module+el8.10.0+90622+accb6b48.noarch.rpm
log4j-over-slf4j-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven2-javadoc-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-antrun-plugin-1.8-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-antrun-plugin-javadoc-1.8-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-archiver-3.2.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-archiver-javadoc-3.2.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-manager-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-resolver-1.0-18.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-resolver-javadoc-1.0-18.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-transfer-0.9.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-artifact-transfer-javadoc-0.9.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-assembly-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-assembly-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-cal10n-plugin-0.8.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-clean-plugin-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-clean-plugin-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-common-artifact-filters-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-common-artifact-filters-javadoc-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-compiler-plugin-3.7.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-compiler-plugin-javadoc-3.7.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-analyzer-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-analyzer-javadoc-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-plugin-3.0.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-plugin-javadoc-3.0.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-tree-3.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-dependency-tree-javadoc-3.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-core-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-javadoc-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-logging-api-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-apt-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-confluence-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-docbook-simple-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-fml-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-latex-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-rtf-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-modules-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-twiki-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-xdoc-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-module-xhtml-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sink-api-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sitetools-1.7.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-sitetools-javadoc-1.7.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-test-docs-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-doxia-tests-1.7-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-api-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-javadoc-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-plugin-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-enforcer-rules-1.4.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-failsafe-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-file-management-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-file-management-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-filtering-3.1.1-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-filtering-javadoc-3.1.1-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-hawtjni-plugin-1.16-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-install-plugin-2.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-install-plugin-javadoc-2.5.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-2.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-javadoc-2.2-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-plugin-1.10-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-invoker-plugin-javadoc-1.10-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-jar-plugin-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-jar-plugin-javadoc-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-javadoc-3.5.4-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-local-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-model-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-monitor-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-parent-27-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-annotations-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-build-helper-1.9.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-build-helper-javadoc-1.9.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-bundle-3.5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-bundle-javadoc-3.5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-descriptor-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-plugin-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-registry-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugins-pom-28-7.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-harness-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-javadoc-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-testing-tools-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-annotations-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-ant-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-api-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-beanshell-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-generators-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-java-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-javadoc-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-javadocs-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-plugin-tools-model-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-profile-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-project-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-remote-resources-plugin-1.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-remote-resources-plugin-javadoc-1.5-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-api-3.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-api-javadoc-3.0-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-impl-3.0.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-reporting-impl-javadoc-3.0.0-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-javadoc-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-test-util-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-classpath-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-file-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resolver-transport-http-1.1.1-2.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resources-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-resources-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-ant-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-beanshell-3.5.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-interpreter-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-script-interpreter-javadoc-1.1-11.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-settings-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shade-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shade-plugin-javadoc-3.1.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-22-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-incremental-1.1-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-incremental-javadoc-1.1-14.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-io-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-io-javadoc-3.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-shared-utils-javadoc-3.2.1-0.1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-source-plugin-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-source-plugin-javadoc-3.0.1-4.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-javadoc-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-provider-junit-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-provider-testng-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-report-parser-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-surefire-report-plugin-2.22.0-3.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-test-tools-3.3.0-12.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-toolchain-2.2.1-59.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-verifier-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-verifier-javadoc-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-ftp-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-http-lightweight-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-javadoc-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
maven-wagon-providers-3.1.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
mockito-1.10.19-17.module+el8.10.0+90622+accb6b48.noarch.rpm
mockito-javadoc-1.10.19-17.module+el8.10.0+90622+accb6b48.noarch.rpm
modello-1.9.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
modello-javadoc-1.9.1-7.module+el8.10.0+90622+accb6b48.noarch.rpm
mojo-parent-40-6.module+el8.10.0+90622+accb6b48.noarch.rpm
munge-maven-plugin-1.0-11.module+el8.10.0+90622+accb6b48.noarch.rpm
munge-maven-plugin-javadoc-1.0-11.module+el8.10.0+90622+accb6b48.noarch.rpm
objectweb-asm-javadoc-6.2-5.module+el8.10.0+90622+accb6b48.noarch.rpm
objectweb-pom-1.5-7.module+el8.10.0+90622+accb6b48.noarch.rpm
objenesis-2.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
objenesis-javadoc-2.6-2.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-annotation-6.0.0-7.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-annotation-javadoc-6.0.0-7.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-compendium-6.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-compendium-javadoc-6.0.0-5.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-core-6.0.0-6.module+el8.10.0+90622+accb6b48.noarch.rpm
osgi-core-javadoc-6.0.0-6.module+el8.10.0+90622+accb6b48.noarch.rpm
os-maven-plugin-1.2.3-9.module+el8.10.0+90622+accb6b48.noarch.rpm
os-maven-plugin-javadoc-1.2.3-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-ant-factory-1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-ant-factory-javadoc-1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-archiver-3.6.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-archiver-javadoc-3.6.0-1.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-bsh-factory-1.0-0.19.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-bsh-factory-javadoc-1.0-0.19.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-build-api-0.0.7-20.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-build-api-javadoc-0.0.7-20.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cipher-javadoc-1.7-14.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-classworlds-javadoc-2.5.2-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cli-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-cli-javadoc-1.6-6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-extras-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-javadoc-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-compiler-pom-2.8.2-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-api-1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-api-javadoc-1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-component-factories-pom-1.0-0.15.alpha11.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-components-pom-1.3.1-10.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-component-javadoc-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-component-metadata-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-container-default-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-containers-javadoc-1.7.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-i18n-1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-i18n-javadoc-1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-api-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-javadoc-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interactivity-jline-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-interpolation-javadoc-1.22-9.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-io-3.0.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-io-javadoc-3.0.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-languages-0.9.10-3.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-languages-javadoc-0.9.10-3.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-pom-5.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-resources-1.0-0.23.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-resources-javadoc-1.0-0.23.a7.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-sec-dispatcher-javadoc-1.4-26.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-utils-javadoc-3.1.0-3.module+el8.10.0+90967+1f61ac17.1.noarch.rpm
plexus-velocity-1.2-4.module+el8.10.0+90622+accb6b48.noarch.rpm
plexus-velocity-javadoc-1.2-4.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-easymock-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-mockito-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-api-support-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-common-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-core-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-javadoc-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-junit4-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-reflect-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
powermock-testng-1.6.5-9.module+el8.10.0+90622+accb6b48.noarch.rpm
python3-javapackages-5.3.0-2.module+el8.10.0+90622+accb6b48.noarch.rpm
qdox-2.0-3.M9.module+el8.10.0+90622+accb6b48.noarch.rpm
qdox-javadoc-2.0-3.M9.module+el8.10.0+90622+accb6b48.noarch.rpm
regexp-1.5-26.module+el8.10.0+90622+accb6b48.noarch.rpm
regexp-javadoc-1.5-26.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-javadoc-0.3.3-7.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-mojos-0.3.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
sisu-mojos-javadoc-0.3.1-8.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-ext-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-javadoc-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-jcl-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-log4j12-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-manual-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
slf4j-sources-1.7.25-4.module+el8.10.0+90622+accb6b48.noarch.rpm
sonatype-oss-parent-7-14.module+el8.10.0+90622+accb6b48.noarch.rpm
sonatype-plugins-parent-8-12.module+el8.10.0+90622+accb6b48.noarch.rpm
spec-version-maven-plugin-1.2-11.module+el8.10.0+90622+accb6b48.noarch.rpm
spec-version-maven-plugin-javadoc-1.2-11.module+el8.10.0+90622+accb6b48.noarch.rpm
spice-parent-26-8.module+el8.10.0+90622+accb6b48.noarch.rpm
testng-6.14.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
testng-javadoc-6.14.3-5.module+el8.10.0+90622+accb6b48.noarch.rpm
weld-parent-34-5.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-demo-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-javadoc-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-manual-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xalan-j2-xsltc-2.7.1-38.module+el8.10.0+90622+accb6b48.noarch.rpm
xbean-4.8-1.module+el8.10.0+90622+accb6b48.noarch.rpm
xbean-javadoc-4.8-1.module+el8.10.0+90622+accb6b48.noarch.rpm
xmlunit-1.6-7.module+el8.10.0+90622+accb6b48.noarch.rpm
xmlunit-javadoc-1.6-7.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-api-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-bisect-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-connector-aether-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-connector-ivy-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-core-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-install-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-javadoc-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-minimal-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-mojo-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-parent-pom-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-resolve-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-subst-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xmvn-tools-pom-3.0.0-21.module+el8.10.0+90622+accb6b48.noarch.rpm
xz-java-javadoc-1.8-2.module+el8.10.0+90622+accb6b48.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/ant-contrib-1.0-0.32.b3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/antlr-2.7.7-56.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-beanutils-1.9.3-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-exec-1.3-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-commons-parent-43-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-ivy-2.4.0-14.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-parent-19-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/apache-resource-bundles-2-20.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/aqute-bnd-3.5.0-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/assertj-core-3.8.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/bcel-6.2-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/beust-jcommander-1.71-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/bsf-2.4.0-30.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/bsh-2.0-13.b6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/byaccj-1.15-17.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/cal10n-0.8.1-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/cglib-3.2.4-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/easymock-3.5-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/exec-maven-plugin-1.6.0-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/felix-osgi-compendium-1.4.0-26.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/felix-osgi-core-1.4.0-23.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/felix-osgi-foundation-1.2.0-23.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/felix-parent-4-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/felix-utils-1.10.4-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/forge-parent-38-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/fusesource-pom-1.11-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/geronimo-jms-1.1.1-25.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/geronimo-jpa-1.1.1-21.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/geronimo-parent-poms-1.6-25.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/glassfish-legal-1.1-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/glassfish-master-pom-8-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/hawtjni-1.16-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/httpcomponents-project-9-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/isorelax-0-0.23.release20050331.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jakarta-oro-2.0.8-23.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/javacc-7.0.2-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/javacc-maven-plugin-2.6-25.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/java_cup-0.11b-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/javamail-1.5.2-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/javapackages-tools-5.3.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jaxen-1.1.6-18.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jboss-parent-20-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jdepend-2.9.1-18.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jdependency-1.2-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jdom-1.1.3-17.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jdom2-2.0.6-12.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jflex-1.6.1-12.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jtidy-1.0-0.28.20100930svn1125.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/jvnet-parent-4-10.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven2-2.2.1-59.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-antrun-plugin-1.8-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-archiver-3.2.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-artifact-resolver-1.0-18.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-artifact-transfer-0.9.0-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-assembly-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-clean-plugin-3.0.0-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-common-artifact-filters-3.0.1-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-compiler-plugin-3.7.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-dependency-analyzer-1.8-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-dependency-plugin-3.0.2-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-dependency-tree-3.0-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-doxia-1.7-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-doxia-sitetools-1.7.5-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-enforcer-1.4.1-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-file-management-3.0.0-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-filtering-3.1.1-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-install-plugin-2.5.2-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-invoker-2.2-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-invoker-plugin-1.10-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-jar-plugin-3.1.0-1.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-parent-27-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-plugin-build-helper-1.9.1-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-plugin-bundle-3.5.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-plugins-pom-28-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-plugin-testing-3.3.0-12.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-plugin-tools-3.5.1-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-remote-resources-plugin-1.5-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-reporting-api-3.0-14.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-reporting-impl-3.0.0-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-resources-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-script-interpreter-1.1-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-shade-plugin-3.1.0-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-shared-22-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-shared-incremental-1.1-14.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-shared-io-3.0.0-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-source-plugin-3.0.1-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-surefire-2.22.0-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/maven-verifier-1.6-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/mockito-1.10.19-17.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/modello-1.9.1-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/mojo-parent-40-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/munge-maven-plugin-1.0-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/objectweb-pom-1.5-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/objenesis-2.6-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/osgi-annotation-6.0.0-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/osgi-compendium-6.0.0-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/osgi-core-6.0.0-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/os-maven-plugin-1.2.3-9.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-ant-factory-1.0-0.20.a2.2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-archiver-3.6.0-1.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-bsh-factory-1.0-0.19.a7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-build-api-0.0.7-20.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-cli-1.6-6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-compiler-2.8.2-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-component-api-1.0-0.24.alpha15.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-component-factories-pom-1.0-0.15.alpha11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-components-pom-1.3.1-10.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-containers-1.7.1-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-i18n-1.0-0.11.b10.4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-interactivity-1.0-0.27.alpha6.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-io-3.0.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-languages-0.9.10-3.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-pom-5.0-2.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-resources-1.0-0.23.a7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/plexus-velocity-1.2-4.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/powermock-1.6.5-9.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/qdox-2.0-3.M9.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/regexp-1.5-26.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/sisu-mojos-0.3.1-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/sonatype-oss-parent-7-14.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/sonatype-plugins-parent-8-12.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/spec-version-maven-plugin-1.2-11.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/spice-parent-26-8.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/testng-6.14.3-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/weld-parent-34-5.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xbean-4.8-1.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xmlunit-1.6-7.module+el8.10.0+90622+accb6b48.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/xmvn-3.0.0-21.module+el8.10.0+90622+accb6b48.src.rpm

Related CVEs:

CVE-2025-67030




Description of changes:

ant-contrib
[1.0-0.32.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-0.31.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-0.30.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-0.29.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-0.28.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-0.27.b3]
- Fix incorrect ant.d path.

[1.0-0.26.b3]
- Build using XMvn Ivy resolver

[1.0-0.25.b3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-0.24.b3]
- Use .mfiles generated during build

[1.0-0.23.b3]
- Use Requires: java-headless rebuild (#1067528)

antlr
[0:2.7.7-56]
- Add explicit requirement of javapackages-tools.

[0:2.7.7-55]
- Repack the tarball without binaries

[0:2.7.7-54]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.7.7-53]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.7.7-52]
- Switch to new license tag: ANTLR-PD

[0:2.7.7-51]
- Conditionally allow building without C++ docs

[0:2.7.7-50]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0:2.7.7-49]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.7.7-48]
- Proper python2 subpackage name

[0:2.7.7-47]
- Add conditional for python

apache-commons-beanutils
[1.9.3-5]
- Fix improper access control vulnerabilities
- Resolves: CVE-2019-10086, CVE-2025-48734

[1.9.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.9.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.9.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.9.3-1]
- Update to upstream version 1.9.3

[1.9.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.9.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.9.2-3]
- Remove Provides/Obsoletes for javadoc package

[1.9.2-2]
- Fix build-requires on apache-commons-parent

[1.9.2-1]
- Update to upstream version 1.9.2
- Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
- Remove RPM bug workaround

apache-commons-exec
[1.3-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.3-5]
- Regenerate build-requires

[1.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.3-2]
- Skip running unstable Exec57Test
- Resolves: rhbz#1202260

[1.3-1]
- Update to 1.3

[1.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.2-2]
- Use Requires: java-headless rebuild (#1067528)

apache-commons-parent
[43-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[43-1]
- Update to upstream version 43

[42-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[42-3]
- Remove more useless plugins

[42-2]
- Remove profiles for plugins that are useless in package builds

[42-1]
- Update to upstream version 42

[40-2]
- Add missing dependency

[40-1]
- Update to upstream version 40

[39-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[39-1]
- Update to upstream version 39

apache-ivy
[2.4.0-14]
- Allow building without vfs support

[2.4.0-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.4.0-12]
- Remove now unneeded patch

[2.4.0-11]
- Fix build against ant 1.10.2

[2.4.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.4.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.4.0-8]
- Don't hardcode sysconfdir path

[2.4.0-7]
- Add conditional for bouncycastle

[2.4.0-6]
- Add conditional for ssh

[2.4.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

apache-parent
[19-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[19-1]
- Update to upstream version 19
- Add missing BR on apache-resource-bundles

[18-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[18-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[18-1]
- Update to upstream version 18

[17-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[17-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[17-1]
- Update to upstream version 17

[16-1]
- Update to upstream version 16

[15-1]
- Update to upstream version 15

apache-resource-bundles
[2-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2-15]
- Cleanup spec file

[2-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2-13]
- Use Requires: java-headless rebuild (#1067528)

[2-12]
- Fix unowned directory

[2-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

aqute-bnd
[3.5.0-4]
- Add requirement on javapackages-tools for bnd script.

[3.5.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.5.0-1]
- Update to upstream version 3.5.0

[3.4.0-3]
- Cleanup spec file conditionals

[3.4.0-2]
- Remove unneeded javadoc plugin

[3.4.0-1]
- Update to upstream version 3.4.0

[3.3.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.3.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.3.0-5]
- Don't use legacy Ant artifact coordinates

assertj-core
[3.8.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.8.0-1]
- Update to latest version of assertj
- Disable tests due to missing deps in Fedora

[2.2.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.0-3]
- Add conditional for memoryfilesystem

[2.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.2.0-1]
- Initial packaging

bcel
[0:6.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:6.2-1]
- Update to upstream version 6.2

[0:6.1-2]
- Conditionally build without jna

[0:6.1-1]
- Update to upstream version 6.1

[0:6.0-0.7.20140406svn1592769]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:6.0-0.6.20140406svn1592769]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:6.0-0.5.20140406svn1592769]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:6.0-0.4.20140406svn1592769]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:6.0-0.3.20140406svn1592769]
- Add alias for apache:bcel

[0:6.0-0.2.20140406svn1592769]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

beust-jcommander
[1.71-5]
- Repack the tarball without binaries

[1.71-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.71-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.71-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.71-1]
- Update to upstream version 1.71
- Add patch for issue https://github.com/cbeust/jcommander/issues/367

[1.66-1]
- Update to upstream version 1.66

[1.65-1]
- Update to upstream version 1.65

[1.62-1]
- Update to upstream version 1.62

[1.60-1]
- Update to upstream version 1.60

[1.58-1]
- Update to upstream version 1.58

bsf
[0:2.4.0-30]
- Remove bulid dependency on rhino

[0:2.4.0-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.4.0-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.4.0-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.4.0-26]
- Add missing BR apache-parent

[0:2.4.0-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:2.4.0-24]
- Cleanup package

[0:2.4.0-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:2.4.0-22]
- Add build-requires on javapackages-local

[0:2.4.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

bsh
[0:2.0-13.b6]
- Remove proprietary files from tarball

[0:2.0-12.b6]
- Add requirement on javapackages-tools for script's usage of
  java-functions.

[0:2.0-11.b6]
- Repack the tarball without binaries

[0:2.0-10.b6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.0-9.b6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.0-8.b6]
- Properly conditionalize build-requires

[0:2.0-7.b6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.0-6.b6]
- Add conditional for desktop file

[0:2.0-5.b6]
- Install desktop icon to pixmaps instead of icons

[0:2.0-4.b6]
- Fix directory ownership

byaccj
[0:1.15-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.15-16]
- Cleanup spec file

[0:1.15-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[0:1.15-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.15-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.15-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.15-11]
- Don't install bogus manpage

[0:1.15-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.15-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[0:1.15-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

cal10n
[0.8.1-7]
- Repack the tarball without binaries

[0.8.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.8.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.8.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.8.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.8.1-2]
- Add missing build-requires

[0.8.1-1]
- Update to upstream version 0.8.1

[0.7.7-8]
- Fix build issue with maven-jar-plugin 3.0.0

[0.7.7-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.7.7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

cglib
[3.2.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.2.4-6]
- Rebuild to regenerate OSGi manifest after ASM6 upgrade
- Resolves: rhbz#1490827

[3.2.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.2.4-4]
- Remove unneeded maven-javadoc-plugin invocation

[3.2.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.2.4-2]
- Make ant dependency optional

[3.2.4-1]
- Upgrade to latest 3.2.4 release.
- Resolves RHBZ#1352315

[3.1-10]
- Make ant an optional dependency

[3.1-9]
- Modernise spec file

[3.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

easymock
[3.5-4]
- Repack the tarball without binaries

[3.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.5-1]
- Update to upstream version 3.5

[3.4-6]
- Regenerate OSGi metadata due to Objectweb ASM upgrade

[3.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.4-4]
- Add missing BR on apache-resource-bundles

[3.4-3]
- Remove useless license-plugin

[3.4-2]
- Fix OSGi manifest
- Resolves: rhbz#1341052

[3.4-1]
- Update to upstream version 3.4

exec-maven-plugin
[1.6.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.6.0-1]
- Update to upstream version 1.6.0

[1.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.5.0-1]
- Update to upstream version 1.5.0

[1.4.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4.0-1]
- Update to upstream version 1.4.0

[1.3.2-1]
- Update to upstream version 1.3.2

[1.3.1-1]
- Update to upstream version 1.3.1

felix-osgi-compendium
[1.4.0-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.4.0-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.4.0-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.4.0-23]
- Regenerate build-requires
- Update to current packaging guidelines

[1.4.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4.0-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.4.0-19]
- Switch to mvn style BR for servlet api.

[1.4.0-18]
- Remove BuildRequires on maven-surefire-provider-junit4

[1.4.0-17]
- Use Requires: java-headless rebuild (#1067528)

felix-osgi-core
[1.4.0-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.4.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.4.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.4.0-20]
- Regenerate build-requires
- Update to current packaging guidelines

[1.4.0-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4.0-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4.0-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.4.0-16]
- Remove BuildRequires on maven-surefire-provider-junit4

[1.4.0-15]
- Use Requires: java-headless rebuild (#1067528)

[1.4.0-14]
- Update for latest guidelines

felix-osgi-foundation
[1.2.0-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2.0-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2.0-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2.0-18]
- Add misssing BR on felix-parent.

[1.2.0-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.2.0-16]
- Remove BuildRequires on maven-surefire-provider-junit4

[1.2.0-15]
- Use Requires: java-headless rebuild (#1067528)

[1.2.0-14]
- Update for latest guidelines

felix-parent
[4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4-4]
- Remove unneeded workaround for MANTRUN-51/MNG-6205 issue

[4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4-2]
- Remove maven-javadoc-plugin

[4-1]
- Update to upstream version 4

[2.1-13]
- Regenerate build-requires

[2.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.1-11]
- Remove BR on site-plugin and release-plugin

[2.1-10]
- Add missing requires

[2.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

felix-utils
[1.10.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.10.4-1]
- Update to upstream version 1.10.4

[1.10.2-1]
- Update to upstream version 1.10.2

[1.10.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.10.0-1]
- Update to upstream version 1.10.0

[1.9.0-1]
- Update to upstream version 1.9.0

[1.8.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.8.6-1]
- Update to upstream version 1.8.6

[1.8.2-4]
- Remove build-dependency on maven-source-plugin

[1.8.2-3]
- Regenerate build-requires
- Update to current packaging guidelines

forge-parent
[38-11]
- Escape macros in %changelog

[38-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[38-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[38-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[38-7]
- Remove maven-source-plugin invocation from POM

[38-6]
- Add missing build-requires

[38-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[38-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[38-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[38-2]
- Rebuild to regenerate Maven auto-requires

fusesource-pom
[1.11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.11-1]
- Update to upstream version 1.11

[1.9-14]
- Remove unnecessary maven-scm-plugin

[1.9-13]
- Add missing build-requires

[1.9-12]
- Add missing setup macro to make specfile more portable

[1.9-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.9-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.9-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.9-8]
- Rebuild to regenerate Maven auto-requires

geronimo-jms
[1.1.1-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1.1-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1.1-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1.1-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1.1-21]
- Update to current packaging guidelines
- Remove rpm bug workaround
- Remove legacy obsoletes/provides

[1.1.1-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1.1-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1.1-18]
- Use Requires: java-headless rebuild (#1067528)

[1.1.1-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.1.1-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

geronimo-jpa
[1.1.1-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1.1-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1.1-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1.1-18]
- Regenerate build-requires

[1.1.1-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1.1-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1.1-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1.1-14]
- Remove versioned jar (Resolves rhbz#1022099)

[1.1.1-13]
- Add javax.persistence provides and directory

[1.1.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

geronimo-parent-poms
[1.6-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.6-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.6-22]
- Add missing build-requires

[1.6-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.6-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.6-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.6-18]
- Rebuild to regenerate Maven auto-requires

[1.6-17]
- Update to current packaging guidelines

[1.6-16]
- Convert tabs to spaces

glassfish-legal
[1.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1-6]
- introduce license macro

[1.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1-4]
- Use Requires: java-headless rebuild (#1067528)

[1.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.1-2]
- switch to XMvn
- minor changes to adapt to current guideline

glassfish-master-pom
[8-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[8-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[8-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[8-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[8-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[8-6]
- introduce license macro

[8-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[8-3]
- switch to XMvn
- minor changes to adapt to current guideline

[8-2]
- fixed license tag

hawtjni
[1.16-2]
- Update license tag

[1.16-1]
- Update to upstream version 1.16

[1.15-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.15-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.15-1]
- Update to upstream version 1.15

[1.10-9]
- Add Requires on make

[1.10-8]
- Regenerate BuildRequires

[1.10-7]
- Remove unneeded BR on maven-project-info-reports-plugin

[1.10-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.10-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

httpcomponents-project
[9-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[9-1]
- Update to upstream version 9

[7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7-5]
- Regenerate build-requires

[7-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[7-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[7-1]
- Update to upstream version 7

[6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[6-5]
- Rebuild to regenerate Maven auto-requires

isorelax
[1:0-0.23.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:0-0.22.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:0-0.21.release20050331]
- Install with XMvn

[1:0-0.20.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:0-0.19.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:0-0.18.release20050331]
- Add build-requires on javapackages-local

[1:0-0.17.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:0-0.16.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:0-0.15.release20050331]
- Use Requires: java-headless rebuild (#1067528)

[1:0-0.14.release20050331]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

jakarta-oro
[0:2.0.8-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.0.8-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.0.8-21]
- Install with XMvn

[0:2.0.8-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:2.0.8-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:2.0.8-18]
- Add build-requires on javapackages-local

[0:2.0.8-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:2.0.8-16]
- Remove rpm bug workaround

[0:2.0.8-16]
- Update for latest Java packaging guidelines (#1106816)

[0:2.0.8-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

javacc
[0:7.0.2-6]
- Add requirement on javapackages-tools for scripts using
  java-functions.

[0:7.0.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:7.0.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:7.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:7.0.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:7.0.2-1]
- Update to upstream version 7.0.2

[0:7.0.1-1]
- Update to upstream version 7.0.1

[0:6.1.3-1]
- Update to upstream version 6.1.3
- Use new upstream location
- Generate scripts with jpackage_script

[0:6.1.2-1]
- Update to upstream version 6.1.2

[0:5.0-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

javacc-maven-plugin
[2.6-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.6-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.6-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.6-22]
- Add missing build-requires

[2.6-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.6-19]
- Mavenize requires and build-requires

[2.6-18]
- Update to current packaging guidelines

[2.6-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.6-16]
- Use .mfiles generated during build

java_cup
[1:0.11b-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:0.11b-7]
- Elimitate race condition when injecting JAR manifest
- Resolves: rhbz#1495233

[1:0.11b-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:0.11b-5]
- Install with XMvn

[1:0.11b-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:0.11b-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:0.11b-2]
- convert %defines to %global

[1:0.11b-1]
- Update to upstream version 0.11b

[1:0.11a-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:0.11a-19]
- introduce license macro

javamail
[1.5.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.5.2-6]
- Specify CDDL license version

[1.5.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.5.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.5.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.5.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.5.2-1]
- Update to upstream 1.5.2 using upstream tarball.

[1.5.1-5]
- Remove javax.activation:activation dependency.

[1.5.1-4]
- Fix build-requires on jvnet-parent

[1.5.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

javapackages-tools
[5.3.0-2]
- Make javapackages-local require Python interpreter executable path

[5.3.0-1]
- Update to upstream version 5.3.0

[5.2.0-6]
- Switch auto-requires generator to javapackages-filesystem

[5.2.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[5.2.0-4]
- Rebuilt for Python 3.7

[5.2.0-3]
- Disable bytecode compilation outside of site-packages

[5.2.0-2]
- Fix running tests on Python 3.7

[5.2.0-2]
- Rebuilt for Python 3.7

[5.2.0-1]
- Update to upstream version 5.2.0

[5.1.0-1]
- Update to upstream version 5.1.0
- Introduce javapackages-filesystem package

jaxen
[0:1.1.6-18]
- Allow conditionally building with dom4j

[0:1.1.6-17]
- Fix license tag to include W3C

[0:1.1.6-16]
- Remove support for dom4j

[0:1.1.6-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.1.6-14]
- Escape macros in %changelog

[0:1.1.6-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.1.6-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.1.6-11]
- Don't hardcode package name

[0:1.1.6-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.1.6-9]
- Add missing build-requires
- Remove old obsoletes/provides

jboss-parent
[20-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[20-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[20-2]
- Remove useless plugins

[20-1]
- update to 20

[19-1]
- update to 19
- update license field and add license file (see POM file)

[11-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[11-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[11-5]
- Cleanup spec file

[11-4]
- Remove com.sun:tools scope

[11-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

jdepend
[0:2.9.1-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.9.1-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.9.1-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:2.9.1-15]
- adapt to current guideline
- introduce license macro

[0:2.9.1-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:2.9.1-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:2.9.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0:2.9.1-11]
- Use .mfiles generated during build

[0:2.9.1-10]
- Use Requires: java-headless rebuild (#1067528)

[0:2.9.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

jdependency
[1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2-1]
- Update to upstream version 1.2

[1.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1-1]
- Update to upstream version 1.1

[0.9-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.9-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.9-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.9-1]
- Update to upstream version 0.9

[0.7-10]
- Use Requires: java-headless rebuild (#1067528)

jdom
[0:1.1.3-17]
- Correct license to Saxpath

[0:1.1.3-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.1.3-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.1.3-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.1.3-13]
- fix JAR installation

[0:1.1.3-12]
- Install with XMvn

[0:1.1.3-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.1.3-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.1.3-9]
- Add build-requires on javapackages-local

[0:1.1.3-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

jdom2
[2.0.6-12]
- Repack tarball without bundled jars
- The repacked jar contains slightly different source (force push by upstream?)
- Correct license tag

[2.0.6-11]
- Remove unneeded buildrequires

[2.0.6-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.0.6-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.0.6-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.0.6-7]
- Avoid hardcoded jar paths

[2.0.6-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.0.6-6]
- Add OSGi metadata to main jar
- Fix file listed twice warning

[2.0.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.0.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

jflex
[1.6.1-12]
- Add requirement on javapackages-tools for scripts using
  java-functions.

[1.6.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.6.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.6.1-8]
- Don't hardcode java_cup JAR path

[1.6.1-7]
- Replace absolute path with a macro

[1.6.1-6]
- Add bconds for desktop and emacs

[1.6.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.6.1-4]
- Add missing build-requires

[1.6.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

jtidy
[2:1.0-0.28.20100930svn1125]
- Add requirement on javapackages-tools since jtidy script uses
  java-functions.

[2:1.0-0.27.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2:1.0-0.26.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2:1.0-0.25.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2:1.0-0.24.20100930svn1125]
- Install with XMvn

[2:1.0-0.23.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2:1.0-0.22.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2:1.0-0.21.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2:1.0-0.20.20100930svn1125]
- Remove workaround for RPM bug #646523

[2:1.0-0.19.20100930svn1125]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

jvnet-parent
[4-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[4-4]
- Rebuild to regenerate Maven auto-requires

[4-3]
- Rebuild to regenerate provides

[4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[4-1]
- Update to version 4

maven2
[2.2.1-59]
- Repack tarball without bundled jars
- Fix license tag

[2.2.1-58]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.2.1-57]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2.1-56]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.1-55]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.2.1-54]
- Add missing build-requires

[2.2.1-53]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.2.1-52]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.2.1-51]
- Remove maven-error-diagnostics subpackage
- Cleanup spec file

[2.2.1-50]
- Remove direct dependency on classworlds

maven-antrun-plugin
[1.8-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.8-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.8-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.8-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.8-1]
- Update to upstream release 1.8

[1.7-10]
- Remove legacy Obsoletes/Provides for maven2 plugin

[1.7-9]
- Fix build-requires on parent POM

[1.7-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.7-7]
- Use Requires: java-headless rebuild (#1067528)

maven-archiver
[0:3.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:3.2.0-1]
- Update to upstream version 3.2.0

[0:3.1.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:3.1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:3.1.1-1]
- Update to upstream version 3.1.1

[0:3.0.2-1]
- Update to upstream version 3.0.2

[0:3.0.1-1]
- Update to upstream version 3.0.1

[0:3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:3.0.0-1]
- Update to upstream version 3.0.0
- Remove legacy obsoletes/provides

[0:2.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

maven-artifact-resolver
[1:1.0-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:1.0-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:1.0-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:1.0-15]
- Add missing build-requires
- Remove old obsoletes/provides

[1:1.0-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:1.0-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:1.0-12]
- Fix build-requires on parent POM

[1:1.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:1.0-10]
- Use Requires: java-headless rebuild (#1067528)

[1:1.0-9]
- Adapt to current guidelines

maven-artifact-transfer
[1:0.9.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:0.9.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:0.9.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.9.0-1]
- Update to upstream version 0.9.0

[3.0.0-0.4.20160823svn1753832]
- Update to latest upstream snapshot

[3.0-0.3.20160118svn1722498]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0-0.2.20160118svn1722498]
- Update to latest upstream snapshot

[3.0-0.1.20151012svn1708080]
- Initial packaging

maven-assembly-plugin
[3.1.0-3]
- Escape macros in %changelog

[3.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.1.0-1]
- Update to upstream version 3.1.0

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[2.6-8]
- Compile against Maven 3 APIs

[2.6-7]
- Regenerate build-requires

[2.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6-5]
- Port to Maven Shared IO 3.0.0

maven-clean-plugin
[3.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[2.6.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.6.1-2]
- Add test dependency on junit

[2.6.1-1]
- Update to upstream version 2.6.1

[2.6-1]
- Update to upstream version 2.6
- Enable tests
- Remove Obsoletes/Provides for maven2-plugin-clean

[2.5-10]
- Fix build-requires on parent POM

maven-common-artifact-filters
[3.0.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.1-1]
- Update to upstream version 3.0.1

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[3.0-0.1.20151012svn1708080]
- Update to upstream 3.0 snapshot (svn revision 1708080)

[1.4-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4-15]
- introduce license macro

[1.4-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

maven-compiler-plugin
[3.7.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.7.0-1]
- Update to upstream version 3.7.0

[3.6.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.6.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.6.1-1]
- Update to upstream version 3.6.1

[3.6.0-2]
- Add upstream patch for broken test skipping

[3.6.0-1]
- Update to upstream version 3.6.0

[3.5.1-4]
- Remove dependency on Maven 2 toolchain

[3.5.1-3]
- Add missing BR on maven-plugin-plugin

[3.5.1-2]
- Remove unneeded build-requires

maven-dependency-analyzer
[1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.8-1]
- Update to upstream version 1.8

[1.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.7-1]
- Update to upstream version 1.7

[1.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.6-4]
- Add missing build-requires
- Remove old obsoletes/provides

[1.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.6-1]
- Update to upstream version 1.6

[1.5-1]
- Update to upstream version 1.5

maven-dependency-plugin
[3.0.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.2-1]
- Update to upstream version 3.0.2

[3.0.1-1]
- Update to upstream version 3.0.1

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[3.0.0-0.5.20160823svn1756544]
- Regenerate BuildRequires

[3.0.0-0.4.20160823svn1756544]
- Update to latest upstream snapshot

[3.0-0.3.20160119svn1722372]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0-0.2.20160119svn1722372]
- Update to latest upstream snapshot (svn revision 1722372)

maven-dependency-tree
[3.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0-1]
- Update to upstream version 3.0

[2.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.2-1]
- Update to upstream version 2.2

[2.1-8]
- Fix build-requires on parent POM

[2.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.1-6]
- Use Requires: java-headless rebuild (#1067528)

maven-doxia
[0:1.7-8]
- Regenerate BuildRequires

[0:1.7-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.7-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.7-4]
- Don't require log4j12 unless built with FOP

[0:1.7-3]
- Add missing BR on log4j

[0:1.7-2]
- Add conditional for fop

[0:1.7-1]
- Update to upstream version 1.7

[0:1.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.6-4]
- Port to fop-2.0
- Cleanup bundled class from sitetools

maven-doxia-sitetools
[1.7.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.7.5-1]
- Update to upstream version 1.7.5

[1.7.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.7.4-3]
- Add conditionals for fop and markdown

[1.7.4-2]
- Remove dependency on velocity-tools

[1.7.4-1]
- Update to upstream version 1.7.4

[1.7.3-1]
- Update to upstream version 1.7.3

[1.7.2-1]
- Update to upstream version 1.7.2

[1.7.1-3]
- Port to plexus-utils 3.0.24

[1.7.1-2]
- Add Provides and Obsoletes for maven-doxia-tools

maven-enforcer
[1.4.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.4.1-7]
- Avoid dependency cycle during Maven build

[1.4.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.4.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.4.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4.1-3]
- Fix Maven 3 patch

[1.4.1-2]
- Port to Maven 3 API

[1.4.1-1]
- Update to upstream version 1.4.1

[1.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4-1]
- Update to upstream version 1.4

maven-file-management
[1:3.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:3.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:3.0.0-1]
- Update to upstream version 3.0.0

[1:1.2.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:1.2.1-11]
- Restore original dangling symlink test behaviour

[1:1.2.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:1.2.1-9]
- Use Requires: java-headless rebuild (#1067528)

[1:1.2.1-8]
- Fix unowned directory

maven-filtering
[3.1.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.1.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.1.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.1.1-2]
- Regenerate build-requires

[3.1.1-1]
- Update to upstream version 3.1.1

[3.1.0-1]
- Update to upstream version 3.1.0

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0
- Remove legacy obsoletes/provides
- Update to current packaging guidelines

[1.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.3-1]
- Update to upstream version 1.3

maven-install-plugin
[2.5.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.5.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.5.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.5.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.5.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.5.2-2]
- Remove legacy Obsoletes/Provides for maven2 plugin

[2.5.2-1]
- Update to upstream version 2.5.2

[2.5.1-5]
- Fix build-requires on parent POM

[2.5.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.5.1-3]
- Use Requires: java-headless rebuild (#1067528)

maven-invoker
[2.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.2-4]
- Regenerate build-requires
- Remove old obsoletes/provides

[2.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.2-1]
- Update to upstream version 2.2

[2.1.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[2.1.1-10]
- Fix failing tests

[2.1.1-9]
- Remove some tests which fail on koji

maven-invoker-plugin
[1.10-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.10-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.10-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.10-4]
- Conditionalize groovy

[1.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.10-1]
- Update to upstream version 1.10

[1.9-1]
- Update to upstream version 1.9

[1.8-13]
- Remove legacy Obsoletes/Provides for maven2 plugin

[1.8-12]
- Fix build-requires on parent POM

maven-jar-plugin
[3.1.0-1]
- Update to upstream version 3.1.0

[3.0.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.2-2]
- Add missing BR on maven-plugin-plugin

[3.0.2-1]
- Update to upstream version 3.0.2

[3.0.1-1]
- Update to upstream version 3.0.1

[3.0.0-1]
- Update to upstream version 3.0.0

[2.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

maven-parent
[27-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[27-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[27-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[27-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[27-1]
- Update to upstream version 27

[26-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[26-1]
- Update to upstream version 26

[25-1]
- Update to upstream version 25

[24-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[24-2]
- Rebuild to regenerate Maven auto-requires

maven-plugin-build-helper
[1.9.1-8]
- Correct license to just MIT, The ASL 2.0 files are not shipped in the binary
  RPM

[1.9.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.9.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.9.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.9.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.9.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.9.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.9.1-1]
- Update to upstream version 1.9.1

[1.9-2]
- Regenerate BR

[1.9-1]
- Update to upstream version 1.9

maven-plugin-bundle
[3.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.5.0-1]
- Update to upstream version 3.5.0

[3.4.0-1]
- Update to upstream version 3.4.0

[3.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.3.0-1]
- Update to upstream version 3.3.0

[3.2.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.2.0-3]
- Add conditionals for building without OBR or Maven reports

[3.2.0-2]
- Use osgi APIs instead of felix-framework

[3.2.0-1]
- Update to upstream version 3.2.0

[3.0.1-4]
- Remove aqute downgrade patch

maven-plugins-pom
[28-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[28-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[28-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[28-4]
- Remove BR on maven-site-plugin

[28-3]
- Regenerate build-requires

[28-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[28-1]
- Update to upstream version 28

[27-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[27-2]
- Add missing BR on maven-site-plugin

[27-1]
- Update to upstream version 27

maven-plugin-testing
[3.3.0-12]
- Escape macros in %changelog

[3.3.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.3.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.3.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.3.0-8]
- Remove site-plugin from build

[3.3.0-7]
- Remove network using test

[3.3.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.3.0-5]
- Port to current maven-artifact

[3.3.0-4]
- Enable tests

[3.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

maven-plugin-tools
[0:3.5.1-4]
- Install license files for all subpackage combinations

[0:3.5.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:3.5.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:3.5.1-1]
- Update to upstream version 3.5.1

[0:3.5-4]
- Add missing dependency

[0:3.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:3.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:3.5-1]
- Update to upstream version 3.5

[0:3.4-5]
- Port to plexus-utils 3.0.24

[0:3.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

maven-remote-resources-plugin
[1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.5-1]
- Update to upstream version 1.5

[1.4-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.4-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.4-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.4-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.4-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.4-8]
- Update to current packaging guidelines

[1.4-7]
- Use Requires: java-headless rebuild (#1067528)

[1.4-6]
- Migrate to Wagon subpackages

maven-reporting-api
[1:3.0-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:3.0-13]
- Remove legacy obsoletes and provides

[1:3.0-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:3.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:3.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:3.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:3.0-8]
- Fix build-requires on parent POM

[1:3.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:3.0-6]
- Use Requires: java-headless rebuild (#1067528)

[1:3.0-5]
- Fix unowned directory

maven-reporting-impl
[3.0.0-4]
- Remove legacy obsoletes/provides
- Remove dependency on junit-addons
- Remove build-dependency on maven-invoker-plugin

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[2.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.4-1]
- Update to upstream version 2.4
- Fix BR

[2.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.3-1]
- Update to upstream version 2.3

maven-resources-plugin
[3.1.0-3]
- Install license file

[3.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.1.0-1]
- Update to upstream version 3.1.0

[3.0.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.2-1]
- Update to upstream version 3.0.2

[3.0.1-1]
- Update to upstream version 3.0.1

[3.0.0-1]
- Update to upstream version 3.0.0

[2.7-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

maven-script-interpreter
[1.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1-9]
- Add groovy conditional

[1.1-8]
- Add missing build-requires

[1.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1-5]
- Fix build-requires on parent POM

[1.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1-3]
- Use Requires: java-headless rebuild (#1067528)

[1.1-2]
- Fix BR

maven-shade-plugin
[3.1.0-3]
- Switch BR to guava20

[3.1.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.1.0-1]
- Update to upstream version 3.1.0

[3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[2.4.3-1]
- Update to upstream version 2.4.3

[2.4.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.4.2-1]
- Update to upstream version 2.4.2

[2.4.1-3]
- Fix Maven 3 patch

maven-shared
[22-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[22-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[22-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[22-3]
- Add missing build-requires
- Remove old obsoletes

[22-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[22-1]
- Update to 22 (#1276891)
- Migrate to %license macro

[21-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[21-1]
- Update to upstream version 21

[20-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[20-2]
- Rebuild to regenerate Maven auto-requires

maven-shared-incremental
[1.1-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1-11]
- Add missing build-requires

[1.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1-8]
- Fix build-requires on parent POM

[1.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1-6]
- Use Requires: java-headless rebuild (#1067528)

[1.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

maven-shared-io
[1:3.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:3.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:3.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:3.0.0-1]
- Update to upstream version 3.0.0

[1:1.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:1.1-11]
- Add test dependency on junit

[1:1.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1:1.1-9]
- Use Requires: java-headless rebuild (#1067528)

[1:1.1-8]
- Fix unowned directory

maven-source-plugin
[3.0.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.0.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.1-1]
- Update to upstream version 3.0.1
- Enable tests

[3.0.0-1]
- Update to upstream version 3.0.0

[2.4-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.4-2]
- Cleanup spec file

[2.4-1]
- Update to upstream version 2.4

[2.3-2]
- Remove legacy Obsoletes/Provides for maven2 plugin

maven-surefire
[0:2.22.0-3]
- Repack the tarball without binaries

[0:2.22.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.22.0-1]
- Update to upstream version 2.22.0

[0:2.21.0-1]
- Update to upstream version 2.21.0

[0:2.20.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.20.1-3]
- Remove temporary build-requires

[0:2.20.1-2]
- Add missing requires on procps-ng

[0:2.20.1-1]
- Update to upstream version 2.20.1

[0:2.20-1]
- Update to upstream version 2.20

[0:2.19.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

maven-verifier
[1.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.6-3]
- Remove outdated provides/obsoletes
- Update to current packaging guidelines

[1.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.6-1]
- Update to upstream release 1.6

[1.5-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.5-3]
- Use Requires: java-headless rebuild (#1067528)

[1.5-2]
- Fix unowned directory

mockito
[1.10.19-17]
- Remove bundled minified js from javadoc

[1.10.19-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.10.19-15]
- Escape macros in %changelog

[1.10.19-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.10.19-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.10.19-12]
- Remove conditional for EOL Fedora

[1.10.19-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.10.19-10]
- Explicitly import more cglib packages in OSGi metadata to prevent mockito
  failing under certain circumstances during Eclipse test suites

[1.10.19-9]
- Require hamcrest explicitly in OSGi metadata

[1.10.19-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

modello
[0:1.9.1-7]
- Add explicit requires on javapackages-tools for modello script.

[0:1.9.1-6]
- Allow conditionally building without snakeyaml

[0:1.9.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.9.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.9.1-3]
- Contitionally allow building without jackson

[0:1.9.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.9.1-1]
- Update to upstream version 1.9.1

[0:1.8.3-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.8.3-4]
- Regenerate build-requires
- Remove old obsoletes/provides

[0:1.8.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

mojo-parent
[40-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[40-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[40-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[40-3]
- Remove dependency on site-plugin and checkstyle-plugin

[40-2]
- Update upstream URLs

[40-1]
- Update to upstream version 40

[39-1]
- Update to upstream version 39

[38-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[38-1]
- Update to upstream version 38

[37-2]
- Remove maven-enforcer-plugin from POM

munge-maven-plugin
[1.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-10]
- Specify CDDL license version

[1.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-7]
- Regenerate build-requires

[1.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-3]
- Use Requires: java-headless rebuild (#1067528)

[1.0-2]
- Fix unowned directory

objectweb-pom
[1.5-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.5-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.5-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.5-1]
- Initial packaging

objenesis
[2.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.6-1]
- Update to upstream version 2.6

[2.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.1-6]
- Add missing BR on apache-resource-bundles

[2.1-5]
- Remove wagon extension

[2.1-4]
- Fix build with current maven-jar-plugin

[2.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.1-1]
- Update to 2.1

[1.2-18]
- Add missing BR on maven-wagon-ssh-external
- Resolves: rhbz#1106608

osgi-annotation
[6.0.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[6.0.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[6.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[6.0.0-4]
- Add missing build-requirement on maven-plugin-bundle

[6.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[6.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[6.0.0-1]
- Initial package

osgi-compendium
[6.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[6.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[6.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[6.0.0-2]
- Fix scopes of injected Maven dependencies

[6.0.0-1]
- Initial packaging

osgi-core
[6.0.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[6.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[6.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[6.0.0-3]
- Fix scopes of injected Maven dependencies

[6.0.0-2]
- Remove alias

[6.0.0-1]
- Initial packaging

os-maven-plugin
[1.2.3-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2.3-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2.3-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2.3-6]
- Regenerate build-requires

[1.2.3-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2.3-4]
- Don't fail on unknown arch

[1.2.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2.3-2]
- Port to current plexus-utils

[1.2.3-1]
- Initial pagkaging

plexus-ant-factory
[0:1.0-0.20.a2.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.0-0.19.a2.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.0-0.18.a2.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.0-0.17.a2.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.0-0.16.a2.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.0-0.15.a2.2]
- Fix build-requires on plexus-classworlds

[0:1.0-0.15.a2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0:1.0-0.14.a2.1]
- Use Requires: java-headless rebuild (#1067528)

[0:1.0-0.13.a2.1]
- Remove unneeded BRs

[0:1.0-0.12.a2.1]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

plexus-archiver
[0:3.6.0-1]
- Update to upstream version 3.6.0

[0:3.5-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:3.5-4]
- Add conditional patch for removing snappy support

[0:3.5-3]
- Remove dependency on snappy when building without it

[0:3.5-2]
- Conditionally allow building without snappy

[0:3.5-1]
- Update to upstream version 3.5

[0:3.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:3.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:3.4-1]
- Update to upstream version 3.4

[0:3.3-1]
- Update to upstream version 3.3

plexus-bsh-factory
[0:1.0-0.19.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.0-0.18.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.0-0.17.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.0-0.16.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.0-0.15.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.0-0.14.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0:1.0-0.13.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[0:1.0-0.12.a7]
- Simplify build dependencies
- Update to current packaging guidelines

[0:1.0-0.11.a7]
- Port to plexus-containers-container-default

[0:1.0-0.10.a7]
- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local

plexus-build-api
[0.0.7-20]
- Escape macros in %changelog

[0.0.7-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.0.7-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.0.7-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.0.7-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.0.7-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.0.7-14]
- Update to current packaging guidelines

[0.0.7-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.0.7-12]
- Remove BuildRequires on maven-surefire-provider-junit4

[0.0.7-11]
- Use .mfiles generated during build

plexus-cli
[0:1.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.6-1]
- Update to upstream version 1.6

[0:1.2-20]
- Update upstream URL

[0:1.2-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0:1.2-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[0:1.2-17]
- Remove unneeded BRs, rhbz #915617

plexus-compiler
[0:2.8.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.8.2-1]
- Update to upstream version 2.8.2

[0:2.8.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.8.1-4]
- Add eclipse build-conditional

[0:2.8.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:2.8.1-2]
- Add patch to fix tycho compatibility

[0:2.8.1-1]
- Update to upstream version 2.8.1

[0:2.7-3]
- Remove unneeded build-requires

[0:2.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:2.7-1]
- Update to upstream version 2.7

plexus-component-api
[1.0-0.24.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-0.23.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-0.22.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-0.21.alpha15]
- Remove BR on site-plugin

[1.0-0.20.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-0.19.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-0.18.alpha15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-0.17.alpha15]
- Use Requires: java-headless rebuild (#1067528)

[1.0-0.16.alpha15]
- Fix unowned directory

[1.0-0.15.alpha15]
- fix rhbz#992803
- add missing BR plexus-containers

plexus-component-factories-pom
[1.0-0.15.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-0.14.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-0.13.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-0.12.alpha11]
- Add missing build-requires

[1.0-0.11.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-0.10.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-0.9.alpha11]
- Update upstream URL

[1.0-0.8.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-0.7.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.0-0.6.alpha11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

plexus-components-pom
[1.3.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.3.1-7]
- Regenerate build-requires

[1.3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.3.1-4]
- Update upstream URL

[1.3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.3.1-2]
- Rebuild to regenerate Maven auto-requires

[1.3.1-1]
- Update to upstream version 1.3.1

plexus-containers
[1.7.1-8]
- Fix license tag
- Include missing license files

[1.7.1-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.7.1-6]
- Remove legaty Obsoletes/Provides

[1.7.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.7.1-4]
- Use guava20

[1.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.7.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.7.1-1]
- Update to upstream version 1.7.1

[1.6-6]
- Regenerate build-requires

[1.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

plexus-i18n
[1.0-0.11.b10.4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-0.10.b10.4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-0.9.b10.4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-0.8.b10.4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-0.7.b10.4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-0.6.b10.4]
- Update upstream URL

[1.0-0.6.b10.3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-0.5.b10.3]
- Update to current packaging guidelines

[1.0-0.5.b10.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.0-0.4.b10.2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

plexus-interactivity
[0:1.0-0.27.alpha6]
- Include license file

[0:1.0-0.26.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:1.0-0.25.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.0-0.24.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.0-0.23.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.0-0.22.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.0-0.21.alpha6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.0-0.20.alpha6]
- Update upstream URL

[0:1.0-0.19.alpha6]
- Rebuild to fix Maven auto-requires

[0:1.0-0.18.alpha6]
- Rebuild to fix requires and provides

plexus-io
[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[2.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.7.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.7.1-1]
- Update to upstream version 2.7.1

[2.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[2.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[2.6-1]
- Update to upstream version 2.6

[2.5-2]
- Update upstream URL

[2.5-1]
- Update to upstream version 2.5

plexus-languages
[0.9.10-3]
- Repack tarball without bundled jars

[0.9.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.9.10-1]
- Update to upstream version 0.9.10

[0.9.3-5]
- Disable broken test

[0.9.3-4]
- Generate javadoc package automatically

[0.9.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.9.3-2]
- Replace JARs used as test resources with symlinks to system JARs

[0.9.3-1]
- Initial packaging

plexus-pom
[5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[5.0-1]
- Update to upstream version 5.0

[3.3.3-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.3.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.3.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[3.3.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[3.3.3-1]
- Update to upstream version 3.3.3

[3.3.1-10]
- Update upstream URL

[3.3.1-9]
- introduce license macro

[3.3.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

plexus-resources
[1.0-0.23.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.0-0.22.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0-0.21.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0-0.20.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0-0.19.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0-0.18.a7]
- Cleanup spec file

[1.0-0.17.a7]
- Update upstream URL

[1.0-0.16.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.0-0.15.a7]
- Use Requires: java-headless rebuild (#1067528)

[1.0-0.14.a7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

plexus-velocity
[1.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2-1]
- Update to upstream version 1.2

[1.1.8-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1.8-20]
- Improve upstream URL and package description
- Resolves: rhbz#1294951

[1.1.8-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1.8-18]
- Update upstream URL

[1.1.8-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1.8-16]
- Update to current packaging guidelines

powermock
[1.6.5-9]
- Escape macros in %changelog

[1.6.5-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6.5-7]
- Add license and provides for bundled mockito

[1.6.5-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.6.5-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.6.5-4]
- Unbundle asm and cglib
- Patch forked mockito

[1.6.5-3]
- Skip test that overflows stack in koji

[1.6.5-2]
- Enable TestNG module

[1.6.5-1]
- Update to upstream version 1.6.5

[1.6.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

qdox
[0:2.0-3.M9]
- Repack tarball to remove possibly proprietary binaries

[0:2.0-2.M9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0:2.0-1.M9]
- Update to upstream version 2.0-M9

[0:2.0-0.12.M7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:2.0-0.11.M7]
- Elimitate race condition when injecting JAR manifest
- Resolves: rhbz#1495243

[0:2.0-0.10.M7]
- Update to upstream version 2.0-M7

[0:2.0-0.9.M5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:2.0-0.8.M5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:2.0-0.7.M5]
- Backport patch for misparsed comments

[0:2.0-0.6.M5]
- Update to upstream version 2.0-M5

regexp
[1:1.5-26]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1:1.5-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1:1.5-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1:1.5-23]
- Install with XMVn and add minimal pom

[1:1.5-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1:1.5-21]
- Add OSGi manifest

[1:1.5-20]
- Add build-requires on javapackages-local

[1:1.5-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1:1.5-18]
- Bump epoch as workaround for koji-shadow limitation

[1.5-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

sisu-mojos
[0.3.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.3.1-7]
- Update license tag

[0.3.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0.3.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0.3.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0.3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.3.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.3.1-1]
- Update to upstream version 0.3.1

[0.1.0-4]
- Fix parent POM BR

[0.1.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

sonatype-oss-parent
[7-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[7-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[7-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[7-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[7-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[7-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[7-8]
- Rebuild to regenerate Maven auto-requires

[7-7]
- Rebuild to get provides with "pom" extension
- Small spec file cleanup

[7-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[7-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

sonatype-plugins-parent
[8-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[8-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[8-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[8-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[8-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[8-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[8-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[8-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[8-4]
- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local

[8-3]
- Build with xmvn

spec-version-maven-plugin
[1.2-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.2-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.2-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.2-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.2-6]
- introduce license macro

[1.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.2-4]
- Use Requires: java-headless rebuild (#1067528)

[1.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.2-2]
- build with XMvn
- minor changes to adapt to current guideline

spice-parent
[26-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[26-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[26-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[26-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[26-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[26-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[26-2]
- Rebuild to regenerate Maven auto-requires

[26-1]
- Update to upstream version 26
- Update to current packaging guidelines

[15-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[15-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

testng
[6.14.3-5]
- Clean tarball from binaries
- Replace bundled jquery with CDN link

[6.14.3-4]
- Allow conditionally building without snakeyaml

[6.14.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[6.14.3-2]
- Bump maven pom version.

[6.14.3-1]
- Update to upstream 6.14.3.

[6.12-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[6.12-2]
- Allow OSGi metadata to export all packages including internal ones

[6.12-1]
- Update to latest release of testng
- Fixes classloading from ant rhbz#1475842

[6.11-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[6.11-1]
- Update to latest upstream release
- Continue building with maven for now, instead of moving to gradle due to
  rhbz#1467724

weld-parent
[34-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[34-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[34-3]
- Remove buildnumber-plugin

[34-2]
- Add missing BRs on maven-source-plugin, buildnumber-maven-plugin

[34-1]
- Upstream release 34

[31-4]
- remove enforcer plugin support
- related to rhbz#1308237,1308238
- use BRs mvn()-like
- introduce license macro

[31-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[31-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[31-1]
- Upstream release 31

[26-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

xbean
[4.8-1]
- Update to upstream version 4.8

[4.6-1]
- Update to upstream version 4.6

[4.5-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.5-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.5-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[4.5-6]
- Introduce groovy build conditional

[4.5-5]
- Fix build with conditionals

[4.5-4]
- Port to current QDox

[4.5-3]
- Add missing build-requires

[4.5-2]
- Enable xbean-asm-util

xmlunit
[0:1.6-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[0:1.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[0:1.6-5]
- Install with XMvn

[0:1.6-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[0:1.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0:1.6-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0:1.6-1]
- update to upstream's xmlunit-1.6

[0:1.5-3]
- Remove workaround for RPM bug #646523

[0:1.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0:1.5-1]
- update to upstream's xmlunit-1.5

xmvn
[3.0.0-21]
- Add requirement on javapackages-tools since scripts use
  java-functions.

[3.0.0-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.0.0-19]
- Remove now unnecessary objenesis from classpath

[3.0.0-18]
- Avoid creating temp files during manifest injection
- Resolves: rhbz#1579236

[3.0.0-17]
- Switch to commons-compress for manifest manipulation
- Resolves: rhbz#1576358

[3.0.0-16]
- Remove use of JAXB from xmvn-core to make it work with Java 9

[3.0.0-15]
- Fix maven home lookup and layout to match current maven

[3.0.0-14]
- Fix configuration of aliased plugins
- Resolves: rhbz#1556974

[3.0.0-13]
- Escape macros in %changelog

[3.0.0-12]
- Use guava20



From el-errata at oss.oracle.com  Mon Aug  3 21:33:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:33:40 -0700
Subject: [El-errata] ELBA-2026-500114 Oracle Linux 9 scap-security-guide bug
 fix update
Message-ID: <mailman.349.1785792834.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500114

http://linux.oracle.com/errata/ELBA-2026-500114.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
scap-security-guide-0.1.81-1.0.2.el9_8.noarch.rpm
scap-security-guide-doc-0.1.81-1.0.2.el9_8.noarch.rpm

aarch64:
scap-security-guide-0.1.81-1.0.2.el9_8.noarch.rpm
scap-security-guide-doc-0.1.81-1.0.2.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/scap-security-guide-0.1.81-1.0.2.el9_8.src.rpm



Description of changes:

[0.1.81-1.0.2]
- Update OL8 STIG to V2R9 [Orabug: 39801109]
- Update OL9 STIG to V1R6 [Orabug: 39801122]
- Fix generated bash remediation service_autofs_disabled for OL [Orabug : 39801109]



From el-errata at oss.oracle.com  Mon Aug  3 21:33:42 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:33:42 -0700
Subject: [El-errata] ELSA-2026-46397 Important: Oracle Linux 9 libreswan
 security update
Message-ID: <mailman.350.1785792836.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-46397

http://linux.oracle.com/errata/ELSA-2026-46397.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libreswan-4.15-10.0.1.el9_8.x86_64.rpm

aarch64:
libreswan-4.15-10.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libreswan-4.15-10.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-12413
CVE-2026-14957
CVE-2026-50721
CVE-2026-50722




Description of changes:

[4.15-10.0.1]
- Add libreswan-oracle.patch to detect Oracle Linux distro

[4.15-10]
- Backport fix for CVE-2026-14957 (RHEL-212107)

[4.15-9]
- Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155)



From el-errata at oss.oracle.com  Mon Aug  3 21:33:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:33:45 -0700
Subject: [El-errata] ELSA-2026-49525 Important: Oracle Linux 9
 perl-Archive-Tar security update
Message-ID: <mailman.351.1785792840.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49525

http://linux.oracle.com/errata/ELSA-2026-49525.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-Archive-Tar-2.38-6.el9_8.2.noarch.rpm

aarch64:
perl-Archive-Tar-2.38-6.el9_8.2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/perl-Archive-Tar-2.38-6.el9_8.2.src.rpm

Related CVEs:

CVE-2026-9538




Description of changes:

[2.38-6.2]
- Fix CVE-2026-9538: add $MAX_FILE_SIZE cap for tar entry size during
  read to prevent memory allocation DoS
- Resolves: RHEL-191917



From el-errata at oss.oracle.com  Mon Aug  3 21:33:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:33:47 -0700
Subject: [El-errata] ELSA-2026-49527 Important: Oracle Linux 9 frr security, bug fix,
 and enhancement update
Message-ID: <mailman.352.1785792841.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49527

http://linux.oracle.com/errata/ELSA-2026-49527.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
frr-8.5.3-15.el9_8.1.x86_64.rpm
frr-selinux-8.5.3-15.el9_8.1.noarch.rpm

aarch64:
frr-8.5.3-15.el9_8.1.aarch64.rpm
frr-selinux-8.5.3-15.el9_8.1.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/frr-8.5.3-15.el9_8.1.src.rpm

Related CVEs:

CVE-2026-37460




Description of changes:

[8.5.3-15.1]
- Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing

[8.5.3-15]
- Resolves: RHEL-176258 - AVC when reading user's site-packages

[8.5.3-14]
- Resolves: RHEL-152300 - ignored route in the kernel after flapping interface



From el-errata at oss.oracle.com  Mon Aug  3 21:33:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:33:49 -0700
Subject: [El-errata] ELSA-2026-49612 Important: Oracle Linux 9 perl-DBI
 security update
Message-ID: <mailman.353.1785792845.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49612

http://linux.oracle.com/errata/ELSA-2026-49612.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-DBI-1.643-9.el9_8.3.x86_64.rpm

aarch64:
perl-DBI-1.643-9.el9_8.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/perl-DBI-1.643-9.el9_8.3.src.rpm

Related CVEs:

CVE-2026-14380
CVE-2026-14739




Description of changes:

[1.643-9.3]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
- Resolves: RHEL-211149

[1.643-9.2]
- Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
- Resolves: RHEL-193306



From el-errata at oss.oracle.com  Mon Aug  3 21:36:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:36:32 -0700
Subject: [El-errata] ELSA-2026-48170  Low: Oracle Linux 10  php security,
 bug fix, and enhancement update
Message-ID: <mailman.354.1785793005.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-48170

http://linux.oracle.com/errata/ELSA-2026-48170.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
php-8.3.32-1.el10_2.x86_64.rpm
php-bcmath-8.3.32-1.el10_2.x86_64.rpm
php-cli-8.3.32-1.el10_2.x86_64.rpm
php-common-8.3.32-1.el10_2.x86_64.rpm
php-dba-8.3.32-1.el10_2.x86_64.rpm
php-dbg-8.3.32-1.el10_2.x86_64.rpm
php-devel-8.3.32-1.el10_2.x86_64.rpm
php-embedded-8.3.32-1.el10_2.x86_64.rpm
php-enchant-8.3.32-1.el10_2.x86_64.rpm
php-ffi-8.3.32-1.el10_2.x86_64.rpm
php-fpm-8.3.32-1.el10_2.x86_64.rpm
php-gd-8.3.32-1.el10_2.x86_64.rpm
php-gmp-8.3.32-1.el10_2.x86_64.rpm
php-intl-8.3.32-1.el10_2.x86_64.rpm
php-ldap-8.3.32-1.el10_2.x86_64.rpm
php-mbstring-8.3.32-1.el10_2.x86_64.rpm
php-mysqlnd-8.3.32-1.el10_2.x86_64.rpm
php-odbc-8.3.32-1.el10_2.x86_64.rpm
php-opcache-8.3.32-1.el10_2.x86_64.rpm
php-pdo-8.3.32-1.el10_2.x86_64.rpm
php-pgsql-8.3.32-1.el10_2.x86_64.rpm
php-process-8.3.32-1.el10_2.x86_64.rpm
php-snmp-8.3.32-1.el10_2.x86_64.rpm
php-soap-8.3.32-1.el10_2.x86_64.rpm
php-xml-8.3.32-1.el10_2.x86_64.rpm

aarch64:
php-8.3.32-1.el10_2.aarch64.rpm
php-bcmath-8.3.32-1.el10_2.aarch64.rpm
php-cli-8.3.32-1.el10_2.aarch64.rpm
php-common-8.3.32-1.el10_2.aarch64.rpm
php-dba-8.3.32-1.el10_2.aarch64.rpm
php-dbg-8.3.32-1.el10_2.aarch64.rpm
php-devel-8.3.32-1.el10_2.aarch64.rpm
php-embedded-8.3.32-1.el10_2.aarch64.rpm
php-enchant-8.3.32-1.el10_2.aarch64.rpm
php-ffi-8.3.32-1.el10_2.aarch64.rpm
php-fpm-8.3.32-1.el10_2.aarch64.rpm
php-gd-8.3.32-1.el10_2.aarch64.rpm
php-gmp-8.3.32-1.el10_2.aarch64.rpm
php-intl-8.3.32-1.el10_2.aarch64.rpm
php-ldap-8.3.32-1.el10_2.aarch64.rpm
php-mbstring-8.3.32-1.el10_2.aarch64.rpm
php-mysqlnd-8.3.32-1.el10_2.aarch64.rpm
php-odbc-8.3.32-1.el10_2.aarch64.rpm
php-opcache-8.3.32-1.el10_2.aarch64.rpm
php-pdo-8.3.32-1.el10_2.aarch64.rpm
php-pgsql-8.3.32-1.el10_2.aarch64.rpm
php-process-8.3.32-1.el10_2.aarch64.rpm
php-snmp-8.3.32-1.el10_2.aarch64.rpm
php-soap-8.3.32-1.el10_2.aarch64.rpm
php-xml-8.3.32-1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/php-8.3.32-1.el10_2.src.rpm

Related CVEs:

CVE-2026-14355




Description of changes:

[8.3.32-1]
- rebase to 8.3.32



From el-errata at oss.oracle.com  Mon Aug  3 21:36:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:36:34 -0700
Subject: [El-errata] ELSA-2026-49508 Important: Oracle Linux 10
 gstreamer1-plugins-good security update
Message-ID: <mailman.355.1785793008.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49508

http://linux.oracle.com/errata/ELSA-2026-49508.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-good-1.26.7-2.el10_2.2.x86_64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.2.x86_64.rpm

aarch64:
gstreamer1-plugins-good-1.26.7-2.el10_2.2.aarch64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gstreamer1-plugins-good-1.26.7-2.el10_2.2.src.rpm

Related CVEs:

CVE-2026-5056




Description of changes:

[1.26.7-2.2]
- Fix integer overflow and bounds check vulnerabilities in uncompressed
  video handling (CVE-2026-5056)
  Resolves: RHEL-222333



From el-errata at oss.oracle.com  Mon Aug  3 21:36:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:36:35 -0700
Subject: [El-errata] ELSA-2026-49514 Important: Oracle Linux 10 perl-DBI
 security update
Message-ID: <mailman.356.1785793008.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49514

http://linux.oracle.com/errata/ELSA-2026-49514.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-DBI-1.643-26.el10_2.3.x86_64.rpm

aarch64:
perl-DBI-1.643-26.el10_2.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/perl-DBI-1.643-26.el10_2.3.src.rpm

Related CVEs:

CVE-2026-14380
CVE-2026-14739




Description of changes:

[1.643-26.3]
- Fix CVE-2026-14380: unsafe string eval in DBI::Profile
- Resolves: RHEL-211146

[1.643-26.2]
- Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders
- Resolves: RHEL-193293



From el-errata at oss.oracle.com  Mon Aug  3 21:36:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:36:37 -0700
Subject: [El-errata] ELSA-2026-49523 Important: Oracle Linux 10
 perl-Archive-Tar security update
Message-ID: <mailman.357.1785793011.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49523

http://linux.oracle.com/errata/ELSA-2026-49523.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-Archive-Tar-3.02-512.el10_2.2.noarch.rpm

aarch64:
perl-Archive-Tar-3.02-512.el10_2.2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/perl-Archive-Tar-3.02-512.el10_2.2.src.rpm

Related CVEs:

CVE-2026-9538




Description of changes:

[3.02-512.2]
- Fix CVE-2026-9538: cap per-entry declared size during archive
  reading to prevent memory DoS
- Resolves: RHEL-191918



From el-errata at oss.oracle.com  Mon Aug  3 21:36:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 03 Aug 2026 14:36:39 -0700
Subject: [El-errata] ELSA-2026-49668 Moderate: Oracle Linux 10 p11-kit
 security update
Message-ID: <mailman.358.1785793013.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49668

http://linux.oracle.com/errata/ELSA-2026-49668.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
p11-kit-0.26.4-1.el10_2.x86_64.rpm
p11-kit-client-0.26.4-1.el10_2.x86_64.rpm
p11-kit-devel-0.26.4-1.el10_2.x86_64.rpm
p11-kit-server-0.26.4-1.el10_2.x86_64.rpm
p11-kit-trust-0.26.4-1.el10_2.x86_64.rpm

aarch64:
p11-kit-0.26.4-1.el10_2.aarch64.rpm
p11-kit-client-0.26.4-1.el10_2.aarch64.rpm
p11-kit-devel-0.26.4-1.el10_2.aarch64.rpm
p11-kit-server-0.26.4-1.el10_2.aarch64.rpm
p11-kit-trust-0.26.4-1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/p11-kit-0.26.4-1.el10_2.src.rpm

Related CVEs:

CVE-2026-13757




Description of changes:

[0.26.4-1]
- Rebase to 0.26.4



From el-errata at oss.oracle.com  Tue Aug  4 16:48:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:48:08 -0700
Subject: [El-errata] ELBA-2026-20539 Oracle Linux 7 tzdata bug fix and
 enhancement update
Message-ID: <mailman.362.1785862103.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-20539

http://linux.oracle.com/errata/ELBA-2026-20539.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
tzdata-2026b-1.el7.noarch.rpm
tzdata-java-2026b-1.el7.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/tzdata-2026b-1.el7.src.rpm



Description of changes:

[2026b-1]
- Update to tzdata-2026b (RHEL-170797)
  - British Columbia?s 2026-03-08 spring forward is expected
    to be its last transition as it moves to permanent -07.

[2026a-1]
- Update to tzdata-2026a (RHEL-154033)
  - Correct the transition times for Moldova.
  - The POSIXRULES option is now obsolete.

[2025c-1]
- Update to tzdata-2025c (RHEL-135159)
  - Update leap seconds file expiration date

[2025b-2]
- Included NEWS file with docs. (RHEL-102379)

[2025b-1]
- Update to tzdata-2025b (RHEL-84741)
  - Chile's Ays?n Region moves from -04/-03
    to -03 year-round, diverging from America/Santiago and
    creating a new zone America/Coyhaique.

[2025a-1]
Update to tzdata-2025a (RHEL-74308)
  - Paraguay is now permanently at -03. This impacts timestamps
    starting on 2025-03-22.
  - Includes improvements to pre-1991 data for the Philippines.
  - Etc/Unknown is now reserved.



From el-errata at oss.oracle.com  Tue Aug  4 16:48:07 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:48:07 -0700
Subject: [El-errata] ELBA-2026-500116 Oracle Linux 7 linux-firmware bug fix
 update
Message-ID: <mailman.363.1785862105.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500116

http://linux.oracle.com/errata/ELBA-2026-500116.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
iwl1000-firmware-39.31.5.1-999.48.el7.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el7.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el7.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el7.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el7.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el7.noarch.rpm
iwl3160-firmware-22.0.7.0-999.48.el7.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el7.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el7.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el7.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el7.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el7.noarch.rpm
iwl6000g2a-firmware-17.168.5.3-999.48.el7.noarch.rpm
iwl6000g2b-firmware-17.168.5.2-999.48.el7.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el7.noarch.rpm
iwl7260-firmware-22.0.7.0-999.48.el7.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el7.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el7.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/linux-firmware-20260615-999.48.gite7eb98af.el7.src.rpm



Description of changes:

[20260615-999.48.gite7eb98af.el7]
- Rebase to latest upstream [Orabug: 39563213]

[20260327-999.47.git85786b44.el7]
- Rebase to latest upstream [Orabug: 39138901]

[20260209-999.46.gitd87f4693.el7]
- Rebase to latest upstream [Orabug: 38858080]

[20251110-999.45.gitc0af6c70.el7]
- Rebase to latest upstream [Orabug: 38523856]
- Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

[20251030-999.44.1.gite9292517.el7]
- Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

[20250909-999.44.git260ff424.el7]
- Rewrite the script to accomodate yum-based installs [Orabug: 38409589]

[20250909-999.42.1.git356f06bf.el10]
- Rewrite the script to accomodate yum-based installs [Orabug: 38410501]

[20250828-999.43.git260ff424.el7]
- Rebase to latest upstream [Orabug: 38200684]
- Solve conflicts caused by symbolic link changes [Orabug: 38206139]

[20250826-999.42.git356f06bf.el7]
- Handling downgrade issue for Nvidia firmware changes [Orabug: 38303112]

[20250611-999.41.git356f06bf.el7]
- Rebase to latest upstream [Orabug: 38028345]



From el-errata at oss.oracle.com  Tue Aug  4 16:48:10 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:48:10 -0700
Subject: [El-errata] ELSA-2026-25172 Important: Oracle Linux 7 rsync
 security update
Message-ID: <mailman.364.1785862105.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-25172

http://linux.oracle.com/errata/ELSA-2026-25172.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
rsync-3.1.2-12.0.5.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/rsync-3.1.2-12.0.5.el7_9.src.rpm

Related CVEs:

CVE-2026-41035




Description of changes:

[3.1.2-12.0.5]
- Backport fix for CVE-2026-41035 [Orabug: 39542074]

[3.1.2-12.0.3]
- Fix CVE-2024-12087 [Orabug: 38771262]

[3.1.2-12.0.1]
* Back port fix for CVE-2024-12085 [Orabug: 37524229]



From el-errata at oss.oracle.com  Tue Aug  4 16:49:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:49:15 -0700
Subject: [El-errata] ELSA-2026-500121 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.365.1785862170.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500121

http://linux.oracle.com/errata/ELSA-2026-500121.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.el8uek.src.rpm

Related CVEs:

CVE-2026-43038
CVE-2026-43499
CVE-2026-46043
CVE-2026-46331
CVE-2026-64600




Description of changes:

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]



From el-errata at oss.oracle.com  Tue Aug  4 16:52:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:43 -0700
Subject: [El-errata] ELBA-2026-500114 Oracle Linux 8 scap-security-guide bug
 fix update
Message-ID: <mailman.366.1785862378.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500114

http://linux.oracle.com/errata/ELBA-2026-500114.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
scap-security-guide-0.1.81-1.0.2.el8_10.noarch.rpm
scap-security-guide-doc-0.1.81-1.0.2.el8_10.noarch.rpm

aarch64:
scap-security-guide-0.1.81-1.0.2.el8_10.noarch.rpm
scap-security-guide-doc-0.1.81-1.0.2.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/scap-security-guide-0.1.81-1.0.2.el8_10.src.rpm



Description of changes:

[0.1.81-1.0.2]
- Update OL8 STIG to V2R9 [Orabug: 39801109]
- Update OL9 STIG to V1R6 [Orabug: 39801122]
- Fix generated bash remediation service_autofs_disabled for OL [Orabug : 39801109]



From el-errata at oss.oracle.com  Tue Aug  4 16:52:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:45 -0700
Subject: [El-errata] ELBA-2026-500115 Oracle Linux 8 glibc bug fix update
Message-ID: <mailman.367.1785862380.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500115

http://linux.oracle.com/errata/ELBA-2026-500115.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
compat-libpthread-nonshared-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-utils-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-2.28-251.0.5.el8_10.40.i686.rpm
glibc-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-all-langpacks-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-common-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-devel-2.28-251.0.5.el8_10.40.i686.rpm
glibc-devel-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-headers-2.28-251.0.5.el8_10.40.i686.rpm
glibc-headers-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-aa-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-af-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-agr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ak-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-am-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-an-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-anp-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ar-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-as-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ast-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ayc-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-az-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-be-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bem-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ber-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bg-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bhb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bho-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-br-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-brx-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-bs-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-byn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ca-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ce-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-chr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-cmn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-crh-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-cs-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-csb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-cv-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-cy-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-da-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-de-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-doi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-dsb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-dv-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-dz-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-el-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-en-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-eo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-es-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-et-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-eu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fa-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ff-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fil-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fur-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-fy-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ga-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-gd-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-gez-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-gl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-gu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-gv-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ha-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hak-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-he-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hif-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hne-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hsb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ht-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-hy-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ia-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-id-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ig-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ik-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-is-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-it-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-iu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ja-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ka-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kab-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kk-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-km-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ko-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kok-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ks-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ku-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-kw-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ky-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lg-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-li-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lij-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ln-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lt-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lv-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-lzh-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mag-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mai-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mfe-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mg-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mhr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-miq-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mjw-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mk-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ml-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mni-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ms-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-mt-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-my-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nan-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nb-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nds-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ne-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nhn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-niu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-nso-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-oc-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-om-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-or-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-os-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-pa-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-pap-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-pl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ps-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-pt-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-quz-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-raj-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ro-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ru-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-rw-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sa-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sah-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sat-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sc-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sd-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-se-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sgs-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-shn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-shs-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-si-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sid-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sk-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sm-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-so-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sq-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ss-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-st-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sv-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-sw-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-szl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ta-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tcy-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-te-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tg-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-th-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-the-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ti-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tig-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tk-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tl-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tn-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-to-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tpi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tr-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ts-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-tt-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ug-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-uk-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-unm-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ur-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-uz-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-ve-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-vi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-wa-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-wae-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-wal-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-wo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-xh-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-yi-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-yo-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-yue-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-yuw-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-zh-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-langpack-zu-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-locale-source-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-minimal-langpack-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-benchtests-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-nss-devel-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-nss-devel-2.28-251.0.5.el8_10.40.i686.rpm
nss_hesiod-2.28-251.0.5.el8_10.40.x86_64.rpm
nss_hesiod-2.28-251.0.5.el8_10.40.i686.rpm
libnsl-2.28-251.0.5.el8_10.40.i686.rpm
libnsl-2.28-251.0.5.el8_10.40.x86_64.rpm
nscd-2.28-251.0.5.el8_10.40.x86_64.rpm
nss_db-2.28-251.0.5.el8_10.40.i686.rpm
nss_db-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-static-2.28-251.0.5.el8_10.40.i686.rpm
glibc-static-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-gconv-extra-2.28-251.0.5.el8_10.40.x86_64.rpm
glibc-gconv-extra-2.28-251.0.5.el8_10.40.i686.rpm
glibc-doc-2.28-251.0.5.el8_10.40.noarch.rpm

aarch64:
compat-libpthread-nonshared-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-utils-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-all-langpacks-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-common-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-devel-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-headers-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-aa-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-af-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-agr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ak-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-am-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-an-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-anp-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ar-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-as-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ast-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ayc-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-az-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-be-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bem-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ber-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bg-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bhb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bho-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-br-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-brx-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-bs-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-byn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ca-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ce-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-chr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-cmn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-crh-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-cs-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-csb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-cv-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-cy-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-da-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-de-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-doi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-dsb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-dv-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-dz-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-el-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-en-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-eo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-es-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-et-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-eu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fa-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ff-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fil-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fur-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-fy-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ga-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-gd-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-gez-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-gl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-gu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-gv-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ha-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hak-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-he-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hif-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hne-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hsb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ht-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-hy-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ia-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-id-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ig-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ik-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-is-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-it-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-iu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ja-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ka-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kab-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kk-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-km-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ko-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kok-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ks-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ku-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-kw-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ky-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lg-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-li-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lij-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ln-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lt-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lv-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-lzh-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mag-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mai-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mfe-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mg-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mhr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-miq-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mjw-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mk-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ml-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mni-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ms-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-mt-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-my-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nan-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nb-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nds-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ne-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nhn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-niu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-nso-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-oc-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-om-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-or-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-os-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-pa-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-pap-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-pl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ps-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-pt-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-quz-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-raj-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ro-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ru-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-rw-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sa-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sah-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sat-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sc-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sd-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-se-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sgs-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-shn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-shs-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-si-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sid-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sk-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sm-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-so-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sq-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ss-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-st-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sv-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-sw-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-szl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ta-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tcy-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-te-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tg-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-th-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-the-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ti-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tig-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tk-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tl-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tn-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-to-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tpi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tr-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ts-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-tt-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ug-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-uk-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-unm-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ur-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-uz-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-ve-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-vi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-wa-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-wae-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-wal-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-wo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-xh-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-yi-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-yo-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-yue-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-yuw-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-zh-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-langpack-zu-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-locale-source-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-minimal-langpack-2.28-251.0.5.el8_10.40.aarch64.rpm
libnsl-2.28-251.0.5.el8_10.40.aarch64.rpm
nscd-2.28-251.0.5.el8_10.40.aarch64.rpm
nss_db-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-static-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-benchtests-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-nss-devel-2.28-251.0.5.el8_10.40.aarch64.rpm
nss_hesiod-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-gconv-extra-2.28-251.0.5.el8_10.40.aarch64.rpm
glibc-doc-2.28-251.0.5.el8_10.40.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/glibc-2.28-251.0.5.el8_10.40.src.rpm



Description of changes:

[2.28-251.0.5.40]
Fixed orabug 39809344 - Default ldso uses str/mem functions which are not MTE compatible
  Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  Oracle history:
  July-23-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.40
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust at oracle.com>
  July-13-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.38
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  May-26-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.37
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust at oracle.com>
  May-7-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.34
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-18-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.31
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  February-24-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.4.27
  - Fixed orabug 38834066 stpcpy MTE support
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  December-8-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.3.27
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust at oracle.com>
  August-5-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.3.25
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  June-9-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.3.22
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust at oracle.com>
  April-14-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.3.16
  - Forward port of Oracle patches
    Reviewed-by: Elena Zannoni <elena.zannoni at oracle.com>
  March-26-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.3.14
  - OraBug: 36625686 Add MTE support on string functions
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-17-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.14
  - Forward port of Oracle patches
    Reviewed-by: David Faust <david.faust at oracle.com>
  February-19-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.13
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  January-28-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.11
  - Forward port of Oracle patches
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  September-24-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.5
  - Forward port of Oracle patches over 2.28-251.5
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  August-26-2024 Jose E. Marchesi <jose.marchesi at oracle.com> - 2.28-251.0.2.4
  - Forward port of Oracle patches over 2.28-251.4
    Reviewed-by: David Faust <david.faust at oracle.com>
  May-24-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.2
  - Forward port of Oracle patches over 2.28-251.2
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  May-23-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2.1
  - Forward port of Oracle patches over 2.28-251.1
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  May-22-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.2
  - Forward port of Oracle patches for ol8-u10
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-28-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-251.0.1
  - Forward port of Oracle patches for ol8-u10-beta
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-5-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-236.0.1.12
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  November-14-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-236.0.1.7
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  October-4-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-236.0.1.6
  - Forward port of Oracle patches.
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  April-21-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-225.0.3
  - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  April-11-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-225.0.2
  - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-28-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.28-225.0.1
  - Merge of Oracle patches for ol8u8 beta
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  September-28-2022 Patrick McGehearty <patrick.mcgehearty at oracle.com> - 2.28-211.0.1
  - Merge of Oracle patches for ol8u7 beta
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  August-8-2022 Patrick McGehearty <patrick.mcgehearty at oracle.com> - 2.28-189.5.0.2
  - Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
  - These changes enable reading the realtime clock without a kernel syscall.
    OraBug: 30478315
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  May-2-2022 Patrick McGehearty <patrick.mcgehearty at oracle.com> - 2.28-199.0.1
  - Merge of patches from c8s 199 with ol8u6 beta
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  - Update siginfo constants from linux kernel (OraBug: 33734528)
  - Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
  - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
  - spin mutex (Orabug: 27982358)
    Reviewed-by: Qing Zhao <qing.zhao at oracle.com>
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
    Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
    Both should test
      if (stream->_flags & _IO_USER_LOCK) == 0)
        _IO_lock_lock (*stream->_lock);
    OraBug: 28481550.
    Reviewed-by: Qing Zhao <qing.zhao at oracle.com>



From el-errata at oss.oracle.com  Tue Aug  4 16:52:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:47 -0700
Subject: [El-errata] ELSA-2026-46396 Important: Oracle Linux 8 libreswan
 security update
Message-ID: <mailman.370.1785862382.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-46396

http://linux.oracle.com/errata/ELSA-2026-46396.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libreswan-4.12-2.0.1.el8_10.6.x86_64.rpm

aarch64:
libreswan-4.12-2.0.1.el8_10.6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libreswan-4.12-2.0.1.el8_10.6.src.rpm

Related CVEs:

CVE-2026-12413
CVE-2026-14957
CVE-2026-50721
CVE-2026-50722




Description of changes:

[4.12-2.0.1.el8_10.6]
- Add libreswan-oracle.patch to detect Oracle Linux distro

[4.12-2.6]
- Backport fix for CVE-2026-14957 (RHEL-212498)

[4.12-2.5]
- Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190146, RHEL-190140, RHEL-190132)



From el-errata at oss.oracle.com  Tue Aug  4 16:52:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:51 -0700
Subject: [El-errata] ELSA-2026-47749  Low: Oracle Linux 8  php:8.2 security,
 bug fix, and enhancement update
Message-ID: <mailman.371.1785862385.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47749

http://linux.oracle.com/errata/ELSA-2026-47749.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
apcu-panel-5.1.23-1.module+el8.10.0+90469+8883f508.noarch.rpm
libzip-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
libzip-devel-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
libzip-tools-1.7.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-bcmath-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-cli-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-common-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-dba-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-dbg-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-devel-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-embedded-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-enchant-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-ffi-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-fpm-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-gd-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-gmp-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-intl-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-ldap-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-mbstring-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-mysqlnd-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-odbc-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-opcache-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-pdo-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.noarch.rpm
php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.x86_64.rpm
php-pgsql-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-process-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-snmp-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-soap-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm
php-xml-8.2.32-1.module+el8.10.0+90980+df6c7e67.x86_64.rpm

aarch64:
apcu-panel-5.1.23-1.module+el8.10.0+90469+8883f508.noarch.rpm
libzip-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
libzip-devel-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
libzip-tools-1.7.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-bcmath-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-cli-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-common-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-dba-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-dbg-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-devel-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-embedded-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-enchant-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-ffi-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-fpm-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-gd-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-gmp-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-intl-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-ldap-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-mbstring-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-mysqlnd-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-odbc-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-opcache-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-pdo-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.noarch.rpm
php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.aarch64.rpm
php-pgsql-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-process-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-snmp-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-soap-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm
php-xml-8.2.32-1.module+el8.10.0+90980+df6c7e67.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libzip-1.7.3-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-8.2.32-1.module+el8.10.0+90980+df6c7e67.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pear-1.10.14-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-apcu-5.1.23-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-rrd-2.0.3-1.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-xdebug3-3.2.2-2.module+el8.10.0+90469+8883f508.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-zip-1.22.3-1.module+el8.10.0+90469+8883f508.src.rpm

Related CVEs:

CVE-2026-14355




Description of changes:

libzip
php
[8.2.32-1]
- rebase to 8.2.32

php-pear
php-pecl-apcu
php-pecl-rrd
php-pecl-xdebug3
php-pecl-zip



From el-errata at oss.oracle.com  Tue Aug  4 16:52:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:56 -0700
Subject: [El-errata] ELSA-2026-49511 Important: Oracle Linux 8 frr security
 update
Message-ID: <mailman.372.1785862385.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49511

http://linux.oracle.com/errata/ELSA-2026-49511.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
frr-7.5.1-25.0.1.el8_10.x86_64.rpm
frr-selinux-7.5.1-25.0.1.el8_10.noarch.rpm

aarch64:
frr-7.5.1-25.0.1.el8_10.aarch64.rpm
frr-selinux-7.5.1-25.0.1.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/frr-7.5.1-25.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-37460




Description of changes:

[7.5.1-25.0.1]
- Fix POSTIN scriptlet [Orabug: 34712485]

[7.5.1-25]
- Fix EVPN and ENCAP/VNC packet parsing validation (CVE-2026-37460)
- Resolves: RHEL-193233



From el-errata at oss.oracle.com  Tue Aug  4 16:52:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:54 -0700
Subject: [El-errata] ELSA-2026-47750  Low: Oracle Linux 8  php:7.4 security,
 bug fix, and enhancement update
Message-ID: <mailman.373.1785862389.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47750

http://linux.oracle.com/errata/ELSA-2026-47750.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm
libzip-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm
libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm
libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-bcmath-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-cli-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-common-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-dba-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-dbg-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-devel-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-embedded-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-enchant-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-ffi-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-fpm-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-gd-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-gmp-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-intl-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-json-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-ldap-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-mbstring-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-mysqlnd-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-odbc-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-opcache-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-pdo-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.noarch.rpm
php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-pecl-apcu-devel-5.1.18-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.x86_64.rpm
php-pgsql-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-process-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-snmp-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-soap-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-xml-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm
php-xmlrpc-7.4.33-5.module+el8.10.0+90978+e272feb1.x86_64.rpm

aarch64:
apcu-panel-5.1.18-1.module+el8.10.0+90472+f810484b.noarch.rpm
libzip-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm
libzip-devel-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm
libzip-tools-1.6.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-bcmath-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-cli-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-common-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-dba-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-dbg-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-devel-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-embedded-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-enchant-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-ffi-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-fpm-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-gd-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-gmp-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-intl-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-json-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-ldap-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-mbstring-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-mysqlnd-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-odbc-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-opcache-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-pdo-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.noarch.rpm
php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-pecl-apcu-devel-5.1.18-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.aarch64.rpm
php-pgsql-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-process-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-snmp-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-soap-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-xml-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm
php-xmlrpc-7.4.33-5.module+el8.10.0+90978+e272feb1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libzip-1.6.1-1.module+el8.10.0+90472+f810484b.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-7.4.33-5.module+el8.10.0+90978+e272feb1.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pear-1.10.13-1.module+el8.10.0+90472+f810484b.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-apcu-5.1.18-1.module+el8.10.0+90472+f810484b.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-rrd-2.0.1-1.module+el8.10.0+90472+f810484b.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-xdebug-2.9.5-1.module+el8.10.0+90472+f810484b.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/php-pecl-zip-1.18.2-1.module+el8.10.0+90472+f810484b.src.rpm

Related CVEs:

CVE-2026-14355




Description of changes:

libzip
php
[7.4.33-5]
- Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
  CVE-2026-14355

php-pear
php-pecl-apcu
php-pecl-rrd
php-pecl-xdebug
php-pecl-zip



From el-errata at oss.oracle.com  Tue Aug  4 16:52:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:52:58 -0700
Subject: [El-errata] ELSA-2026-49524 Important: Oracle Linux 8
 perl-Archive-Tar security update
Message-ID: <mailman.374.1785862392.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49524

http://linux.oracle.com/errata/ELSA-2026-49524.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-Archive-Tar-2.30-3.el8_10.noarch.rpm

aarch64:
perl-Archive-Tar-2.30-3.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/perl-Archive-Tar-2.30-3.el8_10.src.rpm

Related CVEs:

CVE-2026-9538




Description of changes:

[2.30-3]
- Fix CVE-2026-9538: cap per-entry declared size during tar read to
  defend against attacker-controlled size-field memory DoS
- Resolves: RHEL-191913



From el-errata at oss.oracle.com  Tue Aug  4 16:53:53 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:53:53 -0700
Subject: [El-errata] ELBA-2026-42741 Oracle Linux 9 tuned bug fix and
 enhancement update
Message-ID: <mailman.375.1785862447.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-42741

http://linux.oracle.com/errata/ELBA-2026-42741.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
tuned-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-gtk-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-ppd-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-atomic-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-cpu-partitioning-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-mssql-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oci-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oci-recommend-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oracle-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-postgresql-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-spectrumscale-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-utils-2.27.0-2.0.1.el9_8.noarch.rpm

aarch64:
tuned-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-gtk-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-ppd-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-atomic-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-cpu-partitioning-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-mssql-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oci-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oci-recommend-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-oracle-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-postgresql-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-profiles-spectrumscale-2.27.0-2.0.1.el9_8.noarch.rpm
tuned-utils-2.27.0-2.0.1.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/tuned-2.27.0-2.0.1.el9_8.src.rpm



Description of changes:

[2.27.0-2.0.1]
- Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
- Fix error in uninstalling tuned [Orabug: 351528377]
- Updated patch with the more recent version [Orabug: 30730976]
- Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
- Restored the system rules in recommend.conf [Orabug: 29962987]
- Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
  for increasing combined channels to 16 on NICs with bnxt_en driver on BM
- Do not access xps_cpus on single queue devices [Orabug: 29894296]
- OL8 does not support System Purpose [Orabug: 29443881]
  Remove syspurpose_role option in recommend.conf.
- Added profiles-oci-recommend package [Orabug: 29632202]
- Modified the patch for ol8 [Orabug: 29560068] (james.cheng at oracle.com)
- Added iscsi plugin, and
  - added oci-rps-xps profile [Orabug: 28397039]
  - added oci-busy-polling profile [Orabug: 28748149]
  - added oci-cpu-power profile

[2.27.0-2]
- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668



From el-errata at oss.oracle.com  Tue Aug  4 16:56:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:43 -0700
Subject: [El-errata] ELSA-2026-23329 Important: Oracle Linux 10 kernel
 security update
Message-ID: <mailman.376.1785862616.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-23329

http://linux.oracle.com/errata/ELSA-2026-23329.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2025-38653
CVE-2025-68366
CVE-2026-31613
CVE-2026-31709
CVE-2026-43322
CVE-2026-43329
CVE-2026-46243




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Tue Aug  4 16:56:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:45 -0700
Subject: [El-errata] ELSA-2026-35842 Important: Oracle Linux 10 nodejs22
 security, bug fix, and enhancement update
Message-ID: <mailman.379.1785862619.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-35842

http://linux.oracle.com/errata/ELSA-2026-35842.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-22.23.1-2.el10_2.x86_64.rpm
nodejs-devel-22.23.1-2.el10_2.x86_64.rpm
nodejs-docs-22.23.1-2.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-2.el10_2.x86_64.rpm
nodejs-libs-22.23.1-2.el10_2.x86_64.rpm
nodejs-npm-10.9.8-1.22.23.1.2.el10_2.x86_64.rpm

aarch64:
nodejs-22.23.1-2.el10_2.aarch64.rpm
nodejs-devel-22.23.1-2.el10_2.aarch64.rpm
nodejs-docs-22.23.1-2.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-2.el10_2.aarch64.rpm
nodejs-libs-22.23.1-2.el10_2.aarch64.rpm
nodejs-npm-10.9.8-1.22.23.1.2.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs22-22.23.1-2.el10_2.src.rpm

Related CVEs:

CVE-2026-6733
CVE-2026-9678
CVE-2026-11525
CVE-2026-12151
CVE-2026-42338
CVE-2026-48615
CVE-2026-48618
CVE-2026-48619
CVE-2026-48928
CVE-2026-48930
CVE-2026-48933
CVE-2026-48934
CVE-2026-48935




Description of changes:

[1:22.23.1-2]
- CVE-2026-42338 ip-address HTML escaping fix.

[1:22.23.1-1]
- Update to version 22.23.1

[1:22.22.2-2]
- De-bundle c-ares, libuv
- we waited for c-ares for about 4 months, so added conditional flag in
  case it falls behind in future again, same for libuv



From el-errata at oss.oracle.com  Tue Aug  4 16:56:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:47 -0700
Subject: [El-errata] ELSA-2026-47101 Important: Oracle Linux 10 firefox
 security update
Message-ID: <mailman.380.1785862620.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47101

http://linux.oracle.com/errata/ELSA-2026-47101.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.13.0-1.0.1.el10_2.x86_64.rpm

aarch64:
firefox-140.13.0-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/firefox-140.13.0-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-15718
CVE-2026-15719
CVE-2026-16349
CVE-2026-16350
CVE-2026-16351
CVE-2026-16352
CVE-2026-16353
CVE-2026-16354
CVE-2026-16355
CVE-2026-16356
CVE-2026-16357
CVE-2026-16358
CVE-2026-16359
CVE-2026-16360
CVE-2026-16361
CVE-2026-16362
CVE-2026-16363
CVE-2026-16368
CVE-2026-16369
CVE-2026-16371
CVE-2026-16374
CVE-2026-16375
CVE-2026-16377
CVE-2026-16379
CVE-2026-16381
CVE-2026-16383
CVE-2026-16387
CVE-2026-16390
CVE-2026-16391
CVE-2026-16396
CVE-2026-16405
CVE-2026-16412




Description of changes:

[140.13.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[140.13.0-1]
- Update to 140.13.0 ESR



From el-errata at oss.oracle.com  Tue Aug  4 16:56:48 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:48 -0700
Subject: [El-errata] ELSA-2026-48032 Important: Oracle Linux 10
 nodejs-nodemon security update
Message-ID: <mailman.381.1785862622.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-48032

http://linux.oracle.com/errata/ELSA-2026-48032.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-nodemon-3.1.14-2.el10_2.noarch.rpm

aarch64:
nodejs-nodemon-3.1.14-2.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs-nodemon-3.1.14-2.el10_2.src.rpm

Related CVEs:

CVE-2026-13149




Description of changes:

[3.1.14-2]
- Regenerete sources.

[3.1.14-1]
- Update to version 3.1.14

[3.0.3-7]
- revert of ce0df1a

[3.0.3-6]
- deps: revert letting nodemon work with any node



From el-errata at oss.oracle.com  Tue Aug  4 16:56:50 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:50 -0700
Subject: [El-errata] ELSA-2026-48033 Important: Oracle Linux 10 nodejs22
 security update
Message-ID: <mailman.382.1785862625.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-48033

http://linux.oracle.com/errata/ELSA-2026-48033.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-22.23.1-4.el10_2.x86_64.rpm
nodejs-devel-22.23.1-4.el10_2.x86_64.rpm
nodejs-docs-22.23.1-4.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-4.el10_2.x86_64.rpm
nodejs-libs-22.23.1-4.el10_2.x86_64.rpm
nodejs-npm-10.9.8-1.22.23.1.4.el10_2.x86_64.rpm

aarch64:
nodejs-22.23.1-4.el10_2.aarch64.rpm
nodejs-devel-22.23.1-4.el10_2.aarch64.rpm
nodejs-docs-22.23.1-4.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-4.el10_2.aarch64.rpm
nodejs-libs-22.23.1-4.el10_2.aarch64.rpm
nodejs-npm-10.9.8-1.22.23.1.4.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs22-22.23.1-4.el10_2.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874




Description of changes:

[1:22.23.1-4]
- Fix CVE-2026-13149 (npm/brace-expansion)

[1:22.23.1-3]
- Fix for CVE-2026-59873 and Fix for CVE-2026-59874 (node-tar)

[1:22.23.1-2]
- CVE-2026-42338 ip-address HTML escaping fix.

