Oracle Linux has released a batch of patches spanning versions 7 through 10 that address security vulnerabilities and resolve functional issues across multiple system components. Administrators can apply the glibc improvements instantly using Ksplice under ELSA-2026-42952, while other high-priority advisories target openssh, kernel, openssl, and firefox for Oracle Linux 8, 9, and 10. The update list also includes moderate patches for libgcrypt and glibc, along with bug fix releases for samba, coreutils, and the Unbreakable Enterprise kernel on Oracle Linux 8 and 9 systems. Package-level changes cover nodejs:22, nodejs:24, gstreamer1-plugins-bad-free, pipewire, and grafana, ensuring that developers and operations teams have access to the latest stable builds and security hardening across all supported releases.

New glibc updates available via Ksplice (ELSA-2026-42952)
ELSA-2026-47757 Important: Oracle Linux 10 openssh security update
ELSA-2026-47180 Important: Oracle Linux 10 gstreamer1-plugins-bad-free security update
ELSA-2026-47083 Important: Oracle Linux 10 pipewire security update
ELSA-2026-47085 Important: Oracle Linux 10 rest security update
ELSA-2026-47079 Important: Oracle Linux 10 libXfont2 security update
ELBA-2026-500051 Oracle Linux 8 oVirt 4.5 vdsm-jsonrpc-java bug fix update
ELSA-2026-47177 Important: Oracle Linux 8 yelp security update
ELSA-2026-47058 Important: Oracle Linux 9 nodejs:22 security update
ELSA-2026-47057 Important: Oracle Linux 9 nodejs:24 security update
ELSA-2026-47736 Important: Oracle Linux 8 fence-agents security update
ELSA-2026-47731 Important: Oracle Linux 8 gstreamer1-plugins-bad-free security update
ELSA-2026-47184 Important: Oracle Linux 8 libtiff security update
ELSA-2026-47183 Important: Oracle Linux 8 compat-libtiff3 security update
ELSA-2026-47117 Moderate: Oracle Linux 8 libgcrypt security update
ELSA-2026-47105 Important: Oracle Linux 8 firefox security update
ELSA-2026-47103 Important: Oracle Linux 8 libXfont2 security update
ELBA-2026-47122 Oracle Linux 8 samba bug fix and enhancement update
ELBA-2026-47115 Oracle Linux 8 coreutils bug fix and enhancement update
ELSA-2026-48703 Important: Oracle Linux 8 vim security update
ELSA-2026-48021 Important: Oracle Linux 8 python-pillow security update
ELSA-2026-46532 Important: Oracle Linux 8 dovecot security update
ELSA-2026-46990 Important: Oracle Linux 8 sssd security, bug fix, and enhancement update
ELSA-2026-46391 Important: Oracle Linux 8 grafana security, bug fix, and enhancement update
ELSA-2026-45115 Important: Oracle Linux 8 kernel security update
ELSA-2026-42733 Moderate: Oracle Linux 8 glibc security update
ELSA-2026-48585 Important: Oracle Linux 10 fence-agents security update
ELSA-2026-45114 Important: Oracle Linux 10 kernel security update
ELSA-2026-48650 Important: Oracle Linux 10 vim security update
ELSA-2026-36199 Important: Oracle Linux 10 buildah security update
ELSA-2026-25237 Important: Oracle Linux 10 openssl security update
ELSA-2026-21557 Important: Oracle Linux 10 kernel security update
ELBA-2026-46512 Oracle Linux 10 openssl bug fix and enhancement update
ELSA-2026-26168 Important: Oracle Linux 7 gimp security update
ELSA-2026-22146 Important: Oracle Linux 7 PackageKit security update
ELBA-2026-500093 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500092 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500093 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500092 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELSA-2026-47982 Important: Oracle Linux 9 vim security update
ELSA-2026-47179 Important: Oracle Linux 9 gstreamer1-plugins-bad-free security update
ELSA-2026-47084 Important: Oracle Linux 9 libXfont2 security update
ELSA-2026-47178 Important: Oracle Linux 9 yelp security update
ELSA-2026-47104 Important: Oracle Linux 9 firefox security update
ELBA-2026-500093 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELBA-2026-500092 Oracle Linux 9 Unbreakable Enterprise kernel bug fix update
ELSA-2026-45192 Important: Oracle Linux 9 kernel security, bug fix, and enhancement update

New glibc updates available via Ksplice (ELSA-2026-42952)

Synopsis: ELSA-2026-42952 can now be patched using Ksplice
CVEs: CVE-2026-5435 CVE-2026-5928 CVE-2026-6238

Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle Linux Security Advisory, ELSA-2026-42952.

INSTALLING THE UPDATES

We recommend that all users of Ksplice on OL 9 install these updates.

You can install these updates by running:

# ksplice -y user upgrade

32-bit applications should be restarted after upgrading the on-disk
glibc RPMs and statically linked applications using
glibc should be rebuilt to include these fixes.

Ksplice user-space patching requires installation of Ksplice-aware
packages and the system must be rebooted after the first installation of
these packages. Refer to the installation instructions for the Enhanced
Ksplice Client in the Ksplice User's Guide for more details. Systems
may be prepared for Ksplice patching by installing the Ksplice aware
packages in advance, prior to installing the enhanced Ksplice client.

DESCRIPTION

* CVE-2026-5435, CVE-2026-6238: Out-of-bounds accesses in ns_sprintrrf().

* CVE-2026-5928: Information leak in ungetwc().

SUPPORT

Ksplice support is available at ksplice-support_ww@oracle.com.

ELSA-2026-47757 Important: Oracle Linux 10 openssh security update

Oracle Linux Security Advisory ELSA-2026-47757

http://linux.oracle.com/errata/ELSA-2026-47757.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
openssh-9.9p1-25.0.1.el10_2.x86_64.rpm
openssh-askpass-9.9p1-25.0.1.el10_2.x86_64.rpm
openssh-clients-9.9p1-25.0.1.el10_2.x86_64.rpm
openssh-keycat-9.9p1-25.0.1.el10_2.x86_64.rpm
openssh-keysign-9.9p1-25.0.1.el10_2.x86_64.rpm
openssh-server-9.9p1-25.0.1.el10_2.x86_64.rpm

aarch64:
openssh-9.9p1-25.0.1.el10_2.aarch64.rpm
openssh-askpass-9.9p1-25.0.1.el10_2.aarch64.rpm
openssh-clients-9.9p1-25.0.1.el10_2.aarch64.rpm
openssh-keycat-9.9p1-25.0.1.el10_2.aarch64.rpm
openssh-keysign-9.9p1-25.0.1.el10_2.aarch64.rpm
openssh-server-9.9p1-25.0.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/openssh-9.9p1-25.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-55653
CVE-2026-55654
CVE-2026-55655
CVE-2026-59996
CVE-2026-60002

Description of changes:

[9.9p1-25.0.1]
- Upstream references found with /usr/bin/ssh [Orabug: 37824421]

[9.9p1-25]
- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
in unintended parent directories when scp performs remote-to-remote copy
via the local host
Resolves: RHEL-193170
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
Resolves: RHEL-193016

[9.9p1-24]
- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
FIPS known-group validation that leads to client-side denial of service
Resolves: RHEL-186435
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
cleanup due to missing NULL terminator
Resolves: RHEL-185826
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
pre-binding
Resolves: RHEL-185852

ELSA-2026-47180 Important: Oracle Linux 10 gstreamer1-plugins-bad-free security update

Oracle Linux Security Advisory ELSA-2026-47180

http://linux.oracle.com/errata/ELSA-2026-47180.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-bad-free-1.26.7-2.el10_2.6.x86_64.rpm
gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.6.x86_64.rpm
gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.6.x86_64.rpm

aarch64:
gstreamer1-plugins-bad-free-1.26.7-2.el10_2.6.aarch64.rpm
gstreamer1-plugins-bad-free-devel-1.26.7-2.el10_2.6.aarch64.rpm
gstreamer1-plugins-bad-free-libs-1.26.7-2.el10_2.6.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/gstreamer1-plugins-bad-free-1.26.7-2.el10_2.6.src.rpm

Related CVEs:

CVE-2026-59691
CVE-2026-59692

Description of changes:

[1.26.7-2.5]
- Fix rfbsrc hextile and color read handling for non-32bpp
pixel formats (CVE-2026-59691)
Resolves: RHEL-193550

ELSA-2026-47083 Important: Oracle Linux 10 pipewire security update

Oracle Linux Security Advisory ELSA-2026-47083

http://linux.oracle.com/errata/ELSA-2026-47083.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
pipewire-1.4.11-1.el10_2.x86_64.rpm
pipewire-alsa-1.4.11-1.el10_2.x86_64.rpm
pipewire-devel-1.4.11-1.el10_2.x86_64.rpm
pipewire-gstreamer-1.4.11-1.el10_2.x86_64.rpm
pipewire-jack-audio-connection-kit-1.4.11-1.el10_2.x86_64.rpm
pipewire-jack-audio-connection-kit-devel-1.4.11-1.el10_2.x86_64.rpm
pipewire-jack-audio-connection-kit-libs-1.4.11-1.el10_2.x86_64.rpm
pipewire-libs-1.4.11-1.el10_2.x86_64.rpm
pipewire-module-x11-1.4.11-1.el10_2.x86_64.rpm
pipewire-plugin-libcamera-1.4.11-1.el10_2.x86_64.rpm
pipewire-pulseaudio-1.4.11-1.el10_2.x86_64.rpm
pipewire-utils-1.4.11-1.el10_2.x86_64.rpm

aarch64:
pipewire-1.4.11-1.el10_2.aarch64.rpm
pipewire-alsa-1.4.11-1.el10_2.aarch64.rpm
pipewire-devel-1.4.11-1.el10_2.aarch64.rpm
pipewire-gstreamer-1.4.11-1.el10_2.aarch64.rpm
pipewire-jack-audio-connection-kit-1.4.11-1.el10_2.aarch64.rpm
pipewire-jack-audio-connection-kit-devel-1.4.11-1.el10_2.aarch64.rpm
pipewire-jack-audio-connection-kit-libs-1.4.11-1.el10_2.aarch64.rpm
pipewire-libs-1.4.11-1.el10_2.aarch64.rpm
pipewire-module-x11-1.4.11-1.el10_2.aarch64.rpm
pipewire-plugin-libcamera-1.4.11-1.el10_2.aarch64.rpm
pipewire-pulseaudio-1.4.11-1.el10_2.aarch64.rpm
pipewire-utils-1.4.11-1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/pipewire-1.4.11-1.el10_2.src.rpm

Related CVEs:

CVE-2026-5674

Description of changes:

[1.4.11-1]
- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
Resolves: RHEL-164823

[1.4-6-1]
- Update version to 1.4.6
Resolves: DESKTOP-1857

[1.2.7-1]
- Update version to 1.2.7
- Resolves: RHEL-76017

[1.2.6-3]
- Enable libcamera support in RHEL-10
- Resolves: RHEL-64753

[1.2.6-2]
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018

[1.2.6-1]
- Update version to 1.2.6

[1.2.3-1]
- Update version to 1.2.3

[1.2.1-3]
- pipewire-jack-libs Requires pipewire-jack on RHEL

[1.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

[1.2.1-1]
- Update version to 1.2.1

ELSA-2026-47085 Important: Oracle Linux 10 rest security update

Oracle Linux Security Advisory ELSA-2026-47085

http://linux.oracle.com/errata/ELSA-2026-47085.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
rest-0.9.1-11.el10_2.1.x86_64.rpm
rest-devel-0.9.1-11.el10_2.1.x86_64.rpm

aarch64:
rest-0.9.1-11.el10_2.1.aarch64.rpm
rest-devel-0.9.1-11.el10_2.1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/rest-0.9.1-11.el10_2.1.src.rpm

Related CVEs:

CVE-2026-16615

Description of changes:

[0.9.1-11.1]
- Add patch for CVE-2026-16615 (Weak random number generation in PKCE implementation)
Resolves: RHEL-213749

ELSA-2026-47079 Important: Oracle Linux 10 libXfont2 security update

Oracle Linux Security Advisory ELSA-2026-47079

http://linux.oracle.com/errata/ELSA-2026-47079.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libXfont2-2.0.6-5.el10_2.1.x86_64.rpm
libXfont2-devel-2.0.6-5.el10_2.1.x86_64.rpm

aarch64:
libXfont2-2.0.6-5.el10_2.1.aarch64.rpm
libXfont2-devel-2.0.6-5.el10_2.1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/libXfont2-2.0.6-5.el10_2.1.src.rpm

Related CVEs:

CVE-2026-56001
CVE-2026-56002

Description of changes:

[2.0.6-5.1]
- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
Resolves: https://redhat.atlassian.net/browse/RHEL-191882
Resolves: https://redhat.atlassian.net/browse/RHEL-191930
Resolves: https://redhat.atlassian.net/browse/RHEL-191949

ELBA-2026-500051 Oracle Linux 8 oVirt 4.5 vdsm-jsonrpc-java bug fix update

Oracle Linux Bug Fix Advisory ELBA-2026-500051

http://linux.oracle.com/errata/ELBA-2026-500051.html

The following updated rpms for Oracle Linux 8 oVirt 4.5 have been uploaded to the Unbreakable Linux Network:

x86_64:
vdsm-jsonrpc-java-1.7.3-3.el8.noarch.rpm
vdsm-jsonrpc-java-javadoc-1.7.3-3.el8.noarch.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/vdsm-jsonrpc-java-1.7.3-3.el8.src.rpm

Description of changes:

[1.7.3-3]
- extend the time for SSLClient to verifyPeerCertificates

ELSA-2026-47177 Important: Oracle Linux 8 yelp security update

Oracle Linux Security Advisory ELSA-2026-47177

http://linux.oracle.com/errata/ELSA-2026-47177.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
yelp-3.28.1-3.el8_10.2.x86_64.rpm
yelp-devel-3.28.1-3.el8_10.2.i686.rpm
yelp-devel-3.28.1-3.el8_10.2.x86_64.rpm
yelp-libs-3.28.1-3.el8_10.2.i686.rpm
yelp-libs-3.28.1-3.el8_10.2.x86_64.rpm

aarch64:
yelp-3.28.1-3.el8_10.2.aarch64.rpm
yelp-devel-3.28.1-3.el8_10.2.aarch64.rpm
yelp-libs-3.28.1-3.el8_10.2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/yelp-3.28.1-3.el8_10.2.src.rpm

Related CVEs:

CVE-2026-13601

Description of changes:

[2:3.28.1-3.2]
- Fix CVE-2026-13601 (RHEL-190226)

ELSA-2026-47058 Important: Oracle Linux 9 nodejs:22 security update

Oracle Linux Security Advisory ELSA-2026-47058

http://linux.oracle.com/errata/ELSA-2026-47058.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-22.23.1-2.module+el9.8.0+90973+e42b55e7.x86_64.rpm
nodejs-devel-22.23.1-2.module+el9.8.0+90973+e42b55e7.x86_64.rpm
nodejs-docs-22.23.1-2.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-full-i18n-22.23.1-2.module+el9.8.0+90973+e42b55e7.x86_64.rpm
nodejs-libs-22.23.1-2.module+el9.8.0+90973+e42b55e7.x86_64.rpm
nodejs-nodemon-3.1.14-1.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-packaging-2021.06-6.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90973+e42b55e7.noarch.rpm
npm-10.9.8-1.22.23.1.2.module+el9.8.0+90973+e42b55e7.x86_64.rpm
v8-12.4-devel-12.4.254.21-1.22.23.1.2.module+el9.8.0+90973+e42b55e7.x86_64.rpm

aarch64:
nodejs-22.23.1-2.module+el9.8.0+90973+e42b55e7.aarch64.rpm
nodejs-devel-22.23.1-2.module+el9.8.0+90973+e42b55e7.aarch64.rpm
nodejs-docs-22.23.1-2.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-full-i18n-22.23.1-2.module+el9.8.0+90973+e42b55e7.aarch64.rpm
nodejs-libs-22.23.1-2.module+el9.8.0+90973+e42b55e7.aarch64.rpm
nodejs-nodemon-3.1.14-1.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-packaging-2021.06-6.module+el9.8.0+90973+e42b55e7.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90973+e42b55e7.noarch.rpm
npm-10.9.8-1.22.23.1.2.module+el9.8.0+90973+e42b55e7.aarch64.rpm
v8-12.4-devel-12.4.254.21-1.22.23.1.2.module+el9.8.0+90973+e42b55e7.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-22.23.1-2.module+el9.8.0+90973+e42b55e7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-nodemon-3.1.14-1.module+el9.8.0+90973+e42b55e7.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-packaging-2021.06-6.module+el9.8.0+90973+e42b55e7.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874

Description of changes:

nodejs
[1:22.23.1-2]
- Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19
- Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion
Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149
Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680

[1:22.23.1-1]
- Update to version 22.23.1
Resolves: RHEL-186622 RHEL-185998 RHEL-183669
Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338

[1:22.22.2-1]
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547
Resolves: RHEL-163370
Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547

[1:22.22.0-1]
- Update to 22.22.0
Resolves: RHEL-118153

[1.22.19.0-1]
- Update to 22.19.0
Resolves: RHEL-111913

[1:22.16.0-2]
- Patch fix for CVE-2025-6965
Resolves: RHEL-103853

[1:22.16.0-1]
- Update to 22.16.0
Resolves: RHEL-92870 RHEL-89599 RHEL-92058

[1:22.15.0-1]
- Update to 22.15.0
- Drop upstream patches

[1:22.13.1-4]
- Patch fix for sqlite CVE-2025-31498
Resolves: RHEL-87320

[1:22.13.1-3]
- Update c-ares to newest version with fix for CVE-2025-31498
Resolves: RHEL-86587

nodejs-nodemon
[3.1.14-1]
- Rebase to 3.1.14
- Change
%setup -q

/usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch |
/usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch

- Resolves: RHEL-208677

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-120511

[2021.06-5]
- nodejs.req to properly detect bundled deps

ELSA-2026-47057 Important: Oracle Linux 9 nodejs:24 security update

Oracle Linux Security Advisory ELSA-2026-47057

http://linux.oracle.com/errata/ELSA-2026-47057.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
nodejs-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm
nodejs-devel-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm
nodejs-docs-24.18.0-3.module+el9.8.0+90974+83075495.noarch.rpm
nodejs-full-i18n-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm
nodejs-libs-24.18.0-3.module+el9.8.0+90974+83075495.x86_64.rpm
nodejs-nodemon-3.1.14-2.module+el9.8.0+90974+83075495.noarch.rpm
nodejs-packaging-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm
npm-11.16.0-1.24.18.0.3.module+el9.8.0+90974+83075495.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el9.8.0+90974+83075495.x86_64.rpm

aarch64:
nodejs-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm
nodejs-devel-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm
nodejs-docs-24.18.0-3.module+el9.8.0+90974+83075495.noarch.rpm
nodejs-full-i18n-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm
nodejs-libs-24.18.0-3.module+el9.8.0+90974+83075495.aarch64.rpm
nodejs-nodemon-3.1.14-2.module+el9.8.0+90974+83075495.noarch.rpm
nodejs-packaging-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm
nodejs-packaging-bundler-2021.06-6.module+el9.8.0+90946+13dc792a.noarch.rpm
npm-11.16.0-1.24.18.0.3.module+el9.8.0+90974+83075495.noarch.rpm
v8-13.6-devel-13.6.233.17-1.24.18.0.3.module+el9.8.0+90974+83075495.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-24.18.0-3.module+el9.8.0+90974+83075495.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-nodemon-3.1.14-2.module+el9.8.0+90974+83075495.src.rpm
http://oss.oracle.com/ol9/SRPMS-updates/nodejs-packaging-2021.06-6.module+el9.8.0+90946+13dc792a.src.rpm

Related CVEs:

CVE-2026-13149
CVE-2026-59873
CVE-2026-59874

Description of changes:

nodejs
[1:24.18.0-3]
- Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar

[1:24.18.0-2]
- Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion

[1:24.18.0-1]
- Update to version 24.18.0

[1:24.14.1-2]
- Update bundled nghttp2 to 1.68.1

[1:24.14.1-1]
- Update to version 24.14.1

[1:24.13.0-1]
- Update to version 24.13.0

[1:24.11.1-2]
- Disable test-tls-session-cache.js as its not currently compatiable with
RHEL environment

[1:24.11.1-1]
- Update to version 24.11.1

[1:24.4.1-7]
- Add patch to prevent fips usage segfault

[1:24.4.1-6]
- Rename nodejs-npm back to npm

nodejs-nodemon
[3.1.14-2]
- Correction to sources for 3.1.14.

[3.1.14-1]
- Update to version 3.1.14

nodejs-packaging
[2021.06-6]
- Properly handle @group/package deps in nodejs-symlink-deps
Resolves: RHEL-121569

[2021.06-5]
- nodejs.req to properly detect bundled deps

ELSA-2026-47736 Important: Oracle Linux 8 fence-agents security update

Oracle Linux Security Advisory ELSA-2026-47736

http://linux.oracle.com/errata/ELSA-2026-47736.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-all-4.2.1-129.el8_10.27.x86_64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.27.x86_64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.27.x86_64.rpm
fence-agents-lpar-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-mpath-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.27.x86_64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.27.noarch.rpm

aarch64:
fence-agents-all-4.2.1-129.el8_10.27.aarch64.rpm
fence-agents-amt-ws-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-apc-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-apc-snmp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-bladecenter-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-brocade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-cisco-mds-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-cisco-ucs-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-common-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-compute-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-drac5-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-eaton-snmp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-emerson-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-eps-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-heuristics-ping-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-hpblade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibm-powervs-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibm-vpc-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ibmblade-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ifmib-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-moonshot-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-mp-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo-ssh-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ilo2-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-intelmodular-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ipdu-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-ipmilan-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-kdump-4.2.1-129.el8_10.27.aarch64.rpm
fence-agents-kubevirt-4.2.1-129.el8_10.27.aarch64.rpm
fence-agents-mpath-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-nutanix-ahv-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-redfish-4.2.1-129.el8_10.27.aarch64.rpm
fence-agents-rhevm-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-rsa-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-rsb-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-sbd-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-scsi-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-virsh-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-vmware-rest-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-vmware-soap-4.2.1-129.el8_10.27.noarch.rpm
fence-agents-wti-4.2.1-129.el8_10.27.noarch.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/fence-agents-4.2.1-129.el8_10.27.src.rpm

Related CVEs:

CVE-2026-59939

Description of changes:

[4.2.1-129.27]
- bundled httplib2: fix CVE-2026-59939
Resolves: RHEL-193803

[4.2.1-129.26]
- fence_openstack: fix list-action to avoid timeout when
there are 100+ VMs on the hypervisor
Resolves: RHEL-186317

ELSA-2026-47731 Important: Oracle Linux 8 gstreamer1-plugins-bad-free security update

Oracle Linux Security Advisory ELSA-2026-47731

http://linux.oracle.com/errata/ELSA-2026-47731.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
gstreamer1-plugins-bad-free-1.16.1-9.0.1.el8_10.1.i686.rpm
gstreamer1-plugins-bad-free-1.16.1-9.0.1.el8_10.1.x86_64.rpm
gstreamer1-plugins-bad-free-devel-1.16.1-9.0.1.el8_10.1.i686.rpm
gstreamer1-plugins-bad-free-devel-1.16.1-9.0.1.el8_10.1.x86_64.rpm

aarch64:
gstreamer1-plugins-bad-free-1.16.1-9.0.1.el8_10.1.aarch64.rpm
gstreamer1-plugins-bad-free-devel-1.16.1-9.0.1.el8_10.1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/gstreamer1-plugins-bad-free-1.16.1-9.0.1.el8_10.1.src.rpm

Related CVEs:

CVE-2026-59691
CVE-2026-59692

Description of changes:

[1.16.1-9.0.1.el8_10.1]
- Update origin URL [Orabug: 36209826]

[1.16.1-9.1]
- Fix buffer overflow in DTLS certificate subject DN handling
(CVE-2026-59692)
Resolves: RHEL-193570

[1.16.1-9]
- Fix rfbsrc/librfb vulnerabilities in rfbdecoder.c (CVE-2026-59691)
Resolves: RHEL-193559