[1:22.23.1-1]
- Update to version 22.23.1

[1:22.22.2-2]
- De-bundle c-ares, libuv
- we waited for c-ares for about 4 months, so added conditional flag in
  case it falls behind in future again, same for libuv



From el-errata at oss.oracle.com  Tue Aug  4 16:56:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 04 Aug 2026 09:56:51 -0700
Subject: [El-errata] ELSA-2026-49621 Important: Oracle Linux 10 thunderbird
 security update
Message-ID: <mailman.383.1785862625.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49621

http://linux.oracle.com/errata/ELSA-2026-49621.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
thunderbird-140.13.0-1.0.1.el10_2.x86_64.rpm

aarch64:
thunderbird-140.13.0-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/thunderbird-140.13.0-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-14899
CVE-2026-15718
CVE-2026-15719
CVE-2026-16349
CVE-2026-16350
CVE-2026-16351
CVE-2026-16352
CVE-2026-16353
CVE-2026-16354
CVE-2026-16355
CVE-2026-16356
CVE-2026-16357
CVE-2026-16358
CVE-2026-16359
CVE-2026-16360
CVE-2026-16361
CVE-2026-16362
CVE-2026-16363
CVE-2026-16368
CVE-2026-16369
CVE-2026-16371
CVE-2026-16374
CVE-2026-16375
CVE-2026-16377
CVE-2026-16379
CVE-2026-16381
CVE-2026-16383
CVE-2026-16387
CVE-2026-16390
CVE-2026-16391
CVE-2026-16396
CVE-2026-16405
CVE-2026-16412




Description of changes:

[140.13.0-1.0.1]
- Add Oracle prefs

[140.13.0-1]
- Update to 140.13.0 ESR



From el-errata at oss.oracle.com  Wed Aug  5 21:39:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:49 -0700
Subject: [El-errata] ELSA-2026-49914  Low: Oracle Linux 10  php8.4 security,
 bug fix, and enhancement update
Message-ID: <mailman.384.1785966003.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49914

http://linux.oracle.com/errata/ELSA-2026-49914.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
php8.4-8.4.23-1.el10_2.x86_64.rpm
php8.4-bcmath-8.4.23-1.el10_2.x86_64.rpm
php8.4-cli-8.4.23-1.el10_2.x86_64.rpm
php8.4-common-8.4.23-1.el10_2.x86_64.rpm
php8.4-dba-8.4.23-1.el10_2.x86_64.rpm
php8.4-dbg-8.4.23-1.el10_2.x86_64.rpm
php8.4-devel-8.4.23-1.el10_2.x86_64.rpm
php8.4-embedded-8.4.23-1.el10_2.x86_64.rpm
php8.4-enchant-8.4.23-1.el10_2.x86_64.rpm
php8.4-ffi-8.4.23-1.el10_2.x86_64.rpm
php8.4-fpm-8.4.23-1.el10_2.x86_64.rpm
php8.4-gd-8.4.23-1.el10_2.x86_64.rpm
php8.4-gmp-8.4.23-1.el10_2.x86_64.rpm
php8.4-intl-8.4.23-1.el10_2.x86_64.rpm
php8.4-ldap-8.4.23-1.el10_2.x86_64.rpm
php8.4-mbstring-8.4.23-1.el10_2.x86_64.rpm
php8.4-mysqlnd-8.4.23-1.el10_2.x86_64.rpm
php8.4-odbc-8.4.23-1.el10_2.x86_64.rpm
php8.4-opcache-8.4.23-1.el10_2.x86_64.rpm
php8.4-pdo-8.4.23-1.el10_2.x86_64.rpm
php8.4-pgsql-8.4.23-1.el10_2.x86_64.rpm
php8.4-process-8.4.23-1.el10_2.x86_64.rpm
php8.4-snmp-8.4.23-1.el10_2.x86_64.rpm
php8.4-soap-8.4.23-1.el10_2.x86_64.rpm
php8.4-xml-8.4.23-1.el10_2.x86_64.rpm

aarch64:
php8.4-8.4.23-1.el10_2.aarch64.rpm
php8.4-bcmath-8.4.23-1.el10_2.aarch64.rpm
php8.4-cli-8.4.23-1.el10_2.aarch64.rpm
php8.4-common-8.4.23-1.el10_2.aarch64.rpm
php8.4-dba-8.4.23-1.el10_2.aarch64.rpm
php8.4-dbg-8.4.23-1.el10_2.aarch64.rpm
php8.4-devel-8.4.23-1.el10_2.aarch64.rpm
php8.4-embedded-8.4.23-1.el10_2.aarch64.rpm
php8.4-enchant-8.4.23-1.el10_2.aarch64.rpm
php8.4-ffi-8.4.23-1.el10_2.aarch64.rpm
php8.4-fpm-8.4.23-1.el10_2.aarch64.rpm
php8.4-gd-8.4.23-1.el10_2.aarch64.rpm
php8.4-gmp-8.4.23-1.el10_2.aarch64.rpm
php8.4-intl-8.4.23-1.el10_2.aarch64.rpm
php8.4-ldap-8.4.23-1.el10_2.aarch64.rpm
php8.4-mbstring-8.4.23-1.el10_2.aarch64.rpm
php8.4-mysqlnd-8.4.23-1.el10_2.aarch64.rpm
php8.4-odbc-8.4.23-1.el10_2.aarch64.rpm
php8.4-opcache-8.4.23-1.el10_2.aarch64.rpm
php8.4-pdo-8.4.23-1.el10_2.aarch64.rpm
php8.4-pgsql-8.4.23-1.el10_2.aarch64.rpm
php8.4-process-8.4.23-1.el10_2.aarch64.rpm
php8.4-snmp-8.4.23-1.el10_2.aarch64.rpm
php8.4-soap-8.4.23-1.el10_2.aarch64.rpm
php8.4-xml-8.4.23-1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/php8.4-8.4.23-1.el10_2.src.rpm

Related CVEs:

CVE-2026-14355




Description of changes:

[8.4.23-1]
- rebase to 8.4.23



From el-errata at oss.oracle.com  Wed Aug  5 21:39:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:40 -0700
Subject: [El-errata] ELBA-2026-50171-0 Oracle Linux 10 gdm bug fix and
 enhancement update
Message-ID: <mailman.385.1785966006.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50171-0

http://linux.oracle.com/errata/ELBA-2026-50171-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gdm-47.0-22.el10_2.x86_64.rpm
gdm-devel-47.0-22.el10_2.x86_64.rpm
gdm-pam-extensions-devel-47.0-22.el10_2.x86_64.rpm

aarch64:
gdm-47.0-22.el10_2.aarch64.rpm
gdm-devel-47.0-22.el10_2.aarch64.rpm
gdm-pam-extensions-devel-47.0-22.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gdm-47.0-22.el10_2.src.rpm



Description of changes:

[1:47.0-22]
- Fix auth bypass in authselect pam substacks



From el-errata at oss.oracle.com  Wed Aug  5 21:39:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:52 -0700
Subject: [El-errata] ELSA-2026-50144-0 Moderate: Oracle Linux 10 libgcrypt
 security update
Message-ID: <mailman.386.1785966007.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50144-0

http://linux.oracle.com/errata/ELSA-2026-50144-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libgcrypt-1.11.0-7.el10_2.x86_64.rpm
libgcrypt-devel-1.11.0-7.el10_2.x86_64.rpm

aarch64:
libgcrypt-1.11.0-7.el10_2.aarch64.rpm
libgcrypt-devel-1.11.0-7.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/libgcrypt-1.11.0-7.el10_2.src.rpm

Related CVEs:

CVE-2026-41989




Description of changes:

[1.11.0-7]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

[1.11.0-6]
- Disable annocheck on riscv64 (fixes build)
  Resolves: RHEL-88837



From el-errata at oss.oracle.com  Wed Aug  5 21:39:42 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:42 -0700
Subject: [El-errata] ELSA-2026-48034 Important: Oracle Linux 10 nodejs24
 security update
Message-ID: <mailman.387.1785966007.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-48034

http://linux.oracle.com/errata/ELSA-2026-48034.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs24-24.18.0-3.0.1.el10_2.x86_64.rpm
nodejs24-devel-24.18.0-3.0.1.el10_2.x86_64.rpm
nodejs24-docs-24.18.0-3.0.1.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-3.0.1.el10_2.x86_64.rpm
nodejs24-libs-24.18.0-3.0.1.el10_2.x86_64.rpm
nodejs24-npm-11.16.0-1.24.18.0.3.0.1.el10_2.noarch.rpm

aarch64:
nodejs24-24.18.0-3.0.1.el10_2.aarch64.rpm
nodejs24-devel-24.18.0-3.0.1.el10_2.aarch64.rpm
nodejs24-docs-24.18.0-3.0.1.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-3.0.1.el10_2.aarch64.rpm
nodejs24-libs-24.18.0-3.0.1.el10_2.aarch64.rpm
nodejs24-npm-11.16.0-1.24.18.0.3.0.1.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.18.0-3.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874




Description of changes:

[1:24.18.0-3.0.1]
- Update upstream references

[1:24.18.0-3]
- Fix CVE-2026-13149 (brace-expansion)

[1:24.18.0-2]
- Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:04 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:04 -0700
Subject: [El-errata] ELBA-2026-49518 Oracle Linux 9 glibc bug fix and
 enhancement update
Message-ID: <mailman.388.1785966018.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-49518

http://linux.oracle.com/errata/ELBA-2026-49518.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
glibc-2.34-275.0.1.el9_8.i686.rpm
glibc-2.34-275.0.1.el9_8.x86_64.rpm
glibc-all-langpacks-2.34-275.0.1.el9_8.x86_64.rpm
glibc-benchtests-2.34-275.0.1.el9_8.x86_64.rpm
glibc-common-2.34-275.0.1.el9_8.x86_64.rpm
glibc-devel-2.34-275.0.1.el9_8.i686.rpm
glibc-devel-2.34-275.0.1.el9_8.x86_64.rpm
glibc-doc-2.34-275.0.1.el9_8.noarch.rpm
glibc-gconv-extra-2.34-275.0.1.el9_8.i686.rpm
glibc-gconv-extra-2.34-275.0.1.el9_8.x86_64.rpm
glibc-headers-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-aa-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-af-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-agr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ak-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-am-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-an-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-anp-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ar-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-as-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ast-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ayc-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-az-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-be-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bem-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ber-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bg-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bhb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bho-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-br-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-brx-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-bs-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-byn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ca-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ce-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-chr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ckb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-cmn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-crh-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-cs-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-csb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-cv-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-cy-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-da-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-de-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-doi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-dsb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-dv-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-dz-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-el-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-en-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-eo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-es-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-et-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-eu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fa-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ff-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fil-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fur-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-fy-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ga-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-gd-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-gez-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-gl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-gu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-gv-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ha-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hak-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-he-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hif-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hne-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hsb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ht-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-hy-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ia-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-id-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ig-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ik-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-is-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-it-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-iu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ja-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ka-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kab-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kk-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-km-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ko-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kok-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ks-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ku-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-kw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ky-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lg-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-li-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lij-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ln-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lt-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lv-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-lzh-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mag-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mai-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mfe-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mg-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mhr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-miq-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mjw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mk-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ml-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mni-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mnw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ms-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-mt-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-my-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nan-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nb-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nds-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ne-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nhn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-niu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-nso-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-oc-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-om-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-or-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-os-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-pa-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-pap-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-pl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ps-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-pt-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-quz-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-raj-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ro-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ru-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-rw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sa-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sah-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sat-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sc-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sd-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-se-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sgs-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-shn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-shs-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-si-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sid-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sk-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sm-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-so-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sq-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ss-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-st-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sv-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-sw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-szl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ta-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tcy-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-te-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tg-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-th-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-the-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ti-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tig-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tk-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tl-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tn-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-to-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tpi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tr-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ts-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-tt-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ug-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-uk-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-unm-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ur-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-uz-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-ve-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-vi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-wa-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-wae-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-wal-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-wo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-xh-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-yi-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-yo-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-yue-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-yuw-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-zh-2.34-275.0.1.el9_8.x86_64.rpm
glibc-langpack-zu-2.34-275.0.1.el9_8.x86_64.rpm
glibc-locale-source-2.34-275.0.1.el9_8.x86_64.rpm
glibc-minimal-langpack-2.34-275.0.1.el9_8.x86_64.rpm
glibc-nss-devel-2.34-275.0.1.el9_8.i686.rpm
glibc-nss-devel-2.34-275.0.1.el9_8.x86_64.rpm
glibc-static-2.34-275.0.1.el9_8.i686.rpm
glibc-static-2.34-275.0.1.el9_8.x86_64.rpm
glibc-utils-2.34-275.0.1.el9_8.x86_64.rpm
libnsl-2.34-275.0.1.el9_8.i686.rpm
libnsl-2.34-275.0.1.el9_8.x86_64.rpm
nscd-2.34-275.0.1.el9_8.x86_64.rpm
nss_db-2.34-275.0.1.el9_8.i686.rpm
nss_db-2.34-275.0.1.el9_8.x86_64.rpm
nss_hesiod-2.34-275.0.1.el9_8.i686.rpm
nss_hesiod-2.34-275.0.1.el9_8.x86_64.rpm

aarch64:
glibc-2.34-275.0.1.el9_8.aarch64.rpm
glibc-all-langpacks-2.34-275.0.1.el9_8.aarch64.rpm
glibc-benchtests-2.34-275.0.1.el9_8.aarch64.rpm
glibc-common-2.34-275.0.1.el9_8.aarch64.rpm
glibc-devel-2.34-275.0.1.el9_8.aarch64.rpm
glibc-doc-2.34-275.0.1.el9_8.noarch.rpm
glibc-gconv-extra-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-aa-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-af-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-agr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ak-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-am-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-an-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-anp-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ar-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-as-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ast-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ayc-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-az-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-be-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bem-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ber-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bg-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bhb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bho-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-br-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-brx-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-bs-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-byn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ca-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ce-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-chr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ckb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-cmn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-crh-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-cs-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-csb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-cv-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-cy-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-da-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-de-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-doi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-dsb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-dv-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-dz-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-el-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-en-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-eo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-es-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-et-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-eu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fa-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ff-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fil-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fur-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-fy-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ga-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-gd-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-gez-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-gl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-gu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-gv-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ha-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hak-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-he-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hif-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hne-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hsb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ht-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-hy-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ia-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-id-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ig-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ik-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-is-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-it-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-iu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ja-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ka-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kab-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kk-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-km-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ko-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kok-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ks-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ku-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-kw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ky-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lg-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-li-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lij-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ln-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lt-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lv-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-lzh-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mag-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mai-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mfe-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mg-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mhr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-miq-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mjw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mk-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ml-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mni-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mnw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ms-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-mt-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-my-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nan-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nb-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nds-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ne-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nhn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-niu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-nso-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-oc-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-om-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-or-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-os-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-pa-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-pap-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-pl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ps-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-pt-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-quz-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-raj-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ro-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ru-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-rw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sa-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sah-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sat-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sc-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sd-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-se-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sgs-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-shn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-shs-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-si-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sid-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sk-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sm-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-so-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sq-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ss-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-st-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sv-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-sw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-szl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ta-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tcy-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-te-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tg-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-th-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-the-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ti-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tig-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tk-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tl-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tn-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-to-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tpi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tr-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ts-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-tt-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ug-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-uk-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-unm-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ur-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-uz-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-ve-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-vi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-wa-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-wae-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-wal-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-wo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-xh-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-yi-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-yo-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-yue-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-yuw-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-zh-2.34-275.0.1.el9_8.aarch64.rpm
glibc-langpack-zu-2.34-275.0.1.el9_8.aarch64.rpm
glibc-locale-source-2.34-275.0.1.el9_8.aarch64.rpm
glibc-minimal-langpack-2.34-275.0.1.el9_8.aarch64.rpm
glibc-nss-devel-2.34-275.0.1.el9_8.aarch64.rpm
glibc-static-2.34-275.0.1.el9_8.aarch64.rpm
glibc-utils-2.34-275.0.1.el9_8.aarch64.rpm
libnsl-2.34-275.0.1.el9_8.aarch64.rpm
nscd-2.34-275.0.1.el9_8.aarch64.rpm
nss_db-2.34-275.0.1.el9_8.aarch64.rpm
nss_hesiod-2.34-275.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/glibc-2.34-275.0.1.el9_8.src.rpm



Description of changes:

[2.34-275.0.1]
- Forward-port Oracle patches for ol9-u8
  Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  Oracle history:
  July-22-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-274.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
    Reviewed-by: David Faust <david.faust at oracle.com>
  June-30-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-272.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
    Reviewed-by: David Faust <david.faust at oracle.com>
  June-5-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-270.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  May-20-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-266.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: David Faust <david.faust at oracle.com>
  March-25-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-262.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: David Faust <david.faust at oracle.com>
  March-6-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-256.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: David Faust <david.faust at oracle.com>
  February-3-2026 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-245.0.1
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: David Faust <david.faust at oracle.com>
  November-14-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-231.0.1.1
  - Forward-port Oracle patches for ol9-u7
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  September-24-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-231.0.1
  - Forward-port Oracle patches for ol9-u7
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  September-8-2025 Jose E. Marchesi <jose.marchesi at oracle.com> - 2.34-228.0.1
  - Forward-port Oracle patches for ol9-u7
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  August-5-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-217.0.1
  - Forward-port Oralce patches for ol9-u7
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  August-5-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-168.0.1.23
  - Forward-port Oracle patches for ol9-u6
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  June-30-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-168.0.1.20
  - Forward-port Oracle patches for ol9-u6
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  June-9-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-168.0.1.19
  - Forward-port Oracle patches for ol9-u6
    Reviewed-by: David Faust <david.faust at oracle.com>
  May-17-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-168.0.1.14
  - Forward-port Oracle patches for ol9-u6
    Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-6-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-168.0.1
  - Forward-port Oracle patches for ol9-u6
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  February-18-2025 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-160.0.1
  - Forward-port Oracle patches for ol9-u6 DP
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  November-12-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-125.0.1.1
  - Forward-port Oracle patches for ol9-u5
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  October-1-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-100.0.1.4
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: David Faust <david.faust at oracle.com>
  August-26-2024 Jose E. Marchesi <jose.marchesi at oracle.com> - 2.34-100.0.1.3
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: David Faust <david.faust at oracle.com>
  May-24-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-100.0.1.2
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  April-30-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-100.0.1
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Indu Bhagat <indu.bhagat at oracle.com>
  March-28-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-100.0.1
  - Forward-port Oracle patches for ol9-u4-beta
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March 15 2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-83.0.2.12
  - Forward-port Oracle patches for ol9
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  February-26-2024 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-83.0.2.7
  - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  October-24-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-83.0.1.7
  - Forward-port Oracle patches for ol9
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  October-4-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-82.0.1
  - Forward-port Oracle patches for ol9
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  April-18-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-60.0.2
  - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
  - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
    can be used for stack allocation.
  - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
    0, glibc will madvise the kernel not to use allow hugepages for stack
    allocations.
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  March-28-2023 Cupertino Miranda <cupertino.miranda at oracle.com> - 2.34-60.0.1
  - Merge Oracle patches for ol9-u2 beta
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  September-28-2022 Patrick McGehearty <patrick.mcgehearty at oracle.com> - 2.34-40.0.1
  - Merge Oracle patches for ol9-u1 beta
    Reviewed by: Jose E. Marchesi <jose.marchesi at oracle.com>
  April-25-2022 Patrick McGehearty <patrick.mcgehearty at oracle.com> - 2.34-28.0.1
  - Merge Oracle patches with ol9 beta
  - Reviewed-by: Jose E. Marchesi <jose.marchesi at oracle.com>

[2.34-275]
- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:06 -0700
Subject: [El-errata] ELBA-2026-50133-0 Oracle Linux 9 autofs bug fix and
 enhancement update
Message-ID: <mailman.391.1785966019.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50133-0

http://linux.oracle.com/errata/ELBA-2026-50133-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
autofs-5.1.7-65.0.1.el9_8.3.x86_64.rpm

aarch64:
autofs-5.1.7-65.0.1.el9_8.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/autofs-5.1.7-65.0.1.el9_8.3.src.rpm



Description of changes:

[5.1.7-65.0.1.el9_8.3]
- Add autofs-5.0.5-lookup-mounts.patch [Orabug: 12658280]

[1:5.1.7-65.el9_8.3]
- Rebuild to fix missing binaries due to buildsystem oversight

[1:5.1.7-65.el9_8.2]
- RHEL-158216 - get_proximity returns a worng proximity on specific
  addresses [rhel-9.8.z]
  - Fix masks in parse_sub.c, so that hosts are correctly matched.
- Resolves: RHEL-158216

[1:5.1.7-65.el9_8.1]
- RHEL-154192 - Wrong oz_pgrp in autofs_sb_info causes automount to wait
  on automount.
  - quiet possibly noisy log message.
  - fix devid update on reload.
  - fix cache writelock must be taken in update_map_cache().
  - fix skip valid map entries on expire cleanup.
  - remove unnecessary call to set_direct_mount_tree_catatonic().
  - remove unnecessary assignment in umount_multi().
  - fix direct mount trigger umount failure case.
  - refactor do_umount_autofs_direct().
  - fix stale direct mount trigger not umounted on expire.
  - add function table_lookup_ino().
  - improve handling of missing map entry for mount request.
- Resolves: RHEL-154192



From el-errata at oss.oracle.com  Wed Aug  5 21:40:11 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:11 -0700
Subject: [El-errata] ELBA-2026-50150-0 Oracle Linux 9 rust-bootupd bug fix
 and enhancement update
Message-ID: <mailman.392.1785966021.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50150-0

http://linux.oracle.com/errata/ELBA-2026-50150-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bootupd-0.2.35-1.el9_8.x86_64.rpm

aarch64:
bootupd-0.2.35-1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/rust-bootupd-0.2.35-1.el9_8.src.rpm



Description of changes:

[0.2.35-1]
Resolves: #RHEL-110494

[0.2.29-1]
Resolves: #RHEL-110494

[0.2.27-3]
- spec: remove ExcludeArch ix86 as this is c9s
  Resolves: #RHEL-77736, #RHEL-79091

[0.2.27-2]
- Add git to the build requires
  Resolves: #RHEL-77736, #RHEL-79091

[0.2.27-1]
- https://github.com/coreos/bootupd/releases/tag/v0.2.27
  Resolves: #RHEL-77736

[0.2.25-1]
- new version



From el-errata at oss.oracle.com  Wed Aug  5 21:39:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:45 -0700
Subject: [El-errata] ELSA-2026-49836 Important: Oracle Linux 10 ldns
 security update
Message-ID: <mailman.393.1785966021.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49836

http://linux.oracle.com/errata/ELSA-2026-49836.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
ldns-1.8.3-18.el10_2.1.x86_64.rpm
ldns-devel-1.8.3-18.el10_2.1.x86_64.rpm
ldns-doc-1.8.3-18.el10_2.1.noarch.rpm
ldns-utils-1.8.3-18.el10_2.1.x86_64.rpm
perl-ldns-1.8.3-18.el10_2.1.x86_64.rpm
python3-ldns-1.8.3-18.el10_2.1.x86_64.rpm

aarch64:
ldns-1.8.3-18.el10_2.1.aarch64.rpm
ldns-devel-1.8.3-18.el10_2.1.aarch64.rpm
ldns-doc-1.8.3-18.el10_2.1.noarch.rpm
ldns-utils-1.8.3-18.el10_2.1.aarch64.rpm
perl-ldns-1.8.3-18.el10_2.1.aarch64.rpm
python3-ldns-1.8.3-18.el10_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/ldns-1.8.3-18.el10_2.1.src.rpm

Related CVEs:

CVE-2026-10846




Description of changes:

[1.8.3-18.1]
- Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient
  query-response matching (RHEL-210690)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:13 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:13 -0700
Subject: [El-errata] ELBA-2026-50159-0 Oracle Linux 9 keylime bug fix and
 enhancement update
Message-ID: <mailman.394.1785966025.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50159-0

http://linux.oracle.com/errata/ELBA-2026-50159-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
keylime-7.12.1-15.el9_8.1.x86_64.rpm
keylime-base-7.12.1-15.el9_8.1.x86_64.rpm
keylime-registrar-7.12.1-15.el9_8.1.x86_64.rpm
keylime-selinux-7.12.1-15.el9_8.1.noarch.rpm
keylime-tenant-7.12.1-15.el9_8.1.x86_64.rpm
keylime-verifier-7.12.1-15.el9_8.1.x86_64.rpm
python3-keylime-7.12.1-15.el9_8.1.x86_64.rpm

aarch64:
keylime-7.12.1-15.el9_8.1.aarch64.rpm
keylime-base-7.12.1-15.el9_8.1.aarch64.rpm
keylime-registrar-7.12.1-15.el9_8.1.aarch64.rpm
keylime-selinux-7.12.1-15.el9_8.1.noarch.rpm
keylime-tenant-7.12.1-15.el9_8.1.aarch64.rpm
keylime-verifier-7.12.1-15.el9_8.1.aarch64.rpm
python3-keylime-7.12.1-15.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/keylime-7.12.1-15.el9_8.1.src.rpm



Description of changes:

[7.12.1-15.1]
- Add API version negotiation to keylime_tenant
  Resolves: RHEL-154785



From el-errata at oss.oracle.com  Wed Aug  5 21:40:08 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:08 -0700
Subject: [El-errata] ELBA-2026-50136-0 Oracle Linux 9 gnutls bug fix and
 enhancement update
Message-ID: <mailman.395.1785966026.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50136-0

http://linux.oracle.com/errata/ELBA-2026-50136-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gnutls-3.8.10-8.el9_8.i686.rpm
gnutls-3.8.10-8.el9_8.x86_64.rpm
gnutls-c++-3.8.10-8.el9_8.i686.rpm
gnutls-c++-3.8.10-8.el9_8.x86_64.rpm
gnutls-dane-3.8.10-8.el9_8.i686.rpm
gnutls-dane-3.8.10-8.el9_8.x86_64.rpm
gnutls-devel-3.8.10-8.el9_8.i686.rpm
gnutls-devel-3.8.10-8.el9_8.x86_64.rpm
gnutls-utils-3.8.10-8.el9_8.x86_64.rpm

aarch64:
gnutls-3.8.10-8.el9_8.aarch64.rpm
gnutls-c++-3.8.10-8.el9_8.aarch64.rpm
gnutls-dane-3.8.10-8.el9_8.aarch64.rpm
gnutls-devel-3.8.10-8.el9_8.aarch64.rpm
gnutls-utils-3.8.10-8.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/gnutls-3.8.10-8.el9_8.src.rpm



Description of changes:

[3.8.10-8]
- Rebuild to target RHEL-9.8

[3.8.10-7]
- fips: Allow SigVer only with RSA keys with modulus >= 2048 bits

[3.8.10-6]
- Fix order of previous changelog entries (RHEL-172270)

[3.8.10-5]
- Use full hash+sign operations in pct_test (RHEL-172270)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:21 -0700
Subject: [El-errata] ELSA-2026-42899 Important: Oracle Linux 9
 java-25-openjdk security update
Message-ID: <mailman.396.1785966034.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42899

http://linux.oracle.com/errata/ELSA-2026-42899.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el9.x86_64.rpm

aarch64:
java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-crypto-adapter-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-demo-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-devel-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-headless-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-javadoc-zip-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-jmods-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-src-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-fastdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm
java-25-openjdk-static-libs-slowdebug-25.0.4.0.7-1.1.0.1.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-25-openjdk-25.0.4.0.7-1.1.0.1.el9.src.rpm

Related CVEs:

CVE-2026-????
CVE-2026-41254
CVE-2026-46917
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47059
CVE-2026-47063




Description of changes:

[25.0.4.0.7-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:25.0.4.0.7-1.0]
- Update to jdk-25.0.4+7 (GA)
- Update release notes to 25.0.4+7
- Bump freetype version to 2.14.3 following JDK-8385390
- Bump giflib version to 6.1.3 following JDK-8384902
- Bump HarfBuzz version to 14.2.0 following JDK-8385490
- Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354
- Bump libpng version to 1.6.58 following JDK-8384495
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Drop local copy of JDK-8375294 EOPNOTSUPP patch
- Obsolete old RHEL releases (9.7.0-z, 10.1-z)
- Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed
- Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269)
- Make zone string debug output optional in TestTranslations
- Sync the copy of the portable specfile with the latest update
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188880
- Resolves: RHEL-212293
- Resolves: RHEL-212297

[1:25.0.3.0.9-3.2]
- Add family option with name argument to alternatives install lines (OPENJDK-4854)
- Resolves: RHEL-211053

[1:25.0.3.0.9-3.1]
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes
- Sync the copy of the portable specfile with the latest update
- Related: RHEL-155330
- Related: RHEL-156040
- Resolves: RHEL-149785
- Resolves: RHEL-211047
- Resolves: RHEL-211051



From el-errata at oss.oracle.com  Wed Aug  5 21:40:23 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:23 -0700
Subject: [El-errata] ELSA-2026-49212 Important: Oracle Linux 9 kernel
 security update
Message-ID: <mailman.397.1785966037.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49212

http://linux.oracle.com/errata/ELSA-2026-49212.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.33.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.33.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.33.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.33.1.el9_8.x86_64.rpm
libperf-5.14.0-687.33.1.el9_8.x86_64.rpm
perf-5.14.0-687.33.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.33.1.el9_8.x86_64.rpm
rtla-5.14.0-687.33.1.el9_8.x86_64.rpm
rv-5.14.0-687.33.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.33.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.33.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.33.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.33.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.33.1.el9_8.aarch64.rpm
libperf-5.14.0-687.33.1.el9_8.aarch64.rpm
perf-5.14.0-687.33.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.33.1.el9_8.aarch64.rpm
rtla-5.14.0-687.33.1.el9_8.aarch64.rpm
rv-5.14.0-687.33.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.33.1.el9_8.src.rpm

Related CVEs:

CVE-2026-52923
CVE-2026-52993
CVE-2026-64530




Description of changes:

[5.14.0-687.33.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.33.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}

[5.14.0-687.32.1]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}



From el-errata at oss.oracle.com  Wed Aug  5 21:40:25 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:25 -0700
Subject: [El-errata] ELSA-2026-49607 Important: Oracle Linux 9 frr10
 security, bug fix, and enhancement update
Message-ID: <mailman.398.1785966039.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49607

http://linux.oracle.com/errata/ELSA-2026-49607.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
frr10-10.4.3-3.el9_8.2.x86_64.rpm
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm

aarch64:
frr10-10.4.3-3.el9_8.2.aarch64.rpm
frr10-selinux-10.4.3-3.el9_8.2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/frr10-10.4.3-3.el9_8.2.src.rpm

Related CVEs:

CVE-2026-37460




Description of changes:

[10.4.3-3.2]
- Resolves: RHEL-222338 - AVC when reading user's site-packages

[10.4.3-3.1]
- Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC
- Resolves: RHEL-193232



From el-errata at oss.oracle.com  Wed Aug  5 21:40:00 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:00 -0700
Subject: [El-errata] ELBA-2026-500091 Oracle Linux 9
 oracle-database-preinstall-19c bug fix update
Message-ID: <mailman.399.1785966047.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500091

http://linux.oracle.com/errata/ELBA-2026-500091.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
oracle-database-preinstall-19c-1.0-3.el9.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/oracle-database-preinstall-19c-1.0-3.el9.src.rpm



Description of changes:

[[1.0-3.el9]]
- Use systemctl to enable firstboot service [Orabug: 36607029]
 - Set fs.file-max based on memory size [Orabug: 39620355]
 - Set fs.aio-max-nr based on memory size [Orabug: 39206560]



From el-errata at oss.oracle.com  Wed Aug  5 21:39:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:51 -0700
Subject: [El-errata] ELSA-2026-50142-0 Important: Oracle Linux 10 sg3_utils
 security, bug fix, and enhancement update
Message-ID: <mailman.400.1785966048.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50142-0

http://linux.oracle.com/errata/ELSA-2026-50142-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
sg3_utils-1.48-7.el10_2.1.x86_64.rpm
sg3_utils-devel-1.48-7.el10_2.1.x86_64.rpm
sg3_utils-libs-1.48-7.el10_2.1.x86_64.rpm

aarch64:
sg3_utils-1.48-7.el10_2.1.aarch64.rpm
sg3_utils-devel-1.48-7.el10_2.1.aarch64.rpm
sg3_utils-libs-1.48-7.el10_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/sg3_utils-1.48-7.el10_2.1.src.rpm

Related CVEs:

CVE-2026-16313




Description of changes:

[1.48-7.1]
- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188123)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:15 -0700
Subject: [El-errata] ELBA-2026-50166-0 Oracle Linux 9 linuxptp bug fix and
 enhancement update
Message-ID: <mailman.401.1785966048.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50166-0

http://linux.oracle.com/errata/ELBA-2026-50166-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
linuxptp-4.4-4.el9_8.1.x86_64.rpm

aarch64:
linuxptp-4.4-4.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/linuxptp-4.4-4.el9_8.1.src.rpm



Description of changes:

[4.4-4.el9_8.1]
- fix high CPU usage by ptp4l when link is down (RHEL-191410)
- fix phc2sys to not get stuck in static mode (RHEL-187949)

[4.4-3]
- fix unicast server to recover after port fault (RHEL-93496)

[4.4-2]
- add experimental option for external PPS in ts2phc automatic mode
  (RHEL-72468)
- add command to set external grandmaster properties (RHEL-90585)
- refresh link status on faults (RHEL-56168)

[4.4-1]
- update to 4.4 (RHEL-58213 RHEL-57040)
- fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
- support static sink clocks in phc2sys automatic mode (RHEL-62864)
- don't require -O option without -a and -w in phc2sys (RHEL-69138)

[4.2-3]
- rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
- fix ts2phc to correctly handle leap seconds (RHEL-40216)
- fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
- add options to configure multicast IP addresses (RHEL-31178)
- add holdover support to ts2phc (RHEL-50216)



From el-errata at oss.oracle.com  Wed Aug  5 21:39:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:37 -0700
Subject: [El-errata] ELBA-2026-50135-0 Oracle Linux 10 policycoreutils bug
 fix and enhancement update
Message-ID: <mailman.402.1785966050.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50135-0

http://linux.oracle.com/errata/ELBA-2026-50135-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
policycoreutils-3.10-2.el10_2.x86_64.rpm
policycoreutils-dbus-3.10-2.el10_2.noarch.rpm
policycoreutils-devel-3.10-2.el10_2.x86_64.rpm
policycoreutils-gui-3.10-2.el10_2.noarch.rpm
policycoreutils-newrole-3.10-2.el10_2.x86_64.rpm
policycoreutils-python-utils-3.10-2.el10_2.noarch.rpm
policycoreutils-restorecond-3.10-2.el10_2.x86_64.rpm
policycoreutils-sandbox-3.10-2.el10_2.x86_64.rpm
python3-policycoreutils-3.10-2.el10_2.noarch.rpm

aarch64:
policycoreutils-3.10-2.el10_2.aarch64.rpm
policycoreutils-dbus-3.10-2.el10_2.noarch.rpm
policycoreutils-devel-3.10-2.el10_2.aarch64.rpm
policycoreutils-gui-3.10-2.el10_2.noarch.rpm
policycoreutils-newrole-3.10-2.el10_2.aarch64.rpm
policycoreutils-python-utils-3.10-2.el10_2.noarch.rpm
policycoreutils-restorecond-3.10-2.el10_2.aarch64.rpm
policycoreutils-sandbox-3.10-2.el10_2.aarch64.rpm
python3-policycoreutils-3.10-2.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/policycoreutils-3.10-2.el10_2.src.rpm



Description of changes:

[3.10-2]
- Several sandbox and seunshare security improvements



From el-errata at oss.oracle.com  Wed Aug  5 21:39:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:43 -0700
Subject: [El-errata] ELSA-2026-49211 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.405.1785966053.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49211

http://linux.oracle.com/errata/ELSA-2026-49211.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.42.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.42.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.42.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.42.1.el10_2.x86_64.rpm
libperf-6.12.0-211.42.1.el10_2.x86_64.rpm
perf-6.12.0-211.42.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.42.1.el10_2.x86_64.rpm
rtla-6.12.0-211.42.1.el10_2.x86_64.rpm
rv-6.12.0-211.42.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.42.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.42.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.42.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.42.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.42.1.el10_2.aarch64.rpm
libperf-6.12.0-211.42.1.el10_2.aarch64.rpm
perf-6.12.0-211.42.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.42.1.el10_2.aarch64.rpm
rtla-6.12.0-211.42.1.el10_2.aarch64.rpm
rv-6.12.0-211.42.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.42.1.el10_2.src.rpm

Related CVEs:

CVE-2025-68211
CVE-2026-46303
CVE-2026-64530




Description of changes:

[6.12.0-211.42.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.42.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-214082] {CVE-2026-64530}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Rafael Aquini) [RHEL-189554] {CVE-2025-68211}
- isofs: validate Rock Ridge CE continuation extent against volume size (CKI Backport Bot) [RHEL-187415] {CVE-2026-46303}

[6.12.0-211.41.1]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212063]
- ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (CKI Backport Bot) [RHEL-185669]



From el-errata at oss.oracle.com  Wed Aug  5 21:40:02 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:02 -0700
Subject: [El-errata] ELBA-2026-26196 Oracle Linux 9 openscap bug fix and
 enhancement update
Message-ID: <mailman.406.1785966054.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-26196

http://linux.oracle.com/errata/ELBA-2026-26196.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
openscap-1.3.14-1.0.1.el9_8.i686.rpm
openscap-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-devel-1.3.14-1.0.1.el9_8.i686.rpm
openscap-devel-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-engine-sce-1.3.14-1.0.1.el9_8.i686.rpm
openscap-engine-sce-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-engine-sce-devel-1.3.14-1.0.1.el9_8.i686.rpm
openscap-engine-sce-devel-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-python3-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-scanner-1.3.14-1.0.1.el9_8.x86_64.rpm
openscap-utils-1.3.14-1.0.1.el9_8.x86_64.rpm

aarch64:
openscap-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-devel-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-engine-sce-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-engine-sce-devel-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-python3-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-scanner-1.3.14-1.0.1.el9_8.aarch64.rpm
openscap-utils-1.3.14-1.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/openscap-1.3.14-1.0.1.el9_8.src.rpm



Description of changes:

[1.3.14-1.0.1]
- Restore original version
- Drop OpenELA branding

[1.3.14.openela.1.0]
- Add OpenELA to openscap

[1:1.3.14-1]
- Upgrade to the latest upstream release (RHEL-167949)



From el-errata at oss.oracle.com  Wed Aug  5 21:39:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:35 -0700
Subject: [El-errata] ELBA-2026-500128 Oracle Linux 10 osbuild bug fix update
Message-ID: <mailman.407.1785966054.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500128

http://linux.oracle.com/errata/ELBA-2026-500128.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-185-1.0.1.el10.x86_64.rpm
osbuild-container-selinux-185-1.0.1.el10.x86_64.rpm
osbuild-depsolve-dnf-185-1.0.1.el10.x86_64.rpm
osbuild-initrd-185-1.0.1.el10.x86_64.rpm
osbuild-luks2-185-1.0.1.el10.x86_64.rpm
osbuild-lvm2-185-1.0.1.el10.x86_64.rpm
osbuild-ostree-185-1.0.1.el10.x86_64.rpm
osbuild-selinux-185-1.0.1.el10.x86_64.rpm
osbuild-tools-185-1.0.1.el10.x86_64.rpm
osbuild-virt-deps-185-1.0.1.el10.x86_64.rpm
python3-osbuild-185-1.0.1.el10.x86_64.rpm

aarch64:
osbuild-185-1.0.1.el10.aarch64.rpm
osbuild-container-selinux-185-1.0.1.el10.aarch64.rpm
osbuild-depsolve-dnf-185-1.0.1.el10.aarch64.rpm
osbuild-initrd-185-1.0.1.el10.aarch64.rpm
osbuild-luks2-185-1.0.1.el10.aarch64.rpm
osbuild-lvm2-185-1.0.1.el10.aarch64.rpm
osbuild-ostree-185-1.0.1.el10.aarch64.rpm
osbuild-tools-185-1.0.1.el10.aarch64.rpm
osbuild-virt-deps-185-1.0.1.el10.aarch64.rpm
osbuild-selinux-185-1.0.1.el10.aarch64.rpm
python3-osbuild-185-1.0.1.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/osbuild-185-1.0.1.el10.src.rpm



Description of changes:

[185-1.0.1]
- Bump to v185 [Orabug: 39666639]
- Oracle Linux support was merged upstream in osbuild PR 2476, adding the OL runner symlink



From el-errata at oss.oracle.com  Wed Aug  5 21:40:09 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:09 -0700
Subject: [El-errata] ELBA-2026-50138-0 Oracle Linux 9 conmon bug fix and
 enhancement update
Message-ID: <mailman.408.1785966055.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50138-0

http://linux.oracle.com/errata/ELBA-2026-50138-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
conmon-2.2.1-2.el9_8.x86_64.rpm

aarch64:
conmon-2.2.1-2.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/conmon-2.2.1-2.el9_8.src.rpm



Description of changes:

[3:2.2.1-2]
- reset create_pid after waitpid to prevent signaling unrelated processes
- Resolves: RHEL-180615



From el-errata at oss.oracle.com  Wed Aug  5 21:39:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:32 -0700
Subject: [El-errata] ELBA-2026-500126 Oracle Linux 10 kdump-utils bug fix
 update
Message-ID: <mailman.409.1785966055.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500126

http://linux.oracle.com/errata/ELBA-2026-500126.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kdump-utils-1.0.58-15.0.2.el10.x86_64.rpm

aarch64:
kdump-utils-1.0.58-15.0.2.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kdump-utils-1.0.58-15.0.2.el10.src.rpm



Description of changes:

[1.0.58-15.0.2]
- kdump: add iSCSI driver injection for iSCSI boot setups [Orabug: 38989420]

[1.0.58-15.0.1]
- Disable transparent_hugepage for aarch64 [Orabug: 37867172]
- Do not use squash-erofs on UEK kernels [Orabug: 37737510]
- Port OL9 patches to OL10 [Orabug: 37600072]
  arm64: skip memory integrity checks in purgatory [Orabug: 30822387]
  disable iommu for kdump [Orabug: 30832988]
  append no_timer_check for xen guest kdump [Orabug: 30928441]
  kdump: Skip LVM private devices [Orabug: 33822070]
  Update UEK reserved sizes [Orabug: 34663083]
  handle xen_netfront in dracut module setup [Orabug: 35615400]
  kdumpctl: check if FIPS is enabled [Orabug: 35982140]
- Include support for virt-what [Orabug: 36517679]
- Fix syntax error in patch [Orabug: 39009351]

[1.0.58-15]
- kdump-lib: use EFI var to find UKI

[1.0.58-14]
- spec: Add the missing 20th patch

[1.0.58-13]
- kdump-lib: always disable systemd-gpt-auto-generator

[1.0.58-12]
- spec: drop dependency for binutils

[1.0.58-11]
- spec: drop dependency for binutils

[1.0.58-10]
- sysconfig: use initramfs_options to reduce memory usage

[1.0.58-9]
- kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val

[1.0.58-8]
- kexec-kdump-howto.txt: update paragraphs related to disable_cpu_apicid



From el-errata at oss.oracle.com  Wed Aug  5 21:40:28 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:28 -0700
Subject: [El-errata] ELSA-2026-49838 Important: Oracle Linux 9
 osbuild-composer security, bug fix, and enhancement update
Message-ID: <mailman.410.1785966060.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49838

http://linux.oracle.com/errata/ELSA-2026-49838.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-core-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.x86_64.rpm

aarch64:
osbuild-composer-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-core-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/osbuild-composer-175-1.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-32280
CVE-2026-32281




Description of changes:

[175-1.0.1]
- Track github upstream



From el-errata at oss.oracle.com  Wed Aug  5 21:39:38 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:39:38 -0700
Subject: [El-errata] ELBA-2026-50153-0 Oracle Linux 10 rust-bootupd bug fix
 and enhancement update
Message-ID: <mailman.411.1785966060.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50153-0

http://linux.oracle.com/errata/ELBA-2026-50153-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
bootupd-0.2.35-1.el10_2.x86_64.rpm

aarch64:
bootupd-0.2.35-1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/rust-bootupd-0.2.35-1.el10_2.src.rpm



Description of changes:

[0.2.35-1]
- Update to v0.2.35



From el-errata at oss.oracle.com  Wed Aug  5 21:40:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:32 -0700
Subject: [El-errata] ELSA-2026-50108-0 Important: Oracle Linux 9 ldns
 security update
Message-ID: <mailman.412.1785966061.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50108-0

http://linux.oracle.com/errata/ELSA-2026-50108-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ldns-1.7.1-12.el9_8.1.i686.rpm
ldns-1.7.1-12.el9_8.1.x86_64.rpm
ldns-devel-1.7.1-12.el9_8.1.x86_64.rpm
ldns-doc-1.7.1-12.el9_8.1.noarch.rpm
ldns-utils-1.7.1-12.el9_8.1.x86_64.rpm
perl-ldns-1.7.1-12.el9_8.1.x86_64.rpm
python3-ldns-1.7.1-12.el9_8.1.x86_64.rpm

aarch64:
ldns-1.7.1-12.el9_8.1.aarch64.rpm
ldns-devel-1.7.1-12.el9_8.1.aarch64.rpm
ldns-doc-1.7.1-12.el9_8.1.noarch.rpm
ldns-utils-1.7.1-12.el9_8.1.aarch64.rpm
perl-ldns-1.7.1-12.el9_8.1.aarch64.rpm
python3-ldns-1.7.1-12.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/ldns-1.7.1-12.el9_8.1.src.rpm

Related CVEs:

CVE-2026-10846




Description of changes:

[1.7.1-12.1]
- Fix CVE-2026-10846: DNS response spoofing via missing
  address/port/TXID and question section validation (RHEL-210701)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:38 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:38 -0700
Subject: [El-errata] ELSA-2026-50317-0 Important: Oracle Linux 9
 fence-agents security update
Message-ID: <mailman.413.1785966061.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50317-0

http://linux.oracle.com/errata/ELSA-2026-50317-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-aliyun-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-all-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-amt-ws-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-apc-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-apc-snmp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-aws-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-azure-arm-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-bladecenter-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-brocade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-cisco-mds-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-cisco-ucs-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-common-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-compute-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-drac5-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-eaton-snmp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-emerson-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-eps-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-gce-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-heuristics-ping-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-hpblade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibm-powervs-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibm-vpc-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibmblade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ifmib-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-moonshot-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-mp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-ssh-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo2-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-intelmodular-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ipdu-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ipmilan-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-kdump-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-kubevirt-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-lpar-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-mpath-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-nutanix-ahv-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-openstack-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-redfish-4.10.0-110.el9_8.5.x86_64.rpm
fence-agents-rhevm-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-rsa-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-rsb-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-sbd-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-scsi-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-virsh-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-vmware-rest-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-vmware-soap-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-wti-4.10.0-110.el9_8.5.noarch.rpm
fence-virt-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-cpg-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-libvirt-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-multicast-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-serial-4.10.0-110.el9_8.5.x86_64.rpm
fence-virtd-tcp-4.10.0-110.el9_8.5.x86_64.rpm
ha-cloud-support-4.10.0-110.el9_8.5.x86_64.rpm

aarch64:
fence-agents-all-4.10.0-110.el9_8.5.aarch64.rpm
fence-agents-amt-ws-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-apc-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-apc-snmp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-bladecenter-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-brocade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-cisco-mds-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-cisco-ucs-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-common-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-drac5-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-eaton-snmp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-emerson-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-eps-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-heuristics-ping-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-hpblade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibm-powervs-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibm-vpc-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ibmblade-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ifmib-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-moonshot-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-mp-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo-ssh-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ilo2-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-intelmodular-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ipdu-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-ipmilan-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-kdump-4.10.0-110.el9_8.5.aarch64.rpm
fence-agents-kubevirt-4.10.0-110.el9_8.5.aarch64.rpm
fence-agents-lpar-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-mpath-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-nutanix-ahv-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-redfish-4.10.0-110.el9_8.5.aarch64.rpm
fence-agents-rhevm-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-rsa-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-rsb-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-sbd-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-scsi-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-virsh-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-vmware-rest-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-vmware-soap-4.10.0-110.el9_8.5.noarch.rpm
fence-agents-wti-4.10.0-110.el9_8.5.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/fence-agents-4.10.0-110.el9_8.5.src.rpm

Related CVEs:

CVE-2026-59939




Description of changes:

[4.10.0-110.5]
- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
  Resolves: RHEL-193808

[4.10.0-110.4]
- fence_openstack: fix list-action to avoid timeout when
  there are 100+ VMs on the hypervisor
  Resolves: RHEL-186320



From el-errata at oss.oracle.com  Wed Aug  5 21:40:36 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:36 -0700
Subject: [El-errata] ELSA-2026-50147-0 Moderate: Oracle Linux 9 libgcrypt
 security update
Message-ID: <mailman.414.1785966064.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50147-0

http://linux.oracle.com/errata/ELSA-2026-50147-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libgcrypt-1.10.0-13.el9_8.i686.rpm
libgcrypt-1.10.0-13.el9_8.x86_64.rpm
libgcrypt-devel-1.10.0-13.el9_8.i686.rpm
libgcrypt-devel-1.10.0-13.el9_8.x86_64.rpm

aarch64:
libgcrypt-1.10.0-13.el9_8.aarch64.rpm
libgcrypt-devel-1.10.0-13.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libgcrypt-1.10.0-13.el9_8.src.rpm

Related CVEs:

CVE-2026-41989




Description of changes:

[1.10.0-13]
- Bump version to fix wrong build target.

[1.10.0.12]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext



From el-errata at oss.oracle.com  Wed Aug  5 21:40:50 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:50 -0700
Subject: [El-errata] ELSA-2026-500121 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.415.1785966065.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500121

http://linux.oracle.com/errata/ELSA-2026-500121.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.358.2.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.358.2.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.358.2.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.358.2.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.el8uek.src.rpm

Related CVEs:

CVE-2026-43038
CVE-2026-43499
CVE-2026-46043
CVE-2026-46331
CVE-2026-64600




Description of changes:

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]



From el-errata at oss.oracle.com  Wed Aug  5 21:40:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:27 -0700
Subject: [El-errata] ELSA-2026-49667 Moderate: Oracle Linux 9 p11-kit
 security update
Message-ID: <mailman.418.1785966065.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49667

http://linux.oracle.com/errata/ELSA-2026-49667.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
p11-kit-0.26.4-1.el9_8.i686.rpm
p11-kit-0.26.4-1.el9_8.x86_64.rpm
p11-kit-client-0.26.4-1.el9_8.x86_64.rpm
p11-kit-devel-0.26.4-1.el9_8.i686.rpm
p11-kit-devel-0.26.4-1.el9_8.x86_64.rpm
p11-kit-server-0.26.4-1.el9_8.x86_64.rpm
p11-kit-trust-0.26.4-1.el9_8.i686.rpm
p11-kit-trust-0.26.4-1.el9_8.x86_64.rpm

aarch64:
p11-kit-0.26.4-1.el9_8.aarch64.rpm
p11-kit-client-0.26.4-1.el9_8.aarch64.rpm
p11-kit-devel-0.26.4-1.el9_8.aarch64.rpm
p11-kit-server-0.26.4-1.el9_8.aarch64.rpm
p11-kit-trust-0.26.4-1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/p11-kit-0.26.4-1.el9_8.src.rpm

Related CVEs:

CVE-2026-13757




Description of changes:

[0.26.2-1]
- Rebase to 0.26.2
  Resolves: RHEL-147825

[0.26.1-1]
- Rebase to 0.26.1
  Resolves: RHEL-139075, RHEL-118361, RHEL-126132

[0.25.10-1]
- Update to new upstream release 0.25.10
  Resolves: RHEL-115453

[0.25.3-3]
- Fix regression in trust where file creation fails for long cert labels
  Resolves: RHEL-58899
- Fix usage message in p11-kit list-tokens command
  Resolves: RHEL-31810



From el-errata at oss.oracle.com  Wed Aug  5 21:40:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:34 -0700
Subject: [El-errata] ELSA-2026-50141-0 Important: Oracle Linux 9 sg3_utils
 security, bug fix, and enhancement update
Message-ID: <mailman.419.1785966066.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50141-0

http://linux.oracle.com/errata/ELSA-2026-50141-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
sg3_utils-1.47-10.el9_8.1.x86_64.rpm
sg3_utils-devel-1.47-10.el9_8.1.i686.rpm
sg3_utils-devel-1.47-10.el9_8.1.x86_64.rpm
sg3_utils-libs-1.47-10.el9_8.1.i686.rpm
sg3_utils-libs-1.47-10.el9_8.1.x86_64.rpm

aarch64:
sg3_utils-1.47-10.el9_8.1.aarch64.rpm
sg3_utils-devel-1.47-10.el9_8.1.aarch64.rpm
sg3_utils-libs-1.47-10.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/sg3_utils-1.47-10.el9_8.1.src.rpm

Related CVEs:

CVE-2026-16313




Description of changes:

[1.47-10.1]
- sg_inq output conformance for SCSI name string and ATA fields (RHEL-188130)



From el-errata at oss.oracle.com  Wed Aug  5 21:40:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:52 -0700
Subject: [El-errata] ELBA-2026-48830 Oracle Linux 8 libxmlb bug fix and
 enhancement update
Message-ID: <mailman.420.1785966066.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-48830

http://linux.oracle.com/errata/ELBA-2026-48830.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libxmlb-0.3.28-1.el8_10.i686.rpm
libxmlb-0.3.28-1.el8_10.x86_64.rpm
libxmlb-devel-0.3.28-1.el8_10.i686.rpm
libxmlb-devel-0.3.28-1.el8_10.x86_64.rpm

aarch64:
libxmlb-0.3.28-1.el8_10.aarch64.rpm
libxmlb-devel-0.3.28-1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libxmlb-0.3.28-1.el8_10.src.rpm



Description of changes:

[0.3.28-1]
- New upstream release for fwupd backport
- Resolves: RHEL-190658



From el-errata at oss.oracle.com  Wed Aug  5 21:40:30 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:30 -0700
Subject: [El-errata] ELSA-2026-49921 Important: Oracle Linux 9 thunderbird
 security update
Message-ID: <mailman.421.1785966070.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49921

http://linux.oracle.com/errata/ELSA-2026-49921.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
thunderbird-140.13.0-1.0.1.el9_8.x86_64.rpm

aarch64:
thunderbird-140.13.0-1.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/thunderbird-140.13.0-1.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-14899
CVE-2026-15718
CVE-2026-15719
CVE-2026-16349
CVE-2026-16350
CVE-2026-16351
CVE-2026-16352
CVE-2026-16353
CVE-2026-16354
CVE-2026-16355
CVE-2026-16356
CVE-2026-16357
CVE-2026-16358
CVE-2026-16359
CVE-2026-16360
CVE-2026-16361
CVE-2026-16362
CVE-2026-16363
CVE-2026-16368
CVE-2026-16369
CVE-2026-16371
CVE-2026-16374
CVE-2026-16375
CVE-2026-16377
CVE-2026-16379
CVE-2026-16381
CVE-2026-16383
CVE-2026-16387
CVE-2026-16390
CVE-2026-16391
CVE-2026-16396
CVE-2026-16405
CVE-2026-16412




Description of changes:

[140.13.0-1.0.1]
- Fix prefs for new nss [Orabug: 37079813]
- Add Oracle prefs

[140.13.0]
- Add OpenELA debranding

[140.13.0-1]
- Update to 140.13.0 ESR



From el-errata at oss.oracle.com  Wed Aug  5 21:40:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:56 -0700
Subject: [El-errata] ELSA-2026-49214 Important: Oracle Linux 8 kernel
 security update
Message-ID: <mailman.422.1785966071.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49214

http://linux.oracle.com/errata/ELSA-2026-49214.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.150.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.150.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.150.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.x86_64.rpm
perf-4.18.0-553.150.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.150.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.150.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.150.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.150.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.150.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.150.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.150.1.el8_10.aarch64.rpm
perf-4.18.0-553.150.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.150.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.150.1.el8_10.src.rpm

Related CVEs:

CVE-2026-31692
CVE-2026-43116
CVE-2026-46150
CVE-2026-64530




Description of changes:

[4.18.0-553.150.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.150.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116}

[4.18.0-553.149.1]
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150}



From el-errata at oss.oracle.com  Wed Aug  5 21:40:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:54 -0700
Subject: [El-errata] ELBA-2026-48843 Oracle Linux 8 fwupd bug fix and
 enhancement update
Message-ID: <mailman.423.1785966071.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-48843

http://linux.oracle.com/errata/ELBA-2026-48843.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
fwupd-2.1.6-1.0.1.el8_10.x86_64.rpm
fwupd-devel-2.1.6-1.0.1.el8_10.x86_64.rpm

aarch64:
fwupd-2.1.6-1.0.1.el8_10.aarch64.rpm
fwupd-devel-2.1.6-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/fwupd-2.1.6-1.0.1.el8_10.src.rpm



Description of changes:

[2.1.6-1.0.1]
- Align sections to 512 bytes [Orabug: 35265981]
- Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981]
- Enabled signing for aarch64 [Orabug: 35265981]
- Modify meson.build for fwupd-efi [Orabug: 35265981]
- Update SBAT data to include Oracle [Oracle: 33072886]
- Build with the updated Oracle certificate
- Use oraclesecureboot301 as certdir [Orabug: 29881368]
- Use new signing certificate (Alex Burmashev)

[2.1.6-1]
- Rebase to a new version.
- Resolves: RHEL-185615



From el-errata at oss.oracle.com  Wed Aug  5 21:41:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:41:01 -0700
Subject: [El-errata] ELSA-2026-49922 Important: Oracle Linux 8 thunderbird
 security update
Message-ID: <mailman.424.1785966072.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49922

http://linux.oracle.com/errata/ELSA-2026-49922.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
thunderbird-140.13.0-1.0.1.el8_10.x86_64.rpm

aarch64:
thunderbird-140.13.0-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/thunderbird-140.13.0-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-14899
CVE-2026-15718
CVE-2026-15719
CVE-2026-16349
CVE-2026-16350
CVE-2026-16351
CVE-2026-16352
CVE-2026-16353
CVE-2026-16354
CVE-2026-16355
CVE-2026-16356
CVE-2026-16357
CVE-2026-16358
CVE-2026-16359
CVE-2026-16360
CVE-2026-16361
CVE-2026-16362
CVE-2026-16363
CVE-2026-16368
CVE-2026-16369
CVE-2026-16371
CVE-2026-16374
CVE-2026-16375
CVE-2026-16377
CVE-2026-16379
CVE-2026-16381
CVE-2026-16383
CVE-2026-16387
CVE-2026-16390
CVE-2026-16391
CVE-2026-16396
CVE-2026-16405
CVE-2026-16412




Description of changes:

[140.13.0-1.0.1]
- Fix prefs for new nss [Orabug: 37079820]
- Add Oracle prefs file

[140.13.0]
- Add OpenELA debranding

[140.13.0-1]
- Update to 140.13.0 ESR



From el-errata at oss.oracle.com  Wed Aug  5 21:40:57 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:57 -0700
Subject: [El-errata] ELSA-2026-49512 Important: Oracle Linux 8 mingw-glib2
 security update
Message-ID: <mailman.425.1785966072.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49512

http://linux.oracle.com/errata/ELSA-2026-49512.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
mingw32-glib2-2.70.1-9.el8_10.noarch.rpm
mingw32-glib2-static-2.70.1-9.el8_10.noarch.rpm
mingw64-glib2-2.70.1-9.el8_10.noarch.rpm
mingw64-glib2-static-2.70.1-9.el8_10.noarch.rpm



SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/mingw-glib2-2.70.1-9.el8_10.src.rpm

Related CVEs:

CVE-2025-14087
CVE-2026-58010
CVE-2026-58011
CVE-2026-58012
CVE-2026-58013
CVE-2026-58014
CVE-2026-58015
CVE-2026-58016




Description of changes:

[2.70.1-9]
- Fix CVE-2026-58010: off-by-one error in gvs_tuple_is_normal()
  Resolves: RHEL-212164

[2.70.1-8]
- Fix CVE-2026-58011: g_date_time_add_full() range validation
  Resolves: RHEL-212184

[2.70.1-7]
- Fix CVE-2026-58013: memcmp buffer over-read in giochannel
  Resolves: RHEL-212234

[2.70.1-6]
- Fix CVE-2026-58012: buffer overflow in gregex substitutions
  Resolves: RHEL-212200

[2.70.1-5]
- Fix CVE-2025-14087: integer overflow in GVariant parser
  Resolves: RHEL-154707

[2.70.1-4]
- Fix CVE-2026-58016: D-Bus introspection XML node nesting check
  Resolves: RHEL-190617

[2.70.1-3]
- Fix CVE-2026-58014: one-byte heap under-read in mingw-glib2
  Resolves: RHEL-190609

[2.70.1-2]
- Fix CVE-2026-58015: D-Bus cookie context path traversal
  Resolves: RHEL-212246



From el-errata at oss.oracle.com  Wed Aug  5 21:41:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:41:03 -0700
Subject: [El-errata] ELSA-2026-49927 Moderate: Oracle Linux 8 fence-agents
 security update
Message-ID: <mailman.426.1785966072.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49927

http://linux.oracle.com/errata/ELSA-2026-49927.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-all-4.2.1-129.el8_10.28.x86_64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.28.x86_64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.28.x86_64.rpm
fence-agents-lpar-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-mpath-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.28.x86_64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.28.noarch.rpm

aarch64:
fence-agents-all-4.2.1-129.el8_10.28.aarch64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.28.aarch64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.28.aarch64.rpm
fence-agents-mpath-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.28.aarch64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.28.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.28.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/fence-agents-4.2.1-129.el8_10.28.src.rpm

Related CVEs:

CVE-2026-44431




Description of changes:

[4.2.1-129.28]
- bundled urllib3: fix CVE-2026-44431
  Resolves: RHEL-178594



From el-errata at oss.oracle.com  Wed Aug  5 21:40:59 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:40:59 -0700
Subject: [El-errata] ELSA-2026-49520 Important: Oracle Linux 8 ldns security
 update
Message-ID: <mailman.427.1785966078.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49520

http://linux.oracle.com/errata/ELSA-2026-49520.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ldns-1.7.0-23.el8_10.i686.rpm
ldns-1.7.0-23.el8_10.x86_64.rpm
ldns-devel-1.7.0-23.el8_10.i686.rpm
ldns-devel-1.7.0-23.el8_10.x86_64.rpm
ldns-doc-1.7.0-23.el8_10.noarch.rpm
ldns-utils-1.7.0-23.el8_10.x86_64.rpm
perl-ldns-1.7.0-23.el8_10.x86_64.rpm
python3-ldns-1.7.0-23.el8_10.x86_64.rpm

aarch64:
ldns-1.7.0-23.el8_10.aarch64.rpm
ldns-devel-1.7.0-23.el8_10.aarch64.rpm
ldns-doc-1.7.0-23.el8_10.noarch.rpm
ldns-utils-1.7.0-23.el8_10.aarch64.rpm
perl-ldns-1.7.0-23.el8_10.aarch64.rpm
python3-ldns-1.7.0-23.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/ldns-1.7.0-23.el8_10.src.rpm

Related CVEs:

CVE-2026-10846




Description of changes:

[1.7.0-23]
- Fix CVE-2026-10846: validate DNS response source address, transaction
  ID, and query section matching
- Resolves: RHEL-210700



From el-errata at oss.oracle.com  Wed Aug  5 21:41:10 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 05 Aug 2026 14:41:10 -0700
Subject: [El-errata] ELSA-2026-500121 Important: Oracle Linux 7 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.428.1785966083.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500121

http://linux.oracle.com/errata/ELSA-2026-500121.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.358.2.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.el7uek.src.rpm

Related CVEs:

CVE-2026-43038
CVE-2026-43499
CVE-2026-46043
CVE-2026-46331
CVE-2026-64600




Description of changes:

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

[5.4.17-2136.356.1]
- arm64/kvm: Include linux/random.h in trng.c (Siddh Raman Pant) [Orabug: 39327096]
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) [Orabug: 39174662]
- i2c: designware: fix __i2c_dw_disable() in case master is holding SCL low (Yann Sionneau) [Orabug: 39174662]



From el-errata at oss.oracle.com  Thu Aug  6 18:54:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 11:54:58 -0700
Subject: [El-errata] ELBA-2026-500090 Oracle Linux 8
 oracle-database-preinstall-19c bug fix update
Message-ID: <mailman.434.1786042541.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500090

http://linux.oracle.com/errata/ELBA-2026-500090.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
oracle-database-preinstall-19c-1.0-4.el8.x86_64.rpm

aarch64:
oracle-database-preinstall-19c-1.0-4.el8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/oracle-database-preinstall-19c-1.0-4.el8.src.rpm



Description of changes:

[[1.0-3.el9]]
- Use systemctl to enable firstboot service [Orabug: 36607029]
 - Set fs.file-max based on memory size [Orabug: 39620355]
 - Set fs.aio-max-nr based on memory size [Orabug: 39206560]

[[1.0-2.el9]]
- Use primary group of 'oracle' user for setting the vm.hugetlb_shm_group [Orabug: 37791318]
 - Set ip_local_port_range to different polarity [Orabug: 36382466]
 - Add the sysctl parameter vm.hugetlb_shm_group [Orabug: 37567490]
 - Do not set /etc/sysconfig/network parameter [Orabug: 36605619]
 - Use grubby to set boot parameters [Orabug: 36605614]
 - Use systemd service for setting boot params on firstboot [Orabug: 36607029]

[[1.0-1.el9]]
- Initial version



From el-errata at oss.oracle.com  Thu Aug  6 18:55:00 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 11:55:00 -0700
Subject: [El-errata] ELSA-2026-49857 Moderate: Oracle Linux 8 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.435.1786042544.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49857

http://linux.oracle.com/errata/ELSA-2026-49857.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.151.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.151.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.151.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.151.1.el8_10.x86_64.rpm
perf-4.18.0-553.151.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.151.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.151.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.151.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.151.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.151.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.151.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.151.1.el8_10.aarch64.rpm
perf-4.18.0-553.151.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.151.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.151.1.el8_10.src.rpm

Related CVEs:

CVE-2026-52923




Description of changes:

[4.18.0-553.151.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.151.1]
- net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976]
- net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976]
- net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976]
- dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976]
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923}
- KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880]



From el-errata at oss.oracle.com  Thu Aug  6 18:56:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 11:56:03 -0700
Subject: [El-errata] ELBA-2026-45115-1 Oracle Linux 8 kernel bug fix update
Message-ID: <mailman.436.1786042578.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-45115-1

http://linux.oracle.com/errata/ELBA-2026-45115-1.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.147.1.0.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.147.1.0.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
perf-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.147.1.0.1.el8_10.src.rpm



Description of changes:

[4.18.0-553.147.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.147.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.147.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026}
- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]



From el-errata at oss.oracle.com  Thu Aug  6 18:57:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 11:57:18 -0700
Subject: [El-errata] ELBA-2026-500095 Oracle Linux 8 oVirt 4.5
 ovirt-log-collector bug fix update
Message-ID: <mailman.437.1786042653.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500095

http://linux.oracle.com/errata/ELBA-2026-500095.html

The following updated rpms for Oracle Linux 8 oVirt 4.5 have been uploaded to the Unbreakable Linux Network:

x86_64:
ovirt-log-collector-4.5.0-8.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/ovirt-log-collector-4.5.0-8.el8.src.rpm



Description of changes:

[4.5.0-8]
- Fix the skip file position when collecting the report



From el-errata at oss.oracle.com  Thu Aug  6 19:01:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:06 -0700
Subject: [El-errata] ELBA-2026-50177-0 Oracle Linux 9 passt bug fix and
 enhancement update
Message-ID: <mailman.438.1786042879.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50177-0

http://linux.oracle.com/errata/ELBA-2026-50177-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
passt-0^20251210.gd04c480-6.el9_8.x86_64.rpm
passt-selinux-0^20251210.gd04c480-6.el9_8.noarch.rpm

aarch64:
passt-0^20251210.gd04c480-6.el9_8.aarch64.rpm
passt-selinux-0^20251210.gd04c480-6.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/passt-0^20251210.gd04c480-6.el9_8.src.rpm



Description of changes:

[0^20251210.gd04c480-6]
- Resolves: RHEL-216654



From el-errata at oss.oracle.com  Thu Aug  6 19:01:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:01 -0700
Subject: [El-errata] ELBA-2026-50173-0 Oracle Linux 9 egl-wayland bug fix
 and enhancement update
Message-ID: <mailman.439.1786042882.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50173-0

http://linux.oracle.com/errata/ELBA-2026-50173-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
egl-wayland-1.1.13.1-4.el9_8.i686.rpm
egl-wayland-1.1.13.1-4.el9_8.x86_64.rpm
egl-wayland-devel-1.1.13.1-4.el9_8.i686.rpm
egl-wayland-devel-1.1.13.1-4.el9_8.x86_64.rpm

aarch64:
egl-wayland-1.1.13.1-4.el9_8.aarch64.rpm
egl-wayland-devel-1.1.13.1-4.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/egl-wayland-1.1.13.1-4.el9_8.src.rpm



Description of changes:

[1.1.13.1-4]
- Don't install 15_nvidia_gbm.json

[1.1.13.1-3]
- Bump release



From el-errata at oss.oracle.com  Thu Aug  6 19:01:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:03 -0700
Subject: [El-errata] ELBA-2026-50174-0 Oracle Linux 9 NetworkManager bug fix
 and enhancement update
Message-ID: <mailman.440.1786042884.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50174-0

http://linux.oracle.com/errata/ELBA-2026-50174-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
NetworkManager-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-adsl-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-bluetooth-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-cloud-setup-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-config-connectivity-oracle-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-config-server-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-dispatcher-routing-rules-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-initscripts-updown-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-libnm-1.54.3-4.0.1.el9_8.i686.rpm
NetworkManager-libnm-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-libnm-devel-1.54.3-4.0.1.el9_8.i686.rpm
NetworkManager-libnm-devel-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-ovs-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-ppp-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-team-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-tui-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-wifi-1.54.3-4.0.1.el9_8.x86_64.rpm
NetworkManager-wwan-1.54.3-4.0.1.el9_8.x86_64.rpm

aarch64:
NetworkManager-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-adsl-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-bluetooth-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-cloud-setup-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-config-connectivity-oracle-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-config-server-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-dispatcher-routing-rules-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-initscripts-updown-1.54.3-4.0.1.el9_8.noarch.rpm
NetworkManager-libnm-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-libnm-devel-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-ovs-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-ppp-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-team-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-tui-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-wifi-1.54.3-4.0.1.el9_8.aarch64.rpm
NetworkManager-wwan-1.54.3-4.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/NetworkManager-1.54.3-4.0.1.el9_8.src.rpm



Description of changes:

[1.54.3-4.0.1]
- Introduce always-ignore-carrier setting [Orabug: 39663315]
- disable MPTCP handling by default [Orabug: 34801142]
- add connectivity check via Oracle servers [Orabug: 32051972]
- Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910]
- Drop 777 permissions from the NetworkManager-dispatcher drop-in directory [Orabug: 37581907]

[1:1.54.3-4]
- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629)



From el-errata at oss.oracle.com  Thu Aug  6 19:00:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:00:58 -0700
Subject: [El-errata] ELBA-2026-50168-0 Oracle Linux 9 firewalld bug fix and
 enhancement update
Message-ID: <mailman.441.1786042884.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50168-0

http://linux.oracle.com/errata/ELBA-2026-50168-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
firewall-applet-1.3.4-19.0.1.el9_8.noarch.rpm
firewall-config-1.3.4-19.0.1.el9_8.noarch.rpm
firewalld-1.3.4-19.0.1.el9_8.noarch.rpm
firewalld-filesystem-1.3.4-19.0.1.el9_8.noarch.rpm
python3-firewall-1.3.4-19.0.1.el9_8.noarch.rpm

aarch64:
firewall-applet-1.3.4-19.0.1.el9_8.noarch.rpm
firewall-config-1.3.4-19.0.1.el9_8.noarch.rpm
firewalld-1.3.4-19.0.1.el9_8.noarch.rpm
firewalld-filesystem-1.3.4-19.0.1.el9_8.noarch.rpm
python3-firewall-1.3.4-19.0.1.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/firewalld-1.3.4-19.0.1.el9_8.src.rpm



Description of changes:

[1.3.4-19.0.1]
- Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
  [Orabug: 30257573]
- discard empty RH-Satellite-6.xml [Orabug: 30328734]
- Remove capsule file as well, since it references removed config [Orabug: 33513329]

[1.3.4-19]
- fix(zone): forward: support timeout
- fix(policy): support timeouts



From el-errata at oss.oracle.com  Thu Aug  6 19:01:12 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:12 -0700
Subject: [El-errata] ELSA-2026-49870  Low: Oracle Linux 9  kernel security,
 bug fix, and enhancement update
Message-ID: <mailman.442.1786042887.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49870

http://linux.oracle.com/errata/ELSA-2026-49870.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.34.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.34.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.34.1.el9_8.x86_64.rpm
libperf-5.14.0-687.34.1.el9_8.x86_64.rpm
perf-5.14.0-687.34.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.34.1.el9_8.x86_64.rpm
rtla-5.14.0-687.34.1.el9_8.x86_64.rpm
rv-5.14.0-687.34.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.34.1.el9_8.aarch64.rpm
libperf-5.14.0-687.34.1.el9_8.aarch64.rpm
perf-5.14.0-687.34.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.34.1.el9_8.aarch64.rpm
rtla-5.14.0-687.34.1.el9_8.aarch64.rpm
rv-5.14.0-687.34.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.34.1.el9_8.src.rpm

Related CVEs:

CVE-2025-68214




Description of changes:

[5.14.0-687.34.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.34.1]
- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]



From el-errata at oss.oracle.com  Thu Aug  6 19:01:17 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:17 -0700
Subject: [El-errata] ELSA-2026-50817 Important: Oracle Linux 9 gimp security
 update
Message-ID: <mailman.443.1786042892.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50817

http://linux.oracle.com/errata/ELSA-2026-50817.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gimp-3.0.4-4.el9_8.9.x86_64.rpm
gimp-libs-3.0.4-4.el9_8.9.i686.rpm
gimp-libs-3.0.4-4.el9_8.9.x86_64.rpm

aarch64:
gimp-3.0.4-4.el9_8.9.aarch64.rpm
gimp-libs-3.0.4-4.el9_8.9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/gimp-3.0.4-4.el9_8.9.src.rpm

Related CVEs:

CVE-2026-42169
CVE-2026-66758
CVE-2026-66759




Description of changes:

[2:3.0.4-4.9]
- fix CVE-2026-42169

[2:3.0.4-4.8]
- fix CVE-2026-66758
- fix CVE-2026-66759



From el-errata at oss.oracle.com  Thu Aug  6 19:01:09 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:01:09 -0700
Subject: [El-errata] ELSA-2026-22714 Important: Oracle Linux 9
 osbuild-composer security update
Message-ID: <mailman.444.1786042895.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22714

http://linux.oracle.com/errata/ELSA-2026-22714.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-core-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.x86_64.rpm

aarch64:
osbuild-composer-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-core-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/osbuild-composer-175-1.0.1.el9_8.src.rpm

Related CVEs:

CVE-2025-61726
CVE-2025-61728
CVE-2025-68121
CVE-2026-4427
CVE-2026-25679
CVE-2026-27137
CVE-2026-32282
CVE-2026-32283
CVE-2026-32286
CVE-2026-33186
CVE-2026-34986




Description of changes:

[175-1.0.1]
- Track github upstream



From el-errata at oss.oracle.com  Thu Aug  6 19:04:12 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:12 -0700
Subject: [El-errata] ELBA-2026-50158-0 Oracle Linux 10 httpd bug fix and
 enhancement update
Message-ID: <mailman.445.1786043066.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50158-0

http://linux.oracle.com/errata/ELBA-2026-50158-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
httpd-2.4.63-13.0.1.el10_2.5.x86_64.rpm
httpd-core-2.4.63-13.0.1.el10_2.5.x86_64.rpm
httpd-devel-2.4.63-13.0.1.el10_2.5.x86_64.rpm
httpd-filesystem-2.4.63-13.0.1.el10_2.5.noarch.rpm
httpd-manual-2.4.63-13.0.1.el10_2.5.noarch.rpm
httpd-tools-2.4.63-13.0.1.el10_2.5.x86_64.rpm
mod_ldap-2.4.63-13.0.1.el10_2.5.x86_64.rpm
mod_lua-2.4.63-13.0.1.el10_2.5.x86_64.rpm
mod_proxy_html-2.4.63-13.0.1.el10_2.5.x86_64.rpm
mod_session-2.4.63-13.0.1.el10_2.5.x86_64.rpm
mod_ssl-2.4.63-13.0.1.el10_2.5.x86_64.rpm

aarch64:
httpd-2.4.63-13.0.1.el10_2.5.aarch64.rpm
httpd-core-2.4.63-13.0.1.el10_2.5.aarch64.rpm
httpd-devel-2.4.63-13.0.1.el10_2.5.aarch64.rpm
httpd-filesystem-2.4.63-13.0.1.el10_2.5.noarch.rpm
httpd-manual-2.4.63-13.0.1.el10_2.5.noarch.rpm
httpd-tools-2.4.63-13.0.1.el10_2.5.aarch64.rpm
mod_ldap-2.4.63-13.0.1.el10_2.5.aarch64.rpm
mod_lua-2.4.63-13.0.1.el10_2.5.aarch64.rpm
mod_proxy_html-2.4.63-13.0.1.el10_2.5.aarch64.rpm
mod_session-2.4.63-13.0.1.el10_2.5.aarch64.rpm
mod_ssl-2.4.63-13.0.1.el10_2.5.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/httpd-2.4.63-13.0.1.el10_2.5.src.rpm



Description of changes:

[2.4.63-13.0.1.el10_2.5]
- Replace index.html with Oracle's index page oracle_index.html.

[2.4.63-13.5]
- Resolves: RHEL-192750 - mod_proxy_html regression in CVE-2026-34355 fix

[2.4.63-13.4]
- Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via malicious backend servers (CVE-2026-34356)
- Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer Overflow
  via untrusted content in mod_xml2enc (CVE-2026-42536)
- Resolves: RHEL-186182 - httpd: Apache HTTP Server: Buffer overflow in
  mod_proxy_html allows security bypass (CVE-2026-34355)
- Resolves: RHEL-186158 - httpd: Apache HTTP Server: Buffer Over-read via
  outbound OCSP requests to attacker-controlled server (CVE-2026-44185)
- Resolves: RHEL-184305 - httpd: Apache HTTP Server: Denial of Service via
  crafted regular expressions (CVE-2026-44631)
- Resolves : RHEL-182581 - httpd: incomplete fix for
  CVE-2023-38709 (CVE-2024-42516)
- Resolves: RHEL-175621 - httpd: NULL pointer dereference via specially crafted
  request (CVE-2026-29169)
- Also addresses CVE-2026-44119, CVE-2026-44186, CVE-2026-42535,
  CVE-2026-24072, CVE-2026-33006, CVE-2026-43951

[2.4.63-13.1]
- Resolves: RHEL-173549 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary
  code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175065 - httpd: NULL pointer dereference can cause a child
  process crash (CVE-2026-33007)
- Resolves: RHEL-175095 - httpd: off-by-one out-of-bounds reads in AJP getter
  functions (CVE-2026-33857)
- Resolves: RHEL-175039 - httpd: heap-based buffer over-read due to missing
  null-termination check (CVE-2026-34032)
- Resolves: RHEL-175050 - httpd: heap-based buffer over-read and memory
  disclosure in ajp_parse_data() (CVE-2026-34059)



From el-errata at oss.oracle.com  Thu Aug  6 19:04:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:16 -0700
Subject: [El-errata] ELBA-2026-50163-0 Oracle Linux 10 libguestfs bug fix
 and enhancement update
Message-ID: <mailman.448.1786043071.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50163-0

http://linux.oracle.com/errata/ELBA-2026-50163-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libguestfs-1.58.1-8.0.1.el10_2.x86_64.rpm
libguestfs-appliance-1.58.1-8.0.1.el10_2.x86_64.rpm
libguestfs-bash-completion-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-devel-1.58.1-8.0.1.el10_2.x86_64.rpm
libguestfs-inspect-icons-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-man-pages-ja-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-man-pages-uk-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-rescue-1.58.1-8.0.1.el10_2.x86_64.rpm
libguestfs-rsync-1.58.1-8.0.1.el10_2.x86_64.rpm
libguestfs-xfs-1.58.1-8.0.1.el10_2.x86_64.rpm
ocaml-libguestfs-1.58.1-8.0.1.el10_2.x86_64.rpm
ocaml-libguestfs-devel-1.58.1-8.0.1.el10_2.x86_64.rpm
perl-Sys-Guestfs-1.58.1-8.0.1.el10_2.x86_64.rpm
python3-libguestfs-1.58.1-8.0.1.el10_2.x86_64.rpm

aarch64:
libguestfs-1.58.1-8.0.1.el10_2.aarch64.rpm
libguestfs-appliance-1.58.1-8.0.1.el10_2.aarch64.rpm
libguestfs-bash-completion-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-devel-1.58.1-8.0.1.el10_2.aarch64.rpm
libguestfs-inspect-icons-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-man-pages-ja-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-man-pages-uk-1.58.1-8.0.1.el10_2.noarch.rpm
libguestfs-rescue-1.58.1-8.0.1.el10_2.aarch64.rpm
libguestfs-rsync-1.58.1-8.0.1.el10_2.aarch64.rpm
libguestfs-xfs-1.58.1-8.0.1.el10_2.aarch64.rpm
ocaml-libguestfs-1.58.1-8.0.1.el10_2.aarch64.rpm
ocaml-libguestfs-devel-1.58.1-8.0.1.el10_2.aarch64.rpm
perl-Sys-Guestfs-1.58.1-8.0.1.el10_2.aarch64.rpm
python3-libguestfs-1.58.1-8.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/libguestfs-1.58.1-8.0.1.el10_2.src.rpm



Description of changes:

[1.58.1-8.0.1]
- Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448]
- Replace upstream references from a description tag
- Fix build on Oracle Linux [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.58.1-8]
- Ignore RHEL 7 AGFL inconsistency in xfs_repair
  resolves: RHEL-192920
- Use bind mount to overwrite /etc/resolv.conf
  resolves: RHEL-192946



From el-errata at oss.oracle.com  Thu Aug  6 19:04:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:18 -0700
Subject: [El-errata] ELBA-2026-50169-0 Oracle Linux 10 NetworkManager bug
 fix and enhancement update
Message-ID: <mailman.449.1786043074.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50169-0

http://linux.oracle.com/errata/ELBA-2026-50169-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
NetworkManager-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-adsl-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-bluetooth-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-cloud-setup-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-config-connectivity-oracle-1.56.0-2.0.1.el10_2.noarch.rpm
NetworkManager-config-server-1.56.0-2.0.1.el10_2.noarch.rpm
NetworkManager-libnm-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-libnm-devel-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-ovs-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-ppp-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-tui-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-wifi-1.56.0-2.0.1.el10_2.x86_64.rpm
NetworkManager-wwan-1.56.0-2.0.1.el10_2.x86_64.rpm

aarch64:
NetworkManager-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-adsl-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-bluetooth-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-cloud-setup-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-config-connectivity-oracle-1.56.0-2.0.1.el10_2.noarch.rpm
NetworkManager-config-server-1.56.0-2.0.1.el10_2.noarch.rpm
NetworkManager-libnm-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-libnm-devel-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-ovs-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-ppp-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-tui-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-wifi-1.56.0-2.0.1.el10_2.aarch64.rpm
NetworkManager-wwan-1.56.0-2.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/NetworkManager-1.56.0-2.0.1.el10_2.src.rpm



Description of changes:

[1.56.0-2.0.1]
- Add connectivity check via Oracle servers [Orabug: 32051972]

[1:1.56.0-2]
- Fix arp_missed_max error on 802.3ad bond reapply (RHEL-211105)



From el-errata at oss.oracle.com  Thu Aug  6 19:04:23 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:23 -0700
Subject: [El-errata] ELSA-2026-50747 Important: Oracle Linux 10 freerdp
 security update
Message-ID: <mailman.450.1786043074.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50747

http://linux.oracle.com/errata/ELSA-2026-50747.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
freerdp-3.10.3-12.el10_2.7.x86_64.rpm
freerdp-devel-3.10.3-12.el10_2.7.x86_64.rpm
freerdp-libs-3.10.3-12.el10_2.7.x86_64.rpm
freerdp-server-3.10.3-12.el10_2.7.x86_64.rpm
libwinpr-3.10.3-12.el10_2.7.x86_64.rpm
libwinpr-devel-3.10.3-12.el10_2.7.x86_64.rpm

aarch64:
freerdp-3.10.3-12.el10_2.7.aarch64.rpm
freerdp-devel-3.10.3-12.el10_2.7.aarch64.rpm
freerdp-libs-3.10.3-12.el10_2.7.aarch64.rpm
freerdp-server-3.10.3-12.el10_2.7.aarch64.rpm
libwinpr-3.10.3-12.el10_2.7.aarch64.rpm
libwinpr-devel-3.10.3-12.el10_2.7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/freerdp-3.10.3-12.el10_2.7.src.rpm

Related CVEs:

CVE-2026-55827




Description of changes:

[2:3.10.3-12.7]
- Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827)
- Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827)
  Resolves: RHEL-194327



From el-errata at oss.oracle.com  Thu Aug  6 19:04:20 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:20 -0700
Subject: [El-errata] ELBA-2026-50178-0 Oracle Linux 10 passt bug fix and
 enhancement update
Message-ID: <mailman.451.1786043074.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50178-0

http://linux.oracle.com/errata/ELBA-2026-50178-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
passt-0^20251210.gd04c480-6.el10_2.x86_64.rpm
passt-selinux-0^20251210.gd04c480-6.el10_2.noarch.rpm

aarch64:
passt-0^20251210.gd04c480-6.el10_2.aarch64.rpm
passt-selinux-0^20251210.gd04c480-6.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/passt-0^20251210.gd04c480-6.el10_2.src.rpm



Description of changes:

[0^20251210.gd04c480-6]
- Resolves: RHEL-216655



From el-errata at oss.oracle.com  Thu Aug  6 19:04:14 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:14 -0700
Subject: [El-errata] ELBA-2026-50161-0 Oracle Linux 10 virt-v2v bug fix and
 enhancement update
Message-ID: <mailman.452.1786043075.18.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50161-0

http://linux.oracle.com/errata/ELBA-2026-50161-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
virt-v2v-2.10.0-18.0.1.el10_2.x86_64.rpm
virt-v2v-bash-completion-2.10.0-18.0.1.el10_2.noarch.rpm
virt-v2v-man-pages-ja-2.10.0-18.0.1.el10_2.noarch.rpm
virt-v2v-man-pages-uk-2.10.0-18.0.1.el10_2.noarch.rpm



SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/virt-v2v-2.10.0-18.0.1.el10_2.src.rpm



Description of changes:

[2.10.0-18.0.1]
- Replaced bugzilla.oracle.com references [Orabug: 34202300]
- replaced upstream references [Orabug:34089586]

[1:2.10.0-18]
- Add <disk> <boot-order>#</boot-order> to XML output
  resolves: RHEL-193138
- Add new --collect option to collect pre-conversion information
  resolves: RHEL-192947
- Retry qemu-ga installer on failure
  resolves: RHEL-193139
- Fix conversions of encrypted Ubuntu guests (second attempt)
  resolves: RHEL-192921
- Skip fsck after conversion for RHEL 7
  resolves: RHEL-192948



From el-errata at oss.oracle.com  Thu Aug  6 19:04:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 12:04:21 -0700
Subject: [El-errata] ELSA-2026-27288 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.453.1786043075.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-27288

http://linux.oracle.com/errata/ELSA-2026-27288.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2026-31474
CVE-2026-31641
CVE-2026-31669
CVE-2026-31772
CVE-2026-31786
CVE-2026-31787
CVE-2026-43056
CVE-2026-43260
CVE-2026-43330
CVE-2026-46056
CVE-2026-46125
CVE-2026-46152
CVE-2026-46166
CVE-2026-46173
CVE-2026-46331




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Fri Aug  7 05:51:02 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:51:02 -0700
Subject: [El-errata] ELSA-2026-500136 Important: Oracle Linux 7 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.456.1786081876.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500136

http://linux.oracle.com/errata/ELSA-2026-500136.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.0.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.358.2.0.1.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.0.1.el7uek.src.rpm

Related CVEs:

CVE-2026-68480




Description of changes:

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}



From el-errata at oss.oracle.com  Fri Aug  7 05:51:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:51:49 -0700
Subject: [El-errata] ELSA-2026-500136 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.459.1786081923.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500136

http://linux.oracle.com/errata/ELSA-2026-500136.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.358.2.0.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.358.2.0.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.0.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.358.2.0.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.358.2.0.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.0.1.el8uek.src.rpm

Related CVEs:

CVE-2026-68480




Description of changes:

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}



From el-errata at oss.oracle.com  Fri Aug  7 05:52:50 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:52:50 -0700
Subject: [El-errata] ELSA-2026-500136 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.460.1786081984.18.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500136

http://linux.oracle.com/errata/ELSA-2026-500136.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.0.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.0.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.0.1.el8uek.src.rpm

Related CVEs:

CVE-2026-68480




Description of changes:

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]



From el-errata at oss.oracle.com  Fri Aug  7 05:54:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:54:01 -0700
Subject: [El-errata] ELSA-2026-500137 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.5.1786082058.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500137

http://linux.oracle.com/errata/ELSA-2026-500137.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.5.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.5.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.5.el8uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.4.5]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39832946]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832946]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39832946]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39832946]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39832946]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39832946]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39784615]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39784615]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39784615]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39784615]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819205]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819143]  {CVE-2026-64531}



From el-errata at oss.oracle.com  Fri Aug  7 05:55:31 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:55:31 -0700
Subject: [El-errata] ELSA-2026-500137 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.6.1786082145.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500137

http://linux.oracle.com/errata/ELSA-2026-500137.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-322.203.3.4.5.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.5.el9uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.4.5]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39832946]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832946]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39832946]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39832946]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39832946]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39832946]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39784615]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39784615]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39784615]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39784615]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819205]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819143]  {CVE-2026-64531}

[5.15.0-322.203.3.4]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39711605]

[5.15.0-322.203.3.3]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39706512]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39706512]  {CVE-2026-43499}

[5.15.0-322.203.3.2]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673886]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673886]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39668793]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39668793]  {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39668793]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39668793]

[5.15.0-322.203.3.1]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39648952]  {CVE-2026-52943}

[5.15.0-322.203.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548689]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548689]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39548689]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548689]
- net/rds: Make "rds_send_xmit" fairer (Gerd Rausch)  [Orabug: 39532945]
- net/rds: Schedule rds_send_worker if there's more work to do (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: Change return code from rds_send_xmit() when lock is taken" (Gerd Rausch)  [Orabug: 39532945]
- Revert "Reapply "rds: ib: Make sure receives are posted before connection is up"" (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: ib: Make sure a QP in INIT state is transitioned to ERR" (Gerd Rausch)  [Orabug: 39532945]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526881]  {CVE-2022-50073}
- mmc: dwcmshc_bf3_hw_reset: Log eMMC reset calls (Satyansh Shukla)  [Orabug: 39333650]
- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger)  [Orabug: 39522954]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262374]  {CVE-2026-31657}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39179363]

[5.15.0-322.203.2]
- LTS version: v5.15.203 (Vijayendra Suman)
- io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe)
- ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
- ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- i2c: cp2615: fix serial string NULL-deref at probe (Johan Hovold)
- i2c: cp2615: replace deprecated strncpy with strscpy (Justin Stitt)
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Namjae Jeon)
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
- tracing: Fix potential deadlock in cpu hotplug with osnoise (Luo Haiyang)
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Nikunj A Dadhania)
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (Jinjiang Tu)
- scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik)
- net: macb: Move devm_{free,request}_irq() out of spin lock area (Kevin Hao)
- dmaengine: sh: rz-dmac: Protect the driver specific lists (Claudiu Beznea)
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Claudiu Beznea)
- xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki)
- ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen)
- ext4: fix the might_sleep() warnings in kvfree() (Zqiang)
- ext4: publish jinode after initialization (Li Chen)
- usb: gadget: uvc: fix NULL pointer dereference during unbind race (Jimmy Hu)
- usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop (Kuen-Han Tsai)
- usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann)
- net: rfkill: prevent unlimited numbers of rfkill events from being created (Greg Kroah-Hartman)
- seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer)
- Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts (NGI0))
- xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao)
- netlink: add nla be16/32 types to minlen array (Florian Westphal)
- rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) (David Howells)
- rxrpc: fix reference count leak in rxrpc_server_keyring() (Luxiao Xu)
- net: stmmac: fix integer underflow in chain mode (Tyllis Xu)
- net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure (Pengpeng Hou)
- mmc: vub300: fix NULL-deref on disconnect (Johan Hovold)
- drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka)
- net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (David Carlier)
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)
- batman-adv: reject oversized global TT response buffers (Ruide Cao)
- nfc: pn533: allocate rx skb before consuming bytes (Pengpeng Hou)
- arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges (Shawn Guo)
- arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity (Shawn Guo)
- wifi: brcmsmac: Fix dma_free_coherent() size (Thomas Fourier)
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko)
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do)
- apparmor: fix race between freeing data and fs accessing it (John Johansen)
- apparmor: fix race on rawdata dereference (John Johansen)
- apparmor: fix differential encoding verification (John Johansen)
- apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
- apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen)
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer)
- apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer)
- apparmor: fix: limit the number of levels of policy namespaces (John Johansen)
- apparmor: replace recursive profile removal with iterative approach (Massimiliano Pellizzer)
- apparmor: fix memory leak in verify_header (Massimiliano Pellizzer)
- apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer)
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (Nuno Sa)
- gpiolib: cdev: fix uninitialised kfifo (Kent Gibson)
- media: uvcvideo: Use heuristic to find stream entity (Ricardo Ribalda)
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)
- Input: uinput - take event lock when submitting FF request "event" (Dmitry Torokhov)
- Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov)
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)
- xfrm_user: fix info leak in build_report() (Greg Kroah-Hartman)
- wifi: rt2x00usb: fix devres lifetime (Johan Hovold)
- lib/crypto: chacha: Zeroize permuted_state before it leaves scope (Eric Biggers)
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov)
- io_uring/tctx: work around xa_store() allocation error issue (Jens Axboe)
- usb: gadget: f_uac1_legacy: validate control request size (Taegu Ha)
- usb: gadget: f_rndis: Protect RNDIS options with mutex (Kuen-Han Tsai)
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free (Kuen-Han Tsai)
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser (Navaneeth K)
- smb: client: Fix refcount leak for cifs_sb_tlink (Shuhao Fu)
- net: mctp: Don't access ifa_index when missing (Matt Johnston)
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Quanmin Yan)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix error message (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer (Sebastian Urban)
- USB: dummy-hcd: Fix interrupt synchronization error (Alan Stern)
- USB: dummy-hcd: Fix locking/synchronization error (Alan Stern)
- thunderbolt: Fix property read in nhi_wake_supported() (Konrad Dybcio)
- net: ftgmac100: fix ring allocation unwind on open failure (Yufan Chen)
- vxlan: validate ND option lengths in vxlan_na_create (Yang Yang)
- netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu)
- comedi: me4000: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: me_daq: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach (Ian Abbott)
- comedi: Reinit dev->spinlock between attachments to low-level drivers (Ian Abbott)
- comedi: dt2815: add hardware detection to prevent crash (Deepanshu Kartikey)
- cdc-acm: new quirk for EPSON HMD (Oliver Neukum)
- bridge: br_nd_send: validate ND option lengths (Yang Yang)
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
- usb: cdns3: gadget: fix state inconsistency on gadget init failure (Yongchao Wu)
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Yongchao Wu)
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Juno Choi)
- usb: ehci-brcm: fix sleep during atomic (Justin Chen)
- usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira)
- usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li)
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Miao Li)
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (Ethan Tidmore)
- iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore)
- iio: gyro: mpu3050: Fix irq resource leak (Ethan Tidmore)
- iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore)
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only (Francesco Lavra)
- iio: light: vcnl4035: fix scan buffer on big-endian (David Lechner)
- iio: dac: ad5770r: fix error return in ad5770r_read_raw() (Antoniu Miclaus)
- Input: xpad - add support for Razer Wolverine V3 Pro (Zoltan Illes)
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
- Input: synaptics-rmi4 - fix a locking bug in an error path (Bart Van Assche)
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (JP Hein)
- USB: serial: option: add support for Rolling Wireless RW135R-GL (Wanquan Zhong)
- USB: serial: io_edgeport: add support for Blackbox IC135A (Frej Drejhammar)
- drm/ast: dp501: Fix initialization of SCU2C (Thomas Zimmermann)
- hwmon: (occ) Fix division by zero in occ_show_power_1() (Sanman Pradhan)
- MIPS: Fix the GCC version check for __multi3' workaround (Maciej W. Rozycki)
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (Oleh Konko)
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko)
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai)
- ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel)
- USB: serial: option: add MeiG Smart SRM825WN (Ernestas Kulik)
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru)
- drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman)
- riscv: kgdb: fix several debug register assignment bugs (Paul Walmsley)
- hwmon: (occ) Fix missing newline in occ_show_extended() (Sanman Pradhan)
- hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() (Sanman Pradhan)
- hwmon: (pxe1610) Check return value of page-select write in probe (Sanman Pradhan)
- bpf: reject direct access to nullable PTR_TO_BUF pointers (Qi Tang)
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet)
- net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/x25: Fix overflow when accumulating packets (Martin Schiller)
- net/x25: Fix potential double free of skb (Martin Schiller)
- net/mlx5: Avoid "No data available" when FW version queries fail (Saeed Mahameed)
- net: macb: properly unregister fixed rate clocks (Fedor Pchelkin)
- net: macb: fix clk handling on PCI glue driver removal (Fedor Pchelkin)
- Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong)
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Pablo Neira Ayuso)
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso)
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Qi Tang)
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang)
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal)
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal)
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal)
- netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso)
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang)
- bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov)
- net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec (Suraj Gupta)
- NFC: pn533: bound the UART receive buffer (Pengpeng Hou)
- net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (Yochai Eisenrich)
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Paolo Abeni)
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (Xiang Mei)
- bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang)
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)
- tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich)
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen)
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei)
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
- btrfs: reject root items with drop_progress and zero drop_level (ZhengYuan Huang)
- HID: multitouch: Check to ensure report responses match the request (Lee Jones)
- objtool: Fix Clang jump table detection (Josh Poimboeuf)
- btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
- atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey)
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Beno?t Sevens)
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso)
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
- dmaengine: xilinx_dma: Program interrupt delay timeout (Radhey Shyam Pandey)
- dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
- btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
- btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
- phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
- ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'o)
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li)
- ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike)
- ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin)
- ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
- ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey)
- xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki)
- jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
- scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
- alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
- erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu)
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin)
- media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam)
- cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
- can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi)
- s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
- s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
- ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
- sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
- hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
- ACPI: EC: Fix ECDT probe ordering issues (Hans de Goede)
- ACPI: EC: Fix EC address space handler unregistration (Hans de Goede)
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (Hans de Goede)
- ACPICA: include/acpi/acpixf.h: Fix indentation (Hans de Goede)
- ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport (Microsoft))
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
- RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
- RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal)
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
- RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
- regmap: Synchronize cache for the page selector (Andy Shevchenko)
- net: macb: use the current queue number for stats (Paolo Valerio)
- netfilter: ctnetlink: use netlink policy range checks (David Carlier)
- netlink: allow be16 and be32 types in all uint policy checks (Florian Westphal)
- netlink: introduce bigendian integer types (Florian Westphal)
- netfilter: nft_payload: reject out-of-range attributes via policy (Florian Westphal)
- netlink: introduce NLA_POLICY_MAX_BE (Florian Westphal)
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi)
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei)
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi)
- Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou)
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim)
- dma-mapping: add missing inline for dma_free_attrs (Miguel Ojeda)
- net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)
- platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
- net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
- openvswitch: validate MPLS set/set_masked payload length (Yang Yang)
- nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
- ionic: fix persistent MAC address override on PF (Mohammad Heib)
- pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike)
- Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal)
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim)
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim)
- can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
- af_key: validate families in pfkey_send_migrate() (Eric Dumazet)
- esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca)
- xfrm: Fix the usage of skb->sk (Steffen Klassert)
- xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
- dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
- module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai)
- HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
- net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (G?nther Noack)
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
- nvme-pci: ensure we're polling a polled queue (Keith Busch)
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
- nvme-pci: cap queue creation to used queues (Keith Busch)
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
- HID: asus: avoid memory leak in asus_report_fixup() (G?nther Noack)
- bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
- sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
- xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
- xen/privcmd: restrict usage in unprivileged domU (Juergen Gross)
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal)
- netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
- lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
- drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte)
- ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
- mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
- mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu)
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe JAILLET)
- hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi)
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
- net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz)
- nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi)
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei)
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei)
- net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
- wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei)
- igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
- net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
- net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
- net/smc: Only save the original clcsock callback functions (Wen Gu)
- PM: runtime: Fix a race condition related to device removal (Bart Van Assche)
- sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
- net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy)
- net: bcmgenet: increase WoL poll timeout (Justin Chen)
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu)
- netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
- netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso)
- netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso)
- netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko)
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu)
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes M?ller)
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim)
- netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal)
- net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
- Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz)
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
- firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
- of: Add cleanup.h based auto release via __free(device_node) markings (Jonathan Cameron)
- wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima)
- soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
- btrfs: tree-checker: fix misleading root drop_level error message (ZhengYuan Huang)
- batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Yang Yang)
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Ma?ra Canal)
- mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts (NGI0))
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
- net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn)
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum)
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe)
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov)
- wifi: cfg80211: move scan done work to wiphy work (Johannes Berg)
- wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges)
- ext4: always allocate blocks only from groups inode can use (Jan Kara)
- ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi)
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
- drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
- drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (Jeongjun Park)
- net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
- drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
- serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski ICEYE)
- serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo J?rvinen)
- serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel)
- serial: 8250_pci: add support for the AX99100 (Martin Roukala (n? Peres))
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
- mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain)
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
- mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
- mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes M?ller)
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes M?ller)
- net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin)
- NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
- nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny)
- sunrpc: fix cache_request leak in cache_release (Jeff Layton)
- driver: iio: add missing checks on iio_info's callback access (Julien Stephan)
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe)
- l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
- bpf: Forget ranges when refining tnum after JSET (Paul Chaignon)
- i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
- iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
- iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus)
- iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
- iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
- iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
- iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
- iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
- btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
- lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
- lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
- x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji)
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
- xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong)
- tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
- drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu)
- net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
- net: ncsi: fix skb leak in error paths (Jian Zhang)
- parisc: Fix initial page table creation for boot (Helge Deller)
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie)
- parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
- batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann)
- ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
- net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
- media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver)
- staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman)
- staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak)
- irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
- device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
- time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
- time: add kernel-doc in time.c (Randy Dunlap)
- ceph: fix i_nlink underrun during async unlink (Max Kellermann)
- libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
- libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer)
- libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov)
- libceph: reject preamble if control segment is empty (Ilya Dryomov)
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer)
- tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao)
- mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng)
- mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
- mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
- usb: image: mdc800: kill download URB on timeout (Ziyi Guo)
- usb: mdc800: handle signal and read racing (Oliver Neukum)
- usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu)
- usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum)
- USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern)
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern)
- USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
- usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
- usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
- usb: yurex: fix race in probe (Oliver Neukum)
- usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan)
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
- net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
- net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
- cgroup: fix race between task migration and iteration (Qingye Zhao)
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
- ASoC: detect empty DMI strings (Casey Connolly)
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
- e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath)
- i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim)
- regulator: pca9450: Correct interrupt type (Peng Fan)
- regulator: pca9450: Make IRQ optional (Frieder Schrempf)
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan)
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim)
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim)
- netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull)
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu)
- can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
- serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
- ASoC: soc-core: flush delayed work before removing DAIs and widgets (matteo.cotifava)
- ASoC: core: Do not call link_exit() on uninitialized rtd objects (Amadeusz S?awi?ski)
- ASoC: core: Exit all links before removing their components (Cezary Rojewski)
- ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() (Kuninori Morimoto)
- ASoC: soc-core: drop delayed_work_pending() check before flush (matteo.cotifava)
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi)
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman)
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
- xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger)
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (J. Neusch?fer)
- remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
- powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy (CS GROUP))
- ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
- unshare: fix unshare_fs() handling (Al Viro)
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar)
- ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka)
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen)
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera)
- net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
- nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
- nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
- net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den)
- amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski)
- xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
- indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
- wifi: wlcore: Fix a locking bug (Bart Van Assche)
- can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel)
- can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp)
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen)
- dpaa2-switch: do not clear any interrupts automatically (Ioana Ciornei)
- net: dpaa2-switch: serialize changes to priv->mac with a mutex (Vladimir Oltean)
- net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() (Vladimir Oltean)
- net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call (Vladimir Oltean)
- net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() (Vladimir Oltean)
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
- platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg)
- Squashfs: check metadata block offset is within range (Phillip Lougher)
- net/sched: ets: fix divide by zero in the offload path (Davide Caratti)
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe)
- wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian)
- wifi: radiotap: reject radiotap with unknown bits (Johannes Berg)
- ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo)
- platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum)
- x86/efi: defer freeing of boot services memory (Mike Rapoport (Microsoft))
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman)
- can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
- can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman)
- net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman)
- nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
- media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe)
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin)
- fbcon: move more common code into fb_open() (Daniel Vetter)
- fbcon: Extract fbcon_open/release helpers (Daniel Vetter)
- fbcon: Use delayed work for cursor (Daniel Vetter)
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Namjae Jeon)
- ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
- usb: cdns3: fix role switching during resume (Thomas Richard (TI))
- usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Th?o Lebrun)
- usb: cdns3: remove redundant if branch (Hongyu Xie)
- clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: omap-usb-host: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: switch away from using chained IRQ handlers (Dmitry Baryshkov)
- drm/tegra: dsi: fix device leak on probe (Johan Hovold)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: libata: remove pointless VPRINTK() calls (Hannes Reinecke)
- ata: libata-scsi: drop DPRINTK calls for cdb translation (Hannes Reinecke)
- scsi: ata: Call scsi_done() directly (Bart Van Assche)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Wentao Liang)
- ARM: OMAP2+: add missing of_node_put before break and return (Wang Qing)
- memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
- memory: mtk-smi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju)
- btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
- ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
- ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
- scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
- scsi: ufs: core: Always initialize the UIC done completion (Bart Van Assche)
- scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
- ARM: clean up the memset64() C wrapper (Thomas Wei?schuh)

[5.15.0-322.202.1]
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446044]
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446044]
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)  [Orabug: 39390378]
- net: sched: act_api: implement generic walker and search for tc action (Zhengchao Shao)  [Orabug: 39342047]
- btrfs: reserve extra space for the free space tree (Josef Bacik)  [Orabug: 39281379]
- btrfs: include the free space tree in the global rsv minimum calculation (Josef Bacik)  [Orabug: 39281379]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]



From el-errata at oss.oracle.com  Fri Aug  7 05:56:20 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:56:20 -0700
Subject: [El-errata] ELSA-2026-500137 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.9.1786082195.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500137

http://linux.oracle.com/errata/ELSA-2026-500137.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.5.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.5.el9uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.4.5]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39832946]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832946]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39832946]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39832946]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39832946]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39832946]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39784615]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39784615]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39784615]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39784615]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819205]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819143]  {CVE-2026-64531}



From el-errata at oss.oracle.com  Fri Aug  7 05:57:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:57:33 -0700
Subject: [El-errata] ELSA-2026-500135 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.10.1786082267.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500135

http://linux.oracle.com/errata/ELSA-2026-500135.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-204.92.4.4.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-204.92.4.4.3.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-doc-6.12.0-204.92.4.4.3.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-204.92.4.4.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-204.92.4.4.3.el9uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[6.12.0-204.92.4.4.3]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832878]  {CVE-2026-64561}
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832867]  {CVE-2026-68480}

[6.12.0-204.92.4.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819149]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819142]  {CVE-2026-64531}



From el-errata at oss.oracle.com  Fri Aug  7 05:58:24 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:58:24 -0700
Subject: [El-errata] ELSA-2026-51075 Important: Oracle Linux 10 gpsd
 security update
Message-ID: <mailman.11.1786082317.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51075

http://linux.oracle.com/errata/ELSA-2026-51075.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gpsd-3.26.1-3.0.1.el10_2.1.x86_64.rpm
gpsd-clients-3.26.1-3.0.1.el10_2.1.x86_64.rpm
python3-gpsd-3.26.1-3.0.1.el10_2.1.x86_64.rpm

aarch64:
gpsd-3.26.1-3.0.1.el10_2.1.aarch64.rpm
gpsd-clients-3.26.1-3.0.1.el10_2.1.aarch64.rpm
python3-gpsd-3.26.1-3.0.1.el10_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gpsd-3.26.1-3.0.1.el10_2.1.src.rpm

Related CVEs:

CVE-2026-58459




Description of changes:

[3.26.1-3.0.1.el10_2.1]
- Replace upstream reference [Orabug: 37033219]

[1:3.26.1-3.el10_2.1]
- fix command injection in gpsprof (CVE-2026-58459)



From el-errata at oss.oracle.com  Fri Aug  7 05:59:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 06 Aug 2026 22:59:18 -0700
Subject: [El-errata] ELSA-2026-500135 Important: Unbreakable Enterprise
 kernel security update
Message-ID: <mailman.12.1786082373.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500135

http://linux.oracle.com/errata/ELSA-2026-500135.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-204.92.4.4.3.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.4.3.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-204.92.4.4.3.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-204.92.4.4.3.el10uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-204.92.4.4.3.el10uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[6.12.0-204.92.4.4.3]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832878]  {CVE-2026-64561}
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832867]  {CVE-2026-68480}

[6.12.0-204.92.4.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819149]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819142]  {CVE-2026-64531}



From el-errata at oss.oracle.com  Fri Aug  7 09:11:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 7 Aug 2026 09:11:34 +0000
Subject: [El-errata] New Ksplice updates for UEKR6 5.4.17 on OL7 and OL8
 (ELSA-2026-500136)
Message-ID: <mailman.13.1786094053.31.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-500136 can now be patched using Ksplice
CVEs: CVE-2026-68480

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-500136.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-500136.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR6 5.4.17 on
OL7 and OL8 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2026-68480: Speculative data leak in x86.

Orabug: 39784513


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.




From el-errata at oss.oracle.com  Fri Aug  7 16:36:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:36:32 -0700
Subject: [El-errata] ELSA-2026-34372 Important: Oracle Linux 7 gnutls
 security update
Message-ID: <mailman.14.1786120606.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-34372

http://linux.oracle.com/errata/ELSA-2026-34372.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
gnutls-3.3.29-9.0.1.el7_9.i686.rpm
gnutls-3.3.29-9.0.1.el7_9.x86_64.rpm
gnutls-c++-3.3.29-9.0.1.el7_9.i686.rpm
gnutls-c++-3.3.29-9.0.1.el7_9.x86_64.rpm
gnutls-dane-3.3.29-9.0.1.el7_9.i686.rpm
gnutls-dane-3.3.29-9.0.1.el7_9.x86_64.rpm
gnutls-devel-3.3.29-9.0.1.el7_9.i686.rpm
gnutls-devel-3.3.29-9.0.1.el7_9.x86_64.rpm
gnutls-utils-3.3.29-9.0.1.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/gnutls-3.3.29-9.0.1.el7_9.src.rpm

Related CVEs:

CVE-2026-33845
CVE-2026-33846
CVE-2026-42009




Description of changes:

[3.3.29-9.0.1]
- Regenerate PKCS#11 test certificates [Orabug: 39674042]
- Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 [Orabug: 39674042]



From el-errata at oss.oracle.com  Fri Aug  7 16:37:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:37:39 -0700
Subject: [El-errata] ELBA-2026-51069 Oracle Linux 8 tzdata bug fix and
 enhancement update
Message-ID: <mailman.15.1786120674.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-51069

http://linux.oracle.com/errata/ELBA-2026-51069.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
tzdata-2026c-1.0.1.el8_10.noarch.rpm
tzdata-java-2026c-1.0.1.el8_10.noarch.rpm

aarch64:
tzdata-2026c-1.0.1.el8_10.noarch.rpm
tzdata-java-2026c-1.0.1.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/tzdata-2026c-1.0.1.el8_10.src.rpm



Description of changes:

[2026c-1.0.1]
- Use javac 1.6 or newer

[2026c-1]
- Update to tzdata-2026c (RHEL-194104)
  - Alberta moved to permanent -06 on 2026-06-18.
  - Morocco moves to permanent +00 on 2026-09-20.



From el-errata at oss.oracle.com  Fri Aug  7 16:37:41 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:37:41 -0700
Subject: [El-errata] ELSA-2026-50978 Important: Oracle Linux 8 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.16.1786120676.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50978

http://linux.oracle.com/errata/ELSA-2026-50978.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.153.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.153.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.153.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.153.1.el8_10.x86_64.rpm
perf-4.18.0-553.153.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.153.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.153.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.153.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.153.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.153.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.153.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.153.1.el8_10.aarch64.rpm
perf-4.18.0-553.153.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.153.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.153.1.el8_10.src.rpm

Related CVEs:

CVE-2025-54518




Description of changes:

[4.18.0-553.153.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.153.1]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270]
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518}

[4.18.0-553.152.1]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099]
- bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844]



From el-errata at oss.oracle.com  Fri Aug  7 16:39:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:39:16 -0700
Subject: [El-errata] ELBA-2026-50156-0 Oracle Linux 9 linux-firmware bug fix
 and enhancement update
Message-ID: <mailman.17.1786120770.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50156-0

http://linux.oracle.com/errata/ELBA-2026-50156-0.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
iwl1000-firmware-39.31.5.1-999.48.el9.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el9.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el9.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el9.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el9.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el9.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el9.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el9.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el9.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el9.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el9.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-whence-20260615-999.48.gite7eb98af.el9.noarch.rpm
liquidio-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
netronome-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm

aarch64:
iwl1000-firmware-39.31.5.1-999.48.el9.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el9.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el9.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el9.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el9.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el9.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el9.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el9.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el9.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el9.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el9.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el9.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el9.noarch.rpm
linux-firmware-whence-20260615-999.48.gite7eb98af.el9.noarch.rpm
liquidio-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm
netronome-firmware-20260615-999.48.gite7eb98af.el9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/linux-firmware-20260615-999.48.gite7eb98af.el9.src.rpm



Description of changes:

[20260615-999.48.gite7eb98af.el9]
- Rebase to latest upstream [Orabug: 39563213]



From el-errata at oss.oracle.com  Fri Aug  7 16:39:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:39:18 -0700
Subject: [El-errata] ELBA-2026-51069 Oracle Linux 9 tzdata bug fix and
 enhancement update
Message-ID: <mailman.18.1786120773.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-51069

http://linux.oracle.com/errata/ELBA-2026-51069.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
tzdata-2026c-1.el9_8.noarch.rpm
tzdata-java-2026c-1.el9_8.noarch.rpm

aarch64:
tzdata-2026c-1.el9_8.noarch.rpm
tzdata-java-2026c-1.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/tzdata-2026c-1.el9_8.src.rpm



Description of changes:

[2026c-1]
- Update to tzdata-2026c (RHEL-194098)
  - Alberta moved to permanent -06 on 2026-06-18.
  - Morocco moves to permanent +00 on 2026-09-20.



From el-errata at oss.oracle.com  Fri Aug  7 16:39:20 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:39:20 -0700
Subject: [El-errata] ELSA-2026-51035 Moderate: Oracle Linux 9 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.19.1786120775.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51035

http://linux.oracle.com/errata/ELSA-2026-51035.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.36.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.36.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.36.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.36.1.el9_8.x86_64.rpm
libperf-5.14.0-687.36.1.el9_8.x86_64.rpm
perf-5.14.0-687.36.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.36.1.el9_8.x86_64.rpm
rtla-5.14.0-687.36.1.el9_8.x86_64.rpm
rv-5.14.0-687.36.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.36.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.36.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.36.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.36.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.36.1.el9_8.aarch64.rpm
libperf-5.14.0-687.36.1.el9_8.aarch64.rpm
perf-5.14.0-687.36.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.36.1.el9_8.aarch64.rpm
rtla-5.14.0-687.36.1.el9_8.aarch64.rpm
rv-5.14.0-687.36.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.36.1.el9_8.src.rpm

Related CVEs:

CVE-2026-23415
CVE-2026-43450




Description of changes:

[5.14.0-687.36.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.36.1]
- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}

[5.14.0-687.35.1]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}



From el-errata at oss.oracle.com  Fri Aug  7 16:39:22 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:39:22 -0700
Subject: [El-errata] ELSA-2026-51105 Important: Oracle Linux 9 LibRaw
 security update
Message-ID: <mailman.20.1786120819.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51105

http://linux.oracle.com/errata/ELSA-2026-51105.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
LibRaw-0.21.1-2.el9_8.1.i686.rpm
LibRaw-0.21.1-2.el9_8.1.x86_64.rpm
LibRaw-devel-0.21.1-2.el9_8.1.i686.rpm
LibRaw-devel-0.21.1-2.el9_8.1.x86_64.rpm

aarch64:
LibRaw-0.21.1-2.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/LibRaw-0.21.1-2.el9_8.1.src.rpm

Related CVEs:

CVE-2026-51235




Description of changes:

[0.21.1-2.1]
- Fix CVE-2026-51235
Resolves: RHEL-219221



From el-errata at oss.oracle.com  Fri Aug  7 16:41:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:41:33 -0700
Subject: [El-errata] ELBA-2026-51069 Oracle Linux 10 tzdata bug fix and
 enhancement update
Message-ID: <mailman.21.1786120907.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-51069

http://linux.oracle.com/errata/ELBA-2026-51069.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
tzdata-2026c-1.el10_2.noarch.rpm
tzdata-java-2026c-1.el10_2.noarch.rpm

aarch64:
tzdata-2026c-1.el10_2.noarch.rpm
tzdata-java-2026c-1.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/tzdata-2026c-1.el10_2.src.rpm



Description of changes:

[2026c-1]
- Update to tzdata-2026c (RHEL-194097)
  - Alberta moved to permanent -06 on 2026-06-18.
  - Morocco moves to permanent +00 on 2026-09-20.



From el-errata at oss.oracle.com  Fri Aug  7 16:41:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:41:35 -0700
Subject: [El-errata] ELSA-2026-30129 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.22.1786120910.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-30129

http://linux.oracle.com/errata/ELSA-2026-30129.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2026-31636
CVE-2026-43038
CVE-2026-43198
CVE-2026-43414
CVE-2026-45898
CVE-2026-46117
CVE-2026-46135
CVE-2026-46145




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Fri Aug  7 16:41:36 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 07 Aug 2026 09:41:36 -0700
Subject: [El-errata] ELSA-2026-49871 Moderate: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.25.1786120910.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49871

http://linux.oracle.com/errata/ELSA-2026-49871.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.43.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.43.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.43.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.43.1.el10_2.x86_64.rpm
libperf-6.12.0-211.43.1.el10_2.x86_64.rpm
perf-6.12.0-211.43.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.43.1.el10_2.x86_64.rpm
rtla-6.12.0-211.43.1.el10_2.x86_64.rpm
rv-6.12.0-211.43.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.43.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.43.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.43.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.43.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.43.1.el10_2.aarch64.rpm
libperf-6.12.0-211.43.1.el10_2.aarch64.rpm
perf-6.12.0-211.43.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.43.1.el10_2.aarch64.rpm
rtla-6.12.0-211.43.1.el10_2.aarch64.rpm
rv-6.12.0-211.43.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.43.1.el10_2.src.rpm

Related CVEs:

CVE-2025-68214
CVE-2026-23199




Description of changes:

[6.12.0-211.43.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.43.1]
- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek) [RHEL-213965]
- dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-211011]
- dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-211011]
- dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-211011]
- dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-211011]
- dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-211011]
- dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-211011]
- dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-211011]
- dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-211011]
- dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-211011]
- dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-211011]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-211011]
- drm/i915/psr: Use DC_OFF wake reference to block DC6 on vblank enable (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Block DC states on vblank enable when Panel Replay supported (Anusha Srivatsa) [RHEL-172832]
- drm/i915/psr: Don't enable Panel Replay on sink if globally disabled (Anusha Srivatsa) [RHEL-172832]
- drm/i915/alpm: ALPM disable fixes (Anusha Srivatsa) [RHEL-172832]
- procfs: fix possible double mmput() in do_procmap_query() (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- procfs: avoid fetching build ID while holding VMA lock (Rafael Aquini) [RHEL-189665] {CVE-2026-23199}
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189563] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184266]



From el-errata at oss.oracle.com  Fri Aug  7 17:17:31 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 7 Aug 2026 21:17:31 +0400
Subject: [El-errata] New Ksplice updates for RHCK 9 (ELSA-2026-19225)
Message-ID: <mailman.26.1786123070.31.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-19225 can now be patched using Ksplice
CVEs: CVE-2024-47701 CVE-2024-47742 CVE-2025-21858 CVE-2025-23131 CVE-2025-37756 CVE-2025-37757 CVE-2025-37824 CVE-2025-37921 CVE-2025-37978 CVE-2025-38018 CVE-2025-38111 CVE-2025-38120 CVE-2025-38184 CVE-2025-38231 CVE-2025-38264 CVE-2025-38305 CVE-2025-38310 CVE-2025-38342 CVE-2025-38399 CVE-2025-38445 CVE-2025-38461 CVE-2025-38473 CVE-2025-38509 CVE-2025-38512 CVE-2025-38572 CVE-2025-38587 CVE-2025-38588 CVE-2025-38616 CVE-2025-38617 CVE-2025-38618 CVE-2025-38622 CVE-2025-38685 CVE-2025-38688 CVE-2025-38732 CVE-2025-39703 CVE-2025-39791 CVE-2025-39860 CVE-2025-39866 CVE-2025-39922 CVE-2025-39926 CVE-2025-39946 CVE-2025-39963 CVE-2025-39977 CVE-2025-40129 CVE-2025-40153 CVE-2025-40194 CVE-2025-40231 CVE-2025-40273 CVE-2025-68215 CVE-2025-68295 CVE-2025-68776 CVE-2025-71131 CVE-2026-23243 CVE-2026-43304

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-19225.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-19225.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running RHCK 9 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2024-47701: Privilege escalation in ext4 filesystem.

* CVE-2024-47742: Privilege escalation in the firmware loader driver.

* CVE-2025-21858: Privilege escalation in Generic Network Virtualization Encapsulation driver.

* CVE-2025-23131: Null pointer dereference in Distributed Lock Manager (DLM) driver.

* CVE-2025-37756: Undefined behaviour in Transport Layer Security driver.

* CVE-2025-37757: Memory leak in the TIPC Protocol driver.

* CVE-2025-37824: Null pointer dereference in TIPC Protocol driver.

* CVE-2025-37921: Deadlock in Virtual eXtensible Local Area Network (VXLAN) driver.

* CVE-2025-37978: Kernel oops in Block layer data integrity driver.

* CVE-2025-38018: Null pointer dereference in Transport Layer Security driver.

* CVE-2025-38111: Out-of-bounds memory usage in MDIO bus driver.

* CVE-2025-38120: Memory disclosure in Netfilter driver.

* CVE-2025-38184: NULL pointer dereference in IP/UDP media type driver.

* CVE-2025-38231: Null pointer dereference in NFS server driver.

* CVE-2025-38264: Kernel crash in NVM Express over Fabrics TCP driver.

* CVE-2025-38305: Deadlock in Precision Time Protocol (PTP) driver.

* CVE-2025-38310: Out-of-bounds memory access in IPv6 Segment Routing Header encapsulation driver.

* CVE-2025-38342: Out-of-bounds memory access in software node component.

* CVE-2025-38399: Null pointer dereference in Generic Target Core Mod (TCM) and ConfigFS Infrastructure driver.

* CVE-2025-38445: Kernel panic in RAID-1 (mirroring) mode driver.

* CVE-2025-38461: Denial-of-service in Virtual Socket protocol driver.

* CVE-2025-38473: Null pointer dereference in Bluetooth subsystem.

* CVE-2025-38509: Kernel assertion failure in Generic IEEE 802.11 Networking Stack (mac80211) driver.

* CVE-2025-38512: Missing check for A-MSDU attacks in Wireless driver.

* CVE-2025-38572: Out-of-bounds memory access in IPv6 networking stack.

* CVE-2025-38587: Infinite loop in IPV6 subsystem.

* CVE-2025-38588: Infinite loop in IPV6 subsystem.