ELSA-2026-47184 Important: Oracle Linux 8 libtiff security update

Oracle Linux Security Advisory ELSA-2026-47184

http://linux.oracle.com/errata/ELSA-2026-47184.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libtiff-4.0.9-38.el8_10.i686.rpm
libtiff-4.0.9-38.el8_10.x86_64.rpm
libtiff-devel-4.0.9-38.el8_10.i686.rpm
libtiff-devel-4.0.9-38.el8_10.x86_64.rpm
libtiff-tools-4.0.9-38.el8_10.x86_64.rpm

aarch64:
libtiff-4.0.9-38.el8_10.aarch64.rpm
libtiff-devel-4.0.9-38.el8_10.aarch64.rpm
libtiff-tools-4.0.9-38.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libtiff-4.0.9-38.el8_10.src.rpm

Related CVEs:

CVE-2026-12912

Description of changes:

[4.0.9-38]
- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189371)

ELSA-2026-47183 Important: Oracle Linux 8 compat-libtiff3 security update

Oracle Linux Security Advisory ELSA-2026-47183

http://linux.oracle.com/errata/ELSA-2026-47183.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
compat-libtiff3-3.9.4-16.el8_10.i686.rpm
compat-libtiff3-3.9.4-16.el8_10.x86_64.rpm

aarch64:
compat-libtiff3-3.9.4-16.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/compat-libtiff3-3.9.4-16.el8_10.src.rpm

Related CVEs:

CVE-2026-12912

Description of changes:

[3.9.4-16]
- fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding
(RHEL-189375)

ELSA-2026-47117 Moderate: Oracle Linux 8 libgcrypt security update

Oracle Linux Security Advisory ELSA-2026-47117

http://linux.oracle.com/errata/ELSA-2026-47117.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libgcrypt-1.8.5-8.el8_10.i686.rpm
libgcrypt-1.8.5-8.el8_10.x86_64.rpm
libgcrypt-devel-1.8.5-8.el8_10.i686.rpm
libgcrypt-devel-1.8.5-8.el8_10.x86_64.rpm

aarch64:
libgcrypt-1.8.5-8.el8_10.aarch64.rpm
libgcrypt-devel-1.8.5-8.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libgcrypt-1.8.5-8.el8_10.src.rpm

Related CVEs:

CVE-2026-41989

Description of changes:

[1.8.5-8]
- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

ELSA-2026-47105 Important: Oracle Linux 8 firefox security update

Oracle Linux Security Advisory ELSA-2026-47105

http://linux.oracle.com/errata/ELSA-2026-47105.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
firefox-140.13.0-1.0.1.el8_10.x86_64.rpm

aarch64:
firefox-140.13.0-1.0.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/firefox-140.13.0-1.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-15718
CVE-2026-15719
CVE-2026-16349
CVE-2026-16350
CVE-2026-16351
CVE-2026-16352
CVE-2026-16353
CVE-2026-16354
CVE-2026-16355
CVE-2026-16356
CVE-2026-16357
CVE-2026-16358
CVE-2026-16359
CVE-2026-16360
CVE-2026-16361
CVE-2026-16362
CVE-2026-16363
CVE-2026-16368
CVE-2026-16369
CVE-2026-16371
CVE-2026-16374
CVE-2026-16375
CVE-2026-16377
CVE-2026-16379
CVE-2026-16381
CVE-2026-16383
CVE-2026-16387
CVE-2026-16390
CVE-2026-16391
CVE-2026-16396
CVE-2026-16405
CVE-2026-16412
CVE-2026-56208

Description of changes:

[140.13.0-1.0.1]
- Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]
- diable wasi_sdk to prevent build failure with newer llvm

[140.13.0]
- Add debranding patches (Mustafa Gezen)
- Add OpenELA default preferences (Louis Abel)

[140.13.0-1]
- Update to 140.13.0 ESR

ELSA-2026-47103 Important: Oracle Linux 8 libXfont2 security update

Oracle Linux Security Advisory ELSA-2026-47103

http://linux.oracle.com/errata/ELSA-2026-47103.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libXfont2-2.0.3-2.el8_10.1.i686.rpm
libXfont2-2.0.3-2.el8_10.1.x86_64.rpm
libXfont2-devel-2.0.3-2.el8_10.1.i686.rpm
libXfont2-devel-2.0.3-2.el8_10.1.x86_64.rpm

aarch64:
libXfont2-2.0.3-2.el8_10.1.aarch64.rpm
libXfont2-devel-2.0.3-2.el8_10.1.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libXfont2-2.0.3-2.el8_10.1.src.rpm

Related CVEs:

CVE-2026-56001
CVE-2026-56002
CVE-2026-56003

Description of changes:

[2.0.3-2.1]
- CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003
Resolves: https://redhat.atlassian.net/browse/RHEL-191877
Resolves: https://redhat.atlassian.net/browse/RHEL-191928
Resolves: https://redhat.atlassian.net/browse/RHEL-191948

ELBA-2026-47122 Oracle Linux 8 samba bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2026-47122

http://linux.oracle.com/errata/ELBA-2026-47122.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
ctdb-4.19.4-17.0.1.el8_10.x86_64.rpm
libnetapi-4.19.4-17.0.1.el8_10.i686.rpm
libnetapi-4.19.4-17.0.1.el8_10.x86_64.rpm
libnetapi-devel-4.19.4-17.0.1.el8_10.i686.rpm
libnetapi-devel-4.19.4-17.0.1.el8_10.x86_64.rpm
libsmbclient-4.19.4-17.0.1.el8_10.i686.rpm
libsmbclient-4.19.4-17.0.1.el8_10.x86_64.rpm
libsmbclient-devel-4.19.4-17.0.1.el8_10.i686.rpm
libsmbclient-devel-4.19.4-17.0.1.el8_10.x86_64.rpm
libwbclient-4.19.4-17.0.1.el8_10.i686.rpm
libwbclient-4.19.4-17.0.1.el8_10.x86_64.rpm
libwbclient-devel-4.19.4-17.0.1.el8_10.i686.rpm
libwbclient-devel-4.19.4-17.0.1.el8_10.x86_64.rpm
python3-samba-4.19.4-17.0.1.el8_10.i686.rpm
python3-samba-4.19.4-17.0.1.el8_10.x86_64.rpm
python3-samba-dc-4.19.4-17.0.1.el8_10.x86_64.rpm
python3-samba-devel-4.19.4-17.0.1.el8_10.i686.rpm
python3-samba-devel-4.19.4-17.0.1.el8_10.x86_64.rpm
python3-samba-test-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-client-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-client-libs-4.19.4-17.0.1.el8_10.i686.rpm
samba-client-libs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-common-4.19.4-17.0.1.el8_10.noarch.rpm
samba-common-libs-4.19.4-17.0.1.el8_10.i686.rpm
samba-common-libs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-common-tools-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-dc-libs-4.19.4-17.0.1.el8_10.i686.rpm
samba-dc-libs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-dcerpc-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-devel-4.19.4-17.0.1.el8_10.i686.rpm
samba-devel-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-krb5-printing-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-ldb-ldap-modules-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-libs-4.19.4-17.0.1.el8_10.i686.rpm
samba-libs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-pidl-4.19.4-17.0.1.el8_10.noarch.rpm
samba-test-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-test-libs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-tools-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-usershares-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-vfs-glusterfs-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-vfs-iouring-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-winbind-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-winbind-clients-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-winbind-krb5-locator-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-winbind-modules-4.19.4-17.0.1.el8_10.i686.rpm
samba-winbind-modules-4.19.4-17.0.1.el8_10.x86_64.rpm
samba-winexe-4.19.4-17.0.1.el8_10.x86_64.rpm

aarch64:
ctdb-4.19.4-17.0.1.el8_10.aarch64.rpm
libnetapi-4.19.4-17.0.1.el8_10.aarch64.rpm
libnetapi-devel-4.19.4-17.0.1.el8_10.aarch64.rpm
libsmbclient-4.19.4-17.0.1.el8_10.aarch64.rpm
libsmbclient-devel-4.19.4-17.0.1.el8_10.aarch64.rpm
libwbclient-4.19.4-17.0.1.el8_10.aarch64.rpm
libwbclient-devel-4.19.4-17.0.1.el8_10.aarch64.rpm
python3-samba-4.19.4-17.0.1.el8_10.aarch64.rpm
python3-samba-dc-4.19.4-17.0.1.el8_10.aarch64.rpm
python3-samba-devel-4.19.4-17.0.1.el8_10.aarch64.rpm
python3-samba-test-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-client-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-client-libs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-common-4.19.4-17.0.1.el8_10.noarch.rpm
samba-common-libs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-common-tools-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-dc-libs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-dcerpc-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-devel-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-krb5-printing-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-ldb-ldap-modules-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-libs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-pidl-4.19.4-17.0.1.el8_10.noarch.rpm
samba-test-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-test-libs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-tools-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-usershares-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-vfs-glusterfs-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-vfs-iouring-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-winbind-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-winbind-clients-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-winbind-krb5-locator-4.19.4-17.0.1.el8_10.aarch64.rpm
samba-winbind-modules-4.19.4-17.0.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/samba-4.19.4-17.0.1.el8_10.src.rpm

Description of changes:

[4.19.4-17.0.1]
- s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
- s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
- Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]

[4.19.4-17]
- resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling

ELBA-2026-47115 Oracle Linux 8 coreutils bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2026-47115

http://linux.oracle.com/errata/ELBA-2026-47115.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
coreutils-8.30-20.0.1.el8_10.x86_64.rpm
coreutils-common-8.30-20.0.1.el8_10.x86_64.rpm
coreutils-single-8.30-20.0.1.el8_10.x86_64.rpm

aarch64:
coreutils-8.30-20.0.1.el8_10.aarch64.rpm
coreutils-common-8.30-20.0.1.el8_10.aarch64.rpm
coreutils-single-8.30-20.0.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/coreutils-8.30-20.0.1.el8_10.src.rpm

Description of changes:

[8.30-20.0.1]
- clean up empty file if cp is failed [Orabug 15973168]
- df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
- fix formatting of sha512sum(1) man page (#1688744)

[8.30-20]
- unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699)

[8.30-19]
- unexpand: fix stack overflow with large tabsizes (RHEL-182699)

[8.30-18]
- fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533)

ELSA-2026-48703 Important: Oracle Linux 8 vim security update

Oracle Linux Security Advisory ELSA-2026-48703

http://linux.oracle.com/errata/ELSA-2026-48703.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
vim-X11-8.0.1763-31.0.1.el8_10.x86_64.rpm
vim-common-8.0.1763-31.0.1.el8_10.x86_64.rpm
vim-enhanced-8.0.1763-31.0.1.el8_10.x86_64.rpm
vim-filesystem-8.0.1763-31.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-31.0.1.el8_10.x86_64.rpm

aarch64:
vim-X11-8.0.1763-31.0.1.el8_10.aarch64.rpm
vim-common-8.0.1763-31.0.1.el8_10.aarch64.rpm
vim-enhanced-8.0.1763-31.0.1.el8_10.aarch64.rpm
vim-filesystem-8.0.1763-31.0.1.el8_10.noarch.rpm
vim-minimal-8.0.1763-31.0.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/vim-8.0.1763-31.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-55693
CVE-2026-57455
CVE-2026-57456
CVE-2026-59858

Description of changes:

[8.0.1763-31.0.1]
- Remove upstream references [Orabug: 31197557]
- Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984]

[2:8.0.1763-31]
- RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in
C omni-completion

[2:8.0.1763-30]
- RHEL-194055 CVE-2026-55693 vim: out-of-bounds write in
tree_count_words()

[2:8.0.1763-29]
- RHEL-191365 CVE-2026-57455 vim: Out-of-bounds write with soundfold()

[2:8.0.1763-28]
- RHEL-192102 CVE-2026-57456 vim: possible code execution with python
complete via crafted docstrings