* CVE-2025-38616: Out-of-bounds memory access in TLS networking stack.

* CVE-2025-38617: Racing in raw-packet protocol stack.

* CVE-2025-38618: Use-after-free in Virtual Socket protocol driver.

* CVE-2025-38622: Kernel oops in UDP networking stack.

* CVE-2025-38685: Out-of-bounds memory access in frame buffer device driver.

* CVE-2025-38688: Out-of-bounds memory access in Generic IOMMU driver.

* CVE-2025-38732: Memory leak in Netfilter packet rejection driver.

* CVE-2025-39703: Kernel panic in High-availability Seamless Redundancy (HSR & PRP) driver.

* CVE-2025-39791: Deadlock in Crypt target driver.

* CVE-2025-39860: Use-after-free in Bluetooth subsystem.

* CVE-2025-39866: Use-after-free in writeback filesystem logic.

* CVE-2025-39922: Use-after-free in Intel(R) 10GbE PCI Express adapters driver.

* CVE-2025-39926: Undefined behavior in Generic Netlink Family driver.

* CVE-2025-39946: Out-of-bounds memory access in Transport Layer Security driver.

* CVE-2025-39963: Reference counting error in IO uring driver.

* CVE-2025-39977: Use-after-free in futex driver.

* CVE-2025-40129: Null pointer dereference in SUNRPC_GSS.

* CVE-2025-40153: Soft lockup in HugeTLB filesystem.

* CVE-2025-40194: Kernel crash in Intel P state control driver.

* CVE-2025-40231: Deadlock in Virtual Socket protocol driver.

* CVE-2025-40273: Kernel oops in NFS server for NFS version 4 driver.

* CVE-2025-68215: Use-after-free in PTP clock driver.

* CVE-2025-68295: Memory leak in SMB/CIFS client driver.

* CVE-2025-68776: Null pointer dereference in High-availability Seamless Redundancy (HSR & PRP) driver.

* CVE-2025-71131: Use-after-free in Sequence Number IV Generator driver.

* CVE-2026-23243: Out-of-bounds memory access in InfiniBand driver.

* CVE-2026-43304: Out-of-bounds memory access in Ceph core library driver.

* Use-after-free in Intel Wireless WiFi MLD Firmware driver.

* Note: Oracle has determined some CVEs are not applicable.

The kernel is not affected by the following CVEs
since the code under consideration is not compiled.

CVE-2022-49026, CVE-2023-52894, CVE-2023-53356, CVE-2023-53423,
CVE-2023-53551, CVE-2023-54042, CVE-2024-43832, CVE-2024-46692,
CVE-2024-50034, CVE-2024-50112, CVE-2024-56640, CVE-2024-56670,
CVE-2025-21998, CVE-2025-37837, CVE-2025-37841, CVE-2025-38005,
CVE-2025-38043, CVE-2025-38138, CVE-2025-38155, CVE-2025-38156,
CVE-2025-38281, CVE-2025-38316, CVE-2025-38317, CVE-2025-38326,
CVE-2025-38343, CVE-2025-38429, CVE-2025-38448, CVE-2025-38489,
CVE-2025-38497, CVE-2025-38510, CVE-2025-38535, CVE-2025-38576,
CVE-2025-38581, CVE-2025-38586, CVE-2025-38599, CVE-2025-39726,
CVE-2025-39739, CVE-2025-39801, CVE-2025-39857, CVE-2025-39869,
CVE-2025-39904, CVE-2025-39923, CVE-2025-39935, CVE-2025-39937,
CVE-2025-39938, CVE-2025-39939, CVE-2025-39952, CVE-2025-39958,
CVE-2025-40013, CVE-2025-40045, CVE-2025-40155, CVE-2025-40282,
CVE-2025-40317, CVE-2025-68344, CVE-2025-68346, CVE-2025-68347,
CVE-2025-68747, CVE-2025-68748, CVE-2025-68753, CVE-2025-68757,
CVE-2025-71119, CVE-2026-45904, CVE-2025-38639, CVE-2025-40087,
CVE-2023-53125, CVE-2025-37866, CVE-2025-38326, CVE-2025-39919,
CVE-2025-40352, CVE-2026-23045, CVE-2025-40013, CVE-2024-56641,
CVE-2025-38734, CVE-2026-23042, CVE-2025-40175, CVE-2025-68746,
CVE-2026-23202, CVE-2025-40066, CVE-2026-23207


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.




From el-errata at oss.oracle.com  Mon Aug 10 22:30:11 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:30:11 -0700
Subject: [El-errata] ELBA-2026-47121 Oracle Linux 8 linux-firmware bug fix
 and enhancement update
Message-ID: <mailman.27.1786401029.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47121

http://linux.oracle.com/errata/ELBA-2026-47121.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
iwl1000-firmware-39.31.5.1-999.48.el8.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el8.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el8.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el8.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el8.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el8.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el8.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el8.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el8.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el8.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el8.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el8.noarch.rpm

aarch64:
iwl1000-firmware-39.31.5.1-999.48.el8.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el8.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el8.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el8.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el8.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el8.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el8.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el8.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el8.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el8.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el8.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el8.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el8.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/linux-firmware-20260615-999.48.gite7eb98af.el8.src.rpm



Description of changes:

[20260615-999.48.gite7eb98af.el8]
- Rebase to latest upstream [Orabug: 39563213]



From el-errata at oss.oracle.com  Mon Aug 10 22:31:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:31:27 -0700
Subject: [El-errata] ELBA-2026-47011-1 Oracle Linux 8 kernel bug fix update
Message-ID: <mailman.28.1786401101.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47011-1

http://linux.oracle.com/errata/ELBA-2026-47011-1.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.148.1.0.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.148.1.0.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
perf-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.148.1.0.1.el8_10.src.rpm



Description of changes:

[4.18.0-553.148.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.148.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.148.1]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006}

[4.18.0-553.147.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026}
- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]



From el-errata at oss.oracle.com  Mon Aug 10 22:31:29 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:31:29 -0700
Subject: [El-errata] ELBA-2026-49214-1 Oracle Linux 8 kernel bug fix update
Message-ID: <mailman.29.1786401102.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-49214-1

http://linux.oracle.com/errata/ELBA-2026-49214-1.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.150.1.0.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.150.1.0.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
perf-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.150.1.0.1.el8_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.150.1.0.1.el8_10.src.rpm



Description of changes:

[4.18.0-553.150.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.150.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.150.1]
- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116}

[4.18.0-553.149.1]
- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692}
- fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150}



From el-errata at oss.oracle.com  Mon Aug 10 22:34:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:15 -0700
Subject: [El-errata] ELBA-2026-500120 Oracle Linux 9 leapp-repository bug
 fix update
Message-ID: <mailman.30.1786401269.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500120

http://linux.oracle.com/errata/ELBA-2026-500120.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
leapp-upgrade-el9toel10-0.23.0-1.0.9.el9.noarch.rpm
leapp-upgrade-el9toel10-deps-0.23.0-1.0.9.el9.noarch.rpm
leapp-upgrade-el9toel10-fapolicyd-0.23.0-1.0.9.el9.noarch.rpm
leapp-0.20.0-1.0.2.el9.noarch.rpm
leapp-deps-0.20.0-1.0.2.el9.noarch.rpm
python3-leapp-0.20.0-1.0.2.el9.noarch.rpm
snactor-0.20.0-1.0.2.el9.noarch.rpm

aarch64:
leapp-upgrade-el9toel10-0.23.0-1.0.9.el9.noarch.rpm
leapp-upgrade-el9toel10-deps-0.23.0-1.0.9.el9.noarch.rpm
leapp-upgrade-el9toel10-fapolicyd-0.23.0-1.0.9.el9.noarch.rpm
leapp-0.20.0-1.0.2.el9.noarch.rpm
leapp-deps-0.20.0-1.0.2.el9.noarch.rpm
python3-leapp-0.20.0-1.0.2.el9.noarch.rpm
snactor-0.20.0-1.0.2.el9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/leapp-repository-0.23.0-1.0.9.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/leapp-0.20.0-1.0.2.el9.src.rpm



Description of changes:

leapp-repository
[0.23.0-1.0.9]
- Fix xfsprogs disk_size issue

[0.23.0-1.0.7]
- Updated upstream references
- Add additional mysql processing [Orabug: 39695658]
- Add hint for inhibitor [Orabug: 39722736]

[0.23.0-1.0.6]
- Update upstream references [Orabug: 39690407]
- Fix mysql-common processing [Orabug: 39695658]
- Do not crash on unsupported OL version [Orabug: 39722736]

[0.23.0-1.0.5]
- Updated upstream references [Orabug: 39690407]
- Fix mysql conflict [Orabug: 39695658]

[0.23.0-1.0.2]
- Fix OL10.2 iso detection [Orabug: 39065226]

[0.23.0-1.0.1]
- Add support for Oracle Linux in-place upgrade

[0.23.0-1]
- Rebase to new upstream 0.23.0
- Enable in-place upgrades on CentOS Stream systems
- Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
- Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
- Ignore Red Hat subscription-manager actions on non-RHEL distros
- Add actors to migrate SSSD configuration
- Update leapp upgrade data files
- Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389

[0.22.0-4]
- Load DNF configuration correctly when using DNF libraries
- Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
- Enable upgrades on systems using RHUI on AWS and Azure
- Inhibit the upgrade if cgroups v1 are enabled on the system
- The HybridImage model has been replaced by ConvertGrubenvTask
- Check the input format of the target version properly
- Resolves: RHEL-64910, RHEL-64911, RHEL-81212

[0.22.0-3]
- Fix parsing of the kernel cmdline
- Require leapp data with provided_data_streams 4.0+
- Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
- Resolves: RHEL-80336

[0.22.0-2]
- Require leapp-framework >= 6.1
- Simplified use of the LiveMode experimental feature with additional enhancements
- Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
- Create proper error message when swap of RHUI clients fails
- Fix the check of deprecated PCI devices and drivers
- Add RHEL 10.1 product certificates
- Gracefully handle CentOS OS versioning style
- Introduced the --enable-experimental-feature to simplify use of experimental features
- Manage RPM GPG keys during the upgrade respecting used linux distributions
- Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
- Update leapp upgrade data files
- Minor fixes in reports
- Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689

leapp
[0.20.0-1.0.2]
- Update Red Hat references in manual to Oracle references [Orabug: 35304131]
- Build leapp-framework 6.1 for OL9
- Correctly format Summary with newlines [Orabug: 35727259]

[0.20.0-1]
- Rebase to new upstream 0.20.0
- Resolves: RHEL-86225

[0.19.0-2]
- Bump leapp-framework to 6.1
- Create the /var/lib/leapp directory automatically if missing
- Recognize configuration files with the .yaml suffix only
- Fix CLI: allow to set falsy values as default for leapp's command options
- Resolves: RHEL-86225



From el-errata at oss.oracle.com  Mon Aug 10 22:34:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:16 -0700
Subject: [El-errata] ELBA-2026-500147 Oracle Linux 9 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.31.1786401273.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500147

http://linux.oracle.com/errata/ELBA-2026-500147.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-322.203.3.4.1.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.1.el9uek.src.rpm



Description of changes:

[5.15.0-322.203.3.4.1]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39558744]

[5.15.0-322.203.3.4]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39711605]

[5.15.0-322.203.3.3]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39706512]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39706512]  {CVE-2026-43499}

[5.15.0-322.203.3.2]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673886]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673886]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39668793]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39668793]  {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39668793]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39668793]

[5.15.0-322.203.3.1]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39648952]  {CVE-2026-52943}

[5.15.0-322.203.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548689]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548689]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39548689]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548689]
- net/rds: Make "rds_send_xmit" fairer (Gerd Rausch)  [Orabug: 39532945]
- net/rds: Schedule rds_send_worker if there's more work to do (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: Change return code from rds_send_xmit() when lock is taken" (Gerd Rausch)  [Orabug: 39532945]
- Revert "Reapply "rds: ib: Make sure receives are posted before connection is up"" (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: ib: Make sure a QP in INIT state is transitioned to ERR" (Gerd Rausch)  [Orabug: 39532945]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526881]  {CVE-2022-50073}
- mmc: dwcmshc_bf3_hw_reset: Log eMMC reset calls (Satyansh Shukla)  [Orabug: 39333650]
- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger)  [Orabug: 39522954]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262374]  {CVE-2026-31657}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39179363]

[5.15.0-322.203.2]
- LTS version: v5.15.203 (Vijayendra Suman)
- io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe)
- ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
- ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- i2c: cp2615: fix serial string NULL-deref at probe (Johan Hovold)
- i2c: cp2615: replace deprecated strncpy with strscpy (Justin Stitt)
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Namjae Jeon)
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
- tracing: Fix potential deadlock in cpu hotplug with osnoise (Luo Haiyang)
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Nikunj A Dadhania)
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (Jinjiang Tu)
- scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik)
- net: macb: Move devm_{free,request}_irq() out of spin lock area (Kevin Hao)
- dmaengine: sh: rz-dmac: Protect the driver specific lists (Claudiu Beznea)
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Claudiu Beznea)
- xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki)
- ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen)
- ext4: fix the might_sleep() warnings in kvfree() (Zqiang)
- ext4: publish jinode after initialization (Li Chen)
- usb: gadget: uvc: fix NULL pointer dereference during unbind race (Jimmy Hu)
- usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop (Kuen-Han Tsai)
- usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann)
- net: rfkill: prevent unlimited numbers of rfkill events from being created (Greg Kroah-Hartman)
- seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer)
- Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts (NGI0))
- xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao)
- netlink: add nla be16/32 types to minlen array (Florian Westphal)
- rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) (David Howells)
- rxrpc: fix reference count leak in rxrpc_server_keyring() (Luxiao Xu)
- net: stmmac: fix integer underflow in chain mode (Tyllis Xu)
- net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure (Pengpeng Hou)
- mmc: vub300: fix NULL-deref on disconnect (Johan Hovold)
- drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka)
- net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (David Carlier)
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)
- batman-adv: reject oversized global TT response buffers (Ruide Cao)
- nfc: pn533: allocate rx skb before consuming bytes (Pengpeng Hou)
- arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges (Shawn Guo)
- arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity (Shawn Guo)
- wifi: brcmsmac: Fix dma_free_coherent() size (Thomas Fourier)
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko)
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do)
- apparmor: fix race between freeing data and fs accessing it (John Johansen)
- apparmor: fix race on rawdata dereference (John Johansen)
- apparmor: fix differential encoding verification (John Johansen)
- apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
- apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen)
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer)
- apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer)
- apparmor: fix: limit the number of levels of policy namespaces (John Johansen)
- apparmor: replace recursive profile removal with iterative approach (Massimiliano Pellizzer)
- apparmor: fix memory leak in verify_header (Massimiliano Pellizzer)
- apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer)
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (Nuno Sa)
- gpiolib: cdev: fix uninitialised kfifo (Kent Gibson)
- media: uvcvideo: Use heuristic to find stream entity (Ricardo Ribalda)
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)
- Input: uinput - take event lock when submitting FF request "event" (Dmitry Torokhov)
- Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov)
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)
- xfrm_user: fix info leak in build_report() (Greg Kroah-Hartman)
- wifi: rt2x00usb: fix devres lifetime (Johan Hovold)
- lib/crypto: chacha: Zeroize permuted_state before it leaves scope (Eric Biggers)
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov)
- io_uring/tctx: work around xa_store() allocation error issue (Jens Axboe)
- usb: gadget: f_uac1_legacy: validate control request size (Taegu Ha)
- usb: gadget: f_rndis: Protect RNDIS options with mutex (Kuen-Han Tsai)
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free (Kuen-Han Tsai)
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser (Navaneeth K)
- smb: client: Fix refcount leak for cifs_sb_tlink (Shuhao Fu)
- net: mctp: Don't access ifa_index when missing (Matt Johnston)
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Quanmin Yan)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix error message (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer (Sebastian Urban)
- USB: dummy-hcd: Fix interrupt synchronization error (Alan Stern)
- USB: dummy-hcd: Fix locking/synchronization error (Alan Stern)
- thunderbolt: Fix property read in nhi_wake_supported() (Konrad Dybcio)
- net: ftgmac100: fix ring allocation unwind on open failure (Yufan Chen)
- vxlan: validate ND option lengths in vxlan_na_create (Yang Yang)
- netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu)
- comedi: me4000: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: me_daq: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach (Ian Abbott)
- comedi: Reinit dev->spinlock between attachments to low-level drivers (Ian Abbott)
- comedi: dt2815: add hardware detection to prevent crash (Deepanshu Kartikey)
- cdc-acm: new quirk for EPSON HMD (Oliver Neukum)
- bridge: br_nd_send: validate ND option lengths (Yang Yang)
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
- usb: cdns3: gadget: fix state inconsistency on gadget init failure (Yongchao Wu)
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Yongchao Wu)
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Juno Choi)
- usb: ehci-brcm: fix sleep during atomic (Justin Chen)
- usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira)
- usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li)
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Miao Li)
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (Ethan Tidmore)
- iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore)
- iio: gyro: mpu3050: Fix irq resource leak (Ethan Tidmore)
- iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore)
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only (Francesco Lavra)
- iio: light: vcnl4035: fix scan buffer on big-endian (David Lechner)
- iio: dac: ad5770r: fix error return in ad5770r_read_raw() (Antoniu Miclaus)
- Input: xpad - add support for Razer Wolverine V3 Pro (Zoltan Illes)
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
- Input: synaptics-rmi4 - fix a locking bug in an error path (Bart Van Assche)
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (JP Hein)
- USB: serial: option: add support for Rolling Wireless RW135R-GL (Wanquan Zhong)
- USB: serial: io_edgeport: add support for Blackbox IC135A (Frej Drejhammar)
- drm/ast: dp501: Fix initialization of SCU2C (Thomas Zimmermann)
- hwmon: (occ) Fix division by zero in occ_show_power_1() (Sanman Pradhan)
- MIPS: Fix the GCC version check for __multi3' workaround (Maciej W. Rozycki)
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (Oleh Konko)
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko)
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai)
- ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel)
- USB: serial: option: add MeiG Smart SRM825WN (Ernestas Kulik)
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru)
- drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman)
- riscv: kgdb: fix several debug register assignment bugs (Paul Walmsley)
- hwmon: (occ) Fix missing newline in occ_show_extended() (Sanman Pradhan)
- hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() (Sanman Pradhan)
- hwmon: (pxe1610) Check return value of page-select write in probe (Sanman Pradhan)
- bpf: reject direct access to nullable PTR_TO_BUF pointers (Qi Tang)
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet)
- net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/x25: Fix overflow when accumulating packets (Martin Schiller)
- net/x25: Fix potential double free of skb (Martin Schiller)
- net/mlx5: Avoid "No data available" when FW version queries fail (Saeed Mahameed)
- net: macb: properly unregister fixed rate clocks (Fedor Pchelkin)
- net: macb: fix clk handling on PCI glue driver removal (Fedor Pchelkin)
- Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong)
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Pablo Neira Ayuso)
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso)
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Qi Tang)
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang)
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal)
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal)
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal)
- netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso)
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang)
- bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov)
- net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec (Suraj Gupta)
- NFC: pn533: bound the UART receive buffer (Pengpeng Hou)
- net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (Yochai Eisenrich)
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Paolo Abeni)
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (Xiang Mei)
- bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang)
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)
- tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich)
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen)
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei)
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
- btrfs: reject root items with drop_progress and zero drop_level (ZhengYuan Huang)
- HID: multitouch: Check to ensure report responses match the request (Lee Jones)
- objtool: Fix Clang jump table detection (Josh Poimboeuf)
- btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
- atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey)
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Beno?t Sevens)
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso)
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
- dmaengine: xilinx_dma: Program interrupt delay timeout (Radhey Shyam Pandey)
- dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
- btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
- btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
- phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
- ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'o)
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li)
- ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike)
- ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin)
- ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
- ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey)
- xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki)
- jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
- scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
- alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
- erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu)
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin)
- media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam)
- cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
- can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi)
- s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
- s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
- ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
- sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
- hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
- ACPI: EC: Fix ECDT probe ordering issues (Hans de Goede)
- ACPI: EC: Fix EC address space handler unregistration (Hans de Goede)
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (Hans de Goede)
- ACPICA: include/acpi/acpixf.h: Fix indentation (Hans de Goede)
- ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport (Microsoft))
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
- RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
- RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal)
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
- RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
- regmap: Synchronize cache for the page selector (Andy Shevchenko)
- net: macb: use the current queue number for stats (Paolo Valerio)
- netfilter: ctnetlink: use netlink policy range checks (David Carlier)
- netlink: allow be16 and be32 types in all uint policy checks (Florian Westphal)
- netlink: introduce bigendian integer types (Florian Westphal)
- netfilter: nft_payload: reject out-of-range attributes via policy (Florian Westphal)
- netlink: introduce NLA_POLICY_MAX_BE (Florian Westphal)
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi)
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei)
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi)
- Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou)
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim)
- dma-mapping: add missing inline for dma_free_attrs (Miguel Ojeda)
- net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)
- platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
- net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
- openvswitch: validate MPLS set/set_masked payload length (Yang Yang)
- nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
- ionic: fix persistent MAC address override on PF (Mohammad Heib)
- pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike)
- Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal)
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim)
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim)
- can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
- af_key: validate families in pfkey_send_migrate() (Eric Dumazet)
- esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca)
- xfrm: Fix the usage of skb->sk (Steffen Klassert)
- xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
- dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
- module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai)
- HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
- net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (G?nther Noack)
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
- nvme-pci: ensure we're polling a polled queue (Keith Busch)
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
- nvme-pci: cap queue creation to used queues (Keith Busch)
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
- HID: asus: avoid memory leak in asus_report_fixup() (G?nther Noack)
- bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
- sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
- xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
- xen/privcmd: restrict usage in unprivileged domU (Juergen Gross)
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal)
- netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
- lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
- drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte)
- ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
- mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
- mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu)
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe JAILLET)
- hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi)
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
- net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz)
- nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi)
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei)
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei)
- net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
- wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei)
- igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
- net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
- net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
- net/smc: Only save the original clcsock callback functions (Wen Gu)
- PM: runtime: Fix a race condition related to device removal (Bart Van Assche)
- sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
- net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy)
- net: bcmgenet: increase WoL poll timeout (Justin Chen)
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu)
- netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
- netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso)
- netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso)
- netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko)
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu)
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes M?ller)
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim)
- netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal)
- net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
- Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz)
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
- firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
- of: Add cleanup.h based auto release via __free(device_node) markings (Jonathan Cameron)
- wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima)
- soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
- btrfs: tree-checker: fix misleading root drop_level error message (ZhengYuan Huang)
- batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Yang Yang)
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Ma?ra Canal)
- mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts (NGI0))
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
- net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn)
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum)
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe)
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov)
- wifi: cfg80211: move scan done work to wiphy work (Johannes Berg)
- wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges)
- ext4: always allocate blocks only from groups inode can use (Jan Kara)
- ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi)
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
- drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
- drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (Jeongjun Park)
- net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
- drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
- serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski ICEYE)
- serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo J?rvinen)
- serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel)
- serial: 8250_pci: add support for the AX99100 (Martin Roukala (n? Peres))
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
- mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain)
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
- mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
- mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes M?ller)
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes M?ller)
- net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin)
- NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
- nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny)
- sunrpc: fix cache_request leak in cache_release (Jeff Layton)
- driver: iio: add missing checks on iio_info's callback access (Julien Stephan)
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe)
- l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
- bpf: Forget ranges when refining tnum after JSET (Paul Chaignon)
- i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
- iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
- iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus)
- iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
- iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
- iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
- iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
- iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
- btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
- lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
- lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
- x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji)
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
- xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong)
- tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
- drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu)
- net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
- net: ncsi: fix skb leak in error paths (Jian Zhang)
- parisc: Fix initial page table creation for boot (Helge Deller)
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie)
- parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
- batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann)
- ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
- net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
- media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver)
- staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman)
- staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak)
- irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
- device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
- time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
- time: add kernel-doc in time.c (Randy Dunlap)
- ceph: fix i_nlink underrun during async unlink (Max Kellermann)
- libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
- libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer)
- libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov)
- libceph: reject preamble if control segment is empty (Ilya Dryomov)
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer)
- tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao)
- mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng)
- mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
- mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
- usb: image: mdc800: kill download URB on timeout (Ziyi Guo)
- usb: mdc800: handle signal and read racing (Oliver Neukum)
- usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu)
- usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum)
- USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern)
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern)
- USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
- usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
- usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
- usb: yurex: fix race in probe (Oliver Neukum)
- usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan)
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
- net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
- net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
- cgroup: fix race between task migration and iteration (Qingye Zhao)
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
- ASoC: detect empty DMI strings (Casey Connolly)
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
- e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath)
- i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim)
- regulator: pca9450: Correct interrupt type (Peng Fan)
- regulator: pca9450: Make IRQ optional (Frieder Schrempf)
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan)
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim)
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim)
- netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull)
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu)
- can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
- serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
- ASoC: soc-core: flush delayed work before removing DAIs and widgets (matteo.cotifava)
- ASoC: core: Do not call link_exit() on uninitialized rtd objects (Amadeusz S?awi?ski)
- ASoC: core: Exit all links before removing their components (Cezary Rojewski)
- ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() (Kuninori Morimoto)
- ASoC: soc-core: drop delayed_work_pending() check before flush (matteo.cotifava)
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi)
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman)
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
- xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger)
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (J. Neusch?fer)
- remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
- powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy (CS GROUP))
- ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
- unshare: fix unshare_fs() handling (Al Viro)
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar)
- ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka)
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen)
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera)
- net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
- nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
- nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
- net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den)
- amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski)
- xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
- indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
- wifi: wlcore: Fix a locking bug (Bart Van Assche)
- can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel)
- can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp)
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen)
- dpaa2-switch: do not clear any interrupts automatically (Ioana Ciornei)
- net: dpaa2-switch: serialize changes to priv->mac with a mutex (Vladimir Oltean)
- net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() (Vladimir Oltean)
- net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call (Vladimir Oltean)
- net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() (Vladimir Oltean)
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
- platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg)
- Squashfs: check metadata block offset is within range (Phillip Lougher)
- net/sched: ets: fix divide by zero in the offload path (Davide Caratti)
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe)
- wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian)
- wifi: radiotap: reject radiotap with unknown bits (Johannes Berg)
- ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo)
- platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum)
- x86/efi: defer freeing of boot services memory (Mike Rapoport (Microsoft))
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman)
- can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
- can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman)
- net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman)
- nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
- media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe)
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin)
- fbcon: move more common code into fb_open() (Daniel Vetter)
- fbcon: Extract fbcon_open/release helpers (Daniel Vetter)
- fbcon: Use delayed work for cursor (Daniel Vetter)
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Namjae Jeon)
- ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
- usb: cdns3: fix role switching during resume (Thomas Richard (TI))
- usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Th?o Lebrun)
- usb: cdns3: remove redundant if branch (Hongyu Xie)
- clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: omap-usb-host: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: switch away from using chained IRQ handlers (Dmitry Baryshkov)
- drm/tegra: dsi: fix device leak on probe (Johan Hovold)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: libata: remove pointless VPRINTK() calls (Hannes Reinecke)
- ata: libata-scsi: drop DPRINTK calls for cdb translation (Hannes Reinecke)
- scsi: ata: Call scsi_done() directly (Bart Van Assche)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Wentao Liang)
- ARM: OMAP2+: add missing of_node_put before break and return (Wang Qing)
- memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
- memory: mtk-smi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju)
- btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
- ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
- ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
- scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
- scsi: ufs: core: Always initialize the UIC done completion (Bart Van Assche)
- scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
- ARM: clean up the memset64() C wrapper (Thomas Wei?schuh)

[5.15.0-322.202.1]
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446044]
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446044]
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)  [Orabug: 39390378]
- net: sched: act_api: implement generic walker and search for tc action (Zhengchao Shao)  [Orabug: 39342047]
- btrfs: reserve extra space for the free space tree (Josef Bacik)  [Orabug: 39281379]
- btrfs: include the free space tree in the global rsv minimum calculation (Josef Bacik)  [Orabug: 39281379]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi)  [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi)  [Orabug: 39429143]



From el-errata at oss.oracle.com  Mon Aug 10 22:34:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:18 -0700
Subject: [El-errata] ELBA-2026-500152 Oracle Linux 9 xfsprogs bug fix update
Message-ID: <mailman.34.1786401273.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500152

http://linux.oracle.com/errata/ELBA-2026-500152.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
xfsprogs-6.18.0-1.0.4.el9.aarch64.rpm
xfsprogs-devel-6.18.0-1.0.4.el9.aarch64.rpm
xfsprogs-xfs_scrub-6.18.0-1.0.4.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/xfsprogs-6.18.0-1.0.4.el9.src.rpm



Description of changes:

[6.18.0-1.0.4]
- Fix patch increasing min log size to 100MiB so that it works with tiny fs.

[6.18.0-1.0.3]
- Re-apply missing patch to increase min log size to 100MiB.

[6.18.0-1.0.1]
- Rebase to xfsprogs 6.18 for online fsck.
- Fixed mdrestore bug on 4k sector disks.

[6.16.0-1.0.1]
- Rebase to xfsprogs 6.16 to get atomic write formatting.

[6.12.0-1.0.2]
- Introduce xfs_defrag to xfsprogs.

[6.12.0-1.0.1]
- Add mkfs configuration files for OL.
- Add mkfs.xmem script.
- Enable background online fsck services by default.  Users must set autofsck=1 on their filesystems.
- Rebase atop latest upstream.

[6.11.0-1]
- Update to the latest upstream version
- Related: rhbz#2319902

[6.10.1-1]
- Update to latest upstream version
- Fix C++ compilation errors in xfs_fs.h
- Related: rhbz#2309693, rhbz#2308609

[6.10.0-1]
- Update to latest upstream version
- Related: rhbz#2307855



From el-errata at oss.oracle.com  Mon Aug 10 22:34:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:27 -0700
Subject: [El-errata] ELSA-2026-51153 Important: Oracle Linux 9 gpsd-minimal
 security update
Message-ID: <mailman.35.1786401276.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51153

http://linux.oracle.com/errata/ELSA-2026-51153.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gpsd-minimal-3.26.1-2.0.1.el9_8.1.x86_64.rpm
gpsd-minimal-clients-3.26.1-2.0.1.el9_8.1.x86_64.rpm

aarch64:
gpsd-minimal-3.26.1-2.0.1.el9_8.1.aarch64.rpm
gpsd-minimal-clients-3.26.1-2.0.1.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/gpsd-minimal-3.26.1-2.0.1.el9_8.1.src.rpm

Related CVEs:

CVE-2026-58459




Description of changes:

[3.26.1-2.0.1.el9_8.1]
- Replaced upstream reference [Orabug: 35865525]

[1:3.26.1-2.el9_8.1]
- fix command injection in gpsprof (CVE-2026-58459)

[1:3.26.1-2]
- fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
- fix integer underflow in handling of Navcom packets (CVE-2025-67269)



From el-errata at oss.oracle.com  Mon Aug 10 22:34:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:21 -0700
Subject: [El-errata] ELSA-2026-48197  Low: Oracle Linux 9  php:8.3 security,
 bug fix, and enhancement update
Message-ID: <mailman.36.1786401276.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-48197

http://linux.oracle.com/errata/ELSA-2026-48197.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
apcu-panel-5.1.23-1.module+el9.8.0+90982+92b8b4c7.noarch.rpm
php-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-bcmath-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-cli-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-common-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-dba-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-dbg-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-devel-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-embedded-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-enchant-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-ffi-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-fpm-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-gd-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-gmp-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-intl-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-ldap-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-mbstring-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-mysqlnd-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-odbc-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-opcache-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pdo-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-apcu-5.1.23-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-redis6-6.1.0-3.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-rrd-2.0.3-4.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-xdebug3-3.3.1-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pecl-zip-1.22.3-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-pgsql-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-process-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-snmp-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-soap-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm
php-xml-8.3.32-1.module+el9.8.0+90982+92b8b4c7.x86_64.rpm

aarch64:
apcu-panel-5.1.23-1.module+el9.8.0+90982+92b8b4c7.noarch.rpm
php-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-bcmath-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-cli-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-common-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-dba-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-dbg-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-devel-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-embedded-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-enchant-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-ffi-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-fpm-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-gd-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-gmp-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-intl-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-ldap-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-mbstring-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-mysqlnd-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-odbc-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-opcache-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pdo-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-apcu-5.1.23-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-apcu-devel-5.1.23-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-redis6-6.1.0-3.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-rrd-2.0.3-4.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-xdebug3-3.3.1-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pecl-zip-1.22.3-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-pgsql-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-process-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-snmp-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-soap-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm
php-xml-8.3.32-1.module+el9.8.0+90982+92b8b4c7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/php-8.3.32-1.module+el9.8.0+90982+92b8b4c7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/php-pecl-apcu-5.1.23-1.module+el9.8.0+90982+92b8b4c7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/php-pecl-redis6-6.1.0-3.module+el9.8.0+90982+92b8b4c7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/php-pecl-rrd-2.0.3-4.module+el9.8.0+90982+92b8b4c7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/php-pecl-xdebug3-3.3.1-1.module+el9.8.0+90982+92b8b4c7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/php-pecl-zip-1.22.3-1.module+el9.8.0+90982+92b8b4c7.src.rpm

Related CVEs:

CVE-2026-14355




Description of changes:

php
[8.3.32-1]
- rebase to 8.3.32

php-pecl-apcu
[5.1.23-1]
- update to 5.1.23 for PHP 8.2 RHEL-14699

[5.1.21-1]
- update to 5.1.21 for PHP 8.1 #2070040

php-pecl-redis6
[6.1.0-3]
- use valkey for tests

[6.1.0-2]
- ignore 1 ONLINE test

[6.1.0-1]
- RHEL build

[6.1.0-1]
- update to 6.1.0
- drop patch merged upstream

[6.1.0~RC2-1]
- update to 6.1.0RC2
- fix test suite with redis 6.2 using patch from
  https://github.com/phpredis/phpredis/pull/2555

[6.0.2-3]
- cleanup and modernize spec file

[6.0.2-2]
- use valkey on Fedora 41
- add upstream patch for PHP 8.4

php-pecl-rrd
[2.0.3-4]
- build for PHP 8.1 #2070040

[2.0.3-3]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[2.0.3-2]
- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065

[2.0.3-1]
- update to 2.0.3

[2.0.2-1]
- update to 2.0.2

[2.0.1-17]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[2.0.1-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.0.1-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

php-pecl-xdebug3
[3.3.1-1]
- update to 3.3.1 for PHP 8.3

[3.2.2-2]
- drop inet_ntoa usage using upstream patch

[3.2.2-1]
- update to 3.2.2 for PHP 8.2 RHEL-14699

php-pecl-zip
[1.22.3-1]
- update to 1.22.3 for PHP 8.2 RHEL-14699

[1.20.1-1]
- update to 1.20.1 for PHP 8.1 #2070040



From el-errata at oss.oracle.com  Mon Aug 10 22:34:23 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:23 -0700
Subject: [El-errata] ELSA-2026-50827 Important: Oracle Linux 9 ruby:4.0
 security, bug fix, and enhancement update
Message-ID: <mailman.37.1786401277.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50827

http://linux.oracle.com/errata/ELSA-2026-50827.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
ruby-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
ruby-bundled-gems-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
ruby-bundled-gems-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
ruby-default-gems-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
ruby-devel-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
ruby-devel-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
ruby-doc-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-bigdecimal-4.0.1-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-bigdecimal-4.0.1-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-bundler-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-io-console-0.8.2-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-io-console-0.8.2-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-irb-1.16.0-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-json-2.18.0-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-json-2.18.0-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-minitest-6.0.0-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.x86_64.rpm
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpm
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.x86_64.rpm
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm
rubygem-power_assert-3.0.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-psych-5.3.1-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-psych-5.3.1-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-racc-1.8.1-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-racc-1.8.1-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-rake-13.3.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rbs-3.10.0-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
rubygem-rbs-3.10.0-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm
rubygem-rdoc-7.0.4-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rexml-3.4.4-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rss-0.3.2-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygems-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygems-devel-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-test-unit-3.7.5-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-typeprof-0.31.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
ruby-libs-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.i686.rpm
ruby-libs-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.x86_64.rpm

aarch64:
ruby-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
ruby-bundled-gems-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
ruby-default-gems-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
ruby-devel-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
ruby-doc-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-bigdecimal-4.0.1-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-bundler-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-io-console-0.8.2-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-irb-1.16.0-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-json-2.18.0-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-minitest-6.0.0-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.aarch64.rpm
rubygem-mysql2-doc-0.5.7-1.module+el9.8.0+90938+383082f5.noarch.rpm
rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.aarch64.rpm
rubygem-pg-doc-1.6.3-1.module+el9.8.0+90938+383082f5.noarch.rpm
rubygem-power_assert-3.0.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-psych-5.3.1-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-racc-1.8.1-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-rake-13.3.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rbs-3.10.0-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm
rubygem-rdoc-7.0.4-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rexml-3.4.4-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-rss-0.3.2-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygems-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygems-devel-4.0.16-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-test-unit-3.7.5-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
rubygem-typeprof-0.31.1-34.module+el9.8.0+90985+4aa8aa3b.noarch.rpm
ruby-libs-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/ruby-4.0.6-34.module+el9.8.0+90985+4aa8aa3b.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/rubygem-mysql2-0.5.7-1.module+el9.8.0+90938+383082f5.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/rubygem-pg-1.6.3-1.module+el9.8.0+90938+383082f5.src.rpm

Related CVEs:

CVE-2026-27820
CVE-2026-42256
CVE-2026-42257
CVE-2026-47240
CVE-2026-47241
CVE-2026-47242




Description of changes:

ruby
[4.0.6-34]
- Upgrade to Ruby 4.0.6.
  Resolves: RHEL-211301
  Resolves: RHEL-193663

rubygem-mysql2
[0.5.7-1]
- Upgrade to mysql2 0.5.7.
  Related: RHEL-142278

[0.5.5-3]
- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222

[0.5.5-2]
- Adapt tests to openssl 3.2
  Resolves: RHEL-80222

rubygem-pg
[1.6.3-1]
- Upgrade to pg 1.6.3
  Related: RHEL-142278



From el-errata at oss.oracle.com  Mon Aug 10 22:34:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:34:26 -0700
Subject: [El-errata] ELSA-2026-50828 Important: Oracle Linux 9 ruby:3.3
 security, bug fix, and enhancement update
Message-ID: <mailman.38.1786401279.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50828

http://linux.oracle.com/errata/ELSA-2026-50828.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.3.12-8.module+el9.8.0+90984+bac48209.i686.rpm
ruby-3.3.12-8.module+el9.8.0+90984+bac48209.x86_64.rpm
ruby-bundled-gems-3.3.12-8.module+el9.8.0+90984+bac48209.i686.rpm
ruby-bundled-gems-3.3.12-8.module+el9.8.0+90984+bac48209.x86_64.rpm
ruby-default-gems-3.3.12-8.module+el9.8.0+90984+bac48209.noarch.rpm
ruby-devel-3.3.12-8.module+el9.8.0+90984+bac48209.i686.rpm
ruby-devel-3.3.12-8.module+el9.8.0+90984+bac48209.x86_64.rpm
ruby-doc-3.3.12-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-bigdecimal-3.1.5-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-bigdecimal-3.1.5-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-bundler-2.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-io-console-0.7.1-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-io-console-0.7.1-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-irb-1.13.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-json-2.7.2-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-json-2.7.2-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-minitest-5.20.0-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-mysql2-0.5.5-3.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-mysql2-doc-0.5.5-3.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-pg-1.5.4-2.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-pg-doc-1.5.4-2.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-power_assert-2.0.3-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-psych-5.1.2-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-psych-5.1.2-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-racc-1.7.3-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-racc-1.7.3-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-rake-13.1.0-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rbs-3.4.0-8.module+el9.8.0+90984+bac48209.i686.rpm
rubygem-rbs-3.4.0-8.module+el9.8.0+90984+bac48209.x86_64.rpm
rubygem-rdoc-6.6.3.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rexml-3.4.4-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rss-0.3.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygems-3.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygems-devel-3.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-test-unit-3.6.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-typeprof-0.21.9-8.module+el9.8.0+90984+bac48209.noarch.rpm
ruby-libs-3.3.12-8.module+el9.8.0+90984+bac48209.i686.rpm
ruby-libs-3.3.12-8.module+el9.8.0+90984+bac48209.x86_64.rpm

aarch64:
ruby-3.3.12-8.module+el9.8.0+90984+bac48209.aarch64.rpm
ruby-bundled-gems-3.3.12-8.module+el9.8.0+90984+bac48209.aarch64.rpm
ruby-default-gems-3.3.12-8.module+el9.8.0+90984+bac48209.noarch.rpm
ruby-devel-3.3.12-8.module+el9.8.0+90984+bac48209.aarch64.rpm
ruby-doc-3.3.12-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-bigdecimal-3.1.5-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-bundler-2.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-io-console-0.7.1-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-irb-1.13.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-json-2.7.2-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-minitest-5.20.0-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-mysql2-0.5.5-3.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-mysql2-doc-0.5.5-3.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-pg-1.5.4-2.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-pg-doc-1.5.4-2.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-power_assert-2.0.3-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-psych-5.1.2-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-racc-1.7.3-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-rake-13.1.0-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rbs-3.4.0-8.module+el9.8.0+90984+bac48209.aarch64.rpm
rubygem-rdoc-6.6.3.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rexml-3.4.4-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-rss-0.3.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygems-3.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygems-devel-3.5.22-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-test-unit-3.6.1-8.module+el9.8.0+90984+bac48209.noarch.rpm
rubygem-typeprof-0.21.9-8.module+el9.8.0+90984+bac48209.noarch.rpm
ruby-libs-3.3.12-8.module+el9.8.0+90984+bac48209.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/ruby-3.3.12-8.module+el9.8.0+90984+bac48209.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/rubygem-mysql2-0.5.5-3.module+el9.8.0+90984+bac48209.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/rubygem-pg-1.5.4-2.module+el9.8.0+90984+bac48209.src.rpm

Related CVEs:

CVE-2026-27820
CVE-2026-42256
CVE-2026-42257
CVE-2026-47240
CVE-2026-47241
CVE-2026-47242




Description of changes:

ruby
[3.3.12-8]
- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-171335
  Resolves: RHEL-193665

rubygem-mysql2
[0.5.5-3]
- Disable tests on the 32bit platforms ix86.
  Related: RHEL-80222

[0.5.5-2]
- Adapt tests to openssl 3.2
  Resolves: RHEL-80222

[0.5.5-1]
- Upgrade to mysql2 0.5.5.
  Related: RHEL-17089

rubygem-pg
[-1.5.4-2]
- Fix encoding issue in spec suite.
  Resolves: RHEL-159199



From el-errata at oss.oracle.com  Mon Aug 10 22:35:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:35:40 -0700
Subject: [El-errata] ELBA-2026-500147 Oracle Linux 9 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.39.1786401354.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500147

http://linux.oracle.com/errata/ELBA-2026-500147.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.1.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.1.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.1.el9uek.src.rpm



Description of changes:

[5.15.0-322.203.3.4.1]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39558744]



From el-errata at oss.oracle.com  Mon Aug 10 22:37:13 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:37:13 -0700
Subject: [El-errata] ELSA-2026-500150 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.40.1786401447.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500150

http://linux.oracle.com/errata/ELSA-2026-500150.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el9uek.x86_64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el9uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el9uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-205.92.4.2.el9uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-205.92.4.2.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-6.12.0-205.92.4.2.el9uek.src.rpm

Related CVEs:

CVE-2025-38271
CVE-2025-38314
CVE-2025-39733
CVE-2025-39768
CVE-2025-39874
CVE-2025-39908
CVE-2025-40238
CVE-2025-68373
CVE-2025-68790
CVE-2026-31663
CVE-2026-43467
CVE-2026-46242
CVE-2026-46316
CVE-2026-46331
CVE-2026-52943
CVE-2026-53125
CVE-2026-53359
CVE-2026-53362
CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[6.12.0-205.92.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39844842]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39844812]  {CVE-2026-68480}
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39844799]  {CVE-2026-64561}

[6.12.0-205.92.4.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816011]  {CVE-2026-64531}
- Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39812699]
- virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39812697]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39812085]

[6.12.0-205.92.4]
- f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() (Yongpeng Yang)
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Ji'an Zhou)
- MIPS: smp: report dying CPU to RCU in stop_this_cpu() (Jonas Jelonek)
- LoongArch: Report dying CPU to RCU in stop_this_cpu() (Huacai Chen)
- Revert "net: bonding: fix use-after-free in bond_xmit_broadcast()" (Kevin Berry)
- block: fix handling of dead zone write plugs (Damien Le Moal)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- Revert "PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support" (Sasha Levin)
- apparmor: fix use-after-free in rawdata dedup loop (Ruslan Valiyev)
- mmc: dw_mmc-rockchip: Add missing private data for very old controllers (Heiko Stuebner)
- sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long)
- net: ipv6: Make udp_tunnel6_xmit_skb() void (Petr Machata)
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li)
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)
- locking/mutex: Remove wakeups from under mutex::wait_lock (Peter Zijlstra)
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Hem Parekh)
- ipv4: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39738617]
- inet: add indirect call wrapper for getfrag() calls (Eric Dumazet)  [Orabug: 39738617]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad)  [Orabug: 39653091]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad)  [Orabug: 39653091]
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Vasily Gorbik)  [Orabug: 39489132]
- scripts/sorttable: Allow matches to functions before function entry (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Do not over-allocate ftrace memory (Guenter Roeck)  [Orabug: 39489132]
- ftrace: Have ftrace pages output reflect freed pages (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Update the mcount_loc check of skipped entries (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Have mcount rela sort use direct values (Steven Rostedt)  [Orabug: 39489132]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use uint64_t for mcount sorting (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Sym (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Shdr (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Ehdr to union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Make compare_extable() into two functions (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unneeded Elf_Rel (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unused write functions (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unused macro defines (Steven Rostedt)  [Orabug: 39489132]
- xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39262397]  {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39262397]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39531622]  {CVE-2026-46316}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang)  [Orabug: 39681042]
- mm: enforce resource limits for reserved VA mappings (Jianfeng Wang)  [Orabug: 39681042]
- ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39686467]  {CVE-2026-53362}
- xen/ovmapi: terminate values passed to xenbus_write (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: free queued events on release (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: prevent duplicate app registration (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: avoid raw user pointer access in get_next_event (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: reject oversized posted event payloads (Joe Jin)  [Orabug: 39726311]

[6.12.0-205.92.3]
- soc/pensando/bsm: add read-only access to A35 BSM from N1 (Hiren Mehta) [Orabug: 39710757]
- uek-rpm: update Salina emb4 drivers (Joseph Dobosenski) [Orabug: 39692334]
- Enable psci on UEK8 emb4 platform (Joseph Dobosenski) [Orabug: 39692334]
- arm64: amd: add dtb Makefile entries and Pensando defconfigs (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Salina SoC and boards (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Elba, Giglio and Deschutes boards (Brad Larson) [Orabug: 39692334]
- perf: arm-cmn: enable CMN PMU on AMD Pensando Salina (Brad Larson) [Orabug: 39692334]
- net: mctp-i2c: fix dynamic debug logging (Brad Larson) [Orabug: 39692334]
- hwmon: pmbus: add LTC3888 and TPS53659 support (Brad Larson) [Orabug: 39692334]
- mmc: sdhci-cadence: add AMD Pensando bounce buffer and HS400-ES support (Brad Larson) [Orabug: 39692334]
- spi: add AMD Pensando CPLD SPI multiplexer and Salina dw support (Brad Larson) [Orabug: 39692334]
- spi: cadence-quadspi: fix indirect write timeout on AMD Pensando (Brad Larson) [Orabug: 39692334]
- i2c: add AMD Pensando CPLD RD1173 SPI-to-I2C driver (Brad Larson) [Orabug: 39692334]
- i2c: designware: add AMD Pensando support (Brad Larson) [Orabug: 39692334]
- uio: add AMD Pensando UIO drivers (Brad Larson) [Orabug: 39692334]
- rtc: add AMD Pensando ELBA CPLD RTC (Brad Larson) [Orabug: 39692334]
- reset: add AMD Pensando ELBASR reset controller (Brad Larson) [Orabug: 39692334]
- mfd: add AMD Pensando ELBASR CPLD (Brad Larson) [Orabug: 39692334]
- EDAC: add AMD Pensando Elba and Salina memory controllers (Brad Larson) [Orabug: 39692334]
- irqchip: add AMD Pensando SoC interrupt controller (Brad Larson) [Orabug: 39692334]
- soc: pensando: add AMD Pensando SoC service drivers (Brad Larson) [Orabug: 39692334]
- arm64: traps: report AMD Pensando async SError as SIGBUS (Brad Larson) [Orabug: 39692334]
- dt-bindings: add AMD Pensando Elba, Giglio and Salina SoCs (Brad Larson) [Orabug: 39692334]
- Revert "mmc: sdhci-cadence: Support ADMA with bounce buffers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/ltc2978) Add support for ltc3888" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/tps53679) Add support for tps53659" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: rd1173: Add Lattice SPI to I2C bus driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: dts: Add AMD Pensando SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "soc/pensando: Add AMD Pensando SoC drivers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: defconfig: Add AMD Pensando defconfig" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Add AMD Pensando UIO support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Add AMD Pensando IRQ driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mtd: spi-nor: winbond: Add support for W25Q02NW" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "EDAC/elba: Add AMD Pensando Elba/Giglio SoC EDAC driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mfd: Add AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "rtc: elbacpld: Support RTC in AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "spi: dw-mmio: Add AMD Pensando Salina SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Enable platform SError handler" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "perf/arm-cmn: Enable AMD Pensando Salina SoC CMN PMU driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: designware: Support stuck SDA line recovery" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mmc: core: Use HPI to interrupt lengthy cache flush (#495)" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Fix partial of_iomap() leak on error (#505)" (Joseph Dobosenski) [Orabug: 39692334]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673856,39686459] {CVE-2026-53359}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659418]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages uek8 (Praveen Kumar Kannoju) [Orabug: 39594873]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (David Howells) [Orabug: 39580474]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567285,39668752] {CVE-2026-46331}
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet) [Orabug: 39567285] {CVE-2026-46331}
- uek: kabi: update x86_64/aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 39531375]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480767]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- mm/truncate: make partial truncation folio split aware of min_order (Jane Chu) [Orabug: 39215509]
- mm/memory-failure: improve large block size folio handling (Jane Chu) [Orabug: 39215509]
- mm/huge_memory: add split_huge_page_to_order() (Jane Chu) [Orabug: 39215509]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209761]

[6.12.0-205.92.2]
- bnxt_en: bring back rtnl lock in bnxt_shutdown (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: add missing netdev lock management to bnxt_dl_reload_up (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: request unconditional ops lock (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: switch to netif_close (Stanislav Fomichev) [Orabug: 39589466]
- md: fix array_state=clear sysfs deadlock (Yu Kuai) [Orabug: 39190489,39668924] {CVE-2026-53125}
- md: fix return value of mddev_trylock (Xiao Ni) [Orabug: 39190489]
- md: avoid repeated calls to del_gendisk (Xiao Ni) [Orabug: 39190489,39668918] {CVE-2025-68373}
- md: delete mddev kobj before deleting gendisk kobj (Xiao Ni) [Orabug: 39190489]
- md: add legacy_async_del_gendisk mode (Xiao Ni) [Orabug: 39190489]
- md: fix create on open mddev lifetime regression (Yu Kuai) [Orabug: 39190489]
- md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni) [Orabug: 39190489]
- md: call del_gendisk in control path (Xiao Ni) [Orabug: 39190489]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619387,39639984,39656679] {CVE-2026-52943}

[6.12.0-205.92.1]
- uek-rpm: generate symtypes during early FIPS module build (Saeed Mirzamohammadi) [Orabug: 39576442]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38111998]
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39084664]
- uek-rpm: Enable MLXREG_DPU module (Alexandre Chartre) [Orabug: 38667152]
- net/mlx5: Fix crash when moving to switchdev mode (Patrisious Haddad) [Orabug: 38667152,39344020] {CVE-2026-43467}
- net/mlx5: Fix double unregister of HCA_PORTS component (Gerd Bayer) [Orabug: 38667152,39590860] {CVE-2025-68790}
- net/mlx5: Fix IPsec cleanup over MPV device (Patrisious Haddad) [Orabug: 38667152,38730559] {CVE-2025-40238}
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Lama Kayal) [Orabug: 38667152]
- net/mlx5: HWS, prevent rehash from filling up the queues (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix complex rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152,39590850] {CVE-2025-39768}
- net/mlx5: HWS, fix simple rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Track matcher sizes individually (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Create STEs directly from matcher (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Export rule skip logic (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Refactor devcom to return NULL on failure (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Add net namespace support to devcom (Shay Drory) [Orabug: 38667152]
- net/mlx5: Lag, move devcom registration to LAG layer (Shay Drory) [Orabug: 38667152]
- net/mlx5: Refactor devcom to use match attributes (Shay Drory) [Orabug: 38667152]
- platform/mellanox: Fix spelling and comment clarity in Mellanox drivers (Alok Tiwari) [Orabug: 38667152]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Dan Carpenter) [Orabug: 38667152]
- RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Arnd Bergmann) [Orabug: 38667152]
- net/mlx5: HWS, make sure the uplink is the last destination (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Init mutex on the correct path (Vlad Dogaru) [Orabug: 38667152]
- mlxsw: core_thermal: Constify struct thermal_zone_device_ops (Christophe Jaillet) [Orabug: 38667152]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Dan Carpenter) [Orabug: 38667152]
- net/mlx5e: Allow setting MAC address of representors (Mark Bloch) [Orabug: 38667152]
- RDMA/mlx5: Avoid flexible array warning (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: avoid 64-bit division (Arnd Bergmann) [Orabug: 38667152]
- i2c-mlxbf: Improve I2C bus timing configuration (Chris Babroski) [Orabug: 38667152]
- i2c-mlxbf: Add repeated start condition support (Chris Babroski) [Orabug: 38667152]
- net/mlx5e: Don't drop RTNL during firmware flash (Cosmin Ratiu) [Orabug: 38667152]
- net/mlx5: HWS, handle modify header actions dependency (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, register reformat actions with fw (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: SWS, fix reformat id error handling (Vlad Dogaru) [Orabug: 38667152]
- selftests: net: validate team flags propagation (Stanislav Fomichev) [Orabug: 38667152]
- vfio/mlx5: Enable the DMA link API (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Rewrite create mkey flow to allow better code reuse (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Explicitly use number of pages instead of allocated length (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: Use str_read_write() helper (Fengwei) [Orabug: 38667152]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Use to_delayed_work() (Chen Ni) [Orabug: 38667152]
- net: mlxsw: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean) [Orabug: 38667152]
- net/mlx5: HWS, dump bad completion details (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, rework rehash loop (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix redundant extension of action templates (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix counting of rules in the matcher (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, force rehash when rule insertion failed (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, support complex matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, introduce isolated matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose polling function in header file (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, add definer function to get field name str (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: support software TX timestamp (Stanislav Fomichev) [Orabug: 38667152]
- RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Leon Romanovsky) [Orabug: 38667152]
- RDMA/umem: Store ODP access mask information in PFN (Leon Romanovsky) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Fix smatch warnings (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Fix .items in nvsw_sn2201_busbar_hotplug (Nathan Chancellor) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Add support for new system flavour (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: mlx-platform: Add support for new Nvidia system (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Cosmetic changes to improve code style (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Introduce support of Nvidia smart switch (Vadim Pasternak) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Add initial support for Nvidia DPU (Vadim Pasternak) [Orabug: 38667152]
- net/mlx4_core: Adjust allocation type for buddy->bits (Kees Cook) [Orabug: 38667152]
- net/mlx5: HWS, Disallow matcher IP version mixing (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Colin Ian King) [Orabug: 38667152]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kees Cook) [Orabug: 38667152]
- bonding: Fix multiple long standing offload races (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Remove unneeded device check from validate_xmit_xfrm (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu) [Orabug: 38667152]
- net: ptp: introduce .supported_perout_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- net: ptp: introduce .supported_extts_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- igb: reject invalid external timestamp requests for 82580-based HW (Jacob Keller) [Orabug: 38667152]
- platform/mellanox: Rename field to improve code readability (Vadim Pasternak) [Orabug: 38667152]
- net/mlx5: HWS, Export action STE tables to debugfs (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Free unused action STE tables (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup matcher action STE table (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Use the new action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Implement action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix pool size optimization (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Add fullness tracking to pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup after pool refactoring (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Refactor pool implementation (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Make pool single resource (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Remove unused element array (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix matcher action template attach (Vlad Dogaru) [Orabug: 38667152]
- RDMA: Replace msecs_to_jiffies with secs_to_jiffies for?timeout (Peng Jiang) [Orabug: 38667152]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Easwar Hariharan) [Orabug: 38667152]
- gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Joshua Washington) [Orabug: 38667152]
- net: lan743x: reject unsupported external timestamp requests (Jacob Keller) [Orabug: 38667152]
- renesas: reject PTP_STRICT_FLAGS as unsupported (Jacob Keller) [Orabug: 38667152]
- eth: bnxt: remove most dependencies on RTNL (Stanislav Fomichev) [Orabug: 38667152]
- dma-mapping: remove an outdated comment from dma-map-ops.h (Sui Jingfeng) [Orabug: 38667152]
- Revert "RDMA/core: Silence oversized kvmalloc() warning" (Mikhael Goikhman) [Orabug: 38667152]
- eth: bnxt: fix deadlock when xdp is attached or detached (Taehee Yoo) [Orabug: 38667152]
- xdp: create locked/unlocked instances of xdp redirect target setters (Joshua Washington) [Orabug: 38667152]
- gve: introduce config-based allocation for XDP (Joshua Washington) [Orabug: 38667152]
- gve: Add RSS cache for non RSS device option scenario (Ziwei Xiao) [Orabug: 38667152]
- virtio_pci: drop kernel.h (Michael S. Tsirkin) [Orabug: 38667152]
- dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Pranjal Shrivastava) [Orabug: 38667152]
- macsec: sync features on RTM_NEWLINK (Stanislav Fomichev) [Orabug: 38667152,39590858] {CVE-2025-39874}
- net: dev_ioctl: take ops lock in hwtstamp lower paths (Carolina Jubran) [Orabug: 38667152,39590854] {CVE-2025-39908}
- hamradio: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- net: lapbether: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- macsec: set IFF_UNICAST_FLT priv flag (Stanislav Fomichev) [Orabug: 38667152]
- team: replace team lock with rtnl lock (Stanislav Fomichev) [Orabug: 38667152,39590857] {CVE-2025-39733}
- net: prevent a NULL deref in rtnl_create_link() (Eric Dumazet) [Orabug: 38667152,39590851] {CVE-2025-38271}
- hv_netvsc: fix potential deadlock in netvsc_vf_setxdp() (Saurabh Singh Sengar) [Orabug: 38667152]
- virtio-pci: Fix result size returned for the admin command completion (Israel Rukshin) [Orabug: 38667152,39590859] {CVE-2025-38314}
- af_packet: move notifier's packet_dev_mc out of rcu critical section (Stanislav Fomichev) [Orabug: 38667152]
- team: grab team lock during team_change_rx_flags (Stanislav Fomichev) [Orabug: 38667152]
- net: devmem: fix kernel panic when netlink socket close after module unload (Taehee Yoo) [Orabug: 38667152]
- net: Lock lower level devices when updating features (Cosmin Ratiu) [Orabug: 38667152]
- net: add missing instance lock to dev_set_promiscuity (Stanislav Fomichev) [Orabug: 38667152]
- net: Lock netdevices during dev_shutdown (Cosmin Ratiu) [Orabug: 38667152]
- net: fix the missing unlock for detached devices (Jakub Kicinski) [Orabug: 38667152]
- virtio_pci: Use self group type for cap commands (Daniel Jurgens) [Orabug: 38667152]
- net: don't try to ops lock uninitialized devs (Jakub Kicinski) [Orabug: 38667152]
- net: don't mix device locking in dev_close_many() calls (Jakub Kicinski) [Orabug: 38667152]
- bonding: hold ops lock around get_link (Stanislav Fomichev) [Orabug: 38667152]
- rtnetlink: Fix bad unlock balance in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- bpf: add missing ops lock around dev_xdp_attach_link (Stanislav Fomichev) [Orabug: 38667152]
- eth: gve: add missing netdev locks on reset and shutdown paths (Jakub Kicinski) [Orabug: 38667152]
- net: fix use-after-free in the netdev_nl_sock_priv_destroy() (Taehee Yoo) [Orabug: 38667152]
- net: lapbether: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- net: move replay logic to tc_modify_qdisc (Stanislav Fomichev) [Orabug: 38667152]
- hamradio: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- bpf: fix a possible NULL deref in bpf_map_offload_map_alloc() (Eric Dumazet) [Orabug: 38667152]
- net: Prevent use after free in netif_napi_set_irq_locked() (Dan Carpenter) [Orabug: 38667152]
- iavf: fix circular lock dependency with netdev_lock (Jacob Keller) [Orabug: 38667152]
- s390/qeth: move netif_napi_add_tx() and napi_enable() from under BH (Alexandra Winter) [Orabug: 38667152]
- iavf: Fix a locking bug in an error path (Bart Van Assche) [Orabug: 38667152]
- wifi: mt76: move napi_enable() from under BH (Jakub Kicinski) [Orabug: 38667152]
- eth: via-rhine: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: niu: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: 8139too: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- net: mvneta: fix locking in mvneta_cpu_online() (Harshit Mogalapalli) [Orabug: 38667152]
- net: destroy dev->lock later in free_netdev() (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Christophe Jaillet) [Orabug: 38667152]
- xdp: double protect netdev->xdp_flags with netdev->lock (Jakub Kicinski) [Orabug: 38667152]
- netdev: add "ops compat locking" helpers (Jakub Kicinski) [Orabug: 38667152]
- net: designate XSK pool pointers in queues as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: avoid potential race between netdev_get_by_index_lock() and netns switch (Jakub Kicinski) [Orabug: 38667152]
- net: hold instance lock during NETDEV_REGISTER/UP (Stanislav Fomichev) [Orabug: 38667152]
- net: switch to netif_disable_lro in inetdev_init (Stanislav Fomichev) [Orabug: 38667152]
- net: protect rxq->mp_params with the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue -> napi linking as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue counts as "double ops protected" by instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: explain "protection types" for the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: constify dev pointer in misc instance lock helpers (Jakub Kicinski) [Orabug: 38667152]
- net: remove netif_set_real_num_rx_queues() helper for when SYSFS=n (Jakub Kicinski) [Orabug: 38667152]
- net: bubble up taking netdev instance lock to callers of net_devmem_unbind_dmabuf() (Jakub Kicinski) [Orabug: 38667152]
- net: reorder dev_addr_sem lock (Stanislav Fomichev) [Orabug: 38667152]
- Revert "net: replace dev_addr_sem with netdev instance lock" (Stanislav Fomichev) [Orabug: 38667152]
- net: drop rtnl_lock for queue_mgmt operations (Stanislav Fomichev) [Orabug: 38667152]
- net: add granular lock for the netdev netlink socket (Stanislav Fomichev) [Orabug: 38667152]
- net: create netdev_nl_sock to wrap bindings list (Stanislav Fomichev) [Orabug: 38667152]
- net: add helpers for setting a memory provider on an rx queue (David Wei) [Orabug: 38667152]
- net: page_pool: add memory provider helpers (Pavel Begunkov) [Orabug: 38667152]
- net: prepare for non devmem TCP memory providers (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add a mp hook to unregister_netdevice* (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add callback for mp info printing (Pavel Begunkov) [Orabug: 38667152]
- netdev: add io_uring memory provider info (David Wei) [Orabug: 38667152]
- net: generalise net_iov chunk owners (Pavel Begunkov) [Orabug: 38667152]
- net: prefix devmem specific helpers (Pavel Begunkov) [Orabug: 38667152]
- page_pool: disable sync for cpu for dmabuf memory provider (Mina Almasry) [Orabug: 38667152]
- net: page_pool: create page_pool_alloc_netmem (Mina Almasry) [Orabug: 38667152]
- net: page_pool: rename page_pool_alloc_netmem to *_netmems (Mina Almasry) [Orabug: 38667152]
- net: move misc netdev_lock flavors to a separate header (Jakub Kicinski) [Orabug: 38667152]
- net: add option to request netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: replace dev_addr_sem with netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_bpf (Stanislav Fomichev) [Orabug: 38667152]
- net: disallow setup single buffer XDP when tcp-data-split is enabled. (Taehee Yoo) [Orabug: 38667152]
- net: ethtool: add hds_config member in ethtool_netdev_state (Taehee Yoo) [Orabug: 38667152]
- net: hold netdev instance lock during sysfs operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ioctl operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during rtnetlink operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during queue operations (Stanislav Fomichev) [Orabug: 38667152]
- net: move aRFS rmap management and CPU affinity to core (Ahmed Zaki) [Orabug: 38667152]
- net: warn if NAPI instance wasn't shut down (Jakub Kicinski) [Orabug: 38667152]
- net: protect napi->irq with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- bnxt: Add support for persistent NAPI config (Joe Damato) [Orabug: 38667152]
- gve: Map NAPI instances to queues (Joe Damato) [Orabug: 38667152]
- gve: Map IRQs to NAPI instances (Joe Damato) [Orabug: 38667152]
- net: devmem: don't call queue stop / start when the interface is down (Jakub Kicinski) [Orabug: 38667152]
- net: refactor netdev_rx_queue_restart() to use local qops (Jakub Kicinski) [Orabug: 38667152]
- net: hold netdev instance lock during qdisc ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: sched: wrap doit/dumpit methods (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during nft ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_open/ndo_stop (Stanislav Fomichev) [Orabug: 38667152]
- net: plumb extack in __dev_change_net_namespace() (Nicolas Dichtel) [Orabug: 38667152]
- net: advertise netns_immutable property via netlink (Nicolas Dichtel) [Orabug: 38667152]
- net: protect threaded status of NAPI with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect NAPI enablement with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect netdev->napi_list with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: make sure we retain NAPI ordering on netdev->napi_list (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev->up protected by netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: add helpers for lookup and walking netdevs under netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: warn during dump if NAPI list is not sorted (Jakub Kicinski) [Orabug: 38667152]
- net: make netdev_lock() protect netdev->reg_state (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev_lock() / netdev_unlock() helpers (Jakub Kicinski) [Orabug: 38667152]
- eth: iavf: extend the netdev_lock usage (Jakub Kicinski) [Orabug: 38667152]
- net: cleanup init_dummy_netdev_core() (Jakub Kicinski) [Orabug: 38667152]
- net: remove init_dummy_netdev() (Jakub Kicinski) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Return int from rtnl_af_register(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_dellink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move ops->validate to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call validate_linkmsg() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Kuniyuki Iwashima) [Orabug: 38667152]
- iavf: add support to exchange qos capabilities (Sudheer Mogilappagari) [Orabug: 38667152]
- testing: net-drv: add basic shaper test (Paolo Abeni) [Orabug: 38667152]
- iavf: Add net_shaper_ops support (Sudheer Mogilappagari) [Orabug: 38667152]
- mm/hmm: provide generic DMA managing logic (Leon Romanovsky) [Orabug: 38667152]
- mm/hmm: let users to tag specific PFN with DMA mapped bit (Leon Romanovsky) [Orabug: 38667152]
- docs: core-api: document the IOVA-based API (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: add a dma_need_unmap helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Implement link/unlink ranges API (Leon Romanovsky) [Orabug: 38667152]
- iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Provide an interface to allow allocate IOVA (Leon Romanovsky) [Orabug: 38667152]
- iommu: add kernel-doc for iommu_unmap_fast (Leon Romanovsky) [Orabug: 38667152]
- iommu: generalize the batched sync after map interface (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Christoph Hellwig) [Orabug: 38667152]
- PCI/P2PDMA: Refactor the p2pdma mapping helpers (Christoph Hellwig) [Orabug: 38667152]
- net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Kees Cook) [Orabug: 38667152]
- compiler_types: Introduce __nonstring_array (Kees Cook) [Orabug: 38667152]
- net: freescale: use ethtool string helpers (Rosen Penev) [Orabug: 38667152]
- vfio/pci: drop nth_page() usage within SG entry (David Hildenbrand) [Orabug: 38667152]
- mm: alloc_pages_bulk: rename API (Luiz Capitulino) [Orabug: 38667152]
- mm: alloc_pages_bulk_noprof: drop page_list argument (Luiz Capitulino) [Orabug: 38667152]
- vfio/virtio: Add PRE_COPY support for live migration (Yishai Hadas) [Orabug: 38667152]
- vfio/virtio: Add support for the basic live migration functionality (Yishai Hadas) [Orabug: 38667152]
- virtio-pci: Introduce APIs to execute device parts admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Manage device and driver capabilities via the admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Extend the admin command to include the result size (Yishai Hadas) [Orabug: 38667152]
- virtio_pci: Introduce device parts access commands (Yishai Hadas) [Orabug: 38667152]



From el-errata at oss.oracle.com  Mon Aug 10 22:39:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:39:58 -0700
Subject: [El-errata] ELBA-2026-500144 Oracle Linux 10 nodejs24 bug fix update
Message-ID: <mailman.43.1786401627.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500144

http://linux.oracle.com/errata/ELBA-2026-500144.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs24-24.18.0-3.0.2.el10_2.x86_64.rpm
nodejs24-devel-24.18.0-3.0.2.el10_2.x86_64.rpm
nodejs24-docs-24.18.0-3.0.2.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-3.0.2.el10_2.x86_64.rpm
nodejs24-libs-24.18.0-3.0.2.el10_2.x86_64.rpm
nodejs24-npm-11.16.0-1.24.18.0.3.0.2.el10_2.noarch.rpm

aarch64:
nodejs24-24.18.0-3.0.2.el10_2.aarch64.rpm
nodejs24-devel-24.18.0-3.0.2.el10_2.aarch64.rpm
nodejs24-docs-24.18.0-3.0.2.el10_2.noarch.rpm
nodejs24-full-i18n-24.18.0-3.0.2.el10_2.aarch64.rpm
nodejs24-libs-24.18.0-3.0.2.el10_2.aarch64.rpm
nodejs24-npm-11.16.0-1.24.18.0.3.0.2.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs24-24.18.0-3.0.2.el10_2.src.rpm



Description of changes:

[1:24.18.0-3.0.2]
- Add c-ares as dependency [orabug 39781256]



From el-errata at oss.oracle.com  Mon Aug 10 22:40:07 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:07 -0700
Subject: [El-errata] ELSA-2026-52675 Moderate: Oracle Linux 10 libarchive
 security update
Message-ID: <mailman.44.1786401629.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52675

http://linux.oracle.com/errata/ELSA-2026-52675.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
bsdtar-3.7.7-10.el10_2.x86_64.rpm
libarchive-3.7.7-10.el10_2.x86_64.rpm
libarchive-devel-3.7.7-10.el10_2.x86_64.rpm

aarch64:
bsdtar-3.7.7-10.el10_2.aarch64.rpm
libarchive-3.7.7-10.el10_2.aarch64.rpm
libarchive-devel-3.7.7-10.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/libarchive-3.7.7-10.el10_2.src.rpm

Related CVEs:

CVE-2026-14164




Description of changes:

[3.7.7-10]
- Related: CVE-2026-14164

[3.7.7-9]
- Resolves: CVE-2026-14164



From el-errata at oss.oracle.com  Mon Aug 10 22:39:57 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:39:57 -0700
Subject: [El-errata] ELBA-2026-500139 Oracle Linux 10 nodejs22 bug fix update
Message-ID: <mailman.45.1786401654.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500139

http://linux.oracle.com/errata/ELBA-2026-500139.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-devel-22.23.1-4.0.1.el10_2.x86_64.rpm
nodejs-docs-22.23.1-4.0.1.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-4.0.1.el10_2.x86_64.rpm
nodejs-libs-22.23.1-4.0.1.el10_2.x86_64.rpm
nodejs-npm-10.9.8-1.22.23.1.4.0.1.el10_2.x86_64.rpm
nodejs-22.23.1-4.0.1.el10_2.x86_64.rpm

aarch64:
nodejs-devel-22.23.1-4.0.1.el10_2.aarch64.rpm
nodejs-docs-22.23.1-4.0.1.el10_2.noarch.rpm
nodejs-full-i18n-22.23.1-4.0.1.el10_2.aarch64.rpm
nodejs-libs-22.23.1-4.0.1.el10_2.aarch64.rpm
nodejs-npm-10.9.8-1.22.23.1.4.0.1.el10_2.aarch64.rpm
nodejs-22.23.1-4.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs22-22.23.1-4.0.1.el10_2.src.rpm



Description of changes:

[1:22.23.1-4.0.1]
- Add c-ares as dependency [orabug 39781219]



From el-errata at oss.oracle.com  Mon Aug 10 22:40:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:06 -0700
Subject: [El-errata] ELSA-2026-51295 Moderate: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.46.1786401657.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51295

http://linux.oracle.com/errata/ELSA-2026-51295.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.44.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.44.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.44.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.44.1.el10_2.x86_64.rpm
libperf-6.12.0-211.44.1.el10_2.x86_64.rpm
perf-6.12.0-211.44.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.44.1.el10_2.x86_64.rpm
rtla-6.12.0-211.44.1.el10_2.x86_64.rpm
rv-6.12.0-211.44.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.44.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.44.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.44.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.44.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.44.1.el10_2.aarch64.rpm
libperf-6.12.0-211.44.1.el10_2.aarch64.rpm
perf-6.12.0-211.44.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.44.1.el10_2.aarch64.rpm
rtla-6.12.0-211.44.1.el10_2.aarch64.rpm
rv-6.12.0-211.44.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.44.1.el10_2.src.rpm

Related CVEs:

CVE-2026-43186




Description of changes:

[6.12.0-211.44.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.44.1]
- ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-193134]
- ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-193134]
- ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-193134]
- ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-193134]
- ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-193134]
- ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-193134]
- ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-193134]
- ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-193134]
- ice: add dpll peer notification for paired SMA and U.FL pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing dpll notifications for SW pins (Jakub Ramaseuski) [RHEL-193134]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Jakub Ramaseuski) [RHEL-193134]
- ice: fix missing SMA pin initialization in DPLL subsystem (Jakub Ramaseuski) [RHEL-193134]
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (Jakub Ramaseuski) [RHEL-193134]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ready bitmap check for non-E822 devices (Jakub Ramaseuski) [RHEL-193134]
- ice: perform PHY soft reset for E825C ports at initialization (Jakub Ramaseuski) [RHEL-193134]
- ice: fix timestamp interrupt configuration for E825C (Jakub Ramaseuski) [RHEL-193134]
- ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-193134]
- ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-193134]
- ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-193134]
- ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-193134]
- ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-193134]
- Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-193134]
- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186345]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186345]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186345]
- ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() (CKI Backport Bot) [RHEL-174197] {CVE-2026-43186}



From el-errata at oss.oracle.com  Mon Aug 10 22:40:00 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:00 -0700
Subject: [El-errata] ELBA-2026-50146-0 Oracle Linux 10 selinux-policy bug
 fix and enhancement update
Message-ID: <mailman.47.1786401657.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50146-0

http://linux.oracle.com/errata/ELBA-2026-50146-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-devel-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm

aarch64:
selinux-policy-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-devel-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-doc-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-mls-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-mls-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-sandbox-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-targeted-42.1.18-4.0.1.el10_2.2.noarch.rpm
selinux-policy-targeted-extra-42.1.18-4.0.1.el10_2.2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/selinux-policy-42.1.18-4.0.1.el10_2.2.src.rpm



Description of changes:

[42.1.18-4.0.1.el10_2.2]
- Allow systemd_fstab_generator_t to read udev pid files [Orabug: 37139639]
- Allow systemd_fstab_generator_t to read sysfs filesystem [Orabug: 37139639]
- Allow systemd_fstab_generator_t to get attributs of fixed_disk_device_t and
  removable_device_t [Orabug: 37139639]
- Change reference in /etc/selinux/config to point to Oracle doc [Orabug: 36899915]
- Allow user_mail_domain to manage exim_log_t and exim_spool_t link files [Orabug: 36617121]
- Allow exim_t to read exim_log_t and manage exim_spool_t link files [Orabug: 36430005]
- Make import-state work with mls policy [Orabug: 32636699]
- Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
- Add comment for map on lvm_metadata_t. [Orabug: 31405325]
- Make cloud-init work with mls policy [Orabug: 32430460]
- Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
- Make lsmd and rngd work with mls policy [Orabug: 31405378]
- Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
- Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
- Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]

[42.1.18-4.2]
- Remove permissive domain for sshd_session_t and sshd_auth_t
Resolves: RHEL-178897

[42.1.18-4.1]
- Replace "\_" (backslash underscore) with "_" (just underscore)
Resolves: RHEL-171367



From el-errata at oss.oracle.com  Mon Aug 10 22:40:02 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:02 -0700
Subject: [El-errata] ELBA-2026-50154-0 Oracle Linux 10 linux-firmware bug
 fix and enhancement update
Message-ID: <mailman.48.1786401661.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50154-0

http://linux.oracle.com/errata/ELBA-2026-50154-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
iwl1000-firmware-39.31.5.1-999.48.el10.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el10.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el10.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el10.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el10.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el10.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el10.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el10.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el10.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el10.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el10.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-whence-20260615-999.48.gite7eb98af.el10.noarch.rpm
liquidio-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
netronome-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm

aarch64:
iwl1000-firmware-39.31.5.1-999.48.el10.noarch.rpm
iwl100-firmware-39.31.5.1-999.48.el10.noarch.rpm
iwl105-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl135-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl2000-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl2030-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl3160-firmware-25.30.13.0-999.48.el10.noarch.rpm
iwl3945-firmware-15.32.2.9-999.48.el10.noarch.rpm
iwl4965-firmware-228.61.2.24-999.48.el10.noarch.rpm
iwl5000-firmware-8.83.5.1_1-999.48.el10.noarch.rpm
iwl5150-firmware-8.24.2.2-999.48.el10.noarch.rpm
iwl6000-firmware-9.221.4.1-999.48.el10.noarch.rpm
iwl6000g2a-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl6000g2b-firmware-18.168.6.1-999.48.el10.noarch.rpm
iwl6050-firmware-41.28.5.1-999.48.el10.noarch.rpm
iwl7260-firmware-25.30.13.0-999.48.el10.noarch.rpm
iwlax2xx-firmware-20260615-999.48.el10.noarch.rpm
libertas-sd8686-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-sd8787-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-usb8388-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
libertas-usb8388-olpc-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-core-20260615-999.48.gite7eb98af.el10.noarch.rpm
linux-firmware-whence-20260615-999.48.gite7eb98af.el10.noarch.rpm
liquidio-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm
netronome-firmware-20260615-999.48.gite7eb98af.el10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/linux-firmware-20260615-999.48.gite7eb98af.el10.src.rpm



Description of changes:

[20260615-999.48.gite7eb98af.el10]
- Rebase to latest upstream [Orabug: 39563213]



From el-errata at oss.oracle.com  Mon Aug 10 22:40:09 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:09 -0700
Subject: [El-errata] ELSA-2026-52841 Important: Oracle Linux 10
 nodejs-nodemon security update
Message-ID: <mailman.49.1786401661.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52841

http://linux.oracle.com/errata/ELSA-2026-52841.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-nodemon-3.1.14-3.el10_2.noarch.rpm

aarch64:
nodejs-nodemon-3.1.14-3.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nodejs-nodemon-3.1.14-3.el10_2.src.rpm

Related CVEs:

CVE-2026-69152




Description of changes:

[3.1.14-3]
- Fix CVE-2026-69152 - brace-expansion



From el-errata at oss.oracle.com  Mon Aug 10 22:40:04 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:40:04 -0700
Subject: [El-errata] ELSA-2026-33685 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.50.1786401667.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-33685

http://linux.oracle.com/errata/ELSA-2026-33685.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2026-43279
CVE-2026-46090
CVE-2026-46176
CVE-2026-46189




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Mon Aug 10 22:42:53 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:42:53 -0700
Subject: [El-errata] ELBA-2026-51070 Oracle Linux 7 tzdata bug fix and
 enhancement update
Message-ID: <mailman.53.1786401787.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-51070

http://linux.oracle.com/errata/ELBA-2026-51070.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
tzdata-2026c-1.el7.noarch.rpm
tzdata-java-2026c-1.el7.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/tzdata-2026c-1.el7.src.rpm



Description of changes:

[2026c-1]
- Update to tzdata-2026c (RHEL-194104)
  - Alberta moved to permanent -06 on 2026-06-18.
  - Morocco moves to permanent +00 on 2026-09-20.

[2026b-1]
- Update to tzdata-2026b (RHEL-170797)
  - British Columbia?s 2026-03-08 spring forward is expected
    to be its last transition as it moves to permanent -07.

[2026a-1]
- Update to tzdata-2026a (RHEL-154033)
  - Correct the transition times for Moldova.
  - The POSIXRULES option is now obsolete.

[2025c-1]
- Update to tzdata-2025c (RHEL-135159)
  - Update leap seconds file expiration date

[2025b-2]
- Included NEWS file with docs. (RHEL-102379)

[2025b-1]
- Update to tzdata-2025b (RHEL-84741)
  - Chile's Ays?n Region moves from -04/-03
    to -03 year-round, diverging from America/Santiago and
    creating a new zone America/Coyhaique.

[2025a-1]
Update to tzdata-2025a (RHEL-74308)
  - Paraguay is now permanently at -03. This impacts timestamps
    starting on 2025-03-22.
  - Includes improvements to pre-1991 data for the Philippines.
  - Etc/Unknown is now reserved.



From el-errata at oss.oracle.com  Mon Aug 10 22:42:55 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Mon, 10 Aug 2026 15:42:55 -0700
Subject: [El-errata] ELSA-2026-43702 Moderate: Oracle Linux 7 libpng12
 security update
Message-ID: <mailman.54.1786401790.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-43702

http://linux.oracle.com/errata/ELSA-2026-43702.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
libpng12-1.2.50-10.0.3.el7.i686.rpm
libpng12-1.2.50-10.0.3.el7.x86_64.rpm
libpng12-devel-1.2.50-10.0.3.el7.i686.rpm
libpng12-devel-1.2.50-10.0.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/libpng12-1.2.50-10.0.3.el7.src.rpm

Related CVEs:

CVE-2026-33416




Description of changes:

[1.2.50-10.0.3]
- Fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and
  png_set_PLTE [Orabug: 39771480]

[1.2.50-10.0.1]
- Fix CVE-2026-25646: heap buffer overflow in png_set_quantize [Orabug: 39183864]



From el-errata at oss.oracle.com  Tue Aug 11 06:48:19 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Tue, 11 Aug 2026 06:48:19 +0000
Subject: [El-errata] New Ksplice updates for UEKR7 5.15.0 on OL8 and OL9
 (ELSA-2026-500137)
References: <05555e1fb01f42c630cf63d0c39303ee@ksplice.com>
Message-ID: <mailman.55.1786430913.31.el-errata@oss.oracle.com>

Synopsis: ELSA-2026-500137 can now be patched using Ksplice
CVEs: CVE-2026-31598 CVE-2026-46043 CVE-2026-46116 CVE-2026-64531 CVE-2026-64561

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-500137.
More information about this errata can be found at
https://linux.oracle.com/errata/ELSA-2026-500137.html

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR7 5.15.0 on
OL8 and OL9 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2026-31598: Kernel deadlock in OCFS2 filesystem.

* CVE-2026-46043: Out-of-bounds memory access in RDMA RXE driver.

Orabug: 39452260


* CVE-2026-46116: Use-after-free in XFRM.

Orabug: 39460234


* CVE-2026-64531: Out of bounds memory access in Open vSwitch driver.

Orabug: 39816016


* CVE-2026-64561: Use-after-free in KVM shadow pages handling.

Orabug: 39832946


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://oss.oracle.com/pipermail/el-errata/attachments/20260811/efc62ab2/attachment.sig>

From el-errata at oss.oracle.com  Wed Aug 12 18:58:19 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:19 -0700
Subject: [El-errata] ELSA-2026-13895 Important: Oracle Linux 7 sudo security
 update
Message-ID: <mailman.66.1786561112.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-13895

http://linux.oracle.com/errata/ELSA-2026-13895.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
sudo-1.8.23-10.0.3.el7_9.3.x86_64.rpm
sudo-devel-1.8.23-10.0.3.el7_9.3.i686.rpm
sudo-devel-1.8.23-10.0.3.el7_9.3.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/sudo-1.8.23-10.0.3.el7_9.3.src.rpm

Related CVEs:

CVE-2026-35535




Description of changes:

[1.8.23-10.0.3.3]
- Security update for CVE-2026-35535 [Orabug: 39320917]

[1.8.23-10.0.1.3]
- CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:21 -0700
Subject: [El-errata] ELSA-2026-26564 Important: Oracle Linux 7 dovecot
 security update
Message-ID: <mailman.67.1786561115.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-26564

http://linux.oracle.com/errata/ELSA-2026-26564.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
dovecot-2.2.36-8.el7.i686.rpm
dovecot-2.2.36-8.el7.x86_64.rpm
dovecot-devel-2.2.36-8.el7.x86_64.rpm
dovecot-mysql-2.2.36-8.el7.x86_64.rpm
dovecot-pgsql-2.2.36-8.el7.x86_64.rpm
dovecot-pigeonhole-2.2.36-8.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/dovecot-2.2.36-8.el7.src.rpm

Related CVEs:

CVE-2025-59032
CVE-2026-27856
CVE-2026-27857
CVE-2026-27858




Description of changes:

[1:2.2.36-8]
- update release number

[1:2.2.36-7.1]
- fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752)
- fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757)
- fix CVE-2020-12674 crash due to assert in RPA implementation (#1866764)

[1:2.2.36-7]
- generated key was too small (#1086365)



From el-errata at oss.oracle.com  Wed Aug 12 18:58:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:26 -0700
Subject: [El-errata] ELSA-2026-37397 Important: Oracle Linux 7 ruby security
 update
Message-ID: <mailman.68.1786561119.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-37397

http://linux.oracle.com/errata/ELSA-2026-37397.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-2.0.0.648-39.0.1.el7_9.x86_64.rpm
ruby-devel-2.0.0.648-39.0.1.el7_9.x86_64.rpm
ruby-doc-2.0.0.648-39.0.1.el7_9.noarch.rpm
ruby-irb-2.0.0.648-39.0.1.el7_9.noarch.rpm
ruby-libs-2.0.0.648-39.0.1.el7_9.x86_64.rpm
ruby-tcltk-2.0.0.648-39.0.1.el7_9.x86_64.rpm
rubygem-bigdecimal-1.2.0-39.0.1.el7_9.x86_64.rpm
rubygem-io-console-0.4.2-39.0.1.el7_9.x86_64.rpm
rubygem-json-1.7.7-39.0.1.el7_9.x86_64.rpm
rubygem-minitest-4.3.2-39.0.1.el7_9.noarch.rpm
rubygem-psych-2.0.0-39.0.1.el7_9.x86_64.rpm
rubygem-rake-0.9.6-39.0.1.el7_9.noarch.rpm
rubygem-rdoc-4.0.0-39.0.1.el7_9.noarch.rpm
rubygems-2.0.14.1-39.0.1.el7_9.noarch.rpm
rubygems-devel-2.0.14.1-39.0.1.el7_9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/ruby-2.0.0.648-39.0.1.el7_9.src.rpm

Related CVEs:

CVE-2026-42246
CVE-2026-42258




Description of changes:

[2.0.0.648-39.0.1]
- Fix CVE-2026-42246 and CVE-2026-42258 [Orabug: 39711420]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:27 -0700
Subject: [El-errata] ELSA-2026-41904 Important: Oracle Linux 7 evince
 security update
Message-ID: <mailman.69.1786561121.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-41904

http://linux.oracle.com/errata/ELSA-2026-41904.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
evince-3.28.2-10.0.1.el7.x86_64.rpm
evince-browser-plugin-3.28.2-10.0.1.el7.x86_64.rpm
evince-devel-3.28.2-10.0.1.el7.i686.rpm
evince-devel-3.28.2-10.0.1.el7.x86_64.rpm
evince-dvi-3.28.2-10.0.1.el7.x86_64.rpm
evince-libs-3.28.2-10.0.1.el7.i686.rpm
evince-libs-3.28.2-10.0.1.el7.x86_64.rpm
evince-nautilus-3.28.2-10.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/evince-3.28.2-10.0.1.el7.src.rpm

Related CVEs:

CVE-2026-46529




Description of changes:

[3.28.2-10.0.1]
- Fix CVE-2026-46529 [Orabug: 39757172]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:29 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:29 -0700
Subject: [El-errata] ELSA-2026-43575 Moderate: Oracle Linux 7 gnutls
 security update
Message-ID: <mailman.70.1786561123.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-43575

http://linux.oracle.com/errata/ELSA-2026-43575.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
gnutls-3.3.29-9.0.3.el7_9.i686.rpm
gnutls-3.3.29-9.0.3.el7_9.x86_64.rpm
gnutls-c++-3.3.29-9.0.3.el7_9.i686.rpm
gnutls-c++-3.3.29-9.0.3.el7_9.x86_64.rpm
gnutls-dane-3.3.29-9.0.3.el7_9.i686.rpm
gnutls-dane-3.3.29-9.0.3.el7_9.x86_64.rpm
gnutls-devel-3.3.29-9.0.3.el7_9.i686.rpm
gnutls-devel-3.3.29-9.0.3.el7_9.x86_64.rpm
gnutls-utils-3.3.29-9.0.3.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/gnutls-3.3.29-9.0.3.el7_9.src.rpm

Related CVEs:

CVE-2026-3833
CVE-2026-42011
CVE-2026-42012
CVE-2026-42013
CVE-2026-42014
CVE-2026-42015




Description of changes:

[3.3.29-9.0.3]
- Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 [Orabug: 39770407]
- CVE-2026-42011 is not applicable to this baseline.

[3.3.29-9.0.1]
- Regenerate PKCS#11 test certificates [Orabug: 39674042]
- Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 [Orabug: 39674042]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:31 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:31 -0700
Subject: [El-errata] ELSA-2026-47176 Important: Oracle Linux 7
 gstreamer1-plugins-bad-free security update
Message-ID: <mailman.71.1786561126.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47176

http://linux.oracle.com/errata/ELSA-2026-47176.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-bad-free-1.10.4-4.0.3.el7_9.i686.rpm
gstreamer1-plugins-bad-free-1.10.4-4.0.3.el7_9.x86_64.rpm
gstreamer1-plugins-bad-free-devel-1.10.4-4.0.3.el7_9.i686.rpm
gstreamer1-plugins-bad-free-devel-1.10.4-4.0.3.el7_9.x86_64.rpm
gstreamer1-plugins-bad-free-gtk-1.10.4-4.0.3.el7_9.i686.rpm
gstreamer1-plugins-bad-free-gtk-1.10.4-4.0.3.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/gstreamer1-plugins-bad-free-1.10.4-4.0.3.el7_9.src.rpm

Related CVEs:

CVE-2026-52720
CVE-2026-52722




Description of changes:

[1.10.4-4.0.3]
- Security update for CVE-2026-52720 CVE-2026-52722 [Orabug: 39799399]

[1.10.4-4.0.1]
- Security update for CVE-2026-3082 [Orabug: 39199326]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:33 -0700
Subject: [El-errata] ELSA-2026-49513 Important: Oracle Linux 7 dovecot
 security update
Message-ID: <mailman.72.1786561126.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49513

http://linux.oracle.com/errata/ELSA-2026-49513.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
dovecot-2.2.36-8.0.3.el7.i686.rpm
dovecot-2.2.36-8.0.3.el7.x86_64.rpm
dovecot-devel-2.2.36-8.0.3.el7.x86_64.rpm
dovecot-mysql-2.2.36-8.0.3.el7.x86_64.rpm
dovecot-pgsql-2.2.36-8.0.3.el7.x86_64.rpm
dovecot-pigeonhole-2.2.36-8.0.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/dovecot-2.2.36-8.0.3.el7.src.rpm

Related CVEs:

CVE-2026-42006




Description of changes:

[1:2.2.36-8.0.3]
- Backport fix for CVE-2026-42006 [Orabug: 39820967]

[1:2.2.36-8.0.1]
- Backport fix for CVE-2025-59032 [Orabug: 39573795]
- Backport fix for CVE-2026-27856 [Orabug: 39573795]
- Backport fix for CVE-2026-27857 [Orabug: 39573795]
- Backport fix for CVE-2026-27858 [Orabug: 39573795]



From el-errata at oss.oracle.com  Wed Aug 12 18:58:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 11:58:35 -0700
Subject: [El-errata] ELSA-2026-8517 Important: Oracle Linux 7 libarchive
 security update
Message-ID: <mailman.73.1786561130.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-8517

http://linux.oracle.com/errata/ELSA-2026-8517.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
bsdcpio-3.1.2-14.0.3.el7_9.x86_64.rpm
bsdtar-3.1.2-14.0.3.el7_9.x86_64.rpm
libarchive-3.1.2-14.0.3.el7_9.i686.rpm
libarchive-3.1.2-14.0.3.el7_9.x86_64.rpm
libarchive-devel-3.1.2-14.0.3.el7_9.i686.rpm
libarchive-devel-3.1.2-14.0.3.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/libarchive-3.1.2-14.0.3.el7_9.src.rpm

Related CVEs:

CVE-2026-4424
CVE-2026-5121




Description of changes:

[3.1.2-14.0.3]
- Fix CVE-2026-4424 CVE-2026-5121 [Orabug: 39219508]

[3.1.2-14.0.1]
- rar: Fix double free [Orabug: 38364091][CVE-2025-5914]



From el-errata at oss.oracle.com  Wed Aug 12 19:01:20 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:01:20 -0700
Subject: [El-errata] ELBA-2026-500165 Oracle Linux 8 leapp-repository bug
 fix update
Message-ID: <mailman.74.1786561295.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500165

http://linux.oracle.com/errata/ELBA-2026-500165.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
leapp-upgrade-el8toel9-0.23.0-2.0.18.el8_10.noarch.rpm
leapp-upgrade-el8toel9-deps-0.23.0-2.0.18.el8_10.noarch.rpm
leapp-upgrade-el8toel9-fapolicyd-0.23.0-2.0.18.el8_10.noarch.rpm

aarch64:
leapp-upgrade-el8toel9-0.23.0-2.0.18.el8_10.noarch.rpm
leapp-upgrade-el8toel9-deps-0.23.0-2.0.18.el8_10.noarch.rpm
leapp-upgrade-el8toel9-fapolicyd-0.23.0-2.0.18.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/leapp-repository-0.23.0-2.0.18.el8_10.src.rpm



Description of changes:

[0.23.0-2.0.18]
- Fix missing selinux policy package for double upgrade [Orabug: 39740553]



From el-errata at oss.oracle.com  Wed Aug 12 19:01:23 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:01:23 -0700
Subject: [El-errata] ELBA-2026-47114 Oracle Linux 8 microcode_ctl bug fix
 and enhancement update
Message-ID: <mailman.75.1786561297.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-47114

http://linux.oracle.com/errata/ELBA-2026-47114.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
microcode_ctl-20260512-1.0.1.el8_10.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/microcode_ctl-20260512-1.0.1.el8_10.src.rpm



Description of changes:

[4:20260512-1.0.1]
- enable use with ueknext and UEK8 kernels
- don't bother calling dracut if virtualized [Orabug: 35710077]
- ensure UEK also rebuilds initramfs [Orabug: 34280058]
- add support for UEK7 kernels
- enable early update for 06-4f-01
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- enable early and late load on RHCK

[4:20260512-1]
- Update Intel CPU microcode to microcode-20260512 release (RHEL-176241)
- New microcode files (in hex):
  06-cc-02: Panther Lake: revision 011b
  06-cc-03: Panther Lake: revision 011b
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000670
  06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000670
  06-ad-01/20: Granite Rapids-X: a000133 to a000142
  06-ad-01/95: Granite Rapids-X: 1000405 to 1000423
  06-ae-01/97: Granite Rapids-D: 1000303 to 1000307
  06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003a3
  06-bd-01/80: Lunar Lake: 0125 to 0126
  06-c5-02/82: Arrow Lake-H: 011b to 0121
  06-c6-02/82: Arrow Lake: 011b to 0121
  06-cf-02/87: Emerald Rapids: 210002d3 to 210002e0
Resolves: RHEL-176241



From el-errata at oss.oracle.com  Wed Aug 12 19:01:25 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:01:25 -0700
Subject: [El-errata] ELSA-2026-42877 Important: Oracle Linux 8
 java-1.8.0-openjdk security update
Message-ID: <mailman.76.1786561300.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42877

http://linux.oracle.com/errata/ELSA-2026-42877.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.1.0.1.el8.x86_64.rpm

aarch64:
java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.1.0.1.el8.noarch.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-src-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.1.0.1.el8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/java-1.8.0-openjdk-1.8.0.502.b07-1.1.0.1.el8.src.rpm

Related CVEs:

CVE-2026-41254
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47057
CVE-2026-47058
CVE-2026-47059
CVE-2026-47063
CVE-2026-60147




Description of changes:

[1:1.8.0.502.b07-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:1.8.0.502.b07-1.1]
- Update to 8u502-b07 (GA).
- Update release notes for 8u502-b07.
- Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354
- Bump zlib version to 1.3.2 following JDK-8378631
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9
- Remove macro references in comments where possible (%dnl not compatible enough yet)
- Move version information and core NVR definitions back towards the top of the file
- Explictly define supported architectures
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Make zone string debug output optional in TestTranslations
- Change javadoc-zip to just own the top-level directory, not include the entire subtree
- Update tagged versions to include 9.8.0-z & 9.9.0.
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z)
- Sync the copy of the portable specfile with the latest update
- Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable
- Drop <pversion> which is a redundant alias for version now
- Update tagging scripts to include signature checks and correctly handle gating
- Add gating scripts to simplify obtaining results and waiving issues
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212354
- Resolves: RHEL-188874
- Resolves: RHEL-212132
- Resolves: RHEL-212311
- Resolves: RHEL-212317
- Related: RHEL-212322
- Resolves: RHEL-212355
- Resolves: RHEL-212356
- Resolves: RHEL-212357
- Resolves: RHEL-212358

[1:1.8.0.502.b07-1.1]
- Make headless own /usr/share/doc/java-1.8.0-openjdk
- Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk
- Resolves: RHEL-212322



From el-errata at oss.oracle.com  Wed Aug 12 19:01:29 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:01:29 -0700
Subject: [El-errata] ELSA-2026-50728 Important: Oracle Linux 8 ruby:3.3
 security, bug fix, and enhancement update
Message-ID: <mailman.77.1786561303.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50728

http://linux.oracle.com/errata/ELSA-2026-50728.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.3.12-8.module+el8.10.0+90981+a74aefb6.i686.rpm
ruby-3.3.12-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
ruby-bundled-gems-3.3.12-8.module+el8.10.0+90981+a74aefb6.i686.rpm
ruby-bundled-gems-3.3.12-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
ruby-default-gems-3.3.12-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
ruby-devel-3.3.12-8.module+el8.10.0+90981+a74aefb6.i686.rpm
ruby-devel-3.3.12-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
ruby-doc-3.3.12-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-abrt-doc-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-bigdecimal-3.1.5-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-bigdecimal-3.1.5-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-bundler-2.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-io-console-0.7.1-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-io-console-0.7.1-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-irb-1.13.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-json-2.7.2-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-json-2.7.2-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-minitest-5.20.0-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.x86_64.rpm
rubygem-mysql2-doc-0.5.5-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.x86_64.rpm
rubygem-pg-doc-1.5.4-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-power_assert-2.0.3-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-psych-5.1.2-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-psych-5.1.2-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-racc-1.7.3-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-racc-1.7.3-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-rake-13.1.0-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rbs-3.4.0-8.module+el8.10.0+90981+a74aefb6.i686.rpm
rubygem-rbs-3.4.0-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm
rubygem-rdoc-6.6.3.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rexml-3.4.4-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rss-0.3.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygems-3.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygems-devel-3.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-test-unit-3.6.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-typeprof-0.21.9-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
ruby-libs-3.3.12-8.module+el8.10.0+90981+a74aefb6.i686.rpm
ruby-libs-3.3.12-8.module+el8.10.0+90981+a74aefb6.x86_64.rpm

aarch64:
ruby-3.3.12-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
ruby-bundled-gems-3.3.12-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
ruby-default-gems-3.3.12-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
ruby-devel-3.3.12-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
ruby-doc-3.3.12-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-abrt-doc-0.4.0-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-bigdecimal-3.1.5-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-bundler-2.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-io-console-0.7.1-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-irb-1.13.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-json-2.7.2-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-minitest-5.20.0-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.aarch64.rpm
rubygem-mysql2-doc-0.5.5-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.aarch64.rpm
rubygem-pg-doc-1.5.4-1.module+el8.10.0+90287+d51aa4ed.noarch.rpm
rubygem-power_assert-2.0.3-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-psych-5.1.2-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-racc-1.7.3-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-rake-13.1.0-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rbs-3.4.0-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm
rubygem-rdoc-6.6.3.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rexml-3.4.4-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-rss-0.3.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygems-3.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygems-devel-3.5.22-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-test-unit-3.6.1-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
rubygem-typeprof-0.21.9-8.module+el8.10.0+90981+a74aefb6.noarch.rpm
ruby-libs-3.3.12-8.module+el8.10.0+90981+a74aefb6.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/ruby-3.3.12-8.module+el8.10.0+90981+a74aefb6.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/rubygem-abrt-0.4.0-1.module+el8.10.0+90287+d51aa4ed.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/rubygem-mysql2-0.5.5-1.module+el8.10.0+90287+d51aa4ed.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/rubygem-pg-1.5.4-1.module+el8.10.0+90287+d51aa4ed.src.rpm

Related CVEs:

CVE-2026-27820
CVE-2026-42256
CVE-2026-42257
CVE-2026-47240
CVE-2026-47241
CVE-2026-47242




Description of changes:

ruby
[3.3.12-8]
- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-170929
  Resolves: RHEL-193664

rubygem-abrt
rubygem-mysql2
rubygem-pg



From el-errata at oss.oracle.com  Wed Aug 12 19:01:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:01:32 -0700
Subject: [El-errata] ELSA-2026-53363 Important: Oracle Linux 8 fence-agents
 security update
Message-ID: <mailman.80.1786561306.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53363

http://linux.oracle.com/errata/ELSA-2026-53363.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-all-4.2.1-129.el8_10.29.x86_64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.29.x86_64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.29.x86_64.rpm
fence-agents-lpar-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-mpath-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.29.x86_64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.29.noarch.rpm

aarch64:
fence-agents-all-4.2.1-129.el8_10.29.aarch64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.29.aarch64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.29.aarch64.rpm
fence-agents-mpath-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.29.aarch64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.29.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.29.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/fence-agents-4.2.1-129.el8_10.29.src.rpm

Related CVEs:

CVE-2026-59886




Description of changes:

[4.2.1-129.29]
- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217923



From el-errata at oss.oracle.com  Wed Aug 12 19:02:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:02:54 -0700
Subject: [El-errata] ELBA-2026-500147 Oracle Linux 8 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.81.1786561388.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500147

http://linux.oracle.com/errata/ELBA-2026-500147.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.1.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.1.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.4.1.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.4.1.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-322.203.3.4.1.el8uek.src.rpm



Description of changes:

[5.15.0-322.203.3.4.1]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39558744]



From el-errata at oss.oracle.com  Wed Aug 12 19:02:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:02:56 -0700
Subject: [El-errata] ELSA-2026-500162 Important: Oracle Linux 8 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.82.1786561392.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500162

http://linux.oracle.com/errata/ELSA-2026-500162.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.5.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.5.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.5.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.5.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.5.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-322.203.3.5.el8uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.5]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39859219]



From el-errata at oss.oracle.com  Wed Aug 12 19:07:30 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:07:30 -0700
Subject: [El-errata] ELBA-2026-500146 Oracle Linux 9 libguestfs bug fix
 update
Message-ID: <mailman.83.1786561664.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500146

http://linux.oracle.com/errata/ELBA-2026-500146.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libguestfs-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-appliance-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-bash-completion-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-inspect-icons-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-rescue-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-rsync-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-xfs-1.54.0-11.0.2.el9.x86_64.rpm
perl-Sys-Guestfs-1.54.0-11.0.2.el9.x86_64.rpm
python3-libguestfs-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-devel-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-gobject-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-gobject-devel-1.54.0-11.0.2.el9.x86_64.rpm
libguestfs-man-pages-ja-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-man-pages-uk-1.54.0-11.0.2.el9.noarch.rpm
lua-guestfs-1.54.0-11.0.2.el9.x86_64.rpm
ocaml-libguestfs-1.54.0-11.0.2.el9.x86_64.rpm
ocaml-libguestfs-devel-1.54.0-11.0.2.el9.x86_64.rpm
ruby-libguestfs-1.54.0-11.0.2.el9.x86_64.rpm
php-libguestfs-1.54.0-11.0.2.el9.x86_64.rpm

aarch64:
libguestfs-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-appliance-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-bash-completion-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-inspect-icons-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-rescue-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-rsync-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-xfs-1.54.0-11.0.2.el9.aarch64.rpm
perl-Sys-Guestfs-1.54.0-11.0.2.el9.aarch64.rpm
python3-libguestfs-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-devel-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-gobject-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-gobject-devel-1.54.0-11.0.2.el9.aarch64.rpm
libguestfs-man-pages-ja-1.54.0-11.0.2.el9.noarch.rpm
libguestfs-man-pages-uk-1.54.0-11.0.2.el9.noarch.rpm
lua-guestfs-1.54.0-11.0.2.el9.aarch64.rpm
ocaml-libguestfs-1.54.0-11.0.2.el9.aarch64.rpm
ocaml-libguestfs-devel-1.54.0-11.0.2.el9.aarch64.rpm
ruby-libguestfs-1.54.0-11.0.2.el9.aarch64.rpm
php-libguestfs-1.54.0-11.0.2.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libguestfs-1.54.0-11.0.2.el9.src.rpm



Description of changes:

[1:1.54.0-11.0.2]
- Allow the UEK kernel to satisfy the OL9 appliance kernel dependency [Orabug: 39699091]



From el-errata at oss.oracle.com  Wed Aug 12 19:07:33 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:07:33 -0700
Subject: [El-errata] ELSA-2026-500162 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.84.1786561668.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500162

http://linux.oracle.com/errata/ELSA-2026-500162.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-322.203.3.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-322.203.3.5.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-322.203.3.5.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.5.el9uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.5]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39859219]

[5.15.0-322.203.3.4.5]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39832946]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39832946]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39832946]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39832946]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39832946]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39832946]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39832946]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39784615]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39784615]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39784615]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39784615]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39784615]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39819205]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39819143]  {CVE-2026-64531}

[5.15.0-322.203.3.4]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39711605]

[5.15.0-322.203.3.3]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39706512]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39706512]  {CVE-2026-43499}

[5.15.0-322.203.3.2]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673886]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini)  [Orabug: 39673886]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673886]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673886]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39668793]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39668793]  {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39668793]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39668793]

[5.15.0-322.203.3.1]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39648952]  {CVE-2026-52943}

[5.15.0-322.203.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548689]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548689]
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky)  [Orabug: 39548689]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548689]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548689]
- net/rds: Make "rds_send_xmit" fairer (Gerd Rausch)  [Orabug: 39532945]
- net/rds: Schedule rds_send_worker if there's more work to do (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: Change return code from rds_send_xmit() when lock is taken" (Gerd Rausch)  [Orabug: 39532945]
- Revert "Reapply "rds: ib: Make sure receives are posted before connection is up"" (Gerd Rausch)  [Orabug: 39532945]
- Revert "rds: ib: Make sure a QP in INIT state is transitioned to ERR" (Gerd Rausch)  [Orabug: 39532945]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526881]  {CVE-2022-50073}
- mmc: dwcmshc_bf3_hw_reset: Log eMMC reset calls (Satyansh Shukla)  [Orabug: 39333650]
- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger)  [Orabug: 39522954]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262374]  {CVE-2026-31657}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39179363]