ELSA-2026-48021 Important: Oracle Linux 8 python-pillow security update

Oracle Linux Security Advisory ELSA-2026-48021

http://linux.oracle.com/errata/ELSA-2026-48021.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
python3-pillow-5.1.1-23.el8_10.i686.rpm
python3-pillow-5.1.1-23.el8_10.x86_64.rpm
python3-pillow-devel-5.1.1-23.el8_10.i686.rpm
python3-pillow-devel-5.1.1-23.el8_10.x86_64.rpm
python3-pillow-doc-5.1.1-23.el8_10.noarch.rpm
python3-pillow-tk-5.1.1-23.el8_10.x86_64.rpm

aarch64:
python3-pillow-5.1.1-23.el8_10.aarch64.rpm
python3-pillow-devel-5.1.1-23.el8_10.aarch64.rpm
python3-pillow-doc-5.1.1-23.el8_10.noarch.rpm
python3-pillow-tk-5.1.1-23.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/python-pillow-5.1.1-23.el8_10.src.rpm

Related CVEs:

CVE-2026-54058
CVE-2026-59197

Description of changes:

[5.1.1-23]
- Security fix for CVE-2026-54058, CVE-2026-59197
Resolves: RHEL-211857, RHEL-211848

ELSA-2026-46532 Important: Oracle Linux 8 dovecot security update

Oracle Linux Security Advisory ELSA-2026-46532

http://linux.oracle.com/errata/ELSA-2026-46532.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
dovecot-2.3.16-8.el8_10.i686.rpm
dovecot-2.3.16-8.el8_10.x86_64.rpm
dovecot-devel-2.3.16-8.el8_10.i686.rpm
dovecot-devel-2.3.16-8.el8_10.x86_64.rpm
dovecot-mysql-2.3.16-8.el8_10.x86_64.rpm
dovecot-pgsql-2.3.16-8.el8_10.x86_64.rpm
dovecot-pigeonhole-2.3.16-8.el8_10.x86_64.rpm

aarch64:
dovecot-2.3.16-8.el8_10.aarch64.rpm
dovecot-devel-2.3.16-8.el8_10.aarch64.rpm
dovecot-mysql-2.3.16-8.el8_10.aarch64.rpm
dovecot-pgsql-2.3.16-8.el8_10.aarch64.rpm
dovecot-pigeonhole-2.3.16-8.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/dovecot-2.3.16-8.el8_10.src.rpm

Related CVEs:

CVE-2026-42006

Description of changes:

[1:2.3.16-8]
- fix CVE-2026-42006: fix IMAP parser list_count_limit to correctly
limit open braces instead of close braces (RHEL-188480)

ELSA-2026-46990 Important: Oracle Linux 8 sssd security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2026-46990

http://linux.oracle.com/errata/ELSA-2026-46990.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libipa_hbac-2.9.4-5.0.2.el8_10.5.i686.rpm
libipa_hbac-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_autofs-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_certmap-2.9.4-5.0.2.el8_10.5.i686.rpm
libsss_certmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_idmap-2.9.4-5.0.2.el8_10.5.i686.rpm
libsss_idmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_nss_idmap-2.9.4-5.0.2.el8_10.5.i686.rpm
libsss_nss_idmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.5.i686.rpm
libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_simpleifp-2.9.4-5.0.2.el8_10.5.i686.rpm
libsss_simpleifp-2.9.4-5.0.2.el8_10.5.x86_64.rpm
libsss_sudo-2.9.4-5.0.2.el8_10.5.x86_64.rpm
python3-libipa_hbac-2.9.4-5.0.2.el8_10.5.x86_64.rpm
python3-libsss_nss_idmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
python3-sss-2.9.4-5.0.2.el8_10.5.x86_64.rpm
python3-sss-murmur-2.9.4-5.0.2.el8_10.5.x86_64.rpm
python3-sssdconfig-2.9.4-5.0.2.el8_10.5.noarch.rpm
sssd-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-ad-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-client-2.9.4-5.0.2.el8_10.5.i686.rpm
sssd-client-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-common-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-common-pac-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-dbus-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-idp-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-ipa-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-kcm-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-krb5-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-krb5-common-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-ldap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-nfs-idmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-polkit-rules-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-proxy-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-tools-2.9.4-5.0.2.el8_10.5.x86_64.rpm
sssd-winbind-idmap-2.9.4-5.0.2.el8_10.5.x86_64.rpm

aarch64:
libipa_hbac-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_autofs-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_certmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_idmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_nss_idmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_nss_idmap-devel-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_simpleifp-2.9.4-5.0.2.el8_10.5.aarch64.rpm
libsss_sudo-2.9.4-5.0.2.el8_10.5.aarch64.rpm
python3-libipa_hbac-2.9.4-5.0.2.el8_10.5.aarch64.rpm
python3-libsss_nss_idmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
python3-sss-2.9.4-5.0.2.el8_10.5.aarch64.rpm
python3-sss-murmur-2.9.4-5.0.2.el8_10.5.aarch64.rpm
python3-sssdconfig-2.9.4-5.0.2.el8_10.5.noarch.rpm
sssd-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-ad-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-client-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-common-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-common-pac-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-dbus-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-idp-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-ipa-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-kcm-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-krb5-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-krb5-common-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-ldap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-nfs-idmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-polkit-rules-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-proxy-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-tools-2.9.4-5.0.2.el8_10.5.aarch64.rpm
sssd-winbind-idmap-2.9.4-5.0.2.el8_10.5.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/sssd-2.9.4-5.0.2.el8_10.5.src.rpm

Related CVEs:

CVE-2026-14474
CVE-2026-14476

Description of changes:

[2.9.4-5.0.2.el8_10.5]
- Missing ntohs to service port [Orabug: 37389651]
- Restore default debug level for sss_cache [Orabug: 32810448]

[2.9.4-5.5]
- Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z]
- Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z]
- Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z]

[2.9.4-5.4]
- Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z]
- Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z]
- Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z]
- Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z]

[2.9.4-5.3]
- Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z]
- Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z]

[2.9.4-5.2]
- Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z]
- Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z]
- Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z]

[2.9.4-5.1]
- Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z]
- Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z]
- Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z]
- Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z]
- Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z]
- Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z]

ELSA-2026-46391 Important: Oracle Linux 8 grafana security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2026-46391

http://linux.oracle.com/errata/ELSA-2026-46391.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
grafana-9.2.10-32.0.1.el8_10.x86_64.rpm
grafana-selinux-9.2.10-32.0.1.el8_10.x86_64.rpm

aarch64:
grafana-9.2.10-32.0.1.el8_10.aarch64.rpm
grafana-selinux-9.2.10-32.0.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/grafana-9.2.10-32.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-44740

Description of changes:

[9.2.10-32.0.1]
- Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520]

[9.2.10-32]
- Resolves RHEL-191816: CVE-2026-44740
- Resolves RHEL-188279: Remove Lua ExclusiveArch macro for Konflux build

ELSA-2026-45115 Important: Oracle Linux 8 kernel security update

Oracle Linux Security Advisory ELSA-2026-45115

http://linux.oracle.com/errata/ELSA-2026-45115.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.147.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64.rpm
perf-4.18.0-553.147.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.147.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.147.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.147.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.147.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.147.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.147.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.aarch64.rpm
perf-4.18.0-553.147.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.147.1.el8_10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.147.1.el8_10.src.rpm

Related CVEs:

CVE-2025-40026
CVE-2026-52993
CVE-2026-53059

Description of changes:

[4.18.0-553.147.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]

ELSA-2026-42733 Moderate: Oracle Linux 8 glibc security update

Oracle Linux Security Advisory ELSA-2026-42733

http://linux.oracle.com/errata/ELSA-2026-42733.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
compat-libpthread-nonshared-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-2.28-251.0.4.el8_10.40.i686.rpm
glibc-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-all-langpacks-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-benchtests-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-common-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-devel-2.28-251.0.4.el8_10.40.i686.rpm
glibc-devel-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-doc-2.28-251.0.4.el8_10.40.noarch.rpm
glibc-gconv-extra-2.28-251.0.4.el8_10.40.i686.rpm
glibc-gconv-extra-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-headers-2.28-251.0.4.el8_10.40.i686.rpm
glibc-headers-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-aa-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-af-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-agr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ak-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-am-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-an-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-anp-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ar-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-as-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ast-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ayc-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-az-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-be-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bem-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ber-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bg-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bhb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bho-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-br-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-brx-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-bs-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-byn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ca-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ce-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-chr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-cmn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-crh-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-cs-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-csb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-cv-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-cy-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-da-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-de-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-doi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-dsb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-dv-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-dz-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-el-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-en-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-eo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-es-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-et-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-eu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fa-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ff-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fil-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fur-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-fy-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ga-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-gd-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-gez-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-gl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-gu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-gv-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ha-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hak-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-he-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hif-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hne-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hsb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ht-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-hy-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ia-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-id-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ig-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ik-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-is-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-it-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-iu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ja-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ka-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kab-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kk-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-km-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ko-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kok-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ks-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ku-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-kw-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ky-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lg-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-li-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lij-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ln-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lt-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lv-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-lzh-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mag-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mai-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mfe-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mg-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mhr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-miq-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mjw-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mk-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ml-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mni-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ms-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-mt-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-my-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nan-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nb-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nds-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ne-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nhn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-niu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-nso-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-oc-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-om-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-or-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-os-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-pa-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-pap-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-pl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ps-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-pt-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-quz-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-raj-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ro-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ru-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-rw-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sa-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sah-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sat-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sc-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sd-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-se-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sgs-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-shn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-shs-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-si-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sid-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sk-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sm-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-so-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sq-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ss-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-st-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sv-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-sw-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-szl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ta-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tcy-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-te-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tg-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-th-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-the-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ti-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tig-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tk-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tl-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tn-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-to-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tpi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tr-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ts-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-tt-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ug-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-uk-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-unm-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ur-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-uz-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-ve-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-vi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-wa-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-wae-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-wal-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-wo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-xh-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-yi-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-yo-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-yue-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-yuw-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-zh-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-langpack-zu-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-locale-source-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-minimal-langpack-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-nss-devel-2.28-251.0.4.el8_10.40.i686.rpm
glibc-nss-devel-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-static-2.28-251.0.4.el8_10.40.i686.rpm
glibc-static-2.28-251.0.4.el8_10.40.x86_64.rpm
glibc-utils-2.28-251.0.4.el8_10.40.x86_64.rpm
libnsl-2.28-251.0.4.el8_10.40.i686.rpm
libnsl-2.28-251.0.4.el8_10.40.x86_64.rpm
nscd-2.28-251.0.4.el8_10.40.x86_64.rpm
nss_db-2.28-251.0.4.el8_10.40.i686.rpm
nss_db-2.28-251.0.4.el8_10.40.x86_64.rpm
nss_hesiod-2.28-251.0.4.el8_10.40.i686.rpm
nss_hesiod-2.28-251.0.4.el8_10.40.x86_64.rpm

aarch64:
compat-libpthread-nonshared-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-all-langpacks-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-benchtests-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-common-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-devel-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-doc-2.28-251.0.4.el8_10.40.noarch.rpm
glibc-gconv-extra-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-headers-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-aa-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-af-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-agr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ak-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-am-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-an-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-anp-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ar-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-as-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ast-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ayc-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-az-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-be-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bem-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ber-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bg-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bhb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bho-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-br-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-brx-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-bs-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-byn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ca-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ce-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-chr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-cmn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-crh-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-cs-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-csb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-cv-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-cy-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-da-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-de-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-doi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-dsb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-dv-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-dz-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-el-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-en-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-eo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-es-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-et-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-eu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fa-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ff-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fil-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fur-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-fy-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ga-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-gd-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-gez-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-gl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-gu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-gv-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ha-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hak-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-he-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hif-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hne-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hsb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ht-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-hy-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ia-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-id-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ig-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ik-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-is-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-it-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-iu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ja-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ka-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kab-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kk-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-km-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ko-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kok-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ks-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ku-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-kw-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ky-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lg-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-li-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lij-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ln-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lt-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lv-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-lzh-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mag-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mai-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mfe-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mg-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mhr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-miq-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mjw-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mk-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ml-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mni-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ms-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-mt-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-my-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nan-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nb-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nds-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ne-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nhn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-niu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-nso-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-oc-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-om-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-or-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-os-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-pa-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-pap-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-pl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ps-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-pt-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-quz-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-raj-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ro-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ru-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-rw-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sa-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sah-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sat-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sc-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sd-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-se-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sgs-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-shn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-shs-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-si-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sid-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sk-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sm-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-so-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sq-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ss-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-st-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sv-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-sw-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-szl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ta-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tcy-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-te-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tg-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-th-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-the-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ti-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tig-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tk-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tl-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tn-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-to-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tpi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tr-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ts-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-tt-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ug-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-uk-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-unm-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ur-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-uz-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-ve-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-vi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-wa-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-wae-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-wal-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-wo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-xh-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-yi-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-yo-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-yue-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-yuw-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-zh-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-langpack-zu-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-locale-source-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-minimal-langpack-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-nss-devel-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-static-2.28-251.0.4.el8_10.40.aarch64.rpm
glibc-utils-2.28-251.0.4.el8_10.40.aarch64.rpm
libnsl-2.28-251.0.4.el8_10.40.aarch64.rpm
nscd-2.28-251.0.4.el8_10.40.aarch64.rpm
nss_db-2.28-251.0.4.el8_10.40.aarch64.rpm
nss_hesiod-2.28-251.0.4.el8_10.40.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/glibc-2.28-251.0.4.el8_10.40.src.rpm