[5.15.0-322.203.2]
- LTS version: v5.15.203 (Vijayendra Suman)
- io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe)
- ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
- ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz)
- i2c: cp2615: fix serial string NULL-deref at probe (Johan Hovold)
- i2c: cp2615: replace deprecated strncpy with strscpy (Justin Stitt)
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Namjae Jeon)
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
- tracing: Fix potential deadlock in cpu hotplug with osnoise (Luo Haiyang)
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Nikunj A Dadhania)
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (Jinjiang Tu)
- scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik)
- net: macb: Move devm_{free,request}_irq() out of spin lock area (Kevin Hao)
- dmaengine: sh: rz-dmac: Protect the driver specific lists (Claudiu Beznea)
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Claudiu Beznea)
- xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki)
- ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen)
- ext4: fix the might_sleep() warnings in kvfree() (Zqiang)
- ext4: publish jinode after initialization (Li Chen)
- usb: gadget: uvc: fix NULL pointer dereference during unbind race (Jimmy Hu)
- usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop (Kuen-Han Tsai)
- usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann)
- net: rfkill: prevent unlimited numbers of rfkill events from being created (Greg Kroah-Hartman)
- seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer)
- Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts (NGI0))
- xen/privcmd: unregister xenstore notifier on module exit (GuoHan Zhao)
- netlink: add nla be16/32 types to minlen array (Florian Westphal)
- rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) (David Howells)
- rxrpc: fix reference count leak in rxrpc_server_keyring() (Luxiao Xu)
- net: stmmac: fix integer underflow in chain mode (Tyllis Xu)
- net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure (Pengpeng Hou)
- mmc: vub300: fix NULL-deref on disconnect (Johan Hovold)
- drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka)
- net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (David Carlier)
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (Muhammad Alifa Ramdhan)
- batman-adv: reject oversized global TT response buffers (Ruide Cao)
- nfc: pn533: allocate rx skb before consuming bytes (Pengpeng Hou)
- arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges (Shawn Guo)
- arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity (Shawn Guo)
- wifi: brcmsmac: Fix dma_free_coherent() size (Thomas Fourier)
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko)
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do)
- apparmor: fix race between freeing data and fs accessing it (John Johansen)
- apparmor: fix race on rawdata dereference (John Johansen)
- apparmor: fix differential encoding verification (John Johansen)
- apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
- apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen)
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer)
- apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer)
- apparmor: fix: limit the number of levels of policy namespaces (John Johansen)
- apparmor: replace recursive profile removal with iterative approach (Massimiliano Pellizzer)
- apparmor: fix memory leak in verify_header (Massimiliano Pellizzer)
- apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer)
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (Nuno Sa)
- gpiolib: cdev: fix uninitialised kfifo (Kent Gibson)
- media: uvcvideo: Use heuristic to find stream entity (Ricardo Ribalda)
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)
- Input: uinput - take event lock when submitting FF request "event" (Dmitry Torokhov)
- Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov)
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen)
- xfrm_user: fix info leak in build_report() (Greg Kroah-Hartman)
- wifi: rt2x00usb: fix devres lifetime (Johan Hovold)
- lib/crypto: chacha: Zeroize permuted_state before it leaves scope (Eric Biggers)
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov)
- io_uring/tctx: work around xa_store() allocation error issue (Jens Axboe)
- usb: gadget: f_uac1_legacy: validate control request size (Taegu Ha)
- usb: gadget: f_rndis: Protect RNDIS options with mutex (Kuen-Han Tsai)
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free (Kuen-Han Tsai)
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser (Navaneeth K)
- smb: client: Fix refcount leak for cifs_sb_tlink (Shuhao Fu)
- net: mctp: Don't access ifa_index when missing (Matt Johnston)
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Quanmin Yan)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix error message (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error (Marc Kleine-Budde)
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer (Sebastian Urban)
- USB: dummy-hcd: Fix interrupt synchronization error (Alan Stern)
- USB: dummy-hcd: Fix locking/synchronization error (Alan Stern)
- thunderbolt: Fix property read in nhi_wake_supported() (Konrad Dybcio)
- net: ftgmac100: fix ring allocation unwind on open failure (Yufan Chen)
- vxlan: validate ND option lengths in vxlan_na_create (Yang Yang)
- netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu)
- comedi: me4000: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: me_daq: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach (Ian Abbott)
- comedi: Reinit dev->spinlock between attachments to low-level drivers (Ian Abbott)
- comedi: dt2815: add hardware detection to prevent crash (Deepanshu Kartikey)
- cdc-acm: new quirk for EPSON HMD (Oliver Neukum)
- bridge: br_nd_send: validate ND option lengths (Yang Yang)
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
- usb: cdns3: gadget: fix state inconsistency on gadget init failure (Yongchao Wu)
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Yongchao Wu)
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Juno Choi)
- usb: ehci-brcm: fix sleep during atomic (Justin Chen)
- usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira)
- usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li)
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Miao Li)
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (Ethan Tidmore)
- iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore)
- iio: gyro: mpu3050: Fix irq resource leak (Ethan Tidmore)
- iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore)
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only (Francesco Lavra)
- iio: light: vcnl4035: fix scan buffer on big-endian (David Lechner)
- iio: dac: ad5770r: fix error return in ad5770r_read_raw() (Antoniu Miclaus)
- Input: xpad - add support for Razer Wolverine V3 Pro (Zoltan Illes)
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
- Input: synaptics-rmi4 - fix a locking bug in an error path (Bart Van Assche)
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (JP Hein)
- USB: serial: option: add support for Rolling Wireless RW135R-GL (Wanquan Zhong)
- USB: serial: io_edgeport: add support for Blackbox IC135A (Frej Drejhammar)
- drm/ast: dp501: Fix initialization of SCU2C (Thomas Zimmermann)
- hwmon: (occ) Fix division by zero in occ_show_power_1() (Sanman Pradhan)
- MIPS: Fix the GCC version check for __multi3' workaround (Maciej W. Rozycki)
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (Oleh Konko)
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko)
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai)
- ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel)
- USB: serial: option: add MeiG Smart SRM825WN (Ernestas Kulik)
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru)
- drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman)
- riscv: kgdb: fix several debug register assignment bugs (Paul Walmsley)
- hwmon: (occ) Fix missing newline in occ_show_extended() (Sanman Pradhan)
- hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() (Sanman Pradhan)
- hwmon: (pxe1610) Check return value of page-select write in probe (Sanman Pradhan)
- bpf: reject direct access to nullable PTR_TO_BUF pointers (Qi Tang)
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet)
- net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei)
- net/x25: Fix overflow when accumulating packets (Martin Schiller)
- net/x25: Fix potential double free of skb (Martin Schiller)
- net/mlx5: Avoid "No data available" when FW version queries fail (Saeed Mahameed)
- net: macb: properly unregister fixed rate clocks (Fedor Pchelkin)
- net: macb: fix clk handling on PCI glue driver removal (Fedor Pchelkin)
- Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong)
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Pablo Neira Ayuso)
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso)
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Qi Tang)
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang)
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal)
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal)
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal)
- netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso)
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang)
- bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov)
- net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec (Suraj Gupta)
- NFC: pn533: bound the UART receive buffer (Pengpeng Hou)
- net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (Yochai Eisenrich)
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Paolo Abeni)
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (Xiang Mei)
- bridge: br_nd_send: linearize skb before parsing ND options (Yang Yang)
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)
- tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich)
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen)
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei)
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
- btrfs: reject root items with drop_progress and zero drop_level (ZhengYuan Huang)
- HID: multitouch: Check to ensure report responses match the request (Lee Jones)
- objtool: Fix Clang jump table detection (Josh Poimboeuf)
- btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
- atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey)
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Beno?t Sevens)
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso)
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
- dmaengine: xilinx_dma: Program interrupt delay timeout (Radhey Shyam Pandey)
- dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
- btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
- btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
- phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
- ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'o)
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li)
- ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike)
- ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin)
- ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
- ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey)
- xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki)
- jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
- scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
- alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
- erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu)
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin)
- media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam)
- cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
- can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi)
- s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
- s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
- ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
- sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
- hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
- ACPI: EC: Fix ECDT probe ordering issues (Hans de Goede)
- ACPI: EC: Fix EC address space handler unregistration (Hans de Goede)
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (Hans de Goede)
- ACPICA: include/acpi/acpixf.h: Fix indentation (Hans de Goede)
- ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport (Microsoft))
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
- RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
- RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal)
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
- RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
- regmap: Synchronize cache for the page selector (Andy Shevchenko)
- net: macb: use the current queue number for stats (Paolo Valerio)
- netfilter: ctnetlink: use netlink policy range checks (David Carlier)
- netlink: allow be16 and be32 types in all uint policy checks (Florian Westphal)
- netlink: introduce bigendian integer types (Florian Westphal)
- netfilter: nft_payload: reject out-of-range attributes via policy (Florian Westphal)
- netlink: introduce NLA_POLICY_MAX_BE (Florian Westphal)
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi)
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei)
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi)
- Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou)
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim)
- dma-mapping: add missing inline for dma_free_attrs (Miguel Ojeda)
- net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)
- platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
- net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
- openvswitch: validate MPLS set/set_masked payload length (Yang Yang)
- nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
- ionic: fix persistent MAC address override on PF (Mohammad Heib)
- pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike)
- Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal)
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim)
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim)
- can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
- af_key: validate families in pfkey_send_migrate() (Eric Dumazet)
- esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca)
- xfrm: Fix the usage of skb->sk (Steffen Klassert)
- xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
- dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
- module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai)
- HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
- net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (G?nther Noack)
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
- nvme-pci: ensure we're polling a polled queue (Keith Busch)
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
- nvme-pci: cap queue creation to used queues (Keith Busch)
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
- HID: asus: avoid memory leak in asus_report_fixup() (G?nther Noack)
- bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
- sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
- xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
- xen/privcmd: restrict usage in unprivileged domU (Juergen Gross)
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal)
- netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
- lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
- drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte)
- ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
- mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
- mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu)
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe JAILLET)
- hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi)
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
- net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz)
- nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi)
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei)
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei)
- net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
- wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei)
- igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
- net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
- net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
- net/smc: Only save the original clcsock callback functions (Wen Gu)
- PM: runtime: Fix a race condition related to device removal (Bart Van Assche)
- sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
- net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy)
- net: bcmgenet: increase WoL poll timeout (Justin Chen)
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu)
- netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
- netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso)
- netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso)
- netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko)
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu)
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes M?ller)
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim)
- netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal)
- net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
- Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz)
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
- firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
- of: Add cleanup.h based auto release via __free(device_node) markings (Jonathan Cameron)
- wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima)
- soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
- btrfs: tree-checker: fix misleading root drop_level error message (ZhengYuan Huang)
- batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Yang Yang)
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Ma?ra Canal)
- mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts (NGI0))
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
- net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn)
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum)
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe)
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov)
- wifi: cfg80211: move scan done work to wiphy work (Johannes Berg)
- wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges)
- ext4: always allocate blocks only from groups inode can use (Jan Kara)
- ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi)
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
- drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
- drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (Jeongjun Park)
- net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
- drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
- serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski ICEYE)
- serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo J?rvinen)
- serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel)
- serial: 8250_pci: add support for the AX99100 (Martin Roukala (n? Peres))
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
- mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain)
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
- mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
- mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes M?ller)
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes M?ller)
- net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin)
- NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
- nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny)
- sunrpc: fix cache_request leak in cache_release (Jeff Layton)
- driver: iio: add missing checks on iio_info's callback access (Julien Stephan)
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe)
- l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
- bpf: Forget ranges when refining tnum after JSET (Paul Chaignon)
- i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
- iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
- iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus)
- iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
- iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
- iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
- iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
- iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
- btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
- lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
- lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
- x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji)
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
- xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong)
- tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
- drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu)
- net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
- net: ncsi: fix skb leak in error paths (Jian Zhang)
- parisc: Fix initial page table creation for boot (Helge Deller)
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie)
- parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
- batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann)
- ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
- net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
- media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver)
- staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman)
- staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak)
- irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
- device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
- time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
- time: add kernel-doc in time.c (Randy Dunlap)
- ceph: fix i_nlink underrun during async unlink (Max Kellermann)
- libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
- libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer)
- libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov)
- libceph: reject preamble if control segment is empty (Ilya Dryomov)
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer)
- tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao)
- mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng)
- mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
- mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
- usb: image: mdc800: kill download URB on timeout (Ziyi Guo)
- usb: mdc800: handle signal and read racing (Oliver Neukum)
- usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu)
- usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum)
- USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern)
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern)
- USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
- usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
- usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
- usb: yurex: fix race in probe (Oliver Neukum)
- usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan)
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
- net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
- net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
- cgroup: fix race between task migration and iteration (Qingye Zhao)
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
- ASoC: detect empty DMI strings (Casey Connolly)
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
- e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath)
- i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim)
- regulator: pca9450: Correct interrupt type (Peng Fan)
- regulator: pca9450: Make IRQ optional (Frieder Schrempf)
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan)
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim)
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim)
- netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull)
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu)
- can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
- serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
- ASoC: soc-core: flush delayed work before removing DAIs and widgets (matteo.cotifava)
- ASoC: core: Do not call link_exit() on uninitialized rtd objects (Amadeusz S?awi?ski)
- ASoC: core: Exit all links before removing their components (Cezary Rojewski)
- ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() (Kuninori Morimoto)
- ASoC: soc-core: drop delayed_work_pending() check before flush (matteo.cotifava)
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi)
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman)
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
- xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger)
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (J. Neusch?fer)
- remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
- powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy (CS GROUP))
- ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
- unshare: fix unshare_fs() handling (Al Viro)
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar)
- ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka)
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen)
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera)
- net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
- nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
- nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
- net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den)
- amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski)
- xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
- indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
- wifi: wlcore: Fix a locking bug (Bart Van Assche)
- can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel)
- can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp)
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen)
- dpaa2-switch: do not clear any interrupts automatically (Ioana Ciornei)
- net: dpaa2-switch: serialize changes to priv->mac with a mutex (Vladimir Oltean)
- net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() (Vladimir Oltean)
- net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call (Vladimir Oltean)
- net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() (Vladimir Oltean)
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
- platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg)
- Squashfs: check metadata block offset is within range (Phillip Lougher)
- net/sched: ets: fix divide by zero in the offload path (Davide Caratti)
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe)
- wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian)
- wifi: radiotap: reject radiotap with unknown bits (Johannes Berg)
- ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo)
- platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum)
- x86/efi: defer freeing of boot services memory (Mike Rapoport (Microsoft))
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman)
- can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
- can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman)
- net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman)
- nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
- media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe)
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin)
- fbcon: move more common code into fb_open() (Daniel Vetter)
- fbcon: Extract fbcon_open/release helpers (Daniel Vetter)
- fbcon: Use delayed work for cursor (Daniel Vetter)
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Namjae Jeon)
- ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
- usb: cdns3: fix role switching during resume (Thomas Richard (TI))
- usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Th?o Lebrun)
- usb: cdns3: remove redundant if branch (Hongyu Xie)
- clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: omap-usb-host: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: switch away from using chained IRQ handlers (Dmitry Baryshkov)
- drm/tegra: dsi: fix device leak on probe (Johan Hovold)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: libata: remove pointless VPRINTK() calls (Hannes Reinecke)
- ata: libata-scsi: drop DPRINTK calls for cdb translation (Hannes Reinecke)
- scsi: ata: Call scsi_done() directly (Bart Van Assche)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Wentao Liang)
- ARM: OMAP2+: add missing of_node_put before break and return (Wang Qing)
- memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
- memory: mtk-smi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju)
- btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
- ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
- ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
- scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
- scsi: ufs: core: Always initialize the UIC done completion (Bart Van Assche)
- scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
- ARM: clean up the memset64() C wrapper (Thomas Wei?schuh)

[5.15.0-322.202.1]
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446044]
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446044]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446044]
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)  [Orabug: 39390378]
- net: sched: act_api: implement generic walker and search for tc action (Zhengchao Shao)  [Orabug: 39342047]
- btrfs: reserve extra space for the free space tree (Josef Bacik)  [Orabug: 39281379]
- btrfs: include the free space tree in the global rsv minimum calculation (Josef Bacik)  [Orabug: 39281379]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli)  [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463672]



From el-errata at oss.oracle.com  Wed Aug 12 19:07:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:07:34 -0700
Subject: [El-errata] ELBA-2026-39314 Oracle Linux 9 microcode_ctl bug fix
 and enhancement update
Message-ID: <mailman.87.1786561669.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-39314

http://linux.oracle.com/errata/ELBA-2026-39314.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
microcode_ctl-20260210-1.20260512.1.0.1.el9_8.noarch.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/microcode_ctl-20260210-1.20260512.1.0.1.el9_8.src.rpm



Description of changes:

[20260210-1.20260512.1.0.1]
- add support for UEK7/UEK8 and ueknext kernels
- don't bother calling dracut if virtualized [Orabug: 35710094]
- ensure UEK also rebuilds initramfs [Orabug: 34280058]
- enable early update for 06-4f-01
- remove no longer appropriate caveats for 06-2d-07 and 06-55-04
- enable early and late load on RHCK

[4:20260210-20260512.1]
- Switch to zstream versioning scheme

[4:20260512-1]
- Update Intel CPU microcode to microcode-20260512 release (RHEL-176248)
- New microcode files (in hex):
  06-cc-02: Panther Lake: revision 011b
  06-cc-03: Panther Lake: revision 011b
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000670
  06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000670
  06-ad-01/20: Granite Rapids-X: a000133 to a000142
  06-ad-01/95: Granite Rapids-X: 1000405 to 1000423
  06-ae-01/97: Granite Rapids-D: 10002f3 to 1000307
  06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003a3
  06-bd-01/80: Lunar Lake: 0125 to 0126
  06-c5-02/82: Arrow Lake-H: 011b to 0121
  06-c6-02/82: Arrow Lake: 011b to 0121
  06-cf-02/87: Emerald Rapids: 210002d3 to 210002e0
Resolves: RHEL-176248



From el-errata at oss.oracle.com  Wed Aug 12 19:07:36 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:07:36 -0700
Subject: [El-errata] ELSA-2026-42877 Important: Oracle Linux 9
 java-1.8.0-openjdk security update
Message-ID: <mailman.88.1786561669.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42877

http://linux.oracle.com/errata/ELSA-2026-42877.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.2.0.1.el9.x86_64.rpm

aarch64:
java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-demo-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-devel-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-headless-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.2.0.1.el9.noarch.rpm
java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-src-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm
java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.2.0.1.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-1.8.0-openjdk-1.8.0.502.b07-1.2.0.1.el9.src.rpm

Related CVEs:

CVE-2026-41254
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47057
CVE-2026-47058
CVE-2026-47059
CVE-2026-47063
CVE-2026-60147




Description of changes:

[1:1.8.0.502.b07-1.2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:1.8.0.502.b07-1.2]
- Bump release for PQC build
- Related: RHEL-212095
- Related: RHEL-188852
- Related: RHEL-149784
- Related: RHEL-212316
- Related: RHEL-212318
- Related: RHEL-212329
- Related: RHEL-212330
- Related: RHEL-212327
- Related: RHEL-212328

[1:1.8.0.502.b07-1.1]
- Update to 8u502-b07 (GA).
- Update release notes for 8u502-b07.
- Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354
- Bump zlib version to 1.3.2 following JDK-8378631
- Require tzdata 2026b due to upstream inclusion of JDK-8383175
- Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9
- Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file
- Explictly define supported architectures
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field
- Make zone string debug output optional in TestTranslations
- Change javadoc-zip to just own the top-level directory, not include the entire subtree
- Update tagged versions to include 9.8.0-z & 9.9.0.
- Cleanup tagging and gating scripts to appease shellcheck:
- * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg.
- * scripts/builds/check_signatures.sh: Quote variable usage.
- * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage.
- * scripts/builds/waive_leapp_issue.sh: Likewise.
- * scripts/builds/waive_rpminspect.sh: Likewise.
- * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable.
- * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage.
- Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z)
- Sync the copy of the portable specfile with the latest update
- Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable
- Drop <pversion> which is a redundant alias for version now
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-212095
- Resolves: RHEL-188852
- Resolves: RHEL-149784
- Resolves: RHEL-212316
- Resolves: RHEL-212318
- Related: RHEL-212327
- Resolves: RHEL-212329
- Resolves: RHEL-212330

[1:1.8.0.502.b07-1.1]
- Make headless own /usr/share/doc/java-1.8.0-openjdk
- Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk
- Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
- Resolves: RHEL-212327
- Resolves: RHEL-212328



From el-errata at oss.oracle.com  Wed Aug 12 19:07:38 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:07:38 -0700
Subject: [El-errata] ELSA-2026-47082 Important: Oracle Linux 9 pipewire
 security update
Message-ID: <mailman.89.1786561674.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47082

http://linux.oracle.com/errata/ELSA-2026-47082.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
pipewire-1.4.11-1.el9_8.i686.rpm
pipewire-1.4.11-1.el9_8.x86_64.rpm
pipewire-alsa-1.4.11-1.el9_8.i686.rpm
pipewire-alsa-1.4.11-1.el9_8.x86_64.rpm
pipewire-devel-1.4.11-1.el9_8.i686.rpm
pipewire-devel-1.4.11-1.el9_8.x86_64.rpm
pipewire-gstreamer-1.4.11-1.el9_8.i686.rpm
pipewire-gstreamer-1.4.11-1.el9_8.x86_64.rpm
pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.i686.rpm
pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.x86_64.rpm
pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.i686.rpm
pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.x86_64.rpm
pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.i686.rpm
pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.x86_64.rpm
pipewire-libs-1.4.11-1.el9_8.i686.rpm
pipewire-libs-1.4.11-1.el9_8.x86_64.rpm
pipewire-pulseaudio-1.4.11-1.el9_8.x86_64.rpm
pipewire-utils-1.4.11-1.el9_8.x86_64.rpm

aarch64:
pipewire-1.4.11-1.el9_8.aarch64.rpm
pipewire-alsa-1.4.11-1.el9_8.aarch64.rpm
pipewire-devel-1.4.11-1.el9_8.aarch64.rpm
pipewire-gstreamer-1.4.11-1.el9_8.aarch64.rpm
pipewire-jack-audio-connection-kit-1.4.11-1.el9_8.aarch64.rpm
pipewire-jack-audio-connection-kit-devel-1.4.11-1.el9_8.aarch64.rpm
pipewire-jack-audio-connection-kit-libs-1.4.11-1.el9_8.aarch64.rpm
pipewire-libs-1.4.11-1.el9_8.aarch64.rpm
pipewire-pulseaudio-1.4.11-1.el9_8.aarch64.rpm
pipewire-utils-1.4.11-1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/pipewire-1.4.11-1.el9_8.src.rpm

Related CVEs:

CVE-2026-5674




Description of changes:

[1.4.11-1]
- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164828



From el-errata at oss.oracle.com  Wed Aug 12 19:12:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:26 -0700
Subject: [El-errata] ELSA-2026-52395 Important: Oracle Linux 9 postgresql
 security update
Message-ID: <mailman.90.1786561960.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52395

http://linux.oracle.com/errata/ELSA-2026-52395.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
postgresql-13.23-5.el9_8.x86_64.rpm
postgresql-contrib-13.23-5.el9_8.x86_64.rpm
postgresql-docs-13.23-5.el9_8.x86_64.rpm
postgresql-plperl-13.23-5.el9_8.x86_64.rpm
postgresql-plpython3-13.23-5.el9_8.x86_64.rpm
postgresql-pltcl-13.23-5.el9_8.x86_64.rpm
postgresql-private-devel-13.23-5.el9_8.x86_64.rpm
postgresql-private-libs-13.23-5.el9_8.x86_64.rpm
postgresql-server-13.23-5.el9_8.x86_64.rpm
postgresql-server-devel-13.23-5.el9_8.x86_64.rpm
postgresql-static-13.23-5.el9_8.x86_64.rpm
postgresql-test-13.23-5.el9_8.x86_64.rpm
postgresql-test-rpm-macros-13.23-5.el9_8.noarch.rpm
postgresql-upgrade-13.23-5.el9_8.x86_64.rpm
postgresql-upgrade-devel-13.23-5.el9_8.x86_64.rpm

aarch64:
postgresql-13.23-5.el9_8.aarch64.rpm
postgresql-contrib-13.23-5.el9_8.aarch64.rpm
postgresql-docs-13.23-5.el9_8.aarch64.rpm
postgresql-plperl-13.23-5.el9_8.aarch64.rpm
postgresql-plpython3-13.23-5.el9_8.aarch64.rpm
postgresql-pltcl-13.23-5.el9_8.aarch64.rpm
postgresql-private-devel-13.23-5.el9_8.aarch64.rpm
postgresql-private-libs-13.23-5.el9_8.aarch64.rpm
postgresql-server-13.23-5.el9_8.aarch64.rpm
postgresql-server-devel-13.23-5.el9_8.aarch64.rpm
postgresql-static-13.23-5.el9_8.aarch64.rpm
postgresql-test-13.23-5.el9_8.aarch64.rpm
postgresql-test-rpm-macros-13.23-5.el9_8.noarch.rpm
postgresql-upgrade-13.23-5.el9_8.aarch64.rpm
postgresql-upgrade-devel-13.23-5.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/postgresql-13.23-5.el9_8.src.rpm

Related CVEs:

CVE-2026-6479




Description of changes:

[13.23-5]
- Apply patch for CVE-2026-6479 in prep section
- Resolves: CVE-2026-6479

[13.23-4]
- Backport fix for CVE-2026-6479 from PostgreSQL 14.23
  (SSL/GSS init causes denial of service via uncontrolled recursion)
- Resolves: CVE-2026-6479



From el-errata at oss.oracle.com  Wed Aug 12 19:12:28 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:28 -0700
Subject: [El-errata] ELSA-2026-52674 Moderate: Oracle Linux 9 libarchive
 security update
Message-ID: <mailman.91.1786561963.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52674

http://linux.oracle.com/errata/ELSA-2026-52674.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bsdtar-3.5.3-11.el9_8.x86_64.rpm
libarchive-3.5.3-11.el9_8.i686.rpm
libarchive-3.5.3-11.el9_8.x86_64.rpm
libarchive-devel-3.5.3-11.el9_8.i686.rpm
libarchive-devel-3.5.3-11.el9_8.x86_64.rpm

aarch64:
bsdtar-3.5.3-11.el9_8.aarch64.rpm
libarchive-3.5.3-11.el9_8.aarch64.rpm
libarchive-devel-3.5.3-11.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/libarchive-3.5.3-11.el9_8.src.rpm

Related CVEs:

CVE-2026-14164




Description of changes:

[3.5.3-11]
- Related: CVE-2026-14164

[3.5.3-10]
- Resolves: CVE-2026-14164



From el-errata at oss.oracle.com  Wed Aug 12 19:12:30 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:30 -0700
Subject: [El-errata] ELSA-2026-53329 Important: Oracle Linux 9 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.92.1786561964.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53329

http://linux.oracle.com/errata/ELSA-2026-53329.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.38.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.38.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.38.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.38.1.el9_8.x86_64.rpm
libperf-5.14.0-687.38.1.el9_8.x86_64.rpm
perf-5.14.0-687.38.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.38.1.el9_8.x86_64.rpm
rtla-5.14.0-687.38.1.el9_8.x86_64.rpm
rv-5.14.0-687.38.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.38.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.38.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.38.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.38.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.38.1.el9_8.aarch64.rpm
libperf-5.14.0-687.38.1.el9_8.aarch64.rpm
perf-5.14.0-687.38.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.38.1.el9_8.aarch64.rpm
rtla-5.14.0-687.38.1.el9_8.aarch64.rpm
rv-5.14.0-687.38.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.38.1.el9_8.src.rpm

Related CVEs:

CVE-2025-54518
CVE-2026-31530
CVE-2026-64368
CVE-2026-64531




Description of changes:

[5.14.0-687.38.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.38.1]
- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}

[5.14.0-687.37.1]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}



From el-errata at oss.oracle.com  Wed Aug 12 19:12:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:32 -0700
Subject: [El-errata] ELSA-2026-53365 Important: Oracle Linux 9 fence-agents
 security update
Message-ID: <mailman.93.1786561967.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53365

http://linux.oracle.com/errata/ELSA-2026-53365.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-aliyun-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-all-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-amt-ws-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-apc-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-apc-snmp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-aws-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-azure-arm-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-bladecenter-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-brocade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-cisco-mds-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-cisco-ucs-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-common-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-compute-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-drac5-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-eaton-snmp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-emerson-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-eps-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-gce-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-heuristics-ping-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-hpblade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibm-powervs-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibm-vpc-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibmblade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ifmib-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-moonshot-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-mp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-ssh-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo2-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-intelmodular-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ipdu-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ipmilan-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-kdump-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-kubevirt-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-lpar-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-mpath-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-nutanix-ahv-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-openstack-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-redfish-4.10.0-110.el9_8.6.x86_64.rpm
fence-agents-rhevm-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-rsa-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-rsb-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-sbd-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-scsi-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-virsh-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-vmware-rest-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-vmware-soap-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-wti-4.10.0-110.el9_8.6.noarch.rpm
fence-virt-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-cpg-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-libvirt-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-multicast-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-serial-4.10.0-110.el9_8.6.x86_64.rpm
fence-virtd-tcp-4.10.0-110.el9_8.6.x86_64.rpm
ha-cloud-support-4.10.0-110.el9_8.6.x86_64.rpm

aarch64:
fence-agents-all-4.10.0-110.el9_8.6.aarch64.rpm
fence-agents-amt-ws-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-apc-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-apc-snmp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-bladecenter-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-brocade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-cisco-mds-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-cisco-ucs-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-common-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-drac5-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-eaton-snmp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-emerson-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-eps-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-heuristics-ping-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-hpblade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibm-powervs-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibm-vpc-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ibmblade-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ifmib-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-moonshot-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-mp-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo-ssh-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ilo2-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-intelmodular-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ipdu-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-ipmilan-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-kdump-4.10.0-110.el9_8.6.aarch64.rpm
fence-agents-kubevirt-4.10.0-110.el9_8.6.aarch64.rpm
fence-agents-lpar-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-mpath-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-nutanix-ahv-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-redfish-4.10.0-110.el9_8.6.aarch64.rpm
fence-agents-rhevm-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-rsa-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-rsb-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-sbd-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-scsi-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-virsh-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-vmware-rest-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-vmware-soap-4.10.0-110.el9_8.6.noarch.rpm
fence-agents-wti-4.10.0-110.el9_8.6.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/fence-agents-4.10.0-110.el9_8.6.src.rpm

Related CVEs:

CVE-2026-59886




Description of changes:

[4.10.0-110.6]
- bundled pyasn1: fix CVE-2026-59886
  Resolves: RHEL-217934



From el-errata at oss.oracle.com  Wed Aug 12 19:12:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:34 -0700
Subject: [El-errata] ELSA-2026-53452 Moderate: Oracle Linux 9
 gstreamer1-plugins-good security update
Message-ID: <mailman.94.1786561967.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53452

http://linux.oracle.com/errata/ELSA-2026-53452.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-good-1.22.12-7.el9_8.2.i686.rpm
gstreamer1-plugins-good-1.22.12-7.el9_8.2.x86_64.rpm
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.i686.rpm
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.x86_64.rpm

aarch64:
gstreamer1-plugins-good-1.22.12-7.el9_8.2.aarch64.rpm
gstreamer1-plugins-good-gtk-1.22.12-7.el9_8.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/gstreamer1-plugins-good-1.22.12-7.el9_8.2.src.rpm

Related CVEs:

CVE-2026-18649




Description of changes:

[1.22.12-7.2]
- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162



From el-errata at oss.oracle.com  Wed Aug 12 19:12:35 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:12:35 -0700
Subject: [El-errata] ELSA-2026-53847 Important: Oracle Linux 9 isns-utils
 security update
Message-ID: <mailman.95.1786561970.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53847

http://linux.oracle.com/errata/ELSA-2026-53847.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
isns-utils-0.101-4.el9_8.1.x86_64.rpm
isns-utils-libs-0.101-4.el9_8.1.i686.rpm
isns-utils-libs-0.101-4.el9_8.1.x86_64.rpm

aarch64:
isns-utils-0.101-4.el9_8.1.aarch64.rpm
isns-utils-libs-0.101-4.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/isns-utils-0.101-4.el9_8.1.src.rpm

Related CVEs:

CVE-2026-55995




Description of changes:

[0.101-4.1]
- Fix CVE-2026-55995: prevent double-free in attrs.c error paths



From el-errata at oss.oracle.com  Wed Aug 12 19:13:59 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:13:59 -0700
Subject: [El-errata] ELSA-2026-500162 Important: Oracle Linux 9 Unbreakable
 Enterprise kernel security update
Message-ID: <mailman.98.1786562052.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500162

http://linux.oracle.com/errata/ELSA-2026-500162.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-322.203.3.5.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-322.203.3.5.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-322.203.3.5.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-322.203.3.5.el9uek.src.rpm

Related CVEs:

CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[5.15.0-322.203.3.5]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39859219]



From el-errata at oss.oracle.com  Wed Aug 12 19:16:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:37 -0700
Subject: [El-errata] ELBA-2026-39299 Oracle Linux 10 microcode_ctl bug fix
 and enhancement update
Message-ID: <mailman.99.1786562211.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-39299

http://linux.oracle.com/errata/ELBA-2026-39299.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
microcode_ctl-20260512-1.1.0.1.el10_2.noarch.rpm



SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/microcode_ctl-20260512-1.1.0.1.el10_2.src.rpm



Description of changes:

[20260512-1.1.0.1]
- enable use with ueknext and UEK8 kernels
- don't bother calling dracut if virtualized
- ensure UEK also rebuilds initramfs
- enable early update for 06-4f-01
- enable early and late load on RHCK

[4:20260512-1.1]
- Fix versioning

[4:20260512-1]
- Update Intel CPU microcode to microcode-20260512 release (RHEL-176251)
- New microcode files (in hex):
  06-cc-02: Panther Lake: revision 011b
  06-cc-03: Panther Lake: revision 011b
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-8f-07/87: Sapphire Rapids: 2b000661 to 2b000670
  06-8f-08/87: Sapphire Rapids: 2b000661 to 2b000670
  06-ad-01/20: Granite Rapids-X: a000133 to a000142
  06-ad-01/95: Granite Rapids-X: 1000405 to 1000423
  06-ae-01/97: Granite Rapids-D: 10002f3 to 1000307
  06-af-03/01: Crestmont (Sierra Forest): 3000382 to 30003a3
  06-bd-01/80: Lunar Lake: 0125 to 0126
  06-c5-02/82: Arrow Lake-H: 011b to 0121
  06-c6-02/82: Arrow Lake: 011b to 0121
  06-cf-02/87: Emerald Rapids: 210002d3 to 210002e0
Resolves: RHEL-176251



From el-errata at oss.oracle.com  Wed Aug 12 19:16:38 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:38 -0700
Subject: [El-errata] ELBA-2026-50139-0 Oracle Linux 10 tuned bug fix and
 enhancement update
Message-ID: <mailman.100.1786562213.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-50139-0

http://linux.oracle.com/errata/ELBA-2026-50139-0.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
tuned-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-gtk-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-ppd-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-atomic-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-cpu-partitioning-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-mssql-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oci-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oci-recommend-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oracle-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-postgresql-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-spectrumscale-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-utils-2.27.0-2.0.1.el10_2.noarch.rpm

aarch64:
tuned-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-gtk-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-ppd-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-atomic-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-cpu-partitioning-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-mssql-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oci-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oci-recommend-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-oracle-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-postgresql-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-profiles-spectrumscale-2.27.0-2.0.1.el10_2.noarch.rpm
tuned-utils-2.27.0-2.0.1.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/tuned-2.27.0-2.0.1.el10_2.src.rpm



Description of changes:

[2.27.0-2.0.1]
- Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315]
- Fix error in uninstalling tuned [Orabug: 351528377]
- Updated patch with the more recent version [Orabug: 30730976]
- Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
- Restored the system rules in recommend.conf [Orabug: 29962987]
- Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
  for increasing combined channels to 16 on NICs with bnxt_en driver on BM
- Do not access xps_cpus on single queue devices [Orabug: 29894296]
- OL8 does not support System Purpose [Orabug: 29443881]
  Remove syspurpose_role option in recommend.conf.
- Added profiles-oci-recommend package [Orabug: 29632202]
- Modified the patch for ol8 [Orabug: 29560068] (james.cheng at oracle.com)
- Added iscsi plugin, and
  - added oci-rps-xps profile [Orabug: 28397039]
  - added oci-busy-polling profile [Orabug: 28748149]
  - added oci-cpu-power profile

[2.27.0-2]
- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181667



From el-errata at oss.oracle.com  Wed Aug 12 19:16:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:40 -0700
Subject: [El-errata] ELSA-2026-34911 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.101.1786562215.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-34911

http://linux.oracle.com/errata/ELSA-2026-34911.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2025-10263
CVE-2026-43112
CVE-2026-45998
CVE-2026-46209
CVE-2026-46244
CVE-2026-46316
CVE-2026-53362




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Wed Aug 12 19:16:42 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:42 -0700
Subject: [El-errata] ELSA-2026-49526 Important: Oracle Linux 10
 osbuild-composer security update
Message-ID: <mailman.102.1786562216.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49526

http://linux.oracle.com/errata/ELSA-2026-49526.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-176-1.0.1.el10_2.x86_64.rpm
osbuild-composer-core-176-1.0.1.el10_2.x86_64.rpm
osbuild-composer-worker-176-1.0.1.el10_2.x86_64.rpm

aarch64:
osbuild-composer-176-1.0.1.el10_2.aarch64.rpm
osbuild-composer-core-176-1.0.1.el10_2.aarch64.rpm
osbuild-composer-worker-176-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/osbuild-composer-176-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-32280
CVE-2026-32281




Description of changes:

[176-1.0.1]
- Track github upstream



From el-errata at oss.oracle.com  Wed Aug 12 19:16:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:43 -0700
Subject: [El-errata] ELSA-2026-53330 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.103.1786562217.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53330

http://linux.oracle.com/errata/ELSA-2026-53330.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.46.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.46.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.46.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.46.1.el10_2.x86_64.rpm
libperf-6.12.0-211.46.1.el10_2.x86_64.rpm
perf-6.12.0-211.46.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.46.1.el10_2.x86_64.rpm
rtla-6.12.0-211.46.1.el10_2.x86_64.rpm
rv-6.12.0-211.46.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.46.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.46.1.el10_2.aarch64.rpm
libperf-6.12.0-211.46.1.el10_2.aarch64.rpm
perf-6.12.0-211.46.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.46.1.el10_2.aarch64.rpm
rtla-6.12.0-211.46.1.el10_2.aarch64.rpm
rv-6.12.0-211.46.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.46.1.el10_2.src.rpm

Related CVEs:

CVE-2024-53143
CVE-2025-71072
CVE-2026-23415
CVE-2026-31488
CVE-2026-52923
CVE-2026-64368
CVE-2026-64531




Description of changes:

[6.12.0-211.46.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.46.1]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223405] {CVE-2026-64368}

[6.12.0-211.45.1]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-222503]
- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-222505]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222499] {CVE-2026-64531}
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193528] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193528] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193528] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193528] {CVE-2026-23415}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213035]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-193676] {CVE-2026-31488}
- shmem: fix recovery on rename failures (Rafael Aquini) [RHEL-189571] {CVE-2025-71072}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188217] {CVE-2026-52923}
- fsnotify: Fix ordering of iput() and watched_objects decrement (Jay Shin) [RHEL-175860] {CVE-2024-53143}



From el-errata at oss.oracle.com  Wed Aug 12 19:16:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:49 -0700
Subject: [El-errata] ELSA-2026-53846 Important: Oracle Linux 10 isns-utils
 security update
Message-ID: <mailman.104.1786562217.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53846

http://linux.oracle.com/errata/ELSA-2026-53846.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
isns-utils-0.103-1.el10_2.1.x86_64.rpm
isns-utils-libs-0.103-1.el10_2.1.x86_64.rpm

aarch64:
isns-utils-0.103-1.el10_2.1.aarch64.rpm
isns-utils-libs-0.103-1.el10_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/isns-utils-0.103-1.el10_2.1.src.rpm

Related CVEs:

CVE-2026-55995




Description of changes:

[0.103-1.1]
- Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995)
  Resolves: RHEL-219472



From el-errata at oss.oracle.com  Wed Aug 12 19:16:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:45 -0700
Subject: [El-errata] ELSA-2026-53435 Important: Oracle Linux 10 udisks2
 security update
Message-ID: <mailman.105.1786562221.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53435

http://linux.oracle.com/errata/ELSA-2026-53435.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libudisks2-2.11.0-2.0.1.el10_2.1.x86_64.rpm
libudisks2-devel-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-iscsi-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-lsm-2.11.0-2.0.1.el10_2.1.x86_64.rpm
udisks2-lvm2-2.11.0-2.0.1.el10_2.1.x86_64.rpm

aarch64:
libudisks2-2.11.0-2.0.1.el10_2.1.aarch64.rpm
libudisks2-devel-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-iscsi-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-lsm-2.11.0-2.0.1.el10_2.1.aarch64.rpm
udisks2-lvm2-2.11.0-2.0.1.el10_2.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/udisks2-2.11.0-2.0.1.el10_2.1.src.rpm

Related CVEs:

CVE-2026-7867




Description of changes:

[2.11.0-2.0.1.el10_2.1]
- Enable btrfs support for OL supported arches [Orabug: 37464632]

[2.11.0-2.1]
- Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)



From el-errata at oss.oracle.com  Wed Aug 12 19:16:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:16:47 -0700
Subject: [El-errata] ELSA-2026-53451 Moderate: Oracle Linux 10
 gstreamer1-plugins-good security update
Message-ID: <mailman.108.1786562221.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53451

http://linux.oracle.com/errata/ELSA-2026-53451.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-good-1.26.7-2.el10_2.3.x86_64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.3.x86_64.rpm

aarch64:
gstreamer1-plugins-good-1.26.7-2.el10_2.3.aarch64.rpm
gstreamer1-plugins-good-gtk-1.26.7-2.el10_2.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gstreamer1-plugins-good-1.26.7-2.el10_2.3.src.rpm

Related CVEs:

CVE-2026-18649




Description of changes:

[1.26.7-2.3]
- Fix excessive memory allocation from malicious RTP fragmentation unit
  packets in rtph264depay/rtph265depay (CVE-2026-18649)
  Resolves: RHEL-224158



From el-errata at oss.oracle.com  Wed Aug 12 19:21:46 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Wed, 12 Aug 2026 12:21:46 -0700
Subject: [El-errata] ELSA-2026-500150 Important: Unbreakable Enterprise
 kernel security update
Message-ID: <mailman.109.1786562521.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-500150

http://linux.oracle.com/errata/ELSA-2026-500150.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-205.92.4.2.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-205.92.4.2.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-205.92.4.2.el10uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-205.92.4.2.el10uek.src.rpm

Related CVEs:

CVE-2025-38271
CVE-2025-38314
CVE-2025-39733
CVE-2025-39768
CVE-2025-39874
CVE-2025-39908
CVE-2025-40238
CVE-2025-68373
CVE-2025-68790
CVE-2026-31663
CVE-2026-43467
CVE-2026-46242
CVE-2026-46316
CVE-2026-46331
CVE-2026-52943
CVE-2026-53125
CVE-2026-53359
CVE-2026-53362
CVE-2026-64531
CVE-2026-64561
CVE-2026-68480




Description of changes:

[6.12.0-205.92.4.2]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39844842]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39844812]  {CVE-2026-68480}
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39844799]  {CVE-2026-64561}

[6.12.0-205.92.4.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816011]  {CVE-2026-64531}
- Revert "arm64: acpi: Enable ACPI CCEL support" (Will Deacon)  [Orabug: 39812699]
- virtio_pci: fix vq info pointer lookup via wrong index (Ammar Faizi)  [Orabug: 39812697]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39812085]

[6.12.0-205.92.4]
- f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() (Yongpeng Yang)
- ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams (Ji'an Zhou)
- MIPS: smp: report dying CPU to RCU in stop_this_cpu() (Jonas Jelonek)
- LoongArch: Report dying CPU to RCU in stop_this_cpu() (Huacai Chen)
- Revert "net: bonding: fix use-after-free in bond_xmit_broadcast()" (Kevin Berry)
- block: fix handling of dead zone write plugs (Damien Le Moal)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- Revert "PCI: qcom: Advertise Hotplug Slot Capability with no Command Completion support" (Sasha Levin)
- apparmor: fix use-after-free in rawdata dedup loop (Ruslan Valiyev)
- mmc: dw_mmc-rockchip: Add missing private data for very old controllers (Heiko Stuebner)
- sctp: disable BH before calling udp_tunnel_xmit_skb() (Xin Long)
- net: ipv6: Make udp_tunnel6_xmit_skb() void (Petr Machata)
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li)
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)
- locking/mutex: Remove wakeups from under mutex::wait_lock (Peter Zijlstra)
- ksmbd: fix out-of-bounds read in smb_check_perm_dacl() (Hem Parekh)
- ipv4: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39738617]
- inet: add indirect call wrapper for getfrag() calls (Eric Dumazet)  [Orabug: 39738617]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad)  [Orabug: 39653091]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad)  [Orabug: 39653091]
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Vasily Gorbik)  [Orabug: 39489132]
- scripts/sorttable: Allow matches to functions before function entry (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Do not over-allocate ftrace memory (Guenter Roeck)  [Orabug: 39489132]
- ftrace: Have ftrace pages output reflect freed pages (Steven Rostedt)  [Orabug: 39489132]
- ftrace: Update the mcount_loc check of skipped entries (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Have mcount rela sort use direct values (Steven Rostedt)  [Orabug: 39489132]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Use uint64_t for mcount sorting (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Sym (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Shdr (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Convert Elf_Ehdr to union (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Make compare_extable() into two functions (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unneeded Elf_Rel (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unused write functions (Steven Rostedt)  [Orabug: 39489132]
- scripts/sorttable: Remove unused macro defines (Steven Rostedt)  [Orabug: 39489132]
- xfrm: hold dev ref until after transport_finish NF_HOOK (Qi Tang)  [Orabug: 39262397]  {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Jianbo Liu)  [Orabug: 39262397]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Hyunwoo Kim)  [Orabug: 39531622]  {CVE-2026-46316}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang)  [Orabug: 39681042]
- mm: enforce resource limits for reserved VA mappings (Jianfeng Wang)  [Orabug: 39681042]
- ipv6: account for fraggap on the paged allocation path (Wongi Lee)  [Orabug: 39686467]  {CVE-2026-53362}
- xen/ovmapi: terminate values passed to xenbus_write (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: free queued events on release (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: prevent duplicate app registration (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: avoid raw user pointer access in get_next_event (Joe Jin)  [Orabug: 39726311]
- xen/ovmapi: reject oversized posted event payloads (Joe Jin)  [Orabug: 39726311]

[6.12.0-205.92.3]
- soc/pensando/bsm: add read-only access to A35 BSM from N1 (Hiren Mehta) [Orabug: 39710757]
- uek-rpm: update Salina emb4 drivers (Joseph Dobosenski) [Orabug: 39692334]
- Enable psci on UEK8 emb4 platform (Joseph Dobosenski) [Orabug: 39692334]
- arm64: amd: add dtb Makefile entries and Pensando defconfigs (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Salina SoC and boards (Brad Larson) [Orabug: 39692334]
- arm64: dts: amd: add Elba, Giglio and Deschutes boards (Brad Larson) [Orabug: 39692334]
- perf: arm-cmn: enable CMN PMU on AMD Pensando Salina (Brad Larson) [Orabug: 39692334]
- net: mctp-i2c: fix dynamic debug logging (Brad Larson) [Orabug: 39692334]
- hwmon: pmbus: add LTC3888 and TPS53659 support (Brad Larson) [Orabug: 39692334]
- mmc: sdhci-cadence: add AMD Pensando bounce buffer and HS400-ES support (Brad Larson) [Orabug: 39692334]
- spi: add AMD Pensando CPLD SPI multiplexer and Salina dw support (Brad Larson) [Orabug: 39692334]
- spi: cadence-quadspi: fix indirect write timeout on AMD Pensando (Brad Larson) [Orabug: 39692334]
- i2c: add AMD Pensando CPLD RD1173 SPI-to-I2C driver (Brad Larson) [Orabug: 39692334]
- i2c: designware: add AMD Pensando support (Brad Larson) [Orabug: 39692334]
- uio: add AMD Pensando UIO drivers (Brad Larson) [Orabug: 39692334]
- rtc: add AMD Pensando ELBA CPLD RTC (Brad Larson) [Orabug: 39692334]
- reset: add AMD Pensando ELBASR reset controller (Brad Larson) [Orabug: 39692334]
- mfd: add AMD Pensando ELBASR CPLD (Brad Larson) [Orabug: 39692334]
- EDAC: add AMD Pensando Elba and Salina memory controllers (Brad Larson) [Orabug: 39692334]
- irqchip: add AMD Pensando SoC interrupt controller (Brad Larson) [Orabug: 39692334]
- soc: pensando: add AMD Pensando SoC service drivers (Brad Larson) [Orabug: 39692334]
- arm64: traps: report AMD Pensando async SError as SIGBUS (Brad Larson) [Orabug: 39692334]
- dt-bindings: add AMD Pensando Elba, Giglio and Salina SoCs (Brad Larson) [Orabug: 39692334]
- Revert "mmc: sdhci-cadence: Support ADMA with bounce buffers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/ltc2978) Add support for ltc3888" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "hwmon: (pmbus/tps53679) Add support for tps53659" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: rd1173: Add Lattice SPI to I2C bus driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: dts: Add AMD Pensando SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "soc/pensando: Add AMD Pensando SoC drivers" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: defconfig: Add AMD Pensando defconfig" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Add AMD Pensando UIO support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Add AMD Pensando IRQ driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mtd: spi-nor: winbond: Add support for W25Q02NW" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "EDAC/elba: Add AMD Pensando Elba/Giglio SoC EDAC driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mfd: Add AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "rtc: elbacpld: Support RTC in AMD Pensando system controller" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "spi: dw-mmio: Add AMD Pensando Salina SoC support" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "arm64: Enable platform SError handler" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "perf/arm-cmn: Enable AMD Pensando Salina SoC CMN PMU driver" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "i2c: designware: Support stuck SDA line recovery" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "mmc: core: Use HPI to interrupt lengthy cache flush (#495)" (Joseph Dobosenski) [Orabug: 39692334]
- Revert "irqchip/pensando: Fix partial of_iomap() leak on error (#505)" (Joseph Dobosenski) [Orabug: 39692334]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673856,39686459] {CVE-2026-53359}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659418]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 39652107]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages uek8 (Praveen Kumar Kannoju) [Orabug: 39594873]
- netfs: Fix read-gaps to remove netfs_folio from filled folio (David Howells) [Orabug: 39580474]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567285,39668752] {CVE-2026-46331}
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Eric Dumazet) [Orabug: 39567285] {CVE-2026-46331}
- uek: kabi: update x86_64/aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 39531375]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480767]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: move epi_fget() up (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: rename ep_remove_safe() back to ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: kill __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: split __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Christian Brauner) [Orabug: 39466882] {CVE-2026-46242}
- mm/truncate: make partial truncation folio split aware of min_order (Jane Chu) [Orabug: 39215509]
- mm/memory-failure: improve large block size folio handling (Jane Chu) [Orabug: 39215509]
- mm/huge_memory: add split_huge_page_to_order() (Jane Chu) [Orabug: 39215509]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209761]

[6.12.0-205.92.2]
- bnxt_en: bring back rtnl lock in bnxt_shutdown (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: add missing netdev lock management to bnxt_dl_reload_up (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: request unconditional ops lock (Stanislav Fomichev) [Orabug: 39589466]
- eth: bnxt: switch to netif_close (Stanislav Fomichev) [Orabug: 39589466]
- md: fix array_state=clear sysfs deadlock (Yu Kuai) [Orabug: 39190489,39668924] {CVE-2026-53125}
- md: fix return value of mddev_trylock (Xiao Ni) [Orabug: 39190489]
- md: avoid repeated calls to del_gendisk (Xiao Ni) [Orabug: 39190489,39668918] {CVE-2025-68373}
- md: delete mddev kobj before deleting gendisk kobj (Xiao Ni) [Orabug: 39190489]
- md: add legacy_async_del_gendisk mode (Xiao Ni) [Orabug: 39190489]
- md: fix create on open mddev lifetime regression (Yu Kuai) [Orabug: 39190489]
- md: Don't clear MD_CLOSING until mddev is freed (Xiao Ni) [Orabug: 39190489]
- md: call del_gendisk in control path (Xiao Ni) [Orabug: 39190489]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619387,39639984,39656679] {CVE-2026-52943}

[6.12.0-205.92.1]
- uek-rpm: generate symtypes during early FIPS module build (Saeed Mirzamohammadi) [Orabug: 39576442]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38111998]
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39084664]
- uek-rpm: Enable MLXREG_DPU module (Alexandre Chartre) [Orabug: 38667152]
- net/mlx5: Fix crash when moving to switchdev mode (Patrisious Haddad) [Orabug: 38667152,39344020] {CVE-2026-43467}
- net/mlx5: Fix double unregister of HCA_PORTS component (Gerd Bayer) [Orabug: 38667152,39590860] {CVE-2025-68790}
- net/mlx5: Fix IPsec cleanup over MPV device (Patrisious Haddad) [Orabug: 38667152,38730559] {CVE-2025-40238}
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Lama Kayal) [Orabug: 38667152]
- net/mlx5: HWS, prevent rehash from filling up the queues (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix complex rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152,39590850] {CVE-2025-39768}
- net/mlx5: HWS, fix simple rules rehash error flow (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, Track matcher sizes individually (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Create STEs directly from matcher (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Export rule skip logic (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Refactor devcom to return NULL on failure (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Add net namespace support to devcom (Shay Drory) [Orabug: 38667152]
- net/mlx5: Lag, move devcom registration to LAG layer (Shay Drory) [Orabug: 38667152]
- net/mlx5: Refactor devcom to use match attributes (Shay Drory) [Orabug: 38667152]
- platform/mellanox: Fix spelling and comment clarity in Mellanox drivers (Alok Tiwari) [Orabug: 38667152]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Dan Carpenter) [Orabug: 38667152]
- RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup (Arnd Bergmann) [Orabug: 38667152]
- net/mlx5: HWS, make sure the uplink is the last destination (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Init mutex on the correct path (Vlad Dogaru) [Orabug: 38667152]
- mlxsw: core_thermal: Constify struct thermal_zone_device_ops (Christophe Jaillet) [Orabug: 38667152]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Dan Carpenter) [Orabug: 38667152]
- net/mlx5e: Allow setting MAC address of representors (Mark Bloch) [Orabug: 38667152]
- RDMA/mlx5: Avoid flexible array warning (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: avoid 64-bit division (Arnd Bergmann) [Orabug: 38667152]
- i2c-mlxbf: Improve I2C bus timing configuration (Chris Babroski) [Orabug: 38667152]
- i2c-mlxbf: Add repeated start condition support (Chris Babroski) [Orabug: 38667152]
- net/mlx5e: Don't drop RTNL during firmware flash (Cosmin Ratiu) [Orabug: 38667152]
- net/mlx5: HWS, handle modify header actions dependency (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, register reformat actions with fw (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: SWS, fix reformat id error handling (Vlad Dogaru) [Orabug: 38667152]
- selftests: net: validate team flags propagation (Stanislav Fomichev) [Orabug: 38667152]
- vfio/mlx5: Enable the DMA link API (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Rewrite create mkey flow to allow better code reuse (Leon Romanovsky) [Orabug: 38667152]
- vfio/mlx5: Explicitly use number of pages instead of allocated length (Leon Romanovsky) [Orabug: 38667152]
- i2c: mlxbf: Use str_read_write() helper (Fengwei) [Orabug: 38667152]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Patrisious Haddad) [Orabug: 38667152]
- net/mlx5: Use to_delayed_work() (Chen Ni) [Orabug: 38667152]
- net: mlxsw: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Vladimir Oltean) [Orabug: 38667152]
- net/mlx5: HWS, dump bad completion details (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, rework rehash loop (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix redundant extension of action templates (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, fix counting of rules in the matcher (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, force rehash when rule insertion failed (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, support complex matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, introduce isolated matchers (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose polling function in header file (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, add definer function to get field name str (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Yevgeny Kliteynik) [Orabug: 38667152]
- net/mlx5: support software TX timestamp (Stanislav Fomichev) [Orabug: 38667152]
- RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Leon Romanovsky) [Orabug: 38667152]
- RDMA/umem: Store ODP access mask information in PFN (Leon Romanovsky) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Fix smatch warnings (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Fix .items in nvsw_sn2201_busbar_hotplug (Nathan Chancellor) [Orabug: 38667152]
- platform: mellanox: nvsw-sn2200: Add support for new system flavour (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: mlx-platform: Add support for new Nvidia system (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Cosmetic changes to improve code style (Vadim Pasternak) [Orabug: 38667152]
- platform: mellanox: Introduce support of Nvidia smart switch (Vadim Pasternak) [Orabug: 38667152]
- platform/mellanox: mlxreg-dpu: Add initial support for Nvidia DPU (Vadim Pasternak) [Orabug: 38667152]
- net/mlx4_core: Adjust allocation type for buddy->bits (Kees Cook) [Orabug: 38667152]
- net/mlx5: HWS, Disallow matcher IP version mixing (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Colin Ian King) [Orabug: 38667152]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kees Cook) [Orabug: 38667152]
- bonding: Fix multiple long standing offload races (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Remove unneeded device check from validate_xmit_xfrm (Cosmin Ratiu) [Orabug: 38667152]
- xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu) [Orabug: 38667152]
- net: ptp: introduce .supported_perout_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- net: ptp: introduce .supported_extts_flags to ptp_clock_info (Jacob Keller) [Orabug: 38667152]
- igb: reject invalid external timestamp requests for 82580-based HW (Jacob Keller) [Orabug: 38667152]
- platform/mellanox: Rename field to improve code readability (Vadim Pasternak) [Orabug: 38667152]
- net/mlx5: HWS, Export action STE tables to debugfs (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Free unused action STE tables (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup matcher action STE table (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Use the new action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Implement action STE pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix pool size optimization (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Add fullness tracking to pool (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Cleanup after pool refactoring (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Refactor pool implementation (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Make pool single resource (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Remove unused element array (Vlad Dogaru) [Orabug: 38667152]
- net/mlx5: HWS, Fix matcher action template attach (Vlad Dogaru) [Orabug: 38667152]
- RDMA: Replace msecs_to_jiffies with secs_to_jiffies for?timeout (Peng Jiang) [Orabug: 38667152]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Easwar Hariharan) [Orabug: 38667152]
- gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (Joshua Washington) [Orabug: 38667152]
- net: lan743x: reject unsupported external timestamp requests (Jacob Keller) [Orabug: 38667152]
- renesas: reject PTP_STRICT_FLAGS as unsupported (Jacob Keller) [Orabug: 38667152]
- eth: bnxt: remove most dependencies on RTNL (Stanislav Fomichev) [Orabug: 38667152]
- dma-mapping: remove an outdated comment from dma-map-ops.h (Sui Jingfeng) [Orabug: 38667152]
- Revert "RDMA/core: Silence oversized kvmalloc() warning" (Mikhael Goikhman) [Orabug: 38667152]
- eth: bnxt: fix deadlock when xdp is attached or detached (Taehee Yoo) [Orabug: 38667152]
- xdp: create locked/unlocked instances of xdp redirect target setters (Joshua Washington) [Orabug: 38667152]
- gve: introduce config-based allocation for XDP (Joshua Washington) [Orabug: 38667152]
- gve: Add RSS cache for non RSS device option scenario (Ziwei Xiao) [Orabug: 38667152]
- virtio_pci: drop kernel.h (Michael S. Tsirkin) [Orabug: 38667152]
- dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Pranjal Shrivastava) [Orabug: 38667152]
- macsec: sync features on RTM_NEWLINK (Stanislav Fomichev) [Orabug: 38667152,39590858] {CVE-2025-39874}
- net: dev_ioctl: take ops lock in hwtstamp lower paths (Carolina Jubran) [Orabug: 38667152,39590854] {CVE-2025-39908}
- hamradio: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- net: lapbether: ignore ops-locked netdevs (Stanislav Fomichev) [Orabug: 38667152]
- macsec: set IFF_UNICAST_FLT priv flag (Stanislav Fomichev) [Orabug: 38667152]
- team: replace team lock with rtnl lock (Stanislav Fomichev) [Orabug: 38667152,39590857] {CVE-2025-39733}
- net: prevent a NULL deref in rtnl_create_link() (Eric Dumazet) [Orabug: 38667152,39590851] {CVE-2025-38271}
- hv_netvsc: fix potential deadlock in netvsc_vf_setxdp() (Saurabh Singh Sengar) [Orabug: 38667152]
- virtio-pci: Fix result size returned for the admin command completion (Israel Rukshin) [Orabug: 38667152,39590859] {CVE-2025-38314}
- af_packet: move notifier's packet_dev_mc out of rcu critical section (Stanislav Fomichev) [Orabug: 38667152]
- team: grab team lock during team_change_rx_flags (Stanislav Fomichev) [Orabug: 38667152]
- net: devmem: fix kernel panic when netlink socket close after module unload (Taehee Yoo) [Orabug: 38667152]
- net: Lock lower level devices when updating features (Cosmin Ratiu) [Orabug: 38667152]
- net: add missing instance lock to dev_set_promiscuity (Stanislav Fomichev) [Orabug: 38667152]
- net: Lock netdevices during dev_shutdown (Cosmin Ratiu) [Orabug: 38667152]
- net: fix the missing unlock for detached devices (Jakub Kicinski) [Orabug: 38667152]
- virtio_pci: Use self group type for cap commands (Daniel Jurgens) [Orabug: 38667152]
- net: don't try to ops lock uninitialized devs (Jakub Kicinski) [Orabug: 38667152]
- net: don't mix device locking in dev_close_many() calls (Jakub Kicinski) [Orabug: 38667152]
- bonding: hold ops lock around get_link (Stanislav Fomichev) [Orabug: 38667152]
- rtnetlink: Fix bad unlock balance in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- bpf: add missing ops lock around dev_xdp_attach_link (Stanislav Fomichev) [Orabug: 38667152]
- eth: gve: add missing netdev locks on reset and shutdown paths (Jakub Kicinski) [Orabug: 38667152]
- net: fix use-after-free in the netdev_nl_sock_priv_destroy() (Taehee Yoo) [Orabug: 38667152]
- net: lapbether: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- net: move replay logic to tc_modify_qdisc (Stanislav Fomichev) [Orabug: 38667152]
- hamradio: use netdev_lockdep_set_classes() helper (Eric Dumazet) [Orabug: 38667152]
- bpf: fix a possible NULL deref in bpf_map_offload_map_alloc() (Eric Dumazet) [Orabug: 38667152]
- net: Prevent use after free in netif_napi_set_irq_locked() (Dan Carpenter) [Orabug: 38667152]
- iavf: fix circular lock dependency with netdev_lock (Jacob Keller) [Orabug: 38667152]
- s390/qeth: move netif_napi_add_tx() and napi_enable() from under BH (Alexandra Winter) [Orabug: 38667152]
- iavf: Fix a locking bug in an error path (Bart Van Assche) [Orabug: 38667152]
- wifi: mt76: move napi_enable() from under BH (Jakub Kicinski) [Orabug: 38667152]
- eth: via-rhine: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: niu: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- eth: 8139too: fix calling napi_enable() in atomic context (Jakub Kicinski) [Orabug: 38667152]
- net: mvneta: fix locking in mvneta_cpu_online() (Harshit Mogalapalli) [Orabug: 38667152]
- net: destroy dev->lock later in free_netdev() (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Eric Dumazet) [Orabug: 38667152]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Christophe Jaillet) [Orabug: 38667152]
- xdp: double protect netdev->xdp_flags with netdev->lock (Jakub Kicinski) [Orabug: 38667152]
- netdev: add "ops compat locking" helpers (Jakub Kicinski) [Orabug: 38667152]
- net: designate XSK pool pointers in queues as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: avoid potential race between netdev_get_by_index_lock() and netns switch (Jakub Kicinski) [Orabug: 38667152]
- net: hold instance lock during NETDEV_REGISTER/UP (Stanislav Fomichev) [Orabug: 38667152]
- net: switch to netif_disable_lro in inetdev_init (Stanislav Fomichev) [Orabug: 38667152]
- net: protect rxq->mp_params with the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue -> napi linking as "ops protected" (Jakub Kicinski) [Orabug: 38667152]
- net: designate queue counts as "double ops protected" by instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: explain "protection types" for the instance lock (Jakub Kicinski) [Orabug: 38667152]
- net: constify dev pointer in misc instance lock helpers (Jakub Kicinski) [Orabug: 38667152]
- net: remove netif_set_real_num_rx_queues() helper for when SYSFS=n (Jakub Kicinski) [Orabug: 38667152]
- net: bubble up taking netdev instance lock to callers of net_devmem_unbind_dmabuf() (Jakub Kicinski) [Orabug: 38667152]
- net: reorder dev_addr_sem lock (Stanislav Fomichev) [Orabug: 38667152]
- Revert "net: replace dev_addr_sem with netdev instance lock" (Stanislav Fomichev) [Orabug: 38667152]
- net: drop rtnl_lock for queue_mgmt operations (Stanislav Fomichev) [Orabug: 38667152]
- net: add granular lock for the netdev netlink socket (Stanislav Fomichev) [Orabug: 38667152]
- net: create netdev_nl_sock to wrap bindings list (Stanislav Fomichev) [Orabug: 38667152]
- net: add helpers for setting a memory provider on an rx queue (David Wei) [Orabug: 38667152]
- net: page_pool: add memory provider helpers (Pavel Begunkov) [Orabug: 38667152]
- net: prepare for non devmem TCP memory providers (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add a mp hook to unregister_netdevice* (Pavel Begunkov) [Orabug: 38667152]
- net: page_pool: add callback for mp info printing (Pavel Begunkov) [Orabug: 38667152]
- netdev: add io_uring memory provider info (David Wei) [Orabug: 38667152]
- net: generalise net_iov chunk owners (Pavel Begunkov) [Orabug: 38667152]
- net: prefix devmem specific helpers (Pavel Begunkov) [Orabug: 38667152]
- page_pool: disable sync for cpu for dmabuf memory provider (Mina Almasry) [Orabug: 38667152]
- net: page_pool: create page_pool_alloc_netmem (Mina Almasry) [Orabug: 38667152]
- net: page_pool: rename page_pool_alloc_netmem to *_netmems (Mina Almasry) [Orabug: 38667152]
- net: move misc netdev_lock flavors to a separate header (Jakub Kicinski) [Orabug: 38667152]
- net: add option to request netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: replace dev_addr_sem with netdev instance lock (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_bpf (Stanislav Fomichev) [Orabug: 38667152]
- net: disallow setup single buffer XDP when tcp-data-split is enabled. (Taehee Yoo) [Orabug: 38667152]
- net: ethtool: add hds_config member in ethtool_netdev_state (Taehee Yoo) [Orabug: 38667152]
- net: hold netdev instance lock during sysfs operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ioctl operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during rtnetlink operations (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during queue operations (Stanislav Fomichev) [Orabug: 38667152]
- net: move aRFS rmap management and CPU affinity to core (Ahmed Zaki) [Orabug: 38667152]
- net: warn if NAPI instance wasn't shut down (Jakub Kicinski) [Orabug: 38667152]
- net: protect napi->irq with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- bnxt: Add support for persistent NAPI config (Joe Damato) [Orabug: 38667152]
- gve: Map NAPI instances to queues (Joe Damato) [Orabug: 38667152]
- gve: Map IRQs to NAPI instances (Joe Damato) [Orabug: 38667152]
- net: devmem: don't call queue stop / start when the interface is down (Jakub Kicinski) [Orabug: 38667152]
- net: refactor netdev_rx_queue_restart() to use local qops (Jakub Kicinski) [Orabug: 38667152]
- net: hold netdev instance lock during qdisc ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: sched: wrap doit/dumpit methods (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during nft ndo_setup_tc (Stanislav Fomichev) [Orabug: 38667152]
- net: hold netdev instance lock during ndo_open/ndo_stop (Stanislav Fomichev) [Orabug: 38667152]
- net: plumb extack in __dev_change_net_namespace() (Nicolas Dichtel) [Orabug: 38667152]
- net: advertise netns_immutable property via netlink (Nicolas Dichtel) [Orabug: 38667152]
- net: protect threaded status of NAPI with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect NAPI enablement with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: protect netdev->napi_list with netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: make sure we retain NAPI ordering on netdev->napi_list (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev->up protected by netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: add helpers for lookup and walking netdevs under netdev_lock() (Jakub Kicinski) [Orabug: 38667152]
- net: warn during dump if NAPI list is not sorted (Jakub Kicinski) [Orabug: 38667152]
- net: make netdev_lock() protect netdev->reg_state (Jakub Kicinski) [Orabug: 38667152]
- net: add netdev_lock() / netdev_unlock() helpers (Jakub Kicinski) [Orabug: 38667152]
- eth: iavf: extend the netdev_lock usage (Jakub Kicinski) [Orabug: 38667152]
- net: cleanup init_dummy_netdev_core() (Jakub Kicinski) [Orabug: 38667152]
- net: remove init_dummy_netdev() (Jakub Kicinski) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Return int from rtnl_af_register(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Clean up rtnl_dellink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move ops->validate to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Call validate_linkmsg() in do_setlink(). (Kuniyuki Iwashima) [Orabug: 38667152]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Kuniyuki Iwashima) [Orabug: 38667152]
- iavf: add support to exchange qos capabilities (Sudheer Mogilappagari) [Orabug: 38667152]
- testing: net-drv: add basic shaper test (Paolo Abeni) [Orabug: 38667152]
- iavf: Add net_shaper_ops support (Sudheer Mogilappagari) [Orabug: 38667152]
- mm/hmm: provide generic DMA managing logic (Leon Romanovsky) [Orabug: 38667152]
- mm/hmm: let users to tag specific PFN with DMA mapped bit (Leon Romanovsky) [Orabug: 38667152]
- docs: core-api: document the IOVA-based API (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: add a dma_need_unmap helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Implement link/unlink ranges API (Leon Romanovsky) [Orabug: 38667152]
- iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: Provide an interface to allow allocate IOVA (Leon Romanovsky) [Orabug: 38667152]
- iommu: add kernel-doc for iommu_unmap_fast (Leon Romanovsky) [Orabug: 38667152]
- iommu: generalize the batched sync after map interface (Christoph Hellwig) [Orabug: 38667152]
- dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Christoph Hellwig) [Orabug: 38667152]
- PCI/P2PDMA: Refactor the p2pdma mapping helpers (Christoph Hellwig) [Orabug: 38667152]
- net: ethtool: Adjust exactly ETH_GSTRING_LEN-long stats to use memcpy (Kees Cook) [Orabug: 38667152]
- compiler_types: Introduce __nonstring_array (Kees Cook) [Orabug: 38667152]
- net: freescale: use ethtool string helpers (Rosen Penev) [Orabug: 38667152]
- vfio/pci: drop nth_page() usage within SG entry (David Hildenbrand) [Orabug: 38667152]
- mm: alloc_pages_bulk: rename API (Luiz Capitulino) [Orabug: 38667152]
- mm: alloc_pages_bulk_noprof: drop page_list argument (Luiz Capitulino) [Orabug: 38667152]
- vfio/virtio: Add PRE_COPY support for live migration (Yishai Hadas) [Orabug: 38667152]
- vfio/virtio: Add support for the basic live migration functionality (Yishai Hadas) [Orabug: 38667152]
- virtio-pci: Introduce APIs to execute device parts admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Manage device and driver capabilities via the admin commands (Yishai Hadas) [Orabug: 38667152]
- virtio: Extend the admin command to include the result size (Yishai Hadas) [Orabug: 38667152]
- virtio_pci: Introduce device parts access commands (Yishai Hadas) [Orabug: 38667152]



From el-errata at oss.oracle.com  Thu Aug 13 21:26:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:26:54 -0700
Subject: [El-errata] ELSA-2026-49603 Important: Oracle Linux 7
 gstreamer1-plugins-good security update
Message-ID: <mailman.115.1786656428.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-49603

http://linux.oracle.com/errata/ELSA-2026-49603.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-good-1.10.4-2.0.5.el7_9.i686.rpm
gstreamer1-plugins-good-1.10.4-2.0.5.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/gstreamer1-plugins-good-1.10.4-2.0.5.el7_9.src.rpm

Related CVEs:

CVE-2026-53705




Description of changes:

[1.10.4-2.0.5]
- Fix CVE-2026-53705 [Orabug: 39822536]

[1.10.4-2.0.3]
- Security update for CVE-2026-3083 CVE-2026-3085 [Orabug: 39199326]

[1.10.4-2.0.1]
- Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and
- CVE-2024-47607 [Orabug: 37407070]



From el-errata at oss.oracle.com  Thu Aug 13 21:26:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:26:56 -0700
Subject: [El-errata] ELSA-2026-50808 Moderate: Oracle Linux 7 libpng
 security update
Message-ID: <mailman.116.1786656430.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50808

http://linux.oracle.com/errata/ELSA-2026-50808.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
libpng-1.5.13-8.0.5.el7.i686.rpm
libpng-1.5.13-8.0.5.el7.x86_64.rpm
libpng-devel-1.5.13-8.0.5.el7.i686.rpm
libpng-devel-1.5.13-8.0.5.el7.x86_64.rpm
libpng-static-1.5.13-8.0.5.el7.i686.rpm
libpng-static-1.5.13-8.0.5.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/libpng-1.5.13-8.0.5.el7.src.rpm

Related CVEs:

CVE-2026-33416




Description of changes:

[2:1.5.13-8.0.5]
- Fix CVE-2026-33416 [Orabug: 39836909]

[2:1.5.13-8.0.3]
- Fix CVE-2026-25646 [Orabug: 39093556]

[2:1.5.13-8.0.1]
- Fix CVE-2025-64720 [Orabug: 38824465]



From el-errata at oss.oracle.com  Thu Aug 13 21:26:57 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:26:57 -0700
Subject: [El-errata] ELSA-2026-51063 Important: Oracle Linux 7 libXfont2
 security update
Message-ID: <mailman.117.1786656433.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51063

http://linux.oracle.com/errata/ELSA-2026-51063.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
libXfont2-2.0.3-1.0.1.el7.i686.rpm
libXfont2-2.0.3-1.0.1.el7.x86_64.rpm
libXfont2-devel-2.0.3-1.0.1.el7.i686.rpm
libXfont2-devel-2.0.3-1.0.1.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/libXfont2-2.0.3-1.0.1.el7.src.rpm

Related CVEs:

CVE-2026-56001
CVE-2026-56002
CVE-2026-56003




Description of changes:

[2.0.3-1.0.1]
- Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 [Orabug: 39843361]



From el-errata at oss.oracle.com  Thu Aug 13 21:26:59 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:26:59 -0700
Subject: [El-errata] ELSA-2026-51183 Important: Oracle Linux 7 glib2
 security update
Message-ID: <mailman.118.1786656433.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-51183

http://linux.oracle.com/errata/ELSA-2026-51183.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
glib2-2.56.1-9.0.7.el7_9.i686.rpm
glib2-2.56.1-9.0.7.el7_9.x86_64.rpm
glib2-devel-2.56.1-9.0.7.el7_9.i686.rpm
glib2-devel-2.56.1-9.0.7.el7_9.x86_64.rpm
glib2-doc-2.56.1-9.0.7.el7_9.noarch.rpm
glib2-fam-2.56.1-9.0.7.el7_9.x86_64.rpm
glib2-static-2.56.1-9.0.7.el7_9.i686.rpm
glib2-static-2.56.1-9.0.7.el7_9.x86_64.rpm
glib2-tests-2.56.1-9.0.7.el7_9.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/glib2-2.56.1-9.0.7.el7_9.src.rpm

Related CVEs:

CVE-2026-58016




Description of changes:

[2.56.1-9.0.7]
- Fixes CVE-2026-58016 [Orabug: 39844471]

[2.56.1-9.0.5]
- Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716]

[2.56.1-9.0.3]
- Fixes CVE-2025-13601  g_escape_uri_string() overflow [Orabug: 38909821]

[2.56.1-9.0.1]
- Fix overflow of GDBusConnection serial [Orabug: 38666376]



From el-errata at oss.oracle.com  Thu Aug 13 21:28:05 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:28:05 -0700
Subject: [El-errata] ELBA-2026-500164 Oracle Linux 7 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.119.1786656498.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500164

http://linux.oracle.com/errata/ELBA-2026-500164.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.1.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.358.2.1.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.1.el7uek.src.rpm



Description of changes:

[5.4.17-2136.358.2.1]
- Partial revert of "x86/alternatives: Optimize optimize_nops()" (Harshit Mogalapalli)  [Orabug: 39855738]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39855738]

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}



From el-errata at oss.oracle.com  Thu Aug 13 21:31:14 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:14 -0700
Subject: [El-errata] ELBA-2026-500148 Oracle Linux 8 systemd bug fix update
Message-ID: <mailman.120.1786656687.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500148

http://linux.oracle.com/errata/ELBA-2026-500148.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
systemd-239-82.0.13.el8_10.17.i686.rpm
systemd-239-82.0.13.el8_10.17.x86_64.rpm
systemd-container-239-82.0.13.el8_10.17.i686.rpm
systemd-container-239-82.0.13.el8_10.17.x86_64.rpm
systemd-devel-239-82.0.13.el8_10.17.i686.rpm
systemd-devel-239-82.0.13.el8_10.17.x86_64.rpm
systemd-journal-remote-239-82.0.13.el8_10.17.x86_64.rpm
systemd-libs-239-82.0.13.el8_10.17.i686.rpm
systemd-libs-239-82.0.13.el8_10.17.x86_64.rpm
systemd-pam-239-82.0.13.el8_10.17.x86_64.rpm
systemd-tests-239-82.0.13.el8_10.17.x86_64.rpm
systemd-udev-239-82.0.13.el8_10.17.x86_64.rpm

aarch64:
systemd-239-82.0.13.el8_10.17.aarch64.rpm
systemd-container-239-82.0.13.el8_10.17.aarch64.rpm
systemd-devel-239-82.0.13.el8_10.17.aarch64.rpm
systemd-journal-remote-239-82.0.13.el8_10.17.aarch64.rpm
systemd-libs-239-82.0.13.el8_10.17.aarch64.rpm
systemd-pam-239-82.0.13.el8_10.17.aarch64.rpm
systemd-tests-239-82.0.13.el8_10.17.aarch64.rpm
systemd-udev-239-82.0.13.el8_10.17.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/systemd-239-82.0.13.el8_10.17.src.rpm



Description of changes:

[239-82.0.13.el8_10.17]
- coredump: fix %d backport [Orabug: 38584054]



From el-errata at oss.oracle.com  Thu Aug 13 21:31:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:16 -0700
Subject: [El-errata] ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.121.1786656690.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500164

http://linux.oracle.com/errata/ELBA-2026-500164.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.358.2.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.358.2.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.358.2.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.358.2.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.1.el8uek.src.rpm



Description of changes:

[5.4.17-2136.358.2.1]
- Partial revert of "x86/alternatives: Optimize optimize_nops()" (Harshit Mogalapalli)  [Orabug: 39855738]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39855738]

[5.4.17-2136.358.2.0.1]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39832992]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39832992]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39832992]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39832992]
- x86/alternative: Optimize single-byte NOPs at an arbitrary position (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Align insn bytes vertically (Borislav Petkov)  [Orabug: 39832992]
(H. Peter Anvin (Intel))  [Orabug: 39832992]
- x86/alternatives: Optimize optimize_nops() (Peter Zijlstra)  [Orabug: 39832992]
- x86: Add insn_decode_kernel() (Peter Zijlstra)  [Orabug: 39832992]
- x86/insn: Add an insn_decode() API (Borislav Petkov)  [Orabug: 39832992]
- x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Support ALTERNATIVE_TERNARY (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Merge include files (Juergen Gross)  [Orabug: 39832992]
- x86/alternative: Drop unused feature parameter from ALTINSTR_REPLACEMENT() (Juergen Gross)  [Orabug: 39832992]
- x86/insn: Support big endian cross-compiles (Martin Schwidefsky)  [Orabug: 39832992]
- x86/tools: Use tools headers for instruction decoder selftests (Vasily Gorbik)  [Orabug: 39832992]
- tools headers: Get tools's linux/compiler.h closer to the kernel's (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- perf build: Allow nested externs to enable BUILD_BUG() usage (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Allow nested externs to enable BUILD_BUG() (Vasily Gorbik)  [Orabug: 39832992]
- objtool: Make relocation in alternative handling arch dependent (Julien Thierry)  [Orabug: 39832992]
- x86/alternatives: Add pr_fmt() to debug macros (Borislav Petkov)  [Orabug: 39832992]
- tools headers: Adopt verbatim copy of compiletime_assert() from kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- x86/alternatives: Teach text_poke_bp() to emulate instructions (Peter Zijlstra)  [Orabug: 39832992]
- tools headers: Synchronize linux/bits.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 39832992]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39832997]

[5.4.17-2136.358.2]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39776792]  {CVE-2026-64600}
- net: Work around Marvell NIC TX stalls (Venkat Venkatsubra)  [Orabug: 39765820]

[5.4.17-2136.358.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu)  [Orabug: 39673871]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini)  [Orabug: 39673871]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack)  [Orabug: 39673871]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan)  [Orabug: 39673871]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan)  [Orabug: 39673871]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack)  [Orabug: 39673871]
- KVM: x86/mmu: Use a bool for direct (David Matlack)  [Orabug: 39673871]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon)  [Orabug: 39673871]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson)  [Orabug: 39673871]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson)  [Orabug: 39673871]
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju)  [Orabug: 39659401]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela)  [Orabug: 39567287]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta)  [Orabug: 39567287]  {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham)  [Orabug: 39567287]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela)  [Orabug: 39567287]
- net/sched: simplify tcf_pedit_act (Pedro Tammela)  [Orabug: 39567287]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela)  [Orabug: 39567287]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela)  [Orabug: 39567287]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (hkbinbin)  [Orabug: 39452261]  {CVE-2026-46043}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso)  [Orabug: 39426001]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong)  [Orabug: 39426001]  {CVE-2026-43499}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)  [Orabug: 39300930]  {CVE-2026-43038}
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil)  [Orabug: 38790406]
- net/mlx5: poll mlx5 eq during irq migration (Praveen Kumar Kannoju)  [Orabug: 38776184]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen)  [Orabug: 39619389]  {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)  [Orabug: 39250953]  {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)  [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)  [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru)  [Orabug: 39526882]  {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland)  [Orabug: 39548666]  {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland)  [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland)  [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland)  [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet)  [Orabug: 39300926]  {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie)  [Orabug: 39262375]  {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito)  [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito)  [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair)  [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada)  [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}



From el-errata at oss.oracle.com  Thu Aug 13 21:31:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:18 -0700
Subject: [El-errata] ELSA-2026-52765 Moderate: Oracle Linux 8 kernel
 security update
Message-ID: <mailman.124.1786656692.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52765

http://linux.oracle.com/errata/ELSA-2026-52765.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.154.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.154.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.154.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.154.1.el8_10.x86_64.rpm
perf-4.18.0-553.154.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.154.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.154.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.154.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.154.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.154.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.154.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.154.1.el8_10.aarch64.rpm
perf-4.18.0-553.154.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.154.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.154.1.el8_10.src.rpm

Related CVEs:

CVE-2026-64496




Description of changes:

[4.18.0-553.153.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.154.1]
- iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496}
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)



From el-errata at oss.oracle.com  Thu Aug 13 21:31:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:21 -0700
Subject: [El-errata] ELSA-2026-52772 Important: Oracle Linux 8
 perl-DBI:1.641 security update
Message-ID: <mailman.125.1786656695.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-52772

http://linux.oracle.com/errata/ELSA-2026-52772.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
perl-DBI-1.641-8.module+el8.10.0+90986+45c0847f.x86_64.rpm
perl-DBI-1.641-8.module+el8.10.0+90987+dfc813d3.x86_64.rpm

aarch64:
perl-DBI-1.641-8.module+el8.10.0+90986+45c0847f.aarch64.rpm
perl-DBI-1.641-8.module+el8.10.0+90987+dfc813d3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/perl-DBI-1.641-8.module+el8.10.0+90986+45c0847f.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/perl-DBI-1.641-8.module+el8.10.0+90987+dfc813d3.src.rpm

Related CVEs:

CVE-2026-14380
CVE-2026-14739




Description of changes:

perl-DBI
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
  Resolves: RHEL-211151

[1.641-7]
- Fix patch.

[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
  Resolves: RHEL-193298

[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
  Resolves: RHEL-184974

[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests

[1.641-3]
- Rebuild with enable hardening (bug #1636329)

[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)

[1.641-1]
- 1.641 bump

[1.640-3]
- Add build-require gcc

[1.640-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

perl-DBI
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
  Resolves: RHEL-211151

[1.641-7]
- Fix patch.

[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
  Resolves: RHEL-193298

[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
  Resolves: RHEL-184974

[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests

[1.641-3]
- Rebuild with enable hardening (bug #1636329)

[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)

[1.641-1]
- 1.641 bump

[1.640-3]
- Add build-require gcc

[1.640-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild



From el-errata at oss.oracle.com  Thu Aug 13 21:31:24 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:24 -0700
Subject: [El-errata] ELSA-2026-53848 Important: Oracle Linux 8 isns-utils
 security update
Message-ID: <mailman.126.1786656699.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53848

http://linux.oracle.com/errata/ELSA-2026-53848.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
isns-utils-0.99-1.el8_10.1.x86_64.rpm
isns-utils-devel-0.99-1.el8_10.1.i686.rpm
isns-utils-devel-0.99-1.el8_10.1.x86_64.rpm
isns-utils-libs-0.99-1.el8_10.1.i686.rpm
isns-utils-libs-0.99-1.el8_10.1.x86_64.rpm

aarch64:
isns-utils-0.99-1.el8_10.1.aarch64.rpm
isns-utils-devel-0.99-1.el8_10.1.aarch64.rpm
isns-utils-libs-0.99-1.el8_10.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/isns-utils-0.99-1.el8_10.1.src.rpm

Related CVEs:

CVE-2026-55995




Description of changes:

[0.99-1.1]
- Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995)



From el-errata at oss.oracle.com  Thu Aug 13 21:31:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:27 -0700
Subject: [El-errata] ELSA-2026-54243 Important: Oracle Linux 8 grafana
 security update
Message-ID: <mailman.127.1786656702.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54243

http://linux.oracle.com/errata/ELSA-2026-54243.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
grafana-9.2.10-32.0.1.el8_10.1.x86_64.rpm
grafana-selinux-9.2.10-32.0.1.el8_10.1.x86_64.rpm

aarch64:
grafana-9.2.10-32.0.1.el8_10.1.aarch64.rpm
grafana-selinux-9.2.10-32.0.1.el8_10.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/grafana-9.2.10-32.0.1.el8_10.1.src.rpm

Related CVEs:

CVE-2026-33377
CVE-2026-42127




Description of changes:

[9.2.10-32.0.1.el8_10.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-32.1]
- Resolves RHEL-219393: CVE-2026-42127
- Resolves RHEL-211017: CVE-2026-33377



From el-errata at oss.oracle.com  Thu Aug 13 21:31:29 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:31:29 -0700
Subject: [El-errata] ELSA-2026-54290 Moderate: Oracle Linux 8 python-idna
 security update
Message-ID: <mailman.128.1786656702.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54290

http://linux.oracle.com/errata/ELSA-2026-54290.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-idna-2.5-8.el8_10.noarch.rpm

aarch64:
python3-idna-2.5-8.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/python-idna-2.5-8.el8_10.src.rpm

Related CVEs:

CVE-2026-45409




Description of changes:

[2.5-8]
- Security fix for CVE-2026-45409
Resolves: RHEL-215650



From el-errata at oss.oracle.com  Thu Aug 13 21:34:41 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 14:34:41 -0700
Subject: [El-errata] ELBA-2026-500164 Oracle Linux 8 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.129.1786656894.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500164

http://linux.oracle.com/errata/ELBA-2026-500164.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-container-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.358.2.1.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.358.2.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.358.2.1.el8uek.src.rpm



Description of changes:

[5.4.17-2136.358.2.1]
- Partial revert of "x86/alternatives: Optimize optimize_nops()" (Harshit Mogalapalli)  [Orabug: 39855738]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39855738]



From el-errata at oss.oracle.com  Thu Aug 13 23:22:19 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:22:19 -0700
Subject: [El-errata] ELBA-2026-500163 Oracle Linux 8 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.130.1786663355.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500163

http://linux.oracle.com/errata/ELBA-2026-500163.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-core-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-debug-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-devel-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-doc-5.15.0-323.211.3.3.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-container-5.15.0-323.211.3.3.el8uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-323.211.3.3.el8uek.x86_64.rpm

aarch64:
bpftool-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-core-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-debug-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-devel-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-doc-5.15.0-323.211.3.3.el8uek.noarch.rpm
kernel-uek-modules-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-container-5.15.0-323.211.3.3.el8uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-323.211.3.3.el8uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.15.0-323.211.3.3.el8uek.src.rpm



Description of changes:

[5.15.0-323.211.3.3]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39853924]

[5.15.0-323.211.3.2]
- ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Hans de Goede)  [Orabug: 39848333]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39848194]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39848194]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39848194]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39848194]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39848194]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39848194]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39849605]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39849605]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39849605]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39849605]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39848314]

[5.15.0-323.211.3.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816016]  {CVE-2026-64531}
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39816098]  {CVE-2026-64600}

[5.15.0-323.211.3]
- LTS version: v5.15.211 (Vijayendra Suman)
- dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [Orabug: 37844553] {CVE-2025-23131}
- crypto: qat - remove unused character device and IOCTLs (Giovanni Cabiddu) [Orabug: 39786549] {CVE-2026-64529}
- crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Herbert Xu)
- crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Thorsten Blum)
- Documentation: ioctl-number: Extend "Include File" column width (Bagas Sanjaya)
- ksmbd: reject non-VALID session in compound request branch (Gil Portnoy)
- fuse: re-lock request before replacing page cache folio (Joanne Koong) [Orabug: 39753883] {CVE-2026-53388}
- net: phonet: free phonet_device after RCU grace period (Santosh Kalluri) [Orabug: 39637380] {CVE-2026-53157}
- phonet: Pass net and ifindex to phonet_address_notify(). (Kuniyuki Iwashima)
- phonet: Pass ifindex to fill_addr(). (Kuniyuki Iwashima)
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (Dexuan Cui)
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback (Mukesh Ojha)
- misc: fastrpc: Add dma_mask to fastrpc_channel_ctx (Abel Vesa)
- hv: utils: handle and propagate errors in kvp_register (Thorsten Blum)
- mptcp: fix missing wakeups in edge scenarios (Paolo Abeni)
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (Michael Bommarito) [Orabug: 39753890] {CVE-2026-53391}
- nfsd: check get_user() return when reading princhashlen (Dominik Wo?niak)
- nfsd: fix posix_acl leak on SETACL decode failure (Jeff Layton) [Orabug: 39753905] {CVE-2026-53397}
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (Guannan Wang) [Orabug: 39753909] {CVE-2026-53398}
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode (Steffen Persvold)
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (Ian Bridges) [Orabug: 39753928] {CVE-2026-53403}
- power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() (Xu Wang)
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (Ashutosh Desai) [Orabug: 39753936] {CVE-2026-63794}
- ocfs2: reject oversized group bitmap descriptors (Zhang Cen) [Orabug: 39753942] {CVE-2026-63796}
- fpga: region: fix use-after-free in child_regions_with_firmware() (Xu Wang)
- irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove (Qingshuang Fu)
- pNFS: Fix use-after-free in pnfs_update_layout() (Xu Wang) [Orabug: 39753953] {CVE-2026-63800}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Doruk Tan Ozturk) [Orabug: 39753957] {CVE-2026-63801}
- hdlc_ppp: sync per-proto timers before freeing hdlc state (Fan Wu) [Orabug: 39753963] {CVE-2026-63803}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (Michael Bommarito) [Orabug: 39753979] {CVE-2026-63808}
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS (Maciej W. Rozycki)
- bpf: use kvfree() for replaced sysctl write buffer (Dawei Feng) [Orabug: 39753982] {CVE-2026-63809}
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk() (Zhang Cen)
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor (Bitterblue Smith)
- wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [Orabug: 39754021] {CVE-2026-63822}
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S (Zenm Chen)
- keys: Pin request_key_auth payload in instantiate paths (Shaomin Chen) [Orabug: 39754024] {CVE-2026-63823}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Jarkko Sakkinen) [Orabug: 39754028] {CVE-2026-63824}
- mac802154: llsec: add skb_cow_data() before in-place crypto (Doruk Tan Ozturk) [Orabug: 39754053] {CVE-2026-63831}
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [Orabug: 38503789] {CVE-2025-39931}
- ext4: add bounds check for inline data length in ext4_read_inline_page (Yuto Ohnuki)
- ntfs3: reject direct userspace writes to reserved $LX* xattrs (Konstantin Komarov)
- ring-buffer: Remove ring_buffer_read_prepare_sync() (Bjoern Doebel)
- batman-adv: tvlv: avoid race of cifsnotfound handler state (Sven Eckelmann)
- batman-adv: tvlv: enforce 2-byte alignment (Sven Eckelmann)
- batman-adv: dat: prevent false sharing between VLANs (Sven Eckelmann)
- batman-adv: tt: track roam count per VID (Sven Eckelmann)
- batman-adv: tt: don't merge change entries with different VIDs (Sven Eckelmann)
- batman-adv: tp_meter: handle overlapping packets (Sven Eckelmann)
- batman-adv: tp_meter: prevent parallel modifications of last_recv (Sven Eckelmann)
- batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: restrict number of unacked list entries (Sven Eckelmann) [Orabug: 39754066] {CVE-2026-63834}
- batman-adv: v: prevent OGM aggregation on disabled hardif (Sven Eckelmann) [Orabug: 39754070] {CVE-2026-63835}
- batman-adv: frag: avoid underflow of TTL (Sven Eckelmann)
- batman-adv: frag: ensure fragment is writable before modifying TTL (Sven Eckelmann)
- batman-adv: fix (m|b)cast csum after decrementing TTL (Sven Eckelmann)
- batman-adv: ensure bcast is writable before modifying TTL (Sven Eckelmann)
- batman-adv: tp_meter: initialize last_recv_time during init (Sven Eckelmann)
- batman-adv: prevent ELP transmission interval underflow (Sven Eckelmann)
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: add only finished tp_vars to lists (Sven Eckelmann)
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection (Sven Eckelmann)
- batman-adv: tp_meter: fix fast recovery precondition (Sven Eckelmann)
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (Sven Eckelmann) [Orabug: 39754076] {CVE-2026-63836}
- batman-adv: tp_meter: avoid window underflow (Sven Eckelmann)
- batman-adv: tp_meter: initialize dec_cwnd explicitly (Sven Eckelmann)
- batman-adv: tp_meter: initialize dup_acks explicitly (Sven Eckelmann)
- batman-adv: tp_meter: keep unacked list in ascending ordered (Sven Eckelmann)
- kselftest/arm64: signal: Skip SVE signal test if not enough VLs supported (Yijia Wang)
- Revert "ptp: add testptp mask test" (Petr Machata)
- Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" (Petr Machata)
- virtiofs: fix UAF on submount umount (Miklos Szeredi) [Orabug: 39753856] {CVE-2026-53381}
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (Ruslan Valiyev)
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (Yi Yang) [Orabug: 39753871] {CVE-2026-53385}
- regulator: core: fix locking in regulator_resolve_supply() error path (Andr? Draszik) [Orabug: 39489558] {CVE-2026-46252}
- af_unix: Reject SIOCATMARK on non-stream sockets (Jiexun Wang) [Orabug: 39619334] {CVE-2026-52928}
- xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman)
- agp/amd64: Fix broken error propagation in agp_amd64_probe() (Mingyu Wang) [Orabug: 39662073] {CVE-2026-53325}
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (Weiming Shi)
- i2c: stub: Reject I2C block transfers with invalid length (Weiming Shi) [Orabug: 39760892] {CVE-2026-64191}
- RDMA/bnxt_re: zero shared page before exposing to userspace (Lord Ulf Henrik Holmberg)
- iio: light: bh1780: fix PM runtime leak on error path (Antoniu Miclaus)
- batman-adv: tt: prevent TVLV entry number overflow (Sven Eckelmann)
- batman-adv: tt: reject oversized local TVLV buffers (Sven Eckelmann)
- drm/v3d: Skip CSD when it has zeroed workgroups (Ma?ra Canal)
- drm/v3d: Store the active job inside the queue's state (Ma?ra Canal)
- ip6_vti: set netns_immutable on the fallback device. (Eric Dumazet) [Orabug: 39589885] {CVE-2026-52909}
- drm/amd/display: Bound VBIOS record-chain walk loops (Harry Wentland) [Orabug: 39637312] {CVE-2026-53138}
- fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (Jann Horn) [Orabug: 39637410] {CVE-2026-53167}
- LTS version: v5.15.210 (Vijayendra Suman)
- netfilter: require Ethernet MAC header before using eth_hdr() (Zhengchuan Liang) [Orabug: 39637279] {CVE-2026-53131}
- batman-adv: tp_meter: avoid role confusion in tp_list (Sven Eckelmann)
- batman-adv: tp_meter: fix race condition in send error reporting (Sven Eckelmann)
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Ali Ganiyev)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- media: rc: igorplugusb: fix control request setup packet (Henri A) [Orabug: 39785220] {CVE-2026-64240}
- batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982] {CVE-2026-64092}
- media: rc: ttusbir: fix inverted error logic (Oliver Neukum)
- apparmor: validate default DFA states are in bounds (Ben Hutchings)
- fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter (Ben Hutchings)
- mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] {CVE-2026-63867}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Will Deacon)
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Shanker Donthineni)
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39674327] {CVE-2026-53354}
- arm64: cputype: Add NVIDIA Olympus definitions (Shanker Donthineni)
- selinux: enable genfscon labeling for securityfs (Christian G?ttsche)
- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Aaron Erhardt)
- ksmbd: Compare MACs in constant time (Eric Biggers)
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou) [Orabug: 39343685] {CVE-2026-43341}
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure (Sven Eckelmann)
- batman-adv: stop tp_meter sessions during mesh teardown (Jiexun Wang) [Orabug: 39460622] {CVE-2026-46208}
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (Tejun Heo)
- ipvs: skip ipv6 extension headers for csum checks (Julian Anastasov) [Orabug: 39451541] {CVE-2026-45850}
- mm/huge_memory: update file PMD counter before folio_put() (Yin Tirui) [Orabug: 39637477] {CVE-2026-53189}
- RDMA/umem: Fix truncation for block sizes >= 4G (Jason Gunthorpe)
- RDMA: Move DMA block iterator logic into dedicated files (Leon Romanovsky)
- RDMA/umem: fix kernel-doc warnings (Randy Dunlap)
- hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf (Anton Leontev) [Orabug: 39637516] {CVE-2026-53199}
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Davide Ornaghi) [Orabug: 39637292] {CVE-2026-53134}
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (Prasanna S)
- tty: serial: qcom-geni-serial: align #define values (Bartosz Golaszewski)
- tty: serial: qcom-geni-serial: remove unused symbols (Bartosz Golaszewski)
- serial: altera_jtaguart: handle uart_add_one_port() failures (Myeonghun Pak)
- serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt (Lad Prabhakar)
- drm/hyperv: validate resolution_count and fix WIN8 fallback (Berkant Koc) [Orabug: 39786537] {CVE-2026-64524}
- drm/hyperv: Remove support for Hyper-V 2008 and 2008R2/Win7 (Michael Kelley)
- usb: typec: ucsi: Check if power role change actually happened before handling (Myrrh Periwinkle)
- thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (Michael Bommarito) [Orabug: 39754211] {CVE-2026-63891}
- usb: gadget: f_hid: fix device reference leak in hidg_alloc() (Guangshuo Li)
- usb: gadget: f_hid: tidy error handling in hidg_alloc (John Keeping)
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths (Radhey Shyam Pandey)
- tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (Tudor Ambarus) [Orabug: 39786545] {CVE-2026-64528}
- tty: serial: samsung: use u32 for register interactions (Tudor Ambarus)
- serial: samsung_tty: Use port lock wrappers (Thomas Gleixner)
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure (Peter Chen)
- iio: dac: ad5686: fix ref bit initialization for single-channel parts (Rodrigo Alencar)
- iio: chemical: scd30: fix division by zero in write_raw (Antoniu Miclaus)
- iio: chemical: scd30: Use guard(mutex) to allow early returns (Jonathan Cameron)
- iio: gyro: adis16260: fix division by zero in write_raw (Antoniu Miclaus)
- Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (Siwei Zhang) [Orabug: 39681273] {CVE-2026-53358}
- phy: tegra: xusb: Fix per-pad high-speed termination calibration (Wayne Chang)
- phy: tegra: xusb: Disable trk clk when not in use (Wayne Chang)
- arm64: tlb: Flush walk cache when unsharing PMD tables (Zeng Heng) [Orabug: 39755010] {CVE-2026-63875}
- spi: qup: fix error pointer deref after DMA setup failure (Johan Hovold) [Orabug: 39754942] {CVE-2026-64170}
- spi: qup: switch to use modern name (Yang Yingliang)
- octeontx2-pf: avoid double free of pool->stack on AQ init failure (Dawei Feng)
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (Sam Daly)
- mptcp: do not drop partial packets (Shardul Bankar)
- selftests: mptcp: drop nanoseconds width specifier (Matthieu Baerts)
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient (Li Xiasong)
- use less confusing names for iov_iter direction initializers (Al Viro)
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Justin Iurman) [Orabug: 39754825] {CVE-2026-64116}
- ipv6/addrconf: annotate data-races around devconf fields (II) (Eric Dumazet)
- ice: fix VF queue configuration with low MTU values (Jose Ignacio Tornos Martinez)
- net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840] {CVE-2026-64123}
- Bluetooth: serialize accept_q access (Jiexun Wang) [Orabug: 39619283] {CVE-2026-52918}
- Bluetooth: Init sk_peer_* on bt_sock_alloc (Luiz Augusto von Dentz)
- Bluetooth: Consolidate code around sk_alloc into a helper function (Luiz Augusto von Dentz)
- qed: fix double free in qed_cxt_tables_alloc() (Dawei Feng) [Orabug: 39754830] {CVE-2026-64118}
- Bluetooth: MGMT: validate Add Extended Advertising Data length (Michael Bommarito) [Orabug: 39754849] {CVE-2026-64126}
- Bluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2 (Luiz Augusto von Dentz)
- Bluetooth: hci_qca: Convert timeout from jiffies to ms (Shuai Zhang)
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (Safa Karaku?) [Orabug: 39681270] {CVE-2026-53357}
- smb: client: require net admin for CIFS SWN netlink (Michael Bommarito)
- genetlink: Use internal flags for multicast groups (Ido Schimmel)
- spi: lantiq-ssc: fix controller deregistration (Johan Hovold)
- spi: st-ssc4: fix controller deregistration (Johan Hovold)
- f2fs: fix false alarm of lockdep on cp_global_sem lock (Chao Yu)
- f2fs: fix incorrect file address mapping when inline inode is unwritten (Yongpeng Yang)
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker (Matthieu Baerts)
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts) [Orabug: 39460320] {CVE-2026-46137}
- mptcp: pm: prio: skip closed subflows (Matthieu Baerts)
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Piyush Sachdeva)
- btrfs: fix missing last_unlink_trans update when removing a directory (Filipe Manana) [Orabug: 39460410] {CVE-2026-46160}
- smb: client: validate dacloffset before building DACL pointers (Michael Bommarito)
- pmdomain: core: Fix detach procedure for virtual devices in genpd (Ulf Hansson) [Orabug: 39524579] {CVE-2026-46292}
- tracing/probes: Limit size of event probe to 3K (Steven Rostedt)
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (Yochai Eisenrich) [Orabug: 39460405] {CVE-2026-46159}
- spi: topcliff-pch: fix controller deregistration (Johan Hovold)
- spi: topcliff-pch: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [Orabug: 39460548] {CVE-2026-46191}
- mm/hugetlb_cma: round up per_node before logging it (Sang-Heon Jeon)
- spi: uniphier: fix controller deregistration (Johan Hovold)
- spi: tegra20-sflash: fix controller deregistration (Johan Hovold)
- spi: tegra114: fix controller deregistration (Johan Hovold)
- spi: sun6i: fix controller deregistration (Johan Hovold)
- spi: zynq-qspi: fix controller deregistration (Johan Hovold)
- spi: ti-qspi: fix controller deregistration (Johan Hovold)
- spi: spi-ti-qspi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- spi: sun4i: fix controller deregistration (Johan Hovold)
- spi: syncuacer: fix controller deregistration (Johan Hovold)
- xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] {CVE-2026-46193}
- net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers)
- net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers)
- usb: dwc3: Move GUID programming after PHY initialization (Selvarasu Ganesan)
- wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Marek Szyprowski) [Orabug: 39460504] {CVE-2026-46180}
- usb: typec: tcpm: reset internal port states on soft reset AMS (Amit Sunil Dhamne)
- smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito)
- tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (David Carlier) [Orabug: 39460568] {CVE-2026-46196}
- crypto: caam - guard HMAC key hex dumps in hash_digest_key (Thorsten Blum)
- printk: add print_hex_dump_devel() (Thorsten Blum)
- ALSA: aloop: Fix peer runtime UAF during format-change stop (C?ssio Gabriel) [Orabug: 39452424] {CVE-2026-46090}
- ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [Orabug: 39452292] {CVE-2026-46052}
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (Junrui Luo)
- can: ucan: fix devres lifetime (Johan Hovold)
- can: ucan: fix typos in comments (Julia Lawall)
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [Orabug: 39452305] {CVE-2026-46056}
- hfsplus: fix held lock freed on hfsplus_fill_super() (Zilin Guan)
- hfsplus: fix uninit-value by validating catalog record size (Deepanshu Kartikey)
- udf: fix partition descriptor append bookkeeping (Seohyeon Maeng) [Orabug: 39452078] {CVE-2026-45991}
- mtd: spi-nor: sst: Fix write enable before AAI sequence (Sanjaikumar V S)
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration (Shawn Lin)
- randomize_kstack: Maintain kstack_offset per task (Ryan Roberts)
- fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (Thomas Zimmermann) [Orabug: 39452332] {CVE-2026-46065}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [Orabug: 39452412] {CVE-2026-46086}
- net: qrtr: ns: Limit the total number of nodes (Manivannan Sadhasivam) [Orabug: 39452124] {CVE-2026-46003}
- net: mctp: fix don't require received header reserved bits to be zero (Yuanzhaoming)
- net: qrtr: ns: Free the node during ctrl_cmd_bye() (Manivannan Sadhasivam) [Orabug: 39452247] {CVE-2026-46038}
- net: qrtr: ns: Change servers radix tree to xarray (Vignesh Viswanathan)
- net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208] {CVE-2026-46026}
- ALSA: core: Fix potential data race at fasync handling (Takashi Iwai)
- sched: Use u64 for bandwidth ratio calculations (Joseph Salisbury)
- media: rc: igorplugusb: heed coherency rules (Oliver Neukum) [Orabug: 39452433] {CVE-2026-46091}
- erofs: fix the out-of-bounds nameoff handling for trailing dirents (Gao Xiang)
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Thorsten Blum)
- media: rc: ttusbir: respect DMA coherency rules (Oliver Neukum)
- ALSA: aoa: i2sbus: clear stale prepared state (C?ssio Gabriel)
- ALSA: aoa: Use guard() for mutex locks (Takashi Iwai)
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] {CVE-2026-46069}
- thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [Orabug: 39452187] {CVE-2026-46021}
- wifi: rtw88: check for PCI upstream bridge existence (Fedor Pchelkin) [Orabug: 39452438] {CVE-2026-46092}
- rtw88: 8821ce: Disable PCIe ASPM L1 for 8821CE using chip ID (Jimmy Hon)
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Anshuman Khandual)
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [Orabug: 39300581] {CVE-2026-31700}
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Michael Bommarito)
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito)
- smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito)
- smb: server: fix max_connections off-by-one in tcp accept path (Daemyung Kang)
- smb: server: fix active_num_conn leak on transport allocation failure (Michael Bommarito)
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() (Yongpeng Yang)
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally (Chao Yu)
- lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (Lukas Wunner)
- net/tcp-md5: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 39343806] {CVE-2026-43383}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() (Longxuan Yu) [Orabug: 39619351] {CVE-2026-52933}
- mm/damon/ops-common: call folio_test_lru() after folio_get() (Seongjae Park)
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (Mingyu Wang) [Orabug: 39655978] {CVE-2026-52946}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Harry Wentland) [Orabug: 39674253] {CVE-2026-53329}
- drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Harry Wentland) [Orabug: 39637296] {CVE-2026-53135}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Harry Wentland) [Orabug: 39637301] {CVE-2026-53136}
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Harry Wentland)
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock (Bjorn Andersson)
- thunderbolt: Limit XDomain response copy to actual frame size (Michael Bommarito) [Orabug: 39637337] {CVE-2026-53146}
- thunderbolt: Clamp XDomain response data copy to allocation size (Michael Bommarito) [Orabug: 39637346] {CVE-2026-53148}
- thunderbolt: Bound root directory content to block size (Michael Bommarito) [Orabug: 39637351] {CVE-2026-53149}
- thunderbolt: Reject zero-length property entries in validator (Michael Bommarito) [Orabug: 39637356] {CVE-2026-53150}
- sctp: stream: fully roll back denied add-stream state (Wyatt Feng) [Orabug: 39619338] {CVE-2026-52929}
- sctp: diag: reject stale associations in dump_one path (Zhao Zhang) [Orabug: 39619278] {CVE-2026-52917}
- mmc: sdhci: add signal voltage switch in sdhci_resume_host (Jisheng Zhang)
- mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC (Lad Prabhakar)
- mmc: core: Fix host controller programming for fixed driver type (Kamal Dasu)
- net: mv643xx: fix OF node refcount (Bartosz Golaszewski)
- net: bonding: fix NULL pointer dereference in bond_do_ioctl() (Zhaojinming) [Orabug: 39674284] {CVE-2026-53337}
- misc: fastrpc: fix DMA address corruption due to find_vma misuse (Junrui Luo)
- misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context (Anandu Krishnan E)
- ipc/shm: serialize orphan cleanup with shm_nattch updates (Yilin Zhu) [Orabug: 39619342] {CVE-2026-52930}
- Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard (Cryolitia Pukngae)
- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) (Zeyu Wang)
- i2c: tegra: Fix NOIRQ suspend/resume (Akhil R)
- i2c: stm32f7: fix timing computation ignoring i2c-analog-filter (Guillermo Rodr?guez)
- i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() (Vladimir Zapolskiy)
- fuse: reject fuse_notify() pagecache ops on directories (Jann Horn) [Orabug: 39637414] {CVE-2026-53168}
- pidfd: refuse access to tasks that have started exiting harder (Christian Brauner)
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (Michael Bommarito) [Orabug: 39637428] {CVE-2026-53176}
- bnxt_en: Fix NULL pointer dereference (Kyle Meyer) [Orabug: 39637432] {CVE-2026-53177}
- vsock/vmci: fix sk_ack_backlog leak on failed handshake (Raf Dickson) [Orabug: 39637447] {CVE-2026-53181}
- mptcp: sockopt: check timestamping ret value (Matthieu Baerts)
- mptcp: fix retransmission loop when csum is enabled (Paolo Abeni)
- ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O (Karl Mehltretter)
- ARM: socfpga: Fix OF node refcount leak in SMP setup (Yuho Choi)
- RDMA/srp: bound SRP_RSP sense copy by the received length (Michael Bommarito) [Orabug: 39637467] {CVE-2026-53186}
- drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Harry Wentland)
- ALSA: timer: Fix UAF at snd_timer_user_params() (Takashi Iwai) [Orabug: 39637489] {CVE-2026-53192}
- USB: serial: kl5kusb105: fix bulk-out buffer overflow (Hyeongjun An) [Orabug: 39637496] {CVE-2026-53194}
- USB: serial: option: add usb-id for Dell Wireless DW5826e-m (Jack Wu)
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Adrian Korwel) [Orabug: 39637502] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Adrian Korwel) [Orabug: 39637506] {CVE-2026-53196}
- xfrm: espintcp: do not reuse an in-progress partial send (Wyatt Feng)
- drm/i915/gem: Fix phys BO pread/pwrite with offset (Joonas Lahtinen) [Orabug: 39674335] {CVE-2026-53356}
- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (Michael Bommarito) [Orabug: 39637545] {CVE-2026-53208}
- netfilter: nft_tunnel: fix use-after-free on object destroy (Tristan Madani) [Orabug: 39637555] {CVE-2026-53212}
- drm/vc4: fix krealloc() memory leak (Alexander A. Klimov) [Orabug: 39637561] {CVE-2026-53213}
- net: mvpp2: build skb from XDP-adjusted data on XDP_PASS (Til Kaiser)
- net: mvpp2: refill RX buffers before XDP or skb use (Til Kaiser) [Orabug: 39637568] {CVE-2026-53215}
- net: mvpp2: Add metadata support for xdp mode (Lorenzo Bianconi)
- net: mvpp2: limit XDP frame size to the RX buffer (Til Kaiser) [Orabug: 39637571] {CVE-2026-53216}
- net: mvpp2: sync RX data at the hardware packet offset (Til Kaiser) [Orabug: 39637575] {CVE-2026-53217}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [Orabug: 39637578] {CVE-2026-53218}
- netfilter: nf_log: validate MAC header was set before dumping it (Xiang Mei) [Orabug: 39619384] {CVE-2026-52942}
- netfilter: x_tables: avoid leaking percpu counter pointers (Kyle Zeng) [Orabug: 39637582] {CVE-2026-53219}
- ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (Eric Dumazet) [Orabug: 39637592] {CVE-2026-53221}
- net: guard timestamp cmsgs to real error queue skbs (Kyle Zeng) [Orabug: 39637599] {CVE-2026-53223}
- sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (Michael Bommarito) [Orabug: 39637609] {CVE-2026-53225}
- net: openvswitch: fix possible kfree_skb of ERR_PTR (Adrian Moreno) [Orabug: 39637618] {CVE-2026-53227}
- ipv6: sit: reload inner IPv6 header after GSO offloads (Kyle Zeng) [Orabug: 39637622] {CVE-2026-53228}
- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Mingyu Wang) [Orabug: 39621562] {CVE-2026-52947}
- netlabel: validate unlabeled address and mask attribute lengths (Chenguang Zhao) [Orabug: 39637662] {CVE-2026-53238}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sanghyun Park) [Orabug: 39637666] {CVE-2026-53239}
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (Mark Rutland)
- KVM: arm64: Remove VPIPT I-cache handling (Marc Zyngier)
- nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) [Orabug: 37844165] {CVE-2025-22026}
- fs/ntfs3: Return error for inconsistent extended attributes (Edward Lo)
- ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [Orabug: 39250744] {CVE-2026-31449}
- time: Fix off-by-one in settimeofday() usec validation (Naveen Kumar Chaudhary)
- signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() (Aleksandr Nogikh) [Orabug: 39674319] {CVE-2026-53352}
- sctp: purge outqueue on stale COOKIE-ECHO handling (Xin Long) [Orabug: 39619311] {CVE-2026-52924}
- net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (Yizhou Zhao) [Orabug: 39637680] {CVE-2026-53245}
- ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() (Eric Dumazet) [Orabug: 39754155] {CVE-2026-63870}
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (Eric Dumazet) [Orabug: 39637694] {CVE-2026-53249}
- Bluetooth: fix memory leak in error path of hci_alloc_dev() (Bharath Reddy) [Orabug: 39785002] {CVE-2026-53252}
- Bluetooth: bnep: reject short frames before parsing (Zhang Cen) [Orabug: 39637706] {CVE-2026-53253}
- Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (Dudu Lu)
- Bluetooth: RFCOMM: validate skb length in MCC handlers (Seungju Cheon) [Orabug: 39637711] {CVE-2026-53254}
- Bluetooth: MGMT: validate advertising TLV before type checks (Zhang Cen) [Orabug: 39637716] {CVE-2026-53255}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (Zhang Cen) [Orabug: 39637720] {CVE-2026-53256}
- net: lan743x: permit VLAN-tagged packets up to configured MTU (David Thompson)
- net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (Yizhou Zhao) [Orabug: 39754149] {CVE-2026-63868}
- pcnet32: stop holding device spin lock during napi_complete_done (Oscar Maes)
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Yicong Hui)
- 6lowpan: fix off-by-one in multicast context address compression (Yizhou Zhao) [Orabug: 39637741] {CVE-2026-53263}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (Jamal Hadi Salim) [Orabug: 39637748] {CVE-2026-53264}
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li) [Orabug: 39784967] {CVE-2026-53265}
- netfilter: bridge: make ebt_snat ARP rewrite writable (Yiming Qian) [Orabug: 39637753] {CVE-2026-53266}
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [Orabug: 39637763] {CVE-2026-53268}
- netfilter: synproxy: add mutex to guard hook reference counting (Fernando Fernandez Mancera) [Orabug: 39637768] {CVE-2026-53269}
- ipvs: clear the svc scheduler ptr early on edit (Julian Anastasov) [Orabug: 39637772] {CVE-2026-53270}
- netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Fernando Fernandez Mancera)
- tee: optee: prevent use-after-free when the client exits before the supplicant (Amirreza Zarrabi) [Orabug: 39637782] {CVE-2026-53273}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Ido Schimmel) [Orabug: 39637790] {CVE-2026-53275}
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (Mingyu Wang) [Orabug: 39621568] {CVE-2026-52948}
- Disable -Wattribute-alias for clang-23 and newer (Nathan Chancellor)
- compiler-clang.h: Add __diag infrastructure for clang (Nathan Chancellor)
- USB: serial: mct_u232: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754236] {CVE-2026-63898}
- bpf: Free reuseport cBPF prog after RCU grace period. (Kuniyuki Iwashima) [Orabug: 39589889] {CVE-2026-52910}
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (Micha? Pecio)
- serial: dz: Fix bootconsole handover lockup (Maciej W. Rozycki)
- xhci: tegra: Fix ghost USB device on dual-role port unplug (Wei-Cheng Chen)
- USB: serial: digi_acceleport: fix memory corruption with small endpoints (Johan Hovold) [Orabug: 39754248] {CVE-2026-63901}
- HID: core: Fix size_t specifier in hid_report_raw_event() (Nathan Chancellor)
- HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires)
- HID: core: Add printk_ratelimited variants to hid_warn() etc (Vicki Pfau)
- USB: serial: cypress_m8: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754408] {CVE-2026-63956}
- serial: zs: Switch to using channel reset (Maciej W. Rozycki)
- serial: zs: Fix bootconsole handover lockup (Maciej W. Rozycki)
- serial: dz: Fix bootconsole message clobbering at chip reset (Maciej W. Rozycki)
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma (Shitalkumar Gandhi)
- serial: zs: Fix swapped RI/DSR modem line transition counting (Maciej W. Rozycki)
- serial: sh-sci: fix memory region release in error path (Hongling Zeng)
- drm/hyperv: validate VMBus packet size in receive callback (Berkant Koc) [Orabug: 39786542] {CVE-2026-64527}
- thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow (Michael Bommarito) [Orabug: 39754216] {CVE-2026-63892}
- thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (Michael Bommarito) [Orabug: 39754220] {CVE-2026-63893}
- usb: gadget: f_fs: copy only received bytes on short ep0 read (Michael Bommarito)
- usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports (Seungjin Bae)
- usb: gadget: net2280: Fix double free in probe error path (Guangshuo Li)
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (Johan Hovold) [Orabug: 39754232] {CVE-2026-63897}
- USB: serial: mxuport: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754240] {CVE-2026-63899}
- USB: serial: keyspan: fix missing indat transfer sanity check (Johan Hovold) [Orabug: 39754244] {CVE-2026-63900}
- USB: serial: cypress_m8: validate interrupt packet headers (Zhang Cen) [Orabug: 39754252] {CVE-2026-63902}
- USB: serial: belkin_sa: validate interrupt status length (Zhang Cen) [Orabug: 39754256] {CVE-2026-63903}
- USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Wanquan Zhong)
- USB: serial: option: add MeiG SRM813Q (Jan Volckaert)
- usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize (Heitor Alves de Siqueira)
- usb: usbtmc: check URB actual_length for interrupt-IN notifications (Heitor Alves de Siqueira) [Orabug: 39754260] {CVE-2026-63904}
- usbip: vudc: Fix use after free bug in vudc_remove due to race condition (Michael Bommarito) [Orabug: 39754264] {CVE-2026-63905}
- usb: storage: Add quirks for PNY Elite Portable SSD (Sam Burkels)
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers (Stephen J. Fuhry)
- usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval (Micha? Pecio)
- usb: chipidea: core: convert ci_role_switch to local variable (Xu Yang)
- tty: serial: pch_uart: add check for dma_alloc_coherent() (Zhaoyang Yu)
- comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() (Ian Abbott)
- comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() (Ian Abbott)
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 (Nicol?s Bazaes)
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem (Dmitry Torokhov) [Orabug: 39754271] {CVE-2026-63908}
- xfrm: esp: restore combined single-frag length gate (Jingguo Tan) [Orabug: 39754278] {CVE-2026-63912}
- ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (Srinivas Kandagatla)
- ASoC: qcom: q6asm-dai: close stream only when running (Srinivas Kandagatla)
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Hamza Mahfooz) [Orabug: 39754282] {CVE-2026-63913}
- xfrm: ah: use skb_to_full_sk in async output callbacks (Michael Bommarito)
- xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] {CVE-2026-63914}
- nfc: hci: fix out-of-bounds read in HCP header parsing (Ashutosh Desai)
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings (Arnd Bergmann)
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Lee Jones) [Orabug: 39754294] {CVE-2026-63916}
- ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Kuniyuki Iwashima) [Orabug: 39754298] {CVE-2026-63917}
- xfrm: input: hold netns during deferred transport reinjection (Zhengchuan Liang) [Orabug: 39754304] {CVE-2026-63919}
- ipv6: validate extension header length before copying to cmsg (Qi Tang) [Orabug: 39754307] {CVE-2026-63920}
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Maoyi Xie) [Orabug: 39754311] {CVE-2026-63921}
- ipv6: exthdrs: refresh nh after handling HAO option (Zhengchuan Liang) [Orabug: 39754315] {CVE-2026-63922}
- ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (Srinivas Kandagatla)
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Justin Iurman) [Orabug: 39754322] {CVE-2026-63924}
- macsec: fix replay protection at XPN lower-PN wrap (Junrui Luo) [Orabug: 39754326] {CVE-2026-63925}
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (Yuqi Xu) [Orabug: 39754329] {CVE-2026-63926}
- Input: elan_i2c - validate firmware size before use (Dmitry Torokhov) [Orabug: 39785158] {CVE-2026-64237}
- usb: dwc2: Fix use after free in debug code (Dan Carpenter) [Orabug: 39754333] {CVE-2026-63927}
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles (Peter Chen)
- usb: cdns3: gadget: fix request skipping after clearing halt (Yongchao Wu)
- USB: serial: omninet: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754337] {CVE-2026-63928}
- iio: buffer: hw-consumer: fix use-after-free in error path (Felix Gu)
- iio: light: cm3323: fix reg_conf not being initialized correctly (Aldo Conte)
- iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL (Advait Dhamorikar)
- iio: temperature: tsys01: fix broken PROM checksum validation (Salah Triki)
- iio: ssp_sensors: cancel delayed work_refresh on remove (Sanjay Chitroda)
- iio: gyro: itg3200: fix i2c read into the wrong stack location (David Carlier)
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw (Salah Triki)
- wireguard: send: append trailer after expanding head (Jason A. Donenfeld)
- iio: dac: ad5686: fix input raw value check (Rodrigo Alencar)
- iio: dac: max5821: fix return value check in powerdown sync (Salah Triki)
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux (Christofer Jonason)
- parport: Fix race between port and client registration (Ben Hutchings) [Orabug: 39754375] {CVE-2026-63942}
- Bluetooth: HIDP: fix missing length checks in hidp_input_report() (Muhammad Bilal) [Orabug: 39754387] {CVE-2026-63947}
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (Siwei Zhang) [Orabug: 39754391] {CVE-2026-63948}
- ipc: limit next_id allocation to the valid ID range (Linpu Yu) [Orabug: 39619307] {CVE-2026-52923}
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (Mikulas Patocka)
- Bluetooth: btusb: Allow firmware re-download when version matches (Shuai Zhang)
- Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() (Thomas Fourier)
- USB: serial: safe_serial: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754412] {CVE-2026-63957}
- usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() (Greg Kroah-Hartman)
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Greg Kroah-Hartman) [Orabug: 39754428] {CVE-2026-63961}
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Greg Kroah-Hartman)
- usb: typec: ucsi: ccg: reject firmware images without a ':' record header (Greg Kroah-Hartman)
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer (Greg Kroah-Hartman)
- smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Stefan Metzmacher)
- phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X (Horatiu Vultur)
- phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table (Harini Katakam)
- RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang) [Orabug: 39451551] {CVE-2026-45852}
- Revert "RDMA/rxe: Fix double free in rxe_srq_from_init" (Ben Hutchings)
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Jouni H?gander)
- drm/dp: Add eDP 1.5 bit definition (Suraj Kandpal)
- drm/i915/psr: Read Intel DPCD workaround register (Jouni H?gander)
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Jouni H?gander)
- wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Duoming Zhou) [Orabug: 38456849] {CVE-2025-39863}
- batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761] {CVE-2026-64095}
- batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744] {CVE-2026-64090}
- batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] {CVE-2026-64091}
- batman-adv: iv: recover OGM scheduling after forward packet error (Sven Eckelmann)
- batman-adv: tvlv: reject oversized TVLV packets (Sven Eckelmann) [Orabug: 39619357] {CVE-2026-52934}
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757] {CVE-2026-64094}
- batman-adv: tvlv: abort OGM send on tvlv append failure (Sven Eckelmann)
- batman-adv: v: stop OGMv2 on disabled interface (Sven Eckelmann)
- sctp: fix race between sctp_wait_for_connect and peeloff (Zhenghang Xiao) [Orabug: 39754456] {CVE-2026-63971}
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled() (Marco Scardovi)
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (Luiz Augusto von Dentz) [Orabug: 39754468] {CVE-2026-63975}
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (Zhenghang Xiao) [Orabug: 39754471] {CVE-2026-63976}
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Rahul Chandelkar) [Orabug: 39754489] {CVE-2026-63984}
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback (Jakub Kicinski) [Orabug: 39754492] {CVE-2026-63985}
- bonding: refuse to enslave CAN devices (Oliver Hartkopp) [Orabug: 39754502] {CVE-2026-63990}
- Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (Zhao Dongdong)
- ASoC: codecs: simple-mux: Fix enum control bounds check (C?ssio Gabriel)
- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Eric Dumazet) [Orabug: 39754510] {CVE-2026-63992}
- vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Eric Dumazet) [Orabug: 39754513] {CVE-2026-63993}
- tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Eric Dumazet) [Orabug: 39754516] {CVE-2026-63994}
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (C?ssio Gabriel)
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Eric Dumazet) [Orabug: 39754536] {CVE-2026-64002}
- net/iucv: fix locking in .getsockopt (Breno Leitao)
- net/smc: Do not re-initialize smc hashtables (Alexandra Winter)
- net: netlink: don't set nsid on local notifications (Ilya Maximets)
- net: netlink: fix sending unassigned nsid after assigned one (Ilya Maximets)
- netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [Orabug: 39619329] {CVE-2026-52927}
- netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal)
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Chris Mason) [Orabug: 39754553] {CVE-2026-64007}
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
- xfrm: Check for underflow in xfrm_state_mtu (David Ahern) [Orabug: 39754558] {CVE-2026-64009}
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (Lee Jones)
- nfc: llcp: Fix use-after-free in llcp_sock_release() (Lee Jones)
- net: cpsw_new: Fix potential unregister of netdev that has not been registered yet (Kevin Hao)
- dmaengine: idxd: Fix not releasing workqueue on .release() (Vinicius Costa Gomes) [Orabug: 39323060] {CVE-2026-43064}
- drm: Remove plane hsub/vsub alignment requirement for core helpers (Carlos Eduardo Gallo Filho)
- net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Victor Nogueira) [Orabug: 39754570] {CVE-2026-64012}
- net: mctp: ensure our nlmsg responses are initialised (Jeremy Kerr)
- net/sched: cls_fw: fix NULL dereference of "old" filters before change() (Davide Caratti) [Orabug: 39622011] {CVE-2026-53080}
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (Greg Kroah-Hartman) [Orabug: 39754575] {CVE-2026-64014}
- LTS version: v5.15.209 (Samasth Norway Ananda)
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (Aditya Garg) [Orabug: 39754586] {CVE-2026-64018}
- gpio: cdev: check if uAPI v2 config attributes are correctly zeroed (Bartosz Golaszewski)
- gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) (Andy Shevchenko)
- string: add mem_is_zero() helper to check if memory area is all zeros (Jani Nikula)
- net: ag71xx: check error for platform_get_irq (Rosen Penev)
- tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962] {CVE-2026-64028}
- bridge: mcast: Fix a possible use-after-free when removing a bridge port (Ido Schimmel) [Orabug: 39754613] {CVE-2026-64032}
- net: bridge: Flush multicast groups when snooping is disabled (Petr Machata)
- RDMA/rtrs: Fix use-after-free in path file creation cleanup (Guangshuo Li)
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL (Rafael J. Wysocki)
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Erni Sri Satya Vennela) [Orabug: 39754619] {CVE-2026-64034}
- net: dsa: mt7530: preserve VLAN tags on trapped link-local frames (Daniel Golle)
- net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw (Ar?n? ?nal)
- net: dsa: mt7530: fix FDB entries not aging out with short timeout (Daniel Golle)
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle)
- drm/msm/snapshot: fix dumping of the unaligned regions (Dmitry Baryshkov) [Orabug: 39754629] {CVE-2026-64039}
- net: tls: prevent chain-after-chain in plain text SG (Jakub Kicinski) [Orabug: 39754638] {CVE-2026-64046}
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Jakub Kicinski) [Orabug: 39754642] {CVE-2026-64047}
- drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] {CVE-2026-64153}
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics (Chenguang Zhao)
- HID: quirks: really enable the intended work around for appledisplay (Lukas Bulwahn)
- wifi: ath11k: fix error path leaks in some WMI WOW calls (Nicolas Escande) [Orabug: 39754909] {CVE-2026-64155}
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference (Ethan Nelson-Moore)
- net: ethernet: cortina: Carry over frag counter (Linus Walleij)
- net: ethernet: cortina: Drop half-assembled SKB (Andreas Haarmann-Thiemann)
- net: ethernet: cortina: Make RX SKB per-port (Linus Walleij)
- irqchip/ath79-cpu: Remove unused function (Rosen Penev)
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (Gabor Juhos)
- ice: fix locking in ice_dcb_rebuild() (Bart Van Assche)
- tcp: Fix imbalanced icsk_accept_queue count. (Kuniyuki Iwashima)
- netfilter: x_tables: unregister the templates first (Florian Westphal)
- ARM: integrator: Fix early initialization (Guenter Roeck)
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS (David Gow)
- kunit: config: Enable KUNIT_DEBUGFS by default (David Gow)
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Sudeep Holla)
- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Sudeep Holla) [Orabug: 39754932] {CVE-2026-64166}
- hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock (Abdurrahman Hussain)
- batman-adv: tt: fix negative tt_buff_len (Sven Eckelmann) [Orabug: 39754734] {CVE-2026-64088}
- batman-adv: tt: fix negative last_changeset_len (Sven Eckelmann) [Orabug: 39754740] {CVE-2026-64089}
- batman-adv: tp_meter: avoid use of uninit sender vars (Sven Eckelmann) [Orabug: 39619346] {CVE-2026-52931}
- batman-adv: bla: fix report_work leak on backbone_gw purge (Sven Eckelmann) [Orabug: 39785109] {CVE-2026-64218}
- batman-adv: frag: disallow unicast fragment in fragment (Sven Eckelmann) [Orabug: 39619274] {CVE-2026-52916}
- batman-adv: fix tp_meter counter underflow during shutdown (Luxiao Xu) [Orabug: 39619287] {CVE-2026-52919}
- batman-adv: fix fragment reassembly length accounting (Ruide Cao) [Orabug: 39619266] {CVE-2026-52914}
- batman-adv: dat: handle forward allocation error (Sven Eckelmann)
- batman-adv: clear current gateway during teardown (Ruijie Li) [Orabug: 39619323] {CVE-2026-52926}
- batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765] {CVE-2026-64096}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Harry Wentland) [Orabug: 39785113] {CVE-2026-64219}
- drm/amd/display: Fix integer overflow in bios_get_image() (Harry Wentland)
- drm/bridge: megachips: remove bridge when irq request fails (Osama Abdelkader)
- drm/bridge: it66121: acquire reset GPIO in probe (Julien Chauveau)
- device property: set fwnode->secondary to NULL in fwnode_init() (Bartosz Golaszewski) [Orabug: 39785117] {CVE-2026-64220}
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (Michael Bommarito)
- spi: ti-qspi: fix use-after-free after DMA setup failure (Johan Hovold)
- spi: sprd: fix error pointer deref after DMA setup failure (Johan Hovold)
- scsi: isci: Fix use-after-free in device removal path (Michael Bommarito) [Orabug: 39754786] {CVE-2026-64103}
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails (Masami Hiramatsu) [Orabug: 39754948] {CVE-2026-64173}
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (John Walker) [Orabug: 39754952] {CVE-2026-64174}
- ixgbevf: fix use-after-free in VEPA multicast source pruning (Michael Bommarito) [Orabug: 39754812] {CVE-2026-64113}
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Michael Bommarito) [Orabug: 39754817] {CVE-2026-64114}
- wifi: ath11k: clear shared SRNG pointer state on restart (Kyle Farnung)
- vsock/vmci: fix UAF when peer resets connection during handshake (Minh Nguyen) [Orabug: 39754821] {CVE-2026-64115}
- ring-buffer: Fix reporting of missed events in iterator (Steven Rostedt)
- netfilter: ipset: stop hash:* range iteration at end (Nan Li) [Orabug: 39619299] {CVE-2026-52921}
- netfilter: nf_queue: hold bridge skb->dev while queued (Haoze Xie) [Orabug: 39619255] {CVE-2026-52912}
- netfilter: ip6t_hbh: reject oversized option lists (Zhengchuan Liang) [Orabug: 39619270] {CVE-2026-52915}
- net: bcmgenet: keep RBUF EEE/PM disabled (Nicolai Buchwitz) [Orabug: 39754845] {CVE-2026-64125}
- phonet/pep: disable BH around forwarded sk_receive_skb() (Zijing Yin) [Orabug: 39754963] {CVE-2026-64177}
- Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (Mingyu Wang) [Orabug: 39523054] {CVE-2026-46275}
- Bluetooth: bnep: Fix UAF read of dev->name (Jann Horn) [Orabug: 39754967] {CVE-2026-64178}
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (Abdun Nihaal)
- ALSA: asihpi: Fix potential OOB array access at reading cache (Takashi Iwai) [Orabug: 39754862] {CVE-2026-64133}
- ALSA: ua101: Reject too-short USB descriptors (C?ssio Gabriel)
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (Abdurrahman Hussain)
- sysfs: don't remove existing directory on update failure (Greg Kroah-Hartman) [Orabug: 39754983] {CVE-2026-64185}
- Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()" (Sasha Levin)
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [Orabug: 37901590] {CVE-2025-23141}
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [Orabug: 39300982] {CVE-2026-43052}
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean)
- Revert "x86/vdso: Fix output operand size of RDPID" (Sasha Levin)
- s390/debug: Reject zero-length input before trimming a newline (Pengpeng Hou)
- io_uring: prevent opcode speculation (Pavel Begunkov) [Orabug: 37702113] {CVE-2025-21863}
- io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [Orabug: 39523050] {CVE-2026-46274}
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Johan Hovold)
- drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() (Gyeyoung Baek)
- drm/i915: skip __i915_request_skip() for already signaled requests (Sebastian Brzezinka)
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Naval Alcal?)
- libceph: handle rbtree insertion error in decode_choose_args() (Raphael Zimmer) [Orabug: 39621580] {CVE-2026-52954}
- libceph: Fix potential out-of-bounds access in crush_decode() (Raphael Zimmer) [Orabug: 39621584] {CVE-2026-52955}
- libceph: Fix potential null-ptr-deref in decode_choose_args() (Raphael Zimmer) [Orabug: 39621592] {CVE-2026-52957}
- libceph: Fix potential out-of-bounds access in osdmap_decode() (Raphael Zimmer) [Orabug: 39621596] {CVE-2026-52958}
- powerpc/warp: Fix error handling in pika_dtm_thread (Ma Ke)
- ceph: fix a buffer leak in __ceph_setxattr() (Viacheslav Dubeyko) [Orabug: 39621609] {CVE-2026-52962}
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans (C?ssio Gabriel) [Orabug: 39621613] {CVE-2026-52963}
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Chaitanya Kumar Borah)
- KVM: x86: Fix Xen hypercall tracepoint argument assignment (Maqiang)
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (Aaron Sacks) [Orabug: 39621628] {CVE-2026-52969}
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV (Sergio Correia)
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled (Zoran Ilievski)
- netfilter: nft_ct: fix missing expect put in obj eval (Li Xiasong) [Orabug: 39621633] {CVE-2026-52970}
- audit: fix incorrect inheritable capability in CAPSET records (Sergio Correia) [Orabug: 39653209] {CVE-2026-53287}
- i40e: Cleanup PTP pins on probe failure (Matt Vollrath)
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (Herbert Xu) [Orabug: 39655982] {CVE-2026-52972}
- net/sched: sch_pie: annotate more data-races in pie_dump_stats() (Eric Dumazet)
- flow_dissector: Do not count vlan tags inside tunnel payload (Qingqing Yang)
- flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng) [Orabug: 39524619] {CVE-2026-46306}
- btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (Filipe Manana) [Orabug: 39784984] {CVE-2026-64164}
- drm/amd/display: Read EDID from VBIOS embedded panel info (Timur Krist?f)
- drm/amd/display: Allow DCE link encoder without AUX registers (Timur Krist?f)
- ALSA: hda/conexant: Fix missing error check for jack detection (Wangdicheng) [Orabug: 39653220] {CVE-2026-53291}
- ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (Wangdicheng)
- ALSA: hda/conexant: fix some typos (Oldherl Oh)
- ALSA: hda/conexant: add a new hda codec SN6140 (Bo Liu)
- net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) (Eric Dumazet)
- bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (Weiming Shi) [Orabug: 39451517] {CVE-2026-45846}
- ipv6: rename and move ip6_dst_lookup_tunnel() (Beniamino Galvani)
- ipv4: add new arguments to udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: remove "proto" argument from udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: rename and move ip_route_output_tunnel() (Beniamino Galvani)
- sctp: discard stale INIT after handshake completion (Xin Long)
- netfilter: skip recording stale or retransmitted INIT (Xin Long)
- ASoC: codecs: ab8500: Fix casting of private data (Christian A. Ehrhardt)
- net: phy: dp83869: fix setting CLK_O_SEL field. (Heiko Schocher)
- NFC: trf7970a: Ignore antenna noise when checking for RF field (Paul Geurts)
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit (Dandan Zhang)
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (Jun Zhan) [Orabug: 39621670] {CVE-2026-52982}
- vrf: Fix a potential NPD when removing a port from a VRF (Ido Schimmel) [Orabug: 39619318] {CVE-2026-52925}
- net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() (Eric Dumazet)
- net/sched: sch_choke: annotate data-races in choke_dump_stats() (Eric Dumazet)
- net: sched: choke: remove unused variables in struct choke_sched_data (Zhengchao Shao)
- net/sched: netem: validate slot configuration (Stephen Hemminger)
- net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] {CVE-2026-52984}
- net/sched: netem: fix probability gaps in 4-state loss model (Stephen Hemminger)
- net: sched: sch_netem: Refactor code in 4-state loss generator (Harshit Mogalapalli)
- netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z. Ivanov) [Orabug: 39621681] {CVE-2026-52985}
- cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() (Daan De Meyer)
- scsi: sr: Add memory allocation failure handling for get_capabilities() (Enze Li)
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [Orabug: 39621685] {CVE-2026-52986}
- netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [Orabug: 39619293] {CVE-2026-52920}
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Timur Krist?f)
- drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Timur Krist?f)
- drm/amdgpu: fix spelling typos (Alexandre Demers)
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] {CVE-2026-45844}
- tracing: branch: Fix inverted check on stat tracer registration (Breno Leitao)
- btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() (Mark Harmstone)
- mailbox: mailbox-test: make data_ready a per-instance variable (Wolfram Sang)
- mailbox: mailbox-test: initialize struct earlier (Wolfram Sang)
- mailbox: mailbox-test: don't free the reused channel (Wolfram Sang)
- mailbox: add sanity check for channel array (Wolfram Sang) [Orabug: 39653234] {CVE-2026-53295}
- cgroup/rdma: fix integer overflow in rdmacg_try_charge() (Tao Cui)
- mailbox: mailbox-test: free channels on probe error (Wolfram Sang)
- fbdev: offb: fix PCI device reference leak on probe failure (Yuho Choi)
- rtc: abx80x: Disable alarm feature if no interrupt attached (Anthony Pighin)
- fs/adfs: validate nzones in adfs_validate_bblk() (Bae Yeonju)
- vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() (Kohei Enju)
- tipc: fix double-free in tipc_buf_append() (Lee Jones) [Orabug: 39621708] {CVE-2026-52993}
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls (Alexey Kodanev)
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats() (Eric Dumazet)
- net/sched: sch_red: annotate data-races in red_dump_stats() (Eric Dumazet)
- net: sched: gred/red: remove unused variables in struct red_stats (Zhengchao Shao)
- net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() (Eric Dumazet)
- net/sched: sch_pie: annotate data-races in pie_dump_stats() (Eric Dumazet)
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats() (Eric Dumazet)
- ksmbd: scope conn->binding slowpath to bound sessions only (Hyunwoo Kim)
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Daemyung Kang)
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number (Yan Jun)
- slip: bound decode() reads against the compressed packet length (Weiming Shi) [Orabug: 39451500] {CVE-2026-45843}
- slip: reject VJ receive packets on instances with no rstate array (Weiming Shi) [Orabug: 39451493] {CVE-2026-45842}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Fernando Fernandez Mancera) [Orabug: 39621724] {CVE-2026-52998}
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Fernando Fernandez Mancera) [Orabug: 39621730] {CVE-2026-52999}
- ipvs: fix MTU check for GSO packets in tunnel mode (Yingnan Zhang)
- netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] {CVE-2026-53001}
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [Orabug: 39621746] {CVE-2026-53002}
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Xiang Mei) [Orabug: 39451485] {CVE-2026-45841}
- netfilter: nft_osf: restrict it to ipv4 (Pablo Neira Ayuso)
- openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] {CVE-2026-45840}
- pppoe: drop PFC frames (Qingfang Deng) [Orabug: 39621751] {CVE-2026-53003}
- flow_dissector: Add number of vlan tags dissector (Boris Sukholitko)
- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] {CVE-2026-53004}
- ipv6: fix possible UAF in icmpv6_rcv() (Eric Dumazet) [Orabug: 39621765] {CVE-2026-53006}
- e1000e: Unroll PTP in probe error handling (Matt Vollrath)
- i40e: don't advertise IFF_SUPP_NOFCS (Kohei Enju)
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) (Eric Dumazet)
- net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (Vinicius Costa Gomes) [Orabug: 39621780] {CVE-2026-53011}
- net/sched: taprio: rename close_time to end_time (Vladimir Oltean)
- net/sched: taprio: refactor one skb dequeue from TXQ to separate function (Vladimir Oltean)
- net/sched: taprio: continue with other TXQs if one dequeue() failed (Vladimir Oltean)
- net/sched: taprio: replace safety precautions with comments (Vladimir Oltean)
- net/sched: taprio: stop going through private ops for dequeue and peek (Vladimir Oltean)
- nexthop: fix IPv6 route referencing IPv4 nexthop (Jiayuan Chen) [Orabug: 39621784] {CVE-2026-53012}
- net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys (Dudu Lu)
- PCMCIA: Fix garbled log messages for KERN_CONT (Ren? Rebe)
- crypto: ccp - copy IV using skcipher ivsize (Paul Moses) [Orabug: 39621796] {CVE-2026-53016}
- crypto: sa2ul - Fix AEAD fallback algorithm names (T Pratham)
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() (Geert Uytterhoeven)
- clk: qcom: dispcc-sc7180: Add missing MDSS resets (Konrad Dybcio)
- dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets (Konrad Dybcio)
- clk: xgene: Fix mapping leak in xgene_pllclk_init() (Geert Uytterhoeven)
- clk: qoriq: avoid format string warning (Arnd Bergmann)
- clk: imx8mq: Correct the CSI PHY sels (Sebastian Krzyszkowiak)
- clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() (Felix Gu)
- clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() (Felix Gu)
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks (Val Packett)
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for USB power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Add missing GDSCs (Val Packett)
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs (Val Packett)
- scsi: target: core: Fix integer overflow in UNMAP bounds check (Junrui Luo) [Orabug: 39621811] {CVE-2026-53021}
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX (Yangerkun) [Orabug: 39653261] {CVE-2026-53304}
- RDMA/core: Prefer NLA_NUL_STRING (Florian Westphal) [Orabug: 39754131] {CVE-2026-63860}
- platform/x86: dell-wmi-sysman: bound enumeration string aggregation (Pengpeng Hou) [Orabug: 39621815] {CVE-2026-53022}
- platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() (Fedor Pchelkin)
- fs/ntfs3: terminate the cached volume label after UTF-8 conversion (Pengpeng Hou)
- nfs/blocklayout: Fix compilation error (make W=1) in bl_write_pagelist() (Andy Shevchenko)
- mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() (Abdun Nihaal)
- platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup (Rafael J. Wysocki)
- tty: hvc_iucv: fix off-by-one in number of supported devices (Randy Dunlap)
- tty: hvc: remove HVC_IUCV_MAGIC (Ahelenia Ziemia?ska)
- leds: lgm-sso: Remove duplicate assignments for priv->mmap (Chen Ni)
- platform/surface: surfacepro3_button: Drop wakeup source on remove (Rafael J. Wysocki)
- backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() (Chen Ni)
- dev_printk: add new dev_err_probe() helpers (Nuno Sa)
- driver core: Move dev_err_probe() to where it belogs (Andy Shevchenko)
- driver core: device.h: remove extern from function prototypes (Greg Kroah-Hartman)
- i3c: mipi-i3c-hci: fix IBI payload length calculation for final status (Billy Tsai)
- perf util: Kill die() prototype, dead for a long time (Arnaldo Carvalho de Melo)
- perf expr: Return -EINVAL for syntax error in expr__find_ids() (Leo Yan)
- pinctrl: abx500: Fix type of 'argument' variable (Yu-Chun Lin)
- perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace (Mike Leach)
- perf branch: Avoid incrementing NULL (Ian Rogers)
- pinctrl: pinctrl-pic32: Fix resource leak (Ethan Tidmore)
- HID: usbhid: fix deadlock in hid_post_reset() (Oliver Neukum) [Orabug: 39621857] {CVE-2026-53037}
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob (Richard Genoud)
- mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions (Cosmin Tanislav)
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path (Cosmin Tanislav)
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask (Shiji Yang)
- mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations (Haibo Chen)
- mtd: physmap_of_gemini: Fix disabled pinctrl state check (Chen Ni)
- HID: asus: do not abort probe when not necessary (Denis Benato)
- HID: asus: make asus_resume adhere to linux kernel coding standards (Denis Benato)
- ima: check return value of crypto_shash_final() in boot aggregate (Daniel Hodges)
- tracing: Rebuild full_name on each hist_field_name() call (Pengpeng Hou)
- dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Frank Li)
- dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function (Khairul Anuar Romli)
- ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] {CVE-2026-53039}
- ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] {CVE-2026-53040}
- ocfs2: fix listxattr handling when the buffer is full (Zhengyuan Huang) [Orabug: 39621872] {CVE-2026-53041}
- soc: qcom: aoss: compare against normalized cooling state (Alok Tiwari)
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (Junrui Luo) [Orabug: 39653274] {CVE-2026-53309}
- ocfs2/dlm: validate qr_numregions in dlm_match_regions() (Junrui Luo) [Orabug: 39621878] {CVE-2026-53043}
- unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure (Michal Grzedzicki)
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot (David Heidelberger)
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available (Dmitry Baryshkov)
- soc: qcom: ocmem: register reasons for probe deferrals (Dmitry Baryshkov)
- soc: qcom: ocmem: use scoped device node handling to simplify error paths (Krzysztof Kozlowski)
- memory: tegra30-emc: Fix dll_change check (Mikko Perttunen)
- memory: tegra124-emc: Fix dll_change check (Mikko Perttunen)
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible (Rafa? Mi?ecki)
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Joshua Klinesmith)
- efi/capsule-loader: fix incorrect sizeof in phys array reallocation (Thomas Huth) [Orabug: 39621893] {CVE-2026-53047}
- gfs2: prevent NULL pointer dereference during unmount (Andreas Gruenbacher) [Orabug: 39621897] {CVE-2026-53048}
- gfs2: add some missing log locking (Andreas Gruenbacher) [Orabug: 39621900] {CVE-2026-53049}
- quota: Fix race of dquot_scan_active() with quota deactivation (Jan Kara) [Orabug: 39621904] {CVE-2026-53050}
- ktest: Run POST_KTEST hooks on failure and cancellation (Ricardo B. Marli?re)
- ktest: Honor empty per-test option overrides (Ricardo B. Marli?re)
- ktest: Avoid undef warning when WARNINGS_FILE is unset (Ricardo B. Marli?re)
- ALSA: sc6000: Keep the programmed board state in card-private data (C?ssio Gabriel)
- ALSA: sc6000: Use standard print API (Takashi Iwai)
- PCI: tegra194: Disable direct speed change for Endpoint mode (Vidya Sagar)
- PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" (Vidya Sagar)
- PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Increase LTSSM poll time on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Fix polling delay for L2 state (Vidya Sagar)
- PCI: Add PCIE_PME_TO_L2_TIMEOUT_US L2 ready timeout value (Frank Li)
- selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long)
- Documentation: fix a hugetlbfs reservation statement (Jane Chu)
- PCI: Enable AtomicOps only if Root Port supports them (Gerd Bayer)
- ASoC: fsl_easrc: Change the type for iec958 channel status controls (Shengjiu Wang)
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Shengjiu Wang)
- ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Shengjiu Wang)
- pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() (Felix Gu)
- pmdomain: ti: omap_prm: Fix a reference leak on device node (Felix Gu)
- drm/msm/a6xx: Use barriers while updating HFI Q headers (Akhil P Oommen)
- drm/msm/a6xx: Fix HLSQ register dumping (Rob Clark)
- ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Huanglei)
- ALSA: hda/realtek: Whitespace fix (Luke D. Jones)
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Timur Krist?f)
- drm/amd/pm/ci: Fill DW8 fields from SMC (Timur Krist?f)
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Timur Krist?f)
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Timur Krist?f)
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Timur Krist?f)
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Timur Krist?f)
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Timur Krist?f)
- ALSA: core: Validate compress device numbers without dynamic minors (C?ssio Gabriel)
- drm/panel: simple: Correct G190EAN01 prepare timing (Sebastian Reichel)
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 (Alexander Koskovich)
- spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo (Pei Xiao)
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break (Andy Shevchenko)
- dm init: ensure device probing has finished in dm-mod.waitfor= (Guillaume Gonnet)
- drm/sun4i: Fix resource leaks (Ethan Tidmore)
- spi: fsl-qspi: Use reinit_completion() for repeated operations (Felix Gu)
- dm log: fix out-of-bounds write due to region_count overflow (Junrui Luo) [Orabug: 39621924] {CVE-2026-53059}
- dm cache metadata: fix memory leak on metadata abort retry (Ming-Hung Tsai) [Orabug: 39621929] {CVE-2026-53060}
- dm cache: fix dirty mapping checking in passthrough mode switching (Ming-Hung Tsai) [Orabug: 39621933] {CVE-2026-53061}
- dm cache: support shrinking the origin device (Ming-Hung Tsai)
- dm cache: fix concurrent write failure in passthrough mode (Ming-Hung Tsai)
- dm cache policy smq: fix missing locks in invalidating cache blocks (Ming-Hung Tsai) [Orabug: 39621937] {CVE-2026-53062}
- dm cache: fix write path cache coherency in passthrough mode (Ming-Hung Tsai)
- dm cache: fix null-deref with concurrent writes in passthrough mode (Ming-Hung Tsai) [Orabug: 39621946] {CVE-2026-53064}
- ASoC: sti: use managed regmap_field allocations (Sander Vanheule)
- ASoC: sti: Return errors from regmap_field_alloc() (Sander Vanheule)
- drm/komeda: fix integer overflow in AFBC framebuffer size check (Alexander Konyukhov)
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (Jiayuan Chen) [Orabug: 39621966] {CVE-2026-53069}
- sctp: fix missing encap_port propagation for GSO fragments (Xin Long)
- net: phy: qcom: at803x: Use the correct bit to disable extended next page (Maxime Chevallier)
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (Dudu Lu) [Orabug: 39621973] {CVE-2026-53071}
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (Pauli Virtanen) [Orabug: 39621976] {CVE-2026-53072}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (Jonathan Rissanen) [Orabug: 39621980] {CVE-2026-53073}
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (Luiz Augusto von Dentz)
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (Sun Jian) [Orabug: 39621984] {CVE-2026-53074}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Taegu Ha) [Orabug: 39621987] {CVE-2026-53075}
- net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim) [Orabug: 39531630] {CVE-2026-46319}
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf (Mashiro Chen)
- 6pack: propagage new tty types (Jiri Slaby)
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal)
- netfilter: xt_socket: enable defrag after all other checks (Florian Westphal)
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (Justin Chen) [Orabug: 39622043] {CVE-2026-53088}
- bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi)
- bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (Jiayuan Chen) [Orabug: 39754142] {CVE-2026-63865}
- bpf-lsm: Make bpf_lsm_userns_create() sleepable (Frederick Lawler)
- wifi: brcmfmac: Fix error pointer dereference (Ethan Tidmore) [Orabug: 39622061] {CVE-2026-53093}
- bpf: fix end-of-list detection in cgroup_storage_get_next_key() (Weiming Shi) [Orabug: 39451462] {CVE-2026-45838}
- macvlan: annotate data-races around port->bc_queue_len_used (Eric Dumazet)
- powerpc/crash: fix backup region offset update to elfcorehdr (Sourabh Jain)
- r8152: fix incorrect register write to USB_UPHY_XTAL (Chih Kai Hsu)
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (David Carlier) [Orabug: 39622069] {CVE-2026-53096}
- bpf, devmap: Remove unnecessary if check in for loop (Thorsten Blum)
- module: Fix freeing of charp module parameters when CONFIG_SYSFS=n (Petr Pavlu)
- params: Replace __modinit with __init_or_module (Petr Pavlu)
- kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
- kernel: param: rename locate_module_kobject (Shyam Saini)
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (Cai Xinchen)
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH (Cai Xinchen)
- wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Duoming Zhou) [Orabug: 39622109] {CVE-2026-53112}
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Zilin Guan)
- firmware: dmi: Correct an indexing error in dmi.h (Mario Limonciello)
(Bart Van Assche)
- irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter (Brian Masney)
- debugfs: check for NULL pointer in debugfs_create_str() (Gui-Dong Han)
- thermal/drivers/spear: Fix error condition for reading st,thermal-flags (Gopi Krishna Menon)
- devres: fix missing node debug info in devm_krealloc() (Danilo Krummrich)
- pstore/ram: fix resource leak when ioremap() fails (Cole Leavitt)
- nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (Deepanshu Kartikey)
- drbd: Balance RCU calls in drbd_adm_dump_devices() (Bart Van Assche) [Orabug: 39622158] {CVE-2026-53128}
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START (Hyungjung Joo)
- bcache: fix uninitialized closure object (Mingzhe Zou)
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Benjamin Cheng)
- vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] {CVE-2026-46214}
- vsock: fix buffer size clamping order (Norbert Szetei) [Orabug: 39460717] {CVE-2026-46234}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (Siwei Zhang) [Orabug: 39445785] {CVE-2026-45836}
- batman-adv: bla: put backbone reference on failed claim hash insert (Sven Eckelmann) [Orabug: 39460707] {CVE-2026-46231}
- batman-adv: bla: only purge non-released claims (Sven Eckelmann) [Orabug: 39460713] {CVE-2026-46233}
- batman-adv: bla: prevent use-after-free when deleting claims (Sven Eckelmann) [Orabug: 39460640] {CVE-2026-46212}
- batman-adv: stop caching unowned originator pointers in BAT IV (Jiexun Wang) [Orabug: 39460733] {CVE-2026-46238}
- batman-adv: reject new tp_meter sessions during teardown (Jiexun Wang) [Orabug: 39460614] {CVE-2026-46206}
- batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] {CVE-2026-46198}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [Orabug: 39460689] {CVE-2026-46227}
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Alex Deucher)
- drm/amdgpu/pm: add missing revision check for CI (Alex Deucher)
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B. Moore) [Orabug: 39460668] {CVE-2026-46220}
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (John B. Moore)
- drm/radeon: add missing revision check for CI (Alex Deucher)
- drm/amdkfd: validate SVM ioctl nattr against buffer size (Alysa Liu) [Orabug: 39460573] {CVE-2026-46197}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460627] {CVE-2026-46209}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [Orabug: 39460702] {CVE-2026-46230}
- spi: mpc52xx: fix use-after-free on unbind (Johan Hovold)
- spi: orion: fix clock imbalance on registration failure (Johan Hovold)
- spi: imx: fix runtime pm leak on probe deferral (Johan Hovold)
- spi: mtk-nor: fix controller deregistration (Johan Hovold)
- media: i2c: imx412: Assert reset GPIO during probe (Wenmeng Liu)
- media: dib8000: avoid division by 0 in dib8000_set_dds() (Sergey Shtylyov)
- regulator: bd9571mwv: fix OF node reference imbalance (Johan Hovold)
- regulator: act8945a: fix OF node reference imbalance (Johan Hovold)
- media: rc: streamzap: Error handling in probe (Oliver Neukum)
- media: rc: xbox_remote: heed DMA restrictions (Oliver Neukum)
- regulator: max77650: fix OF node reference imbalance (Johan Hovold)
- staging: media: atomisp: Disallow all private IOCTLs (Sakari Ailus)
- media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Alexander Koskovich)
- media: uvcvideo: Enable VB2_DMABUF for metadata stream (Ricardo Ribalda)
- platform/x86: hp-wmi: Ignore backlight and FnLock events (Krishna Chomal)
- mptcp: fix scheduling with atomic in timestamp sockopt (Gang Yan) [Orabug: 39460450] {CVE-2026-46168}
- mptcp: sockopt: set timestamp flags on subflow socket, not msk (Gang Yan)
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure (Shardul Bankar)
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure (Shardul Bankar)
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] {CVE-2026-46189}
- RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [Orabug: 39460303] {CVE-2026-46133}
- RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277] {CVE-2026-46127}
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] {CVE-2026-46178}
- power: supply: max17042: avoid overflow when determining health (Andr? Draszik)
- PCI/AER: Stop ruling out unbound devices as error source (Lukas Wunner)
- PCI/AER: Clear only error bits in PCIe Device Status (Shuai Xue)
- s390/debug: Reject zero-length input in debug_input_flush_fn() (Vasily Gorbik)
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (Jason Gunthorpe)
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [Orabug: 39524613] {CVE-2026-46304}
- md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] {CVE-2026-46161}
- libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [Orabug: 39460244] {CVE-2026-46119}
- isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [Orabug: 39460265] {CVE-2026-46124}
- isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [Orabug: 39524609] {CVE-2026-46303}
- dm-verity-fec: correctly reject too-small hash devices (Eric Biggers)
- dm-verity-fec: correctly reject too-small FEC devices (Eric Biggers)
- dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] {CVE-2026-46294}
- dm: don't report warning when doing deferred remove (Mikulas Patocka)
- dm-thin: fix metadata refcount underflow (Mikulas Patocka) [Orabug: 39460195] {CVE-2026-46107}
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (C?ssio Gabriel)
- ASoC: fsl_easrc: fix comment typo (Joseph Salisbury)
- cpuidle: powerpc: avoid double clear when breaking snooze (Shrikanth Hegde)
- spi: topcliff-pch: fix use-after-free on unbind (Johan Hovold)
- thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp (Thorsten Blum)
- thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata (Thorsten Blum)
- udf: reject descriptors with oversized CRC length (Michael Bommarito) [Orabug: 39753576] {CVE-2026-53369}
- ibmveth: Disable GSO for packets with small MSS (Mingming Cao)
- hv_sock: fix ARM64 support (Hamza Mahfooz)
- extcon: ptn5150: handle pending IRQ events during system resume (Xu Yang)
- hwmon: (corsair-psu) Close HID device on probe errors (Myeonghun Pak)
- hwmon: (ltc2992) Fix u32 overflow in power read path (Sanman Pradhan)
- hwmon: (ltc2992) Clamp threshold writes to hardware range (Sanman Pradhan)
- parisc: Fix IRQ leak in LASI driver (Hongling Zeng)
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [Orabug: 39460248] {CVE-2026-46120}
- sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] {CVE-2026-46184}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] {CVE-2026-46132}
- fanotify: fix false positive on permission events (Miklos Szeredi) [Orabug: 39460374] {CVE-2026-46150}
- spi: zynqmp-gqspi: fix controller deregistration (Johan Hovold)
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (Siwei Zhang) [Orabug: 39445772] {CVE-2026-45834}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (Siwei Zhang) [Orabug: 39445781] {CVE-2026-45835}
- Bluetooth: virtio_bt: validate rx pkt_type header length (Michael Bommarito)
- Bluetooth: virtio_bt: clamp rx length before skb_put (Michael Bommarito)
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu) [Orabug: 39460469] {CVE-2026-46172}
- xfrm: provide message size for XFRM_MSG_MAPPING (Ruijie Li)
- ALSA: firewire-tascam: Do not drop unread control events (C?ssio Gabriel)
- usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [Orabug: 39654820] {CVE-2026-46109}
- USB: serial: option: add Telit Cinterion LE910Cx compositions (Fabio Porcedda)
- USB: omap_udc: DMA: Don't enable burst 4 mode (Aaro Koskinen)
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check (C?ssio Gabriel)
- ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Takashi Iwai) [Orabug: 39460352] {CVE-2026-46146}
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] {CVE-2026-46167}
- usb: usblp: fix heap leak in IEEE 1284 device ID via short response (Greg Kroah-Hartman) [Orabug: 39460379] {CVE-2026-46151}
- wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani) [Orabug: 39460257] {CVE-2026-46122}
- wifi: ath5k: do not access array OOB (Jiri Slaby) [Orabug: 39524622] {CVE-2026-46307}
- wifi: rsi: fix kthread lifetime race between self-exit and external-stop (Jeongjun Park) [Orabug: 39460532] {CVE-2026-46187}
- wifi: b43legacy: enforce bounds check on firmware key index in RX path (Tristan Madani) [Orabug: 39460424] {CVE-2026-46163}
- ipmi:ssif: NULL thread on error (Corey Minyard)
- ipmi:ssif: Remove unnecessary indention (Corey Minyard)
- ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] {CVE-2026-46044}
- ipmi:ssif: Fix a shutdown race (Corey Minyard)
- net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Jamal Hadi Salim) [Orabug: 39425987] {CVE-2026-43496}
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Dipendra Khadka)
- um: virt-pci: Fix build failure (Florian Fainelli)
- spi: meson-spicc: Fix double-put in remove path (Felix Gu) [Orabug: 39250891] {CVE-2026-31489}
- ksmbd: do not expire session on binding failure (Hyunwoo Kim)
- spi: rockchip: fix controller deregistration (Johan Hovold)
- ACPI: video: force native backlight on HP OMEN 16 (8A44) (Shivam Kalra)
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Jinjie Ruan)
- ACPI: scan: Use acpi_dev_put() in object add error paths (Guangshuo Li)
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free (Rajat Gupta)
- ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] {CVE-2026-46108}
- ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] {CVE-2026-46128}
- ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] {CVE-2026-46177}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [Orabug: 39460368] {CVE-2026-46149}
- netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] {CVE-2026-46101}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [Orabug: 39452458] {CVE-2026-46099}
- ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39784983] {CVE-2026-46048}
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] {CVE-2026-46276}
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [Orabug: 39426004] {CVE-2026-43501}
- ALSA: caiaq: Don't abort when no input device is available (Takashi Iwai)
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai)
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value (Douglas Anderson)
- crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [Orabug: 39452232] {CVE-2026-46033}
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode (Andrea Mayer)
- ntfs3: fix integer overflow in run_unpack() volume boundary check (Tobi Gaertner)
- ntfs3: add buffer boundary checks to run_unpack() (Tobi Gaertner)
- ktest: Fix the month in the name of the failure directory (Steven Rostedt)
- IB/core: Fix zero dmac race in neighbor resolution (Chen Zhao)
- dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [Orabug: 39452197] {CVE-2026-46023}
- crypto: atmel-tdes - fix DMA sync direction (Thorsten Blum)
- crypto: ccree - fix a memory leak in cc_mac_digest() (Haoxiang Li)
- crypto: hisilicon - Fix dma_unmap_single() direction (Thomas Fourier)
- crypto: atmel-ecc - Release client on allocation failure (Thorsten Blum)
- crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup (Thorsten Blum)
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit (Eric Biggers)
- taskstats: set version in TGID exit notifications (Yiyang Chen)
- tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [Orabug: 39452160] {CVE-2026-46015}
- inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] {CVE-2026-46040}
- md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [Orabug: 39452350] {CVE-2026-46070}
- md/raid5: fix soft lockup in retry_aligned_read() (Chia-Ming Chang) [Orabug: 39452288] {CVE-2026-46051}
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (Sohei Koyama) [Orabug: 39452270] {CVE-2026-46046}
- mtd: docg3: fix use-after-free in docg3_release() (James Kim)
- mtd: docg3: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- io_uring/poll: fix backport of io_poll_add() changes (Jens Axboe)
- io_uring/poll: fix EPOLL_URING_WAKE sometimes not being honored (Jens Axboe)
- KVM: nSVM: Add missing consistency check for nCR3 validity (Yosry Ahmed)
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (Yosry Ahmed)
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN (Yosry Ahmed)
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode (Yosry Ahmed)
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts (Sean Christopherson)
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [Orabug: 39452395] {CVE-2026-46082}
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (Yosry Ahmed) [Orabug: 39452062] {CVE-2026-45987}
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state (Yosry Ahmed)
- userfaultfd: allow registration of ranges below mmap_min_addr (Denis M. Karpov)
- rtc: ntxec: fix OF node reference imbalance (Johan Hovold)
- tpm: tpm_tis: add error logging for data transfer (Jacqueline Wong)
- mmc: block: use single block write in retry (Bin Liu)
- power: supply: axp288_charger: Do not cancel work before initializing it (Krzysztof Kozlowski)
- tpm: avoid -Wunused-but-set-variable (Arnd Bergmann)
- libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39452202] {CVE-2026-46024}
- ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [Orabug: 39452244] {CVE-2026-46037}
- drm/arcpgu: fix device node leak (Luca Ceresoli)
- net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li)
- iio: adc: ad7768-1: fix one-shot mode data acquisition (Jonathan Santos)
- ALSA: 6fire: Fix input volume change detection (C?ssio Gabriel)
- ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [Orabug: 39452127] {CVE-2026-46004}
- ALSA: caiaq: Fix control_put() result and cache rollback (C?ssio Gabriel)
- selftests/mqueue: Fix incorrectly named file (Simon Liebold)
- parisc: _llseek syscall is only available for 32-bit userspace (Helge Deller)
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 (Robert Beckett)
- md/raid10: fix deadlock with check operation and nowait requests (Josh Hunt) [Orabug: 39452285] {CVE-2026-46050}
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (C?ssio Gabriel)
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Harin Lee) [Orabug: 39452281] {CVE-2026-46049}
- ALSA: aoa: i2sbus: fix OF node lifetime handling (C?ssio Gabriel)
- ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (Vasiliy Kovalev) [Orabug: 39452120] {CVE-2026-46002}
- net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [Orabug: 39452275] {CVE-2026-46047}
- media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() (Chen Ni)
- lib/ts_kmp: fix integer overflow in pattern length calculation (Josh Law)
- Revert "ALSA: usb: Increase volume range that triggers a warning" (Rongrong)
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown (Koichiro Den)
- net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [Orabug: 39452469] {CVE-2026-46102}
- net: caif: clear client service pointer on teardown (Zhengchuan Liang)
- ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Ziqing Chen) [Orabug: 39452417] {CVE-2026-46088}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [Orabug: 39410864] {CVE-2026-43493}
- um: drivers: call kernel_strrchr() explicitly in cow_user.c (Michael Bommarito)
- driver core: Don't let a device probe until it's ready (Douglas Anderson)
- padata: Remove comment for reorder_work (Herbert Xu)
- padata: Fix pd UAF once and for all (Herbert Xu) [Orabug: 38335056] {CVE-2025-38584}
- ocfs2: split transactions in dio completion to avoid credit exhaustion (Heming Zhao) [Orabug: 39452389] {CVE-2026-46080}
- device property: Make modifications of fwnode "flags" thread safe (Douglas Anderson)
- scsi: ufs: core: Fix use-after free in init error and remove paths (Andr? Draszik)
- firmware: google: framebuffer: Do not mark framebuffer as busy (Thomas Zimmermann)
- ibmasm: fix heap over-read in ibmasm_send_i2o_message() (Tyllis Xu)
- ibmasm: fix OOB reads in command_file_write due to missing size checks (Tyllis Xu)
- misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() (Tyllis Xu)
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [Orabug: 39452134] {CVE-2026-46006}
- ALSA: usb-audio: Evaluate packsize caps at the right place (Takashi Iwai)
- usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() (Micha? Pecio)
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (C?ssio Gabriel)
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications (C?ssio Gabriel)
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (C?ssio Gabriel) [Orabug: 39452171] {CVE-2026-46018}
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (Jeongjun Park)
- tty: n_gsm: fix flow control handling in tx path (Daniel Starke)
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento)
- crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300568] {CVE-2026-31697}
- crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300572] {CVE-2026-31698}
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300576] {CVE-2026-31699}
- ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [Orabug: 39300587] {CVE-2026-31701}
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Cryolitia Pukngae)
- fuse: quiet down complaints in fuse_conn_limit_write (Darrick J. Wong)
- fuse: reject oversized dirents in page cache (Samuel Page) [Orabug: 39300557] {CVE-2026-31694}
- fs/ntfs3: validate rec->used in journal-replay file record check (Greg Kroah-Hartman)
- iommu: fix a reference count leak in iommu_sva_bind_device() (Vasant Karasulli)
- rxrpc: Fix anonymous key handling (David Howells)
- rxrpc: only handle RESPONSE during service challenge (Jie Wang) [Orabug: 39342679,39368252]
- ksmbd: unset conn->binding on failed binding request (Namjae Jeon)
- scripts/dtc: Remove unused dts_version in dtc-lexer.l (Nathan Chancellor)
- Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" (Guocai He)
- drivers: base: Free devm resources when unregistering a device (David Gow)
- cpufreq: Avoid a bad reference count on CPU node (Miquel Sabat? Sol?) [Orabug: 37206351] {CVE-2024-50012}
- net: clear the dst when changing skb protocol (Jakub Kicinski) [Orabug: 38158471] {CVE-2025-38192}
- fbdev: efifb: Register sysfs groups through driver core (Thomas Wei?schuh) [Orabug: 37205941] {CVE-2024-49925}
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Yu Kuai) [Orabug: 37649831] {CVE-2025-21712}
- cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Guangshuo Li) [Orabug: 39343645] {CVE-2026-43328}
- cpufreq: governor: Free dbs_data directly when gov->init() fails (Liao Chang)
- rxrpc: Fix recvmsg() unconditional requeue (David Howells)
- fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) {CVE-2023-45896}
- btrfs: lock the inode in shared mode before starting fiemap (Filipe Manana)
- f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (Chao Yu)
- can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs (Marc Kleine-Budde) [Orabug: 38773752] {CVE-2025-68307}
- Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919] {CVE-2024-26886}
- iio: imu: inv_icm42600: fix odr switch when turning buffer off (Jean-Baptiste Maneyrol)
- pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] {CVE-2024-27389}
- f2fs: fix to wait on block writeback for post_read case (Chao Yu)
- net: stmmac: fix TSO DMA API usage causing oops (Russell King) [Orabug: 37434619] {CVE-2024-56719}
- drm/amdgpu: unmap and remove csa_va properly (Lang Yu)
- binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [Orabug: 38773485] {CVE-2025-68239}
- gfs2: No more self recovery (Andreas Gruenbacher) [Orabug: 38351909] {CVE-2025-38659}
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Kumar Kartikeya Dwivedi)
- dlm: fix possible lkb_resource null dereference (Alexander Aring) [Orabug: 37472202] {CVE-2024-47809}
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [Orabug: 38175068] {CVE-2025-38250}
- mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() (Joonwon Kang)
- btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [Orabug: 38970329] {CVE-2026-23157}
- btrfs: send: check for inline extents in range_is_hole_in_parent() (Qu Wenruo) [Orabug: 38970284] {CVE-2026-23141}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov)
- spi: cadence-quadspi: Implement refcount to handle unbind during busy (Khairul Anuar Romli)
- fs: dlm: fix use after free in midcomms commit (Alexander Aring)
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() (Guodong Xu)
- net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [Orabug: 38970488] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Eric Dumazet)
- dm-verity: disable recursive forward error correction (Mikulas Patocka) [Orabug: 38887637] {CVE-2025-71161}
- blk-mq: use quiesced elevator switch when reinitializing queues (Keith Busch)
- wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [Orabug: 36683388] {CVE-2024-36922}
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio() (Ye Bin)
- s390/xor: Fix xor_xc_2() inline assembly constraints (Heiko Carstens)
- ALSA: control: Avoid WARN() for symlink errors (Takashi Iwai) [Orabug: 37434224] {CVE-2024-56657}
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Jaskaran Singh) [Orabug: 38730673] {CVE-2025-40261}
- Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" (Jaskaran Singh)
- tty: n_gsm: fix deadlock and link starvation in outgoing data path (Daniel Starke)
- MPTCP: fix lock class name family in pm_nl_create_listen_socket (Li Xiasong)
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [Orabug: 39273511] {CVE-2026-31586}
- ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [Orabug: 39273588] {CVE-2026-31598}
- fs/ocfs2: fix comments mentioning i_mutex (Hongnan Li)
- rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu)
- rxrpc: Fix call removal to use RCU safe deletion (David Howells)
- rxrpc: Fix key quota calculation for multitoken keys (David Howells)
- xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262402] {CVE-2026-31664}
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331093] {CVE-2026-43075}
- ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331098] {CVE-2026-43076}
- ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V (Sebastian Krzyszkowiak)
- Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Set the DVS voltages lower (Sebastian Krzyszkowiak)
- powerpc64/bpf: do not increment tailcall count when prog is NULL (Hari Bathini)
- netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal)
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (H?kon Bugge)
- wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Felix Fietkau) [Orabug: 39167473] {CVE-2026-23444}
- gfs2: Validate i_depth for exhash directories (Andrew Price) [Orabug: 38395007] {CVE-2025-38710}
- gfs2: Improve gfs2_consist_inode() usage (Andrew Price)
- ipv6: add NULL checks for idev in SRv6 paths (Heminhong) [Orabug: 39167468] {CVE-2026-23442}
- Revert "net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()" (Sasha Levin)
- Revert "net: ethernet: xscale: Check for PTP support properly" (Sasha Levin)
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown (Koichiro Den)
- media: hackrf: fix to not free memory after the device is registered in hackrf_probe() (Jeongjun Park)
- media: vidtv: fix pass-by-value structs causing MSAN warnings (Abd-Alrhman Masalkhi)
- nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map (Deepanshu Kartikey)
- media: as102: fix to not free memory after the device is registered in as102_usb_probe() (Jeongjun Park) [Orabug: 39273468] {CVE-2026-31578}
- bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [Orabug: 39273482] {CVE-2026-31580}
- ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [Orabug: 39273487] {CVE-2026-31581}
- media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [Orabug: 39273494] {CVE-2026-31583}
- media: vidtv: fix nfeeds state corruption on start_streaming failure (Ruslan Valiyev)
- mm/kasan: fix double free for kasan pXds (Ritesh Harjani)
- KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug: 39273523] {CVE-2026-31588}
- checkpatch: add support for Assisted-by tag (Sasha Levin)
- rxrpc: proc: size address buffers for %pISpc output (Pengpeng Hou)
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [Orabug: 39139840] {CVE-2026-23399}
- smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara)
- fsl-mc: Use driver_set_override() instead of open-coding (Krzysztof Kozlowski)
- KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (Sean Christopherson) [Orabug: 39273531] {CVE-2026-31590}
- ocfs2: handle invalid dinode in ocfs2_group_extend (Zhengyuan Huang) [Orabug: 39273570] {CVE-2026-31596}
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [Orabug: 39273579] {CVE-2026-31597}
- media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections (Ruslan Valiyev)
- ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [Orabug: 39273609] {CVE-2026-31602}
- USB: serial: option: add Telit Cinterion FN990A MBIM composition (Fabio Porcedda)
- staging: sm750fb: fix division by zero in ps_to_hz() (Junrui Luo)
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- usb: storage: Expand range of matched versions for VL817 quirks entry (Daniel Br?t)
- usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [Orabug: 39273632] {CVE-2026-31607}
- usb: gadget: renesas_usb3: validate endpoint index in standard request handlers (Greg Kroah-Hartman)
- usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() (Greg Kroah-Hartman)
- usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() (Greg Kroah-Hartman) [Orabug: 39273669] {CVE-2026-31617}
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- ALSA: fireworks: bound device-supplied status before string array lookup (Greg Kroah-Hartman) [Orabug: 39273681] {CVE-2026-31619}
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (Greg Kroah-Hartman)
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() (Greg Kroah-Hartman) [Orabug: 39273693] {CVE-2026-31623}
- HID: core: clamp report_size in s32ton() to avoid undefined shift (Greg Kroah-Hartman) [Orabug: 39273697] {CVE-2026-31624}
- HID: alps: fix NULL pointer dereference in alps_raw_event() (Greg Kroah-Hartman) [Orabug: 39273705] {CVE-2026-31625}
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() (Lin Yu Chen) [Orabug: 39273709] {CVE-2026-31626}
- i2c: s3c24xx: check the size of the SMBUS message before using it (Greg Kroah-Hartman)
- can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [Orabug: 39273447] {CVE-2026-31532}
- nfc: llcp: add missing return after LLCP_CLOSED checks (Junxi Qian)
- ALSA: usb-audio: Update for native DSD support quirks (Jussi Laako)
- MIPS: mm: Rewrite TLB uniquification for the hidden bit feature (Maciej W. Rozycki)
- MIPS: mm: Suppress TLB uniquification on EHINV hardware (Maciej W. Rozycki)
- MIPS: Always record SEGBITS in cpu_data.vmbits (Maciej W. Rozycki)
- mips: mm: Allocate tlb_vpn array atomically (Stefan Wiehler)
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [Orabug: 39171450] {CVE-2026-31407}
- i3c: fix uninitialized variable use in i2c setup (Jamie Iles)
- perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [Orabug: 39331116] {CVE-2026-43079}
- gpio: tegra: fix irq_release_resources calling enable instead of disable (Samasth Norway Ananda)
- l2tp: Drop large packets with UDP encap (Alice Mikityanska) [Orabug: 39331125] {CVE-2026-43080}
- af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [Orabug: 39263356] {CVE-2026-31673}
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [Orabug: 39263406] {CVE-2026-31685}
- netfilter: xt_multiport: validate range encoding in checkentry (Ao Zhou) [Orabug: 39263388] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [Orabug: 39331145] {CVE-2026-43085}
- xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [Orabug: 39331163] {CVE-2026-43089}
- xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [Orabug: 39331181] {CVE-2026-43093}
- e1000: check return value of e1000_read_eeprom (Agalakov Daniil)
- tracing/probe: reject non-closed empty immediate strings (Pengpeng Hou)
- nfc: s3fwrn5: allocate rx skb before consuming bytes (Pengpeng Hou)
- ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Yiqi Sun) [Orabug: 39331198] {CVE-2026-43099}
- net: lapbether: handle NETDEV_PRE_TYPE_CHANGE (Eric Dumazet)
- net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [Orabug: 39263401] {CVE-2026-31684}
- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39784990] {CVE-2026-43074}
- epoll: use refcount to reduce ep_mutex contention (Paolo Abeni)
- drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock (Ma?ra Canal)
- drm/vc4: Fix a memory leak in hang state error path (Ma?ra Canal) [Orabug: 39331212] {CVE-2026-43104}
- drm/vc4: Fix memory leak of BO array in hang state (Ma?ra Canal) [Orabug: 39331216] {CVE-2026-43105}
- PCI: hv: Set default NUMA node to 0 for devices without affinity info (Long Li)
- arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency (Sebastian Krzyszkowiak)
- soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching (Potin Lai)
- ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Tomasz Merta)
- wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [Orabug: 39331238] {CVE-2026-43110}
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Arthur Husband)
- HID: roccat: fix use-after-free in roccat_report_event (Beno?t Sevens) [Orabug: 39331244] {CVE-2026-43111}
- HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Leo Vriska)
- pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) (Andy Shevchenko)
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (Fredric Cover)
- ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Phil Willoughby)
- ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Kuninori Morimoto)
- wifi: wl1251: validate packet IDs before indexing tx_frames (Pengpeng Hou) [Orabug: 39331254] {CVE-2026-43113}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [Orabug: 39331263] {CVE-2026-43114}
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (C?sar Montoya)
- btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [Orabug: 39331280] {CVE-2026-43117}
- can: mcp251x: add error handling for power enable in open and resume (Wenyuan Li)
- ALSA: asihpi: avoid write overflow check warning (Arnd Bergmann)
- LTS version: v5.15.208 (Samasth Norway Ananda)
- LTS version: v5.15.207 (Samasth Norway Ananda)
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Prathyushi Nangia) [Orabug: 39460476] {CVE-2026-46174}
- x86/CPU/AMD: Add X86_FEATURE_ZEN1 (Borislav Petkov)
- LTS version: v5.15.206 (Samasth Norway Ananda)
- LTS version: v5.15.205 (Samasth Norway Ananda)
- LTS version: v5.15.204 (Samasth Norway Ananda)
- xen/privcmd: fix double free via VMA splitting (Juergen Gross) [Orabug: 39305911] {CVE-2026-31787}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305899] {CVE-2026-31786}

[5.15.0-323.203.2]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Gal Pressman) [Orabug: 38290328]
- net/mlx5e: Fix race condition during IPSec ESN update (Jianbo Liu) [Orabug: 38290328,39167462] {CVE-2026-23440}
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [Orabug: 38290328,39167465] {CVE-2026-23441}
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567286,39668793] {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson) [Orabug: 39673870,39753976] {CVE-2026-63807}
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673870,39686460] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39460221,39673870] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack) [Orabug: 39673870]
- KVM: x86/mmu: Use a bool for direct (David Matlack) [Orabug: 39673870]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [Orabug: 39425999,39751167] {CVE-2026-43499,CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39425999,39706512] {CVE-2026-43499}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659419]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619388,39639981,39648952] {CVE-2026-52943}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang) [Orabug: 39681043]
- mm: preserve page-table boundaries for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- mm: enforce max_map_count for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209740]
- uek-rpm: cnic: Clean up the elba/SNIC config with make olddefconfig (Dave Kleikamp) [Orabug: 39661609]
- uek-rpm: cnic: Trim the SNIC config for a faster boot (Dave Kleikamp) [Orabug: 39661609]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 38945572]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 38945572]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480769]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Hkbinbin) [Orabug: 39452260] {CVE-2026-46043}

[5.15.0-323.203.1]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38112000]
- locking/mutex: Make contention tracepoints more consistent wrt adaptive spinning (Peter Zijlstra) [Orabug: 39598217]
- locking: Apply contention tracepoints in the slow path (Namhyung Kim) [Orabug: 39598217]
- locking: Add lock contention tracepoints (Namhyung Kim) [Orabug: 39598217]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages (Praveen Kumar Kannoju) [Orabug: 39594875]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39460234] {CVE-2026-46116}
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39226005]



From el-errata at oss.oracle.com  Thu Aug 13 23:24:15 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:24:15 -0700
Subject: [El-errata] ELBA-2026-500163 Oracle Linux 9 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.133.1786663471.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500163

http://linux.oracle.com/errata/ELBA-2026-500163.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:


aarch64:
bpftool-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-container-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-container-debug-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-core-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-debug-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-debug-core-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-debug-devel-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-debug-modules-extra-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-devel-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-doc-5.15.0-323.211.3.3.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek-modules-extra-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek64k-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek64k-core-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek64k-devel-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek64k-modules-5.15.0-323.211.3.3.el9uek.aarch64.rpm
kernel-uek64k-modules-extra-5.15.0-323.211.3.3.el9uek.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-323.211.3.3.el9uek.src.rpm



Description of changes:

[5.15.0-323.211.3.3]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39853924]

[5.15.0-323.211.3.2]
- ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Hans de Goede)  [Orabug: 39848333]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39848194]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39848194]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39848194]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39848194]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39848194]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39848194]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39849605]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39849605]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39849605]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39849605]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39848314]

[5.15.0-323.211.3.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816016]  {CVE-2026-64531}
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39816098]  {CVE-2026-64600}