Related CVEs:

CVE-2026-5435
CVE-2026-5928
CVE-2026-6238

Description of changes:

[2.28-251.0.4.40]
- Forward port of Oracle patches
Reviewed-by: David Faust [david.faust@oracle.com]
Oracle history:
July-13-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.4.38
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
May-26-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.4.37
- Forward port of Oracle patches
Reviewed-by: David Faust [david.faust@oracle.com]
May-7-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.4.34
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-18-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.4.31
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
February-24-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.4.27
- Fixed orabug 38834066 stpcpy MTE support
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
December-8-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.3.27
- Forward port of Oracle patches
Reviewed-by: David Faust [david.faust@oracle.com]
August-5-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.3.25
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
June-9-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.3.22
- Forward port of Oracle patches
Reviewed-by: David Faust [david.faust@oracle.com]
April-14-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.3.16
- Forward port of Oracle patches
Reviewed-by: Elena Zannoni [elena.zannoni@oracle.com]
March-26-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.3.14
- OraBug: 36625686 Add MTE support on string functions
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-17-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.14
- Forward port of Oracle patches
Reviewed-by: David Faust [david.faust@oracle.com]
February-19-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.13
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
January-28-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.11
- Forward port of Oracle patches
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
September-24-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.5
- Forward port of Oracle patches over 2.28-251.5
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
August-26-2024 Jose E. Marchesi [jose.marchesi@oracle.com] - 2.28-251.0.2.4
- Forward port of Oracle patches over 2.28-251.4
Reviewed-by: David Faust [david.faust@oracle.com]
May-24-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.2
- Forward port of Oracle patches over 2.28-251.2
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
May-23-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2.1
- Forward port of Oracle patches over 2.28-251.1
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
May-22-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.2
- Forward port of Oracle patches for ol8-u10
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-28-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-251.0.1
- Forward port of Oracle patches for ol8-u10-beta
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-5-2024 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-236.0.1.12
- Forward port of Oracle patches.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
November-14-2023 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-236.0.1.7
- Forward port of Oracle patches.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
October-4-2023 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-236.0.1.6
- Forward port of Oracle patches.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
April-21-2023 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-225.0.3
- OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks
- Created tunable glibc.pthread.stack_hugetlb to control when hugepages
can be used for stack allocation.
- In case THP are enabled and glibc.pthread.stack_hugetlb is set to
0, glibc will madvise the kernel not to use allow hugepages for stack
allocations.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
April-11-2023 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-225.0.2
- OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-28-2023 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.28-225.0.1
- Merge of Oracle patches for ol8u8 beta
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
September-28-2022 Patrick McGehearty [patrick.mcgehearty@oracle.com] - 2.28-211.0.1
- Merge of Oracle patches for ol8u7 beta
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
August-8-2022 Patrick McGehearty [patrick.mcgehearty@oracle.com] - 2.28-189.5.0.2
- Enable VDSO on x86_64, aarch64, i386, arm, and mips statically linked programs.
- These changes enable reading the realtime clock without a kernel syscall.
OraBug: 30478315
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
May-2-2022 Patrick McGehearty [patrick.mcgehearty@oracle.com] - 2.28-199.0.1
- Merge of patches from c8s 199 with ol8u6 beta
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
- Update siginfo constants from linux kernel (OraBug: 33734528)
- Remove limit on MALLOC_MMAP_THRESHOLD tunable (Orabug: 29630826)
- Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive
- spin mutex (Orabug: 27982358)
Reviewed-by: Qing Zhao [qing.zhao@oracle.com]
- add Ampere emag to tunable cpu list (Patrick McGehearty)
- add optimized memset for emag
- add an ASIMD variant of strlen for falkor
Orabug: 2700101.
- Modify glibc-ora28849085.patch so it works with RHCK kernels. (Orabug: 28849085)
- Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
Both should test
if (stream->_flags & _IO_USER_LOCK) == 0)
_IO_lock_lock (*stream->_lock);
OraBug: 28481550.
Reviewed-by: Qing Zhao [qing.zhao@oracle.com]

[2.28-251.40]
- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724)

[2.28-251.39]
- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725)

[2.28-251.38]
- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700)

[2.28-251.37]
- Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358)

[2.28-251.36]
- Fix __nss_get_default_domain logic to restore netgroup user enumeration
(RHEL-168095)

[2.28-251.35]
- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
(RHEL-162891)

[2.28-251.34]
- Update locales for Croatia to use EUR as currency symbol. (RHEL-140104)

[2.28-251.33]
- Change the currency symbol for the bg_BG locale to euro. (RHEL-137185)

[2.28-251.32]
- Improve qsort implementation (RHEL-24169)

ELSA-2026-48585 Important: Oracle Linux 10 fence-agents security update

Oracle Linux Security Advisory ELSA-2026-48585

http://linux.oracle.com/errata/ELSA-2026-48585.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
fence-agents-aliyun-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-all-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-amt-ws-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-apc-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-apc-snmp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-aws-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-azure-arm-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-bladecenter-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-brocade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-cisco-mds-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-cisco-ucs-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-common-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-drac5-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-eaton-snmp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-emerson-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-eps-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-gce-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-heuristics-ping-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-hpblade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibm-powervs-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibm-vpc-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibmblade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ifmib-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-moonshot-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-mp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-ssh-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo2-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-intelmodular-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ipdu-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ipmilan-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-kdump-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-kubevirt-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-mpath-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-nutanix-ahv-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-openstack-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-redfish-4.16.0-21.el10_2.5.x86_64.rpm
fence-agents-rhevm-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-rsa-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-rsb-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-sbd-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-scsi-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-virsh-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-vmware-rest-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-vmware-soap-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-wti-4.16.0-21.el10_2.5.noarch.rpm
fence-virt-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-cpg-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-libvirt-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-multicast-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-serial-4.16.0-21.el10_2.5.x86_64.rpm
fence-virtd-tcp-4.16.0-21.el10_2.5.x86_64.rpm
ha-cloud-support-4.16.0-21.el10_2.5.x86_64.rpm

aarch64:
fence-agents-all-4.16.0-21.el10_2.5.aarch64.rpm
fence-agents-amt-ws-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-apc-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-apc-snmp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-bladecenter-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-brocade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-cisco-mds-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-cisco-ucs-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-common-4.16.0-21.el10_2.5.aarch64.rpm
fence-agents-drac5-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-eaton-snmp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-emerson-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-eps-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-heuristics-ping-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-hpblade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibm-powervs-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibm-vpc-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ibmblade-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ifmib-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-moonshot-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-mp-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo-ssh-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ilo2-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-intelmodular-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ipdu-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-ipmilan-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-kdump-4.16.0-21.el10_2.5.aarch64.rpm
fence-agents-kubevirt-4.16.0-21.el10_2.5.aarch64.rpm
fence-agents-mpath-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-nutanix-ahv-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-redfish-4.16.0-21.el10_2.5.aarch64.rpm
fence-agents-rhevm-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-rsa-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-rsb-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-sbd-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-scsi-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-virsh-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-vmware-rest-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-vmware-soap-4.16.0-21.el10_2.5.noarch.rpm
fence-agents-wti-4.16.0-21.el10_2.5.noarch.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/fence-agents-4.16.0-21.el10_2.5.src.rpm

Related CVEs:

CVE-2026-59939

Description of changes:

[4.16.0-21.5]
- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
Resolves: RHEL-193812

ELSA-2026-45114 Important: Oracle Linux 10 kernel security update

Oracle Linux Security Advisory ELSA-2026-45114

http://linux.oracle.com/errata/ELSA-2026-45114.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.39.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.39.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.39.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.39.1.el10_2.x86_64.rpm
libperf-6.12.0-211.39.1.el10_2.x86_64.rpm
perf-6.12.0-211.39.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.39.1.el10_2.x86_64.rpm
rtla-6.12.0-211.39.1.el10_2.x86_64.rpm
rv-6.12.0-211.39.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.39.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.39.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.39.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.39.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.39.1.el10_2.aarch64.rpm
libperf-6.12.0-211.39.1.el10_2.aarch64.rpm
perf-6.12.0-211.39.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.39.1.el10_2.aarch64.rpm
rtla-6.12.0-211.39.1.el10_2.aarch64.rpm
rv-6.12.0-211.39.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.39.1.el10_2.src.rpm

Related CVEs:

CVE-2025-40237
CVE-2026-23110
CVE-2026-31692
CVE-2026-46099
CVE-2026-52973
CVE-2026-53059

Description of changes:

[6.12.0-211.39.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 n_conn" (Sharath Srinivasan) [Orabug: 38937481]

[5.15.0-318.199.2]
- drivers/soc/pensando/penfw: Add support for pcie serdes fw download. (Hiren Mehta) [Orabug: 38953591]
- arm64: pensando: Add support for kpcimgr dynamic event queue (Rob Gardner) [Orabug: 38928823]
- procfs: move dropping pde and pid from ->evict_inode() to ->free_inode() (Al Viro) [Orabug: 38945002]
- ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38188749]
- jbd2: store more accurate errno in superblock when possible (Wengang Wang) [Orabug: 38188749]
- Revert "IB/mlx5: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923519]
- Revert "IB/core: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923519]
- Revert "IB/core: Fix off-by-one attr index in setup_hw_port_stats" (Sharath Srinivasan) [Orabug: 38923519]
- drivers/soc/pensando/bsm: Fix various issues with secure-mode. (Hiren Mehta) [Orabug: 38944299]
- net/rds: wait_event_timeout until zero connections during rmmod (Sharath Srinivasan) [Orabug: 38928274]
- net/rds: rds_send_xmit should INIT_LIST_HEAD(&to_be_dropped) on restart (Sharath Srinivasan) [Orabug: 38928272]
- net/rds: fix rds_message memleak in rds_send_queue_rm (Sharath Srinivasan) [Orabug: 38928270]
- net/rds: fix rds_message memleak in rds_send_xmit (Sharath Srinivasan) [Orabug: 38923496]