[5.15.0-323.211.3]
- LTS version: v5.15.211 (Vijayendra Suman)
- dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [Orabug: 37844553] {CVE-2025-23131}
- crypto: qat - remove unused character device and IOCTLs (Giovanni Cabiddu) [Orabug: 39786549] {CVE-2026-64529}
- crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Herbert Xu)
- crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Thorsten Blum)
- Documentation: ioctl-number: Extend "Include File" column width (Bagas Sanjaya)
- ksmbd: reject non-VALID session in compound request branch (Gil Portnoy)
- fuse: re-lock request before replacing page cache folio (Joanne Koong) [Orabug: 39753883] {CVE-2026-53388}
- net: phonet: free phonet_device after RCU grace period (Santosh Kalluri) [Orabug: 39637380] {CVE-2026-53157}
- phonet: Pass net and ifindex to phonet_address_notify(). (Kuniyuki Iwashima)
- phonet: Pass ifindex to fill_addr(). (Kuniyuki Iwashima)
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (Dexuan Cui)
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback (Mukesh Ojha)
- misc: fastrpc: Add dma_mask to fastrpc_channel_ctx (Abel Vesa)
- hv: utils: handle and propagate errors in kvp_register (Thorsten Blum)
- mptcp: fix missing wakeups in edge scenarios (Paolo Abeni)
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (Michael Bommarito) [Orabug: 39753890] {CVE-2026-53391}
- nfsd: check get_user() return when reading princhashlen (Dominik Wo?niak)
- nfsd: fix posix_acl leak on SETACL decode failure (Jeff Layton) [Orabug: 39753905] {CVE-2026-53397}
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (Guannan Wang) [Orabug: 39753909] {CVE-2026-53398}
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode (Steffen Persvold)
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (Ian Bridges) [Orabug: 39753928] {CVE-2026-53403}
- power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() (Xu Wang)
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (Ashutosh Desai) [Orabug: 39753936] {CVE-2026-63794}
- ocfs2: reject oversized group bitmap descriptors (Zhang Cen) [Orabug: 39753942] {CVE-2026-63796}
- fpga: region: fix use-after-free in child_regions_with_firmware() (Xu Wang)
- irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove (Qingshuang Fu)
- pNFS: Fix use-after-free in pnfs_update_layout() (Xu Wang) [Orabug: 39753953] {CVE-2026-63800}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Doruk Tan Ozturk) [Orabug: 39753957] {CVE-2026-63801}
- hdlc_ppp: sync per-proto timers before freeing hdlc state (Fan Wu) [Orabug: 39753963] {CVE-2026-63803}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (Michael Bommarito) [Orabug: 39753979] {CVE-2026-63808}
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS (Maciej W. Rozycki)
- bpf: use kvfree() for replaced sysctl write buffer (Dawei Feng) [Orabug: 39753982] {CVE-2026-63809}
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk() (Zhang Cen)
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor (Bitterblue Smith)
- wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [Orabug: 39754021] {CVE-2026-63822}
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S (Zenm Chen)
- keys: Pin request_key_auth payload in instantiate paths (Shaomin Chen) [Orabug: 39754024] {CVE-2026-63823}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Jarkko Sakkinen) [Orabug: 39754028] {CVE-2026-63824}
- mac802154: llsec: add skb_cow_data() before in-place crypto (Doruk Tan Ozturk) [Orabug: 39754053] {CVE-2026-63831}
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [Orabug: 38503789] {CVE-2025-39931}
- ext4: add bounds check for inline data length in ext4_read_inline_page (Yuto Ohnuki)
- ntfs3: reject direct userspace writes to reserved $LX* xattrs (Konstantin Komarov)
- ring-buffer: Remove ring_buffer_read_prepare_sync() (Bjoern Doebel)
- batman-adv: tvlv: avoid race of cifsnotfound handler state (Sven Eckelmann)
- batman-adv: tvlv: enforce 2-byte alignment (Sven Eckelmann)
- batman-adv: dat: prevent false sharing between VLANs (Sven Eckelmann)
- batman-adv: tt: track roam count per VID (Sven Eckelmann)
- batman-adv: tt: don't merge change entries with different VIDs (Sven Eckelmann)
- batman-adv: tp_meter: handle overlapping packets (Sven Eckelmann)
- batman-adv: tp_meter: prevent parallel modifications of last_recv (Sven Eckelmann)
- batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: restrict number of unacked list entries (Sven Eckelmann) [Orabug: 39754066] {CVE-2026-63834}
- batman-adv: v: prevent OGM aggregation on disabled hardif (Sven Eckelmann) [Orabug: 39754070] {CVE-2026-63835}
- batman-adv: frag: avoid underflow of TTL (Sven Eckelmann)
- batman-adv: frag: ensure fragment is writable before modifying TTL (Sven Eckelmann)
- batman-adv: fix (m|b)cast csum after decrementing TTL (Sven Eckelmann)
- batman-adv: ensure bcast is writable before modifying TTL (Sven Eckelmann)
- batman-adv: tp_meter: initialize last_recv_time during init (Sven Eckelmann)
- batman-adv: prevent ELP transmission interval underflow (Sven Eckelmann)
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: add only finished tp_vars to lists (Sven Eckelmann)
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection (Sven Eckelmann)
- batman-adv: tp_meter: fix fast recovery precondition (Sven Eckelmann)
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (Sven Eckelmann) [Orabug: 39754076] {CVE-2026-63836}
- batman-adv: tp_meter: avoid window underflow (Sven Eckelmann)
- batman-adv: tp_meter: initialize dec_cwnd explicitly (Sven Eckelmann)
- batman-adv: tp_meter: initialize dup_acks explicitly (Sven Eckelmann)
- batman-adv: tp_meter: keep unacked list in ascending ordered (Sven Eckelmann)
- kselftest/arm64: signal: Skip SVE signal test if not enough VLs supported (Yijia Wang)
- Revert "ptp: add testptp mask test" (Petr Machata)
- Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" (Petr Machata)
- virtiofs: fix UAF on submount umount (Miklos Szeredi) [Orabug: 39753856] {CVE-2026-53381}
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (Ruslan Valiyev)
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (Yi Yang) [Orabug: 39753871] {CVE-2026-53385}
- regulator: core: fix locking in regulator_resolve_supply() error path (Andr? Draszik) [Orabug: 39489558] {CVE-2026-46252}
- af_unix: Reject SIOCATMARK on non-stream sockets (Jiexun Wang) [Orabug: 39619334] {CVE-2026-52928}
- xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman)
- agp/amd64: Fix broken error propagation in agp_amd64_probe() (Mingyu Wang) [Orabug: 39662073] {CVE-2026-53325}
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (Weiming Shi)
- i2c: stub: Reject I2C block transfers with invalid length (Weiming Shi) [Orabug: 39760892] {CVE-2026-64191}
- RDMA/bnxt_re: zero shared page before exposing to userspace (Lord Ulf Henrik Holmberg)
- iio: light: bh1780: fix PM runtime leak on error path (Antoniu Miclaus)
- batman-adv: tt: prevent TVLV entry number overflow (Sven Eckelmann)
- batman-adv: tt: reject oversized local TVLV buffers (Sven Eckelmann)
- drm/v3d: Skip CSD when it has zeroed workgroups (Ma?ra Canal)
- drm/v3d: Store the active job inside the queue's state (Ma?ra Canal)
- ip6_vti: set netns_immutable on the fallback device. (Eric Dumazet) [Orabug: 39589885] {CVE-2026-52909}
- drm/amd/display: Bound VBIOS record-chain walk loops (Harry Wentland) [Orabug: 39637312] {CVE-2026-53138}
- fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (Jann Horn) [Orabug: 39637410] {CVE-2026-53167}
- LTS version: v5.15.210 (Vijayendra Suman)
- netfilter: require Ethernet MAC header before using eth_hdr() (Zhengchuan Liang) [Orabug: 39637279] {CVE-2026-53131}
- batman-adv: tp_meter: avoid role confusion in tp_list (Sven Eckelmann)
- batman-adv: tp_meter: fix race condition in send error reporting (Sven Eckelmann)
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Ali Ganiyev)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- media: rc: igorplugusb: fix control request setup packet (Henri A) [Orabug: 39785220] {CVE-2026-64240}
- batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982] {CVE-2026-64092}
- media: rc: ttusbir: fix inverted error logic (Oliver Neukum)
- apparmor: validate default DFA states are in bounds (Ben Hutchings)
- fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter (Ben Hutchings)
- mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] {CVE-2026-63867}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Will Deacon)
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Shanker Donthineni)
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39674327] {CVE-2026-53354}
- arm64: cputype: Add NVIDIA Olympus definitions (Shanker Donthineni)
- selinux: enable genfscon labeling for securityfs (Christian G?ttsche)
- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Aaron Erhardt)
- ksmbd: Compare MACs in constant time (Eric Biggers)
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou) [Orabug: 39343685] {CVE-2026-43341}
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure (Sven Eckelmann)
- batman-adv: stop tp_meter sessions during mesh teardown (Jiexun Wang) [Orabug: 39460622] {CVE-2026-46208}
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (Tejun Heo)
- ipvs: skip ipv6 extension headers for csum checks (Julian Anastasov) [Orabug: 39451541] {CVE-2026-45850}
- mm/huge_memory: update file PMD counter before folio_put() (Yin Tirui) [Orabug: 39637477] {CVE-2026-53189}
- RDMA/umem: Fix truncation for block sizes >= 4G (Jason Gunthorpe)
- RDMA: Move DMA block iterator logic into dedicated files (Leon Romanovsky)
- RDMA/umem: fix kernel-doc warnings (Randy Dunlap)
- hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf (Anton Leontev) [Orabug: 39637516] {CVE-2026-53199}
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Davide Ornaghi) [Orabug: 39637292] {CVE-2026-53134}
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (Prasanna S)
- tty: serial: qcom-geni-serial: align #define values (Bartosz Golaszewski)
- tty: serial: qcom-geni-serial: remove unused symbols (Bartosz Golaszewski)
- serial: altera_jtaguart: handle uart_add_one_port() failures (Myeonghun Pak)
- serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt (Lad Prabhakar)
- drm/hyperv: validate resolution_count and fix WIN8 fallback (Berkant Koc) [Orabug: 39786537] {CVE-2026-64524}
- drm/hyperv: Remove support for Hyper-V 2008 and 2008R2/Win7 (Michael Kelley)
- usb: typec: ucsi: Check if power role change actually happened before handling (Myrrh Periwinkle)
- thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (Michael Bommarito) [Orabug: 39754211] {CVE-2026-63891}
- usb: gadget: f_hid: fix device reference leak in hidg_alloc() (Guangshuo Li)
- usb: gadget: f_hid: tidy error handling in hidg_alloc (John Keeping)
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths (Radhey Shyam Pandey)
- tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (Tudor Ambarus) [Orabug: 39786545] {CVE-2026-64528}
- tty: serial: samsung: use u32 for register interactions (Tudor Ambarus)
- serial: samsung_tty: Use port lock wrappers (Thomas Gleixner)
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure (Peter Chen)
- iio: dac: ad5686: fix ref bit initialization for single-channel parts (Rodrigo Alencar)
- iio: chemical: scd30: fix division by zero in write_raw (Antoniu Miclaus)
- iio: chemical: scd30: Use guard(mutex) to allow early returns (Jonathan Cameron)
- iio: gyro: adis16260: fix division by zero in write_raw (Antoniu Miclaus)
- Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (Siwei Zhang) [Orabug: 39681273] {CVE-2026-53358}
- phy: tegra: xusb: Fix per-pad high-speed termination calibration (Wayne Chang)
- phy: tegra: xusb: Disable trk clk when not in use (Wayne Chang)
- arm64: tlb: Flush walk cache when unsharing PMD tables (Zeng Heng) [Orabug: 39755010] {CVE-2026-63875}
- spi: qup: fix error pointer deref after DMA setup failure (Johan Hovold) [Orabug: 39754942] {CVE-2026-64170}
- spi: qup: switch to use modern name (Yang Yingliang)
- octeontx2-pf: avoid double free of pool->stack on AQ init failure (Dawei Feng)
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (Sam Daly)
- mptcp: do not drop partial packets (Shardul Bankar)
- selftests: mptcp: drop nanoseconds width specifier (Matthieu Baerts)
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient (Li Xiasong)
- use less confusing names for iov_iter direction initializers (Al Viro)
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Justin Iurman) [Orabug: 39754825] {CVE-2026-64116}
- ipv6/addrconf: annotate data-races around devconf fields (II) (Eric Dumazet)
- ice: fix VF queue configuration with low MTU values (Jose Ignacio Tornos Martinez)
- net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840] {CVE-2026-64123}
- Bluetooth: serialize accept_q access (Jiexun Wang) [Orabug: 39619283] {CVE-2026-52918}
- Bluetooth: Init sk_peer_* on bt_sock_alloc (Luiz Augusto von Dentz)
- Bluetooth: Consolidate code around sk_alloc into a helper function (Luiz Augusto von Dentz)
- qed: fix double free in qed_cxt_tables_alloc() (Dawei Feng) [Orabug: 39754830] {CVE-2026-64118}
- Bluetooth: MGMT: validate Add Extended Advertising Data length (Michael Bommarito) [Orabug: 39754849] {CVE-2026-64126}
- Bluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2 (Luiz Augusto von Dentz)
- Bluetooth: hci_qca: Convert timeout from jiffies to ms (Shuai Zhang)
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (Safa Karaku?) [Orabug: 39681270] {CVE-2026-53357}
- smb: client: require net admin for CIFS SWN netlink (Michael Bommarito)
- genetlink: Use internal flags for multicast groups (Ido Schimmel)
- spi: lantiq-ssc: fix controller deregistration (Johan Hovold)
- spi: st-ssc4: fix controller deregistration (Johan Hovold)
- f2fs: fix false alarm of lockdep on cp_global_sem lock (Chao Yu)
- f2fs: fix incorrect file address mapping when inline inode is unwritten (Yongpeng Yang)
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker (Matthieu Baerts)
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts) [Orabug: 39460320] {CVE-2026-46137}
- mptcp: pm: prio: skip closed subflows (Matthieu Baerts)
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Piyush Sachdeva)
- btrfs: fix missing last_unlink_trans update when removing a directory (Filipe Manana) [Orabug: 39460410] {CVE-2026-46160}
- smb: client: validate dacloffset before building DACL pointers (Michael Bommarito)
- pmdomain: core: Fix detach procedure for virtual devices in genpd (Ulf Hansson) [Orabug: 39524579] {CVE-2026-46292}
- tracing/probes: Limit size of event probe to 3K (Steven Rostedt)
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (Yochai Eisenrich) [Orabug: 39460405] {CVE-2026-46159}
- spi: topcliff-pch: fix controller deregistration (Johan Hovold)
- spi: topcliff-pch: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [Orabug: 39460548] {CVE-2026-46191}
- mm/hugetlb_cma: round up per_node before logging it (Sang-Heon Jeon)
- spi: uniphier: fix controller deregistration (Johan Hovold)
- spi: tegra20-sflash: fix controller deregistration (Johan Hovold)
- spi: tegra114: fix controller deregistration (Johan Hovold)
- spi: sun6i: fix controller deregistration (Johan Hovold)
- spi: zynq-qspi: fix controller deregistration (Johan Hovold)
- spi: ti-qspi: fix controller deregistration (Johan Hovold)
- spi: spi-ti-qspi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- spi: sun4i: fix controller deregistration (Johan Hovold)
- spi: syncuacer: fix controller deregistration (Johan Hovold)
- xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] {CVE-2026-46193}
- net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers)
- net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers)
- usb: dwc3: Move GUID programming after PHY initialization (Selvarasu Ganesan)
- wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Marek Szyprowski) [Orabug: 39460504] {CVE-2026-46180}
- usb: typec: tcpm: reset internal port states on soft reset AMS (Amit Sunil Dhamne)
- smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito)
- tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (David Carlier) [Orabug: 39460568] {CVE-2026-46196}
- crypto: caam - guard HMAC key hex dumps in hash_digest_key (Thorsten Blum)
- printk: add print_hex_dump_devel() (Thorsten Blum)
- ALSA: aloop: Fix peer runtime UAF during format-change stop (C?ssio Gabriel) [Orabug: 39452424] {CVE-2026-46090}
- ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [Orabug: 39452292] {CVE-2026-46052}
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (Junrui Luo)
- can: ucan: fix devres lifetime (Johan Hovold)
- can: ucan: fix typos in comments (Julia Lawall)
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [Orabug: 39452305] {CVE-2026-46056}
- hfsplus: fix held lock freed on hfsplus_fill_super() (Zilin Guan)
- hfsplus: fix uninit-value by validating catalog record size (Deepanshu Kartikey)
- udf: fix partition descriptor append bookkeeping (Seohyeon Maeng) [Orabug: 39452078] {CVE-2026-45991}
- mtd: spi-nor: sst: Fix write enable before AAI sequence (Sanjaikumar V S)
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration (Shawn Lin)
- randomize_kstack: Maintain kstack_offset per task (Ryan Roberts)
- fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (Thomas Zimmermann) [Orabug: 39452332] {CVE-2026-46065}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [Orabug: 39452412] {CVE-2026-46086}
- net: qrtr: ns: Limit the total number of nodes (Manivannan Sadhasivam) [Orabug: 39452124] {CVE-2026-46003}
- net: mctp: fix don't require received header reserved bits to be zero (Yuanzhaoming)
- net: qrtr: ns: Free the node during ctrl_cmd_bye() (Manivannan Sadhasivam) [Orabug: 39452247] {CVE-2026-46038}
- net: qrtr: ns: Change servers radix tree to xarray (Vignesh Viswanathan)
- net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208] {CVE-2026-46026}
- ALSA: core: Fix potential data race at fasync handling (Takashi Iwai)
- sched: Use u64 for bandwidth ratio calculations (Joseph Salisbury)
- media: rc: igorplugusb: heed coherency rules (Oliver Neukum) [Orabug: 39452433] {CVE-2026-46091}
- erofs: fix the out-of-bounds nameoff handling for trailing dirents (Gao Xiang)
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Thorsten Blum)
- media: rc: ttusbir: respect DMA coherency rules (Oliver Neukum)
- ALSA: aoa: i2sbus: clear stale prepared state (C?ssio Gabriel)
- ALSA: aoa: Use guard() for mutex locks (Takashi Iwai)
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] {CVE-2026-46069}
- thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [Orabug: 39452187] {CVE-2026-46021}
- wifi: rtw88: check for PCI upstream bridge existence (Fedor Pchelkin) [Orabug: 39452438] {CVE-2026-46092}
- rtw88: 8821ce: Disable PCIe ASPM L1 for 8821CE using chip ID (Jimmy Hon)
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Anshuman Khandual)
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [Orabug: 39300581] {CVE-2026-31700}
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Michael Bommarito)
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito)
- smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito)
- smb: server: fix max_connections off-by-one in tcp accept path (Daemyung Kang)
- smb: server: fix active_num_conn leak on transport allocation failure (Michael Bommarito)
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() (Yongpeng Yang)
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally (Chao Yu)
- lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (Lukas Wunner)
- net/tcp-md5: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 39343806] {CVE-2026-43383}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() (Longxuan Yu) [Orabug: 39619351] {CVE-2026-52933}
- mm/damon/ops-common: call folio_test_lru() after folio_get() (Seongjae Park)
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (Mingyu Wang) [Orabug: 39655978] {CVE-2026-52946}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Harry Wentland) [Orabug: 39674253] {CVE-2026-53329}
- drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Harry Wentland) [Orabug: 39637296] {CVE-2026-53135}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Harry Wentland) [Orabug: 39637301] {CVE-2026-53136}
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Harry Wentland)
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock (Bjorn Andersson)
- thunderbolt: Limit XDomain response copy to actual frame size (Michael Bommarito) [Orabug: 39637337] {CVE-2026-53146}
- thunderbolt: Clamp XDomain response data copy to allocation size (Michael Bommarito) [Orabug: 39637346] {CVE-2026-53148}
- thunderbolt: Bound root directory content to block size (Michael Bommarito) [Orabug: 39637351] {CVE-2026-53149}
- thunderbolt: Reject zero-length property entries in validator (Michael Bommarito) [Orabug: 39637356] {CVE-2026-53150}
- sctp: stream: fully roll back denied add-stream state (Wyatt Feng) [Orabug: 39619338] {CVE-2026-52929}
- sctp: diag: reject stale associations in dump_one path (Zhao Zhang) [Orabug: 39619278] {CVE-2026-52917}
- mmc: sdhci: add signal voltage switch in sdhci_resume_host (Jisheng Zhang)
- mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC (Lad Prabhakar)
- mmc: core: Fix host controller programming for fixed driver type (Kamal Dasu)
- net: mv643xx: fix OF node refcount (Bartosz Golaszewski)
- net: bonding: fix NULL pointer dereference in bond_do_ioctl() (Zhaojinming) [Orabug: 39674284] {CVE-2026-53337}
- misc: fastrpc: fix DMA address corruption due to find_vma misuse (Junrui Luo)
- misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context (Anandu Krishnan E)
- ipc/shm: serialize orphan cleanup with shm_nattch updates (Yilin Zhu) [Orabug: 39619342] {CVE-2026-52930}
- Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard (Cryolitia Pukngae)
- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) (Zeyu Wang)
- i2c: tegra: Fix NOIRQ suspend/resume (Akhil R)
- i2c: stm32f7: fix timing computation ignoring i2c-analog-filter (Guillermo Rodr?guez)
- i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() (Vladimir Zapolskiy)
- fuse: reject fuse_notify() pagecache ops on directories (Jann Horn) [Orabug: 39637414] {CVE-2026-53168}
- pidfd: refuse access to tasks that have started exiting harder (Christian Brauner)
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (Michael Bommarito) [Orabug: 39637428] {CVE-2026-53176}
- bnxt_en: Fix NULL pointer dereference (Kyle Meyer) [Orabug: 39637432] {CVE-2026-53177}
- vsock/vmci: fix sk_ack_backlog leak on failed handshake (Raf Dickson) [Orabug: 39637447] {CVE-2026-53181}
- mptcp: sockopt: check timestamping ret value (Matthieu Baerts)
- mptcp: fix retransmission loop when csum is enabled (Paolo Abeni)
- ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O (Karl Mehltretter)
- ARM: socfpga: Fix OF node refcount leak in SMP setup (Yuho Choi)
- RDMA/srp: bound SRP_RSP sense copy by the received length (Michael Bommarito) [Orabug: 39637467] {CVE-2026-53186}
- drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Harry Wentland)
- ALSA: timer: Fix UAF at snd_timer_user_params() (Takashi Iwai) [Orabug: 39637489] {CVE-2026-53192}
- USB: serial: kl5kusb105: fix bulk-out buffer overflow (Hyeongjun An) [Orabug: 39637496] {CVE-2026-53194}
- USB: serial: option: add usb-id for Dell Wireless DW5826e-m (Jack Wu)
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Adrian Korwel) [Orabug: 39637502] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Adrian Korwel) [Orabug: 39637506] {CVE-2026-53196}
- xfrm: espintcp: do not reuse an in-progress partial send (Wyatt Feng)
- drm/i915/gem: Fix phys BO pread/pwrite with offset (Joonas Lahtinen) [Orabug: 39674335] {CVE-2026-53356}
- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (Michael Bommarito) [Orabug: 39637545] {CVE-2026-53208}
- netfilter: nft_tunnel: fix use-after-free on object destroy (Tristan Madani) [Orabug: 39637555] {CVE-2026-53212}
- drm/vc4: fix krealloc() memory leak (Alexander A. Klimov) [Orabug: 39637561] {CVE-2026-53213}
- net: mvpp2: build skb from XDP-adjusted data on XDP_PASS (Til Kaiser)
- net: mvpp2: refill RX buffers before XDP or skb use (Til Kaiser) [Orabug: 39637568] {CVE-2026-53215}
- net: mvpp2: Add metadata support for xdp mode (Lorenzo Bianconi)
- net: mvpp2: limit XDP frame size to the RX buffer (Til Kaiser) [Orabug: 39637571] {CVE-2026-53216}
- net: mvpp2: sync RX data at the hardware packet offset (Til Kaiser) [Orabug: 39637575] {CVE-2026-53217}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [Orabug: 39637578] {CVE-2026-53218}
- netfilter: nf_log: validate MAC header was set before dumping it (Xiang Mei) [Orabug: 39619384] {CVE-2026-52942}
- netfilter: x_tables: avoid leaking percpu counter pointers (Kyle Zeng) [Orabug: 39637582] {CVE-2026-53219}
- ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (Eric Dumazet) [Orabug: 39637592] {CVE-2026-53221}
- net: guard timestamp cmsgs to real error queue skbs (Kyle Zeng) [Orabug: 39637599] {CVE-2026-53223}
- sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (Michael Bommarito) [Orabug: 39637609] {CVE-2026-53225}
- net: openvswitch: fix possible kfree_skb of ERR_PTR (Adrian Moreno) [Orabug: 39637618] {CVE-2026-53227}
- ipv6: sit: reload inner IPv6 header after GSO offloads (Kyle Zeng) [Orabug: 39637622] {CVE-2026-53228}
- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Mingyu Wang) [Orabug: 39621562] {CVE-2026-52947}
- netlabel: validate unlabeled address and mask attribute lengths (Chenguang Zhao) [Orabug: 39637662] {CVE-2026-53238}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sanghyun Park) [Orabug: 39637666] {CVE-2026-53239}
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (Mark Rutland)
- KVM: arm64: Remove VPIPT I-cache handling (Marc Zyngier)
- nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) [Orabug: 37844165] {CVE-2025-22026}
- fs/ntfs3: Return error for inconsistent extended attributes (Edward Lo)
- ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [Orabug: 39250744] {CVE-2026-31449}
- time: Fix off-by-one in settimeofday() usec validation (Naveen Kumar Chaudhary)
- signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() (Aleksandr Nogikh) [Orabug: 39674319] {CVE-2026-53352}
- sctp: purge outqueue on stale COOKIE-ECHO handling (Xin Long) [Orabug: 39619311] {CVE-2026-52924}
- net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (Yizhou Zhao) [Orabug: 39637680] {CVE-2026-53245}
- ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() (Eric Dumazet) [Orabug: 39754155] {CVE-2026-63870}
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (Eric Dumazet) [Orabug: 39637694] {CVE-2026-53249}
- Bluetooth: fix memory leak in error path of hci_alloc_dev() (Bharath Reddy) [Orabug: 39785002] {CVE-2026-53252}
- Bluetooth: bnep: reject short frames before parsing (Zhang Cen) [Orabug: 39637706] {CVE-2026-53253}
- Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (Dudu Lu)
- Bluetooth: RFCOMM: validate skb length in MCC handlers (Seungju Cheon) [Orabug: 39637711] {CVE-2026-53254}
- Bluetooth: MGMT: validate advertising TLV before type checks (Zhang Cen) [Orabug: 39637716] {CVE-2026-53255}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (Zhang Cen) [Orabug: 39637720] {CVE-2026-53256}
- net: lan743x: permit VLAN-tagged packets up to configured MTU (David Thompson)
- net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (Yizhou Zhao) [Orabug: 39754149] {CVE-2026-63868}
- pcnet32: stop holding device spin lock during napi_complete_done (Oscar Maes)
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Yicong Hui)
- 6lowpan: fix off-by-one in multicast context address compression (Yizhou Zhao) [Orabug: 39637741] {CVE-2026-53263}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (Jamal Hadi Salim) [Orabug: 39637748] {CVE-2026-53264}
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li) [Orabug: 39784967] {CVE-2026-53265}
- netfilter: bridge: make ebt_snat ARP rewrite writable (Yiming Qian) [Orabug: 39637753] {CVE-2026-53266}
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [Orabug: 39637763] {CVE-2026-53268}
- netfilter: synproxy: add mutex to guard hook reference counting (Fernando Fernandez Mancera) [Orabug: 39637768] {CVE-2026-53269}
- ipvs: clear the svc scheduler ptr early on edit (Julian Anastasov) [Orabug: 39637772] {CVE-2026-53270}
- netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Fernando Fernandez Mancera)
- tee: optee: prevent use-after-free when the client exits before the supplicant (Amirreza Zarrabi) [Orabug: 39637782] {CVE-2026-53273}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Ido Schimmel) [Orabug: 39637790] {CVE-2026-53275}
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (Mingyu Wang) [Orabug: 39621568] {CVE-2026-52948}
- Disable -Wattribute-alias for clang-23 and newer (Nathan Chancellor)
- compiler-clang.h: Add __diag infrastructure for clang (Nathan Chancellor)
- USB: serial: mct_u232: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754236] {CVE-2026-63898}
- bpf: Free reuseport cBPF prog after RCU grace period. (Kuniyuki Iwashima) [Orabug: 39589889] {CVE-2026-52910}
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (Micha? Pecio)
- serial: dz: Fix bootconsole handover lockup (Maciej W. Rozycki)
- xhci: tegra: Fix ghost USB device on dual-role port unplug (Wei-Cheng Chen)
- USB: serial: digi_acceleport: fix memory corruption with small endpoints (Johan Hovold) [Orabug: 39754248] {CVE-2026-63901}
- HID: core: Fix size_t specifier in hid_report_raw_event() (Nathan Chancellor)
- HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires)
- HID: core: Add printk_ratelimited variants to hid_warn() etc (Vicki Pfau)
- USB: serial: cypress_m8: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754408] {CVE-2026-63956}
- serial: zs: Switch to using channel reset (Maciej W. Rozycki)
- serial: zs: Fix bootconsole handover lockup (Maciej W. Rozycki)
- serial: dz: Fix bootconsole message clobbering at chip reset (Maciej W. Rozycki)
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma (Shitalkumar Gandhi)
- serial: zs: Fix swapped RI/DSR modem line transition counting (Maciej W. Rozycki)
- serial: sh-sci: fix memory region release in error path (Hongling Zeng)
- drm/hyperv: validate VMBus packet size in receive callback (Berkant Koc) [Orabug: 39786542] {CVE-2026-64527}
- thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow (Michael Bommarito) [Orabug: 39754216] {CVE-2026-63892}
- thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (Michael Bommarito) [Orabug: 39754220] {CVE-2026-63893}
- usb: gadget: f_fs: copy only received bytes on short ep0 read (Michael Bommarito)
- usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports (Seungjin Bae)
- usb: gadget: net2280: Fix double free in probe error path (Guangshuo Li)
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (Johan Hovold) [Orabug: 39754232] {CVE-2026-63897}
- USB: serial: mxuport: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754240] {CVE-2026-63899}
- USB: serial: keyspan: fix missing indat transfer sanity check (Johan Hovold) [Orabug: 39754244] {CVE-2026-63900}
- USB: serial: cypress_m8: validate interrupt packet headers (Zhang Cen) [Orabug: 39754252] {CVE-2026-63902}
- USB: serial: belkin_sa: validate interrupt status length (Zhang Cen) [Orabug: 39754256] {CVE-2026-63903}
- USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Wanquan Zhong)
- USB: serial: option: add MeiG SRM813Q (Jan Volckaert)
- usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize (Heitor Alves de Siqueira)
- usb: usbtmc: check URB actual_length for interrupt-IN notifications (Heitor Alves de Siqueira) [Orabug: 39754260] {CVE-2026-63904}
- usbip: vudc: Fix use after free bug in vudc_remove due to race condition (Michael Bommarito) [Orabug: 39754264] {CVE-2026-63905}
- usb: storage: Add quirks for PNY Elite Portable SSD (Sam Burkels)
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers (Stephen J. Fuhry)
- usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval (Micha? Pecio)
- usb: chipidea: core: convert ci_role_switch to local variable (Xu Yang)
- tty: serial: pch_uart: add check for dma_alloc_coherent() (Zhaoyang Yu)
- comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() (Ian Abbott)
- comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() (Ian Abbott)
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 (Nicol?s Bazaes)
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem (Dmitry Torokhov) [Orabug: 39754271] {CVE-2026-63908}
- xfrm: esp: restore combined single-frag length gate (Jingguo Tan) [Orabug: 39754278] {CVE-2026-63912}
- ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (Srinivas Kandagatla)
- ASoC: qcom: q6asm-dai: close stream only when running (Srinivas Kandagatla)
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Hamza Mahfooz) [Orabug: 39754282] {CVE-2026-63913}
- xfrm: ah: use skb_to_full_sk in async output callbacks (Michael Bommarito)
- xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] {CVE-2026-63914}
- nfc: hci: fix out-of-bounds read in HCP header parsing (Ashutosh Desai)
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings (Arnd Bergmann)
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Lee Jones) [Orabug: 39754294] {CVE-2026-63916}
- ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Kuniyuki Iwashima) [Orabug: 39754298] {CVE-2026-63917}
- xfrm: input: hold netns during deferred transport reinjection (Zhengchuan Liang) [Orabug: 39754304] {CVE-2026-63919}
- ipv6: validate extension header length before copying to cmsg (Qi Tang) [Orabug: 39754307] {CVE-2026-63920}
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Maoyi Xie) [Orabug: 39754311] {CVE-2026-63921}
- ipv6: exthdrs: refresh nh after handling HAO option (Zhengchuan Liang) [Orabug: 39754315] {CVE-2026-63922}
- ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (Srinivas Kandagatla)
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Justin Iurman) [Orabug: 39754322] {CVE-2026-63924}
- macsec: fix replay protection at XPN lower-PN wrap (Junrui Luo) [Orabug: 39754326] {CVE-2026-63925}
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (Yuqi Xu) [Orabug: 39754329] {CVE-2026-63926}
- Input: elan_i2c - validate firmware size before use (Dmitry Torokhov) [Orabug: 39785158] {CVE-2026-64237}
- usb: dwc2: Fix use after free in debug code (Dan Carpenter) [Orabug: 39754333] {CVE-2026-63927}
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles (Peter Chen)
- usb: cdns3: gadget: fix request skipping after clearing halt (Yongchao Wu)
- USB: serial: omninet: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754337] {CVE-2026-63928}
- iio: buffer: hw-consumer: fix use-after-free in error path (Felix Gu)
- iio: light: cm3323: fix reg_conf not being initialized correctly (Aldo Conte)
- iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL (Advait Dhamorikar)
- iio: temperature: tsys01: fix broken PROM checksum validation (Salah Triki)
- iio: ssp_sensors: cancel delayed work_refresh on remove (Sanjay Chitroda)
- iio: gyro: itg3200: fix i2c read into the wrong stack location (David Carlier)
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw (Salah Triki)
- wireguard: send: append trailer after expanding head (Jason A. Donenfeld)
- iio: dac: ad5686: fix input raw value check (Rodrigo Alencar)
- iio: dac: max5821: fix return value check in powerdown sync (Salah Triki)
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux (Christofer Jonason)
- parport: Fix race between port and client registration (Ben Hutchings) [Orabug: 39754375] {CVE-2026-63942}
- Bluetooth: HIDP: fix missing length checks in hidp_input_report() (Muhammad Bilal) [Orabug: 39754387] {CVE-2026-63947}
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (Siwei Zhang) [Orabug: 39754391] {CVE-2026-63948}
- ipc: limit next_id allocation to the valid ID range (Linpu Yu) [Orabug: 39619307] {CVE-2026-52923}
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (Mikulas Patocka)
- Bluetooth: btusb: Allow firmware re-download when version matches (Shuai Zhang)
- Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() (Thomas Fourier)
- USB: serial: safe_serial: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754412] {CVE-2026-63957}
- usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() (Greg Kroah-Hartman)
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Greg Kroah-Hartman) [Orabug: 39754428] {CVE-2026-63961}
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Greg Kroah-Hartman)
- usb: typec: ucsi: ccg: reject firmware images without a ':' record header (Greg Kroah-Hartman)
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer (Greg Kroah-Hartman)
- smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Stefan Metzmacher)
- phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X (Horatiu Vultur)
- phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table (Harini Katakam)
- RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang) [Orabug: 39451551] {CVE-2026-45852}
- Revert "RDMA/rxe: Fix double free in rxe_srq_from_init" (Ben Hutchings)
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Jouni H?gander)
- drm/dp: Add eDP 1.5 bit definition (Suraj Kandpal)
- drm/i915/psr: Read Intel DPCD workaround register (Jouni H?gander)
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Jouni H?gander)
- wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Duoming Zhou) [Orabug: 38456849] {CVE-2025-39863}
- batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761] {CVE-2026-64095}
- batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744] {CVE-2026-64090}
- batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] {CVE-2026-64091}
- batman-adv: iv: recover OGM scheduling after forward packet error (Sven Eckelmann)
- batman-adv: tvlv: reject oversized TVLV packets (Sven Eckelmann) [Orabug: 39619357] {CVE-2026-52934}
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757] {CVE-2026-64094}
- batman-adv: tvlv: abort OGM send on tvlv append failure (Sven Eckelmann)
- batman-adv: v: stop OGMv2 on disabled interface (Sven Eckelmann)
- sctp: fix race between sctp_wait_for_connect and peeloff (Zhenghang Xiao) [Orabug: 39754456] {CVE-2026-63971}
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled() (Marco Scardovi)
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (Luiz Augusto von Dentz) [Orabug: 39754468] {CVE-2026-63975}
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (Zhenghang Xiao) [Orabug: 39754471] {CVE-2026-63976}
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Rahul Chandelkar) [Orabug: 39754489] {CVE-2026-63984}
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback (Jakub Kicinski) [Orabug: 39754492] {CVE-2026-63985}
- bonding: refuse to enslave CAN devices (Oliver Hartkopp) [Orabug: 39754502] {CVE-2026-63990}
- Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (Zhao Dongdong)
- ASoC: codecs: simple-mux: Fix enum control bounds check (C?ssio Gabriel)
- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Eric Dumazet) [Orabug: 39754510] {CVE-2026-63992}
- vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Eric Dumazet) [Orabug: 39754513] {CVE-2026-63993}
- tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Eric Dumazet) [Orabug: 39754516] {CVE-2026-63994}
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (C?ssio Gabriel)
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Eric Dumazet) [Orabug: 39754536] {CVE-2026-64002}
- net/iucv: fix locking in .getsockopt (Breno Leitao)
- net/smc: Do not re-initialize smc hashtables (Alexandra Winter)
- net: netlink: don't set nsid on local notifications (Ilya Maximets)
- net: netlink: fix sending unassigned nsid after assigned one (Ilya Maximets)
- netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [Orabug: 39619329] {CVE-2026-52927}
- netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal)
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Chris Mason) [Orabug: 39754553] {CVE-2026-64007}
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
- xfrm: Check for underflow in xfrm_state_mtu (David Ahern) [Orabug: 39754558] {CVE-2026-64009}
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (Lee Jones)
- nfc: llcp: Fix use-after-free in llcp_sock_release() (Lee Jones)
- net: cpsw_new: Fix potential unregister of netdev that has not been registered yet (Kevin Hao)
- dmaengine: idxd: Fix not releasing workqueue on .release() (Vinicius Costa Gomes) [Orabug: 39323060] {CVE-2026-43064}
- drm: Remove plane hsub/vsub alignment requirement for core helpers (Carlos Eduardo Gallo Filho)
- net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Victor Nogueira) [Orabug: 39754570] {CVE-2026-64012}
- net: mctp: ensure our nlmsg responses are initialised (Jeremy Kerr)
- net/sched: cls_fw: fix NULL dereference of "old" filters before change() (Davide Caratti) [Orabug: 39622011] {CVE-2026-53080}
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (Greg Kroah-Hartman) [Orabug: 39754575] {CVE-2026-64014}
- LTS version: v5.15.209 (Samasth Norway Ananda)
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (Aditya Garg) [Orabug: 39754586] {CVE-2026-64018}
- gpio: cdev: check if uAPI v2 config attributes are correctly zeroed (Bartosz Golaszewski)
- gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) (Andy Shevchenko)
- string: add mem_is_zero() helper to check if memory area is all zeros (Jani Nikula)
- net: ag71xx: check error for platform_get_irq (Rosen Penev)
- tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962] {CVE-2026-64028}
- bridge: mcast: Fix a possible use-after-free when removing a bridge port (Ido Schimmel) [Orabug: 39754613] {CVE-2026-64032}
- net: bridge: Flush multicast groups when snooping is disabled (Petr Machata)
- RDMA/rtrs: Fix use-after-free in path file creation cleanup (Guangshuo Li)
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL (Rafael J. Wysocki)
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Erni Sri Satya Vennela) [Orabug: 39754619] {CVE-2026-64034}
- net: dsa: mt7530: preserve VLAN tags on trapped link-local frames (Daniel Golle)
- net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw (Ar?n? ?nal)
- net: dsa: mt7530: fix FDB entries not aging out with short timeout (Daniel Golle)
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle)
- drm/msm/snapshot: fix dumping of the unaligned regions (Dmitry Baryshkov) [Orabug: 39754629] {CVE-2026-64039}
- net: tls: prevent chain-after-chain in plain text SG (Jakub Kicinski) [Orabug: 39754638] {CVE-2026-64046}
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Jakub Kicinski) [Orabug: 39754642] {CVE-2026-64047}
- drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] {CVE-2026-64153}
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics (Chenguang Zhao)
- HID: quirks: really enable the intended work around for appledisplay (Lukas Bulwahn)
- wifi: ath11k: fix error path leaks in some WMI WOW calls (Nicolas Escande) [Orabug: 39754909] {CVE-2026-64155}
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference (Ethan Nelson-Moore)
- net: ethernet: cortina: Carry over frag counter (Linus Walleij)
- net: ethernet: cortina: Drop half-assembled SKB (Andreas Haarmann-Thiemann)
- net: ethernet: cortina: Make RX SKB per-port (Linus Walleij)
- irqchip/ath79-cpu: Remove unused function (Rosen Penev)
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (Gabor Juhos)
- ice: fix locking in ice_dcb_rebuild() (Bart Van Assche)
- tcp: Fix imbalanced icsk_accept_queue count. (Kuniyuki Iwashima)
- netfilter: x_tables: unregister the templates first (Florian Westphal)
- ARM: integrator: Fix early initialization (Guenter Roeck)
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS (David Gow)
- kunit: config: Enable KUNIT_DEBUGFS by default (David Gow)
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Sudeep Holla)
- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Sudeep Holla) [Orabug: 39754932] {CVE-2026-64166}
- hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock (Abdurrahman Hussain)
- batman-adv: tt: fix negative tt_buff_len (Sven Eckelmann) [Orabug: 39754734] {CVE-2026-64088}
- batman-adv: tt: fix negative last_changeset_len (Sven Eckelmann) [Orabug: 39754740] {CVE-2026-64089}
- batman-adv: tp_meter: avoid use of uninit sender vars (Sven Eckelmann) [Orabug: 39619346] {CVE-2026-52931}
- batman-adv: bla: fix report_work leak on backbone_gw purge (Sven Eckelmann) [Orabug: 39785109] {CVE-2026-64218}
- batman-adv: frag: disallow unicast fragment in fragment (Sven Eckelmann) [Orabug: 39619274] {CVE-2026-52916}
- batman-adv: fix tp_meter counter underflow during shutdown (Luxiao Xu) [Orabug: 39619287] {CVE-2026-52919}
- batman-adv: fix fragment reassembly length accounting (Ruide Cao) [Orabug: 39619266] {CVE-2026-52914}
- batman-adv: dat: handle forward allocation error (Sven Eckelmann)
- batman-adv: clear current gateway during teardown (Ruijie Li) [Orabug: 39619323] {CVE-2026-52926}
- batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765] {CVE-2026-64096}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Harry Wentland) [Orabug: 39785113] {CVE-2026-64219}
- drm/amd/display: Fix integer overflow in bios_get_image() (Harry Wentland)
- drm/bridge: megachips: remove bridge when irq request fails (Osama Abdelkader)
- drm/bridge: it66121: acquire reset GPIO in probe (Julien Chauveau)
- device property: set fwnode->secondary to NULL in fwnode_init() (Bartosz Golaszewski) [Orabug: 39785117] {CVE-2026-64220}
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (Michael Bommarito)
- spi: ti-qspi: fix use-after-free after DMA setup failure (Johan Hovold)
- spi: sprd: fix error pointer deref after DMA setup failure (Johan Hovold)
- scsi: isci: Fix use-after-free in device removal path (Michael Bommarito) [Orabug: 39754786] {CVE-2026-64103}
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails (Masami Hiramatsu) [Orabug: 39754948] {CVE-2026-64173}
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (John Walker) [Orabug: 39754952] {CVE-2026-64174}
- ixgbevf: fix use-after-free in VEPA multicast source pruning (Michael Bommarito) [Orabug: 39754812] {CVE-2026-64113}
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Michael Bommarito) [Orabug: 39754817] {CVE-2026-64114}
- wifi: ath11k: clear shared SRNG pointer state on restart (Kyle Farnung)
- vsock/vmci: fix UAF when peer resets connection during handshake (Minh Nguyen) [Orabug: 39754821] {CVE-2026-64115}
- ring-buffer: Fix reporting of missed events in iterator (Steven Rostedt)
- netfilter: ipset: stop hash:* range iteration at end (Nan Li) [Orabug: 39619299] {CVE-2026-52921}
- netfilter: nf_queue: hold bridge skb->dev while queued (Haoze Xie) [Orabug: 39619255] {CVE-2026-52912}
- netfilter: ip6t_hbh: reject oversized option lists (Zhengchuan Liang) [Orabug: 39619270] {CVE-2026-52915}
- net: bcmgenet: keep RBUF EEE/PM disabled (Nicolai Buchwitz) [Orabug: 39754845] {CVE-2026-64125}
- phonet/pep: disable BH around forwarded sk_receive_skb() (Zijing Yin) [Orabug: 39754963] {CVE-2026-64177}
- Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (Mingyu Wang) [Orabug: 39523054] {CVE-2026-46275}
- Bluetooth: bnep: Fix UAF read of dev->name (Jann Horn) [Orabug: 39754967] {CVE-2026-64178}
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (Abdun Nihaal)
- ALSA: asihpi: Fix potential OOB array access at reading cache (Takashi Iwai) [Orabug: 39754862] {CVE-2026-64133}
- ALSA: ua101: Reject too-short USB descriptors (C?ssio Gabriel)
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (Abdurrahman Hussain)
- sysfs: don't remove existing directory on update failure (Greg Kroah-Hartman) [Orabug: 39754983] {CVE-2026-64185}
- Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()" (Sasha Levin)
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [Orabug: 37901590] {CVE-2025-23141}
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [Orabug: 39300982] {CVE-2026-43052}
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean)
- Revert "x86/vdso: Fix output operand size of RDPID" (Sasha Levin)
- s390/debug: Reject zero-length input before trimming a newline (Pengpeng Hou)
- io_uring: prevent opcode speculation (Pavel Begunkov) [Orabug: 37702113] {CVE-2025-21863}
- io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [Orabug: 39523050] {CVE-2026-46274}
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Johan Hovold)
- drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() (Gyeyoung Baek)
- drm/i915: skip __i915_request_skip() for already signaled requests (Sebastian Brzezinka)
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Naval Alcal?)
- libceph: handle rbtree insertion error in decode_choose_args() (Raphael Zimmer) [Orabug: 39621580] {CVE-2026-52954}
- libceph: Fix potential out-of-bounds access in crush_decode() (Raphael Zimmer) [Orabug: 39621584] {CVE-2026-52955}
- libceph: Fix potential null-ptr-deref in decode_choose_args() (Raphael Zimmer) [Orabug: 39621592] {CVE-2026-52957}
- libceph: Fix potential out-of-bounds access in osdmap_decode() (Raphael Zimmer) [Orabug: 39621596] {CVE-2026-52958}
- powerpc/warp: Fix error handling in pika_dtm_thread (Ma Ke)
- ceph: fix a buffer leak in __ceph_setxattr() (Viacheslav Dubeyko) [Orabug: 39621609] {CVE-2026-52962}
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans (C?ssio Gabriel) [Orabug: 39621613] {CVE-2026-52963}
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Chaitanya Kumar Borah)
- KVM: x86: Fix Xen hypercall tracepoint argument assignment (Maqiang)
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (Aaron Sacks) [Orabug: 39621628] {CVE-2026-52969}
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV (Sergio Correia)
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled (Zoran Ilievski)
- netfilter: nft_ct: fix missing expect put in obj eval (Li Xiasong) [Orabug: 39621633] {CVE-2026-52970}
- audit: fix incorrect inheritable capability in CAPSET records (Sergio Correia) [Orabug: 39653209] {CVE-2026-53287}
- i40e: Cleanup PTP pins on probe failure (Matt Vollrath)
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (Herbert Xu) [Orabug: 39655982] {CVE-2026-52972}
- net/sched: sch_pie: annotate more data-races in pie_dump_stats() (Eric Dumazet)
- flow_dissector: Do not count vlan tags inside tunnel payload (Qingqing Yang)
- flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng) [Orabug: 39524619] {CVE-2026-46306}
- btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (Filipe Manana) [Orabug: 39784984] {CVE-2026-64164}
- drm/amd/display: Read EDID from VBIOS embedded panel info (Timur Krist?f)
- drm/amd/display: Allow DCE link encoder without AUX registers (Timur Krist?f)
- ALSA: hda/conexant: Fix missing error check for jack detection (Wangdicheng) [Orabug: 39653220] {CVE-2026-53291}
- ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (Wangdicheng)
- ALSA: hda/conexant: fix some typos (Oldherl Oh)
- ALSA: hda/conexant: add a new hda codec SN6140 (Bo Liu)
- net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) (Eric Dumazet)
- bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (Weiming Shi) [Orabug: 39451517] {CVE-2026-45846}
- ipv6: rename and move ip6_dst_lookup_tunnel() (Beniamino Galvani)
- ipv4: add new arguments to udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: remove "proto" argument from udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: rename and move ip_route_output_tunnel() (Beniamino Galvani)
- sctp: discard stale INIT after handshake completion (Xin Long)
- netfilter: skip recording stale or retransmitted INIT (Xin Long)
- ASoC: codecs: ab8500: Fix casting of private data (Christian A. Ehrhardt)
- net: phy: dp83869: fix setting CLK_O_SEL field. (Heiko Schocher)
- NFC: trf7970a: Ignore antenna noise when checking for RF field (Paul Geurts)
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit (Dandan Zhang)
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (Jun Zhan) [Orabug: 39621670] {CVE-2026-52982}
- vrf: Fix a potential NPD when removing a port from a VRF (Ido Schimmel) [Orabug: 39619318] {CVE-2026-52925}
- net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() (Eric Dumazet)
- net/sched: sch_choke: annotate data-races in choke_dump_stats() (Eric Dumazet)
- net: sched: choke: remove unused variables in struct choke_sched_data (Zhengchao Shao)
- net/sched: netem: validate slot configuration (Stephen Hemminger)
- net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] {CVE-2026-52984}
- net/sched: netem: fix probability gaps in 4-state loss model (Stephen Hemminger)
- net: sched: sch_netem: Refactor code in 4-state loss generator (Harshit Mogalapalli)
- netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z. Ivanov) [Orabug: 39621681] {CVE-2026-52985}
- cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() (Daan De Meyer)
- scsi: sr: Add memory allocation failure handling for get_capabilities() (Enze Li)
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [Orabug: 39621685] {CVE-2026-52986}
- netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [Orabug: 39619293] {CVE-2026-52920}
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Timur Krist?f)
- drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Timur Krist?f)
- drm/amdgpu: fix spelling typos (Alexandre Demers)
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] {CVE-2026-45844}
- tracing: branch: Fix inverted check on stat tracer registration (Breno Leitao)
- btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() (Mark Harmstone)
- mailbox: mailbox-test: make data_ready a per-instance variable (Wolfram Sang)
- mailbox: mailbox-test: initialize struct earlier (Wolfram Sang)
- mailbox: mailbox-test: don't free the reused channel (Wolfram Sang)
- mailbox: add sanity check for channel array (Wolfram Sang) [Orabug: 39653234] {CVE-2026-53295}
- cgroup/rdma: fix integer overflow in rdmacg_try_charge() (Tao Cui)
- mailbox: mailbox-test: free channels on probe error (Wolfram Sang)
- fbdev: offb: fix PCI device reference leak on probe failure (Yuho Choi)
- rtc: abx80x: Disable alarm feature if no interrupt attached (Anthony Pighin)
- fs/adfs: validate nzones in adfs_validate_bblk() (Bae Yeonju)
- vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() (Kohei Enju)
- tipc: fix double-free in tipc_buf_append() (Lee Jones) [Orabug: 39621708] {CVE-2026-52993}
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls (Alexey Kodanev)
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats() (Eric Dumazet)
- net/sched: sch_red: annotate data-races in red_dump_stats() (Eric Dumazet)
- net: sched: gred/red: remove unused variables in struct red_stats (Zhengchao Shao)
- net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() (Eric Dumazet)
- net/sched: sch_pie: annotate data-races in pie_dump_stats() (Eric Dumazet)
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats() (Eric Dumazet)
- ksmbd: scope conn->binding slowpath to bound sessions only (Hyunwoo Kim)
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Daemyung Kang)
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number (Yan Jun)
- slip: bound decode() reads against the compressed packet length (Weiming Shi) [Orabug: 39451500] {CVE-2026-45843}
- slip: reject VJ receive packets on instances with no rstate array (Weiming Shi) [Orabug: 39451493] {CVE-2026-45842}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Fernando Fernandez Mancera) [Orabug: 39621724] {CVE-2026-52998}
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Fernando Fernandez Mancera) [Orabug: 39621730] {CVE-2026-52999}
- ipvs: fix MTU check for GSO packets in tunnel mode (Yingnan Zhang)
- netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] {CVE-2026-53001}
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [Orabug: 39621746] {CVE-2026-53002}
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Xiang Mei) [Orabug: 39451485] {CVE-2026-45841}
- netfilter: nft_osf: restrict it to ipv4 (Pablo Neira Ayuso)
- openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] {CVE-2026-45840}
- pppoe: drop PFC frames (Qingfang Deng) [Orabug: 39621751] {CVE-2026-53003}
- flow_dissector: Add number of vlan tags dissector (Boris Sukholitko)
- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] {CVE-2026-53004}
- ipv6: fix possible UAF in icmpv6_rcv() (Eric Dumazet) [Orabug: 39621765] {CVE-2026-53006}
- e1000e: Unroll PTP in probe error handling (Matt Vollrath)
- i40e: don't advertise IFF_SUPP_NOFCS (Kohei Enju)
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) (Eric Dumazet)
- net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (Vinicius Costa Gomes) [Orabug: 39621780] {CVE-2026-53011}
- net/sched: taprio: rename close_time to end_time (Vladimir Oltean)
- net/sched: taprio: refactor one skb dequeue from TXQ to separate function (Vladimir Oltean)
- net/sched: taprio: continue with other TXQs if one dequeue() failed (Vladimir Oltean)
- net/sched: taprio: replace safety precautions with comments (Vladimir Oltean)
- net/sched: taprio: stop going through private ops for dequeue and peek (Vladimir Oltean)
- nexthop: fix IPv6 route referencing IPv4 nexthop (Jiayuan Chen) [Orabug: 39621784] {CVE-2026-53012}
- net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys (Dudu Lu)
- PCMCIA: Fix garbled log messages for KERN_CONT (Ren? Rebe)
- crypto: ccp - copy IV using skcipher ivsize (Paul Moses) [Orabug: 39621796] {CVE-2026-53016}
- crypto: sa2ul - Fix AEAD fallback algorithm names (T Pratham)
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() (Geert Uytterhoeven)
- clk: qcom: dispcc-sc7180: Add missing MDSS resets (Konrad Dybcio)
- dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets (Konrad Dybcio)
- clk: xgene: Fix mapping leak in xgene_pllclk_init() (Geert Uytterhoeven)
- clk: qoriq: avoid format string warning (Arnd Bergmann)
- clk: imx8mq: Correct the CSI PHY sels (Sebastian Krzyszkowiak)
- clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() (Felix Gu)
- clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() (Felix Gu)
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks (Val Packett)
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for USB power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Add missing GDSCs (Val Packett)
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs (Val Packett)
- scsi: target: core: Fix integer overflow in UNMAP bounds check (Junrui Luo) [Orabug: 39621811] {CVE-2026-53021}
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX (Yangerkun) [Orabug: 39653261] {CVE-2026-53304}
- RDMA/core: Prefer NLA_NUL_STRING (Florian Westphal) [Orabug: 39754131] {CVE-2026-63860}
- platform/x86: dell-wmi-sysman: bound enumeration string aggregation (Pengpeng Hou) [Orabug: 39621815] {CVE-2026-53022}
- platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() (Fedor Pchelkin)
- fs/ntfs3: terminate the cached volume label after UTF-8 conversion (Pengpeng Hou)
- nfs/blocklayout: Fix compilation error (make W=1) in bl_write_pagelist() (Andy Shevchenko)
- mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() (Abdun Nihaal)
- platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup (Rafael J. Wysocki)
- tty: hvc_iucv: fix off-by-one in number of supported devices (Randy Dunlap)
- tty: hvc: remove HVC_IUCV_MAGIC (Ahelenia Ziemia?ska)
- leds: lgm-sso: Remove duplicate assignments for priv->mmap (Chen Ni)
- platform/surface: surfacepro3_button: Drop wakeup source on remove (Rafael J. Wysocki)
- backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() (Chen Ni)
- dev_printk: add new dev_err_probe() helpers (Nuno Sa)
- driver core: Move dev_err_probe() to where it belogs (Andy Shevchenko)
- driver core: device.h: remove extern from function prototypes (Greg Kroah-Hartman)
- i3c: mipi-i3c-hci: fix IBI payload length calculation for final status (Billy Tsai)
- perf util: Kill die() prototype, dead for a long time (Arnaldo Carvalho de Melo)
- perf expr: Return -EINVAL for syntax error in expr__find_ids() (Leo Yan)
- pinctrl: abx500: Fix type of 'argument' variable (Yu-Chun Lin)
- perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace (Mike Leach)
- perf branch: Avoid incrementing NULL (Ian Rogers)
- pinctrl: pinctrl-pic32: Fix resource leak (Ethan Tidmore)
- HID: usbhid: fix deadlock in hid_post_reset() (Oliver Neukum) [Orabug: 39621857] {CVE-2026-53037}
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob (Richard Genoud)
- mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions (Cosmin Tanislav)
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path (Cosmin Tanislav)
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask (Shiji Yang)
- mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations (Haibo Chen)
- mtd: physmap_of_gemini: Fix disabled pinctrl state check (Chen Ni)
- HID: asus: do not abort probe when not necessary (Denis Benato)
- HID: asus: make asus_resume adhere to linux kernel coding standards (Denis Benato)
- ima: check return value of crypto_shash_final() in boot aggregate (Daniel Hodges)
- tracing: Rebuild full_name on each hist_field_name() call (Pengpeng Hou)
- dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Frank Li)
- dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function (Khairul Anuar Romli)
- ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] {CVE-2026-53039}
- ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] {CVE-2026-53040}
- ocfs2: fix listxattr handling when the buffer is full (Zhengyuan Huang) [Orabug: 39621872] {CVE-2026-53041}
- soc: qcom: aoss: compare against normalized cooling state (Alok Tiwari)
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (Junrui Luo) [Orabug: 39653274] {CVE-2026-53309}
- ocfs2/dlm: validate qr_numregions in dlm_match_regions() (Junrui Luo) [Orabug: 39621878] {CVE-2026-53043}
- unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure (Michal Grzedzicki)
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot (David Heidelberger)
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available (Dmitry Baryshkov)
- soc: qcom: ocmem: register reasons for probe deferrals (Dmitry Baryshkov)
- soc: qcom: ocmem: use scoped device node handling to simplify error paths (Krzysztof Kozlowski)
- memory: tegra30-emc: Fix dll_change check (Mikko Perttunen)
- memory: tegra124-emc: Fix dll_change check (Mikko Perttunen)
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible (Rafa? Mi?ecki)
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Joshua Klinesmith)
- efi/capsule-loader: fix incorrect sizeof in phys array reallocation (Thomas Huth) [Orabug: 39621893] {CVE-2026-53047}
- gfs2: prevent NULL pointer dereference during unmount (Andreas Gruenbacher) [Orabug: 39621897] {CVE-2026-53048}
- gfs2: add some missing log locking (Andreas Gruenbacher) [Orabug: 39621900] {CVE-2026-53049}
- quota: Fix race of dquot_scan_active() with quota deactivation (Jan Kara) [Orabug: 39621904] {CVE-2026-53050}
- ktest: Run POST_KTEST hooks on failure and cancellation (Ricardo B. Marli?re)
- ktest: Honor empty per-test option overrides (Ricardo B. Marli?re)
- ktest: Avoid undef warning when WARNINGS_FILE is unset (Ricardo B. Marli?re)
- ALSA: sc6000: Keep the programmed board state in card-private data (C?ssio Gabriel)
- ALSA: sc6000: Use standard print API (Takashi Iwai)
- PCI: tegra194: Disable direct speed change for Endpoint mode (Vidya Sagar)
- PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" (Vidya Sagar)
- PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Increase LTSSM poll time on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Fix polling delay for L2 state (Vidya Sagar)
- PCI: Add PCIE_PME_TO_L2_TIMEOUT_US L2 ready timeout value (Frank Li)
- selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long)
- Documentation: fix a hugetlbfs reservation statement (Jane Chu)
- PCI: Enable AtomicOps only if Root Port supports them (Gerd Bayer)
- ASoC: fsl_easrc: Change the type for iec958 channel status controls (Shengjiu Wang)
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Shengjiu Wang)
- ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Shengjiu Wang)
- pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() (Felix Gu)
- pmdomain: ti: omap_prm: Fix a reference leak on device node (Felix Gu)
- drm/msm/a6xx: Use barriers while updating HFI Q headers (Akhil P Oommen)
- drm/msm/a6xx: Fix HLSQ register dumping (Rob Clark)
- ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Huanglei)
- ALSA: hda/realtek: Whitespace fix (Luke D. Jones)
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Timur Krist?f)
- drm/amd/pm/ci: Fill DW8 fields from SMC (Timur Krist?f)
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Timur Krist?f)
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Timur Krist?f)
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Timur Krist?f)
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Timur Krist?f)
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Timur Krist?f)
- ALSA: core: Validate compress device numbers without dynamic minors (C?ssio Gabriel)
- drm/panel: simple: Correct G190EAN01 prepare timing (Sebastian Reichel)
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 (Alexander Koskovich)
- spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo (Pei Xiao)
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break (Andy Shevchenko)
- dm init: ensure device probing has finished in dm-mod.waitfor= (Guillaume Gonnet)
- drm/sun4i: Fix resource leaks (Ethan Tidmore)
- spi: fsl-qspi: Use reinit_completion() for repeated operations (Felix Gu)
- dm log: fix out-of-bounds write due to region_count overflow (Junrui Luo) [Orabug: 39621924] {CVE-2026-53059}
- dm cache metadata: fix memory leak on metadata abort retry (Ming-Hung Tsai) [Orabug: 39621929] {CVE-2026-53060}
- dm cache: fix dirty mapping checking in passthrough mode switching (Ming-Hung Tsai) [Orabug: 39621933] {CVE-2026-53061}
- dm cache: support shrinking the origin device (Ming-Hung Tsai)
- dm cache: fix concurrent write failure in passthrough mode (Ming-Hung Tsai)
- dm cache policy smq: fix missing locks in invalidating cache blocks (Ming-Hung Tsai) [Orabug: 39621937] {CVE-2026-53062}
- dm cache: fix write path cache coherency in passthrough mode (Ming-Hung Tsai)
- dm cache: fix null-deref with concurrent writes in passthrough mode (Ming-Hung Tsai) [Orabug: 39621946] {CVE-2026-53064}
- ASoC: sti: use managed regmap_field allocations (Sander Vanheule)
- ASoC: sti: Return errors from regmap_field_alloc() (Sander Vanheule)
- drm/komeda: fix integer overflow in AFBC framebuffer size check (Alexander Konyukhov)
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (Jiayuan Chen) [Orabug: 39621966] {CVE-2026-53069}
- sctp: fix missing encap_port propagation for GSO fragments (Xin Long)
- net: phy: qcom: at803x: Use the correct bit to disable extended next page (Maxime Chevallier)
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (Dudu Lu) [Orabug: 39621973] {CVE-2026-53071}
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (Pauli Virtanen) [Orabug: 39621976] {CVE-2026-53072}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (Jonathan Rissanen) [Orabug: 39621980] {CVE-2026-53073}
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (Luiz Augusto von Dentz)
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (Sun Jian) [Orabug: 39621984] {CVE-2026-53074}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Taegu Ha) [Orabug: 39621987] {CVE-2026-53075}
- net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim) [Orabug: 39531630] {CVE-2026-46319}
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf (Mashiro Chen)
- 6pack: propagage new tty types (Jiri Slaby)
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal)
- netfilter: xt_socket: enable defrag after all other checks (Florian Westphal)
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (Justin Chen) [Orabug: 39622043] {CVE-2026-53088}
- bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi)
- bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (Jiayuan Chen) [Orabug: 39754142] {CVE-2026-63865}
- bpf-lsm: Make bpf_lsm_userns_create() sleepable (Frederick Lawler)
- wifi: brcmfmac: Fix error pointer dereference (Ethan Tidmore) [Orabug: 39622061] {CVE-2026-53093}
- bpf: fix end-of-list detection in cgroup_storage_get_next_key() (Weiming Shi) [Orabug: 39451462] {CVE-2026-45838}
- macvlan: annotate data-races around port->bc_queue_len_used (Eric Dumazet)
- powerpc/crash: fix backup region offset update to elfcorehdr (Sourabh Jain)
- r8152: fix incorrect register write to USB_UPHY_XTAL (Chih Kai Hsu)
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (David Carlier) [Orabug: 39622069] {CVE-2026-53096}
- bpf, devmap: Remove unnecessary if check in for loop (Thorsten Blum)
- module: Fix freeing of charp module parameters when CONFIG_SYSFS=n (Petr Pavlu)
- params: Replace __modinit with __init_or_module (Petr Pavlu)
- kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
- kernel: param: rename locate_module_kobject (Shyam Saini)
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (Cai Xinchen)
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH (Cai Xinchen)
- wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Duoming Zhou) [Orabug: 39622109] {CVE-2026-53112}
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Zilin Guan)
- firmware: dmi: Correct an indexing error in dmi.h (Mario Limonciello)
(Bart Van Assche)
- irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter (Brian Masney)
- debugfs: check for NULL pointer in debugfs_create_str() (Gui-Dong Han)
- thermal/drivers/spear: Fix error condition for reading st,thermal-flags (Gopi Krishna Menon)
- devres: fix missing node debug info in devm_krealloc() (Danilo Krummrich)
- pstore/ram: fix resource leak when ioremap() fails (Cole Leavitt)
- nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (Deepanshu Kartikey)
- drbd: Balance RCU calls in drbd_adm_dump_devices() (Bart Van Assche) [Orabug: 39622158] {CVE-2026-53128}
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START (Hyungjung Joo)
- bcache: fix uninitialized closure object (Mingzhe Zou)
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Benjamin Cheng)
- vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] {CVE-2026-46214}
- vsock: fix buffer size clamping order (Norbert Szetei) [Orabug: 39460717] {CVE-2026-46234}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (Siwei Zhang) [Orabug: 39445785] {CVE-2026-45836}
- batman-adv: bla: put backbone reference on failed claim hash insert (Sven Eckelmann) [Orabug: 39460707] {CVE-2026-46231}
- batman-adv: bla: only purge non-released claims (Sven Eckelmann) [Orabug: 39460713] {CVE-2026-46233}
- batman-adv: bla: prevent use-after-free when deleting claims (Sven Eckelmann) [Orabug: 39460640] {CVE-2026-46212}
- batman-adv: stop caching unowned originator pointers in BAT IV (Jiexun Wang) [Orabug: 39460733] {CVE-2026-46238}
- batman-adv: reject new tp_meter sessions during teardown (Jiexun Wang) [Orabug: 39460614] {CVE-2026-46206}
- batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] {CVE-2026-46198}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [Orabug: 39460689] {CVE-2026-46227}
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Alex Deucher)
- drm/amdgpu/pm: add missing revision check for CI (Alex Deucher)
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B. Moore) [Orabug: 39460668] {CVE-2026-46220}
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (John B. Moore)
- drm/radeon: add missing revision check for CI (Alex Deucher)
- drm/amdkfd: validate SVM ioctl nattr against buffer size (Alysa Liu) [Orabug: 39460573] {CVE-2026-46197}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460627] {CVE-2026-46209}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [Orabug: 39460702] {CVE-2026-46230}
- spi: mpc52xx: fix use-after-free on unbind (Johan Hovold)
- spi: orion: fix clock imbalance on registration failure (Johan Hovold)
- spi: imx: fix runtime pm leak on probe deferral (Johan Hovold)
- spi: mtk-nor: fix controller deregistration (Johan Hovold)
- media: i2c: imx412: Assert reset GPIO during probe (Wenmeng Liu)
- media: dib8000: avoid division by 0 in dib8000_set_dds() (Sergey Shtylyov)
- regulator: bd9571mwv: fix OF node reference imbalance (Johan Hovold)
- regulator: act8945a: fix OF node reference imbalance (Johan Hovold)
- media: rc: streamzap: Error handling in probe (Oliver Neukum)
- media: rc: xbox_remote: heed DMA restrictions (Oliver Neukum)
- regulator: max77650: fix OF node reference imbalance (Johan Hovold)
- staging: media: atomisp: Disallow all private IOCTLs (Sakari Ailus)
- media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Alexander Koskovich)
- media: uvcvideo: Enable VB2_DMABUF for metadata stream (Ricardo Ribalda)
- platform/x86: hp-wmi: Ignore backlight and FnLock events (Krishna Chomal)
- mptcp: fix scheduling with atomic in timestamp sockopt (Gang Yan) [Orabug: 39460450] {CVE-2026-46168}
- mptcp: sockopt: set timestamp flags on subflow socket, not msk (Gang Yan)
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure (Shardul Bankar)
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure (Shardul Bankar)
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] {CVE-2026-46189}
- RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [Orabug: 39460303] {CVE-2026-46133}
- RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277] {CVE-2026-46127}
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] {CVE-2026-46178}
- power: supply: max17042: avoid overflow when determining health (Andr? Draszik)
- PCI/AER: Stop ruling out unbound devices as error source (Lukas Wunner)
- PCI/AER: Clear only error bits in PCIe Device Status (Shuai Xue)
- s390/debug: Reject zero-length input in debug_input_flush_fn() (Vasily Gorbik)
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (Jason Gunthorpe)
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [Orabug: 39524613] {CVE-2026-46304}
- md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] {CVE-2026-46161}
- libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [Orabug: 39460244] {CVE-2026-46119}
- isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [Orabug: 39460265] {CVE-2026-46124}
- isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [Orabug: 39524609] {CVE-2026-46303}
- dm-verity-fec: correctly reject too-small hash devices (Eric Biggers)
- dm-verity-fec: correctly reject too-small FEC devices (Eric Biggers)
- dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] {CVE-2026-46294}
- dm: don't report warning when doing deferred remove (Mikulas Patocka)
- dm-thin: fix metadata refcount underflow (Mikulas Patocka) [Orabug: 39460195] {CVE-2026-46107}
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (C?ssio Gabriel)
- ASoC: fsl_easrc: fix comment typo (Joseph Salisbury)
- cpuidle: powerpc: avoid double clear when breaking snooze (Shrikanth Hegde)
- spi: topcliff-pch: fix use-after-free on unbind (Johan Hovold)
- thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp (Thorsten Blum)
- thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata (Thorsten Blum)
- udf: reject descriptors with oversized CRC length (Michael Bommarito) [Orabug: 39753576] {CVE-2026-53369}
- ibmveth: Disable GSO for packets with small MSS (Mingming Cao)
- hv_sock: fix ARM64 support (Hamza Mahfooz)
- extcon: ptn5150: handle pending IRQ events during system resume (Xu Yang)
- hwmon: (corsair-psu) Close HID device on probe errors (Myeonghun Pak)
- hwmon: (ltc2992) Fix u32 overflow in power read path (Sanman Pradhan)
- hwmon: (ltc2992) Clamp threshold writes to hardware range (Sanman Pradhan)
- parisc: Fix IRQ leak in LASI driver (Hongling Zeng)
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [Orabug: 39460248] {CVE-2026-46120}
- sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] {CVE-2026-46184}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] {CVE-2026-46132}
- fanotify: fix false positive on permission events (Miklos Szeredi) [Orabug: 39460374] {CVE-2026-46150}
- spi: zynqmp-gqspi: fix controller deregistration (Johan Hovold)
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (Siwei Zhang) [Orabug: 39445772] {CVE-2026-45834}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (Siwei Zhang) [Orabug: 39445781] {CVE-2026-45835}
- Bluetooth: virtio_bt: validate rx pkt_type header length (Michael Bommarito)
- Bluetooth: virtio_bt: clamp rx length before skb_put (Michael Bommarito)
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu) [Orabug: 39460469] {CVE-2026-46172}
- xfrm: provide message size for XFRM_MSG_MAPPING (Ruijie Li)
- ALSA: firewire-tascam: Do not drop unread control events (C?ssio Gabriel)
- usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [Orabug: 39654820] {CVE-2026-46109}
- USB: serial: option: add Telit Cinterion LE910Cx compositions (Fabio Porcedda)
- USB: omap_udc: DMA: Don't enable burst 4 mode (Aaro Koskinen)
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check (C?ssio Gabriel)
- ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Takashi Iwai) [Orabug: 39460352] {CVE-2026-46146}
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] {CVE-2026-46167}
- usb: usblp: fix heap leak in IEEE 1284 device ID via short response (Greg Kroah-Hartman) [Orabug: 39460379] {CVE-2026-46151}
- wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani) [Orabug: 39460257] {CVE-2026-46122}
- wifi: ath5k: do not access array OOB (Jiri Slaby) [Orabug: 39524622] {CVE-2026-46307}
- wifi: rsi: fix kthread lifetime race between self-exit and external-stop (Jeongjun Park) [Orabug: 39460532] {CVE-2026-46187}
- wifi: b43legacy: enforce bounds check on firmware key index in RX path (Tristan Madani) [Orabug: 39460424] {CVE-2026-46163}
- ipmi:ssif: NULL thread on error (Corey Minyard)
- ipmi:ssif: Remove unnecessary indention (Corey Minyard)
- ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] {CVE-2026-46044}
- ipmi:ssif: Fix a shutdown race (Corey Minyard)
- net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Jamal Hadi Salim) [Orabug: 39425987] {CVE-2026-43496}
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Dipendra Khadka)
- um: virt-pci: Fix build failure (Florian Fainelli)
- spi: meson-spicc: Fix double-put in remove path (Felix Gu) [Orabug: 39250891] {CVE-2026-31489}
- ksmbd: do not expire session on binding failure (Hyunwoo Kim)
- spi: rockchip: fix controller deregistration (Johan Hovold)
- ACPI: video: force native backlight on HP OMEN 16 (8A44) (Shivam Kalra)
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Jinjie Ruan)
- ACPI: scan: Use acpi_dev_put() in object add error paths (Guangshuo Li)
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free (Rajat Gupta)
- ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] {CVE-2026-46108}
- ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] {CVE-2026-46128}
- ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] {CVE-2026-46177}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [Orabug: 39460368] {CVE-2026-46149}
- netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] {CVE-2026-46101}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [Orabug: 39452458] {CVE-2026-46099}
- ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39784983] {CVE-2026-46048}
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] {CVE-2026-46276}
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [Orabug: 39426004] {CVE-2026-43501}
- ALSA: caiaq: Don't abort when no input device is available (Takashi Iwai)
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai)
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value (Douglas Anderson)
- crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [Orabug: 39452232] {CVE-2026-46033}
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode (Andrea Mayer)
- ntfs3: fix integer overflow in run_unpack() volume boundary check (Tobi Gaertner)
- ntfs3: add buffer boundary checks to run_unpack() (Tobi Gaertner)
- ktest: Fix the month in the name of the failure directory (Steven Rostedt)
- IB/core: Fix zero dmac race in neighbor resolution (Chen Zhao)
- dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [Orabug: 39452197] {CVE-2026-46023}
- crypto: atmel-tdes - fix DMA sync direction (Thorsten Blum)
- crypto: ccree - fix a memory leak in cc_mac_digest() (Haoxiang Li)
- crypto: hisilicon - Fix dma_unmap_single() direction (Thomas Fourier)
- crypto: atmel-ecc - Release client on allocation failure (Thorsten Blum)
- crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup (Thorsten Blum)
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit (Eric Biggers)
- taskstats: set version in TGID exit notifications (Yiyang Chen)
- tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [Orabug: 39452160] {CVE-2026-46015}
- inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] {CVE-2026-46040}
- md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [Orabug: 39452350] {CVE-2026-46070}
- md/raid5: fix soft lockup in retry_aligned_read() (Chia-Ming Chang) [Orabug: 39452288] {CVE-2026-46051}
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (Sohei Koyama) [Orabug: 39452270] {CVE-2026-46046}
- mtd: docg3: fix use-after-free in docg3_release() (James Kim)
- mtd: docg3: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- io_uring/poll: fix backport of io_poll_add() changes (Jens Axboe)
- io_uring/poll: fix EPOLL_URING_WAKE sometimes not being honored (Jens Axboe)
- KVM: nSVM: Add missing consistency check for nCR3 validity (Yosry Ahmed)
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (Yosry Ahmed)
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN (Yosry Ahmed)
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode (Yosry Ahmed)
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts (Sean Christopherson)
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [Orabug: 39452395] {CVE-2026-46082}
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (Yosry Ahmed) [Orabug: 39452062] {CVE-2026-45987}
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state (Yosry Ahmed)
- userfaultfd: allow registration of ranges below mmap_min_addr (Denis M. Karpov)
- rtc: ntxec: fix OF node reference imbalance (Johan Hovold)
- tpm: tpm_tis: add error logging for data transfer (Jacqueline Wong)
- mmc: block: use single block write in retry (Bin Liu)
- power: supply: axp288_charger: Do not cancel work before initializing it (Krzysztof Kozlowski)
- tpm: avoid -Wunused-but-set-variable (Arnd Bergmann)
- libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39452202] {CVE-2026-46024}
- ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [Orabug: 39452244] {CVE-2026-46037}
- drm/arcpgu: fix device node leak (Luca Ceresoli)
- net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li)
- iio: adc: ad7768-1: fix one-shot mode data acquisition (Jonathan Santos)
- ALSA: 6fire: Fix input volume change detection (C?ssio Gabriel)
- ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [Orabug: 39452127] {CVE-2026-46004}
- ALSA: caiaq: Fix control_put() result and cache rollback (C?ssio Gabriel)
- selftests/mqueue: Fix incorrectly named file (Simon Liebold)
- parisc: _llseek syscall is only available for 32-bit userspace (Helge Deller)
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 (Robert Beckett)
- md/raid10: fix deadlock with check operation and nowait requests (Josh Hunt) [Orabug: 39452285] {CVE-2026-46050}
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (C?ssio Gabriel)
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Harin Lee) [Orabug: 39452281] {CVE-2026-46049}
- ALSA: aoa: i2sbus: fix OF node lifetime handling (C?ssio Gabriel)
- ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (Vasiliy Kovalev) [Orabug: 39452120] {CVE-2026-46002}
- net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [Orabug: 39452275] {CVE-2026-46047}
- media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() (Chen Ni)
- lib/ts_kmp: fix integer overflow in pattern length calculation (Josh Law)
- Revert "ALSA: usb: Increase volume range that triggers a warning" (Rongrong)
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown (Koichiro Den)
- net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [Orabug: 39452469] {CVE-2026-46102}
- net: caif: clear client service pointer on teardown (Zhengchuan Liang)
- ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Ziqing Chen) [Orabug: 39452417] {CVE-2026-46088}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [Orabug: 39410864] {CVE-2026-43493}
- um: drivers: call kernel_strrchr() explicitly in cow_user.c (Michael Bommarito)
- driver core: Don't let a device probe until it's ready (Douglas Anderson)
- padata: Remove comment for reorder_work (Herbert Xu)
- padata: Fix pd UAF once and for all (Herbert Xu) [Orabug: 38335056] {CVE-2025-38584}
- ocfs2: split transactions in dio completion to avoid credit exhaustion (Heming Zhao) [Orabug: 39452389] {CVE-2026-46080}
- device property: Make modifications of fwnode "flags" thread safe (Douglas Anderson)
- scsi: ufs: core: Fix use-after free in init error and remove paths (Andr? Draszik)
- firmware: google: framebuffer: Do not mark framebuffer as busy (Thomas Zimmermann)
- ibmasm: fix heap over-read in ibmasm_send_i2o_message() (Tyllis Xu)
- ibmasm: fix OOB reads in command_file_write due to missing size checks (Tyllis Xu)
- misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() (Tyllis Xu)
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [Orabug: 39452134] {CVE-2026-46006}
- ALSA: usb-audio: Evaluate packsize caps at the right place (Takashi Iwai)
- usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() (Micha? Pecio)
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (C?ssio Gabriel)
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications (C?ssio Gabriel)
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (C?ssio Gabriel) [Orabug: 39452171] {CVE-2026-46018}
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (Jeongjun Park)
- tty: n_gsm: fix flow control handling in tx path (Daniel Starke)
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento)
- crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300568] {CVE-2026-31697}
- crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300572] {CVE-2026-31698}
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300576] {CVE-2026-31699}
- ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [Orabug: 39300587] {CVE-2026-31701}
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Cryolitia Pukngae)
- fuse: quiet down complaints in fuse_conn_limit_write (Darrick J. Wong)
- fuse: reject oversized dirents in page cache (Samuel Page) [Orabug: 39300557] {CVE-2026-31694}
- fs/ntfs3: validate rec->used in journal-replay file record check (Greg Kroah-Hartman)
- iommu: fix a reference count leak in iommu_sva_bind_device() (Vasant Karasulli)
- rxrpc: Fix anonymous key handling (David Howells)
- rxrpc: only handle RESPONSE during service challenge (Jie Wang) [Orabug: 39342679,39368252]
- ksmbd: unset conn->binding on failed binding request (Namjae Jeon)
- scripts/dtc: Remove unused dts_version in dtc-lexer.l (Nathan Chancellor)
- Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" (Guocai He)
- drivers: base: Free devm resources when unregistering a device (David Gow)
- cpufreq: Avoid a bad reference count on CPU node (Miquel Sabat? Sol?) [Orabug: 37206351] {CVE-2024-50012}
- net: clear the dst when changing skb protocol (Jakub Kicinski) [Orabug: 38158471] {CVE-2025-38192}
- fbdev: efifb: Register sysfs groups through driver core (Thomas Wei?schuh) [Orabug: 37205941] {CVE-2024-49925}
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Yu Kuai) [Orabug: 37649831] {CVE-2025-21712}
- cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Guangshuo Li) [Orabug: 39343645] {CVE-2026-43328}
- cpufreq: governor: Free dbs_data directly when gov->init() fails (Liao Chang)
- rxrpc: Fix recvmsg() unconditional requeue (David Howells)
- fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) {CVE-2023-45896}
- btrfs: lock the inode in shared mode before starting fiemap (Filipe Manana)
- f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (Chao Yu)
- can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs (Marc Kleine-Budde) [Orabug: 38773752] {CVE-2025-68307}
- Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919] {CVE-2024-26886}
- iio: imu: inv_icm42600: fix odr switch when turning buffer off (Jean-Baptiste Maneyrol)
- pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] {CVE-2024-27389}
- f2fs: fix to wait on block writeback for post_read case (Chao Yu)
- net: stmmac: fix TSO DMA API usage causing oops (Russell King) [Orabug: 37434619] {CVE-2024-56719}
- drm/amdgpu: unmap and remove csa_va properly (Lang Yu)
- binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [Orabug: 38773485] {CVE-2025-68239}
- gfs2: No more self recovery (Andreas Gruenbacher) [Orabug: 38351909] {CVE-2025-38659}
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Kumar Kartikeya Dwivedi)
- dlm: fix possible lkb_resource null dereference (Alexander Aring) [Orabug: 37472202] {CVE-2024-47809}
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [Orabug: 38175068] {CVE-2025-38250}
- mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() (Joonwon Kang)
- btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [Orabug: 38970329] {CVE-2026-23157}
- btrfs: send: check for inline extents in range_is_hole_in_parent() (Qu Wenruo) [Orabug: 38970284] {CVE-2026-23141}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov)
- spi: cadence-quadspi: Implement refcount to handle unbind during busy (Khairul Anuar Romli)
- fs: dlm: fix use after free in midcomms commit (Alexander Aring)
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() (Guodong Xu)
- net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [Orabug: 38970488] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Eric Dumazet)
- dm-verity: disable recursive forward error correction (Mikulas Patocka) [Orabug: 38887637] {CVE-2025-71161}
- blk-mq: use quiesced elevator switch when reinitializing queues (Keith Busch)
- wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [Orabug: 36683388] {CVE-2024-36922}
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio() (Ye Bin)
- s390/xor: Fix xor_xc_2() inline assembly constraints (Heiko Carstens)
- ALSA: control: Avoid WARN() for symlink errors (Takashi Iwai) [Orabug: 37434224] {CVE-2024-56657}
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Jaskaran Singh) [Orabug: 38730673] {CVE-2025-40261}
- Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" (Jaskaran Singh)
- tty: n_gsm: fix deadlock and link starvation in outgoing data path (Daniel Starke)
- MPTCP: fix lock class name family in pm_nl_create_listen_socket (Li Xiasong)
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [Orabug: 39273511] {CVE-2026-31586}
- ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [Orabug: 39273588] {CVE-2026-31598}
- fs/ocfs2: fix comments mentioning i_mutex (Hongnan Li)
- rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu)
- rxrpc: Fix call removal to use RCU safe deletion (David Howells)
- rxrpc: Fix key quota calculation for multitoken keys (David Howells)
- xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262402] {CVE-2026-31664}
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331093] {CVE-2026-43075}
- ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331098] {CVE-2026-43076}
- ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V (Sebastian Krzyszkowiak)
- Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Set the DVS voltages lower (Sebastian Krzyszkowiak)
- powerpc64/bpf: do not increment tailcall count when prog is NULL (Hari Bathini)
- netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal)
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (H?kon Bugge)
- wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Felix Fietkau) [Orabug: 39167473] {CVE-2026-23444}
- gfs2: Validate i_depth for exhash directories (Andrew Price) [Orabug: 38395007] {CVE-2025-38710}
- gfs2: Improve gfs2_consist_inode() usage (Andrew Price)
- ipv6: add NULL checks for idev in SRv6 paths (Heminhong) [Orabug: 39167468] {CVE-2026-23442}
- Revert "net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()" (Sasha Levin)
- Revert "net: ethernet: xscale: Check for PTP support properly" (Sasha Levin)
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown (Koichiro Den)
- media: hackrf: fix to not free memory after the device is registered in hackrf_probe() (Jeongjun Park)
- media: vidtv: fix pass-by-value structs causing MSAN warnings (Abd-Alrhman Masalkhi)
- nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map (Deepanshu Kartikey)
- media: as102: fix to not free memory after the device is registered in as102_usb_probe() (Jeongjun Park) [Orabug: 39273468] {CVE-2026-31578}
- bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [Orabug: 39273482] {CVE-2026-31580}
- ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [Orabug: 39273487] {CVE-2026-31581}
- media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [Orabug: 39273494] {CVE-2026-31583}
- media: vidtv: fix nfeeds state corruption on start_streaming failure (Ruslan Valiyev)
- mm/kasan: fix double free for kasan pXds (Ritesh Harjani)
- KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug: 39273523] {CVE-2026-31588}
- checkpatch: add support for Assisted-by tag (Sasha Levin)
- rxrpc: proc: size address buffers for %pISpc output (Pengpeng Hou)
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [Orabug: 39139840] {CVE-2026-23399}
- smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara)
- fsl-mc: Use driver_set_override() instead of open-coding (Krzysztof Kozlowski)
- KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (Sean Christopherson) [Orabug: 39273531] {CVE-2026-31590}
- ocfs2: handle invalid dinode in ocfs2_group_extend (Zhengyuan Huang) [Orabug: 39273570] {CVE-2026-31596}
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [Orabug: 39273579] {CVE-2026-31597}
- media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections (Ruslan Valiyev)
- ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [Orabug: 39273609] {CVE-2026-31602}
- USB: serial: option: add Telit Cinterion FN990A MBIM composition (Fabio Porcedda)
- staging: sm750fb: fix division by zero in ps_to_hz() (Junrui Luo)
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- usb: storage: Expand range of matched versions for VL817 quirks entry (Daniel Br?t)
- usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [Orabug: 39273632] {CVE-2026-31607}
- usb: gadget: renesas_usb3: validate endpoint index in standard request handlers (Greg Kroah-Hartman)
- usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() (Greg Kroah-Hartman)
- usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() (Greg Kroah-Hartman) [Orabug: 39273669] {CVE-2026-31617}
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- ALSA: fireworks: bound device-supplied status before string array lookup (Greg Kroah-Hartman) [Orabug: 39273681] {CVE-2026-31619}
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (Greg Kroah-Hartman)
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() (Greg Kroah-Hartman) [Orabug: 39273693] {CVE-2026-31623}
- HID: core: clamp report_size in s32ton() to avoid undefined shift (Greg Kroah-Hartman) [Orabug: 39273697] {CVE-2026-31624}
- HID: alps: fix NULL pointer dereference in alps_raw_event() (Greg Kroah-Hartman) [Orabug: 39273705] {CVE-2026-31625}
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() (Lin Yu Chen) [Orabug: 39273709] {CVE-2026-31626}
- i2c: s3c24xx: check the size of the SMBUS message before using it (Greg Kroah-Hartman)
- can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [Orabug: 39273447] {CVE-2026-31532}
- nfc: llcp: add missing return after LLCP_CLOSED checks (Junxi Qian)
- ALSA: usb-audio: Update for native DSD support quirks (Jussi Laako)
- MIPS: mm: Rewrite TLB uniquification for the hidden bit feature (Maciej W. Rozycki)
- MIPS: mm: Suppress TLB uniquification on EHINV hardware (Maciej W. Rozycki)
- MIPS: Always record SEGBITS in cpu_data.vmbits (Maciej W. Rozycki)
- mips: mm: Allocate tlb_vpn array atomically (Stefan Wiehler)
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [Orabug: 39171450] {CVE-2026-31407}
- i3c: fix uninitialized variable use in i2c setup (Jamie Iles)
- perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [Orabug: 39331116] {CVE-2026-43079}
- gpio: tegra: fix irq_release_resources calling enable instead of disable (Samasth Norway Ananda)
- l2tp: Drop large packets with UDP encap (Alice Mikityanska) [Orabug: 39331125] {CVE-2026-43080}
- af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [Orabug: 39263356] {CVE-2026-31673}
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [Orabug: 39263406] {CVE-2026-31685}
- netfilter: xt_multiport: validate range encoding in checkentry (Ao Zhou) [Orabug: 39263388] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [Orabug: 39331145] {CVE-2026-43085}
- xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [Orabug: 39331163] {CVE-2026-43089}
- xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [Orabug: 39331181] {CVE-2026-43093}
- e1000: check return value of e1000_read_eeprom (Agalakov Daniil)
- tracing/probe: reject non-closed empty immediate strings (Pengpeng Hou)
- nfc: s3fwrn5: allocate rx skb before consuming bytes (Pengpeng Hou)
- ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Yiqi Sun) [Orabug: 39331198] {CVE-2026-43099}
- net: lapbether: handle NETDEV_PRE_TYPE_CHANGE (Eric Dumazet)
- net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [Orabug: 39263401] {CVE-2026-31684}
- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39784990] {CVE-2026-43074}
- epoll: use refcount to reduce ep_mutex contention (Paolo Abeni)
- drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock (Ma?ra Canal)
- drm/vc4: Fix a memory leak in hang state error path (Ma?ra Canal) [Orabug: 39331212] {CVE-2026-43104}
- drm/vc4: Fix memory leak of BO array in hang state (Ma?ra Canal) [Orabug: 39331216] {CVE-2026-43105}
- PCI: hv: Set default NUMA node to 0 for devices without affinity info (Long Li)
- arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency (Sebastian Krzyszkowiak)
- soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching (Potin Lai)
- ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Tomasz Merta)
- wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [Orabug: 39331238] {CVE-2026-43110}
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Arthur Husband)
- HID: roccat: fix use-after-free in roccat_report_event (Beno?t Sevens) [Orabug: 39331244] {CVE-2026-43111}
- HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Leo Vriska)
- pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) (Andy Shevchenko)
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (Fredric Cover)
- ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Phil Willoughby)
- ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Kuninori Morimoto)
- wifi: wl1251: validate packet IDs before indexing tx_frames (Pengpeng Hou) [Orabug: 39331254] {CVE-2026-43113}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [Orabug: 39331263] {CVE-2026-43114}
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (C?sar Montoya)
- btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [Orabug: 39331280] {CVE-2026-43117}
- can: mcp251x: add error handling for power enable in open and resume (Wenyuan Li)
- ALSA: asihpi: avoid write overflow check warning (Arnd Bergmann)
- LTS version: v5.15.208 (Samasth Norway Ananda)
- LTS version: v5.15.207 (Samasth Norway Ananda)
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Prathyushi Nangia) [Orabug: 39460476] {CVE-2026-46174}
- x86/CPU/AMD: Add X86_FEATURE_ZEN1 (Borislav Petkov)
- LTS version: v5.15.206 (Samasth Norway Ananda)
- LTS version: v5.15.205 (Samasth Norway Ananda)
- LTS version: v5.15.204 (Samasth Norway Ananda)
- xen/privcmd: fix double free via VMA splitting (Juergen Gross) [Orabug: 39305911] {CVE-2026-31787}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305899] {CVE-2026-31786}

[5.15.0-323.203.2]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Gal Pressman) [Orabug: 38290328]
- net/mlx5e: Fix race condition during IPSec ESN update (Jianbo Liu) [Orabug: 38290328,39167462] {CVE-2026-23440}
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [Orabug: 38290328,39167465] {CVE-2026-23441}
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567286,39668793] {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson) [Orabug: 39673870,39753976] {CVE-2026-63807}
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673870,39686460] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39460221,39673870] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack) [Orabug: 39673870]
- KVM: x86/mmu: Use a bool for direct (David Matlack) [Orabug: 39673870]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [Orabug: 39425999,39751167] {CVE-2026-43499,CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39425999,39706512] {CVE-2026-43499}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659419]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619388,39639981,39648952] {CVE-2026-52943}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang) [Orabug: 39681043]
- mm: preserve page-table boundaries for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- mm: enforce max_map_count for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209740]
- uek-rpm: cnic: Clean up the elba/SNIC config with make olddefconfig (Dave Kleikamp) [Orabug: 39661609]
- uek-rpm: cnic: Trim the SNIC config for a faster boot (Dave Kleikamp) [Orabug: 39661609]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 38945572]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 38945572]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480769]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Hkbinbin) [Orabug: 39452260] {CVE-2026-46043}

[5.15.0-323.203.1]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38112000]
- locking/mutex: Make contention tracepoints more consistent wrt adaptive spinning (Peter Zijlstra) [Orabug: 39598217]
- locking: Apply contention tracepoints in the slow path (Namhyung Kim) [Orabug: 39598217]
- locking: Add lock contention tracepoints (Namhyung Kim) [Orabug: 39598217]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages (Praveen Kumar Kannoju) [Orabug: 39594875]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39460234] {CVE-2026-46116}
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39226005]

[5.15.0-322.203.3]
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39548689,39674327] {CVE-2025-10263,CVE-2026-53354}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland) [Orabug: 39548689] {CVE-2025-10263}
- ARM: uek: Disable CONFIG_NVIDIA_CARMEL_CNP_ERRATUM (Boris Ostrovsky) [Orabug: 39548689] {CVE-2025-10263}
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland) [Orabug: 39548689] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Rutland) [Orabug: 39548689] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland) [Orabug: 39548689] {CVE-2025-10263}
- net/rds: Make "rds_send_xmit" fairer (Gerd Rausch) [Orabug: 39532945]
- net/rds: Schedule rds_send_worker if there's more work to do (Gerd Rausch) [Orabug: 39532945]
- Revert "rds: Change return code from rds_send_xmit() when lock is taken" (Gerd Rausch) [Orabug: 39532945]
- Revert "Reapply "rds: ib: Make sure receives are posted before connection is up"" (Gerd Rausch) [Orabug: 39532945]
- Revert "rds: ib: Make sure a QP in INIT state is transitioned to ERR" (Gerd Rausch) [Orabug: 39532945]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru) [Orabug: 39526881] {CVE-2022-50073}
- mmc: dwcmshc_bf3_hw_reset: Log eMMC reset calls (Satyansh Shukla) [Orabug: 39333650]
- arm64: dts: pensando: drop elba penfw firmware node (Tom Saeger) [Orabug: 39522954]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie) [Orabug: 39262374,39543197] {CVE-2026-31657}
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39179363]

[5.15.0-322.203.2]
- LTS version: v5.15.203 (Vijayendra Suman)
- io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe)
- ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
- ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
- Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ (Luiz Augusto von Dentz) [Orabug: 39131105] {CVE-2026-23395}
- i2c: cp2615: fix serial string NULL-deref at probe (Johan Hovold)
- i2c: cp2615: replace deprecated strncpy with strscpy (Justin Stitt)
- ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() (Namjae Jeon)
- ksmbd: fix potencial OOB in get_file_all_info() for compound requests (Namjae Jeon)
- tracing: Fix potential deadlock in cpu hotplug with osnoise (Luo Haiyang) [Orabug: 39250863] {CVE-2026-31480}
- x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() (Nikunj A Dadhania)
- mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (Tu Jinjiang) [Orabug: 39250813] {CVE-2026-31466}
- scsi: target: tcm_loop: Drain commands in target_reset handler (Josef Bacik) [Orabug: 39300990] {CVE-2026-43054}
- net: macb: Move devm_{free,request}_irq() out of spin lock area (Kevin Hao)
- dmaengine: sh: rz-dmac: Protect the driver specific lists (Claudiu Beznea)
- dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Claudiu Beznea)
- xfs: save ailp before dropping the AIL lock in push callbacks (Yuto Ohnuki) [Orabug: 39250775] {CVE-2026-31454}
- ext4: fix use-after-free in update_super_work when racing with umount (Jiayuan Chen) [Orabug: 39250727] {CVE-2026-31446}
- ext4: fix the might_sleep() warnings in kvfree() (Zqiang)
- ext4: publish jinode after initialization (Li Chen) [Orabug: 39250749] {CVE-2026-31450}
- usb: gadget: uvc: fix NULL pointer dereference during unbind race (Jimmy Hu)
- usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop (Kuen-Han Tsai) [Orabug: 39300667] {CVE-2026-31728}
- usb: gadget: f_hid: move list and spinlock inits from bind to alloc (Michael Zimmermann) [Orabug: 39300642] {CVE-2026-31721}
- net: rfkill: prevent unlimited numbers of rfkill events from being created (Greg Kroah-Hartman) [Orabug: 39262425] {CVE-2026-31670}
- seg6: separate dst_cache for input and output paths in seg6 lwtunnel (Andrea Mayer) [Orabug: 39262417] {CVE-2026-31668}
- Revert "mptcp: add needs_id for netlink appending addr" (Matthieu Baerts)
- xen/privcmd: unregister xenstore notifier on module exit (Guohan Zhao)
- netlink: add nla be16/32 types to minlen array (Florian Westphal) [Orabug: 39654776] {CVE-2024-26849}
- rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING) (David Howells)
- rxrpc: fix reference count leak in rxrpc_server_keyring() (Luxiao Xu)
- net: stmmac: fix integer underflow in chain mode (Tyllis Xu) [Orabug: 39262353] {CVE-2026-31649}
- net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure (Pengpeng Hou)
- mmc: vub300: fix NULL-deref on disconnect (Johan Hovold) [Orabug: 39262359] {CVE-2026-31651}
- drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (Sebastian Brzezinka) [Orabug: 39262371] {CVE-2026-31656}
- net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() (David Carlier) [Orabug: 39262378] {CVE-2026-31658}
- net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (M A Ramdhan) [Orabug: 39257891,39543209] {CVE-2026-31533}
- batman-adv: reject oversized global TT response buffers (Ruide Cao) [Orabug: 39262382] {CVE-2026-31659}
- nfc: pn533: allocate rx skb before consuming bytes (Pengpeng Hou)
- arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges (Shawn Guo)
- arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity (Shawn Guo)
- wifi: brcmsmac: Fix dma_free_coherent() size (Thomas Fourier) [Orabug: 39262390] {CVE-2026-31661}
- tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG (Oleh Konko) [Orabug: 39262394] {CVE-2026-31662}
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Tuan Do) [Orabug: 39262407] {CVE-2026-31665}
- apparmor: fix race between freeing data and fs accessing it (John Johansen)
- apparmor: fix race on rawdata dereference (John Johansen)
- apparmor: fix differential encoding verification (John Johansen)
- apparmor: fix unprivileged local user can do privileged policy management (John Johansen)
- apparmor: Fix double free of ns_name in aa_replace_profiles() (John Johansen)
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (Massimiliano Pellizzer)
- apparmor: fix side-effect bug in match_char() macro usage (Massimiliano Pellizzer)
- apparmor: fix: limit the number of levels of policy namespaces (John Johansen)
- apparmor: replace recursive profile removal with iterative approach (Massimiliano Pellizzer)
- apparmor: fix memory leak in verify_header (Massimiliano Pellizzer)
- apparmor: validate DFA start states are in bounds in unpack_pdb (Massimiliano Pellizzer)
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (Nuno Sa)
- gpiolib: cdev: fix uninitialised kfifo (Kent Gibson) [Orabug: 36683267] {CVE-2024-36898}
- media: uvcvideo: Use heuristic to find stream entity (Ricardo Ribalda)
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo) [Orabug: 38560508] {CVE-2025-40016}
- Input: uinput - take event lock when submitting FF request "event" (Dmitry Torokhov)
- Input: uinput - fix circular locking dependency with ff-core (Mikhail Gavrilov) [Orabug: 39262413] {CVE-2026-31667}
- mptcp: fix slab-use-after-free in __inet_lookup_established (Jiayuan Chen) [Orabug: 39262422] {CVE-2026-31669}
- xfrm_user: fix info leak in build_report() (Greg Kroah-Hartman) [Orabug: 39262429] {CVE-2026-31671}
- wifi: rt2x00usb: fix devres lifetime (Johan Hovold) [Orabug: 39262433] {CVE-2026-31672}
- lib/crypto: chacha: Zeroize permuted_state before it leaves scope (Eric Biggers) [Orabug: 39343667] {CVE-2026-43336}
- wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free (Alexander Popov)
- io_uring/tctx: work around xa_store() allocation error issue (Jens Axboe)
- usb: gadget: f_uac1_legacy: validate control request size (Taegu Ha)
- usb: gadget: f_rndis: Protect RNDIS options with mutex (Kuen-Han Tsai)
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free (Kuen-Han Tsai) [Orabug: 39343693] {CVE-2026-43343}
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser (Navaneeth K) [Orabug: 38773561] {CVE-2025-68256}
- smb: client: Fix refcount leak for cifs_sb_tlink (Shuhao Fu)
- net: mctp: Don't access ifa_index when missing (Matt Johnston)
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Quanmin Yan) [Orabug: 38737307] {CVE-2025-40323}
- can: gs_usb: gs_usb_receive_bulk_callback(): fix error message (Marc Kleine-Budde) [Orabug: 39654809] {CVE-2026-23155}
- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error (Marc Kleine-Budde) [Orabug: 39654800] {CVE-2026-23082}
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38914786] {CVE-2026-23031}
- usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer (Sebastian Urban)
- USB: dummy-hcd: Fix interrupt synchronization error (Alan Stern)
- USB: dummy-hcd: Fix locking/synchronization error (Alan Stern)
- thunderbolt: Fix property read in nhi_wake_supported() (Konrad Dybcio)
- net: ftgmac100: fix ring allocation unwind on open failure (Yufan Chen)
- vxlan: validate ND option lengths in vxlan_na_create (Ao Zhou) [Orabug: 39300690] {CVE-2026-31738}
- netfilter: ipset: drop logically empty buckets in mtype_del (Yifan Wu) [Orabug: 39205985] {CVE-2026-31418}
- comedi: me4000: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: me_daq: Fix potential overrun of firmware buffer (Ian Abbott)
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach (Ian Abbott)
- comedi: Reinit dev->spinlock between attachments to low-level drivers (Ian Abbott)
- comedi: dt2815: add hardware detection to prevent crash (Deepanshu Kartikey)
- cdc-acm: new quirk for EPSON HMD (Oliver Neukum)
- bridge: br_nd_send: validate ND option lengths (Ao Zhou) [Orabug: 39300724] {CVE-2026-31752}
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
- usb: cdns3: gadget: fix state inconsistency on gadget init failure (Yongchao Wu)
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue (Yongchao Wu)
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() (Juneho Choi) [Orabug: 39300737] {CVE-2026-31756}
- usb: ehci-brcm: fix sleep during atomic (Justin Chen)
- usb: usbtmc: Flush anchored URBs in usbtmc_release (Heitor Alves de Siqueira) [Orabug: 39300742] {CVE-2026-31758}
- usb: ulpi: fix double free in ulpi_register_interface() error path (Guangshuo Li) [Orabug: 39300746] {CVE-2026-31759}
- usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive (Miao Li)
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (Ethan Tidmore)
- iio: gyro: mpu3050: Move iio_device_register() to correct location (Ethan Tidmore) [Orabug: 39300751] {CVE-2026-31761}
- iio: gyro: mpu3050: Fix irq resource leak (Ethan Tidmore) [Orabug: 39300756] {CVE-2026-31762}
- iio: gyro: mpu3050: Fix incorrect free_irq() variable (Ethan Tidmore) [Orabug: 39300761] {CVE-2026-31763}
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only (Francesco Lavra)
- iio: light: vcnl4035: fix scan buffer on big-endian (David Lechner)
- iio: dac: ad5770r: fix error return in ad5770r_read_raw() (Antoniu Miclaus)
- Input: xpad - add support for Razer Wolverine V3 Pro (Zoltan Illes)
- Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
- Input: synaptics-rmi4 - fix a locking bug in an error path (Bart Van Assche)
- USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam (Jp Hein)
- USB: serial: option: add support for Rolling Wireless RW135R-GL (Wanquan Zhong)
- USB: serial: io_edgeport: add support for Blackbox IC135A (Frej Drejhammar)
- drm/ast: dp501: Fix initialization of SCU2C (Thomas Zimmermann)
- hwmon: (occ) Fix division by zero in occ_show_power_1() (Sanman Pradhan)
- MIPS: Fix the GCC version check for __multi3' workaround (Maciej W. Rozycki)
- Bluetooth: SMP: force responder MITM requirements before building the pairing response (Oleh Konko) [Orabug: 39343662] {CVE-2026-43334}
- Bluetooth: SMP: derive legacy responder STK authentication from MITM state (Oleh Konko) [Orabug: 39300793] {CVE-2026-31773}
- ALSA: ctxfi: Fix missing SPDIFI1 index handling (Takashi Iwai) [Orabug: 39300800] {CVE-2026-31776}
- ALSA: caiaq: fix stack out-of-bounds read in init_card (Berk Cem Goksel) [Orabug: 39300808] {CVE-2026-31778}
- USB: serial: option: add MeiG Smart SRM825WN (Ernestas Kulik)
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation (Yasuaki Torimaru)
- drm/ioc32: stop speculation on the drm_compat_ioctl path (Greg Kroah-Hartman) [Orabug: 39300820] {CVE-2026-31781}
- riscv: kgdb: fix several debug register assignment bugs (Paul Walmsley)
- hwmon: (occ) Fix missing newline in occ_show_extended() (Sanman Pradhan)
- hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() (Sanman Pradhan)
- hwmon: (pxe1610) Check return value of page-select write in probe (Sanman Pradhan)
- bpf: reject direct access to nullable PTR_TO_BUF pointers (Qi Tang) [Orabug: 39343659] {CVE-2026-43333}
- ipv6: avoid overflows in ip6_datagram_send_ctl() (Eric Dumazet) [Orabug: 39205971] {CVE-2026-31415}
- net/sched: cls_flow: fix NULL pointer dereference on shared blocks (Xiang Mei) [Orabug: 39206003] {CVE-2026-31422}
- net/sched: cls_fw: fix NULL pointer dereference on shared blocks (Xiang Mei) [Orabug: 39205999] {CVE-2026-31421}
- net/x25: Fix overflow when accumulating packets (Martin Schiller)
- net/x25: Fix potential double free of skb (Martin Schiller)
- net/mlx5: Avoid "No data available" when FW version queries fail (Saeed Mahameed)
- net: macb: properly unregister fixed rate clocks (Fedor Pchelkin) [Orabug: 39300849] {CVE-2026-43014}
- net: macb: fix clk handling on PCI glue driver removal (Fedor Pchelkin) [Orabug: 39300853] {CVE-2026-43015}
- Bluetooth: MGMT: validate LTK enc_size on load (Keenan Dong) [Orabug: 39300866] {CVE-2026-43020}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Pablo Neira Ayuso) [Orabug: 39300881] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Pablo Neira Ayuso) [Orabug: 39206017] {CVE-2026-31424}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Qi Tang) [Orabug: 39300889] {CVE-2026-43026}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (Qi Tang) [Orabug: 39300893] {CVE-2026-43027}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal)
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [Orabug: 39300897] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [Orabug: 39205976] {CVE-2026-31416}
- netfilter: flowtable: strictly check for maximum number of actions (Pablo Neira Ayuso) [Orabug: 39343649] {CVE-2026-43329}
- net: ipv6: flowlabel: defer exclusive option free until RCU teardown (Zhengchuan Liang) [Orabug: 39263384] {CVE-2026-31680}
- bpf: Fix regsafe() for pointers to packet (Alexei Starovoitov) [Orabug: 39300903] {CVE-2026-43030}
- net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec (Suraj Gupta)
- NFC: pn533: bound the UART receive buffer (Pengpeng Hou)
- net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (Yochai Eisenrich) [Orabug: 39300917] {CVE-2026-43035}
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Paolo Abeni) [Orabug: 39343677] {CVE-2026-43339}
- net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (Xiang Mei) [Orabug: 39206011] {CVE-2026-31423}
- bridge: br_nd_send: linearize skb before parsing ND options (Ao Zhou) [Orabug: 39263393] {CVE-2026-31682}
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [Orabug: 39300925] {CVE-2026-43037}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet) [Orabug: 39300929] {CVE-2026-43038}
- tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich) [Orabug: 39300934] {CVE-2026-43040}
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen) [Orabug: 39300938] {CVE-2026-43041}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei) [Orabug: 39300946] {CVE-2026-43043}
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
- btrfs: reject root items with drop_progress and zero drop_level (Zhengyuan Huang) [Orabug: 39300958] {CVE-2026-43046}
- HID: multitouch: Check to ensure report responses match the request (Lee Jones) [Orabug: 39300962] {CVE-2026-43047}
- objtool: Fix Clang jump table detection (Josh Poimboeuf)
- btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
- atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey) [Orabug: 39300974] {CVE-2026-43050}
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Beno?t Sevens) [Orabug: 39300978] {CVE-2026-43051}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso) [Orabug: 39262274] {CVE-2026-31555}
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
- dmaengine: xilinx_dma: Program interrupt delay timeout (Radhey Shyam Pandey)
- dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
- btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
- btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
- phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
- ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'O) [Orabug: 39323071] {CVE-2026-43065}
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li) [Orabug: 39323078] {CVE-2026-43066}
- ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike) [Orabug: 39250730] {CVE-2026-31447}
- ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin) [Orabug: 39323091] {CVE-2026-43068}
- ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
- ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey) [Orabug: 39250762] {CVE-2026-31452}
- xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki) [Orabug: 39250778] {CVE-2026-31455}
- jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
- scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
- alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
- erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu)
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (Xietangxin) [Orabug: 39250825] {CVE-2026-31469}
- media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam) [Orabug: 39250837] {CVE-2026-31473}
- cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
- can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi) [Orabug: 39262307] {CVE-2026-31570}
- s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
- s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
- ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
- sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
- hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
- ACPI: EC: Fix ECDT probe ordering issues (Hans de Goede)
- ACPI: EC: Fix EC address space handler unregistration (Hans de Goede)
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (Hans de Goede)
- ACPICA: include/acpi/acpixf.h: Fix indentation (Hans de Goede)
- ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport)
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
- RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
- RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal) [Orabug: 39262297] {CVE-2026-31565}
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
- RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
- regmap: Synchronize cache for the page selector (Andy Shevchenko)
- net: macb: use the current queue number for stats (Paolo Valerio) [Orabug: 39250906] {CVE-2026-31494}
- netfilter: ctnetlink: use netlink policy range checks (David Carlier) [Orabug: 39250912] {CVE-2026-31495}
- netlink: allow be16 and be32 types in all uint policy checks (Florian Westphal)
- netlink: introduce bigendian integer types (Florian Westphal)
- netfilter: nft_payload: reject out-of-range attributes via policy (Florian Westphal)
- netlink: introduce NLA_POLICY_MAX_BE (Florian Westphal)
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi) [Orabug: 39206030] {CVE-2026-31427}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ao Zhou) [Orabug: 39263360] {CVE-2026-31674}
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi) [Orabug: 39206034] {CVE-2026-31428}
- Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou) [Orabug: 39250922] {CVE-2026-31497}
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim) [Orabug: 39250926] {CVE-2026-31498}
- dma-mapping: add missing inline for dma_free_attrs (Miguel Ojeda)
- net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [Orabug: 39250952,39543208] {CVE-2026-31504}
- platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
- net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
- openvswitch: validate MPLS set/set_masked payload length (Ao Zhou) [Orabug: 39263381] {CVE-2026-31679}
- nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
- ionic: fix persistent MAC address override on PF (Mohammad Heib)
- pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike) [Orabug: 39250973] {CVE-2026-31510}
- Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal) [Orabug: 39323114] {CVE-2026-43069}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim) [Orabug: 39171454] {CVE-2026-31408}
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim) [Orabug: 39250982] {CVE-2026-31512}
- can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
- af_key: validate families in pfkey_send_migrate() (Eric Dumazet) [Orabug: 39250997] {CVE-2026-31515}
- esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca) [Orabug: 39251009] {CVE-2026-31518}
- xfrm: Fix the usage of skb->sk (Steffen Klassert)
- xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
- dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
- module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai) [Orabug: 39251026] {CVE-2026-31521}
- HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
- net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (G?nther Noack) [Orabug: 39251033] {CVE-2026-31522}
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
- nvme-pci: ensure we're polling a polled queue (Keith Busch) [Orabug: 39251039] {CVE-2026-31523}
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
- nvme-pci: cap queue creation to used queues (Keith Busch)
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
- HID: asus: avoid memory leak in asus_report_fixup() (G?nther Noack) [Orabug: 39251045] {CVE-2026-31524}
- bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
- sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
- xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
- xen/privcmd: restrict usage in unprivileged domU (Juergen Gross) [Orabug: 39142872] {CVE-2026-31788}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [Orabug: 39130949] {CVE-2026-23351}
- netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
- lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
- drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte) [Orabug: 39262235] {CVE-2026-31540}
- ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
- mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
- mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu) [Orabug: 39167446] {CVE-2026-23434}
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe Jaillet)
- hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi) [Orabug: 39136287] {CVE-2026-23398}
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
- net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz) [Orabug: 39167455] {CVE-2026-23438}
- nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi) [Orabug: 39136283] {CVE-2026-23397}
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei) [Orabug: 39262250] {CVE-2026-31546}
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei) [Orabug: 39167458] {CVE-2026-23439}
- net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
- wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei) [Orabug: 39136279] {CVE-2026-23396}
- igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
- net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
- net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
- net/smc: Only save the original clcsock callback functions (Wen Gu)
- PM: runtime: Fix a race condition related to device removal (Bart Van Assche) [Orabug: 39167501] {CVE-2026-23452}
- sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
- net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy) [Orabug: 39167506] {CVE-2026-23454}
- net: bcmgenet: increase WoL poll timeout (Justin Chen)
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu) [Orabug: 39167510] {CVE-2026-23455}
- netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
- netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso) [Orabug: 39131089] {CVE-2026-23391}
- netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso) [Orabug: 39322993] {CVE-2026-43060}
- netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko) [Orabug: 38773356] {CVE-2025-68206}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu) [Orabug: 39167514] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes M?ller) [Orabug: 39167518] {CVE-2026-23457}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim) [Orabug: 39167522] {CVE-2026-23458}
- netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal) [Orabug: 38423446] {CVE-2025-39764}
- net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
- Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz) [Orabug: 39167534] {CVE-2026-23462}
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
- firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
- of: Add cleanup.h based auto release via __free(device_node) markings (Jonathan Cameron)
- wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima) [Orabug: 39262267] {CVE-2026-31551}
- soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
- btrfs: tree-checker: fix misleading root drop_level error message (Zhengyuan Huang)
- batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Ao Zhou) [Orabug: 39263397] {CVE-2026-31683}
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Ma?ra Canal) [Orabug: 39262263] {CVE-2026-31550}
- mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts)
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
- net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn) [Orabug: 39131009] {CVE-2026-23368}
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum)
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe) [Orabug: 39130902] {CVE-2026-23335}
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov) [Orabug: 39130905] {CVE-2026-23336}
- wifi: cfg80211: move scan done work to wiphy work (Johannes Berg)
- wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges) [Orabug: 39130709] {CVE-2026-23281}
- ext4: always allocate blocks only from groups inode can use (Jan Kara)
- ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [Orabug: 39451836] {CVE-2026-45920}
- ext4: drop extent cache when splitting extent fails (Zhang Yi) [Orabug: 39451764] {CVE-2026-45899}
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi) [Orabug: 39452051] {CVE-2026-45985}
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
- drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
- drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (Jeongjun Park) [Orabug: 39451950] {CVE-2026-45956}
- net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
- drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
- serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski Iceye)
- serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo J?rvinen)
- serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel) [Orabug: 39323001] {CVE-2026-43061}
- serial: 8250_pci: add support for the AX99100 (Martin Roukala)
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
- mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain) [Orabug: 39167571] {CVE-2026-23474}
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
- mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
- mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes M?ller) [Orabug: 39167591] {CVE-2026-31393}
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes M?ller) [Orabug: 39323033] {CVE-2026-43062}
- net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin) [Orabug: 39167600] {CVE-2026-31396}
- NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
- nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny) [Orabug: 39167606] {CVE-2026-31399}
- sunrpc: fix cache_request leak in cache_release (Jeff Layton) [Orabug: 39167610] {CVE-2026-31400}
- driver: iio: add missing checks on iio_info's callback access (Julien Stephan) [Orabug: 37073038] {CVE-2024-46715}
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe) [Orabug: 38970182] {CVE-2026-23113}
- l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
- bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [Orabug: 38423331] {CVE-2025-39748}
- i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
- iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
- iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus) [Orabug: 39343732] {CVE-2026-43357}
- iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
- iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
- iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
- iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
- iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
- btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
- lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
- lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
- x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji) [Orabug: 39343756] {CVE-2026-43363}
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
- xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong) [Orabug: 39343761] {CVE-2026-43365}
- tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
- drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu) [Orabug: 39343770] {CVE-2026-43370}
- net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
- net: ncsi: fix skb leak in error paths (Jian Zhang)
- parisc: Fix initial page table creation for boot (Helge Deller)
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie) [Orabug: 39343797] {CVE-2026-43381}
- parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
- batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann) [Orabug: 39343802] {CVE-2026-43382}
- ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
- net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
- media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver) [Orabug: 39171442] {CVE-2026-31405}
- staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman) [Orabug: 39343817] {CVE-2026-43387}
- staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak) [Orabug: 39343813] {CVE-2026-43386}
- irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
- device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
- time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
- time: add kernel-doc in time.c (Randy Dunlap)
- ceph: fix i_nlink underrun during async unlink (Max Kellermann) [Orabug: 39343884] {CVE-2026-43420}
- libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
- libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer) [Orabug: 39343844] {CVE-2026-43405}
- libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov) [Orabug: 39343847] {CVE-2026-43406}
- libceph: reject preamble if control segment is empty (Ilya Dryomov)
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39343850] {CVE-2026-43407}
- tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao) [Orabug: 39343861] {CVE-2026-43411}
- mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng) [Orabug: 39386859] {CVE-2026-43484}
- mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
- mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
- usb: image: mdc800: kill download URB on timeout (Ziyi Guo) [Orabug: 39343897] {CVE-2026-43425}
- usb: mdc800: handle signal and read racing (Oliver Neukum)
- usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu) [Orabug: 39343902] {CVE-2026-43426}
- usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum) [Orabug: 39343906] {CVE-2026-43427}
- USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern) [Orabug: 39343911] {CVE-2026-43428}
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern) [Orabug: 39343917] {CVE-2026-43429}
- USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
- usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
- usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
- usb: yurex: fix race in probe (Oliver Neukum) [Orabug: 39343921] {CVE-2026-43430}
- usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan) [Orabug: 39343930] {CVE-2026-43432}
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
- net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
- net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
- cgroup: fix race between task migration and iteration (Qingye Zhao) [Orabug: 39343948] {CVE-2026-43439}
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
- ASoC: detect empty DMI strings (Casey Connolly)
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
- e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath) [Orabug: 39343961] {CVE-2026-43445}
- i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim) [Orabug: 39343972] {CVE-2026-43449}
- regulator: pca9450: Correct interrupt type (Peng Fan)
- regulator: pca9450: Make IRQ optional (Frieder Schrempf)
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan) [Orabug: 39110656] {CVE-2026-23274}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim) [Orabug: 39343976] {CVE-2026-43450}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim) [Orabug: 39343980] {CVE-2026-43451}
- netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull) [Orabug: 39343984] {CVE-2026-43452}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu) [Orabug: 39343988] {CVE-2026-43453}
- can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
- serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
- ASoC: soc-core: flush delayed work before removing DAIs and widgets (Matteo Cotifava) [Orabug: 39344004] {CVE-2026-43459}
- ASoC: core: Do not call link_exit() on uninitialized rtd objects (Amadeusz S?awi?ski)
- ASoC: core: Exit all links before removing their components (Cezary Rojewski)
- ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() (Kuninori Morimoto)
- ASoC: soc-core: drop delayed_work_pending() check before flush (Matteo Cotifava)
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi) [Orabug: 39110666] {CVE-2026-23277}
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman) [Orabug: 39344017] {CVE-2026-43466}
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
- xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger) [Orabug: 39344026] {CVE-2026-43469}
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (Jonathan Neusch?fer)
- remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
- powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy)
- ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
- unshare: fix unshare_fs() handling (Al Viro) [Orabug: 39344034] {CVE-2026-43472}
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar) [Orabug: 39344038] {CVE-2026-43473}
- ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka) [Orabug: 39344043] {CVE-2026-43475}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [Orabug: 39103230,39362005] {CVE-2026-23270}
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen) [Orabug: 39130790] {CVE-2026-23300}
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera) [Orabug: 39130767] {CVE-2026-23293}
- net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
- nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
- nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
- net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den) [Orabug: 39130923] {CVE-2026-23340}
- amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski) [Orabug: 39130807] {CVE-2026-23304}
- xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
- indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
- wifi: wlcore: Fix a locking bug (Bart Van Assche) [Orabug: 39167425] {CVE-2026-23420}
- can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel) [Orabug: 39130971] {CVE-2026-23357}
- can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 39131187] {CVE-2026-23362}
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen) [Orabug: 39130726] {CVE-2026-23286}
- dpaa2-switch: do not clear any interrupts automatically (Ioana Ciornei)
- net: dpaa2-switch: serialize changes to priv->mac with a mutex (Vladimir Oltean)
- net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() (Vladimir Oltean)
- net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call (Vladimir Oltean)
- net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() (Vladimir Oltean)
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
- platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg) [Orabug: 39130965] {CVE-2026-23356}
- Squashfs: check metadata block offset is within range (Phillip Lougher) [Orabug: 39131079] {CVE-2026-23388}
- net/sched: ets: fix divide by zero in the offload path (Davide Caratti) [Orabug: 39131049] {CVE-2026-23379}
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe) [Orabug: 39130742] {CVE-2026-23289}
- wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian) [Orabug: 39130701] {CVE-2026-23279}
- wifi: radiotap: reject radiotap with unknown bits (Johannes Berg) [Orabug: 39131005] {CVE-2026-23367}
- ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo) [Orabug: 39130855] {CVE-2026-23318}
- platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum) [Orabug: 39131016] {CVE-2026-23370}
- x86/efi: defer freeing of boot services memory (Mike Rapoport) [Orabug: 39130953] {CVE-2026-23352}
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman) [Orabug: 39131061] {CVE-2026-23382}
- can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
- can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman) [Orabug: 39130816] {CVE-2026-23307}
- net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130750] {CVE-2026-23290}
- net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130997] {CVE-2026-23365}
- net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman) [Orabug: 39130832] {CVE-2026-23312}
- nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
- media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe) [Orabug: 39103138] {CVE-2026-23253}
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin) [Orabug: 39331304] {CVE-2026-43123}
- fbcon: move more common code into fb_open() (Daniel Vetter)
- fbcon: Extract fbcon_open/release helpers (Daniel Vetter)
- fbcon: Use delayed work for cursor (Daniel Vetter)
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Namjae Jeon)
- ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
- usb: cdns3: fix role switching during resume (Thomas Richard)
- usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Th?o Lebrun)
- usb: cdns3: remove redundant if branch (Hongyu Xie)
- clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: omap-usb-host: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- mfd: qcom-pm8xxx: switch away from using chained IRQ handlers (Dmitry Baryshkov)
- drm/tegra: dsi: fix device leak on probe (Johan Hovold)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: libata: remove pointless VPRINTK() calls (Hannes Reinecke)
- ata: libata-scsi: drop DPRINTK calls for cdb translation (Hannes Reinecke)
- scsi: ata: Call scsi_done() directly (Bart Van Assche)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Xu Wang)
- ARM: OMAP2+: add missing of_node_put before break and return (Qing Wang)
- memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
- memory: mtk-smi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju) [Orabug: 39130978] {CVE-2026-23359}
- btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
- ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
- ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
- scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
- scsi: ufs: core: Always initialize the UIC done completion (Bart Van Assche)
- scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
- ARM: clean up the memset64() C wrapper (Thomas Wei?schuh)

[5.15.0-322.202.1]
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito) [Orabug: 39446044,39754206] {CVE-2026-63890}
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito) [Orabug: 39446044,39754203] {CVE-2026-63889}
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito) [Orabug: 39446044,39754199] {CVE-2026-63888}
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito) [Orabug: 39446044,39754193] {CVE-2026-63887}
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler) [Orabug: 39390378]
- net: sched: act_api: implement generic walker and search for tc action (Zhengchao Shao) [Orabug: 39342047]
- btrfs: reserve extra space for the free space tree (Josef Bacik) [Orabug: 39281379]
- btrfs: include the free space tree in the global rsv minimum calculation (Josef Bacik) [Orabug: 39281379]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli) [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463672,39476933] {CVE-2026-46243}



From el-errata at oss.oracle.com  Thu Aug 13 23:24:16 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:24:16 -0700
Subject: [El-errata] ELBA-2026-500167 Oracle Linux 9 crash bug fix update
Message-ID: <mailman.136.1786663471.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500167

http://linux.oracle.com/errata/ELBA-2026-500167.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
crash-9.0.2-1.0.2.el9.x86_64.rpm
crash-devel-9.0.2-1.0.2.el9.i686.rpm
crash-devel-9.0.2-1.0.2.el9.x86_64.rpm

aarch64:
crash-9.0.2-1.0.2.el9.aarch64.rpm
crash-devel-9.0.2-1.0.2.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/crash-9.0.2-1.0.2.el9.src.rpm



Description of changes:

[9.0.2-1.0.2]
- Add Linux 7.1 compatibility for date reporting, module symbols, and x86_64 ORC backtraces [Orabug: 39765177]



From el-errata at oss.oracle.com  Thu Aug 13 23:24:18 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:24:18 -0700
Subject: [El-errata] ELBA-2026-500169 Oracle Linux 9 kexec-tools bug fix
 update
Message-ID: <mailman.137.1786663472.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500169

http://linux.oracle.com/errata/ELBA-2026-500169.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kexec-tools-2.0.31-1.0.4.el9.x86_64.rpm

aarch64:
kexec-tools-2.0.31-1.0.4.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kexec-tools-2.0.31-1.0.4.el9.src.rpm



Description of changes:

[2.0.31-1.0.4]
- Fix wrong exclusion of compound tail pages on Linux 7.1 [Orabug: 39765177]



From el-errata at oss.oracle.com  Thu Aug 13 23:24:20 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:24:20 -0700
Subject: [El-errata] ELSA-2026-42887 Important: Oracle Linux 9
 java-17-openjdk security update
Message-ID: <mailman.138.1786663473.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42887

http://linux.oracle.com/errata/ELSA-2026-42887.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-17-openjdk-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-demo-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-devel-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-headless-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-javadoc-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-javadoc-zip-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-jmods-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-src-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-src-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-src-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-static-libs-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.2.0.1.el9.x86_64.rpm

aarch64:
java-17-openjdk-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-demo-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-devel-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-headless-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-javadoc-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-javadoc-zip-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-jmods-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-src-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-src-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-src-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-static-libs-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.2.0.1.el9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-17-openjdk-17.0.20.0.8-1.2.0.1.el9.src.rpm

Related CVEs:

CVE-2026-41254
CVE-2026-46917
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47059
CVE-2026-47063
CVE-2026-60147




Description of changes:

[17.0.20.0.8-1.2.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.20.0.8-1.2]
- Set rpmrelease to 2 for PQC signing

[1:17.0.20.0.8-1.1]
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8

[1:17.0.20.0.8-1.1]
- Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla

[1:17.0.20.0.8-1.1]
- Set tzdata requires and build requires to 2026b
- Set fipsver to 821eb26f706
- Delete comments about patch macro syntax
- Set bundled freetype version to 2.14.3
- Set bundled giflib version to 6.1.3
- Set bundled harfbuzz version to 14.2.0
- Set bundled lcms2 version to 2.19.1
- Set bundled libpng version to 1.6.58

[1:17.0.20.0.8-1.1]
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876)

[1:17.0.20.0.8-1]
- Update to jdk-17.0.20+8 (GA)
- Add to .gitignore openjdk-17.0.20+8.tar.xz
- Set updatever to 20
- Set buildver to 8
- Update sources to openjdk-17.0.20+8.tar.xz
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188875



From el-errata at oss.oracle.com  Thu Aug 13 23:24:22 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:24:22 -0700
Subject: [El-errata] ELSA-2026-54268 Important: Oracle Linux 9 python3.9
 security update
Message-ID: <mailman.139.1786663478.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54268

http://linux.oracle.com/errata/ELSA-2026-54268.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
python-unversioned-command-3.9.25-7.0.1.el9_8.3.noarch.rpm
python3-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-debug-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-debug-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-devel-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-devel-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-idle-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-idle-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-libs-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-libs-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-test-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-test-3.9.25-7.0.1.el9_8.3.x86_64.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.3.i686.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.3.x86_64.rpm

aarch64:
python-unversioned-command-3.9.25-7.0.1.el9_8.3.noarch.rpm
python3-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-debug-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-devel-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-idle-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-libs-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-test-3.9.25-7.0.1.el9_8.3.aarch64.rpm
python3-tkinter-3.9.25-7.0.1.el9_8.3.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/python3.9-3.9.25-7.0.1.el9_8.3.src.rpm

Related CVEs:

CVE-2026-11940




Description of changes:

[3.9.25-7.0.1.el9_8.3]
- Remove upstream URL reference

[3.9.25-7.3]
- Security fix for CVE-2026-11940
Resolves: RHEL-227228

[3.9.25-7.2]
- Security fix for CVE-2026-15308
Resolves: RHEL-193786

[3.9.25-7.1]
- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
Resolves: RHEL-194207



From el-errata at oss.oracle.com  Thu Aug 13 23:27:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:39 -0700
Subject: [El-errata] ELBA-2026-500168 Oracle Linux 10 crash bug fix update
Message-ID: <mailman.140.1786663673.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500168

http://linux.oracle.com/errata/ELBA-2026-500168.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
crash-devel-9.0.2-1.0.2.el10.x86_64.rpm
crash-9.0.2-1.0.2.el10.x86_64.rpm

aarch64:
crash-devel-9.0.2-1.0.2.el10.aarch64.rpm
crash-9.0.2-1.0.2.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/crash-9.0.2-1.0.2.el10.src.rpm



Description of changes:

[9.0.2-1.0.2]
- Add Linux 7.1 compatibility for date reporting, module symbols, and x86_64 ORC backtraces [Orabug: 39765177]



From el-errata at oss.oracle.com  Thu Aug 13 23:27:40 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:40 -0700
Subject: [El-errata] ELBA-2026-500170 Oracle Linux 10 makedumpfile bug fix
 update
Message-ID: <mailman.141.1786663675.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500170

http://linux.oracle.com/errata/ELBA-2026-500170.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
makedumpfile-1.7.8-1.0.2.el10.x86_64.rpm

aarch64:
makedumpfile-1.7.8-1.0.2.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/makedumpfile-1.7.8-1.0.2.el10.src.rpm



Description of changes:

[1.7.8-1.0.2]
- Fix wrong exclusion of compound tail pages on Linux 7.1 [Orabug: 39765177]



From el-errata at oss.oracle.com  Thu Aug 13 23:27:42 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:42 -0700
Subject: [El-errata] ELSA-2026-36541 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.142.1786663677.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-36541

http://linux.oracle.com/errata/ELSA-2026-36541.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2026-43074
CVE-2026-43276
CVE-2026-43341
CVE-2026-46155
CVE-2026-46242
CVE-2026-46259




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Thu Aug 13 23:27:44 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:44 -0700
Subject: [El-errata] ELSA-2026-54178 Moderate: Oracle Linux 10 grafana
 security, bug fix, and enhancement update
Message-ID: <mailman.143.1786663678.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54178

http://linux.oracle.com/errata/ELSA-2026-54178.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
grafana-10.2.6-28.el10_2.4.x86_64.rpm
grafana-selinux-10.2.6-28.el10_2.4.x86_64.rpm

aarch64:
grafana-10.2.6-28.el10_2.4.aarch64.rpm
grafana-selinux-10.2.6-28.el10_2.4.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/grafana-10.2.6-28.el10_2.4.src.rpm

Related CVEs:

CVE-2026-8609
CVE-2026-33376
CVE-2026-33377
CVE-2026-33382




Description of changes:

[10.2.6-28.4]
- Resolves RHEL-211020: CVE-2026-33377

[10.2.6-28.3]
- Resolves RHEL-211376: CVE-2026-8609

[10.2.6-28.2]
- Resolves RHEL-210981: CVE-2026-33376

[10.2.6-28.1]
- Resolves RHEL-211389: CVE-2026-33382

[10.2.6-28]
- Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build



From el-errata at oss.oracle.com  Thu Aug 13 23:27:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:45 -0700
Subject: [El-errata] ELSA-2026-54481 Moderate: Oracle Linux 10 python-idna
 security update
Message-ID: <mailman.144.1786663679.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54481

http://linux.oracle.com/errata/ELSA-2026-54481.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-idna-3.7-6.el10_2.noarch.rpm

aarch64:
python3-idna-3.7-6.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/python-idna-3.7-6.el10_2.src.rpm

Related CVEs:

CVE-2026-45409




Description of changes:

[3.7-6]
- Fix CVE-2026-45409: quadratic time complexity in IDNA validation

[3.7-5]
- rpminspect: Disable the unicode inspection



From el-errata at oss.oracle.com  Thu Aug 13 23:27:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Thu, 13 Aug 2026 16:27:47 -0700
Subject: [El-errata] ELSA-2026-54486 Important: Oracle Linux 10 freerdp
 security update
Message-ID: <mailman.145.1786663683.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54486

http://linux.oracle.com/errata/ELSA-2026-54486.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
freerdp-3.10.3-12.el10_2.8.x86_64.rpm
freerdp-devel-3.10.3-12.el10_2.8.x86_64.rpm
freerdp-libs-3.10.3-12.el10_2.8.x86_64.rpm
freerdp-server-3.10.3-12.el10_2.8.x86_64.rpm
libwinpr-3.10.3-12.el10_2.8.x86_64.rpm
libwinpr-devel-3.10.3-12.el10_2.8.x86_64.rpm

aarch64:
freerdp-3.10.3-12.el10_2.8.aarch64.rpm
freerdp-devel-3.10.3-12.el10_2.8.aarch64.rpm
freerdp-libs-3.10.3-12.el10_2.8.aarch64.rpm
freerdp-server-3.10.3-12.el10_2.8.aarch64.rpm
libwinpr-3.10.3-12.el10_2.8.aarch64.rpm
libwinpr-devel-3.10.3-12.el10_2.8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/freerdp-3.10.3-12.el10_2.8.src.rpm

Related CVEs:

CVE-2026-64620
CVE-2026-64621
CVE-2026-64624
CVE-2026-67289
CVE-2026-67299
CVE-2026-68580




Description of changes:

[2:3.10.3-12.8]
- Backport several CVE fixes (CVE-2026-64620, CVE-2026-64621, CVE-2026-64624,
  CVE-2026-67289, CVE-2026-67299, CVE-2026-68580)
  Resolves: RHEL-212621, RHEL-212978, RHEL-213168, RHEL-222783, RHEL-222983,
  Resolves: RHEL-223604



From el-errata at oss.oracle.com  Fri Aug 14 13:06:14 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:14 -0700
Subject: [El-errata] ELSA-2026-36083 Important: Oracle Linux 7
 xorg-x11-server security update
Message-ID: <mailman.148.1786712789.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-36083

http://linux.oracle.com/errata/ELSA-2026-36083.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
xorg-x11-server-Xdmx-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-Xephyr-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-Xnest-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-Xorg-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-Xvfb-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-Xwayland-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-common-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-devel-1.20.4-29.0.9.el7_9.i686.rpm
xorg-x11-server-devel-1.20.4-29.0.9.el7_9.x86_64.rpm
xorg-x11-server-source-1.20.4-29.0.9.el7_9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/xorg-x11-server-1.20.4-29.0.9.el7_9.src.rpm

Related CVEs:

CVE-2026-50256
CVE-2026-50257
CVE-2026-50258
CVE-2026-50259
CVE-2026-50260
CVE-2026-50261
CVE-2026-50262
CVE-2026-50263
CVE-2026-50264




Description of changes:

[1.20.4-29.0.9]
- Security update for CVE-2026-50256 CVE-2026-50257 CVE-2026-50258
  CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262
  CVE-2026-50263 CVE-2026-50264 [Orabug: 39695293]

* Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0.7
- Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 [Orabug: 39440282]

[1.20.4-29.0.5]
- Security update for CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 [Orabug: 38691191]

[1.20.4-29.0.3]
- Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695]

[1.20.4-29.0.1]
- Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596
- CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600
- CVE-2025-26601 [Orabug: 37712847]



From el-errata at oss.oracle.com  Fri Aug 14 13:06:26 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:26 -0700
Subject: [El-errata] ELSA-2026-54509 Important: Oracle Linux 8 bind9.16
 security update
Message-ID: <mailman.149.1786712799.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54509

http://linux.oracle.com/errata/ELSA-2026-54509.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind9.16-9.16.23-0.22.el8_10.12.x86_64.rpm
bind9.16-chroot-9.16.23-0.22.el8_10.12.x86_64.rpm
bind9.16-devel-9.16.23-0.22.el8_10.12.i686.rpm
bind9.16-devel-9.16.23-0.22.el8_10.12.x86_64.rpm
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.12.x86_64.rpm
bind9.16-doc-9.16.23-0.22.el8_10.12.noarch.rpm
bind9.16-libs-9.16.23-0.22.el8_10.12.i686.rpm
bind9.16-libs-9.16.23-0.22.el8_10.12.x86_64.rpm
bind9.16-license-9.16.23-0.22.el8_10.12.noarch.rpm
bind9.16-utils-9.16.23-0.22.el8_10.12.x86_64.rpm
python3-bind9.16-9.16.23-0.22.el8_10.12.noarch.rpm

aarch64:
bind9.16-9.16.23-0.22.el8_10.12.aarch64.rpm
bind9.16-chroot-9.16.23-0.22.el8_10.12.aarch64.rpm
bind9.16-devel-9.16.23-0.22.el8_10.12.aarch64.rpm
bind9.16-dnssec-utils-9.16.23-0.22.el8_10.12.aarch64.rpm
bind9.16-doc-9.16.23-0.22.el8_10.12.noarch.rpm
bind9.16-libs-9.16.23-0.22.el8_10.12.aarch64.rpm
bind9.16-license-9.16.23-0.22.el8_10.12.noarch.rpm
bind9.16-utils-9.16.23-0.22.el8_10.12.aarch64.rpm
python3-bind9.16-9.16.23-0.22.el8_10.12.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/bind9.16-9.16.23-0.22.el8_10.12.src.rpm

Related CVEs:

CVE-2026-10723
CVE-2026-11331
CVE-2026-11622
CVE-2026-11721
CVE-2026-13204
CVE-2026-13321




Description of changes:

[32:9.16.23-0.22.12]
- Fix NSEC3 signer validation (CVE-2026-10723)
- Resolves: RHEL-213499

[32:9.16.23-0.22.11]
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)
- Resolves: RHEL-213313

[32:9.16.23-0.22.10]
- Fix CVE-2026-11622: reference-counted DNS cache slab headers
- Resolves: RHEL-213396

[32:9.16.23-0.22.9]
- Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing
- Add new unit test
- Resolves: RHEL-213406

[32:9.16.23-0.22.8]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
- Add upstream rpz system test
- Resolves: RHEL-213478

[32:9.16.23-0.22.7]
- Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG
- Resolves: RHEL-213478



From el-errata at oss.oracle.com  Fri Aug 14 13:06:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:37 -0700
Subject: [El-errata] ELSA-2026-54487 Important: Oracle Linux 9 freerdp
 security update
Message-ID: <mailman.150.1786712811.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54487

http://linux.oracle.com/errata/ELSA-2026-54487.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
freerdp-2.11.7-7.el9_8.5.x86_64.rpm
freerdp-devel-2.11.7-7.el9_8.5.i686.rpm
freerdp-devel-2.11.7-7.el9_8.5.x86_64.rpm
freerdp-libs-2.11.7-7.el9_8.5.i686.rpm
freerdp-libs-2.11.7-7.el9_8.5.x86_64.rpm
libwinpr-2.11.7-7.el9_8.5.i686.rpm
libwinpr-2.11.7-7.el9_8.5.x86_64.rpm
libwinpr-devel-2.11.7-7.el9_8.5.i686.rpm
libwinpr-devel-2.11.7-7.el9_8.5.x86_64.rpm

aarch64:
freerdp-2.11.7-7.el9_8.5.aarch64.rpm
freerdp-devel-2.11.7-7.el9_8.5.aarch64.rpm
freerdp-libs-2.11.7-7.el9_8.5.aarch64.rpm
libwinpr-2.11.7-7.el9_8.5.aarch64.rpm
libwinpr-devel-2.11.7-7.el9_8.5.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/freerdp-2.11.7-7.el9_8.5.src.rpm

Related CVEs:

CVE-2026-64624
CVE-2026-67289
CVE-2026-67299
CVE-2026-68580




Description of changes:

[2:2.11.7-7.5]
- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605



From el-errata at oss.oracle.com  Fri Aug 14 13:06:39 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:39 -0700
Subject: [El-errata] ELSA-2026-54510 Important: Oracle Linux 9 bind security
 update
Message-ID: <mailman.151.1786712814.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54510

http://linux.oracle.com/errata/ELSA-2026-54510.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind-9.16.23-40.0.1.el9_8.8.x86_64.rpm
bind-chroot-9.16.23-40.0.1.el9_8.8.x86_64.rpm
bind-devel-9.16.23-40.0.1.el9_8.8.i686.rpm
bind-devel-9.16.23-40.0.1.el9_8.8.x86_64.rpm
bind-dnssec-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-dnssec-utils-9.16.23-40.0.1.el9_8.8.x86_64.rpm
bind-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-libs-9.16.23-40.0.1.el9_8.8.i686.rpm
bind-libs-9.16.23-40.0.1.el9_8.8.x86_64.rpm
bind-license-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-utils-9.16.23-40.0.1.el9_8.8.x86_64.rpm
python3-bind-9.16.23-40.0.1.el9_8.8.noarch.rpm

aarch64:
bind-9.16.23-40.0.1.el9_8.8.aarch64.rpm
bind-chroot-9.16.23-40.0.1.el9_8.8.aarch64.rpm
bind-devel-9.16.23-40.0.1.el9_8.8.aarch64.rpm
bind-dnssec-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-dnssec-utils-9.16.23-40.0.1.el9_8.8.aarch64.rpm
bind-doc-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-libs-9.16.23-40.0.1.el9_8.8.aarch64.rpm
bind-license-9.16.23-40.0.1.el9_8.8.noarch.rpm
bind-utils-9.16.23-40.0.1.el9_8.8.aarch64.rpm
python3-bind-9.16.23-40.0.1.el9_8.8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/bind-9.16.23-40.0.1.el9_8.8.src.rpm

Related CVEs:

CVE-2026-10723
CVE-2026-11331
CVE-2026-11622
CVE-2026-11721
CVE-2026-13204
CVE-2026-13321




Description of changes:

[9.16.23-40.0.1.el9_8.8]
- Fix warning when changing device file permissions [Orabug: 36518580]

[32:9.16.23-40.8]
- Fix NSEC3 signer validation (CVE-2026-10723)

[32:9.16.23-40.7]
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names

[32:9.16.23-40.6]
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)

[32:9.16.23-40.5]
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
  (CVE-2026-13204)

[32:9.16.23-40.4]
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)

[32:9.16.23-40.3]
- Prevent cache memory exhaustion under sustained attack
  (CVE-2026-11622, RHEL-213397)

[32:9.16.23-40.2]
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

[32:9.16.23-40.1]
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)



From el-errata at oss.oracle.com  Fri Aug 14 13:06:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:43 -0700
Subject: [El-errata] ELSA-2026-54662 Moderate: Oracle Linux 9 nghttp2
 security update
Message-ID: <mailman.152.1786712816.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54662

http://linux.oracle.com/errata/ELSA-2026-54662.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libnghttp2-1.43.0-6.el9_8.2.i686.rpm
libnghttp2-1.43.0-6.el9_8.2.x86_64.rpm
libnghttp2-devel-1.43.0-6.el9_8.2.i686.rpm
libnghttp2-devel-1.43.0-6.el9_8.2.x86_64.rpm
nghttp2-1.43.0-6.el9_8.2.x86_64.rpm

aarch64:
libnghttp2-1.43.0-6.el9_8.2.aarch64.rpm
libnghttp2-devel-1.43.0-6.el9_8.2.aarch64.rpm
nghttp2-1.43.0-6.el9_8.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/nghttp2-1.43.0-6.el9_8.2.src.rpm

Related CVEs:

CVE-2026-58055




Description of changes:

[1.43.0-6.2]
- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)



From el-errata at oss.oracle.com  Fri Aug 14 13:06:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:51 -0700
Subject: [El-errata] ELBA-2026-500163 Oracle Linux 9 Unbreakable Enterprise
 kernel bug fix update
Message-ID: <mailman.153.1786712827.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500163

http://linux.oracle.com/errata/ELBA-2026-500163.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-core-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-debug-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-debug-core-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-debug-devel-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-debug-modules-extra-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-devel-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-doc-5.15.0-323.211.3.3.el9uek.noarch.rpm
kernel-uek-modules-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-modules-extra-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-container-5.15.0-323.211.3.3.el9uek.x86_64.rpm
kernel-uek-container-debug-5.15.0-323.211.3.3.el9uek.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-uek-5.15.0-323.211.3.3.el9uek.src.rpm



Description of changes:

[5.15.0-323.211.3.3]
- Revert "x86/alternatives: Add alt_instr.flags" (Harshit Mogalapalli)  [Orabug: 39853924]

[5.15.0-323.211.3.2]
- ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Hans de Goede)  [Orabug: 39848333]
- KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack)  [Orabug: 39848194]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson)  [Orabug: 39848194]  {CVE-2026-64561}
- KVM: x86/mmu: Rename __direct_map() to direct_map() (David Matlack)  [Orabug: 39848194]
- KVM: x86/mmu: Split out TDP MMU page fault handling (David Matlack)  [Orabug: 39848194]
- KVM: Rename mmu_notifier_* to mmu_invalidate_* (Chao Peng)  [Orabug: 39848194]
- KVM: x86/mmu: Document the "rules" for using host_pfn_mapping_level() (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Rename pte_list_{destroy,remove}() to show they zap SPTEs (Sean Christopherson)  [Orabug: 39848194]
- KVM: x86/mmu: Directly "destroy" PTE list when recycling rmaps (Sean Christopherson)  [Orabug: 39848194]
- x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD))  [Orabug: 39849605]  {CVE-2026-68480}
- x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner)  [Orabug: 39849605]
- x86/alternative: Support relocations in alternatives (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternative: Make debug-alternative selective (Peter Zijlstra)  [Orabug: 39849605]
- x86/alternatives: Add alt_instr.flags (Borislav Petkov (AMD))  [Orabug: 39849605]
- x86/asm: Provide ALTERNATIVE_3 (Peter Zijlstra)  [Orabug: 39849605]
- net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang)  [Orabug: 39848314]

[5.15.0-323.211.3.1]
- net: openvswitch: reject oversized nested action attrs (Asim Viladi Oglu Manizada)  [Orabug: 39816016]  {CVE-2026-64531}
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong)  [Orabug: 39816098]  {CVE-2026-64600}

[5.15.0-323.211.3]
- LTS version: v5.15.211 (Vijayendra Suman)
- dlm: prevent NPD when writing a positive value to event_done (Thadeu Lima de Souza Cascardo) [Orabug: 37844553] {CVE-2025-23131}
- crypto: qat - remove unused character device and IOCTLs (Giovanni Cabiddu) [Orabug: 39786549] {CVE-2026-64529}
- crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Herbert Xu)
- crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Thorsten Blum)
- Documentation: ioctl-number: Extend "Include File" column width (Bagas Sanjaya)
- ksmbd: reject non-VALID session in compound request branch (Gil Portnoy)
- fuse: re-lock request before replacing page cache folio (Joanne Koong) [Orabug: 39753883] {CVE-2026-53388}
- net: phonet: free phonet_device after RCU grace period (Santosh Kalluri) [Orabug: 39637380] {CVE-2026-53157}
- phonet: Pass net and ifindex to phonet_address_notify(). (Kuniyuki Iwashima)
- phonet: Pass ifindex to fill_addr(). (Kuniyuki Iwashima)
- Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (Dexuan Cui)
- misc: fastrpc: Fix NULL pointer dereference in rpmsg callback (Mukesh Ojha)
- misc: fastrpc: Add dma_mask to fastrpc_channel_ctx (Abel Vesa)
- hv: utils: handle and propagate errors in kvp_register (Thorsten Blum)
- mptcp: fix missing wakeups in edge scenarios (Paolo Abeni)
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (Michael Bommarito) [Orabug: 39753890] {CVE-2026-53391}
- nfsd: check get_user() return when reading princhashlen (Dominik Wo?niak)
- nfsd: fix posix_acl leak on SETACL decode failure (Jeff Layton) [Orabug: 39753905] {CVE-2026-53397}
- NFSD: Fix SECINFO_NO_NAME decode error cleanup (Guannan Wang) [Orabug: 39753909] {CVE-2026-53398}
- fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode (Steffen Persvold)
- fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (Ian Bridges) [Orabug: 39753928] {CVE-2026-53403}
- power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() (Xu Wang)
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (Ashutosh Desai) [Orabug: 39753936] {CVE-2026-63794}
- ocfs2: reject oversized group bitmap descriptors (Zhang Cen) [Orabug: 39753942] {CVE-2026-63796}
- fpga: region: fix use-after-free in child_regions_with_firmware() (Xu Wang)
- irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove (Qingshuang Fu)
- pNFS: Fix use-after-free in pnfs_update_layout() (Xu Wang) [Orabug: 39753953] {CVE-2026-63800}
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Doruk Tan Ozturk) [Orabug: 39753957] {CVE-2026-63801}
- hdlc_ppp: sync per-proto timers before freeing hdlc state (Fan Wu) [Orabug: 39753963] {CVE-2026-63803}
- exfat: fix potential use-after-free in exfat_find_dir_entry() (Michael Bommarito) [Orabug: 39753979] {CVE-2026-63808}
- MIPS: DEC: Prevent initial console buffer from landing in XKPHYS (Maciej W. Rozycki)
- bpf: use kvfree() for replaced sysctl write buffer (Dawei Feng) [Orabug: 39753982] {CVE-2026-63809}
- f2fs: validate ACL entry sizes in f2fs_acl_from_disk() (Zhang Cen)
- wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor (Bitterblue Smith)
- wifi: ath11k: fix warning when unbinding (Jose Ignacio Tornos Martinez) [Orabug: 39754021] {CVE-2026-63822}
- wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S (Zenm Chen)
- keys: Pin request_key_auth payload in instantiate paths (Shaomin Chen) [Orabug: 39754024] {CVE-2026-63823}
- KEYS: fix overflow in keyctl_pkey_params_get_2() (Jarkko Sakkinen) [Orabug: 39754028] {CVE-2026-63824}
- mac802154: llsec: add skb_cow_data() before in-place crypto (Doruk Tan Ozturk) [Orabug: 39754053] {CVE-2026-63831}
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [Orabug: 38503789] {CVE-2025-39931}
- ext4: add bounds check for inline data length in ext4_read_inline_page (Yuto Ohnuki)
- ntfs3: reject direct userspace writes to reserved $LX* xattrs (Konstantin Komarov)
- ring-buffer: Remove ring_buffer_read_prepare_sync() (Bjoern Doebel)
- batman-adv: tvlv: avoid race of cifsnotfound handler state (Sven Eckelmann)
- batman-adv: tvlv: enforce 2-byte alignment (Sven Eckelmann)
- batman-adv: dat: prevent false sharing between VLANs (Sven Eckelmann)
- batman-adv: tt: track roam count per VID (Sven Eckelmann)
- batman-adv: tt: don't merge change entries with different VIDs (Sven Eckelmann)
- batman-adv: tp_meter: handle overlapping packets (Sven Eckelmann)
- batman-adv: tp_meter: prevent parallel modifications of last_recv (Sven Eckelmann)
- batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: restrict number of unacked list entries (Sven Eckelmann) [Orabug: 39754066] {CVE-2026-63834}
- batman-adv: v: prevent OGM aggregation on disabled hardif (Sven Eckelmann) [Orabug: 39754070] {CVE-2026-63835}
- batman-adv: frag: avoid underflow of TTL (Sven Eckelmann)
- batman-adv: frag: ensure fragment is writable before modifying TTL (Sven Eckelmann)
- batman-adv: fix (m|b)cast csum after decrementing TTL (Sven Eckelmann)
- batman-adv: ensure bcast is writable before modifying TTL (Sven Eckelmann)
- batman-adv: tp_meter: initialize last_recv_time during init (Sven Eckelmann)
- batman-adv: prevent ELP transmission interval underflow (Sven Eckelmann)
- batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE (Sven Eckelmann)
- batman-adv: tp_meter: add only finished tp_vars to lists (Sven Eckelmann)
- batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection (Sven Eckelmann)
- batman-adv: tp_meter: fix fast recovery precondition (Sven Eckelmann)
- batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd (Sven Eckelmann) [Orabug: 39754076] {CVE-2026-63836}
- batman-adv: tp_meter: avoid window underflow (Sven Eckelmann)
- batman-adv: tp_meter: initialize dec_cwnd explicitly (Sven Eckelmann)
- batman-adv: tp_meter: initialize dup_acks explicitly (Sven Eckelmann)
- batman-adv: tp_meter: keep unacked list in ascending ordered (Sven Eckelmann)
- kselftest/arm64: signal: Skip SVE signal test if not enough VLs supported (Yijia Wang)
- Revert "ptp: add testptp mask test" (Petr Machata)
- Revert "selftest/ptp: update ptp selftest to exercise the gettimex options" (Petr Machata)
- virtiofs: fix UAF on submount umount (Miklos Szeredi) [Orabug: 39753856] {CVE-2026-53381}
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si (Ruslan Valiyev)
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (Yi Yang) [Orabug: 39753871] {CVE-2026-53385}
- regulator: core: fix locking in regulator_resolve_supply() error path (Andr? Draszik) [Orabug: 39489558] {CVE-2026-46252}
- af_unix: Reject SIOCATMARK on non-stream sockets (Jiexun Wang) [Orabug: 39619334] {CVE-2026-52928}
- xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman)
- agp/amd64: Fix broken error propagation in agp_amd64_probe() (Mingyu Wang) [Orabug: 39662073] {CVE-2026-53325}
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() (Weiming Shi)
- i2c: stub: Reject I2C block transfers with invalid length (Weiming Shi) [Orabug: 39760892] {CVE-2026-64191}
- RDMA/bnxt_re: zero shared page before exposing to userspace (Lord Ulf Henrik Holmberg)
- iio: light: bh1780: fix PM runtime leak on error path (Antoniu Miclaus)
- batman-adv: tt: prevent TVLV entry number overflow (Sven Eckelmann)
- batman-adv: tt: reject oversized local TVLV buffers (Sven Eckelmann)
- drm/v3d: Skip CSD when it has zeroed workgroups (Ma?ra Canal)
- drm/v3d: Store the active job inside the queue's state (Ma?ra Canal)
- ip6_vti: set netns_immutable on the fallback device. (Eric Dumazet) [Orabug: 39589885] {CVE-2026-52909}
- drm/amd/display: Bound VBIOS record-chain walk loops (Harry Wentland) [Orabug: 39637312] {CVE-2026-53138}
- fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios (Jann Horn) [Orabug: 39637410] {CVE-2026-53167}
- LTS version: v5.15.210 (Vijayendra Suman)
- netfilter: require Ethernet MAC header before using eth_hdr() (Zhengchuan Liang) [Orabug: 39637279] {CVE-2026-53131}
- batman-adv: tp_meter: avoid role confusion in tp_list (Sven Eckelmann)
- batman-adv: tp_meter: fix race condition in send error reporting (Sven Eckelmann)
- ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops (Ali Ganiyev)
- Bluetooth: MGMT: Fix backward compatibility with userspace (Luiz Augusto von Dentz)
- media: rc: igorplugusb: fix control request setup packet (Henri A) [Orabug: 39785220] {CVE-2026-64240}
- batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982] {CVE-2026-64092}
- media: rc: ttusbir: fix inverted error logic (Oliver Neukum)
- apparmor: validate default DFA states are in bounds (Ben Hutchings)
- fbdev: vt8500lcdfb: Fix dma_free_coherent() cpu_addr parameter (Ben Hutchings)
- mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] {CVE-2026-63867}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Will Deacon)
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Shanker Donthineni)
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39674327] {CVE-2026-53354}
- arm64: cputype: Add NVIDIA Olympus definitions (Shanker Donthineni)
- selinux: enable genfscon labeling for securityfs (Christian G?ttsche)
- ALSA: hda/hdmi: Add quirk for TUXEDO IBS14G6 (Aaron Erhardt)
- ksmbd: Compare MACs in constant time (Eric Biggers)
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Pengpeng Hou) [Orabug: 39343685] {CVE-2026-43341}
- batman-adv: tp_meter: fix tp_num leak on kmalloc failure (Sven Eckelmann)
- batman-adv: stop tp_meter sessions during mesh teardown (Jiexun Wang) [Orabug: 39460622] {CVE-2026-46208}
- blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init (Tejun Heo)
- ipvs: skip ipv6 extension headers for csum checks (Julian Anastasov) [Orabug: 39451541] {CVE-2026-45850}
- mm/huge_memory: update file PMD counter before folio_put() (Yin Tirui) [Orabug: 39637477] {CVE-2026-53189}
- RDMA/umem: Fix truncation for block sizes >= 4G (Jason Gunthorpe)
- RDMA: Move DMA block iterator logic into dedicated files (Leon Romanovsky)
- RDMA/umem: fix kernel-doc warnings (Randy Dunlap)
- hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf (Anton Leontev) [Orabug: 39637516] {CVE-2026-53199}
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Davide Ornaghi) [Orabug: 39637292] {CVE-2026-53134}
- serial: qcom-geni: fix UART_RX_PAR_EN bit position (Prasanna S)
- tty: serial: qcom-geni-serial: align #define values (Bartosz Golaszewski)
- tty: serial: qcom-geni-serial: remove unused symbols (Bartosz Golaszewski)
- serial: altera_jtaguart: handle uart_add_one_port() failures (Myeonghun Pak)
- serial: altera_jtaguart: Use platform_get_irq_optional() to get the interrupt (Lad Prabhakar)
- drm/hyperv: validate resolution_count and fix WIN8 fallback (Berkant Koc) [Orabug: 39786537] {CVE-2026-64524}
- drm/hyperv: Remove support for Hyper-V 2008 and 2008R2/Win7 (Michael Kelley)
- usb: typec: ucsi: Check if power role change actually happened before handling (Myrrh Periwinkle)
- thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (Michael Bommarito) [Orabug: 39754211] {CVE-2026-63891}
- usb: gadget: f_hid: fix device reference leak in hidg_alloc() (Guangshuo Li)
- usb: gadget: f_hid: tidy error handling in hidg_alloc (John Keeping)
- usb: dwc3: xilinx: fix error handling in zynqmp init error paths (Radhey Shyam Pandey)
- tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (Tudor Ambarus) [Orabug: 39786545] {CVE-2026-64528}
- tty: serial: samsung: use u32 for register interactions (Tudor Ambarus)
- serial: samsung_tty: Use port lock wrappers (Thomas Gleixner)
- usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure (Peter Chen)
- iio: dac: ad5686: fix ref bit initialization for single-channel parts (Rodrigo Alencar)
- iio: chemical: scd30: fix division by zero in write_raw (Antoniu Miclaus)
- iio: chemical: scd30: Use guard(mutex) to allow early returns (Jonathan Cameron)
- iio: gyro: adis16260: fix division by zero in write_raw (Antoniu Miclaus)
- Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (Siwei Zhang) [Orabug: 39681273] {CVE-2026-53358}
- phy: tegra: xusb: Fix per-pad high-speed termination calibration (Wayne Chang)
- phy: tegra: xusb: Disable trk clk when not in use (Wayne Chang)
- arm64: tlb: Flush walk cache when unsharing PMD tables (Zeng Heng) [Orabug: 39755010] {CVE-2026-63875}
- spi: qup: fix error pointer deref after DMA setup failure (Johan Hovold) [Orabug: 39754942] {CVE-2026-64170}
- spi: qup: switch to use modern name (Yang Yingliang)
- octeontx2-pf: avoid double free of pool->stack on AQ init failure (Dawei Feng)
- octeontx2-af: CGX: add bounds check to cgx_speed_mbps index (Sam Daly)
- mptcp: do not drop partial packets (Shardul Bankar)
- selftests: mptcp: drop nanoseconds width specifier (Matthieu Baerts)
- mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient (Li Xiasong)
- use less confusing names for iov_iter direction initializers (Al Viro)
- ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (Justin Iurman) [Orabug: 39754825] {CVE-2026-64116}
- ipv6/addrconf: annotate data-races around devconf fields (II) (Eric Dumazet)
- ice: fix VF queue configuration with low MTU values (Jose Ignacio Tornos Martinez)
- net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840] {CVE-2026-64123}
- Bluetooth: serialize accept_q access (Jiexun Wang) [Orabug: 39619283] {CVE-2026-52918}
- Bluetooth: Init sk_peer_* on bt_sock_alloc (Luiz Augusto von Dentz)
- Bluetooth: Consolidate code around sk_alloc into a helper function (Luiz Augusto von Dentz)
- qed: fix double free in qed_cxt_tables_alloc() (Dawei Feng) [Orabug: 39754830] {CVE-2026-64118}
- Bluetooth: MGMT: validate Add Extended Advertising Data length (Michael Bommarito) [Orabug: 39754849] {CVE-2026-64126}
- Bluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2 (Luiz Augusto von Dentz)
- Bluetooth: hci_qca: Convert timeout from jiffies to ms (Shuai Zhang)
- Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (Safa Karaku?) [Orabug: 39681270] {CVE-2026-53357}
- smb: client: require net admin for CIFS SWN netlink (Michael Bommarito)
- genetlink: Use internal flags for multicast groups (Ido Schimmel)
- spi: lantiq-ssc: fix controller deregistration (Johan Hovold)
- spi: st-ssc4: fix controller deregistration (Johan Hovold)
- f2fs: fix false alarm of lockdep on cp_global_sem lock (Chao Yu)
- f2fs: fix incorrect file address mapping when inline inode is unwritten (Yongpeng Yang)
- mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker (Matthieu Baerts)
- mptcp: pm: ADD_ADDR rtx: fix potential data-race (Matthieu Baerts) [Orabug: 39460320] {CVE-2026-46137}
- mptcp: pm: prio: skip closed subflows (Matthieu Baerts)
- smb: client: Use FullSessionKey for AES-256 encryption key derivation (Piyush Sachdeva)
- btrfs: fix missing last_unlink_trans update when removing a directory (Filipe Manana) [Orabug: 39460410] {CVE-2026-46160}
- smb: client: validate dacloffset before building DACL pointers (Michael Bommarito)
- pmdomain: core: Fix detach procedure for virtual devices in genpd (Ulf Hansson) [Orabug: 39524579] {CVE-2026-46292}
- tracing/probes: Limit size of event probe to 3K (Steven Rostedt)
- btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (Yochai Eisenrich) [Orabug: 39460405] {CVE-2026-46159}
- spi: topcliff-pch: fix controller deregistration (Johan Hovold)
- spi: topcliff-pch: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- fbcon: Avoid OOB font access if console rotation fails (Thomas Zimmermann) [Orabug: 39460548] {CVE-2026-46191}
- mm/hugetlb_cma: round up per_node before logging it (Sang-Heon Jeon)
- spi: uniphier: fix controller deregistration (Johan Hovold)
- spi: tegra20-sflash: fix controller deregistration (Johan Hovold)
- spi: tegra114: fix controller deregistration (Johan Hovold)
- spi: sun6i: fix controller deregistration (Johan Hovold)
- spi: zynq-qspi: fix controller deregistration (Johan Hovold)
- spi: ti-qspi: fix controller deregistration (Johan Hovold)
- spi: spi-ti-qspi: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- spi: sun4i: fix controller deregistration (Johan Hovold)
- spi: syncuacer: fix controller deregistration (Johan Hovold)
- xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] {CVE-2026-46193}
- net: ipv6: stop checking crypto_ahash_alignmask (Eric Biggers)
- net: ipv4: stop checking crypto_ahash_alignmask (Eric Biggers)
- usb: dwc3: Move GUID programming after PHY initialization (Selvarasu Ganesan)
- wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (Marek Szyprowski) [Orabug: 39460504] {CVE-2026-46180}
- usb: typec: tcpm: reset internal port states on soft reset AMS (Amit Sunil Dhamne)
- smb: client: validate the whole DACL before rewriting it in cifsacl (Michael Bommarito)
- tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (David Carlier) [Orabug: 39460568] {CVE-2026-46196}
- crypto: caam - guard HMAC key hex dumps in hash_digest_key (Thorsten Blum)
- printk: add print_hex_dump_devel() (Thorsten Blum)
- ALSA: aloop: Fix peer runtime UAF during format-change stop (C?ssio Gabriel) [Orabug: 39452424] {CVE-2026-46090}
- ceph: only d_add() negative dentries when they are unhashed (Max Kellermann) [Orabug: 39452292] {CVE-2026-46052}
- erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() (Junrui Luo)
- can: ucan: fix devres lifetime (Johan Hovold)
- can: ucan: fix typos in comments (Julia Lawall)
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (Shuvam Pandey) [Orabug: 39452305] {CVE-2026-46056}
- hfsplus: fix held lock freed on hfsplus_fill_super() (Zilin Guan)
- hfsplus: fix uninit-value by validating catalog record size (Deepanshu Kartikey)
- udf: fix partition descriptor append bookkeeping (Seohyeon Maeng) [Orabug: 39452078] {CVE-2026-45991}
- mtd: spi-nor: sst: Fix write enable before AAI sequence (Sanjaikumar V S)
- mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration (Shawn Lin)
- randomize_kstack: Maintain kstack_offset per task (Ryan Roberts)
- fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info (Thomas Zimmermann) [Orabug: 39452332] {CVE-2026-46065}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Zhengchuan Liang) [Orabug: 39452412] {CVE-2026-46086}
- net: qrtr: ns: Limit the total number of nodes (Manivannan Sadhasivam) [Orabug: 39452124] {CVE-2026-46003}
- net: mctp: fix don't require received header reserved bits to be zero (Yuanzhaoming)
- net: qrtr: ns: Free the node during ctrl_cmd_bye() (Manivannan Sadhasivam) [Orabug: 39452247] {CVE-2026-46038}
- net: qrtr: ns: Change servers radix tree to xarray (Vignesh Viswanathan)
- net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208] {CVE-2026-46026}
- ALSA: core: Fix potential data race at fasync handling (Takashi Iwai)
- sched: Use u64 for bandwidth ratio calculations (Joseph Salisbury)
- media: rc: igorplugusb: heed coherency rules (Oliver Neukum) [Orabug: 39452433] {CVE-2026-46091}
- erofs: fix the out-of-bounds nameoff handling for trailing dirents (Gao Xiang)
- ALSA: aoa: Skip devices with no codecs in i2sbus_resume() (Thorsten Blum)
- media: rc: ttusbir: respect DMA coherency rules (Oliver Neukum)
- ALSA: aoa: i2sbus: clear stale prepared state (C?ssio Gabriel)
- ALSA: aoa: Use guard() for mutex locks (Takashi Iwai)
- wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] {CVE-2026-46069}
- thermal: core: Fix thermal zone governor cleanup issues (Rafael J. Wysocki) [Orabug: 39452187] {CVE-2026-46021}
- wifi: rtw88: check for PCI upstream bridge existence (Fedor Pchelkin) [Orabug: 39452438] {CVE-2026-46092}
- rtw88: 8821ce: Disable PCIe ASPM L1 for 8821CE using chip ID (Jimmy Hon)
- arm64/mm: Enable batched TLB flush in unmap_hotplug_range() (Anshuman Khandual)
- net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() (Bingquan Chen) [Orabug: 39300581] {CVE-2026-31700}
- ksmbd: require minimum ACE size in smb_check_perm_dacl() (Michael Bommarito)
- smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (Michael Bommarito)
- smb: client: require a full NFS mode SID before reading mode bits (Michael Bommarito)
- smb: server: fix max_connections off-by-one in tcp accept path (Daemyung Kang)
- smb: server: fix active_num_conn leak on transport allocation failure (Michael Bommarito)
- f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() (Yongpeng Yang)
- f2fs: fix to do sanity check on dcc->discard_cmd_cnt conditionally (Chao Yu)
- lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (Lukas Wunner)
- net/tcp-md5: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 39343806] {CVE-2026-43383}
- io_uring/poll: fix signed comparison in io_poll_get_ownership() (Longxuan Yu) [Orabug: 39619351] {CVE-2026-52933}
- mm/damon/ops-common: call folio_test_lru() after folio_get() (Seongjae Park)
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (Mingyu Wang) [Orabug: 39655978] {CVE-2026-52946}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (Harry Wentland) [Orabug: 39674253] {CVE-2026-53329}
- drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs (Harry Wentland) [Orabug: 39637296] {CVE-2026-53135}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (Harry Wentland) [Orabug: 39637301] {CVE-2026-53136}
- drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size (Harry Wentland)
- slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock (Bjorn Andersson)
- thunderbolt: Limit XDomain response copy to actual frame size (Michael Bommarito) [Orabug: 39637337] {CVE-2026-53146}
- thunderbolt: Clamp XDomain response data copy to allocation size (Michael Bommarito) [Orabug: 39637346] {CVE-2026-53148}
- thunderbolt: Bound root directory content to block size (Michael Bommarito) [Orabug: 39637351] {CVE-2026-53149}
- thunderbolt: Reject zero-length property entries in validator (Michael Bommarito) [Orabug: 39637356] {CVE-2026-53150}
- sctp: stream: fully roll back denied add-stream state (Wyatt Feng) [Orabug: 39619338] {CVE-2026-52929}
- sctp: diag: reject stale associations in dump_one path (Zhao Zhang) [Orabug: 39619278] {CVE-2026-52917}
- mmc: sdhci: add signal voltage switch in sdhci_resume_host (Jisheng Zhang)
- mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC (Lad Prabhakar)
- mmc: core: Fix host controller programming for fixed driver type (Kamal Dasu)
- net: mv643xx: fix OF node refcount (Bartosz Golaszewski)
- net: bonding: fix NULL pointer dereference in bond_do_ioctl() (Zhaojinming) [Orabug: 39674284] {CVE-2026-53337}
- misc: fastrpc: fix DMA address corruption due to find_vma misuse (Junrui Luo)
- misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context (Anandu Krishnan E)
- ipc/shm: serialize orphan cleanup with shm_nattch updates (Yilin Zhu) [Orabug: 39619342] {CVE-2026-52930}
- Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard (Cryolitia Pukngae)
- Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK) (Zeyu Wang)
- i2c: tegra: Fix NOIRQ suspend/resume (Akhil R)
- i2c: stm32f7: fix timing computation ignoring i2c-analog-filter (Guillermo Rodr?guez)
- i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() (Vladimir Zapolskiy)
- fuse: reject fuse_notify() pagecache ops on directories (Jann Horn) [Orabug: 39637414] {CVE-2026-53168}
- pidfd: refuse access to tasks that have started exiting harder (Christian Brauner)
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (Michael Bommarito) [Orabug: 39637428] {CVE-2026-53176}
- bnxt_en: Fix NULL pointer dereference (Kyle Meyer) [Orabug: 39637432] {CVE-2026-53177}
- vsock/vmci: fix sk_ack_backlog leak on failed handshake (Raf Dickson) [Orabug: 39637447] {CVE-2026-53181}
- mptcp: sockopt: check timestamping ret value (Matthieu Baerts)
- mptcp: fix retransmission loop when csum is enabled (Paolo Abeni)
- ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O (Karl Mehltretter)
- ARM: socfpga: Fix OF node refcount leak in SMP setup (Yuho Choi)
- RDMA/srp: bound SRP_RSP sense copy by the received length (Michael Bommarito) [Orabug: 39637467] {CVE-2026-53186}
- drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() (Harry Wentland)
- ALSA: timer: Fix UAF at snd_timer_user_params() (Takashi Iwai) [Orabug: 39637489] {CVE-2026-53192}
- USB: serial: kl5kusb105: fix bulk-out buffer overflow (Hyeongjun An) [Orabug: 39637496] {CVE-2026-53194}
- USB: serial: option: add usb-id for Dell Wireless DW5826e-m (Jack Wu)
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Adrian Korwel) [Orabug: 39637502] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Adrian Korwel) [Orabug: 39637506] {CVE-2026-53196}
- xfrm: espintcp: do not reuse an in-progress partial send (Wyatt Feng)
- drm/i915/gem: Fix phys BO pread/pwrite with offset (Joonas Lahtinen) [Orabug: 39674335] {CVE-2026-53356}
- Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig (Michael Bommarito) [Orabug: 39637545] {CVE-2026-53208}
- netfilter: nft_tunnel: fix use-after-free on object destroy (Tristan Madani) [Orabug: 39637555] {CVE-2026-53212}
- drm/vc4: fix krealloc() memory leak (Alexander A. Klimov) [Orabug: 39637561] {CVE-2026-53213}
- net: mvpp2: build skb from XDP-adjusted data on XDP_PASS (Til Kaiser)
- net: mvpp2: refill RX buffers before XDP or skb use (Til Kaiser) [Orabug: 39637568] {CVE-2026-53215}
- net: mvpp2: Add metadata support for xdp mode (Lorenzo Bianconi)
- net: mvpp2: limit XDP frame size to the RX buffer (Til Kaiser) [Orabug: 39637571] {CVE-2026-53216}
- net: mvpp2: sync RX data at the hardware packet offset (Til Kaiser) [Orabug: 39637575] {CVE-2026-53217}
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [Orabug: 39637578] {CVE-2026-53218}
- netfilter: nf_log: validate MAC header was set before dumping it (Xiang Mei) [Orabug: 39619384] {CVE-2026-52942}
- netfilter: x_tables: avoid leaking percpu counter pointers (Kyle Zeng) [Orabug: 39637582] {CVE-2026-53219}
- ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() (Eric Dumazet) [Orabug: 39637592] {CVE-2026-53221}
- net: guard timestamp cmsgs to real error queue skbs (Kyle Zeng) [Orabug: 39637599] {CVE-2026-53223}
- sctp: fix uninit-value in __sctp_rcv_asconf_lookup() (Michael Bommarito) [Orabug: 39637609] {CVE-2026-53225}
- net: openvswitch: fix possible kfree_skb of ERR_PTR (Adrian Moreno) [Orabug: 39637618] {CVE-2026-53227}
- ipv6: sit: reload inner IPv6 header after GSO offloads (Kyle Zeng) [Orabug: 39637622] {CVE-2026-53228}
- net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Mingyu Wang) [Orabug: 39621562] {CVE-2026-52947}
- netlabel: validate unlabeled address and mask attribute lengths (Chenguang Zhao) [Orabug: 39637662] {CVE-2026-53238}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sanghyun Park) [Orabug: 39637666] {CVE-2026-53239}
- arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI (Mark Rutland)
- KVM: arm64: Remove VPIPT I-cache handling (Marc Zyngier)
- nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton) [Orabug: 37844165] {CVE-2025-22026}
- fs/ntfs3: Return error for inconsistent extended attributes (Edward Lo)
- ext4: validate p_idx bounds in ext4_ext_correct_indexes (Tejas Bharambe) [Orabug: 39250744] {CVE-2026-31449}
- time: Fix off-by-one in settimeofday() usec validation (Naveen Kumar Chaudhary)
- signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() (Aleksandr Nogikh) [Orabug: 39674319] {CVE-2026-53352}
- sctp: purge outqueue on stale COOKIE-ECHO handling (Xin Long) [Orabug: 39619311] {CVE-2026-52924}
- net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr (Yizhou Zhao) [Orabug: 39637680] {CVE-2026-53245}
- ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() (Eric Dumazet) [Orabug: 39754155] {CVE-2026-63870}
- ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options (Eric Dumazet) [Orabug: 39637694] {CVE-2026-53249}
- Bluetooth: fix memory leak in error path of hci_alloc_dev() (Bharath Reddy) [Orabug: 39785002] {CVE-2026-53252}
- Bluetooth: bnep: reject short frames before parsing (Zhang Cen) [Orabug: 39637706] {CVE-2026-53253}
- Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling (Dudu Lu)
- Bluetooth: RFCOMM: validate skb length in MCC handlers (Seungju Cheon) [Orabug: 39637711] {CVE-2026-53254}
- Bluetooth: MGMT: validate advertising TLV before type checks (Zhang Cen) [Orabug: 39637716] {CVE-2026-53255}
- Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (Zhang Cen) [Orabug: 39637720] {CVE-2026-53256}
- net: lan743x: permit VLAN-tagged packets up to configured MTU (David Thompson)
- net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (Yizhou Zhao) [Orabug: 39754149] {CVE-2026-63868}
- pcnet32: stop holding device spin lock during napi_complete_done (Oscar Maes)
- drm/imx: Fix three kernel-doc warnings in dcss-scaler.c (Yicong Hui)
- 6lowpan: fix off-by-one in multicast context address compression (Yizhou Zhao) [Orabug: 39637741] {CVE-2026-53263}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (Jamal Hadi Salim) [Orabug: 39637748] {CVE-2026-53264}
- dm cache policy smq: check allocation under invalidate lock (Guangshuo Li) [Orabug: 39784967] {CVE-2026-53265}
- netfilter: bridge: make ebt_snat ARP rewrite writable (Yiming Qian) [Orabug: 39637753] {CVE-2026-53266}
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [Orabug: 39637763] {CVE-2026-53268}
- netfilter: synproxy: add mutex to guard hook reference counting (Fernando Fernandez Mancera) [Orabug: 39637768] {CVE-2026-53269}
- ipvs: clear the svc scheduler ptr early on edit (Julian Anastasov) [Orabug: 39637772] {CVE-2026-53270}
- netfilter: xt_NFQUEUE: prefer raw_smp_processor_id (Fernando Fernandez Mancera)
- tee: optee: prevent use-after-free when the client exits before the supplicant (Amirreza Zarrabi) [Orabug: 39637782] {CVE-2026-53273}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Ido Schimmel) [Orabug: 39637790] {CVE-2026-53275}
- i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl (Mingyu Wang) [Orabug: 39621568] {CVE-2026-52948}
- Disable -Wattribute-alias for clang-23 and newer (Nathan Chancellor)
- compiler-clang.h: Add __diag infrastructure for clang (Nathan Chancellor)
- USB: serial: mct_u232: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754236] {CVE-2026-63898}
- bpf: Free reuseport cBPF prog after RCU grace period. (Kuniyuki Iwashima) [Orabug: 39589889] {CVE-2026-52910}
- usb: core: Fix SuperSpeed root hub wMaxPacketSize (Micha? Pecio)
- serial: dz: Fix bootconsole handover lockup (Maciej W. Rozycki)
- xhci: tegra: Fix ghost USB device on dual-role port unplug (Wei-Cheng Chen)
- USB: serial: digi_acceleport: fix memory corruption with small endpoints (Johan Hovold) [Orabug: 39754248] {CVE-2026-63901}
- HID: core: Fix size_t specifier in hid_report_raw_event() (Nathan Chancellor)
- HID: pass the buffer size to hid_report_raw_event (Benjamin Tissoires)
- HID: core: Add printk_ratelimited variants to hid_warn() etc (Vicki Pfau)
- USB: serial: cypress_m8: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754408] {CVE-2026-63956}
- serial: zs: Switch to using channel reset (Maciej W. Rozycki)
- serial: zs: Fix bootconsole handover lockup (Maciej W. Rozycki)
- serial: dz: Fix bootconsole message clobbering at chip reset (Maciej W. Rozycki)
- serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma (Shitalkumar Gandhi)
- serial: zs: Fix swapped RI/DSR modem line transition counting (Maciej W. Rozycki)
- serial: sh-sci: fix memory region release in error path (Hongling Zeng)
- drm/hyperv: validate VMBus packet size in receive callback (Berkant Koc) [Orabug: 39786542] {CVE-2026-64527}
- thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow (Michael Bommarito) [Orabug: 39754216] {CVE-2026-63892}
- thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (Michael Bommarito) [Orabug: 39754220] {CVE-2026-63893}
- usb: gadget: f_fs: copy only received bytes on short ep0 read (Michael Bommarito)
- usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports (Seungjin Bae)
- usb: gadget: net2280: Fix double free in probe error path (Guangshuo Li)
- USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (Johan Hovold) [Orabug: 39754232] {CVE-2026-63897}
- USB: serial: mxuport: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754240] {CVE-2026-63899}
- USB: serial: keyspan: fix missing indat transfer sanity check (Johan Hovold) [Orabug: 39754244] {CVE-2026-63900}
- USB: serial: cypress_m8: validate interrupt packet headers (Zhang Cen) [Orabug: 39754252] {CVE-2026-63902}
- USB: serial: belkin_sa: validate interrupt status length (Zhang Cen) [Orabug: 39754256] {CVE-2026-63903}
- USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (Wanquan Zhong)
- USB: serial: option: add MeiG SRM813Q (Jan Volckaert)
- usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize (Heitor Alves de Siqueira)
- usb: usbtmc: check URB actual_length for interrupt-IN notifications (Heitor Alves de Siqueira) [Orabug: 39754260] {CVE-2026-63904}
- usbip: vudc: Fix use after free bug in vudc_remove due to race condition (Michael Bommarito) [Orabug: 39754264] {CVE-2026-63905}
- usb: storage: Add quirks for PNY Elite Portable SSD (Sam Burkels)
- USB: quirks: add NO_LPM for Lenovo ThinkPad USB-C Dock Gen2 hub controllers (Stephen J. Fuhry)
- usb: core: Fix up Interrupt IN endpoints with bogus wBytesPerInterval (Micha? Pecio)
- usb: chipidea: core: convert ci_role_switch to local variable (Xu Yang)
- tty: serial: pch_uart: add check for dma_alloc_coherent() (Zhaoyang Yu)
- comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() (Ian Abbott)
- comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() (Ian Abbott)
- Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 (Nicol?s Bazaes)
- Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem (Dmitry Torokhov) [Orabug: 39754271] {CVE-2026-63908}
- xfrm: esp: restore combined single-frag length gate (Jingguo Tan) [Orabug: 39754278] {CVE-2026-63912}
- ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (Srinivas Kandagatla)
- ASoC: qcom: q6asm-dai: close stream only when running (Srinivas Kandagatla)
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Hamza Mahfooz) [Orabug: 39754282] {CVE-2026-63913}
- xfrm: ah: use skb_to_full_sk in async output callbacks (Michael Bommarito)
- xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] {CVE-2026-63914}
- nfc: hci: fix out-of-bounds read in HCP header parsing (Ashutosh Desai)
- iommu, debugobjects: avoid gcc-16.1 section mismatch warnings (Arnd Bergmann)
- HID: wacom: Fix OOB write in wacom_hid_set_device_mode() (Lee Jones) [Orabug: 39754294] {CVE-2026-63916}
- ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Kuniyuki Iwashima) [Orabug: 39754298] {CVE-2026-63917}
- xfrm: input: hold netns during deferred transport reinjection (Zhengchuan Liang) [Orabug: 39754304] {CVE-2026-63919}
- ipv6: validate extension header length before copying to cmsg (Qi Tang) [Orabug: 39754307] {CVE-2026-63920}
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Maoyi Xie) [Orabug: 39754311] {CVE-2026-63921}
- ipv6: exthdrs: refresh nh after handling HAO option (Zhengchuan Liang) [Orabug: 39754315] {CVE-2026-63922}
- ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (Srinivas Kandagatla)
- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Justin Iurman) [Orabug: 39754322] {CVE-2026-63924}
- macsec: fix replay protection at XPN lower-PN wrap (Junrui Luo) [Orabug: 39754326] {CVE-2026-63925}
- bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (Yuqi Xu) [Orabug: 39754329] {CVE-2026-63926}
- Input: elan_i2c - validate firmware size before use (Dmitry Torokhov) [Orabug: 39785158] {CVE-2026-64237}
- usb: dwc2: Fix use after free in debug code (Dan Carpenter) [Orabug: 39754333] {CVE-2026-63927}
- usb: cdns3: plat: fix unbalanced pm_runtime_forbid() call permanently leaks the runtime PM usage counter across bind/unbind cycles (Peter Chen)
- usb: cdns3: gadget: fix request skipping after clearing halt (Yongchao Wu)
- USB: serial: omninet: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754337] {CVE-2026-63928}
- iio: buffer: hw-consumer: fix use-after-free in error path (Felix Gu)
- iio: light: cm3323: fix reg_conf not being initialized correctly (Aldo Conte)
- iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL (Advait Dhamorikar)
- iio: temperature: tsys01: fix broken PROM checksum validation (Salah Triki)
- iio: ssp_sensors: cancel delayed work_refresh on remove (Sanjay Chitroda)
- iio: gyro: itg3200: fix i2c read into the wrong stack location (David Carlier)
- iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw (Salah Triki)
- wireguard: send: append trailer after expanding head (Jason A. Donenfeld)
- iio: dac: ad5686: fix input raw value check (Rodrigo Alencar)
- iio: dac: max5821: fix return value check in powerdown sync (Salah Triki)
- iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux (Christofer Jonason)
- parport: Fix race between port and client registration (Ben Hutchings) [Orabug: 39754375] {CVE-2026-63942}
- Bluetooth: HIDP: fix missing length checks in hidp_input_report() (Muhammad Bilal) [Orabug: 39754387] {CVE-2026-63947}
- Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (Siwei Zhang) [Orabug: 39754391] {CVE-2026-63948}
- ipc: limit next_id allocation to the valid ID range (Linpu Yu) [Orabug: 39619307] {CVE-2026-52923}
- hpfs: fix a crash if hpfs_map_dnode_bitmap fails (Mikulas Patocka)
- Bluetooth: btusb: Allow firmware re-download when version matches (Shuai Zhang)
- Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() (Thomas Fourier)
- USB: serial: safe_serial: fix memory corruption with small endpoint (Johan Hovold) [Orabug: 39754412] {CVE-2026-63957}
- usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() (Greg Kroah-Hartman)
- usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Greg Kroah-Hartman) [Orabug: 39754428] {CVE-2026-63961}
- usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Greg Kroah-Hartman)
- usb: typec: ucsi: ccg: reject firmware images without a ':' record header (Greg Kroah-Hartman)
- iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer (Greg Kroah-Hartman)
- smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Stefan Metzmacher)
- phy: mscc: Use PHY_ID_MATCH_EXACT for VSC8584, VSC8582, VSC8575, VSC856X (Horatiu Vultur)
- phy: mscc: Use PHY_ID_MATCH_VENDOR to minimize PHY ID table (Harini Katakam)
- RDMA/rxe: Fix double free in rxe_srq_from_init (Jiasheng Jiang) [Orabug: 39451551] {CVE-2026-45852}
- Revert "RDMA/rxe: Fix double free in rxe_srq_from_init" (Ben Hutchings)
- drm/i915/psr: Apply Intel DPCD workaround when SDP on prior line used (Jouni H?gander)
- drm/dp: Add eDP 1.5 bit definition (Suraj Kandpal)
- drm/i915/psr: Read Intel DPCD workaround register (Jouni H?gander)
- drm/i915/psr: Add defininitions for INTEL_WA_REGISTER_CAPS DPCD register (Jouni H?gander)
- wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Duoming Zhou) [Orabug: 38456849] {CVE-2025-39863}
- batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761] {CVE-2026-64095}
- batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744] {CVE-2026-64090}
- batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] {CVE-2026-64091}
- batman-adv: iv: recover OGM scheduling after forward packet error (Sven Eckelmann)
- batman-adv: tvlv: reject oversized TVLV packets (Sven Eckelmann) [Orabug: 39619357] {CVE-2026-52934}
- batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757] {CVE-2026-64094}
- batman-adv: tvlv: abort OGM send on tvlv append failure (Sven Eckelmann)
- batman-adv: v: stop OGMv2 on disabled interface (Sven Eckelmann)
- sctp: fix race between sctp_wait_for_connect and peeloff (Zhenghang Xiao) [Orabug: 39754456] {CVE-2026-63971}
- gpio: rockchip: convert bank->clk to devm_clk_get_enabled() (Marco Scardovi)
- Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (Luiz Augusto von Dentz) [Orabug: 39754468] {CVE-2026-63975}
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success (Zhenghang Xiao) [Orabug: 39754471] {CVE-2026-63976}
- ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Rahul Chandelkar) [Orabug: 39754489] {CVE-2026-63984}
- ethtool: eeprom: add more safeties to EEPROM Netlink fallback (Jakub Kicinski) [Orabug: 39754492] {CVE-2026-63985}
- bonding: refuse to enslave CAN devices (Oliver Hartkopp) [Orabug: 39754502] {CVE-2026-63990}
- Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (Zhao Dongdong)
- ASoC: codecs: simple-mux: Fix enum control bounds check (C?ssio Gabriel)
- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Eric Dumazet) [Orabug: 39754510] {CVE-2026-63992}
- vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Eric Dumazet) [Orabug: 39754513] {CVE-2026-63993}
- tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Eric Dumazet) [Orabug: 39754516] {CVE-2026-63994}
- ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (C?ssio Gabriel)
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Eric Dumazet) [Orabug: 39754536] {CVE-2026-64002}
- net/iucv: fix locking in .getsockopt (Breno Leitao)
- net/smc: Do not re-initialize smc hashtables (Alexandra Winter)
- net: netlink: don't set nsid on local notifications (Ilya Maximets)
- net: netlink: fix sending unassigned nsid after assigned one (Ilya Maximets)
- netfilter: ebtables: fix OOB read in compat_mtw_from_user (Florian Westphal) [Orabug: 39619329] {CVE-2026-52927}
- netfilter: xt_cpu: prefer raw_smp_processor_id (Florian Westphal)
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Chris Mason) [Orabug: 39754553] {CVE-2026-64007}
- nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems (Carl Lee)
- xfrm: Check for underflow in xfrm_state_mtu (David Ahern) [Orabug: 39754558] {CVE-2026-64009}
- nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (Lee Jones)
- nfc: llcp: Fix use-after-free in llcp_sock_release() (Lee Jones)
- net: cpsw_new: Fix potential unregister of netdev that has not been registered yet (Kevin Hao)
- dmaengine: idxd: Fix not releasing workqueue on .release() (Vinicius Costa Gomes) [Orabug: 39323060] {CVE-2026-43064}
- drm: Remove plane hsub/vsub alignment requirement for core helpers (Carlos Eduardo Gallo Filho)
- net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Victor Nogueira) [Orabug: 39754570] {CVE-2026-64012}
- net: mctp: ensure our nlmsg responses are initialised (Jeremy Kerr)
- net/sched: cls_fw: fix NULL dereference of "old" filters before change() (Davide Caratti) [Orabug: 39622011] {CVE-2026-53080}
- Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (Greg Kroah-Hartman) [Orabug: 39754575] {CVE-2026-64014}
- LTS version: v5.15.209 (Samasth Norway Ananda)
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (Aditya Garg) [Orabug: 39754586] {CVE-2026-64018}
- gpio: cdev: check if uAPI v2 config attributes are correctly zeroed (Bartosz Golaszewski)
- gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) (Andy Shevchenko)
- string: add mem_is_zero() helper to check if memory area is all zeros (Jani Nikula)
- net: ag71xx: check error for platform_get_irq (Rosen Penev)
- tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962] {CVE-2026-64028}
- bridge: mcast: Fix a possible use-after-free when removing a bridge port (Ido Schimmel) [Orabug: 39754613] {CVE-2026-64032}
- net: bridge: Flush multicast groups when snooping is disabled (Petr Machata)
- RDMA/rtrs: Fix use-after-free in path file creation cleanup (Guangshuo Li)
- platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- platform/x86: hp_accel: Check ACPI_COMPANION() against NULL (Rafael J. Wysocki)
- platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL (Rafael J. Wysocki)
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Erni Sri Satya Vennela) [Orabug: 39754619] {CVE-2026-64034}
- net: dsa: mt7530: preserve VLAN tags on trapped link-local frames (Daniel Golle)
- net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw (Ar?n? ?nal)
- net: dsa: mt7530: fix FDB entries not aging out with short timeout (Daniel Golle)
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle)
- drm/msm/snapshot: fix dumping of the unaligned regions (Dmitry Baryshkov) [Orabug: 39754629] {CVE-2026-64039}
- net: tls: prevent chain-after-chain in plain text SG (Jakub Kicinski) [Orabug: 39754638] {CVE-2026-64046}
- net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (Jakub Kicinski) [Orabug: 39754642] {CVE-2026-64047}
- drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] {CVE-2026-64153}
- ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics (Chenguang Zhao)
- HID: quirks: really enable the intended work around for appledisplay (Lukas Bulwahn)
- wifi: ath11k: fix error path leaks in some WMI WOW calls (Nicolas Escande) [Orabug: 39754909] {CVE-2026-64155}
- net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference (Ethan Nelson-Moore)
- net: ethernet: cortina: Carry over frag counter (Linus Walleij)
- net: ethernet: cortina: Drop half-assembled SKB (Andreas Haarmann-Thiemann)
- net: ethernet: cortina: Make RX SKB per-port (Linus Walleij)
- irqchip/ath79-cpu: Remove unused function (Rosen Penev)
- phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access (Gabor Juhos)
- ice: fix locking in ice_dcb_rebuild() (Bart Van Assche)
- tcp: Fix imbalanced icsk_accept_queue count. (Kuniyuki Iwashima)
- netfilter: x_tables: unregister the templates first (Florian Westphal)
- ARM: integrator: Fix early initialization (Guenter Roeck)
- kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS (David Gow)
- kunit: config: Enable KUNIT_DEBUGFS by default (David Gow)
- firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (Sudeep Holla)
- firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (Sudeep Holla) [Orabug: 39754932] {CVE-2026-64166}
- hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) reject implausible blackbox record_count (Abdurrahman Hussain)
- hwmon: (pmbus/adm1266) seed timestamp from the real-time clock (Abdurrahman Hussain)
- batman-adv: tt: fix negative tt_buff_len (Sven Eckelmann) [Orabug: 39754734] {CVE-2026-64088}
- batman-adv: tt: fix negative last_changeset_len (Sven Eckelmann) [Orabug: 39754740] {CVE-2026-64089}
- batman-adv: tp_meter: avoid use of uninit sender vars (Sven Eckelmann) [Orabug: 39619346] {CVE-2026-52931}
- batman-adv: bla: fix report_work leak on backbone_gw purge (Sven Eckelmann) [Orabug: 39785109] {CVE-2026-64218}
- batman-adv: frag: disallow unicast fragment in fragment (Sven Eckelmann) [Orabug: 39619274] {CVE-2026-52916}
- batman-adv: fix tp_meter counter underflow during shutdown (Luxiao Xu) [Orabug: 39619287] {CVE-2026-52919}
- batman-adv: fix fragment reassembly length accounting (Ruide Cao) [Orabug: 39619266] {CVE-2026-52914}
- batman-adv: dat: handle forward allocation error (Sven Eckelmann)
- batman-adv: clear current gateway during teardown (Ruijie Li) [Orabug: 39619323] {CVE-2026-52926}
- batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765] {CVE-2026-64096}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (Harry Wentland) [Orabug: 39785113] {CVE-2026-64219}
- drm/amd/display: Fix integer overflow in bios_get_image() (Harry Wentland)
- drm/bridge: megachips: remove bridge when irq request fails (Osama Abdelkader)
- drm/bridge: it66121: acquire reset GPIO in probe (Julien Chauveau)
- device property: set fwnode->secondary to NULL in fwnode_init() (Bartosz Golaszewski) [Orabug: 39785117] {CVE-2026-64220}
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (Michael Bommarito)
- spi: ti-qspi: fix use-after-free after DMA setup failure (Johan Hovold)
- spi: sprd: fix error pointer deref after DMA setup failure (Johan Hovold)
- scsi: isci: Fix use-after-free in device removal path (Michael Bommarito) [Orabug: 39754786] {CVE-2026-64103}
- tracing: Do not call map->ops->elt_free() if elt_alloc() fails (Masami Hiramatsu) [Orabug: 39754948] {CVE-2026-64173}
- wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (John Walker) [Orabug: 39754952] {CVE-2026-64174}
- ixgbevf: fix use-after-free in VEPA multicast source pruning (Michael Bommarito) [Orabug: 39754812] {CVE-2026-64113}
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Michael Bommarito) [Orabug: 39754817] {CVE-2026-64114}
- wifi: ath11k: clear shared SRNG pointer state on restart (Kyle Farnung)
- vsock/vmci: fix UAF when peer resets connection during handshake (Minh Nguyen) [Orabug: 39754821] {CVE-2026-64115}
- ring-buffer: Fix reporting of missed events in iterator (Steven Rostedt)
- netfilter: ipset: stop hash:* range iteration at end (Nan Li) [Orabug: 39619299] {CVE-2026-52921}
- netfilter: nf_queue: hold bridge skb->dev while queued (Haoze Xie) [Orabug: 39619255] {CVE-2026-52912}
- netfilter: ip6t_hbh: reject oversized option lists (Zhengchuan Liang) [Orabug: 39619270] {CVE-2026-52915}
- net: bcmgenet: keep RBUF EEE/PM disabled (Nicolai Buchwitz) [Orabug: 39754845] {CVE-2026-64125}
- phonet/pep: disable BH around forwarded sk_receive_skb() (Zijing Yin) [Orabug: 39754963] {CVE-2026-64177}
- Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (Mingyu Wang) [Orabug: 39523054] {CVE-2026-46275}
- Bluetooth: bnep: Fix UAF read of dev->name (Jann Horn) [Orabug: 39754967] {CVE-2026-64178}
- net: wwan: iosm: fix potential memory leaks in ipc_imem_init() (Abdun Nihaal)
- ALSA: asihpi: Fix potential OOB array access at reading cache (Takashi Iwai) [Orabug: 39754862] {CVE-2026-64133}
- ALSA: ua101: Reject too-short USB descriptors (C?ssio Gabriel)
- hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (Abdurrahman Hussain)
- sysfs: don't remove existing directory on update failure (Greg Kroah-Hartman) [Orabug: 39754983] {CVE-2026-64185}
- Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()" (Sasha Levin)
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson) [Orabug: 37901590] {CVE-2025-23141}
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper (Deepanshu Kartikey) [Orabug: 39300982] {CVE-2026-43052}
- net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (Vladimir Oltean)
- Revert "x86/vdso: Fix output operand size of RDPID" (Sasha Levin)
- s390/debug: Reject zero-length input before trimming a newline (Pengpeng Hou)
- io_uring: prevent opcode speculation (Pavel Begunkov) [Orabug: 37702113] {CVE-2025-21863}
- io-wq: check that the predecessor is hashed in io_wq_remove_pending() (Nicholas Carlini) [Orabug: 39523050] {CVE-2026-46274}
- drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup (Johan Hovold)
- drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() (Gyeyoung Baek)
- drm/i915: skip __i915_request_skip() for already signaled requests (Sebastian Brzezinka)
- iommu/vt-d: Disable DMAR for Intel Q35 IGFX (Naval Alcal?)
- libceph: handle rbtree insertion error in decode_choose_args() (Raphael Zimmer) [Orabug: 39621580] {CVE-2026-52954}
- libceph: Fix potential out-of-bounds access in crush_decode() (Raphael Zimmer) [Orabug: 39621584] {CVE-2026-52955}
- libceph: Fix potential null-ptr-deref in decode_choose_args() (Raphael Zimmer) [Orabug: 39621592] {CVE-2026-52957}
- libceph: Fix potential out-of-bounds access in osdmap_decode() (Raphael Zimmer) [Orabug: 39621596] {CVE-2026-52958}
- powerpc/warp: Fix error handling in pika_dtm_thread (Ma Ke)
- ceph: fix a buffer leak in __ceph_setxattr() (Viacheslav Dubeyko) [Orabug: 39621609] {CVE-2026-52962}
- ALSA: usb-audio: Bound MIDI endpoint descriptor scans (C?ssio Gabriel) [Orabug: 39621613] {CVE-2026-52963}
- drm/i915/dp: Fix VSC dynamic range signaling for RGB formats (Chaitanya Kumar Borah)
- KVM: x86: Fix Xen hypercall tracepoint argument assignment (Maqiang)
- KVM: Reject wrapped offset in kvm_reset_dirty_gfn() (Aaron Sacks) [Orabug: 39621628] {CVE-2026-52969}
- audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV (Sergio Correia)
- net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled (Zoran Ilievski)
- netfilter: nft_ct: fix missing expect put in obj eval (Li Xiasong) [Orabug: 39621633] {CVE-2026-52970}
- audit: fix incorrect inheritable capability in CAPSET records (Sergio Correia) [Orabug: 39653209] {CVE-2026-53287}
- i40e: Cleanup PTP pins on probe failure (Matt Vollrath)
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (Herbert Xu) [Orabug: 39655982] {CVE-2026-52972}
- net/sched: sch_pie: annotate more data-races in pie_dump_stats() (Eric Dumazet)
- flow_dissector: Do not count vlan tags inside tunnel payload (Qingqing Yang)
- flow_dissector: do not dissect PPPoE PFC frames (Qingfang Deng) [Orabug: 39524619] {CVE-2026-46306}
- btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() (Filipe Manana) [Orabug: 39784984] {CVE-2026-64164}
- drm/amd/display: Read EDID from VBIOS embedded panel info (Timur Krist?f)
- drm/amd/display: Allow DCE link encoder without AUX registers (Timur Krist?f)
- ALSA: hda/conexant: Fix missing error check for jack detection (Wangdicheng) [Orabug: 39653220] {CVE-2026-53291}
- ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (Wangdicheng)
- ALSA: hda/conexant: fix some typos (Oldherl Oh)
- ALSA: hda/conexant: add a new hda codec SN6140 (Bo Liu)
- net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) (Eric Dumazet)
- bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() (Weiming Shi) [Orabug: 39451517] {CVE-2026-45846}
- ipv6: rename and move ip6_dst_lookup_tunnel() (Beniamino Galvani)
- ipv4: add new arguments to udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: remove "proto" argument from udp_tunnel_dst_lookup() (Beniamino Galvani)
- ipv4: rename and move ip_route_output_tunnel() (Beniamino Galvani)
- sctp: discard stale INIT after handshake completion (Xin Long)
- netfilter: skip recording stale or retransmitted INIT (Xin Long)
- ASoC: codecs: ab8500: Fix casting of private data (Christian A. Ehrhardt)
- net: phy: dp83869: fix setting CLK_O_SEL field. (Heiko Schocher)
- NFC: trf7970a: Ignore antenna noise when checking for RF field (Paul Geurts)
- net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit (Dandan Zhang)
- net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() (Jun Zhan) [Orabug: 39621670] {CVE-2026-52982}
- vrf: Fix a potential NPD when removing a port from a VRF (Ido Schimmel) [Orabug: 39619318] {CVE-2026-52925}
- net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() (Eric Dumazet)
- net/sched: sch_choke: annotate data-races in choke_dump_stats() (Eric Dumazet)
- net: sched: choke: remove unused variables in struct choke_sched_data (Zhengchao Shao)
- net/sched: netem: validate slot configuration (Stephen Hemminger)
- net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] {CVE-2026-52984}
- net/sched: netem: fix probability gaps in 4-state loss model (Stephen Hemminger)
- net: sched: sch_netem: Refactor code in 4-state loss generator (Harshit Mogalapalli)
- netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z. Ivanov) [Orabug: 39621681] {CVE-2026-52985}
- cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() (Daan De Meyer)
- scsi: sr: Add memory allocation failure handling for get_capabilities() (Enze Li)
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [Orabug: 39621685] {CVE-2026-52986}
- netfilter: xt_policy: fix strict mode inbound policy matching (Jiexun Wang) [Orabug: 39619293] {CVE-2026-52920}
- drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) (Timur Krist?f)
- drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (Timur Krist?f)
- drm/amdgpu: fix spelling typos (Alexandre Demers)
- netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] {CVE-2026-45844}
- tracing: branch: Fix inverted check on stat tracer registration (Breno Leitao)
- btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() (Mark Harmstone)
- mailbox: mailbox-test: make data_ready a per-instance variable (Wolfram Sang)
- mailbox: mailbox-test: initialize struct earlier (Wolfram Sang)
- mailbox: mailbox-test: don't free the reused channel (Wolfram Sang)
- mailbox: add sanity check for channel array (Wolfram Sang) [Orabug: 39653234] {CVE-2026-53295}
- cgroup/rdma: fix integer overflow in rdmacg_try_charge() (Tao Cui)
- mailbox: mailbox-test: free channels on probe error (Wolfram Sang)
- fbdev: offb: fix PCI device reference leak on probe failure (Yuho Choi)
- rtc: abx80x: Disable alarm feature if no interrupt attached (Anthony Pighin)
- fs/adfs: validate nzones in adfs_validate_bblk() (Bae Yeonju)
- vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() (Kohei Enju)
- tipc: fix double-free in tipc_buf_append() (Lee Jones) [Orabug: 39621708] {CVE-2026-52993}
- nfp: fix swapped arguments in nfp_encode_basic_qdr() calls (Alexey Kodanev)
- net/sched: sch_sfb: annotate data-races in sfb_dump_stats() (Eric Dumazet)
- net/sched: sch_red: annotate data-races in red_dump_stats() (Eric Dumazet)
- net: sched: gred/red: remove unused variables in struct red_stats (Zhengchao Shao)
- net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() (Eric Dumazet)
- net/sched: sch_pie: annotate data-races in pie_dump_stats() (Eric Dumazet)
- net_sched: sch_hhf: annotate data-races in hhf_dump_stats() (Eric Dumazet)
- ksmbd: scope conn->binding slowpath to bound sessions only (Hyunwoo Kim)
- ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() (Daemyung Kang)
- arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number (Yan Jun)
- slip: bound decode() reads against the compressed packet length (Weiming Shi) [Orabug: 39451500] {CVE-2026-45843}
- slip: reject VJ receive packets on instances with no rstate array (Weiming Shi) [Orabug: 39451493] {CVE-2026-45842}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Fernando Fernandez Mancera) [Orabug: 39621724] {CVE-2026-52998}
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Fernando Fernandez Mancera) [Orabug: 39621730] {CVE-2026-52999}
- ipvs: fix MTU check for GSO packets in tunnel mode (Yingnan Zhang)
- netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] {CVE-2026-53001}
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [Orabug: 39621746] {CVE-2026-53002}
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Xiang Mei) [Orabug: 39451485] {CVE-2026-45841}
- netfilter: nft_osf: restrict it to ipv4 (Pablo Neira Ayuso)
- openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] {CVE-2026-45840}
- pppoe: drop PFC frames (Qingfang Deng) [Orabug: 39621751] {CVE-2026-53003}
- flow_dissector: Add number of vlan tags dissector (Boris Sukholitko)
- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] {CVE-2026-53004}
- ipv6: fix possible UAF in icmpv6_rcv() (Eric Dumazet) [Orabug: 39621765] {CVE-2026-53006}
- e1000e: Unroll PTP in probe error handling (Matt Vollrath)
- i40e: don't advertise IFF_SUPP_NOFCS (Kohei Enju)
- tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) (Eric Dumazet)
- net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (Vinicius Costa Gomes) [Orabug: 39621780] {CVE-2026-53011}
- net/sched: taprio: rename close_time to end_time (Vladimir Oltean)
- net/sched: taprio: refactor one skb dequeue from TXQ to separate function (Vladimir Oltean)
- net/sched: taprio: continue with other TXQs if one dequeue() failed (Vladimir Oltean)
- net/sched: taprio: replace safety precautions with comments (Vladimir Oltean)
- net/sched: taprio: stop going through private ops for dequeue and peek (Vladimir Oltean)
- nexthop: fix IPv6 route referencing IPv4 nexthop (Jiayuan Chen) [Orabug: 39621784] {CVE-2026-53012}
- net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys (Dudu Lu)
- PCMCIA: Fix garbled log messages for KERN_CONT (Ren? Rebe)
- crypto: ccp - copy IV using skcipher ivsize (Paul Moses) [Orabug: 39621796] {CVE-2026-53016}
- crypto: sa2ul - Fix AEAD fallback algorithm names (T Pratham)
- lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() (Geert Uytterhoeven)
- clk: qcom: dispcc-sc7180: Add missing MDSS resets (Konrad Dybcio)
- dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets (Konrad Dybcio)
- clk: xgene: Fix mapping leak in xgene_pllclk_init() (Geert Uytterhoeven)
- clk: qoriq: avoid format string warning (Arnd Bergmann)
- clk: imx8mq: Correct the CSI PHY sels (Sebastian Krzyszkowiak)
- clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() (Felix Gu)
- clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() (Felix Gu)
- clk: qcom: dispcc-sm8250: Enable parents for pixel clocks (Val Packett)
- clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for PCIe power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Use retention for USB power domains (Val Packett)
- clk: qcom: gcc-sc8180x: Add missing GDSCs (Val Packett)
- dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs (Val Packett)
- scsi: target: core: Fix integer overflow in UNMAP bounds check (Junrui Luo) [Orabug: 39621811] {CVE-2026-53021}
- scsi: sg: Resolve soft lockup issue when opening /dev/sgX (Yangerkun) [Orabug: 39653261] {CVE-2026-53304}
- RDMA/core: Prefer NLA_NUL_STRING (Florian Westphal) [Orabug: 39754131] {CVE-2026-63860}
- platform/x86: dell-wmi-sysman: bound enumeration string aggregation (Pengpeng Hou) [Orabug: 39621815] {CVE-2026-53022}
- platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() (Fedor Pchelkin)
- fs/ntfs3: terminate the cached volume label after UTF-8 conversion (Pengpeng Hou)
- nfs/blocklayout: Fix compilation error (make W=1) in bl_write_pagelist() (Andy Shevchenko)
- mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() (Abdun Nihaal)
- platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup (Rafael J. Wysocki)
- tty: hvc_iucv: fix off-by-one in number of supported devices (Randy Dunlap)
- tty: hvc: remove HVC_IUCV_MAGIC (Ahelenia Ziemia?ska)
- leds: lgm-sso: Remove duplicate assignments for priv->mmap (Chen Ni)
- platform/surface: surfacepro3_button: Drop wakeup source on remove (Rafael J. Wysocki)
- backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() (Chen Ni)
- dev_printk: add new dev_err_probe() helpers (Nuno Sa)
- driver core: Move dev_err_probe() to where it belogs (Andy Shevchenko)
- driver core: device.h: remove extern from function prototypes (Greg Kroah-Hartman)
- i3c: mipi-i3c-hci: fix IBI payload length calculation for final status (Billy Tsai)
- perf util: Kill die() prototype, dead for a long time (Arnaldo Carvalho de Melo)
- perf expr: Return -EINVAL for syntax error in expr__find_ids() (Leo Yan)
- pinctrl: abx500: Fix type of 'argument' variable (Yu-Chun Lin)
- perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace (Mike Leach)
- perf branch: Avoid incrementing NULL (Ian Rogers)
- pinctrl: pinctrl-pic32: Fix resource leak (Ethan Tidmore)
- HID: usbhid: fix deadlock in hid_post_reset() (Oliver Neukum) [Orabug: 39621857] {CVE-2026-53037}
- mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob (Richard Genoud)
- mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions (Cosmin Tanislav)
- mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path (Cosmin Tanislav)
- mtd: spi-nor: swp: check SR_TB flag when getting tb_mask (Shiji Yang)
- mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations (Haibo Chen)
- mtd: physmap_of_gemini: Fix disabled pinctrl state check (Chen Ni)
- HID: asus: do not abort probe when not necessary (Denis Benato)
- HID: asus: make asus_resume adhere to linux kernel coding standards (Denis Benato)
- ima: check return value of crypto_shash_final() in boot aggregate (Daniel Hodges)
- tracing: Rebuild full_name on each hist_field_name() call (Pengpeng Hou)
- dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Frank Li)
- dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function (Khairul Anuar Romli)
- ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] {CVE-2026-53039}
- ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] {CVE-2026-53040}
- ocfs2: fix listxattr handling when the buffer is full (Zhengyuan Huang) [Orabug: 39621872] {CVE-2026-53041}
- soc: qcom: aoss: compare against normalized cooling state (Alok Tiwari)
- ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison (Junrui Luo) [Orabug: 39653274] {CVE-2026-53309}
- ocfs2/dlm: validate qr_numregions in dlm_match_regions() (Junrui Luo) [Orabug: 39621878] {CVE-2026-53043}
- unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure (Michal Grzedzicki)
- arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot (David Heidelberger)
- soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available (Dmitry Baryshkov)
- soc: qcom: ocmem: register reasons for probe deferrals (Dmitry Baryshkov)
- soc: qcom: ocmem: use scoped device node handling to simplify error paths (Krzysztof Kozlowski)
- memory: tegra30-emc: Fix dll_change check (Mikko Perttunen)
- memory: tegra124-emc: Fix dll_change check (Mikko Perttunen)
- ARM: dts: mediatek: mt7623: fix efuse fallback compatible (Rafa? Mi?ecki)
- ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine (Joshua Klinesmith)
- efi/capsule-loader: fix incorrect sizeof in phys array reallocation (Thomas Huth) [Orabug: 39621893] {CVE-2026-53047}
- gfs2: prevent NULL pointer dereference during unmount (Andreas Gruenbacher) [Orabug: 39621897] {CVE-2026-53048}
- gfs2: add some missing log locking (Andreas Gruenbacher) [Orabug: 39621900] {CVE-2026-53049}
- quota: Fix race of dquot_scan_active() with quota deactivation (Jan Kara) [Orabug: 39621904] {CVE-2026-53050}
- ktest: Run POST_KTEST hooks on failure and cancellation (Ricardo B. Marli?re)
- ktest: Honor empty per-test option overrides (Ricardo B. Marli?re)
- ktest: Avoid undef warning when WARNINGS_FILE is unset (Ricardo B. Marli?re)
- ALSA: sc6000: Keep the programmed board state in card-private data (C?ssio Gabriel)
- ALSA: sc6000: Use standard print API (Takashi Iwai)
- PCI: tegra194: Disable direct speed change for Endpoint mode (Vidya Sagar)
- PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" (Vidya Sagar)
- PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Increase LTSSM poll time on surprise link down (Manikanta Maddireddy)
- PCI: tegra194: Fix polling delay for L2 state (Vidya Sagar)
- PCI: Add PCIE_PME_TO_L2_TIMEOUT_US L2 ready timeout value (Frank Li)
- selftest: memcg: skip memcg_sock test if address family not supported (Waiman Long)
- Documentation: fix a hugetlbfs reservation statement (Jane Chu)
- PCI: Enable AtomicOps only if Root Port supports them (Gerd Bayer)
- ASoC: fsl_easrc: Change the type for iec958 channel status controls (Shengjiu Wang)
- ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() (Shengjiu Wang)
- ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() (Shengjiu Wang)
- ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() (Shengjiu Wang)
- pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() (Felix Gu)
- pmdomain: ti: omap_prm: Fix a reference leak on device node (Felix Gu)
- drm/msm/a6xx: Use barriers while updating HFI Q headers (Akhil P Oommen)
- drm/msm/a6xx: Fix HLSQ register dumping (Rob Clark)
- ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') (Huanglei)
- ALSA: hda/realtek: Whitespace fix (Luke D. Jones)
- drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board (Timur Krist?f)
- drm/amd/pm/ci: Fill DW8 fields from SMC (Timur Krist?f)
- drm/amd/pm/ci: Clear EnabledForActivity field for memory levels (Timur Krist?f)
- drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 (Timur Krist?f)
- drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock (Timur Krist?f)
- drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs (Timur Krist?f)
- drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled (Timur Krist?f)
- ALSA: core: Validate compress device numbers without dynamic minors (C?ssio Gabriel)
- drm/panel: simple: Correct G190EAN01 prepare timing (Sebastian Reichel)
- drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 (Alexander Koskovich)
- spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo (Pei Xiao)
- fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break (Andy Shevchenko)
- dm init: ensure device probing has finished in dm-mod.waitfor= (Guillaume Gonnet)
- drm/sun4i: Fix resource leaks (Ethan Tidmore)
- spi: fsl-qspi: Use reinit_completion() for repeated operations (Felix Gu)
- dm log: fix out-of-bounds write due to region_count overflow (Junrui Luo) [Orabug: 39621924] {CVE-2026-53059}
- dm cache metadata: fix memory leak on metadata abort retry (Ming-Hung Tsai) [Orabug: 39621929] {CVE-2026-53060}
- dm cache: fix dirty mapping checking in passthrough mode switching (Ming-Hung Tsai) [Orabug: 39621933] {CVE-2026-53061}
- dm cache: support shrinking the origin device (Ming-Hung Tsai)
- dm cache: fix concurrent write failure in passthrough mode (Ming-Hung Tsai)
- dm cache policy smq: fix missing locks in invalidating cache blocks (Ming-Hung Tsai) [Orabug: 39621937] {CVE-2026-53062}
- dm cache: fix write path cache coherency in passthrough mode (Ming-Hung Tsai)
- dm cache: fix null-deref with concurrent writes in passthrough mode (Ming-Hung Tsai) [Orabug: 39621946] {CVE-2026-53064}
- ASoC: sti: use managed regmap_field allocations (Sander Vanheule)
- ASoC: sti: Return errors from regmap_field_alloc() (Sander Vanheule)
- drm/komeda: fix integer overflow in AFBC framebuffer size check (Alexander Konyukhov)
- net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (Jiayuan Chen) [Orabug: 39621966] {CVE-2026-53069}
- sctp: fix missing encap_port propagation for GSO fragments (Xin Long)
- net: phy: qcom: at803x: Use the correct bit to disable extended next page (Maxime Chevallier)
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (Dudu Lu) [Orabug: 39621973] {CVE-2026-53071}
- Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (Pauli Virtanen) [Orabug: 39621976] {CVE-2026-53072}
- Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (Jonathan Rissanen) [Orabug: 39621980] {CVE-2026-53073}
- Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU (Luiz Augusto von Dentz)
- bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb (Sun Jian) [Orabug: 39621984] {CVE-2026-53074}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Taegu Ha) [Orabug: 39621987] {CVE-2026-53075}
- net/sched: act_ct: Only release RCU read lock after ct_ft (Jamal Hadi Salim) [Orabug: 39531630] {CVE-2026-46319}
- net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf (Mashiro Chen)
- 6pack: propagage new tty types (Jiri Slaby)
- netfilter: nft_fwd_netdev: check ttl/hl before forwarding (Florian Westphal)
- netfilter: xt_socket: enable defrag after all other checks (Florian Westphal)
- net: bcmgenet: fix off-by-one in bcmgenet_put_txcb (Justin Chen) [Orabug: 39622043] {CVE-2026-53088}
- bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (Weiming Shi)
- bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (Jiayuan Chen) [Orabug: 39754142] {CVE-2026-63865}
- bpf-lsm: Make bpf_lsm_userns_create() sleepable (Frederick Lawler)
- wifi: brcmfmac: Fix error pointer dereference (Ethan Tidmore) [Orabug: 39622061] {CVE-2026-53093}
- bpf: fix end-of-list detection in cgroup_storage_get_next_key() (Weiming Shi) [Orabug: 39451462] {CVE-2026-45838}
- macvlan: annotate data-races around port->bc_queue_len_used (Eric Dumazet)
- powerpc/crash: fix backup region offset update to elfcorehdr (Sourabh Jain)
- r8152: fix incorrect register write to USB_UPHY_XTAL (Chih Kai Hsu)
- bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path (David Carlier) [Orabug: 39622069] {CVE-2026-53096}
- bpf, devmap: Remove unnecessary if check in for loop (Thorsten Blum)
- module: Fix freeing of charp module parameters when CONFIG_SYSFS=n (Petr Pavlu)
- params: Replace __modinit with __init_or_module (Petr Pavlu)
- kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
- kernel: param: rename locate_module_kobject (Shyam Saini)
- dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n (Cai Xinchen)
- dpaa2: add independent dependencies for FSL_DPAA2_SWITCH (Cai Xinchen)
- wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet (Duoming Zhou) [Orabug: 39622109] {CVE-2026-53112}
- wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() (Zilin Guan)
- firmware: dmi: Correct an indexing error in dmi.h (Mario Limonciello)
(Bart Van Assche)
- irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter (Brian Masney)
- debugfs: check for NULL pointer in debugfs_create_str() (Gui-Dong Han)
- thermal/drivers/spear: Fix error condition for reading st,thermal-flags (Gopi Krishna Menon)
- devres: fix missing node debug info in devm_krealloc() (Danilo Krummrich)
- pstore/ram: fix resource leak when ioremap() fails (Cole Leavitt)
- nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() (Deepanshu Kartikey)
- drbd: Balance RCU calls in drbd_adm_dump_devices() (Bart Van Assche) [Orabug: 39622158] {CVE-2026-53128}
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START (Hyungjung Joo)
- bcache: fix uninitialized closure object (Mingzhe Zou)
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Benjamin Cheng)
- vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] {CVE-2026-46214}
- vsock: fix buffer size clamping order (Norbert Szetei) [Orabug: 39460717] {CVE-2026-46234}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (Siwei Zhang) [Orabug: 39445785] {CVE-2026-45836}
- batman-adv: bla: put backbone reference on failed claim hash insert (Sven Eckelmann) [Orabug: 39460707] {CVE-2026-46231}
- batman-adv: bla: only purge non-released claims (Sven Eckelmann) [Orabug: 39460713] {CVE-2026-46233}
- batman-adv: bla: prevent use-after-free when deleting claims (Sven Eckelmann) [Orabug: 39460640] {CVE-2026-46212}
- batman-adv: stop caching unowned originator pointers in BAT IV (Jiexun Wang) [Orabug: 39460733] {CVE-2026-46238}
- batman-adv: reject new tp_meter sessions during teardown (Jiexun Wang) [Orabug: 39460614] {CVE-2026-46206}
- batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] {CVE-2026-46198}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (Ben Morris) [Orabug: 39460689] {CVE-2026-46227}
- drm/amdgpu/pm: align Hawaii mclk workaround with radeon (Alex Deucher)
- drm/amdgpu/pm: add missing revision check for CI (Alex Deucher)
- drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B. Moore) [Orabug: 39460668] {CVE-2026-46220}
- drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ (John B. Moore)
- drm/radeon: add missing revision check for CI (Alex Deucher)
- drm/amdkfd: validate SVM ioctl nattr against buffer size (Alysa Liu) [Orabug: 39460573] {CVE-2026-46197}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460627] {CVE-2026-46209}
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Benjamin Cheng) [Orabug: 39460702] {CVE-2026-46230}
- spi: mpc52xx: fix use-after-free on unbind (Johan Hovold)
- spi: orion: fix clock imbalance on registration failure (Johan Hovold)
- spi: imx: fix runtime pm leak on probe deferral (Johan Hovold)
- spi: mtk-nor: fix controller deregistration (Johan Hovold)
- media: i2c: imx412: Assert reset GPIO during probe (Wenmeng Liu)
- media: dib8000: avoid division by 0 in dib8000_set_dds() (Sergey Shtylyov)
- regulator: bd9571mwv: fix OF node reference imbalance (Johan Hovold)
- regulator: act8945a: fix OF node reference imbalance (Johan Hovold)
- media: rc: streamzap: Error handling in probe (Oliver Neukum)
- media: rc: xbox_remote: heed DMA restrictions (Oliver Neukum)
- regulator: max77650: fix OF node reference imbalance (Johan Hovold)
- staging: media: atomisp: Disallow all private IOCTLs (Sakari Ailus)
- media: i2c: ov8856: free control handler on error in ov8856_init_controls() (Alexander Koskovich)
- media: uvcvideo: Enable VB2_DMABUF for metadata stream (Ricardo Ribalda)
- platform/x86: hp-wmi: Ignore backlight and FnLock events (Krishna Chomal)
- mptcp: fix scheduling with atomic in timestamp sockopt (Gang Yan) [Orabug: 39460450] {CVE-2026-46168}
- mptcp: sockopt: set timestamp flags on subflow socket, not msk (Gang Yan)
- mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure (Shardul Bankar)
- mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure (Shardul Bankar)
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] {CVE-2026-46189}
- RDMA/rxe: Reject unknown opcodes before ICRC processing (Michael Bommarito) [Orabug: 39460303] {CVE-2026-46133}
- RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277] {CVE-2026-46127}
- RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] {CVE-2026-46178}
- power: supply: max17042: avoid overflow when determining health (Andr? Draszik)
- PCI/AER: Stop ruling out unbound devices as error source (Lukas Wunner)
- PCI/AER: Clear only error bits in PCIe Device Status (Shuai Xue)
- s390/debug: Reject zero-length input in debug_input_flush_fn() (Vasily Gorbik)
- RDMA/hns: Fix unlocked call to hns_roce_qp_remove() (Jason Gunthorpe)
- nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (Chaitanya Kulkarni) [Orabug: 39524613] {CVE-2026-46304}
- md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] {CVE-2026-46161}
- libceph: Fix slab-out-of-bounds access in auth message processing (Raphael Zimmer) [Orabug: 39460244] {CVE-2026-46119}
- isofs: validate block number from NFS file handle in isofs_export_iget (Michael Bommarito) [Orabug: 39460265] {CVE-2026-46124}
- isofs: validate Rock Ridge CE continuation extent against volume size (Michael Bommarito) [Orabug: 39524609] {CVE-2026-46303}
- dm-verity-fec: correctly reject too-small hash devices (Eric Biggers)
- dm-verity-fec: correctly reject too-small FEC devices (Eric Biggers)
- dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] {CVE-2026-46294}
- dm: don't report warning when doing deferred remove (Mikulas Patocka)
- dm-thin: fix metadata refcount underflow (Mikulas Patocka) [Orabug: 39460195] {CVE-2026-46107}
- ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error (C?ssio Gabriel)
- ASoC: fsl_easrc: fix comment typo (Joseph Salisbury)
- cpuidle: powerpc: avoid double clear when breaking snooze (Shrikanth Hegde)
- spi: topcliff-pch: fix use-after-free on unbind (Johan Hovold)
- thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp (Thorsten Blum)
- thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata (Thorsten Blum)
- udf: reject descriptors with oversized CRC length (Michael Bommarito) [Orabug: 39753576] {CVE-2026-53369}
- ibmveth: Disable GSO for packets with small MSS (Mingming Cao)
- hv_sock: fix ARM64 support (Hamza Mahfooz)
- extcon: ptn5150: handle pending IRQ events during system resume (Xu Yang)
- hwmon: (corsair-psu) Close HID device on probe errors (Myeonghun Pak)
- hwmon: (ltc2992) Fix u32 overflow in power read path (Sanman Pradhan)
- hwmon: (ltc2992) Clamp threshold writes to hardware range (Sanman Pradhan)
- parisc: Fix IRQ leak in LASI driver (Hongling Zeng)
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (Maoyi Xie) [Orabug: 39460248] {CVE-2026-46120}
- sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] {CVE-2026-46184}
- net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] {CVE-2026-46132}
- fanotify: fix false positive on permission events (Miklos Szeredi) [Orabug: 39460374] {CVE-2026-46150}
- spi: zynqmp-gqspi: fix controller deregistration (Johan Hovold)
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (Siwei Zhang) [Orabug: 39445772] {CVE-2026-45834}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (Siwei Zhang) [Orabug: 39445781] {CVE-2026-45835}
- Bluetooth: virtio_bt: validate rx pkt_type header length (Michael Bommarito)
- Bluetooth: virtio_bt: clamp rx length before skb_put (Michael Bommarito)
- ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (Yilin Zhu) [Orabug: 39460469] {CVE-2026-46172}
- xfrm: provide message size for XFRM_MSG_MAPPING (Ruijie Li)
- ALSA: firewire-tascam: Do not drop unread control events (C?ssio Gabriel)
- usb: ulpi: fix memory leak on ulpi_register() error paths (Felix Gu) [Orabug: 39654820] {CVE-2026-46109}
- USB: serial: option: add Telit Cinterion LE910Cx compositions (Fabio Porcedda)
- USB: omap_udc: DMA: Don't enable burst 4 mode (Aaro Koskinen)
- ALSA: usb-audio: Fix UAC3 cluster descriptor size check (C?ssio Gabriel)
- ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() (Takashi Iwai) [Orabug: 39460352] {CVE-2026-46146}
- usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] {CVE-2026-46167}
- usb: usblp: fix heap leak in IEEE 1284 device ID via short response (Greg Kroah-Hartman) [Orabug: 39460379] {CVE-2026-46151}
- wifi: b43: enforce bounds check on firmware key index in b43_rx() (Tristan Madani) [Orabug: 39460257] {CVE-2026-46122}
- wifi: ath5k: do not access array OOB (Jiri Slaby) [Orabug: 39524622] {CVE-2026-46307}
- wifi: rsi: fix kthread lifetime race between self-exit and external-stop (Jeongjun Park) [Orabug: 39460532] {CVE-2026-46187}
- wifi: b43legacy: enforce bounds check on firmware key index in RX path (Tristan Madani) [Orabug: 39460424] {CVE-2026-46163}
- ipmi:ssif: NULL thread on error (Corey Minyard)
- ipmi:ssif: Remove unnecessary indention (Corey Minyard)
- ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] {CVE-2026-46044}
- ipmi:ssif: Fix a shutdown race (Corey Minyard)
- net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (Jamal Hadi Salim) [Orabug: 39425987] {CVE-2026-43496}
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (Dipendra Khadka)
- um: virt-pci: Fix build failure (Florian Fainelli)
- spi: meson-spicc: Fix double-put in remove path (Felix Gu) [Orabug: 39250891] {CVE-2026-31489}
- ksmbd: do not expire session on binding failure (Hyunwoo Kim)
- spi: rockchip: fix controller deregistration (Johan Hovold)
- ACPI: video: force native backlight on HP OMEN 16 (8A44) (Shivam Kalra)
- ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Jinjie Ruan)
- ACPI: scan: Use acpi_dev_put() in object add error paths (Guangshuo Li)
- fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free (Rajat Gupta)
- ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] {CVE-2026-46108}
- ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] {CVE-2026-46128}
- ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] {CVE-2026-46177}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (Greg Kroah-Hartman) [Orabug: 39460368] {CVE-2026-46149}
- netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] {CVE-2026-46101}
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Andrea Mayer) [Orabug: 39452458] {CVE-2026-46099}
- ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39784983] {CVE-2026-46048}
- drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] {CVE-2026-46276}
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Greg Kroah-Hartman) [Orabug: 39426004] {CVE-2026-43501}
- ALSA: caiaq: Don't abort when no input device is available (Takashi Iwai)
- ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path (Takashi Iwai)
- driver core: Add kernel-doc for DEV_FLAG_COUNT enum value (Douglas Anderson)
- crypto: authencesn - reject short ahash digests during instance creation (Yucheng Lu) [Orabug: 39452232] {CVE-2026-46033}
- seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode (Andrea Mayer)
- ntfs3: fix integer overflow in run_unpack() volume boundary check (Tobi Gaertner)
- ntfs3: add buffer boundary checks to run_unpack() (Tobi Gaertner)
- ktest: Fix the month in the name of the failure directory (Steven Rostedt)
- IB/core: Fix zero dmac race in neighbor resolution (Chen Zhao)
- dm mirror: fix integer overflow in create_dirty_log() (Junrui Luo) [Orabug: 39452197] {CVE-2026-46023}
- crypto: atmel-tdes - fix DMA sync direction (Thorsten Blum)
- crypto: ccree - fix a memory leak in cc_mac_digest() (Haoxiang Li)
- crypto: hisilicon - Fix dma_unmap_single() direction (Thomas Fourier)
- crypto: atmel-ecc - Release client on allocation failure (Thorsten Blum)
- crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup (Thorsten Blum)
- crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit (Eric Biggers)
- taskstats: set version in TGID exit notifications (Yiyang Chen)
- tcp: call sk_data_ready() after listener migration (Zhenzhong Wu) [Orabug: 39452160] {CVE-2026-46015}
- inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] {CVE-2026-46040}
- md/raid5: validate payload size before accessing journal metadata (Junrui Luo) [Orabug: 39452350] {CVE-2026-46070}
- md/raid5: fix soft lockup in retry_aligned_read() (Chia-Ming Chang) [Orabug: 39452288] {CVE-2026-46051}
- ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() (Sohei Koyama) [Orabug: 39452270] {CVE-2026-46046}
- mtd: docg3: fix use-after-free in docg3_release() (James Kim)
- mtd: docg3: Convert to platform remove callback returning void (Uwe Kleine-K?nig)
- io_uring/poll: fix backport of io_poll_add() changes (Jens Axboe)
- io_uring/poll: fix EPOLL_URING_WAKE sometimes not being honored (Jens Axboe)
- KVM: nSVM: Add missing consistency check for nCR3 validity (Yosry Ahmed)
- KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) (Yosry Ahmed)
- KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN (Yosry Ahmed)
- KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode (Yosry Ahmed)
- KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts (Sean Christopherson)
- KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (Kevin Cheng) [Orabug: 39452395] {CVE-2026-46082}
- KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 (Yosry Ahmed) [Orabug: 39452062] {CVE-2026-45987}
- KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state (Yosry Ahmed)
- userfaultfd: allow registration of ranges below mmap_min_addr (Denis M. Karpov)
- rtc: ntxec: fix OF node reference imbalance (Johan Hovold)
- tpm: tpm_tis: add error logging for data transfer (Jacqueline Wong)
- mmc: block: use single block write in retry (Bin Liu)
- power: supply: axp288_charger: Do not cancel work before initializing it (Krzysztof Kozlowski)
- tpm: avoid -Wunused-but-set-variable (Arnd Bergmann)
- libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() (Raphael Zimmer) [Orabug: 39452202] {CVE-2026-46024}
- ipv4: icmp: validate reply type before using icmp_pointers (Ruide Cao) [Orabug: 39452244] {CVE-2026-46037}
- drm/arcpgu: fix device node leak (Luca Ceresoli)
- net/smc: avoid early lgr access in smc_clc_wait_msg (Ruijie Li)
- iio: adc: ad7768-1: fix one-shot mode data acquisition (Jonathan Santos)
- ALSA: 6fire: Fix input volume change detection (C?ssio Gabriel)
- ALSA: caiaq: Handle probe errors properly (Takashi Iwai) [Orabug: 39452127] {CVE-2026-46004}
- ALSA: caiaq: Fix control_put() result and cache rollback (C?ssio Gabriel)
- selftests/mqueue: Fix incorrectly named file (Simon Liebold)
- parisc: _llseek syscall is only available for 32-bit userspace (Helge Deller)
- nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4 (Robert Beckett)
- md/raid10: fix deadlock with check operation and nowait requests (Josh Hunt) [Orabug: 39452285] {CVE-2026-46050}
- ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes (C?ssio Gabriel)
- ALSA: ctxfi: Add fallback to default RSR for S/PDIF (Harin Lee) [Orabug: 39452281] {CVE-2026-46049}
- ALSA: aoa: i2sbus: fix OF node lifetime handling (C?ssio Gabriel)
- ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() (Vasiliy Kovalev) [Orabug: 39452120] {CVE-2026-46002}
- net: qrtr: ns: Fix use-after-free in driver remove() (Manivannan Sadhasivam) [Orabug: 39452275] {CVE-2026-46047}
- media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() (Chen Ni)
- lib/ts_kmp: fix integer overflow in pattern length calculation (Josh Law)
- Revert "ALSA: usb: Increase volume range that triggers a warning" (Rongrong)
- PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown (Koichiro Den)
- net: strparser: fix skb_head leak in strp_abort_strp() (Luxiao Xu) [Orabug: 39452469] {CVE-2026-46102}
- net: caif: clear client service pointer on teardown (Zhengchuan Liang)
- ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() (Ziqing Chen) [Orabug: 39452417] {CVE-2026-46088}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Herbert Xu) [Orabug: 39410864] {CVE-2026-43493}
- um: drivers: call kernel_strrchr() explicitly in cow_user.c (Michael Bommarito)
- driver core: Don't let a device probe until it's ready (Douglas Anderson)
- padata: Remove comment for reorder_work (Herbert Xu)
- padata: Fix pd UAF once and for all (Herbert Xu) [Orabug: 38335056] {CVE-2025-38584}
- ocfs2: split transactions in dio completion to avoid credit exhaustion (Heming Zhao) [Orabug: 39452389] {CVE-2026-46080}
- device property: Make modifications of fwnode "flags" thread safe (Douglas Anderson)
- scsi: ufs: core: Fix use-after free in init error and remove paths (Andr? Draszik)
- firmware: google: framebuffer: Do not mark framebuffer as busy (Thomas Zimmermann)
- ibmasm: fix heap over-read in ibmasm_send_i2o_message() (Tyllis Xu)
- ibmasm: fix OOB reads in command_file_write due to missing size checks (Tyllis Xu)
- misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() (Tyllis Xu)
- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check (Greg Kroah-Hartman) [Orabug: 39452134] {CVE-2026-46006}
- ALSA: usb-audio: Evaluate packsize caps at the right place (Takashi Iwai)
- usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() (Micha? Pecio)
- ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch (C?ssio Gabriel)
- ALSA: usb-audio: Avoid false E-MU sample-rate notifications (C?ssio Gabriel)
- ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES (C?ssio Gabriel) [Orabug: 39452171] {CVE-2026-46018}
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free (Jeongjun Park)
- tty: n_gsm: fix flow control handling in tx path (Daniel Starke)
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing (Anderson Nascimento)
- crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300568] {CVE-2026-31697}
- crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300572] {CVE-2026-31698}
- crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (Sean Christopherson) [Orabug: 39300576] {CVE-2026-31699}
- ALSA: caiaq: take a reference on the USB device in create_card() (Berk Cem Goksel) [Orabug: 39300587] {CVE-2026-31701}
- ALSA: usb-audio: apply quirk for MOONDROP JU Jiu (Cryolitia Pukngae)
- fuse: quiet down complaints in fuse_conn_limit_write (Darrick J. Wong)
- fuse: reject oversized dirents in page cache (Samuel Page) [Orabug: 39300557] {CVE-2026-31694}
- fs/ntfs3: validate rec->used in journal-replay file record check (Greg Kroah-Hartman)
- iommu: fix a reference count leak in iommu_sva_bind_device() (Vasant Karasulli)
- rxrpc: Fix anonymous key handling (David Howells)
- rxrpc: only handle RESPONSE during service challenge (Jie Wang) [Orabug: 39342679,39368252]
- ksmbd: unset conn->binding on failed binding request (Namjae Jeon)
- scripts/dtc: Remove unused dts_version in dtc-lexer.l (Nathan Chancellor)
- Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" (Guocai He)
- drivers: base: Free devm resources when unregistering a device (David Gow)
- cpufreq: Avoid a bad reference count on CPU node (Miquel Sabat? Sol?) [Orabug: 37206351] {CVE-2024-50012}
- net: clear the dst when changing skb protocol (Jakub Kicinski) [Orabug: 38158471] {CVE-2025-38192}
- fbdev: efifb: Register sysfs groups through driver core (Thomas Wei?schuh) [Orabug: 37205941] {CVE-2024-49925}
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime (Yu Kuai) [Orabug: 37649831] {CVE-2025-21712}
- cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Guangshuo Li) [Orabug: 39343645] {CVE-2026-43328}
- cpufreq: governor: Free dbs_data directly when gov->init() fails (Liao Chang)
- rxrpc: Fix recvmsg() unconditional requeue (David Howells)
- fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) {CVE-2023-45896}
- btrfs: lock the inode in shared mode before starting fiemap (Filipe Manana)
- f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (Chao Yu)
- can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs (Marc Kleine-Budde) [Orabug: 38773752] {CVE-2025-68307}
- Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919] {CVE-2024-26886}
- iio: imu: inv_icm42600: fix odr switch when turning buffer off (Jean-Baptiste Maneyrol)
- pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] {CVE-2024-27389}
- f2fs: fix to wait on block writeback for post_read case (Chao Yu)
- net: stmmac: fix TSO DMA API usage causing oops (Russell King) [Orabug: 37434619] {CVE-2024-56719}
- drm/amdgpu: unmap and remove csa_va properly (Lang Yu)
- binfmt_misc: restore write access before closing files opened by open_exec() (Zilin Guan) [Orabug: 38773485] {CVE-2025-68239}
- gfs2: No more self recovery (Andreas Gruenbacher) [Orabug: 38351909] {CVE-2025-38659}
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO (Kumar Kartikeya Dwivedi)
- dlm: fix possible lkb_resource null dereference (Alexander Aring) [Orabug: 37472202] {CVE-2024-47809}
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [Orabug: 38175068] {CVE-2025-38250}
- mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() (Joonwon Kang)
- btrfs: do not strictly require dirty metadata threshold for metadata writepages (Qu Wenruo) [Orabug: 38970329] {CVE-2026-23157}
- btrfs: send: check for inline extents in range_is_hole_in_parent() (Qu Wenruo) [Orabug: 38970284] {CVE-2026-23141}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov)
- spi: cadence-quadspi: Implement refcount to handle unbind during busy (Khairul Anuar Romli)
- fs: dlm: fix use after free in midcomms commit (Alexander Aring)
- dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() (Guodong Xu)
- net/sched: cls_u32: use skb_header_pointer_careful() (Eric Dumazet) [Orabug: 38970488] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Eric Dumazet)
- dm-verity: disable recursive forward error correction (Mikulas Patocka) [Orabug: 38887637] {CVE-2025-71161}
- blk-mq: use quiesced elevator switch when reinitializing queues (Keith Busch)
- wifi: iwlwifi: read txq->read_ptr under lock (Johannes Berg) [Orabug: 36683388] {CVE-2024-36922}
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio() (Ye Bin)
- s390/xor: Fix xor_xc_2() inline assembly constraints (Heiko Carstens)
- ALSA: control: Avoid WARN() for symlink errors (Takashi Iwai) [Orabug: 37434224] {CVE-2024-56657}
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Jaskaran Singh) [Orabug: 38730673] {CVE-2025-40261}
- Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" (Jaskaran Singh)
- tty: n_gsm: fix deadlock and link starvation in outgoing data path (Daniel Starke)
- MPTCP: fix lock class name family in pm_nl_create_listen_socket (Li Xiasong)
- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() (Breno Leitao) [Orabug: 39273511] {CVE-2026-31586}
- ocfs2: fix possible deadlock between unlink and dio_end_io_write (Joseph Qi) [Orabug: 39273588] {CVE-2026-31598}
- fs/ocfs2: fix comments mentioning i_mutex (Hongnan Li)
- rxrpc: reject undecryptable rxkad response tickets (Yuqi Xu)
- rxrpc: Fix call removal to use RCU safe deletion (David Howells)
- rxrpc: Fix key quota calculation for multitoken keys (David Howells)
- xfrm: clear trailing padding in build_polexpire() (Yasuaki Torimaru) [Orabug: 39262402] {CVE-2026-31664}
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331093] {CVE-2026-43075}
- ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331098] {CVE-2026-43076}
- ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() (Dmitry Antipov)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V (Sebastian Krzyszkowiak)
- Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V (Sebastian Krzyszkowiak)
- arm64: dts: imx8mq-librem5: Set the DVS voltages lower (Sebastian Krzyszkowiak)
- powerpc64/bpf: do not increment tailcall count when prog is NULL (Hari Bathini)
- netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR (Florian Westphal)
- PCI/ACPI: Restrict program_hpx_type2() to AER bits (H?kon Bugge)
- wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (Felix Fietkau) [Orabug: 39167473] {CVE-2026-23444}
- gfs2: Validate i_depth for exhash directories (Andrew Price) [Orabug: 38395007] {CVE-2025-38710}
- gfs2: Improve gfs2_consist_inode() usage (Andrew Price)
- ipv6: add NULL checks for idev in SRv6 paths (Heminhong) [Orabug: 39167468] {CVE-2026-23442}
- Revert "net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()" (Sasha Levin)
- Revert "net: ethernet: xscale: Check for PTP support properly" (Sasha Levin)
- PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown (Koichiro Den)
- media: hackrf: fix to not free memory after the device is registered in hackrf_probe() (Jeongjun Park)
- media: vidtv: fix pass-by-value structs causing MSAN warnings (Abd-Alrhman Masalkhi)
- nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map (Deepanshu Kartikey)
- media: as102: fix to not free memory after the device is registered in as102_usb_probe() (Jeongjun Park) [Orabug: 39273468] {CVE-2026-31578}
- bcache: fix cached_dev.sb_bio use-after-free and crash (Mingzhe Zou) [Orabug: 39273482] {CVE-2026-31580}
- ALSA: 6fire: fix use-after-free on disconnect (Berk Cem Goksel) [Orabug: 39273487] {CVE-2026-31581}
- media: em28xx: fix use-after-free in em28xx_v4l2_open() (Abhishek Kumar) [Orabug: 39273494] {CVE-2026-31583}
- media: vidtv: fix nfeeds state corruption on start_streaming failure (Ruslan Valiyev)
- mm/kasan: fix double free for kasan pXds (Ritesh Harjani)
- KVM: x86: Use scratch field in MMIO fragment to hold small write values (Sean Christopherson) [Orabug: 39273523] {CVE-2026-31588}
- checkpatch: add support for Assisted-by tag (Sasha Levin)
- rxrpc: proc: size address buffers for %pISpc output (Pengpeng Hou)
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Pablo Neira Ayuso) [Orabug: 39139840] {CVE-2026-23399}
- smb: client: fix potential UAF in smb2_is_valid_oplock_break() (Paulo Alcantara)
- fsl-mc: Use driver_set_override() instead of open-coding (Krzysztof Kozlowski)
- KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION (Sean Christopherson) [Orabug: 39273531] {CVE-2026-31590}
- ocfs2: handle invalid dinode in ocfs2_group_extend (Zhengyuan Huang) [Orabug: 39273570] {CVE-2026-31596}
- ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY (Tejas Bharambe) [Orabug: 39273579] {CVE-2026-31597}
- media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections (Ruslan Valiyev)
- ALSA: ctxfi: Limit PTP to a single page (Harin Lee) [Orabug: 39273609] {CVE-2026-31602}
- USB: serial: option: add Telit Cinterion FN990A MBIM composition (Fabio Porcedda)
- staging: sm750fb: fix division by zero in ps_to_hz() (Junrui Luo)
- fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- usb: storage: Expand range of matched versions for VL817 quirks entry (Daniel Br?t)
- usbip: validate number_of_packets in usbip_pack_ret_submit() (Nathan Rebello) [Orabug: 39273632] {CVE-2026-31607}
- usb: gadget: renesas_usb3: validate endpoint index in standard request handlers (Greg Kroah-Hartman)
- usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() (Greg Kroah-Hartman)
- usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() (Greg Kroah-Hartman) [Orabug: 39273669] {CVE-2026-31617}
- fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO (Greg Kroah-Hartman)
- ALSA: fireworks: bound device-supplied status before string array lookup (Greg Kroah-Hartman) [Orabug: 39273681] {CVE-2026-31619}
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler (Greg Kroah-Hartman)
- net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() (Greg Kroah-Hartman) [Orabug: 39273693] {CVE-2026-31623}
- HID: core: clamp report_size in s32ton() to avoid undefined shift (Greg Kroah-Hartman) [Orabug: 39273697] {CVE-2026-31624}
- HID: alps: fix NULL pointer dereference in alps_raw_event() (Greg Kroah-Hartman) [Orabug: 39273705] {CVE-2026-31625}
- staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() (Lin Yu Chen) [Orabug: 39273709] {CVE-2026-31626}
- i2c: s3c24xx: check the size of the SMBUS message before using it (Greg Kroah-Hartman)
- can: raw: fix ro->uniq use-after-free in raw_rcv() (Samuel Page) [Orabug: 39273447] {CVE-2026-31532}
- nfc: llcp: add missing return after LLCP_CLOSED checks (Junxi Qian)
- ALSA: usb-audio: Update for native DSD support quirks (Jussi Laako)
- MIPS: mm: Rewrite TLB uniquification for the hidden bit feature (Maciej W. Rozycki)
- MIPS: mm: Suppress TLB uniquification on EHINV hardware (Maciej W. Rozycki)
- MIPS: Always record SEGBITS in cpu_data.vmbits (Maciej W. Rozycki)
- mips: mm: Allocate tlb_vpn array atomically (Stefan Wiehler)
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [Orabug: 39171450] {CVE-2026-31407}
- i3c: fix uninitialized variable use in i2c setup (Jamie Iles)
- perf/x86/intel/uncore: Skip discovery table for offline dies (Zide Chen) [Orabug: 39331116] {CVE-2026-43079}
- gpio: tegra: fix irq_release_resources calling enable instead of disable (Samasth Norway Ananda)
- l2tp: Drop large packets with UDP encap (Alice Mikityanska) [Orabug: 39331125] {CVE-2026-43080}
- af_unix: read UNIX_DIAG_VFS data under unix_state_lock (Jiexun Wang) [Orabug: 39263356] {CVE-2026-31673}
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (Zhengchuan Liang) [Orabug: 39263406] {CVE-2026-31685}
- netfilter: xt_multiport: validate range encoding in checkentry (Ao Zhou) [Orabug: 39263388] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Xiang Mei) [Orabug: 39331145] {CVE-2026-43085}
- xfrm_user: fix info leak in build_mapping() (Greg Kroah-Hartman) [Orabug: 39331163] {CVE-2026-43089}
- xsk: tighten UMEM headroom validation to account for tailroom and min frame (Maciej Fijalkowski) [Orabug: 39331181] {CVE-2026-43093}
- e1000: check return value of e1000_read_eeprom (Agalakov Daniil)
- tracing/probe: reject non-closed empty immediate strings (Pengpeng Hou)
- nfc: s3fwrn5: allocate rx skb before consuming bytes (Pengpeng Hou)
- ipv4: icmp: fix null-ptr-deref in icmp_build_probe() (Yiqi Sun) [Orabug: 39331198] {CVE-2026-43099}
- net: lapbether: handle NETDEV_PRE_TYPE_CHANGE (Eric Dumazet)
- net: sched: act_csum: validate nested VLAN headers (Ruide Cao) [Orabug: 39263401] {CVE-2026-31684}
- eventpoll: defer struct eventpoll free to RCU grace period (Nicholas Carlini) [Orabug: 39784990] {CVE-2026-43074}
- epoll: use refcount to reduce ep_mutex contention (Paolo Abeni)
- drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock (Ma?ra Canal)
- drm/vc4: Fix a memory leak in hang state error path (Ma?ra Canal) [Orabug: 39331212] {CVE-2026-43104}
- drm/vc4: Fix memory leak of BO array in hang state (Ma?ra Canal) [Orabug: 39331216] {CVE-2026-43105}
- PCI: hv: Set default NUMA node to 0 for devices without affinity info (Long Li)
- arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency (Sebastian Krzyszkowiak)
- soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching (Potin Lai)
- ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J (Tomasz Merta)
- wifi: brcmfmac: validate bsscfg indices in IF events (Pengpeng Hou) [Orabug: 39331238] {CVE-2026-43110}
- ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 (Arthur Husband)
- HID: roccat: fix use-after-free in roccat_report_event (Beno?t Sevens) [Orabug: 39331244] {CVE-2026-43111}
- HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 (Leo Vriska)
- pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer) (Andy Shevchenko)
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (Fredric Cover)
- ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex (Phil Willoughby)
- ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list (Kuninori Morimoto)
- wifi: wl1251: validate packet IDs before indexing tx_frames (Pengpeng Hou) [Orabug: 39331254] {CVE-2026-43113}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [Orabug: 39331263] {CVE-2026-43114}
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx (C?sar Montoya)
- btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() (Goldwyn Rodrigues) [Orabug: 39331280] {CVE-2026-43117}
- can: mcp251x: add error handling for power enable in open and resume (Wenyuan Li)
- ALSA: asihpi: avoid write overflow check warning (Arnd Bergmann)
- LTS version: v5.15.208 (Samasth Norway Ananda)
- LTS version: v5.15.207 (Samasth Norway Ananda)
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Prathyushi Nangia) [Orabug: 39460476] {CVE-2026-46174}
- x86/CPU/AMD: Add X86_FEATURE_ZEN1 (Borislav Petkov)
- LTS version: v5.15.206 (Samasth Norway Ananda)
- LTS version: v5.15.205 (Samasth Norway Ananda)
- LTS version: v5.15.204 (Samasth Norway Ananda)
- xen/privcmd: fix double free via VMA splitting (Juergen Gross) [Orabug: 39305911] {CVE-2026-31787}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305899] {CVE-2026-31786}

[5.15.0-323.203.2]
- net/mlx5: Add vhca_id_type support to IPsec alias creation (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5: Add vhca_id_type bit to alias context (Patrisious Haddad) [Orabug: 38732933]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Gal Pressman) [Orabug: 38290328]
- net/mlx5e: Fix race condition during IPSec ESN update (Jianbo Liu) [Orabug: 38290328,39167462] {CVE-2026-23440}
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Jianbo Liu) [Orabug: 38290328,39167465] {CVE-2026-23441}
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39567286,39668793] {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [Orabug: 39567286] {CVE-2026-46331}
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Sean Christopherson) [Orabug: 39673870,39753976] {CVE-2026-63807}
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673870,39686460] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39460221,39673870] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Paolo Bonzini) [Orabug: 39673870]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack) [Orabug: 39673870]
- KVM: x86/mmu: Use a bool for direct (David Matlack) [Orabug: 39673870]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [Orabug: 39425999,39751167] {CVE-2026-43499,CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39425999,39706512] {CVE-2026-43499}
- Revert "net/rds: poll eq during user-reset" (Praveen Kumar Kannoju) [Orabug: 39659419]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619388,39639981,39648952] {CVE-2026-52943}
- fs/binfmt_elf: validate reserved VA ELF notes (Jianfeng Wang) [Orabug: 39681043]
- mm: preserve page-table boundaries for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- mm: enforce max_map_count for reserved VA mappings (Jianfeng Wang) [Orabug: 39681043]
- fs/kernfs: raise sb->maxbytes to MAX_LFS_FILESIZE (Jane Chu) [Orabug: 39209740]
- uek-rpm: cnic: Clean up the elba/SNIC config with make olddefconfig (Dave Kleikamp) [Orabug: 39661609]
- uek-rpm: cnic: Trim the SNIC config for a faster boot (Dave Kleikamp) [Orabug: 39661609]
- net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 38945572]
- net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 38945572]
- tracing/events: Expand global buffer for in-kernel event enables (Manjunath Patil) [Orabug: 39480769]
- RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Hkbinbin) [Orabug: 39452260] {CVE-2026-46043}

[5.15.0-323.203.1]
- net/rds: Wait for rdma_cm_event background work to finish (Gerd Rausch) [Orabug: 38112000]
- locking/mutex: Make contention tracepoints more consistent wrt adaptive spinning (Peter Zijlstra) [Orabug: 39598217]
- locking: Apply contention tracepoints in the slow path (Namhyung Kim) [Orabug: 39598217]
- locking: Add lock contention tracepoints (Namhyung Kim) [Orabug: 39598217]
- net/mlx5: Fix EQ IRQ affinity notifier debug messages (Praveen Kumar Kannoju) [Orabug: 39594875]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Michal Kosiorek) [Orabug: 39460234] {CVE-2026-46116}
- Revert "rds: ib: Add cm_id generation scheme in order to detect new ones" (Sharath Srinivasan) [Orabug: 39226005]



From el-errata at oss.oracle.com  Fri Aug 14 13:06:58 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:58 -0700
Subject: [El-errata] ELBA-2026-500173 Oracle Linux 10 image-builder bug fix
 update
Message-ID: <mailman.156.1786712832.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500173

http://linux.oracle.com/errata/ELBA-2026-500173.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
image-builder-72.0.0-1.0.1.el10.x86_64.rpm

aarch64:
image-builder-72.0.0-1.0.1.el10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/image-builder-72.0.0-1.0.1.el10.src.rpm



Description of changes:

[72.0.0-1.0.1]
- Adopt upstream image-builder 72.0.0 tarball and spec file [Orabug: 39666668]
- Adopt Oracle Linux Support merged upstream in PR 2404



From el-errata at oss.oracle.com  Fri Aug 14 13:07:01 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:07:01 -0700
Subject: [El-errata] ELSA-2026-54541 Important: Oracle Linux 10 .NET 8.0
 security, bug fix, and enhancement update
Message-ID: <mailman.157.1786712836.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54541

http://linux.oracle.com/errata/ELSA-2026-54541.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el10_2.x86_64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el10_2.x86_64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el10_2.x86_64.rpm

aarch64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el10_2.aarch64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el10_2.aarch64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dotnet8.0-8.0.130-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[8.0.130-1.0.1]
- Add support for Oracle Linux

[8.0.130-1]
- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235472



From el-errata at oss.oracle.com  Fri Aug 14 13:07:03 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:07:03 -0700
Subject: [El-errata] ELSA-2026-54590 Important: Oracle Linux 10 .NET 9.0
 security, bug fix, and enhancement update
Message-ID: <mailman.158.1786712838.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54590

http://linux.oracle.com/errata/ELSA-2026-54590.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
aspnetcore-runtime-dbg-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
aspnetcore-targeting-pack-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-apphost-pack-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-hostfxr-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-dbg-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-9.0-9.0.120-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-aot-9.0-9.0.120-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-dbg-9.0-9.0.120-1.0.1.el10_2.x86_64.rpm
dotnet-targeting-pack-9.0-9.0.19-1.0.1.el10_2.x86_64.rpm
dotnet-templates-9.0-9.0.120-1.0.1.el10_2.x86_64.rpm
netstandard-targeting-pack-2.1-9.0.120-1.0.1.el10_2.x86_64.rpm

aarch64:
aspnetcore-runtime-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
aspnetcore-runtime-dbg-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
aspnetcore-targeting-pack-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-apphost-pack-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-hostfxr-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-dbg-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-9.0-9.0.120-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-aot-9.0-9.0.120-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-dbg-9.0-9.0.120-1.0.1.el10_2.aarch64.rpm
dotnet-targeting-pack-9.0-9.0.19-1.0.1.el10_2.aarch64.rpm
dotnet-templates-9.0-9.0.120-1.0.1.el10_2.aarch64.rpm
netstandard-targeting-pack-2.1-9.0.120-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dotnet9.0-9.0.120-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[9.0.120-1.0.1]
- Add support for Oracle Linux

[9.0.120-1]
- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235477



From el-errata at oss.oracle.com  Fri Aug 14 13:07:05 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:07:05 -0700
Subject: [El-errata] ELSA-2026-54650 Moderate: Oracle Linux 10 nghttp2
 security update
Message-ID: <mailman.159.1786712839.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54650

http://linux.oracle.com/errata/ELSA-2026-54650.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libnghttp2-1.68.0-3.el10_2.2.x86_64.rpm
libnghttp2-devel-1.68.0-3.el10_2.2.x86_64.rpm
nghttp2-1.68.0-3.el10_2.2.x86_64.rpm

aarch64:
libnghttp2-1.68.0-3.el10_2.2.aarch64.rpm
libnghttp2-devel-1.68.0-3.el10_2.2.aarch64.rpm
nghttp2-1.68.0-3.el10_2.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/nghttp2-1.68.0-3.el10_2.2.src.rpm

Related CVEs:

CVE-2026-58055




Description of changes:

[1.68.0-3.2]
- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)



From el-errata at oss.oracle.com  Fri Aug 14 13:06:22 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:22 -0700
Subject: [El-errata] ELSA-2026-54485 Important: Oracle Linux 8 freerdp
 security update
Message-ID: <mailman.160.1786712843.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54485

http://linux.oracle.com/errata/ELSA-2026-54485.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
freerdp-2.11.7-11.el8_10.x86_64.rpm
freerdp-devel-2.11.7-11.el8_10.i686.rpm
freerdp-devel-2.11.7-11.el8_10.x86_64.rpm
freerdp-libs-2.11.7-11.el8_10.i686.rpm
freerdp-libs-2.11.7-11.el8_10.x86_64.rpm
libwinpr-2.11.7-11.el8_10.i686.rpm
libwinpr-2.11.7-11.el8_10.x86_64.rpm
libwinpr-devel-2.11.7-11.el8_10.i686.rpm
libwinpr-devel-2.11.7-11.el8_10.x86_64.rpm

aarch64:
freerdp-2.11.7-11.el8_10.aarch64.rpm
freerdp-devel-2.11.7-11.el8_10.aarch64.rpm
freerdp-libs-2.11.7-11.el8_10.aarch64.rpm
libwinpr-2.11.7-11.el8_10.aarch64.rpm
libwinpr-devel-2.11.7-11.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/freerdp-2.11.7-11.el8_10.src.rpm

Related CVEs:

CVE-2026-64624
CVE-2026-67289
CVE-2026-67299
CVE-2026-68580




Description of changes:

[2:2.11.7-11]
- Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299,
  CVE-2026-68580)
  Resolves: RHEL-213173, RHEL-222796, RHEL-222972, RHEL-223606



From el-errata at oss.oracle.com  Fri Aug 14 13:06:21 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:21 -0700
Subject: [El-errata] ELSA-2026-42887 Important: Oracle Linux 8
 java-17-openjdk security update
Message-ID: <mailman.161.1786712843.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-42887

http://linux.oracle.com/errata/ELSA-2026-42887.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-17-openjdk-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-demo-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-devel-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-headless-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-javadoc-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-javadoc-zip-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-jmods-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-src-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-src-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-src-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-static-libs-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.1.0.1.el8.x86_64.rpm

aarch64:
java-17-openjdk-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-demo-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-devel-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-headless-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-javadoc-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-javadoc-zip-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-jmods-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-src-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-src-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-src-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-static-libs-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.1.0.1.el8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/java-17-openjdk-17.0.20.0.8-1.1.0.1.el8.src.rpm

Related CVEs:

CVE-2026-41254
CVE-2026-46917
CVE-2026-46968
CVE-2026-47010
CVE-2026-47021
CVE-2026-47027
CVE-2026-47059
CVE-2026-47063
CVE-2026-60147




Description of changes:

[1:17.0.20.0.8-1.1.0.1]
- Add Oracle vendor bug URL [Orabug: 34340155]

[1:17.0.20.0.8-1.1]
- Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
- Add .0 to prelease

[1:17.0.20.0.8-1.1]
- Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla

[1:17.0.20.0.8-1.1]
- Set tzdata requires and build requires to 2026b
- Set fipsver to 821eb26f706
- Delete comments about patch macro syntax
- Set bundled freetype version to 2.14.3
- Set bundled giflib version to 6.1.3
- Set bundled harfbuzz version to 14.2.0
- Set bundled lcms2 version to 2.19.1
- Set bundled libpng version to 1.6.58

[1:17.0.20.0.8-1.1]
- Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876)

[1:17.0.20.0.8-1]
- Update to jdk-17.0.20+8 (GA)
- Add to .gitignore openjdk-17.0.20+8.tar.xz
- Set updatever to 20
- Set buildver to 8
- Update sources to openjdk-17.0.20+8.tar.xz
- ** This tarball is embargoed until 2026-07-21 @ 1pm PT. **
- Resolves: RHEL-188876



From el-errata at oss.oracle.com  Fri Aug 14 13:06:59 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:59 -0700
Subject: [El-errata] ELSA-2026-54512 Moderate: Oracle Linux 10
 gnome-remote-desktop security update
Message-ID: <mailman.162.1786712850.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54512

http://linux.oracle.com/errata/ELSA-2026-54512.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gnome-remote-desktop-49.3-4.el10_2.x86_64.rpm

aarch64:
gnome-remote-desktop-49.3-4.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gnome-remote-desktop-49.3-4.el10_2.src.rpm

Related CVEs:

CVE-2026-18358




Description of changes:

[49.3-4]
- Backport connection throttling



From el-errata at oss.oracle.com  Fri Aug 14 13:06:41 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Fri, 14 Aug 2026 06:06:41 -0700
Subject: [El-errata] ELSA-2026-54574 Important: Oracle Linux 9 .NET 8.0
 security, bug fix, and enhancement update
Message-ID: <mailman.163.1786712860.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54574

http://linux.oracle.com/errata/ELSA-2026-54574.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el9_8.x86_64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el9_8.x86_64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el9_8.x86_64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el9_8.x86_64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el9_8.x86_64.rpm

aarch64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el9_8.aarch64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el9_8.aarch64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el9_8.aarch64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el9_8.aarch64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/dotnet8.0-8.0.130-1.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[8.0.130-1.0.1]
- Add support for Oracle Linux

[8.0.130-1]
- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235471



From el-errata at oss.oracle.com  Sat Aug 15 12:36:51 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 12:36:51 +0000
Subject: [El-errata] New Ksplice updates for UEKR6 5.4.17 on OL7 and OL8
Message-ID: <mailman.164.1786797427.31.el-errata@oss.oracle.com>

Synopsis: The following CVEs can now be patched using Ksplice
CVEs: CVE-2026-31598 CVE-2026-46116 CVE-2026-52995

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest CVE fixes.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running UEKR6 5.4.17 on
OL7 and OL8 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2026-31598: Kernel deadlock in OCFS2 filesystem.