[5.15.0-318.199.1]
- LTS version: v5.15.199 (Vijayendra Suman)
- wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [Orabug: 39004275] {CVE-2025-22119}
- wifi: cfg80211: fully move wiphy work to unbound workqueue (Johannes Berg)
- wifi: cfg80211: cancel wiphy_work before freeing wiphy (Miri Korenblit) [Orabug: 39004414] {CVE-2025-21979}
- wifi: cfg80211: fix wiphy delayed work queueing (Johannes Berg)
- wifi: cfg80211: use system_unbound_wq for wiphy work (Johannes Berg)
- team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov)
- pinctrl: meson: mark the GPIO controller as sleeping (Bartosz Golaszewski)
- mptcp: avoid dup SUB_CLOSED events after disconnect (Matthieu Baerts)
- writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 (Laveesh Bansal)
- drm/imx/tve: fix probe device leak (Johan Hovold)
- pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver (Bartosz Golaszewski)
- net/sched: act_ife: convert comma to semicolon (Chen Ni)
- btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() (Jp Kobryn)
- drm/amdkfd: fix a memory leak in device_queue_manager_init() (Haoxiang Li)
- can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
- genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek)
- HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 39004242] {CVE-2025-38007}
- HID: uclogic: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)
- wifi: mac80211: move TDLS work to wiphy work (Johannes Berg)
- wifi: mac80211: use wiphy work for sdata->work (Johannes Berg)
- wifi: cfg80211: add a work abstraction with special semantics (Johannes Berg)
- Bluetooth: Fix hci_suspend_sync crash (Ying Hsu)
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré)
- usbnet: Fix using smp_processor_id() in preemptible code warnings (Zqiang) [Orabug: 38649206] {CVE-2025-40164}
- NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) [Orabug: 38158712] {CVE-2025-38232}
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (Luis Henriques)
- espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094997] {CVE-2025-38057}
- fs/ntfs3: Initialize allocated memory before use (Bartlomiej Kubik)
- ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Namjae Jeon)
- drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (Gaosheng Cui)
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Pedro Demarchi Gomes) [Orabug: 38773375] {CVE-2025-68211}
- mm/pagewalk: add walk_page_range_vma() (David Hildenbrand)
- ksmbd: smbd: fix dma_unmap_sg() nents (Thomas Fourier)
- mei: trace: treat reg parameter as string (Alexander Usyskin)
- ALSA: scarlett2: Fix buffer overflow in config retrieval (Samasth Norway Ananda)
- nvme: fix PCIe subsystem reset controller state transition (Nilay Shroff)
- nvme-pci: do not directly handle subsys reset fallout (Keith Busch)
- nvme-fc: rename free_ctrl callback to match name pattern (Daniel Wagner)
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster)
- dmaengine: stm32: dmamux: fix device leak on route allocation (Johan Hovold)
- dmaengine: stm32: dmamux: fix OF node leak on route allocation failure (Johan Hovold)
- w1: therm: Fix off-by-one buffer overflow in alarms_store (Thorsten Blum) [Orabug: 38930799] {CVE-2025-71197}
- w1: w1_therm: use swap() to make code cleaner (Yang Guang)
- arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s (Geraldo Nascimento)
- scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() (Abdun Nihaal) [Orabug: 38931015] {CVE-2026-23087}
- iio: adc: exynos_adc: fix OF populate on driver rebind (Johan Hovold)
- of: platform: Use default match table for /firmware (Rob Herring)
- comedi: Fix getting range information for subdevices 16 to 255 (Ian Abbott)
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [Orabug: 38649138] {CVE-2025-40149}
- net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala)
- mptcp: only reset subflow errors when propagated (Matthieu Baerts)
- scsi: qla2xxx: edif: Fix dma_free_coherent() size (Thomas Fourier)
- scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() (Haoxiang Li)
- ASoC: fsl: imx-card: Do not force slot width to sample width (Fabio Estevam)
- dma/pool: distinguish between missing and exhausted atomic pools (Sai Sree Kartheek Adivi)
- gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler (Denis Sergeev)
- scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() (Kery Qi)
- net: bridge: fix static key check (Martin Kaiser)
- nfc: nci: Fix race between rfkill and nci_unregister_device(). (Kuniyuki Iwashima)
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Gal Pressman)
- net/mlx5e: Report rx_discards_phy via rx_dropped (Yafang Shao)
- ice: stop counting UDP csum mismatch as rx_errors (Jesse Brandeburg)
- nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). (Kuniyuki Iwashima)
- rocker: fix memory leak in rocker_world_port_post_fini() (Kery Qi) [Orabug: 38970353] {CVE-2026-23164}
- ipv6: use the right ifindex when replying to icmpv6 from localhost (Fernando Fernandez Mancera)
- net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() (Zilin Guan)
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Zilin Guan)
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (Jia-Hong Su) [Orabug: 38970605] {CVE-2026-23146}
- bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [Orabug: 38335081] {CVE-2025-38591}
- bpf: Do not let BPF test infra emit invalid GSO types to stack (Daniel Borkmann) [Orabug: 38798882] {CVE-2025-68725}
- migrate: correct lock ordering for hugetlb file folios (Matthew Wilcox) [Orabug: 38931067] {CVE-2026-23097}
- can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38931121] {CVE-2026-23108}
- can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
- can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38930883] {CVE-2026-23061}
- can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38930860] {CVE-2026-23058}
- irqchip/gic-v3-its: Avoid truncating memory addresses (Arnd Bergmann) [Orabug: 38931002] {CVE-2026-23085}
- perf/x86/intel: Do not enable BTS for guests (Fernand Sieber)
- netrom: fix double-free in nr_route_frame() (Jeongjun Park)
- uacce: ensure safe queue release with state management (Chenghai Huang)
- uacce: implement mremap in uacce_vm_ops to return -EPERM (Yang Shen)
- uacce: fix cdev handling in the cleanup path (Wenkai Lin)
- intel_th: fix device leak on output open() (Johan Hovold) [Orabug: 38931041] {CVE-2026-23091}
- slimbus: core: fix device reference leak on report present (Johan Hovold)
- slimbus: core: fix runtime PM imbalance on report present (Johan Hovold)
- octeontx2: Fix otx2_dma_map_page() error return code (Thomas Fourier)
- arm64: Set __nocfi on swsusp_arch_resume() (Zhaoyang Huang)
- wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [Orabug: 38930941] {CVE-2026-23073}
- wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Dan Carpenter)
- wifi: ath10k: fix dma_free_coherent() pointer (Thomas Fourier) [Orabug: 38970255] {CVE-2026-23133}
- mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Matthew Schwartz)
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [Orabug: 38931030] {CVE-2026-23089}
- ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [Orabug: 38930967] {CVE-2026-23076}
- iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl (Andreas Kübrich)
- iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver (Pei Xiao)
- iio: adc: ad9467: fix ad9434 vref mask (Tomas Melin)
- of: fix reference count leak in of_alias_scan() (Weigang He)
- leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [Orabug: 38931092] {CVE-2026-23101}
- x86: make page fault handling disable interrupts properly (Cedric Xing)
- net/sched: act_ife: avoid possible NULL deref (Eric Dumazet)
- octeontx2-af: Fix error handling (Ratheesh Kannoth)
- bonding: provide a net pointer to __skb_flow_dissect() (Eric Dumazet) [Orabug: 38970200] {CVE-2026-23119}
- be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [Orabug: 38930993] {CVE-2026-23084}
- drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) (Timur Kristóf)
- drm/amd/pm: Don't clear SI SMC table when setting power limit (Timur Kristóf)
- usbnet: limit max_mtu based on device's hard_mtu (Laurent Vivier)
- ipv6: annotate data-race in ndisc_router_discovery() (Eric Dumazet) [Orabug: 38970223] {CVE-2026-23124}
- mISDN: annotate data-race around dev->work (Eric Dumazet) [Orabug: 38970211] {CVE-2026-23121}
- net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue (Jijie Shao)
- net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M (Jijie Shao)
- ALSA: usb: Increase volume range that triggers a warning (Arun Raghavan)
- regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [Orabug: 38930931] {CVE-2026-23071}
- iio: adc: ad7280a: handle spi_setup() errors in probe() (Pavel Zhigulin)
- staging:iio:adc:ad7280a: Register define cleanup. (Jonathan Cameron)
- x86/kfence: avoid writing L1TF-vulnerable PTEs (Andrew Cooper)
- scsi: storvsc: Process unsupported MODE_SENSE_10 (Long Li)
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Feng)
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Gongqi)
- Revert "nfc/nci: Add the inconsistency check between the input data length and count" (Thadeu Lima de Souza Cascardo)
- w1: fix redundant counter decrement in w1_attach_slave_device() (Haoxiang Li)
- comedi: dmm32at: serialize use of paged registers (Ian Abbott)
- crypto: authencesn - reject too-short AAD (assoclenhead (Eric Dumazet) [Orabug: 39004363] {CVE-2026-22988}
- net: usb: pegasus: fix memory leak in update_eth_regs_async() (Petko Manolov) [Orabug: 38914761] {CVE-2026-23021}
- net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (Xiang Mei) [Orabug: 38872325] {CVE-2026-22976}
- HID: quirks: work around VID/PID conflict for appledisplay (René Rebe)
- bnxt_en: Fix potential data corruption with HW GRO/LRO (Srijit Bose)
- net/mlx5e: Don't print error message due to invalid module (Gal Pressman)
- netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Di Zhu)
- net: sock: fix hardened usercopy panic in sock_recv_errqueue (Weiming Shi) [Orabug: 38877947] {CVE-2026-22977}
- inet: ping: Fix icmp out counting (Yuan Gao)
- net: mscc: ocelot: Fix crash when adding interface under a lag (Jerry Wu)
- bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Alexandre Knecht)
- net: marvell: prestera: fix NULL dereference on devlink_alloc() failure (Alok Tiwari)
- netfilter: nf_conncount: update last_gc only when GC has been performed (Fernando Fernandez Mancera) [Orabug: 38970278] {CVE-2026-23139}
- netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Zilin Guan)
- netfilter: nft_synproxy: avoid possible data-race on update operation (Fernando Fernandez Mancera)
- ARM: dts: imx6q-ba16: fix RTC interrupt level (Ian Ray)
- arm64: dts: add off-on-delay-us for usdhc2 regulator (Haibo Chen)
- scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" (Xingui Yang)
- scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Wen Xiong)
- NFS: Fix up the automount fs_context to use the correct cred (Trond Myklebust)
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew)
- alpha: don't reference obsolete termio struct for TC* constants (Sam James)
- ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels (Sebastian Andrzej Siewior)
- csky: fix csky_cmpxchg_fixup not working (Yang Li)
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [Orabug: 37844521] {CVE-2025-22121}
- ext4: introduce ITAIL helper (Ye Bin)
- libceph: make calc_target() set t->paused, not just clear it (Ilya Dryomov) [Orabug: 38930821] {CVE-2026-23047}
- libceph: return the handler error from mon_handle_auth_done() (Ilya Dryomov) [Orabug: 38887697] {CVE-2026-22992}
- libceph: make free_choose_arg_map() resilient to partial allocation (Tuo Li) [Orabug: 38887691] {CVE-2026-22991}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [Orabug: 38887685] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (Ziming Zhang) [Orabug: 38887673] {CVE-2026-22984}
- wifi: avoid kernel-infoleak from struct iw_point (Eric Dumazet) [Orabug: 38887650] {CVE-2026-22978}
- drm/pl111: Fix error handling in pl111_amba_probe (Miaoqian Lin)
- lib/crypto: aes: Fix missing MMU protection for AES S-box (Eric Biggers)
- mei: me: add nova lake point S DID (Alexander Usyskin)
- net: 3com: 3c59x: fix possible null dereference in vortex_probe1() (Thomas Fourier) [Orabug: 38914755] {CVE-2026-23020}
- atm: Fix dma_free_coherent() size (Thomas Fourier)
- usb: gadget: lpc32xx_udc: fix clock imbalance in error path (Johan Hovold)
- net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Su Hui) [Orabug: 39004163] {CVE-2024-40928}
- firmware: arm_scmi: Fix unused notifier-block in unregister (Amitai Gottlieb)
- ext4: fix error message when rejecting the default hash (Gabriel Krisman Bertazi)
- ext4: factor out ext4_hash_info_init() (Jason Yan)
- ext4: filesystems without casefold feature cannot be mounted with siphash (Lizhi Xu) [Orabug: 37206152] {CVE-2024-49968}
- pwm: stm32: Always program polarity (Sean Nyekjaer)
- x86: remove __range_not_ok() (Arnd Bergmann)
- selftests: net: test_vxlan_under_vrf: fix HV connectivity test (Andrea Righi)
- ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [Orabug: 36683410] {CVE-2024-36927}
- ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] {CVE-2024-36903}
- KVM: arm64: sys_regs: disable -Wuninitialized-const-pointer warning (Justin Stitt)
- HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [Orabug: 38334903] {CVE-2025-38556}
- KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (Sean Christopherson) [Orabug: 37116451] {CVE-2024-46830}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [Orabug: 38152994] {CVE-2025-38129}
- drm/i915/selftests: fix subtraction overflow bug (Andrzej Hajda)
- mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov)
- net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Thadeu Lima de Souza Cascardo) [Orabug: 37844500] {CVE-2025-22111}
- drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Thomas Zimmermann)
- wifi: mac80211: Discard Beacon frames to non-broadcast address (Jouni Malinen) [Orabug: 38852361] {CVE-2025-71127}
- ASoC: stm32: sai: fix OF node leak on probe (Johan Hovold)
- lockd: fix vfs_test_lock() calls (Neil Brown)
- powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages (David Hildenbrand)
- mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (David Hildenbrand)
- mm/balloon_compaction: we cannot have isolated pages in the balloon list (David Hildenbrand)
- mm/balloon_compaction: make balloon page compaction callbacks static (Miaohe Lin)
- ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Johan Hovold)
- ASoC: stm32: sai: Use the devm_clk_get_optional() helper (Christophe Jaillet)
- ASoC: stm: Use dev_err_probe() helper (Kuninori Morimoto)
- r8169: fix RTL8117 Wake-on-Lan in DASH mode (René Rebe)
- iommu/qcom: fix device leak on of_xlate() (Johan Hovold)
- powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Donet Tom)
- PCI: brcmstb: Fix disabling L0s capability (Jim Quinlan)
- powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION (David Hildenbrand)
- media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled (Miaoqian Lin)
- media: samsung: exynos4-is: fix potential ABBA deadlock on init (Marek Szyprowski)
- NFSD: NFSv4 file creation neglects setting ACL (Chuck Lever) [Orabug: 38847872] {CVE-2025-68803}
- media: verisilicon: Protect G2 HEVC decoder against invalid DPB index (Nicolas Dufresne)
- media: vpif_capture: fix section mismatch (Johan Hovold)
- media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() (Haoxiang Li)
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852341] {CVE-2025-71120}
- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Jim Mattson)
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Shivani Agarwal) [Orabug: 38852312] {CVE-2025-71113}
- svcrdma: bound check rq_pages index in inline path (Joshua Rogers) [Orabug: 38847976] {CVE-2025-71068}
- ARM: dts: microchip: sama7g5: fix uart fifo size to 32 (Nicolas Ferre)
- usb: ohci-nxp: fix device leak on probe failure (Johan Hovold)
- usb: ohci-nxp: Use helper function devm_clk_get_enabled() (Zhang Zekun)
- mptcp: pm: ignore unknown endpoint flags (Matthieu Baerts)
- usb: dwc3: keep susphy enabled during exit to avoid controller faults (Udipto Goswami)
- f2fs: fix to avoid updating zero-sized extent in extent cache (Chao Yu)
- f2fs: fix to propagate error from f2fs_enable_checkpoint() (Chao Yu)
- f2fs: use global inline_xattr_slab instead of per-sb slab cache (Chao Yu)
- f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() (Chao Yu)
- xfs: fix a memory leak in xfs_buf_item_init() (Haoxiang Li)
- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Dongli Zhang)
- NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Chuck Lever)
- ALSA: wavefront: Fix integer overflow in sample size validation (Junrui Luo)
- ALSA: wavefront: Use standard print API (Takashi Iwai)
- ALSA: wavefront: Clear substream pointers on close (Junrui Luo)
- wifi: mt76: Fix DTS power-limits on little endian systems (Sven Eckelmann)
- btrfs: don't rewrite ret from inode_permission (Josef Bacik)
- tpm: Cap the number of PCR banks (Jarkko Sakkinen) [Orabug: 38848017] {CVE-2025-71077}
- jbd2: fix the inconsistency between checksum and data in memory for journal sb (Ye Bin)
- xhci: dbgtty: fix device unregister (Łukasz Bartosik)
- xhci: dbgtty: use IDR to support several dbc instances. (Mathias Nyman)
- usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Jimmy Hu) [Orabug: 38773636] {CVE-2025-68282}
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michał Pecio) [Orabug: 37844150] {CVE-2025-22022}
- usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin)
- drm/vmwgfx: Fix a null-ptr access in the cursor snooper (Zack Rusin) [Orabug: 38643537] {CVE-2025-40110}
- virtio_console: fix order of fields cols and rows (Maximilian Immanuel Brandtner)
- kbuild: Use CRC32 and a 1MiB dictionary for XZ compressed modules (Martin Nybo Andersen)
- mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() (Seongjae Park)
- mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() (Seongjae Park)
- mm/damon/tests/core-kunit: handle memory failure from damon_test_target() (Seongjae Park)
- mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() (Seongjae Park)
- mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() (Seongjae Park)
- mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() (Seongjae Park)
- mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() (Seongjae Park)
- mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() (Seongjae Park)
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Zhu Yanjun) [Orabug: 38094814] {CVE-2025-38022}
- mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() (Seongjae Park)
- mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() (Seongjae Park)
- drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Lyude Paul)
- drm/ttm: Avoid NULL pointer deref for evicted BOs (Simon Richter) [Orabug: 38848052] {CVE-2025-71083}
- drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers (Akhil P Oommen)
- net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Deepanshu Kartikey)
- net: usb: sr9700: fix incorrect command used to write single register (Ethan Nelson-Moore)
- nfsd: Drop the client reference in client_states_open() (Haoxiang Li)
- fjes: Add missing iounmap in fjes_hw_init() (Haoxiang Li)
- e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [Orabug: 38848099] {CVE-2025-71093}
- RDMA/cm: Fix leaking the multicast GID table reference (Jason Gunthorpe) [Orabug: 38848058] {CVE-2025-71084}
- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Jason Gunthorpe) [Orabug: 38848117] {CVE-2025-71096}
- idr: fix idr_alloc() returning an ID out of range (Matthew Wilcox)
- media: i2c: adv7842: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
- media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
- media: TDA1997x: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
- media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() (Ivan Abramov)
- media: cec: Fix debugfs leak on bus_register() failure (Xu Wang)
- fbdev: tcx.c fix mem_map to correct smem_start offset (René Rebe)
- fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Thorsten Blum)
- fbdev: gbefb: fix to use physical address instead of dma address (René Rebe)
- dm-ebs: Mark full buffer dirty even on partial write (Uladzislau Rezki)
- media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() (Ivan Abramov)
- parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() (Sven Schnelle)
- parisc: entry.S: fix space adjustment on interruption for 64-bit userspace (Sven Schnelle)
- media: rc: st_rc: Fix reset control resource leak (Xu Wang)
- mfd: max77620: Fix potential IRQ chip conflict when probing two devices (Krzysztof Kozlowski)
- mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup (Johan Hovold)
- leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs (Christian Hitz)
- leds: leds-lp50xx: Allow LED 0 to be added to module bank (Christian Hitz)
- PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Lukas Wunner)
- HID: logitech-dj: Remove duplicate error logging (Hans de Goede)
- iommu/tegra: fix device leak on probe_device() (Johan Hovold)
- iommu/sun50i: fix device leak on of_xlate() (Johan Hovold)
- iommu/omap: fix device leaks on probe_device() (Johan Hovold)
- iommu/mediatek: fix device leak on of_xlate() (Johan Hovold)
- iommu/mediatek-v1: fix device leak on probe_device() (Johan Hovold)
- iommu/ipmmu-vmsa: fix device leak on of_xlate() (Johan Hovold)
- iommu/exynos: fix device leak on of_xlate() (Johan Hovold)
- iommu/apple-dart: fix device leak on of_xlate() (Johan Hovold)
- ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
- ASoC: qcom: q6adm: the the copp device only during last instance (Srinivas Kandagatla)
- ASoC: qcom: q6asm-dai: perform correct state check before closing (Srinivas Kandagatla)
- ASoC: stm32: sai: fix device leak on probe (Johan Hovold)
- selftests/ftrace: traceonoff_triggers: strip off names (Yipeng Zou)
- RDMA/bnxt_re: fix dma_free_coherent() pointer (Thomas Fourier)
- RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation (Lihonggang)
- RDMA/bnxt_re: Fix to use correct page size for PDE table (Kalesh Ap)
- RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Alok Tiwari)
- RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Alok Tiwari)
- RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Jang Ingyu)
- RDMA/efa: Remove possible negative shift (Michael Margolin)
- RDMA/irdma: avoid invalid read in irdma_net_event (Michal Schmidt) [Orabug: 38852379] {CVE-2025-71133}
- net: rose: fix invalid array index in rose_kill_by_device() (Pwnverse)
- ipv4: Fix reference count leak when using error routes with nexthop objects (Ido Schimmel) [Orabug: 38848125] {CVE-2025-71097}
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [Orabug: 38848061] {CVE-2025-71085}
- octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Anshumali Gaur)
- net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Bagas Sanjaya)
- net: usb: asix: validate PHY address before use (Deepanshu Kartikey) [Orabug: 38848107] {CVE-2025-71094}
- net: dsa: b53: skip multicast entries for fdb_dump() (Jonas Gorski)
- firewire: nosy: Fix dma_free_coherent() size (Thomas Fourier)
- genalloc.h: fix htmldocs warning (Andrew Morton)
- smc91x: fix broken irq-context in PREEMPT_RT (Levi Yun) [Orabug: 38852376] {CVE-2025-71132}
- net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Deepakkumar Karn) [Orabug: 38887620] {CVE-2025-71154}
- team: fix check for port enabled in team_queue_override_port_prio_changed() (Jiri Pirko) [Orabug: 38848088] {CVE-2025-71091}
- platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic (Junrui Luo)
- platform/x86: msi-laptop: add missing sysfs_remove_group() (Thomas Fourier)
- ip6_gre: make ip6gre_header() robust (Eric Dumazet) [Orabug: 38848131] {CVE-2025-71098}
- net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Toke Høiland-Jørgensen)
- net: mdio: aspeed: add dummy read to avoid read-after-write issue (Jacky Chou)
- net: mdio: aspeed: move reg accessing part into separate functions (Potin Lai)
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (Raphael Pinsonneault-Thibeault) [Orabug: 38848044] {CVE-2025-71082}
- crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Herbert Xu) [Orabug: 38852370] {CVE-2025-71131}
- iavf: fix off-by-one issues in iavf_config_rss_reg() (Kohei Enju) [Orabug: 38848073] {CVE-2025-71087}
- i40e: Refactor argument of i40e_detect_recover_hung() (Ivan Vecera)
- i40e: Refactor argument of several client notification functions (Ivan Vecera)
- i40e: fix scheduling in set_rx_mode (Przemyslaw Korba)
- hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU (Gui-Dong Han)
- hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Gui-Dong Han) [Orabug: 38852300] {CVE-2025-71111}
- hwmon: (max16065) Use local variable to avoid TOCTOU (Gui-Dong Han)
- i2c: amd-mp2: fix reference leak in MP2 PCI device (Ma Ke)
- rpmsg: glink: fix rpmsg device leak (Srinivas Kandagatla)
- soc: amlogic: canvas: fix device leak on lookup (Johan Hovold)
- soc: qcom: ocmem: fix device leak on lookup (Johan Hovold)
- amba: tegra-ahb: Fix device leak on SMMU enable (Johan Hovold)
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Alex Deucher)
- io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh)
- svcrdma: return 0 on success from svc_rdma_copy_inline_range (Joshua Rogers)
- nfsd: Mark variable __maybe_unused to avoid W=1 build break (Andy Shevchenko)
- fsnotify: do not generate ACCESS/MODIFY events on child for special files (Amir Goldstein) [Orabug: 38847800] {CVE-2025-68788}
- tracing: Do not register unsupported perf events (Steven Rostedt) [Orabug: 38852355] {CVE-2025-71125}
- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Sean Christopherson)
- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Sean Christopherson)
- KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Yosry Ahmed)
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Fuqiang Wang) [Orabug: 38852273] {CVE-2025-71104}
- KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Fuqiang Wang)
- KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Sean Christopherson)