Orabug: 39273589


* CVE-2026-46116: Use-after-free in XFRM.

Orabug: 39460235


* CVE-2026-52995: Information leak in RDS connection information.

Orabug: 39638198


* Information leak in receives of Reliable Datagram Sockets protocol.

Orabug: 39772651


* Information leak when receiving message over RDS socket.

Orabug: 39772651


SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://oss.oracle.com/pipermail/el-errata/attachments/20260815/1f5fa792/attachment.sig>

From el-errata at oss.oracle.com  Sat Aug 15 14:09:25 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:09:25 -0700
Subject: [El-errata] ELBA-2026-500141 Oracle Linux 9 oVirt 4.5 OLVM Engine
 Release for OL9
Message-ID: <mailman.165.1786802981.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500141

http://linux.oracle.com/errata/ELBA-2026-500141.html

The following updated rpms for Oracle Linux 9 oVirt 4.5 have been uploaded to the Unbreakable Linux Network:

x86_64:
java-client-kubevirt-0.5.0-2.el9.noarch.rpm
java-client-kubevirt-javadoc-0.5.0-2.el9.noarch.rpm
java-ovirt-engine-sdk4-4.4.6-1.el9.noarch.rpm
olvm-branding-4.5.5-1.5.el9.noarch.rpm
olvm-consent-ui-plugin-1.0.0-3.el9.noarch.rpm
olvm-vmcontrol-4.5.5-1.6.el9.noarch.rpm
olvm-vmcontrol-confirm-4.5.5-1.6.el9.noarch.rpm
ovirt-ansible-collection-3.2.0-1.33.el9.noarch.rpm
ovirt-dependencies-4.5.3-2.el9.noarch.rpm
ovirt-engine-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-backend-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-dbscripts-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-health-check-bundler-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-restapi-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-base-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-cinderlib-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-imageio-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-ovirt-engine-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-ovirt-engine-common-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-setup-plugin-websocket-proxy-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-tools-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-tools-backup-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-vmconsole-proxy-helper-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-webadmin-portal-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-websocket-proxy-4.5.5-1.72.el9.noarch.rpm
python3-ovirt-engine-lib-4.5.5-1.72.el9.noarch.rpm
ovirt-engine-appliance-4.5-20260211.1.0.6.el9.x86_64.rpm
ovirt-engine-dwh-4.5.8-1.6.el9.noarch.rpm
ovirt-engine-dwh-grafana-integration-setup-4.5.8-1.6.el9.noarch.rpm
ovirt-engine-dwh-setup-4.5.8-1.6.el9.noarch.rpm
ovirt-engine-extension-aaa-jdbc-1.3.0-3.el9.noarch.rpm
ovirt-engine-extension-aaa-misc-1.1.1-3.el9.noarch.rpm
ovirt-engine-extensions-api-1.0.1-4.el9.noarch.rpm
ovirt-engine-extensions-api-javadoc-1.0.1-4.el9.noarch.rpm
ovirt-engine-keycloak-15.0.2-6.el9.noarch.rpm
ovirt-engine-keycloak-setup-15.0.2-6.el9.noarch.rpm
ovirt-engine-metrics-1.6.2-1.el9.noarch.rpm
ovirt-engine-nodejs-modules-2.3.20-1.el9.noarch.rpm
ovirt-engine-ui-extensions-1.3.7-1.el9.noarch.rpm
ovirt-engine-wildfly-24.0.1-3.el9.x86_64.rpm
ovirt-engine-wildfly-overlay-24.0.1-3.el9.noarch.rpm
ovirt-hosted-engine-setup-2.7.1-1.5.el9.noarch.rpm
ovirt-log-collector-4.5.0-8.el9.noarch.rpm
ovirt-web-ui-1.9.3-1.el9.noarch.rpm
vdsm-jsonrpc-java-1.7.3-3.el9.noarch.rpm
vdsm-jsonrpc-java-javadoc-1.7.3-3.el9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/java-client-kubevirt-0.5.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/java-ovirt-engine-sdk4-4.4.6-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/olvm-branding-4.5.5-1.5.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/olvm-consent-ui-plugin-1.0.0-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/olvm-vmcontrol-4.5.5-1.6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-ansible-collection-3.2.0-1.33.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-dependencies-4.5.3-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-4.5.5-1.72.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-appliance-4.5-20260211.1.0.6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-dwh-4.5.8-1.6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-extension-aaa-jdbc-1.3.0-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-extension-aaa-misc-1.1.1-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-extensions-api-1.0.1-4.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-keycloak-15.0.2-6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-metrics-1.6.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-nodejs-modules-2.3.20-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-ui-extensions-1.3.7-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-wildfly-24.0.1-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-engine-wildfly-overlay-24.0.1-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-hosted-engine-setup-2.7.1-1.5.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-log-collector-4.5.0-8.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ovirt-web-ui-1.9.3-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/vdsm-jsonrpc-java-1.7.3-3.el9.src.rpm



Description of changes:

java-client-kubevirt
[0.5.0-2]
- Updated the pom license file to LGPL2.1

* Mon Mar 30 2020 Piotr Kliczewski <pkliczew at redhat.com = 0.5.0
- types: EvictionStrategy and VolumeMode wrongly defined as types
- types: More types wrongly defined in api definition

* Thu Mar 19 2020 Piotr Kliczewski <pkliczew at redhat.com = 0.4.0
- Update kubevirt api definition

java-ovirt-engine-sdk4
[4.3.0]
- Rebase on 4.3.0 for fc29 support

olvm-branding
[4.5.5-1.5]
- Fix client resource URL

[4.5.5-1.4]
- Add OL10 guest VM

[4.5.5-1.3]
- Rename 04_05_0350_vm_icons_update.sql to 04_05_0320_vm_icons_update.sql

[4.5.5-1.2]
- Add OL_CoreOs guest VM

[4.5.5-1.1]
- Update Version for OLVM-4.5.5

olvm-consent-ui-plugin
[1.0.0-3]
- update the license to Apache License, Version 2.0

[1.0.0-2]
- update the license to Proprietary COPYING

[1.0.0-1]
- Initial package

olvm-vmcontrol
[4.5.5-1.6]
- Fix issue with Verbose flag parsing

[4.5.5-1.5]
- Add better support for internal engine truststore

[4.5.5-1.4]
- Fixed print help, update to java-21-openjdk

[4.5.5-1.3]
- Update java-11-openjdk to java-21-openjdk

[4.5.5-1.2]
- Add -t cpuPinningTopology fag to support 1-to-1 vCPU to pCPU-set pinning

[4.5.5-1.1]
- Bump up version for 4.5.5 release

ovirt-ansible-collection
[3.2.0-1.33]
- Avoid ignored libvirt default network failures during hosted-engine deploy
- Add python3-passlib dependency for hosted engine password hashing

[3.2.0-1.32]
- Add he_additional_repo_urls and he_no_proxy
- Fix oracle-ovirt-release-45-el* for OL8 and
- Fix failure of 'undefine domain HostedEngine'

[3.2.0-1.31]
- Enable ssh and root login for OL9 appliance

ovirt-dependencies
[4.5.3-2]
- Add slf4j-jdk14 dependecy needed when Maven3.8 module is enabled

[4.5.3-1]
- Bump SpringFramework to 5.3.27

ovirt-engine
[4.5.5-1.72]
- Clean up NIC attachment after network deletion

[4.5.5-1.71]
- Ask password for user 'admin at ovirt' when updating to keycloak

[4.5.5-1.70]
- Remove vdsm compat flag from v2v-imports

[4.5.5-1.69]
- Add AMD EPYC-Genoa CPU model

[4.5.5-1.68]
- Pick fixes of backup and restore for OL9 and postgresql-16
- Pick fixes of migrate legacy p12 on openssl upgrade
- Fix restore owner and mode from the pre-reencrypt backup file

[4.5.5-1.67]
- Reduce log-level of repeating loggings

[4.5.5-1.66]
- Fix event datetime format

[4.5.5-1.65]
- Fix upstream PR of nvram and tpm data

[4.5.5-1.64]
- Add olvm-consent-ui-plugin

[4.5.5-1.63]
- Remove frequencies and reenlightenment for hyperv

ovirt-engine-appliance
[4.5-20260211.1.0.6]
- Add OL9 SHE aapliance

ovirt-engine-dwh
[4.5.8-1.6]
- Update java-11-openjdk to java-21-openjdk

[4.5.8-1.5]
- Enabled selinux bool for grafana.

[4.5.8-1.4]
- Enabled selinux bool for grafana.

[4.5.8-1.3]
- Added ongres_stringprep & ongres_saslprep jars to the class path

[4.5.8-1.2]
- Forward port from 4.4 - Added ongres_scram_client & ongres_scram_common jars to the class path

[4.5.8-1.1]
Added license and updated dom4j dependency

[4.5.8]
- Fix admin login for grafana
- Migrate License tag to SPDX

ovirt-engine-extension-aaa-jdbc
[1.3.0-3]
- Update slf4j

[1.3.0-2]
- Update java-11-openjdk to java-21-openjdk

ovirt-engine-extension-aaa-misc
[1.1.1-3]
- Update java-11-openjdk to java-21-openjdk

ovirt-engine-extensions-api
[1.0.1-4]
- Update java-11-openjdk to java-21-openjdk

ovirt-engine-keycloak
[15.0.2-6]
- Set password of admin at ovirt to be engine admin password
- packaging: setup: Filter from logs secrets from otopi answer files

[15.0.2-5]
- Allow custom DB credentials

[15.0.2-4]
- Better engine-setup summary message

[15.0.2-3]
- Keycloak reactivation documentation
- Keycloak 'supported' flag initialization

[15.0.2-2]
- Support for activation of Keycloak SSO on existing installation
- Fix for oVirt Provider OVN Keycloak credentials
- Fix for oVirt Monitoring Portal Keycloak credentials
- Support for oVirt Engine backup & restore

[15.0.2-1]
- Initial release

ovirt-engine-metrics
[1.6.2-1]
- Rebase on upstream 1.6.2.
- Migrated to SPDX license.
- Fix comparison logic in ovirt_initial_validations Ansible role https://github.com/oVirt/ovirt-engine/issues/869

[1.6.1-1]
- Adapt dependencies on EL9

[1.6.0]
- Bug 2059521 - Upgrade to ansible-core-2.12

[1.5.0]
- Bug 2025936 - metrics configuration playbooks failing due to rhel-system-role last refactor
- Bug 1990462 - Add user name and password to ELK integration
- Bug 2012569 - Update the LSR version
- Bug 1804268 - Add ansible-lint, and adjust the role accordingly

ovirt-engine-nodejs-modules
[2.3.20-1]
- add preseed for https://github.com/oVirt/ovirt-web-ui/pull/1648

[2.3.19-1]
- add preseed for https://github.com/oVirt/ovirt-engine-ui-extensions/pull/87
  - remove stale preseeds

[2.3.18-1]
- add preseed for https://github.com/oVirt/cockpit-ovirt/pull/35

[2.3.17-1]
- add preseed for https://github.com/oVirt/ovirt-web-ui/pull/1643
  - remove stale preseeds

[2.3.16-1]
- add preseed for https://github.com/oVirt/ovirt-web-ui/pull/1641

[2.3.15-1]
- github actions: update action versions to current
  - remove stale preseeds

[2.3.14-1]
- add preseed for https://github.com/oVirt/ovirt-web-ui/pull/1638
  - remove stale preseeds

[2.3.13-1]
- add preseed for https://github.com/oVirt/ovirt-engine-ui-extensions/pull/84
  - remove stale preseeds

[2.3.12-1]
- add preseed for https://github.com/oVirt/ovirt-engine-ui-extensions/pull/83
  - remove stale preseeds

[2.3.11-1]
- add preseed for https://github.com/oVirt/ovirt-engine-ui-extensions/pull/81
  - remove stale preseeds

ovirt-engine-ui-extensions
[1.3.7-1]
- Adopt the use of shadow DOM/root for react-modals
- Github actions: update actions versions to current supported ones
- Update dependencies of various packages:
  isomorphic-git from 0.67.2 to 1.8.2, loader-utils from 2.0.0 to 2.0.4, minimatch from 3.0.4 to 3.1.2, qs from 6.5.2 to 6.5.3

[1.3.6-1]
- Export VM dialog: fix a bug for avoid blocking the export vm process in case the vm original_template is set to null

[1.3.5-1]
- CPU pinning dialog: add the 'Isolate Threads' cpu pinning policy
- RHV dashboard - fix the 'Top Utilized Resources CPU' percentage values
- RHV dashboard - Force tooltips on the DonutChart to a constant width for handling few non-Latin languages
- Complete migration to Patternfly 4 so Patternfly 3 is no longer used, upgrade Webpack to version 5 , enable EL9 builds
- Update dependencies of packages: moment from 2.29.2 to 2.29.4, terser from 5.14.1 to 5.14.2, minimist from 1.2.5 to 1.2.6, y18n from 4.0.0 to 4.0.3
- Build issues: add conditional build for offline/online builds

[1.3.4-1]
- Cluster upgrade wizard dialog: fix the selected hosts handling bug
- Cluster upgrade wizard dialog: fix a bug in trackUpgradeProgress to always fetch events from the last point
- Update dependencies for various packages: moment from 2.24.0 to 2.29.2, caniuse-lite for browserslist  to version 1.0.30001346
- I18n: pull translations for Georgian (ka-GE)
- Github actions: always upgrade nodejs-modules
- Build issues: use hours, minutes and seconds in the RPM name, version part
- Build issues: mark the copr make_srpm git dir as safe (git 2.35.2 security fix)

[1.3.3-1]
- Fix a bug for minimizing CSS flashing of all ui-extensions dialogs
- vGPU dialog: small code refactorings
- vGPU dialog: show widgets even if the cluster doesn't contain any vGPU hosts
- CPU pinning dialog: fix message's trailing zero in case of no CPU topology was found
- I18n: update translations (fetch from Zanata, remove outdated translations)
- I18n: add support for Georgian language as a community translation

[1.3.2-1]
- A new dialog is added: vm-manage-gpu for managing vGPUs as VM devices, accessible from VM-VM devices sub tab
- A new dialog is added: host's CPU pinning dialog for viewing host's cpu topology. accessible from hosts-hosts devices sub tab
- A new dialog is added: manage storage connection dialogs for managing iSCSI connections, accessible from the storage domains grid
- Cluster upgrade wizard dialog: migrate the wizard to use PatternFly 4 and add to the dialog a progress tracking indication
- Parameters passed to translated messages are now formatted in the translation layer only (not in code) and by using ICU number skeletons
- A github action was addded such that when commits or tags lables are pushed to master, run a build
- Fix a case of a HEAD commit having multiple tags such that existing build scripts wouldn't fail to recognize it as a tagged commit
- Update dependencies for various packages:simple-get, ansi-regex, normalize-url and trim-off-newlines

[1.3.1-1]
- a new dialog is added: CPU pinning dialog for a VM
- vGPU dialog: fix the max instances
- Export VM dialog: move button to kebab menu and rename button label
- Cluster upgrade dialog: use correlation id for Ansible playbooks
- RHV dashboard: add a link to the Monitoring Portal from the dashboard
- Improve logging and error handling
- Optimize css loading
- Update Patternfly css import
- Update dependencies for various packages: eslint, babel, react-intl-po, trim-off-newlines, postcss
- Move and reordering all modal sources
- Enable Copr builds
- Move the project to GitHub and update the relevant documentation
- Fix translation by using msg within components
- I18n: Update Zanata configurations

[1.2.7-1]
- Update zatana.xml to version 1.2
- Translation update, 17-May-2021
- Update glob-parent, path-parse, ua-parser-js and underscore libraries dependencies
- vGPU dialog: add more instances of a card
- vGPU dialog: add vGPU type name

[1.2.6-1]
- Update lodash dependency to 4.17.21

[1.2.5-1]
- Reorder Cluster Upgrade action buttons
- Update Zanata tools to use the maven plugin
- Remove fc30 build from STDCI
- Upgrade patternfly and patternfly-react for both 3 and 4 versions.
- Style PF4 modals to match PF3 modals
- Do not auto-focus modal 'x' close button
- Fix missing translations for dashboard and for Migrate VM dialog
- Update bootstrap-select and datatables.net dependencies

ovirt-engine-wildfly
[24.0.1-3]
- Update Apache CXF jar files to address CVE-2025-48913

ovirt-engine-wildfly-overlay
[24.0.1-3]
- Update Apache wildfly version and add license file.

ovirt-hosted-engine-setup
[2.7.1-1.5]
- Preserve ansible-playbook rc after late callback result output

ovirt-log-collector
[4.5.0-8]
- Fix the skip file position when collecting the report

[4.5.0-7]
- Skip files extension that are part of BR2 of new MOS Tool Policy

[4.5.0-6]
- Skip files extension that are not supported by new support tool

[4.5.0-5]
- Skip payload collection on hosts

ovirt-web-ui
[1.9.3-1]
- user/account settings - add support for the Virtual Machines layout (card/table view) property option
 - fix a bug of displaying the correct month in the 'Created' field of the snapshot details card and in the NotificationDrawer
   events timestamp
 - optimize the entity permission to permit mappings code to avoid the application from hanging out in case of a large
   amount of entities
 - enhance the support of TPM devices for Windows 11/2022 VMs by enforcing the Q35 Chipset with UEFI Firmware Type, if
   current firmware prevents enabling TPM
 - github actions: update actions versions to current supported ones
 - update dependencies of various packages:
   minimist from 1.2.5 to 1.2.7
   moment from 2.29.1 to 2.29.4
   minimatch from 3.0.4 to 3.1.2
   shelljs from 0.8.4 to 0.8.5
   react-redux from 7.2.6 to 7.2.9
   redux from ^4.1.2 to 4.2.0
   redux-saga from 1.1.3 to 1.2.1
   patternfly from 4.185.1 to 4.215.1
   react-charts from 6.55.16 to 6.94.1
   react-console from 4.53.20 to 4.92.1
   react-core from 4.202.16 to 4.241.1
   react-icons from 4.53.16 to 4.92.1
   react-table from 4.71.16 to 4.110.1

[1.9.2-1]
- VM Details - users can now create a new NIC with an empty vNIC profile, even if they don't have permissions for NIC profiles within the DC
 - VM details - force tooltips on the VM's react-chart charts to a constant width
 - VMs dashboard - support table view (in additions to cards view) on the Virtual Machines dashboard screen
 - add basic support for TPM devices for Windows 11/2022 VMs of cluster level >= 4.7
 - build issues: specify COPR chroot explicitly
 - build issues: remove broken Docker support
 - bump the Zanata version to 1.9
 - update dependencies: bump terser to 5.14.2, bump follow-redirects to 1.15.2
 - documentation updates - remove EL9 limitation note

[1.9.1-1]
- VM details snapshots card: add a frontend lock for the restored snapshot during the restore operation
 - VM details - force tooltips on the VM's utilization  charts to a constant width
 - fix a bug for opening a console on full screen mode after clicking the "full screen" button even when also set by account settings
 - fix a regression bug for redirecting to the welcome page after clicking on the logo
 - fix a bug for enabling to enter values into NumberInput on few dialogs
 - fix a bug of missing card IDs on the VM List screen
 - build issues:: add conditional build for offline/online builds
 - bump underscore from 1.6.0 to 1.13.1

[1.9.0-1]
- migrate all VM Portal components from PatternFly 3 to PatternFly 4. No use of PatternFly 3 anymore
 - migrate from Webpack 4 to Webpack 5 and use newest versions of Webpack plugins
 - user/account settings - display the notification settings tooltip as hint instead
 - VM details - allow a user to consume ISO images without granting a 'create disk' permission
 - VM details snapshots card - display notification after a successful snapshot restore
 - VM details snapshots card - fix a bug so that after deleting an existing snapshot, the 'create snapshot' button won't stay disabled
 - VM details snapshots card - fix a bug so that the snapshots locking mechanism is for the current VM only
 - add new NIC type "e1000e"
 - i18n: add support for Georgian language as a community translation
 - i18n: translations update, expire translations after zanata push
 - i18n: pull translations for Georgian language (ka-GE)
 - build: use hours, minutes and seconds in RPM snapshot name, version part
 - build: mark the Copr make_srpm git dir as safe (git 2.35.2 security fix)
 - github actions: add an offline build for el9
 - update dependencies of caniuse-lite for browserslist to version 1.0.30001346

[1.8.1-1]
- fix a bug for removing deleted pool entities from VMs dashboard after refresh for the last pool
 - add an option to trigger OST run with "/ost" via Github

[1.8.0-1]
- user/account settings - support auto connect for a VM
 - user/account settings -  support setting a full screen mode for the noVnc console
 - create VM Wizard - set the first disk as bootable by default
 - VM details - fix a bug for displaying numeric values in all utilization charts tooltips
 - VM details - fix a bug of displaying the correct values of VM's utilization disk charts in case of more than one reported file system
 - VM details - fix VM's utilization disk charts colors to be based on thresholds
 - VM details - remove 'restore snapshot' button from snapshot details dialog since it duplicates the functionality located on the card
 - fix a bug for removing deleted pool entities from VMs dashboard after refresh
 - fix a bug of VM Portal crashes at login time when nic.mac is fetched as null
 - fix a bug to enable assignment of user quota when creating a VM from a non-blank template
 - handle SSO deprecation by removing the default attempt to use SSO
 - code refactoring for reducer utils functions, convert reducers from ImmutableJS to ImmerJS
 - enable Copr builds
 - move the project to GitHub and update the relevant documentation and readme file
 - upgrade dependencies of various libraries
 - i18n: update Zanata configuration

[1.7.2-1]
- fix disks creation by correctly handling disk format and sparse attributes based on the target storage domain and
   also based on the template's disk format for server/high performance/desktop VM types
 - display error messages when VM's virtual CPU topology is set to invalid values
 - fix downloading Remote Desktop file for Firefox browser with the correct .rdp file extension instead of .vv extension
 - push master builds to ovirt-4.4 branch as well
 - update dependencies of immer, ua-parser-js and glob-parent packages

[1.7.1-1]
- refactor initial VM/Pool page loading and background refresh
 - refactor login managed base-data, user, group, and role fetches
 - refactor and improve disk permit/permissions calculations
 - refactor and remove unused sagas utils
 - refactor and optimize snapshot disks and nics fetching
 - refactor callExternalAction() to log the API method with Function.name
 - refactor console connection code and also support opening RDP console for headless Windows VMs
 - remove all of the OvirtApi toInternal functions
 - remove non used NewDiskDialog actions/reducers
 - upgrade eslint and all related dependencies to current versions and update configurations for react/jsx indent and eslint errors
 - add packages dependencies of flow-bin and postcss
 - add babel plugin fancy-console
 - avoid displaying manual refresh or setting actions in the header/navbar until the app is ready
 - fix a bug that when editing an exising disk via VM details, it always resulted with an inactive disk
 - fix fetchVmSnapshots() transform error
 - make the package.json scripts intl:* working again
 - fix a bug for enable loading Portuguese or Chinese languages when reading locales from the url
 - fix a bug for always setting a VM with the correct number of virtual CPUs
 - enhance user settings cancel dialog by informing the user that it is applied to all tabs/sections

[1.7.0-1]
- user/account settings - mark default options on Account Settings dialog
 - user/account settings - add option to reset global user settings to default/installation settings
 - user/account settings - seperate to sections on Account Settings
 - user/account settings - preserve the order and group options by sections in Confirmation dialog and error notification
 - user/account settings - add Console section options to Account Settings
 - user/account settings - add 'persist Locale' advanced settings option to Account Settings dialog
 - user/account settings - update the locales list on Account Settings dialog
 - retrieve current graphic consoles for re-enabling the option to select console types on dashboard (which was removed on ovirt-web-ui-1.6.8)
 - refactor handling ovirt engine config values in general and MaxNumOfVmCpus in specific
 - fix a bug of handling user group permissions which didn't work in ovirt-web-ui-1.6.9-1
 - convert all API Boolean attributes used by "toApi" functions to our new ApiBooleanType
 - fix uptime render in VM Details and Overview Card
 - switch formatDateFromNow() to use moment.humanize()
 - replace custom wrapper around PF3 with PF4 Switch component
 - upgrade the project's Webpack to version 4, babel to version 7
 - upgrade patternfly 4 packages and force lodash version
 - update/fix dependencies of handlebars, bootstrap-select and jquery
 - avoid using translated strings in "key" property
 - code cleanups
 - bump zanata.xml version to 1.7
 - translation update, 17-May-2021

[1.6.9-1]
- user/account settings - support user locale changes by hot reload
 - user/account settings - adding a confirmation dialog before saving user settings changes
 - user/account settings - create a "home" breadcrumbs root to resolve the confusion with "Virtual Machines" Breadcrumbs root
 - user/account settings - add support for setting the refresh interval
 - user/account settings - add labels by design for planned translation cycle
 - create VM Wizard - update create VM steps navigation and disk create checks
 - create VM Wizard- fix a bug so that disk type of new disks based on a 'server/HP' template should be based on the template's disk allocation policy
 - when launching in dev mode, support reading user name, password and domain from env variable
 - add check/validation if permission response is an array, to prevent crashing
 - fixed a bug of missing VmStatusIcon tooltip for a paused vm
 - use semver to verify API engine versions
 - allow users to select/deselect saving the memory while creating a snapshot for a running vm
 - fix a bug of which user permit calculations included invalid permissions
 - show VM's IP address if the vm is up and guest agent is running
 - update the dependency of lodash

vdsm-jsonrpc-java
[1.7.3-3]
- extend the time for SSLClient to verifyPeerCertificates

[1.7.3-2]
- Update java-11-openjdk to java-21-openjdk



From el-errata at oss.oracle.com  Sat Aug 15 14:09:56 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:09:56 -0700
Subject: [El-errata] ELBA-2026-500142 Oracle Linux 9 oVirt 4.5 OLVM Engine
 Release for OL9
Message-ID: <mailman.168.1786803013.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500142

http://linux.oracle.com/errata/ELBA-2026-500142.html

The following updated rpms for Oracle Linux 9 oVirt 4.5 have been uploaded to the Unbreakable Linux Network:

x86_64:
ansible-macros-2021.1.2-3.el9.noarch.rpm
ansible-runner-2.1.3-6.el9.noarch.rpm
python3-ansible-runner-2.1.3-6.el9.noarch.rpm
aopalliance-1.0-20.1.el9.noarch.rpm
apache-commons-collections-3.2.2-26.el9.noarch.rpm
apache-commons-compress-1.21-3.el9.noarch.rpm
apache-commons-exec-1.3-19.el9.noarch.rpm
apache-commons-exec-javadoc-1.3-19.el9.noarch.rpm
apache-commons-lang-2.6-35.el9.noarch.rpm
apache-commons-lang-javadoc-2.6-35.el9.noarch.rpm
apache-sshd-2.9.2-0.1.el9.noarch.rpm
apache-sshd-javadoc-2.9.2-0.1.el9.noarch.rpm
args4j-2.33-15.el9.noarch.rpm
args4j-javadoc-2.33-15.el9.noarch.rpm
collectd-5.12.0-24.0.1.el9.x86_64.rpm
collectd-disk-5.12.0-24.0.1.el9.x86_64.rpm
collectd-netlink-5.12.0-24.0.1.el9.x86_64.rpm
collectd-virt-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_http-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_syslog-5.12.0-24.0.1.el9.x86_64.rpm
collectd-amqp-5.12.0-24.0.1.el9.x86_64.rpm
collectd-apache-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ascent-5.12.0-24.0.1.el9.x86_64.rpm
collectd-bind-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ceph-5.12.0-24.0.1.el9.x86_64.rpm
collectd-chrony-5.12.0-24.0.1.el9.x86_64.rpm
collectd-curl-5.12.0-24.0.1.el9.x86_64.rpm
collectd-curl_json-5.12.0-24.0.1.el9.x86_64.rpm
collectd-curl_xml-5.12.0-24.0.1.el9.x86_64.rpm
collectd-dns-5.12.0-24.0.1.el9.x86_64.rpm
collectd-drbd-5.12.0-24.0.1.el9.x86_64.rpm
collectd-email-5.12.0-24.0.1.el9.x86_64.rpm
collectd-generic-jmx-5.12.0-24.0.1.el9.x86_64.rpm
collectd-gps-5.12.0-24.0.1.el9.x86_64.rpm
collectd-hugepages-5.12.0-24.0.1.el9.x86_64.rpm
collectd-infiniband-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ipmi-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ipvs-5.12.0-24.0.1.el9.x86_64.rpm
collectd-java-5.12.0-24.0.1.el9.x86_64.rpm
collectd-log_logstash-5.12.0-24.0.1.el9.x86_64.rpm
collectd-lua-5.12.0-24.0.1.el9.x86_64.rpm
collectd-mcelog-5.12.0-24.0.1.el9.x86_64.rpm
collectd-mdevents-5.12.0-24.0.1.el9.x86_64.rpm
collectd-memcachec-5.12.0-24.0.1.el9.x86_64.rpm
collectd-mysql-5.12.0-24.0.1.el9.x86_64.rpm
collectd-nginx-5.12.0-24.0.1.el9.x86_64.rpm
collectd-notify_desktop-5.12.0-24.0.1.el9.x86_64.rpm
collectd-notify_email-5.12.0-24.0.1.el9.x86_64.rpm
collectd-nut-5.12.0-24.0.1.el9.x86_64.rpm
collectd-openldap-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ovs_events-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ovs_stats-5.12.0-24.0.1.el9.x86_64.rpm
collectd-pinba-5.12.0-24.0.1.el9.x86_64.rpm
collectd-ping-5.12.0-24.0.1.el9.x86_64.rpm
collectd-postgresql-5.12.0-24.0.1.el9.x86_64.rpm
collectd-python-5.12.0-24.0.1.el9.x86_64.rpm
collectd-redis-5.12.0-24.0.1.el9.x86_64.rpm
collectd-rrdcached-5.12.0-24.0.1.el9.x86_64.rpm
collectd-rrdtool-5.12.0-24.0.1.el9.x86_64.rpm
collectd-sensors-5.12.0-24.0.1.el9.x86_64.rpm
collectd-smart-5.12.0-24.0.1.el9.x86_64.rpm
collectd-snmp-5.12.0-24.0.1.el9.x86_64.rpm
collectd-snmp_agent-5.12.0-24.0.1.el9.x86_64.rpm
collectd-synproxy-5.12.0-24.0.1.el9.x86_64.rpm
collectd-utils-5.12.0-24.0.1.el9.x86_64.rpm
collectd-varnish-5.12.0-24.0.1.el9.x86_64.rpm
collectd-web-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_kafka-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_mongodb-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_prometheus-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_redis-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_riemann-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_sensu-5.12.0-24.0.1.el9.x86_64.rpm
collectd-write_tsdb-5.12.0-24.0.1.el9.x86_64.rpm
collectd-zookeeper-5.12.0-24.0.1.el9.x86_64.rpm
libcollectdclient-5.12.0-24.0.1.el9.x86_64.rpm
libcollectdclient-devel-5.12.0-24.0.1.el9.x86_64.rpm
perl-Collectd-5.12.0-24.0.1.el9.x86_64.rpm
dom4j-2.1.3-1.redhat_00001.1.el9.noarch.rpm
ebay-cors-filter-1.0.1-4.1.el9.noarch.rpm
ebay-cors-filter-javadoc-1.0.1-4.1.el9.noarch.rpm
ed25519-java-0.3.0-1.el9.noarch.rpm
ed25519-java-javadoc-0.3.0-1.el9.noarch.rpm
exec-maven-plugin-3.0.0-2.el9.noarch.rpm
exec-maven-plugin-javadoc-3.0.0-2.el9.noarch.rpm
python3-google-api-client-1.6.5-3.el9.noarch.rpm
jakarta-commons-httpclient-3.1-38.1.el9.noarch.rpm
jakarta-commons-httpclient-demo-3.1-38.1.el9.noarch.rpm
jakarta-commons-httpclient-javadoc-3.1-38.1.el9.noarch.rpm
jakarta-commons-httpclient-manual-3.1-38.1.el9.noarch.rpm
jnr-x86asm-1.0.2-24.el9.noarch.rpm
jnr-x86asm-javadoc-1.0.2-24.el9.noarch.rpm
libsodium-1.0.18-9.el9.x86_64.rpm
maven-clean-plugin-3.1.0-8.el9.noarch.rpm
maven-clean-plugin-javadoc-3.1.0-8.el9.noarch.rpm
maven-artifact-2.2.1-59.el9.noarch.rpm
maven-artifact-manager-2.2.1-59.el9.noarch.rpm
maven-model-2.2.1-59.el9.noarch.rpm
maven-monitor-2.2.1-59.el9.noarch.rpm
maven-plugin-descriptor-2.2.1-59.el9.noarch.rpm
maven-plugin-registry-2.2.1-59.el9.noarch.rpm
maven-profile-2.2.1-59.el9.noarch.rpm
maven-project-2.2.1-59.el9.noarch.rpm
maven-settings-2.2.1-59.el9.noarch.rpm
maven-toolchain-2.2.1-59.el9.noarch.rpm
maven2-javadoc-2.2.1-59.el9.noarch.rpm
nailgun-0.9.1-19.el9.x86_64.rpm
nailgun-javadoc-0.9.1-19.el9.noarch.rpm
novnc-1.4.0-1.el9.noarch.rpm
ongres-scram-2.1-3.el9.noarch.rpm
ongres-scram-client-2.1-3.el9.noarch.rpm
ongres-scram-javadoc-2.1-3.el9.noarch.rpm
ongres-scram-parent-2.1-3.el9.noarch.rpm
ongres-stringprep-1.1-2.el9.noarch.rpm
ongres-stringprep-javadoc-1.1-2.el9.noarch.rpm
openstack-cinder-17.2.0-1.el9.noarch.rpm
python3-cinder-17.2.0-1.el9.noarch.rpm
python3-cinder-common-17.2.0-1.el9.noarch.rpm
python3-cinder-tests-17.2.0-1.el9.noarch.rpm
openstack-java-ceilometer-client-3.2.9-9.el9.noarch.rpm
openstack-java-ceilometer-model-3.2.9-9.el9.noarch.rpm
openstack-java-cinder-client-3.2.9-9.el9.noarch.rpm
openstack-java-cinder-model-3.2.9-9.el9.noarch.rpm
openstack-java-client-3.2.9-9.el9.noarch.rpm
openstack-java-glance-client-3.2.9-9.el9.noarch.rpm
openstack-java-glance-model-3.2.9-9.el9.noarch.rpm
openstack-java-heat-client-3.2.9-9.el9.noarch.rpm
openstack-java-heat-model-3.2.9-9.el9.noarch.rpm
openstack-java-keystone-client-3.2.9-9.el9.noarch.rpm
openstack-java-keystone-model-3.2.9-9.el9.noarch.rpm
openstack-java-nova-client-3.2.9-9.el9.noarch.rpm
openstack-java-nova-model-3.2.9-9.el9.noarch.rpm
openstack-java-quantum-client-3.2.9-9.el9.noarch.rpm
openstack-java-quantum-model-3.2.9-9.el9.noarch.rpm
openstack-java-resteasy-connector-3.2.9-9.el9.noarch.rpm
openstack-java-sdk-javadoc-3.2.9-9.el9.noarch.rpm
openstack-java-swift-client-3.2.9-9.el9.noarch.rpm
openstack-java-swift-model-3.2.9-9.el9.noarch.rpm
oz-0.18.0-3.el9.noarch.rpm
jevents-109-1.el9.x86_64.rpm
jevents-devel-109-1.el9.x86_64.rpm
pmu-data-109-1.el9.x86_64.rpm
pmu-tools-109-1.el9.x86_64.rpm
pyparsing-doc-2.4.6-1.el9.noarch.rpm
python3-pyparsing-2.4.6-1.el9.noarch.rpm
python-amqp-doc-2.5.2-3.0.1.el9.noarch.rpm
python3-amqp-2.5.2-3.0.1.el9.noarch.rpm
python-automaton-doc-2.2.0-1.el9.noarch.rpm
python3-automaton-2.2.0-1.el9.noarch.rpm
python3-bcrypt-3.1.7-3.el9.x86_64.rpm
python3-cachetools-4.2.4-1.el9.noarch.rpm
python3-case-1.5.3-6.el9.noarch.rpm
python-cinderlib-doc-3.0.0-1.el9.noarch.rpm
python3-cinderlib-3.0.0-1.el9.noarch.rpm
python3-cinderlib-tests-3.0.0-1.el9.noarch.rpm
python3-cinderlib-tests-functional-3.0.0-1.el9.noarch.rpm
python3-cinderlib-tests-unit-3.0.0-1.el9.noarch.rpm
python-cursive-doc-0.2.2-1.el9.noarch.rpm
python3-cursive-0.2.2-1.el9.noarch.rpm
python-futurist-doc-2.3.0-2.el9.noarch.rpm
python3-futurist-2.3.0-2.el9.noarch.rpm
python3-httplib2-0.20.3-1.el9.noarch.rpm
python-kazoo-doc-2.8.0-1.el9.noarch.rpm
python3-kazoo-2.8.0-1.el9.noarch.rpm
python-keystonemiddleware-doc-9.1.0-2.el9.noarch.rpm
python3-keystonemiddleware-9.1.0-2.el9.noarch.rpm
python3-kombu-4.6.6-4.el9.noarch.rpm
python3-migrate-0.13.0-13.el9.noarch.rpm
python3-nose-1.3.7-34.el9.noarch.rpm
python3-nose-cover3-0.1.0-28.el9.noarch.rpm
python-os-testr-doc-2.0.0-1.el9.noarch.rpm
python3-os-testr-2.0.0-1.el9.noarch.rpm
python-oslo-cache-lang-2.6.2-1.el9.noarch.rpm
python3-oslo-cache-2.6.2-1.el9.noarch.rpm
python3-oslo-cache-tests-2.6.2-1.el9.noarch.rpm
python-oslo-db-doc-8.4.1-1.el9.noarch.rpm
python-oslo-db-lang-8.4.1-1.el9.noarch.rpm
python3-oslo-db-8.4.1-1.el9.noarch.rpm
python3-oslo-db-tests-8.4.1-1.el9.noarch.rpm
python-oslo-messaging-doc-12.5.2-1.el9.noarch.rpm
python3-oslo-messaging-12.5.2-1.el9.noarch.rpm
python3-oslo-messaging-tests-12.5.2-1.el9.noarch.rpm
python-oslo-middleware-doc-4.1.1-2.el9.noarch.rpm
python-oslo-middleware-lang-4.1.1-2.el9.noarch.rpm
python3-oslo-middleware-4.1.1-2.el9.noarch.rpm
python3-oslo-middleware-tests-4.1.1-2.el9.noarch.rpm
python-oslo-policy-doc-3.5.0-2.el9.noarch.rpm
python-oslo-policy-lang-3.5.0-2.el9.noarch.rpm
python3-oslo-policy-3.5.0-2.el9.noarch.rpm
python3-oslo-policy-tests-3.5.0-2.el9.noarch.rpm
python-oslo-reports-doc-2.2.0-2.el9.noarch.rpm
python3-oslo-reports-2.2.0-2.el9.noarch.rpm
python3-oslo-reports-tests-2.2.0-2.el9.noarch.rpm
python-oslo-rootwrap-doc-6.2.0-2.el9.noarch.rpm
python3-oslo-rootwrap-6.2.0-2.el9.noarch.rpm
python3-oslo-rootwrap-tests-6.2.0-2.el9.noarch.rpm
python-oslo-versionedobjects-doc-2.3.0-2.el9.noarch.rpm
python-oslo-versionedobjects-lang-2.3.0-2.el9.noarch.rpm
python3-oslo-versionedobjects-2.3.0-2.el9.noarch.rpm
python3-oslo-versionedobjects-tests-2.3.0-2.el9.noarch.rpm
python-osprofiler-doc-3.4.0-2.el9.noarch.rpm
python3-osprofiler-3.4.0-2.el9.noarch.rpm
python-ovsdbapp-doc-0.17.5-1.el9.noarch.rpm
python3-ovsdbapp-0.17.5-1.el9.noarch.rpm
python3-ovsdbapp-tests-0.17.5-1.el9.noarch.rpm
python3-pandas-1.2.1-2.el9.x86_64.rpm
python-paramiko-doc-2.12.0-3.el9.noarch.rpm
python3-paramiko-2.12.0-3.el9.noarch.rpm
python-pycadf-common-3.1.1-2.el9.noarch.rpm
python3-pycadf-3.1.1-2.el9.noarch.rpm
python3-pynacl-1.4.0-1.el9.x86_64.rpm
python3-pyngus-2.3.0-8.el9.noarch.rpm
python3-redis-3.3.8-1.el9.noarch.rpm
python3-sqlalchemy-utils-0.34.2-2.el9.noarch.rpm
python3-sqlparse-0.4.2-1.el9.noarch.rpm
python-statsd-doc-3.2.1-16.el9.noarch.rpm
python3-statsd-3.2.1-16.el9.noarch.rpm
python-swiftclient-doc-3.10.1-2.el9.noarch.rpm
python3-swiftclient-3.10.1-2.el9.noarch.rpm
python3-tabulate+widechars-0.8.7-4.el9.noarch.rpm
python3-tabulate-0.8.10-11.el9.noarch.rpm
python-taskflow-doc-4.5.0-2.el9.noarch.rpm
python3-taskflow-4.5.0-2.el9.noarch.rpm
python3-tooz-2.7.2-1.el9.noarch.rpm
python3-vine-1.3.0-5.el9.noarch.rpm
python3-voluptuous-0.11.7-2.el9.noarch.rpm
python3-websocket-client-1.2.3-2.el9.noarch.rpm
python-websockify-doc-0.9.0-1.el9.noarch.rpm
python3-websockify-0.9.0-1.el9.noarch.rpm
python3-zake-0.2.2-18.el9.noarch.rpm
python3-zstd-1.5.5.1-1.el9.x86_64.rpm
python3-qpid-proton-0.37.0-2.el9.x86_64.rpm
qpid-proton-c-0.37.0-2.el9.x86_64.rpm
qpid-proton-c-docs-0.37.0-2.el9.noarch.rpm
snmp4j-3.6.4-0.2.el9.noarch.rpm
snmp4j-javadoc-3.6.4-0.2.el9.noarch.rpm
unboundid-ldapsdk-7.0.3-1.el9.noarch.rpm
unboundid-ldapsdk-javadoc-7.0.3-1.el9.noarch.rpm
velocity-1.7-38.el9.noarch.rpm
weld-se-2.3.5-0.1.el9.noarch.rpm
ws-commons-util-1.0.2-1.el9.noarch.rpm
ws-commons-util-javadoc-1.0.2-1.el9.noarch.rpm
xmlrpc-client-3.1.3-1.el9.noarch.rpm
xmlrpc-common-3.1.3-1.el9.noarch.rpm
xmlrpc-javadoc-3.1.3-1.el9.noarch.rpm
xmlrpc-server-3.1.3-1.el9.noarch.rpm
yecht-1.0-16.3.el9.noarch.rpm
yecht-javadoc-1.0-16.3.el9.noarch.rpm
python3-pydot-1.4.2-6.el9.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/ansible-macros-2021.1.2-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ansible-runner-2.1.3-6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/aopalliance-1.0-20.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/apache-commons-collections-3.2.2-26.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/apache-commons-compress-1.21-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/apache-commons-exec-1.3-19.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/apache-commons-lang-2.6-35.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/apache-sshd-2.9.2-0.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/args4j-2.33-15.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/collectd-5.12.0-24.0.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/dom4j-2.1.3-1.redhat_00001.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ebay-cors-filter-1.0.1-4.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ed25519-java-0.3.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/exec-maven-plugin-3.0.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/google-api-python-client-1.6.5-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/jakarta-commons-httpclient-3.1-38.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/jnr-x86asm-1.0.2-24.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/libsodium-1.0.18-9.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/maven-clean-plugin-3.1.0-8.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/maven2-2.2.1-59.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/nailgun-0.9.1-19.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/novnc-1.4.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ongres-scram-2.1-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ongres-stringprep-1.1-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/openstack-cinder-17.2.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/openstack-java-sdk-3.2.9-9.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/oz-0.18.0-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/pmu-tools-109-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/pyparsing-2.4.6-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-amqp-2.5.2-3.0.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-automaton-2.2.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-bcrypt-3.1.7-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-cachetools-4.2.4-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-case-1.5.3-6.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-cinderlib-3.0.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-cursive-0.2.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-futurist-2.3.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-httplib2-0.20.3-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-kazoo-2.8.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-keystonemiddleware-9.1.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-kombu-4.6.6-4.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-migrate-0.13.0-13.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-nose-1.3.7-34.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-nose-cover3-0.1.0-28.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-os-testr-2.0.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-cache-2.6.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-db-8.4.1-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-messaging-12.5.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-middleware-4.1.1-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-policy-3.5.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-reports-2.2.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-rootwrap-6.2.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-oslo-versionedobjects-2.3.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-osprofiler-3.4.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-ovsdbapp-0.17.5-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-pandas-1.2.1-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-paramiko-2.12.0-3.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-pycadf-3.1.1-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-pynacl-1.4.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-pyngus-2.3.0-8.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-redis-3.3.8-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-sqlalchemy-utils-0.34.2-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-sqlparse-0.4.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-statsd-3.2.1-16.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-swiftclient-3.10.1-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-tabulate-0.8.10-11.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-taskflow-4.5.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-tooz-2.7.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-vine-1.3.0-5.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-voluptuous-0.11.7-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-websocket-client-1.2.3-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-websockify-0.9.0-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-zake-0.2.2-18.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/python-zstd-1.5.5.1-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/qpid-proton-0.37.0-2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/snmp4j-3.6.4-0.2.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/unboundid-ldapsdk-7.0.3-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/velocity-1.7-38.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/weld-se-2.3.5-0.1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/ws-commons-util-1.0.2-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/xmlrpc-3.1.3-1.el9.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/yecht-1.0-16.3.el9.src.rpm



Description of changes:

ansible-macros
[2021.1.2-3]
Add license file

[2021.1.2-2]
- Suplements ansible-core instead of ansible.
- Automatic requires in CentOS Stream 9 is ansible-core instead of ansible-base

ansible-runner
[2.1.3-6]
- Update build to support OL9

aopalliance
[1.0-20.1]
- Release 20.1

[1.0-20.module+el8.8.0+20992+17ecf8f0]
- Rebuild 1.0-20.module+el8.8.0+20992+17ecf8f0

apache-commons-collections
[3.2.2-26]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[3.2.2-25]
- Rebuild to workaround DistroBaker issue

[3.2.2-24]
- Bootstrap Maven for CentOS Stream 9

[3.2.2-23]
- Bootstrap build
- Non-bootstrap build

[3.2.2-22]
- Backport fix to build with maven-antrun-plugin 3.0.0

[3.2.2-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.2.2-20]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.2.2-19]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[3.2.2-18]
- Rebuild to verify xmvn/maven switch to jakarta-annotations.

[3.2.2-17]
- Fix ambiguous reference in AbstractTestCollection to build on Java 11.

apache-commons-compress
[1.21-3]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.21-2]
- Add missing BuildRequires

[1.21-1]
- Update to upstream version 1.21

[1.20-8]
- Rebuild to workaround DistroBaker issue

[1.20-7]
- Bootstrap Maven for CentOS Stream 9

[1.20-6]
- Bootstrap build
- Non-bootstrap build

[1.20-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.20-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.20-3]
- Ensure Java 8 level bytecode when built on Java 11

[1.20-2]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

apache-commons-exec
[1.3-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.3-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.3-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.3-16]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.3-15]
- Fix build with JDK-11

[1.3-14]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.3-13]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.3-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

apache-commons-lang
[2.6-35]
- add missing dependency on junit

[2.6-34]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[2.6-33]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.6-32]
- Remove unused org.apache.commons.lang.enum package.
- Compile with Java 11, target Java 8 (instead of Java 8 targeting Java 3).
- Remove stray encoding issues, convert to UTF-8.

[2.6-31]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.6-30]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.6-29]
- Pass javadoc source parameter as a property so it can be used by the xmvn
  javadoc mojo

[2.6-28]
- Force Java 8 as we cannot build for Java 11 without breaking API.

[2.6-27]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

apache-sshd
[1:2.9.2-0.1]
- Update to latest upstream 2.9.2

[1:2.8.0-0.1]
- Update to latest upstream release 2.8.0

[1:2.6.0-5]
- Rebuilt for java-17-openjdk as system jdk

[1:2.6.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1:2.6.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1:2.6.0-2]
- Fix missing imports in MANIFEST.MF files

[1:2.6.0-1]
- Update to latest upstream release

[1:2.4.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

args4j
[2.33-15]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2.33-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.33-13]
- Stop shipping unused subpackages for tools and parent pom

[2.33-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.33-11]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[2.33-10]
- Allow building against Java 11

[2.33-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.33-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

collectd
[5.12.0-24.0.1]
- rebuild for updated nut

[5.12.0-24]
- rebuild for updated nut

[5.12.0-23]
- Exclude java plugin on i686 as java doesn't ship there anymore. Fixes FTBFS. rhbz#2104029

[5.12.0-22]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[5.12.0-21]
- fix python 3.11 FTBFS

[5.12.0-20]
- Rebuilt for Python 3.11

[5.12.0-19]
- Adjust for Xen dropping i686 support

[5.12.0-18]
- rebuild for updated nut

[5.12.0-17]
- Perl 5.36 rebuild

[5.12.0-16]
- Rebuild for new gpsd

dom4j
[2.1.3-1.redhat_00001.1]
- RPM wrapper build 2.1.3.redhat-00001

[2.1.1-2.redhat_00001.1]
- Rewrap

[2.1.1-1.redhat_00001.1]
- upgrade to 2.1.1.redhat-00001

[2.1.1-1.redhat_00001.1]
- upgrade to 2.1.1.redhat-00001

[2.1.1-1.redhat_00001.2]
- Upgrade to 2.1.1

[2.1.1-1.redhat_00001.1]
- upgrade to 2.1.1.redhat-00001

[1.6.1-24.redhat_7.1]
- Rewrap for 7.2.0

ebay-cors-filter
[1.0.1-4.1]
- Block all packages from maven:3.8 module to pass the build on CS9

ed25519-java
[0.3.0-1]
- Initial import from Fedora

exec-maven-plugin
[3.0.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.0.0-1]
- Update to upstream version 3.0.0

[1.6.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.6.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.6.0-9]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.6.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.6.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

google-api-python-client
[1.6.5-3]
- Do not do python2 in RHEL8

[1.6.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.6.5-1]
- New upstream

[1.6.4-1]
- New upstream

[1.6.3-2]
- Fix BuildRequires/Requires to use python2-* for Fedora

[1.6.3-1]
- New upstream

[1.6.2-2]
- Fix conditionals for epel

[1.6.2-1]
- Update to 1.6.2

[1.5.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.5.5-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

jakarta-commons-httpclient
[1:3.1-38.1]
- Block all packages from maven:3.8 module to pass the build on CS9

[1:3.1-38]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1:3.1-37]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

jnr-x86asm
[1.0.2-24]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.0.2-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.2-22]
- Remove unnecessary dependency on parent POM.

[1.0.2-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.2-20]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.0.2-19]
- Use source/target of 1.6 to build against Java 11.

[1.0.2-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.0.2-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

libsodium
[1.0.18-9]
- Security: crypto_core_ed25519_is_valid_point() now properly
  rejects small-order points that are not in the main subgroup
  CVE-2025-69277

maven-clean-plugin
[3.1.0-8]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[3.1.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.1.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.1.0-5]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[3.1.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[3.1.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

maven2
[2.2.1-59]
- Repack tarball without bundled jars
- Fix license tag

[2.2.1-58]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.2.1-57]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.2.1-56]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.2.1-55]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

nailgun
[0.9.1-19]
- Added license file

[0.9.1-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

novnc
[1.4.0-1]
- Update to 1.4.0 rhbz#2239160

[1.3.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.3.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.3.0-5]
- Add require on 'which' rhbz#2150521

[1.3.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.3.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.3.0-2]
- Add novnc_proxy and associated man pages
- Drop various utilities, tests and other files not required from the package
- Add docs/API.md docs/EMBEDDING.md docs/LIBRARY.md as docs

[1.3.0-1]
- New upstream release 1.3.0

ongres-scram
[2.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2.1-2]
- Remove unnecessary findbugs dependency (#1966792)

[2.1-1]
- Rebase to version 2.2

[1.0.0~beta.2-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.0.0~beta.2-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.0~beta.2-10]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[1.0.0~beta.2-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.0.0~beta.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

ongres-stringprep
[1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.1-1]
- initial rpm

openstack-cinder
[1:17.2.0-1]
- Update to 17.2.0

[1:17.1.0-1]
- Update to 17.1.0

[1:17.0.0-1]
- Update to 17.0.0
- Enable sources tarball validation using GPG signature.

[1:17.0.0-0.2.0rc1]
- Update to 17.0.0.0rc2

[1:17.0.0-0.1.0rc1]
- Update to 17.0.0.0rc1

[1:16.0.0-0.1.0rc1]
- Update to 16.0.0.0rc1

openstack-java-sdk
[3.2.9-9]
- Added direct dependency to junit

[3.2.9-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.2.9-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.2.9-6]
- Remove unnecessary dependency on parent POM.

[3.2.9-5]
- adding a packaging-guidelines conformant -javadoc subpackage

[3.2.9-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.2.9-3]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[3.2.9-2]
- disable openstack-java-javadoc

[3.2.9-1]
- update to openstack-java-sdk-3.2.9

[3.2.8-1]
- update to openstack-java-sdk-3.2.8

oz
[0.18.0-3]
- Fix deps on el8 and el9

[0.18.0-2]
- Rebuilt for CentOS Virtualization SIG

[0.18.0-1]
- Update to 0.18.0

[0.17.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[0.17.0-20]
- Try again to do what -19 probably failed to do (#2015490)

[0.17.0-19]
- Don't write kickstart so initial-setup won't think root pw is set (#2015490)

[0.17.0-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.17.0-17]
- Rebuilt for Python 3.10

[0.17.0-16]
- Fixes for anaconda changes

[0.17.0-15]
- fix patch for newer Fedora releases

pmu-tools
[109-1]
- rebase to 109.

[108-4]
- add pmu-data to pmu-tools, required for collectd-pmu

[108-3]
- fix .a file location, fix license (rhbz#1705981)
- add provides for -static jevents lib

[108-1]
- initial packaging

pyparsing
[2.4.6-1]
- Update to 2.4.6 (#1786815)

[2.4.5-1]
- Update to 2.4.5 (#1768725)
- Drop Python2 subpackage (#1770564)

[2.4.2-1]
- Update to latest version (#1742167)

[2.4.0-6]
- Reduce Python 2 build time dependencies

[2.4.0-5]
- Rebuilt for Python 3.8

[2.4.0-4]
- Bootstrap for Python 3.8

[2.4.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[2.4.0-1]
- Update to 2.4.0

[2.3.1-1]
- Update to 2.3.1

[2.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

python-amqp
[2.5.2-3.0.1]
- Python-amqp-doc requires python3-amqp

[2.5.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.5.2-2]
- Fix build for rhel < 8

[2.5.2-1]
- Update to 2.5.2

[2.5.1-2]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[2.5.1-1]
- Update to 2.5.1

[2.5.0-3]
- Rebuilt for Python 3.8

[2.5.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

python-automaton
[2.2.0-1]
- Update to 2.2.0

python-bcrypt
[3.1.7-3]
- Subpackage python2-bcrypt has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[3.1.7-2]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[3.1.7-1]
- Update to 3.1.7

[3.1.6-4]
- Rebuilt for Python 3.8

[3.1.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.1.6-2]
- Adaptations to build Python 3 on EPEL

[3.1.6-1]
- Update to 3.1.6.

[3.1.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.1.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.1.4-5]
- Rebuilt for Python 3.7

python-cachetools
[4.2.4-1]
- New upstream release 4.2.4 (rhbz#2009321)

[4.2.3-1]
- New upstream release 4.2.3 (rhbz#2009071)

[4.2.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[4.2.2-2]
- Rebuilt for Python 3.10

[4.2.2-1]
- New upstream release 4.2.2 (rhbz#1954318)

[4.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[4.2.1-1]
- New upstream release 4.2.1

[4.2.0-1]
- New upstream release 4.2.0 (rhbz#1906619)

[4.1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[4.1.1-1]
- New upstream release 4.1.1 (rhbz#1851765)

python-case
[1.5.3-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.5.3-5]
- Remove dependency on unittest2 (#1789200)

[1.5.3-4]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[1.5.3-3]
- Rebuilt for Python 3.8

[1.5.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.5.3-1]
- drop python2 subpackage

[1.5.2-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.5.2-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.5.2-7]
- Rebuilt for Python 3.7

[1.5.2-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

python-cinderlib
[1:3.0.0-1]
- Update to 3.0.0

python-cursive
[0.2.2-1]
- Update to 0.2.2

python-futurist
[2.3.0-2]
- Enable sources tarball validation using GPG signature.

[2.3.0-1]
- Update to 2.3.0

python-httplib2
[0.20.3-1]
- Update to 0.20.3. Only fixes test cases

[0.20.2-1]
- Update to 0.20.2. Fixes rhbz#2011750

[0.19.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.19.1-3]
- Rebuilt for Python 3.10

[0.19.1-2]
- Drop BuildRequires on pytest-flake8
- Deselect failing test
- Fixes: rhbz#1958945

[0.19.1-1]
- Update to 0.19.1. Fixes rhbz#1944789

[0.19.0-2]
- Remove unused python3-pytest-cov build dependency
- Use mock from the standard library, remove build dependency
  on the deprecated python-mock package

[0.19.0-1]
- Update t0 0.19.0. Fixes rhbz#1925988

[0.18.1-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.18.1-9]
- Disable Python 2 build entirely

python-kazoo
[2.8.0-1]
- Update to 2.8.0 (#1856000)

[2.7.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.7.0-2]
- Rebuilt for Python 3.9

[2.7.0-1]
- Update to version 2.7.0

[2.5.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.5.0-7]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[2.5.0-6]
- Rebuilt for Python 3.8

[2.5.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[2.5.0-4]
- Subpackage python2-kazoo has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[2.5.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

python-keystonemiddleware
[9.1.0-2]
- Enable sources tarball validation using GPG signature.

[9.1.0-1]
- Update to 9.1.0

python-kombu
[1:4.6.6-4]
- Added Python license

python-migrate
[0.13.0-13]
- Remove nose dependency

[0.13.0-12]
- Utilize a valid version scheme for test requirements to fix FTBFS with
  setuptools >= 66.0.0

[0.13.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[0.13.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[0.13.0-9]
- Rebuilt for Python 3.11

[0.13.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[0.13.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.13.0-6]
- Rebuilt for Python 3.10

python-nose
[1.3.7-34]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[1.3.7-33]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.3.7-32]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.3.7-31]
- Rebuilt for Python 3.9

[1.3.7-30]
- Deprecate the package
  https://fedoraproject.org/wiki/Changes/DeprecateNose
- Drop the docs subpackage

[1.3.7-29]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.3.7-28]
- Subpackage python2-nose has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[1.3.7-27]
- Remove build dependency on python2-coverage
  Don't test coverage plugin on Python 2

[1.3.7-26]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[1.3.7-25]
- Rebuilt for Python 3.8

python-nose-cover3
[0.1.0-28]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.1.0-27]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.1.0-26]
- Rebuilt for Python 3.8

[0.1.0-25]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.1.0-24]
- Subpackage python2-nose-cover3 has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.1.0-23]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.1.0-22]
- Fix FTBFS
- modernize spec

[0.1.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.1.0-20]
- Rebuilt for Python 3.7

[0.1.0-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

python-os-testr
[2.0.0-1]
- Update to 2.0.0

python-oslo-cache
[2.6.2-1]
- Update to 2.6.2

[2.6.1-2]
- Enable sources tarball validation using GPG signature.

[2.6.1-1]
- Update to 2.6.1

python-oslo-db
[8.4.1-1]
- Update to 8.4.1

[8.4.0-2]
- Enable sources tarball validation using GPG signature.

[8.4.0-1]
- Update to 8.4.0

python-oslo-messaging
[12.5.2-1]
- Update to 12.5.2

[12.5.1-1]
- Update to 12.5.1

[12.5.0-2]
- Enable sources tarball validation using GPG signature.

[12.5.0-1]
- Update to 12.5.0

python-oslo-middleware
[4.1.1-2]
- Enable sources tarball validation using GPG signature.

[4.1.1-1]
- Update to 4.1.1

python-oslo-policy
[3.5.0-2]
- Enable sources tarball validation using GPG signature.

[3.5.0-1]
- Update to 3.5.0

python-oslo-reports
[2.2.0-2]
- Enable sources tarball validation using GPG signature.

[2.2.0-1]
- Update to 2.2.0

python-oslo-rootwrap
[6.2.0-2]
- Enable sources tarball validation using GPG signature.

[6.2.0-1]
- Update to 6.2.0

python-oslo-versionedobjects
[2.3.0-2]
- Enable sources tarball validation using GPG signature.

[2.3.0-1]
- Update to 2.3.0

python-osprofiler
[3.4.0-2]
- Enable sources tarball validation using GPG signature.

[3.4.0-1]
- Update to 3.4.0

python-ovsdbapp
[0.17.5-1]
- Update to 0.17.5

[0.17.4-1]
- Update to 0.17.4

[0.17.3-1]
- Update to 0.17.3

[0.17.2-1]
- Update to 0.17.2

[0.17.1-1]
- Update to 0.17.1

[0.17.0-1]
- Update to 0.17.0

python-pandas
[1.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[1.2.1-1]
- Update to 1.2.1

[1.2.0-1]
- New release of pandas 1.2.0

[1.1.4-1]
- New release of pandas 1.1.4

[1.0.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.0.5-1]
- Update to latest version

[1.0.1-2]
- Rebuilt for Python 3.9

[1.0.1-1]
- Update to 1.0.1

[0.25.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.25.3-1]
- New release of pandas 0.25.3 (python 3.8 support included)

python-paramiko
[2.12.0-3]
- Add support for AES-GCM ciphers (rhbz#2311864)
- Remove cache Sphinx build folder ".doctrees"

[2.12.0-2]
- Address CVE 2023-48795 (a.k.a. the "Terrapin Attack", a vulnerability found
  in the SSH protocol re: treatment of packet sequence numbers) as follows:
  - The vulnerability only impacts encrypt-then-MAC digest algorithms in tandem
    with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko currently only
    implements hmac-sha2-(256|512)-etm in tandem with 'AES-CBC'
  - As the fix for the vulnerability requires both ends of the connection to
    cooperate, the below changes will only take effect when the remote end is
    OpenSSH ? 9.6 (or equivalent, such as Paramiko in server mode, as of this
    patch version) and configured to use the new "strict kex" mode
  - Paramiko will always attempt to use "strict kex" mode if offered by the
    server, unless you override this by specifying 'strict_kex=False' in
    'Transport.__init__'
  - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
    when protocol messages are received in unexpected order; this includes
    situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
    exchange, which are no longer allowed during strict mode
  - Key (re)negotiation, i.e. 'MSG_NEWKEYS', whenever it is encountered, now
    resets packet sequence numbers (this should be invisible to users during
    normal operation, only causing exceptions if the exploit is encountered,
    which will usually result in, again, 'MessageOrderError')
  - Sequence number rollover will now raise 'SSHException' if it occurs during
    initial key exchange (regardless of strict mode status)
- Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the original
  implementation made assumptions based on an OpenSSH implementation detail
- 'Transport' grew a new 'packetizer_class' kwarg for overriding the
  packet-handler class used internally; this is mostly for testing, but advanced
  users may find this useful when doing deep hacks
- A handful of lower-level classes (notably 'paramiko.message.Message' and
  'paramiko.pkey.PKey') previously returned 'bytes' objects from their
  implementation of '__str__', even under Python 3, and there was never any
  '__bytes__' method; these issues have been fixed by renaming '__str__' to
  '__bytes__' and relying on Python's default "stringification returns the
  output of '__repr__'" behavior re: any real attempts to 'str()' such objects

[2.12.0-1]
- Update to 2.12.0 (rhbz#2140281)
  - Add a 'transport_factory' kwarg to 'SSHClient.connect' for advanced users
    to gain more control over early Transport setup and manipulation (GH#2054,
    GH#2125)
  - Update '~paramiko.client.SSHClient' so it explicitly closes its wrapped
    socket object upon encountering socket errors at connection time; this
    should help somewhat with certain classes of memory leaks, resource
    warnings, and/or errors (though we hasten to remind everyone that Client
    and Transport have their own '.close()' methods for use in non-error
    situations!) (GH#1822)
  - Raise '~paramiko.ssh_exception.SSHException' explicitly when blank private
    key data is loaded, instead of the natural result of 'IndexError'; this
    should help more bits of Paramiko or Paramiko-adjacent codebases to
    correctly handle this class of error (GH#1599, GH#1637)
- Use SPDX-format license tag

python-pycadf
[3.1.1-2]
- Enable sources tarball validation using GPG signature.

[3.1.1-1]
- Update to 3.1.1

python-pynacl
[1.4.0-1]
- Update to 1.4.0 (#1840424)

[1.3.0-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.3.0-8]
- Rebuilt for Python 3.9

[1.3.0-7]
- Fix build with hypothesis 5 (#1830961)

[1.3.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.3.0-5]
- Subpackage python2-pynacl has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[1.3.0-4]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[1.3.0-3]
- Rebuilt for Python 3.8

[1.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.3.0-1]
- Update to 1.3.0

python-pyngus
[2.3.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2.3.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.3.0-6]
- Rebuilt for Python 3.9

[2.3.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[2.3.0-4]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[2.3.0-3]
- Rebuilt for Python 3.8

[2.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[2.3.0-1]
- Rebased to 2.3.0

[2.2.4-4]
- Subpackage python2-pyngus has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[2.2.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

python-redis
[3.3.8-1]
- Update to 3.3.8.

[3.2.1-4]
- Subpackage python2-redis has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[3.2.1-3]
- Rebuilt for Python 3.8

[3.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.2.1-1]
- Update to 3.2.1. Fixes bug #1670235

[3.1.0-1]
- Update to 3.1.0. Fixes bug #1670235

[2.10.6-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[2.10.6-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[2.10.6-4]
- Rebuilt for Python 3.7

[2.10.6-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

python-sqlalchemy-utils
[0.34.2-2]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.34.2-1]
- Update to 0.34.2

[0.32.12-12]
- Rebuilt for Python 3.8

[0.32.12-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.32.12-10]
- Subpackage python2-sqlalchemy-utils has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.32.12-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.32.12-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.32.12-7]
- Rebuilt for Python 3.7

[0.32.12-6]
- Update Python 2 dependency declarations to new packaging standards
  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

[0.32.12-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

python-sqlparse
[0.4.2-1]
- Update to 0.4.2
  Also fixes CVE-2021-32839

[0.4.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.4.1-2]
- Rebuilt for Python 3.10

[0.4.1-1]
- Update to 0.4.1 (#1886093)

[0.3.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.3.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.3.1-2]
- Rebuilt for Python 3.9

[0.3.1-1]
- Update to 0.3.1

[0.2.4-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

python-statsd
[3.2.1-16]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[3.2.1-15]
- Rebuilt for Python 3.8

[3.2.1-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.2.1-13]
- Subpackage python2-statsd has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[3.2.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.2.1-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.2.1-10]
- Rebuilt for Python 3.7

[3.2.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[3.2.1-8]
- Update Python 2 dependency declarations to new packaging standards
  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

python-swiftclient
[3.10.1-2]
- Enable sources tarball validation using GPG signature.

[3.10.1-1]
- Update to 3.10.1

python-tabulate
[0.8.10-2]
- Use pyproject-rpm-macros
- Adjust packaged documentation files
- Run doctests; see tox.ini, not in the sdist
- Tidy up package description
- Switch URL from PyPI project to GitHub project
- Add a man page

[0.8.10-1]
- Update to 0.8.10 (close RHBZ#2099766)
- Drop EPEL9 numpy workaround; the flexiblas-related crashes have been fixed

[0.8.9-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[0.8.9-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.8.9-1]
- Update to latest release
- replace nose with pytest
- drop no longer needed patch

[0.8.7-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

python-taskflow
[4.5.0-2]
- Enable sources tarball validation using GPG signature.

[4.5.0-1]
- Update to 4.5.0

python-tooz
[2.7.2-1]
- Update to 2.7.2

[2.7.1-2]
- Enable sources tarball validation using GPG signature.

[2.7.1-1]
- Update to 2.7.1

python-vine
[1.3.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.3.0-4]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[1.3.0-3]
- Rebuilt for Python 3.8

[1.3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.3.0-1]
- Update to 1.3.0

[1.2.0-3]
- Subpackage python2-vine has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[1.2.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.2.0-1]
- Update to 1.2.0
- Switch to using bconds for controlling build behaviors

[1.1.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.1.4-1]
- update to 1.1.4 (rhbz#1471577)

python-voluptuous
[0.11.7-2]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.11.7-1]
- Update to 0.11.7 (#1742700)

[0.11.5-7]
- Rebuilt for Python 3.8

[0.11.5-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.11.5-5]
- Drop python2 subpackage (bz #1712339)

[0.11.5-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.11.5-3]
- Readd python2 subpackage, not yet

[0.11.5-2]
- Drop python2 subpackage

[0.11.5-1]
- New upstream source (0.11.5)

[0.11.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

python-websocket-client
[1.2.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[1.2.3-1]
- Latest upstream
- Resolves: rhbz#1990682

[1.1.0-1]
- Latest upstream
- Resolves: rhbz#1934343

[0.57.0-4]
- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[0.57.0-3]
- Rebuilt for Python 3.10

[0.57.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0.57.0-1]
- Update to 0.57.0
- Remove python2 subpackage

[0.56.0-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.56.0-7]
- Rebuilt for Python 3.9

[0.56.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

python-websockify
[0.9.0-1]
- Update to 0.9.0

[0.8.0-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[0.8.0-15]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.8.0-14]
- Rebuilt for Python 3.8

[0.8.0-13]
- Subpackage python2-websockify has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.8.0-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.8.0-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.8.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.8.0-9]
- Rebuilt for Python 3.7

python-zake
[0.2.2-18]
- Rebuilt for Python 3.8.0rc1 (#1748018)

[0.2.2-17]
- Rebuilt for Python 3.8

[0.2.2-16]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.2.2-15]
- Subpackage python2-zake has been removed
  See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal

[0.2.2-14]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[0.2.2-13]
- Enable python dependency generator

[0.2.2-12]
- Fix python3-kazoo requirement for the python3 subpackage

[0.2.2-11]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[0.2.2-10]
- Rebuilt for Python 3.7

[0.2.2-9]
- Update Python 2 dependency declarations to new packaging standards
  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

python-zstd
[1.5.5.1-1]
- Update to 1.5.5.1

[1.4.5.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[1.4.5.1-11]
- Rebuilt for Python 3.12

[1.4.5.1-10]
- Port to C99

[1.4.5.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[1.4.5.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[1.4.5.1-7]
- Rebuilt for Python 3.11

[1.4.5.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

qpid-proton
[0.37.0-1]
- Initial build for EPEL 9

snmp4j
[3.6.4-0.2]
- Update java-11-openjdk to java-21-openjdk

unboundid-ldapsdk
[7.0.3-1]
- Update to 7.0.3

velocity
[1.7-38]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688

[1.7-37]
- Rebuild to workaround DistroBaker issue

[1.7-36]
- Bootstrap Maven for CentOS Stream 9

[1.7-35]
- Bootstrap build
- Non-bootstrap build

[0:1.7-34]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[0:1.7-33]
- Default to JDK logging and drop commons-logging and log4j12 implementations.

[0:1.7-32]
- Port to commons-lang3.

[0:1.7-31]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0:1.7-30]
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11

[0:1.7-29]
- Ignore test case that fails on Java 11

weld-se
[2.3.5-0.1]
- Initial RPM release
- Just bundled JAR due to high number of build dependencies

ws-commons-util
[1.0.2-1]
- Initial import on el8 from Fedora

xmlrpc
[3.1.3-1]
- Initial import on el8 from Fedora
- Dropped epoch

yecht
[1.0-16.3]
- Updates to port olcne build system



From el-errata at oss.oracle.com  Sat Aug 15 14:10:25 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:25 -0700
Subject: [El-errata] ELSA-2026-22450 Important: Oracle Linux 10
 osbuild-composer security update
Message-ID: <mailman.171.1786803039.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-22450

http://linux.oracle.com/errata/ELSA-2026-22450.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-176-1.0.1.el10_2.x86_64.rpm
osbuild-composer-core-176-1.0.1.el10_2.x86_64.rpm
osbuild-composer-worker-176-1.0.1.el10_2.x86_64.rpm

aarch64:
osbuild-composer-176-1.0.1.el10_2.aarch64.rpm
osbuild-composer-core-176-1.0.1.el10_2.aarch64.rpm
osbuild-composer-worker-176-1.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/osbuild-composer-176-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2025-61726
CVE-2025-61728
CVE-2025-68121
CVE-2026-4427
CVE-2026-25679
CVE-2026-27137
CVE-2026-32282
CVE-2026-32283
CVE-2026-32286
CVE-2026-33186
CVE-2026-34986




Description of changes:

[176-1.0.1]
- Track github upstream



From el-errata at oss.oracle.com  Sat Aug 15 14:10:27 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:27 -0700
Subject: [El-errata] ELSA-2026-36956 Important: Oracle Linux 10 kernel
 security update
Message-ID: <mailman.172.1786803041.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-36956

http://linux.oracle.com/errata/ELSA-2026-36956.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2025-71066
CVE-2026-46113
CVE-2026-46227
CVE-2026-53359




Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.34.1]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188463] {CVE-2026-53016}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193945]
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178326]

[6.12.0-211.33.1]
- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (CKI Backport Bot) [RHEL-193250] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (CKI Backport Bot) [RHEL-193250] {CVE-2026-43499}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (CKI Backport Bot) [RHEL-193153] {CVE-2026-43499}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174092] {CVE-2026-43163}

[6.12.0-211.32.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}

[6.12.0-211.31.1]
- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]

[6.12.0-211.30.1]
- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}

[6.12.0-211.29.1]
- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}

[6.12.0-211.28.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}

[6.12.0-211.27.1]
- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}



From el-errata at oss.oracle.com  Sat Aug 15 14:10:29 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:29 -0700
Subject: [El-errata] ELSA-2026-50773 Important: Oracle Linux 10 ruby4.0
 security, bug fix, and enhancement update
Message-ID: <mailman.173.1786803043.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50773

http://linux.oracle.com/errata/ELSA-2026-50773.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby4.0-4.0.6-36.el10_2.x86_64.rpm
ruby4.0-devel-4.0.6-36.el10_2.x86_64.rpm
ruby4.0-doc-4.0.6-36.el10_2.noarch.rpm
ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.x86_64.rpm
ruby4.0-rubygem-pg-1.6.3-36.el10_2.x86_64.rpm

aarch64:
ruby4.0-4.0.6-36.el10_2.aarch64.rpm
ruby4.0-devel-4.0.6-36.el10_2.aarch64.rpm
ruby4.0-doc-4.0.6-36.el10_2.noarch.rpm
ruby4.0-rubygem-mysql2-0.5.7-36.el10_2.aarch64.rpm
ruby4.0-rubygem-pg-1.6.3-36.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/ruby4.0-4.0.6-36.el10_2.src.rpm

Related CVEs:

CVE-2026-27820
CVE-2026-42256
CVE-2026-42257
CVE-2026-47240
CVE-2026-47241
CVE-2026-47242




Description of changes:

[4.0.6-36]
- Upgrade to Ruby 4.0.6.
  Resolves: RHEL-211310
  Resolves: RHEL-193660



From el-errata at oss.oracle.com  Sat Aug 15 14:10:30 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:30 -0700
Subject: [El-errata] ELSA-2026-50778 Important: Oracle Linux 10 ruby
 security, bug fix, and enhancement update
Message-ID: <mailman.174.1786803043.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-50778

http://linux.oracle.com/errata/ELSA-2026-50778.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
ruby-3.3.12-14.el10_2.x86_64.rpm
ruby-bundled-gems-3.3.12-14.el10_2.x86_64.rpm
ruby-default-gems-3.3.12-14.el10_2.noarch.rpm
ruby-devel-3.3.12-14.el10_2.x86_64.rpm
ruby-doc-3.3.12-14.el10_2.noarch.rpm
ruby-libs-3.3.12-14.el10_2.x86_64.rpm
rubygem-bigdecimal-3.1.5-14.el10_2.x86_64.rpm
rubygem-bundler-2.5.22-14.el10_2.noarch.rpm
rubygem-io-console-0.7.1-14.el10_2.x86_64.rpm
rubygem-irb-1.13.1-14.el10_2.noarch.rpm
rubygem-json-2.7.2-14.el10_2.x86_64.rpm
rubygem-minitest-5.20.0-14.el10_2.noarch.rpm
rubygem-power_assert-2.0.3-14.el10_2.noarch.rpm
rubygem-psych-5.1.2-14.el10_2.x86_64.rpm
rubygem-racc-1.7.3-14.el10_2.x86_64.rpm
rubygem-rake-13.1.0-14.el10_2.noarch.rpm
rubygem-rbs-3.4.0-14.el10_2.x86_64.rpm
rubygem-rdoc-6.6.3.1-14.el10_2.noarch.rpm
rubygem-rexml-3.4.4-14.el10_2.noarch.rpm
rubygem-rss-0.3.1-14.el10_2.noarch.rpm
rubygem-test-unit-3.6.1-14.el10_2.noarch.rpm
rubygem-typeprof-0.21.9-14.el10_2.noarch.rpm
rubygems-3.5.22-14.el10_2.noarch.rpm
rubygems-devel-3.5.22-14.el10_2.noarch.rpm

aarch64:
ruby-3.3.12-14.el10_2.aarch64.rpm
ruby-bundled-gems-3.3.12-14.el10_2.aarch64.rpm
ruby-default-gems-3.3.12-14.el10_2.noarch.rpm
ruby-devel-3.3.12-14.el10_2.aarch64.rpm
ruby-doc-3.3.12-14.el10_2.noarch.rpm
ruby-libs-3.3.12-14.el10_2.aarch64.rpm
rubygem-bigdecimal-3.1.5-14.el10_2.aarch64.rpm
rubygem-bundler-2.5.22-14.el10_2.noarch.rpm
rubygem-io-console-0.7.1-14.el10_2.aarch64.rpm
rubygem-irb-1.13.1-14.el10_2.noarch.rpm
rubygem-json-2.7.2-14.el10_2.aarch64.rpm
rubygem-minitest-5.20.0-14.el10_2.noarch.rpm
rubygem-power_assert-2.0.3-14.el10_2.noarch.rpm
rubygem-psych-5.1.2-14.el10_2.aarch64.rpm
rubygem-racc-1.7.3-14.el10_2.aarch64.rpm
rubygem-rake-13.1.0-14.el10_2.noarch.rpm
rubygem-rbs-3.4.0-14.el10_2.aarch64.rpm
rubygem-rdoc-6.6.3.1-14.el10_2.noarch.rpm
rubygem-rexml-3.4.4-14.el10_2.noarch.rpm
rubygem-rss-0.3.1-14.el10_2.noarch.rpm
rubygem-test-unit-3.6.1-14.el10_2.noarch.rpm
rubygem-typeprof-0.21.9-14.el10_2.noarch.rpm
rubygems-3.5.22-14.el10_2.noarch.rpm
rubygems-devel-3.5.22-14.el10_2.noarch.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/ruby-3.3.12-14.el10_2.src.rpm

Related CVEs:

CVE-2026-27820
CVE-2026-42256
CVE-2026-42257
CVE-2026-47240
CVE-2026-47241
CVE-2026-47242




Description of changes:

[3.3.12-14]
- Upgrade to Ruby 3.3.12.
  Resolves: RHEL-211300
  Resolves: RHEL-193659



From el-errata at oss.oracle.com  Sat Aug 15 14:10:32 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:32 -0700
Subject: [El-errata] ELSA-2026-53845 Important: Oracle Linux 10
 iscsi-initiator-utils security, bug fix, and enhancement update
Message-ID: <mailman.175.1786803047.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53845

http://linux.oracle.com/errata/ELSA-2026-53845.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm
python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.x86_64.rpm

aarch64:
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm
python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el10_2.2.src.rpm

Related CVEs:

CVE-2026-44943
CVE-2026-44944




Description of changes:

[6.2.1.11-1.git4b3e853.0.1.el10_2.2]
- Validate interface IP against target address family [Orabug: 39491397]
- iscsi delay reconnect until interface has valid IP [Orabug: 38445491]
- Change the order of restart iscsi services in spec file [Orabug: 37749406]
- Change the log_level of log_debug message in actor_delete()
- Remove 'After' keyword from install section [Orabug: 37520817]
- Add python3-rpm-macros to BuildRequires
- Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
- Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
- Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
  and use com.oracle in prefix
- Complete the following tasks to address [Orabug: 29311709]
  The following patches address [Orabug: 29128380] (Jianchao Wang)
  Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
  The following patch addresses [Orabug: 29306329]
  Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
- Print vital iscsid messages on console using rsyslog facility. This
  is particularly useful when using iscsi boot and there is a connection
  or session issue. [Orabug: 29503805]
- Modify iscsi-mark-root-nodes script to only update node.startup to onboot
  for iscsi sessions that are active during boot. [Orabug: 29653342]
- Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
  is restarted. [Orabug: 29851447]
- Modify patches 0007 and 0032-0035 to apply cleanly
- Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]

[6.2.1.11-1.git4b3e853.2]
- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)

[6.2.1.11-1.git4b3e853.1]
- fix IQN name validation to prevent path traversal (CVE-2026-44943)
- fix iscsiuio control-socket credential verification (CVE-2026-44944)

[6.2.1.11-1.git4b3e853]
- fix regression in fw and static node records



From el-errata at oss.oracle.com  Sat Aug 15 14:10:34 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:34 -0700
Subject: [El-errata] ELSA-2026-54210 Moderate: Oracle Linux 10 dhcpcd
 security update
Message-ID: <mailman.176.1786803048.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54210

http://linux.oracle.com/errata/ELSA-2026-54210.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
dhcpcd-10.0.6-11.el10_2.x86_64.rpm

aarch64:
dhcpcd-10.0.6-11.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dhcpcd-10.0.6-11.el10_2.src.rpm

Related CVEs:

CVE-2026-14258




Description of changes:

[10.0.6-11]
- Fix CVE-2026-14258



From el-errata at oss.oracle.com  Sat Aug 15 14:10:36 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:36 -0700
Subject: [El-errata] ELSA-2026-54343 Important: Oracle Linux 10 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.177.1786803049.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54343

http://linux.oracle.com/errata/ELSA-2026-54343.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.47.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.47.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.47.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.47.1.el10_2.x86_64.rpm
libperf-6.12.0-211.47.1.el10_2.x86_64.rpm
perf-6.12.0-211.47.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.47.1.el10_2.x86_64.rpm
rtla-6.12.0-211.47.1.el10_2.x86_64.rpm
rv-6.12.0-211.47.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.47.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.47.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.47.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.47.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.47.1.el10_2.aarch64.rpm
libperf-6.12.0-211.47.1.el10_2.aarch64.rpm
perf-6.12.0-211.47.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.47.1.el10_2.aarch64.rpm
rtla-6.12.0-211.47.1.el10_2.aarch64.rpm
rv-6.12.0-211.47.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.47.1.el10_2.src.rpm

Related CVEs:

CVE-2026-53202
CVE-2026-53264
CVE-2026-63887
CVE-2026-64300




Description of changes:

[6.12.0-211.47.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.47.1]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213198] {CVE-2026-63887}
- perf/aux: Fix page UAF in map_range() (CKI Backport Bot) [RHEL-218475] {CVE-2026-64300}
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218188] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214436]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214436]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213472] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213472]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213472]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213472]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-190054] {CVE-2026-53202}
- netfilter: nf_conntrack_expect: store master_tuple in expectation (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-185311]
- selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump (Florian Westphal) [RHEL-185311]
- netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-185311]
- netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-185311]
- netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-185311]
- netfilter: nf_log: validate MAC header was set before dumping it (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack: destroy stale expectfn expectations on unregister (Florian Westphal) [RHEL-185311]
- netfilter: revalidate bridge ports (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-185311]
- netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-185311]
- netfilter: conntrack_irc: fix possible out-of-bounds read (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: add mutex to guard hook reference counting (Florian Westphal) [RHEL-185311]
- netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_gre: fix gre keymap list corruption (Florian Westphal) [RHEL-185311]
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (Florian Westphal) [RHEL-185311]
- netfilter: nf_queue: hold bridge skb->dev while queued (Florian Westphal) [RHEL-185311]
- netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() (Florian Westphal) [RHEL-185311]
- netfilter: ip6t_hbh: reject oversized option lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_helper: fix possible null deref during error log (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: get helper before allocating expectation (Florian Westphal) [RHEL-185311]
- netfilter: ctnetlink: check tuple and mask in expectations created via nfqueue (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: restore helper propagation via expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables (Florian Westphal) [RHEL-185311]
- netfilter: xt_CT: fix usersize for v1 and v2 revision (Florian Westphal) [RHEL-185311]
- netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-185311]
- netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-185311]
- netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-185311]
- netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_sip: don't use simple_strtoul (Florian Westphal) [RHEL-185311]
- netfilter: xt_policy: fix strict mode inbound policy matching (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: add hook transactions for device deletions (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase (Florian Westphal) [RHEL-185311]
- rculist: add list_splice_rcu() for private lists (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-185311] {CVE-2026-46324}
- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-185311]
- netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-185311]
- netfilter: conntrack: remove sprintf usage (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO (Florian Westphal) [RHEL-185311] {CVE-2026-45841}
- nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-185311] {CVE-2026-23397}
- netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-185311]
- netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-185311] {CVE-2026-31665}
- netfilter: xt_multiport: validate range encoding in checkentry (Florian Westphal) [RHEL-185311] {CVE-2026-31681}
- netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (Florian Westphal) [RHEL-185311] {CVE-2026-43085}
- netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-185311] {CVE-2026-43024}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (Florian Westphal) [RHEL-185311] {CVE-2026-31424}
- netfilter: ctnetlink: ignore explicit helper on new expectations (Florian Westphal) [RHEL-185311] {CVE-2026-43025}
- netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (Florian Westphal) [RHEL-185311] {CVE-2026-43026}
- netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr (Florian Westphal) [RHEL-185311]
- netfilter: x_tables: ensure names are nul-terminated (Florian Westphal) [RHEL-185311] {CVE-2026-43028}
- netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-185311] {CVE-2026-31416}
- netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-185311] {CVE-2026-31495}
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Florian Westphal) [RHEL-185311] {CVE-2026-31674}
- netfilter: nf_conntrack_expect: store netns and zone in expectation (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: use expect->helper (Florian Westphal) [RHEL-185311]
- netfilter: nf_conntrack_expect: honor expectation helper field (Florian Westphal) [RHEL-185311]
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-185311] {CVE-2026-31428}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-185311] {CVE-2026-43114}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-185311] {CVE-2026-23399}
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-185311] {CVE-2026-23456}
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-185311] {CVE-2026-23457}
- netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-185311] {CVE-2026-31407}
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-185311] {CVE-2026-23458}
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-185311] {CVE-2026-43451}
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-185311] {CVE-2026-43453}
- netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-185311] {CVE-2026-23272}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-185311] {CVE-2026-43233}
- netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-185311]
- netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-185311] {CVE-2026-23278}
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-185311] {CVE-2026-23351}



From el-errata at oss.oracle.com  Sat Aug 15 14:10:37 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:37 -0700
Subject: [El-errata] ELSA-2026-54576 Important: Oracle Linux 10 dracut
 security update
Message-ID: <mailman.180.1786803051.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54576

http://linux.oracle.com/errata/ELSA-2026-54576.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-107-9.0.1.el10_2.x86_64.rpm
dracut-caps-107-9.0.1.el10_2.x86_64.rpm
dracut-config-generic-107-9.0.1.el10_2.x86_64.rpm
dracut-config-rescue-107-9.0.1.el10_2.x86_64.rpm
dracut-live-107-9.0.1.el10_2.x86_64.rpm
dracut-network-107-9.0.1.el10_2.x86_64.rpm
dracut-squash-107-9.0.1.el10_2.x86_64.rpm
dracut-tools-107-9.0.1.el10_2.x86_64.rpm

aarch64:
dracut-107-9.0.1.el10_2.aarch64.rpm
dracut-caps-107-9.0.1.el10_2.aarch64.rpm
dracut-config-generic-107-9.0.1.el10_2.aarch64.rpm
dracut-config-rescue-107-9.0.1.el10_2.aarch64.rpm
dracut-live-107-9.0.1.el10_2.aarch64.rpm
dracut-network-107-9.0.1.el10_2.aarch64.rpm
dracut-squash-107-9.0.1.el10_2.aarch64.rpm
dracut-tools-107-9.0.1.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dracut-107-9.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-15816




Description of changes:

[107-9.0.1]
- Suppress stderr for btrfs subvolume check [Orabug: 39059254]
- fips: add logic for /boot subvolume on BTRFS [Orabug: 36028061]
- Skip unneeded FIPS logic on UEK with special FIPS [Orabug: 38138800] [Orabug: 38709306]
- Include correct modprobe into squashfs root [Orabug: 38559936]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons at oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[107-9]
- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in splitsep and export_n



From el-errata at oss.oracle.com  Sat Aug 15 14:10:43 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:43 -0700
Subject: [El-errata] ELBA-2026-500143 Oracle Linux 9
 oracle-ovirt-release-45-el9 bug fix update
Message-ID: <mailman.181.1786803057.31.el-errata@oss.oracle.com>

Oracle Linux Bug Fix Advisory ELBA-2026-500143

http://linux.oracle.com/errata/ELBA-2026-500143.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
oracle-ovirt-release-45-el9-1.0-8.el9.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/oracle-ovirt-release-45-el9-1.0-8.el9.src.rpm



Description of changes:

[1.0-8]
- Enable maven-3.8 module on el9

[1.0-7]
- Enable postgres-16 and nodejs-24 module on el9
- Fix versionlock libvirt-30:9 and qemu-kvm-30:7 to allow newer patch update



From el-errata at oss.oracle.com  Sat Aug 15 14:10:45 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:45 -0700
Subject: [El-errata] ELSA-2026-47756 Important: Oracle Linux 9 openssh
 security update
Message-ID: <mailman.182.1786803058.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-47756

http://linux.oracle.com/errata/ELSA-2026-47756.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
openssh-9.9p1-9.0.1.el9_8.x86_64.rpm
openssh-askpass-9.9p1-9.0.1.el9_8.x86_64.rpm
openssh-clients-9.9p1-9.0.1.el9_8.x86_64.rpm
openssh-keycat-9.9p1-9.0.1.el9_8.x86_64.rpm
openssh-server-9.9p1-9.0.1.el9_8.x86_64.rpm
pam_ssh_agent_auth-0.10.4-7.9.0.1.el9_8.x86_64.rpm

aarch64:
openssh-9.9p1-9.0.1.el9_8.aarch64.rpm
openssh-askpass-9.9p1-9.0.1.el9_8.aarch64.rpm
openssh-clients-9.9p1-9.0.1.el9_8.aarch64.rpm
openssh-keycat-9.9p1-9.0.1.el9_8.aarch64.rpm
openssh-server-9.9p1-9.0.1.el9_8.aarch64.rpm
pam_ssh_agent_auth-0.10.4-7.9.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/openssh-9.9p1-9.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-55653
CVE-2026-55654
CVE-2026-55655
CVE-2026-59996
CVE-2026-60002




Description of changes:

[9.9p1-9.0.1]
- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]
- Upstream references found with /usr/bin/ssh [Orabug: 37814929]

[9.9p1-9]
- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024

[9.9p1-8]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854



From el-errata at oss.oracle.com  Sat Aug 15 14:10:47 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:47 -0700
Subject: [El-errata] ELSA-2026-53844 Important: Oracle Linux 9
 iscsi-initiator-utils security, bug fix, and enhancement update
Message-ID: <mailman.183.1786803061.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-53844

http://linux.oracle.com/errata/ELSA-2026-53844.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el9_8.2.x86_64.rpm
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el9_8.2.x86_64.rpm
python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el9_8.2.x86_64.rpm

aarch64:
iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el9_8.2.aarch64.rpm
iscsi-initiator-utils-iscsiuio-6.2.1.11-1.git4b3e853.0.1.el9_8.2.aarch64.rpm
python3-iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el9_8.2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/iscsi-initiator-utils-6.2.1.11-1.git4b3e853.0.1.el9_8.2.src.rpm

Related CVEs:

CVE-2026-44943
CVE-2026-44944




Description of changes:

[6.2.1.11-1.git4b3e853.0.1.el9_8.2]
- iscsi validate interface IP against target address family [Orabug: 39491394]
- iscsi delay reconnect until interface has valid IP [Orabug: 38441836]
- Correct the typos in email addresses in changelog in OL9.5 [Orabug: 37910459]
- Change the order of restart iscsi services in spec file [Orabug: 37749406]
- Rate limit session reopen and initial connect log messages [Orabug: 37681887]
- Change the log_level of log_debug message in actor_delete()
- Remove incorrect keyword from install section in iscsi-init [Orabug: 37544462]
- Add python3-rpm-macros to BuildRequires
- Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
- Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
- Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
  and use com.oracle in prefix
- Complete the following tasks to address [Orabug: 29311709]
  The following patches address [Orabug: 29128380] (Jianchao Wang)
  Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
  The following patch addresses [Orabug: 29306329]
  Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
- Print vital iscsid messages on console using rsyslog facility. This
  is particularly useful when using iscsi boot and there is a connection
  or session issue. [Orabug: 29503805]
- Modify iscsi-mark-root-nodes script to only update node.startup to onboot
  for iscsi sessions that are active during boot. [Orabug: 29653342]
- Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
  is restarted. [Orabug: 29851447]
- Modify patches 0007 and 0032-0035 to apply cleanly
- Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]

[6.2.1.11-1.git4b3e853.2]
- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass

[6.2.1.11-1.git4b3e853.1]
- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass

[6.2.1.11-1.git4b3e853]
- fix regression in fw and static node records



From el-errata at oss.oracle.com  Sat Aug 15 14:10:49 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:49 -0700
Subject: [El-errata] ELSA-2026-54184 Important: Oracle Linux 9 grafana
 security update
Message-ID: <mailman.184.1786803063.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54184

http://linux.oracle.com/errata/ELSA-2026-54184.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
grafana-10.2.6-23.el9_8.1.x86_64.rpm
grafana-selinux-10.2.6-23.el9_8.1.x86_64.rpm

aarch64:
grafana-10.2.6-23.el9_8.1.aarch64.rpm
grafana-selinux-10.2.6-23.el9_8.1.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/grafana-10.2.6-23.el9_8.1.src.rpm

Related CVEs:

CVE-2026-42127




Description of changes:

[10.2.6-23.1]
- fix CVE-2026-42127: cap request body size and validate public dashboard access
- Resolves RHEL-219382



From el-errata at oss.oracle.com  Sat Aug 15 14:10:54 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:54 -0700
Subject: [El-errata] ELSA-2026-54571 Important: Oracle Linux 9 dracut
 security update
Message-ID: <mailman.185.1786803064.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54571

http://linux.oracle.com/errata/ELSA-2026-54571.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-caps-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-config-generic-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-config-rescue-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-live-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-network-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-squash-057-120.git20260728.0.1.el9_8.x86_64.rpm
dracut-tools-057-120.git20260728.0.1.el9_8.x86_64.rpm

aarch64:
dracut-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-caps-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-config-generic-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-config-rescue-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-live-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-network-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-squash-057-120.git20260728.0.1.el9_8.aarch64.rpm
dracut-tools-057-120.git20260728.0.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/dracut-057-120.git20260728.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-15816




Description of changes:

[057-120.git20260728.0.1]
- Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. [Orabug: 38705580]
- Ship Oracle IMA certificate [Orabug: 35992862]
- Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
- Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
- network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons at oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[057-120.git20260728]
- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in



From el-errata at oss.oracle.com  Sat Aug 15 14:10:50 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:50 -0700
Subject: [El-errata] ELSA-2026-54443 Important: Oracle Linux 9 kernel
 security, bug fix, and enhancement update
Message-ID: <mailman.186.1786803065.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54443

http://linux.oracle.com/errata/ELSA-2026-54443.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.39.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.39.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.39.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.39.1.el9_8.x86_64.rpm
libperf-5.14.0-687.39.1.el9_8.x86_64.rpm
perf-5.14.0-687.39.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.39.1.el9_8.x86_64.rpm
rtla-5.14.0-687.39.1.el9_8.x86_64.rpm
rv-5.14.0-687.39.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.39.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.39.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.39.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.39.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.39.1.el9_8.aarch64.rpm
libperf-5.14.0-687.39.1.el9_8.aarch64.rpm
perf-5.14.0-687.39.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.39.1.el9_8.aarch64.rpm
rtla-5.14.0-687.39.1.el9_8.aarch64.rpm
rv-5.14.0-687.39.1.el9_8.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.39.1.el9_8.src.rpm

Related CVEs:

CVE-2026-53202
CVE-2026-53264




Description of changes:

[5.14.0-687.39.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985764]

[5.14.0-687.39.1]
- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}



From el-errata at oss.oracle.com  Sat Aug 15 14:10:52 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:10:52 -0700
Subject: [El-errata] ELSA-2026-54484 Moderate: Oracle Linux 9 python-idna
 security update
Message-ID: <mailman.187.1786803069.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54484

http://linux.oracle.com/errata/ELSA-2026-54484.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-idna-2.10-8.el9_8.noarch.rpm

aarch64:
python3-idna-2.10-8.el9_8.noarch.rpm


SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/python-idna-2.10-8.el9_8.src.rpm

Related CVEs:

CVE-2026-45409




Description of changes:

[2.10-8]
- Security fix for CVE-2026-45409
Resolves: RHEL-215653



From el-errata at oss.oracle.com  Sat Aug 15 14:11:04 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:11:04 -0700
Subject: [El-errata] ELSA-2026-54538 Important: Oracle Linux 8 .NET 8.0
 security, bug fix, and enhancement update
Message-ID: <mailman.188.1786803078.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54538

http://linux.oracle.com/errata/ELSA-2026-54538.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el8_10.x86_64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-8.0-8.0.130-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-8.0-source-built-artifacts-8.0.130-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-8.0-8.0.130-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-8.0-8.0.30-1.0.1.el8_10.aarch64.rpm
dotnet-templates-8.0-8.0.130-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet8.0-8.0.130-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[8.0.130-1.0.1]
- Add support for Oracle Linux

[8.0.130-1]
- Update to .NET SDK 8.0.130 and Runtime 8.0.30
- Resolves: RHEL-235468



From el-errata at oss.oracle.com  Sat Aug 15 14:11:06 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:11:06 -0700
Subject: [El-errata] ELSA-2026-54542 Important: Oracle Linux 8 .NET 10.0
 security, bug fix, and enhancement update
Message-ID: <mailman.189.1786803080.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54542

http://linux.oracle.com/errata/ELSA-2026-54542.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-10.0.111-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-host-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-10.0-10.0.111-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.111-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-aot-10.0-10.0.111-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-10.0-10.0.111-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-10.0-10.0.11-1.0.1.el8_10.x86_64.rpm
dotnet-templates-10.0-10.0.111-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-10.0.111-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-host-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-10.0-10.0.111-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.111-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-aot-10.0-10.0.111-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-10.0-10.0.111-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-10.0-10.0.11-1.0.1.el8_10.aarch64.rpm
dotnet-templates-10.0-10.0.111-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet10.0-10.0.111-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[10.0.111-1.0.1]
- Add support for Oracle Linux

[10.0.111-1]
- Update to .NET SDK 10.0.111 and Runtime 10.0.11
- Resolves: RHEL-235478



From el-errata at oss.oracle.com  Sat Aug 15 14:11:12 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 07:11:12 -0700
Subject: [El-errata] ELSA-2026-54654 Important: Oracle Linux 8 bind security
 update
Message-ID: <mailman.190.1786803085.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54654

http://linux.oracle.com/errata/ELSA-2026-54654.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bind-9.11.36-16.el8_10.14.x86_64.rpm
bind-chroot-9.11.36-16.el8_10.14.x86_64.rpm
bind-devel-9.11.36-16.el8_10.14.i686.rpm
bind-devel-9.11.36-16.el8_10.14.x86_64.rpm
bind-export-devel-9.11.36-16.el8_10.14.i686.rpm
bind-export-devel-9.11.36-16.el8_10.14.x86_64.rpm
bind-export-libs-9.11.36-16.el8_10.14.i686.rpm
bind-export-libs-9.11.36-16.el8_10.14.x86_64.rpm
bind-libs-9.11.36-16.el8_10.14.i686.rpm
bind-libs-9.11.36-16.el8_10.14.x86_64.rpm
bind-libs-lite-9.11.36-16.el8_10.14.i686.rpm
bind-libs-lite-9.11.36-16.el8_10.14.x86_64.rpm
bind-license-9.11.36-16.el8_10.14.noarch.rpm
bind-lite-devel-9.11.36-16.el8_10.14.i686.rpm
bind-lite-devel-9.11.36-16.el8_10.14.x86_64.rpm
bind-pkcs11-9.11.36-16.el8_10.14.x86_64.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.14.i686.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.14.x86_64.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.14.i686.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.14.x86_64.rpm
bind-pkcs11-utils-9.11.36-16.el8_10.14.x86_64.rpm
bind-sdb-9.11.36-16.el8_10.14.x86_64.rpm
bind-sdb-chroot-9.11.36-16.el8_10.14.x86_64.rpm
bind-utils-9.11.36-16.el8_10.14.x86_64.rpm
python3-bind-9.11.36-16.el8_10.14.noarch.rpm

aarch64:
bind-9.11.36-16.el8_10.14.aarch64.rpm
bind-chroot-9.11.36-16.el8_10.14.aarch64.rpm
bind-devel-9.11.36-16.el8_10.14.aarch64.rpm
bind-export-devel-9.11.36-16.el8_10.14.aarch64.rpm
bind-export-libs-9.11.36-16.el8_10.14.aarch64.rpm
bind-libs-9.11.36-16.el8_10.14.aarch64.rpm
bind-libs-lite-9.11.36-16.el8_10.14.aarch64.rpm
bind-license-9.11.36-16.el8_10.14.noarch.rpm
bind-lite-devel-9.11.36-16.el8_10.14.aarch64.rpm
bind-pkcs11-9.11.36-16.el8_10.14.aarch64.rpm
bind-pkcs11-devel-9.11.36-16.el8_10.14.aarch64.rpm
bind-pkcs11-libs-9.11.36-16.el8_10.14.aarch64.rpm
bind-pkcs11-utils-9.11.36-16.el8_10.14.aarch64.rpm
bind-sdb-9.11.36-16.el8_10.14.aarch64.rpm
bind-sdb-chroot-9.11.36-16.el8_10.14.aarch64.rpm
bind-utils-9.11.36-16.el8_10.14.aarch64.rpm
python3-bind-9.11.36-16.el8_10.14.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/bind-9.11.36-16.el8_10.14.src.rpm

Related CVEs:

CVE-2026-10723
CVE-2026-11622
CVE-2026-11721
CVE-2026-13204
CVE-2026-13321




Description of changes:

[32:9.11.36-16.14]
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)

[32:9.11.36-16.12]
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)

[32:9.11.36-16.11]
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)

[32:9.11.36-16.10]
- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

[32:9.11.36-16.9]
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)



From el-errata at oss.oracle.com  Sat Aug 15 15:12:07 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 08:12:07 -0700
Subject: [El-errata] ELSA-2026-54371 Important: Oracle Linux 8 nodejs:24
 security update
Message-ID: <mailman.193.1786806741.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54371

http://linux.oracle.com/errata/ELSA-2026-54371.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.x86_64.rpm
nodejs-devel-24.18.0-3.module+el8.10.0+90988+ddbb43dc.x86_64.rpm
nodejs-docs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-full-i18n-24.18.0-3.module+el8.10.0+90988+ddbb43dc.x86_64.rpm
nodejs-libs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.x86_64.rpm
nodejs-nodemon-3.1.14-2.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-packaging-2021.06-6.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90988+ddbb43dc.noarch.rpm
npm-11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc.x86_64.rpm

aarch64:
nodejs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.aarch64.rpm
nodejs-devel-24.18.0-3.module+el8.10.0+90988+ddbb43dc.aarch64.rpm
nodejs-docs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-full-i18n-24.18.0-3.module+el8.10.0+90988+ddbb43dc.aarch64.rpm
nodejs-libs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.aarch64.rpm
nodejs-nodemon-3.1.14-2.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-packaging-2021.06-6.module+el8.10.0+90988+ddbb43dc.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el8.10.0+90988+ddbb43dc.noarch.rpm
npm-11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-24.18.0-3.module+el8.10.0+90988+ddbb43dc.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-nodemon-3.1.14-2.module+el8.10.0+90988+ddbb43dc.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/nodejs-packaging-2021.06-6.module+el8.10.0+90988+ddbb43dc.src.rpm

Related CVEs:

CVE-2026-11822
CVE-2026-11824
CVE-2026-14257
CVE-2026-54272
CVE-2026-69152
CVE-2026-69192




Description of changes:

nodejs
[1:24.18.0-3]
- deps: update npm/ip-address to 10.4.0
- deps: update npm/brace-expansion to 5.9.0
  Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152
  Resolves: RHEL-223388 RHEL-223907 RHEL-223792

[1:24.18.0-3]
- Backport patch update sqlite to 3.53.4
  Fixes: CVE-2026-11824, CVE-2026-11822
  Resolves: RHEL-218252 RHEL-218257

[1:24.18.0-2]
- Backport patches for various CVEs
  Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149
  Resolves: RHEL-194176 RHEL-194179 RHEL-208658

[1:24.18.0-1]
- Update to version 24.18.0
  Resolves: RHEL-168744

[1:24.14.1-2]
- Update bundled nghttp2 to 1.68.1
  Related: RHEL-151374

[1:24.14.1-1]
- Update to 24.14.0
  Resolves: RHEL-151374

[1:24.13.0-1]
- Update to 24.13.0
  Resolves: RHEL-135257

[1:24.4.1-1]
- Initial import of nodejs:24

nodejs-nodemon
[3.1.14-2]
- Rebase npm/brace-expansion to 5.0.9
  Fixes: CVE-2026-69152
  Resolves: RHEL-223789

[3.1.14-1]
- Rebase to 3.1.14
- Switch from using remys fork as a source to npm.
- Resolves: RHEL-208657

[3.0.3-1]
- Initial import into nodejs:24 module

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
  Resolves: RHEL-121576

[2021.06-5]
- nodejs.req to properly detect bundled deps

[2021.06-4]
- NPM bundler: also find namespaced bundled dependencies

[2021.06-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[2021.06-2]
- Fix hard-coded output directory in the bundler

[2021.06-1]
- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata

[2021.01-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[2021.01-2]
- nodejs-packaging-bundler improvements to handle uncommon characters

[2021.01]
- Add nodejs-packaging-bundler and update README.md

[2020.09-1]
- Move to dist-git as the upstream



From el-errata at oss.oracle.com  Sat Aug 15 15:12:11 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 08:12:11 -0700
Subject: [El-errata] ELSA-2026-54550 Important: Oracle Linux 8 .NET 9.0
 security, bug fix, and enhancement update
Message-ID: <mailman.194.1786806746.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54550

http://linux.oracle.com/errata/ELSA-2026-54550.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
aspnetcore-runtime-dbg-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-apphost-pack-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-hostfxr-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-runtime-dbg-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-9.0-9.0.120-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-aot-9.0-9.0.120-1.0.1.el8_10.x86_64.rpm
dotnet-sdk-dbg-9.0-9.0.120-1.0.1.el8_10.x86_64.rpm
dotnet-targeting-pack-9.0-9.0.19-1.0.1.el8_10.x86_64.rpm
dotnet-templates-9.0-9.0.120-1.0.1.el8_10.x86_64.rpm
netstandard-targeting-pack-2.1-9.0.120-1.0.1.el8_10.x86_64.rpm

aarch64:
aspnetcore-runtime-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
aspnetcore-runtime-dbg-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
aspnetcore-targeting-pack-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-apphost-pack-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-hostfxr-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-runtime-dbg-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-9.0-9.0.120-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-9.0-source-built-artifacts-9.0.120-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-aot-9.0-9.0.120-1.0.1.el8_10.aarch64.rpm
dotnet-sdk-dbg-9.0-9.0.120-1.0.1.el8_10.aarch64.rpm
dotnet-targeting-pack-9.0-9.0.19-1.0.1.el8_10.aarch64.rpm
dotnet-templates-9.0-9.0.120-1.0.1.el8_10.aarch64.rpm
netstandard-targeting-pack-2.1-9.0.120-1.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dotnet9.0-9.0.120-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-62899
CVE-2026-62900
CVE-2026-62901
CVE-2026-62909




Description of changes:

[9.0.120-1.0.1]
- Add support for Oracle Linux

[9.0.120-1]
- Update to .NET SDK 9.0.120 and Runtime 9.0.19
- Resolves: RHEL-235473



From el-errata at oss.oracle.com  Sat Aug 15 15:12:13 2026
From: el-errata at oss.oracle.com (Errata Announcements for Oracle Linux)
Date: Sat, 15 Aug 2026 08:12:13 -0700
Subject: [El-errata] ELSA-2026-54575 Important: Oracle Linux 8 dracut
 security update
Message-ID: <mailman.195.1786806748.31.el-errata@oss.oracle.com>

Oracle Linux Security Advisory ELSA-2026-54575

http://linux.oracle.com/errata/ELSA-2026-54575.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
dracut-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-caps-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-config-generic-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-config-rescue-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-live-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-network-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-squash-049-246.git20260728.0.1.el8_10.x86_64.rpm
dracut-tools-049-246.git20260728.0.1.el8_10.x86_64.rpm

aarch64:
dracut-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-caps-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-config-generic-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-config-rescue-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-live-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-network-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-squash-049-246.git20260728.0.1.el8_10.aarch64.rpm
dracut-tools-049-246.git20260728.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dracut-049-246.git20260728.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-15816




Description of changes:

[049-246.git20260728.0.1]
- Refactor get_ucode_file [Orabug: 36989953]
- Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
- Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
- Enable the code to create ifcfg file [Orabug: 33888951]
- Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
- Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
- Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
- Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
- Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
- Install missing 68-del-part-node.rules [Orabug: 32827579]
- Add manpage for single-dhcp [Orabug 32201686]
- Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
- Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
- Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
- Revert fix for [Orabug: 31404167]
- drop 51-dracut-rescue.install patch
- Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
- add ofb and cts to 01fips kernel module list [Orabug: 30622737]
- dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
- Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
- Update list of necessary files after squashfs execution [Orabug: 29864620]
- Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
- Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
- Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
- Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
- Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
- 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
- Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons at oracle.com)
- add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

[049-246.git20260728]
- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in

[049-246.git20260728]
- fix(base): escape die() message in emergency hook script
- fix(base): replace eval with safe variable indirection in