- libceph: make decode_pool() more resilient against corrupted osdmaps (Ilya Dryomov) [Orabug: 38852325] {CVE-2025-71116}
- parisc: Do not reprogram affinitiy on ASP chip (Helge Deller)
- scs: fix a wrong parameter in __scs_magic (Zhichi Lin)
- platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver (Tzung-Bi Shih)
- ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Prithvi Tambewagh) [Orabug: 38847688] {CVE-2025-68771}
- media: vidtv: initialize local pointers upon transfer of memory ownership (Jeongjun Park)
- tools/testing/nvdimm: Use per-DIMM device handle (Alison Schofield)
- f2fs: fix return value of f2fs_recover_fsync_data() (Chao Yu)
- f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey)
- scsi: target: Reset t_task_cdb pointer in error case (Andrey Vatoropin) [Orabug: 38847770] {CVE-2025-68782}
- NFSD: use correct reservation type in nfsd4_scsi_fence_client (Dai Ngo)
- scsi: aic94xx: fix use-after-free in device removal path (Junrui Luo) [Orabug: 38848009] {CVE-2025-71075}
- scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Tony Battersby) [Orabug: 38847931] {CVE-2025-68818}
- cpufreq: nforce2: fix reference count leak in nforce2 (Miaoqian Lin)
- intel_th: Fix error handling in intel_th_output_open (Ma Ke)
- char: applicom: fix NULL pointer dereference in ac_ioctl (Tianchu Chen)
- usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() (Haoxiang Li)
- usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Miaoqian Lin)
- usb: phy: isp1301: fix non-OF device reference imbalance (Johan Hovold)
- USB: lpc32xx_udc: Fix error handling in probe (Ma Ke)
- phy: broadcom: bcm63xx-usbh: fix section mismatches (Johan Hovold)
- media: pvrusb2: Fix incorrect variable used in trace message (Colin Ian King)
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Jeongjun Park) [Orabug: 38847937] {CVE-2025-68819}
- usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Chenchangcheng)
- media: v4l2-mem2mem: Fix outdated documentation (Laurent Pinchart)
- jbd2: use a weaker annotation in journal handling (Byungchul Park)
- ext4: fix incorrect group number assertion in mb_check_buddy (Yongjian Sun)
- ext4: xattr: fix null pointer deref in ext4_raw_inode() (Karina Yankevich) [Orabug: 38848276] {CVE-2025-68820}
- ktest.pl: Fix uninitialized var in config-bisect.pl (Steven Rostedt)
- floppy: fix for PAGE_SIZE != 4KB (René Rebe)
- block: rate-limit capacity change info log (Li Chen)
- lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit (Eric Biggers)
- mmc: sdhci-msm: Avoid early clock doubling during HS400 transition (Sarthak Garg)
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Jarkko Sakkinen) [Orabug: 38887597] {CVE-2025-71147}
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella)
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Chia-Lin Kao)
- nvme-fc: don't hold rport lock when putting ctrl (Daniel Wagner)
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready (Wenhua Lin)
- usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Chenchangcheng)
- usb: xhci: limit run_graceperiod for only usb 3.0 devices (Hongyu Xie)
- usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson) [Orabug: 38852285] {CVE-2025-71108}
- usbip: Fix locking bug in RT-enabled kernels (Lizhi Xu)
- exfat: fix remount failure in different process environments (Yuezhang Mo)
- via_wdt: fix critical boot hang due to unnamed resource allocation (Li Qiang) [Orabug: 38852318] {CVE-2025-71114}
- scsi: qla2xxx: Use reinit_completion on mbx_intr_comp (Tony Battersby)
- scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive (Tony Battersby)
- scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled (Tony Battersby)
- powerpc/addnote: Fix overflow on 32-bit builds (Ben Collins)
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 (Josua Mayer)
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx (Matthias Schiffer)
- firmware: imx: scu-irq: Init workqueue before request mbox channel (Peng Fan)
- ipmi: Fix __scan_channels() failing to rescan channels (Jinhui Guo)
- ipmi: Fix the race between __scan_channels() and deliver_response() (Jinhui Guo)
- ALSA: usb-mixer: us16x08: validate meter packet indices (Shipei Qu) [Orabug: 38847775] {CVE-2025-68783}
- ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path (Xu Wang)
- ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Xu Wang)
- net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Shaurya Rane) [Orabug: 38847724] {CVE-2025-68776}
- mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas)
- spi: fsl-cpm: Check length parity before switching to 16 bit mode (Christophe Leroy)
- ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Pengjie Zhang)
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
- Input: ti_am335x_tsc - fix off-by-one error in wire_order validation (Junjie Cao)
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Ping Cheng)
- net: hns3: add VLAN id validation before using (Jian Shen)
- net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx (Jian Shen)
- net: hns3: Align type of some variables with their print type (Hao Chen)
- net: hns3: using the num_tqps in the vf driver to apply for resources (Jian Shen)
- net/mlx5: fw_tracer, Handle escaped percent properly (Shay Drory)
- net/mlx5: fw_tracer, Validate format string parameters (Shay Drory) [Orabug: 38847914] {CVE-2025-68816}
- ethtool: Avoid overflowing userspace buffer on stats query (Gal Pressman) [Orabug: 38847826] {CVE-2025-68795}
- net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers (Daniil Tatianin)
- net/ethtool/ioctl: remove if n_stats checks from ethtool_get_phy_stats (Daniil Tatianin)
- ethtool: use phydev variable (Tom Rix)
- nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() (Dan Carpenter)
- net/sched: ets: Remove drr class from the active list if it changes to strict (Victor Nogueira) [Orabug: 38847910] {CVE-2025-68815}
- caif: fix integer underflow in cffrml_receive() (Junrui Luo)
- ipvs: fix ipv4 null-ptr-deref in route error path (Slavin Liu) [Orabug: 38847900] {CVE-2025-68813}
- netfilter: nf_conncount: fix leaked ct in error paths (Fernando Fernandez Mancera) [Orabug: 38974757] {CVE-2025-71146}
- broadcom: b44: prevent uninitialized value usage (Alexey Simakov)
- net: openvswitch: fix middle attribute validation in push_nsh() action (Ilya Maximets) [Orabug: 38847784] {CVE-2025-68785}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Ido Schimmel)
- mlxsw: spectrum_router: Fix neighbour use-after-free (Ido Schimmel)
- ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() (Dmitry Skorodumov)
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Jamal Hadi Salim) [Orabug: 38847965] {CVE-2025-71066}
- netrom: Fix memory leak in nr_sendmsg() (Wang Liang)
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (Gongwei Li)
- btrfs: scrub: always update btrfs_scrub_progress::last_physical (Qu Wenruo)
- hfsplus: fix volume corruption issue for generic/073 (Viacheslav Dubeyko)
- hfsplus: Verify inode mode when loading from disk (Tetsuo Handa)
- hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Yang Chenzhi)
- hfsplus: fix volume corruption issue for generic/070 (Viacheslav Dubeyko)
- fs/ntfs3: Support timestamps prior to epoch (Konstantin Komarov)
- livepatch: Match old_sympos 0 and 1 in klp_find_func() (Song Liu)
- cpufreq: s5pv210: fix refcount leak (Shuhao Fu)
- ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Sakari Ailus)
- ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia Pukngae) [Orabug: 38852333] {CVE-2025-71118}
- x86/ptrace: Always inline trivial accessors (Peter Zijlstra)
- sched/deadline: only set free_cpus for online runqueues (Doug Berger) [Orabug: 38847753] {CVE-2025-68780}
- btrfs: fix memory leak of fs_devices in degraded seed device path (Deepanshu Kartikey)
- bpf, arm64: Do not audit capability check in do_jit() (Ondrej Mosnacek)
- spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A)
- coresight: etm4x: Correct polling IDLE bit (Leo Yan)
- netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around (Nicklas Bo Jensen)
- NFS: Fix missing unlock in nfs_unlink() (Sun Ke)
- ASoC: fsl_xcvr: get channel status data when PHY is not exists (Shengjiu Wang)
- ALSA: dice: fix buffer overflow in detect_stream_formats() (Junrui Luo) [Orabug: 38798767] {CVE-2025-68346}
- usb: phy: Initialize struct usb_phy list_head (Diogo Ivo)
- usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Haotien Hsu)
- ocfs2: fix memory leak in ocfs2_merge_rec_left() (Dmitry Antipov)
- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Mauro Carvalho Chehab)
- efi/cper: Adjust infopfx size to accept an extra space (Mauro Carvalho Chehab)
- efi/cper: Add a new helper function to print bitmasks (Mauro Carvalho Chehab)
- dm log-writes: Add missing set_freezable() for freezable kthread (Xu Wang)
- dm-raid: fix possible NULL dereference with undefined raid type (Alexey Simakov)
- ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() (Pangliyuan)
- ALSA: uapi: Fix typo in asound.h comment (Andres J Rosa)
- dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Dave Kleikamp)
- blk-mq: Abort suspend when wakeup events are pending (Cong Zhang)
- ASoC: ak5558: Disable regulator when error happens (Shengjiu Wang)
- ASoC: ak4458: Disable regulator when error happens (Shengjiu Wang)
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() (Xu Wang)
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd led (Anton Khirnov)
- fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() (Armin Wolf)
- NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Trond Myklebust) [Orabug: 38818237] {CVE-2025-68764}
- fs_context: drop the unused lsm_flags member (Ondrej Mosnacek)
- Revert "nfs: ignore SB_RDONLY when mounting nfs" (Trond Myklebust)
- Revert "nfs: clear SB_RDONLY before getting superblock" (Trond Myklebust)
- Revert "nfs: ignore SB_RDONLY when remounting nfs" (Trond Myklebust)
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [Orabug: 38798775] {CVE-2025-68349}
- NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Trond Myklebust)
- NFS: Fix the verifier for case sensitive filesystem in nfs_atomic_open() (Trond Myklebust)
- NFSv4: Add some support for case insensitive filesystems (Trond Myklebust)
- fs/nls: Fix utf16 to utf8 conversion (Armin Wolf)
- NFS: Avoid changing nlink when file removes and attribute updates race (Trond Myklebust)
- NFS: don't unhash dentry during unlink/rename (Neil Brown)
- NFS: Label the dentry with a verifier in nfs_rmdir() and nfs_unlink() (Trond Myklebust)
- fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Abdun Nihaal)
- pinctrl: single: Fix incorrect type for error return variable (Xu Wang)
- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling (Matthijs Kooijman)
- perf tools: Fix split kallsyms DSO counting (Namhyung Kim)
- remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs (Alexandru Gagniuc)
- mtd: lpddr_cmds: fix signed shifts in lpddr_cmds (Ivan Stepchenko)
- net: stmmac: fix rx limit check in stmmac_rx_zc() (Alexey Kodanev)
- netfilter: nft_connlimit: update the count if add was skipped (Fernando Fernandez Mancera)
- netfilter: nf_conncount: rework API to use sk_buff directly (Fernando Fernandez Mancera)
- netfilter: nf_conncount: reduce unnecessary GC (William Tu)
- netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Pablo Neira Ayuso)
- regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (Sparkhuang) [Orabug: 38798787] {CVE-2025-68354}
- ASoC: Intel: catpt: Fix error path in hw_params() (Cezary Rojewski)
- virtio: fix virtqueue_set_affinity() docs (Michael S. Tsirkin)
- virtio_vdpa: fix misleading return in void function (Alok Tiwari)
- ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation (Yongjian Sun)
- ext4: remove unused return value of __mb_check_buddy (Kemeng Shi)
- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (René Rebe)
- drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Dan Carpenter)
- ASoC: fsl_xcvr: clear the channel status control memory (Shengjiu Wang)
- ASoC: fsl_xcvr: Add support for i.MX93 platform (Chancel Liu)
- ASoC: fsl_xcvr: Add Counter registers (Shengjiu Wang)
- RDMA/irdma: Fix data race in irdma_free_pble (Krzysztof Czurylo)
- RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Krzysztof Czurylo)
- iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Stephan Gerhold)
- backlight: lp855x: Fix lp855x.h kernel-doc warnings (Randy Dunlap)
- backlight: led-bl: Add devlink to supplier LEDs (Luca Ceresoli)
- backlight: led_bl: Take led_access lock when required (Mans Rullgard)
- wifi: ieee80211: correct FILS status codes (Ria Thomas)
- PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Shawn Lin)
- staging: fbtft: core: fix potential memory leak in fbtft_probe_common() (Jianglei Nie)
- mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Zilin Guan)
- crypto: ccree - Correctly handle return of sg_nents_for_len (Xu Wang)
- selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Matt Bobrowski)
- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Matt Bobrowski)
- usb: dwc2: fix hang during suspend if set as peripheral (Jisheng Zhang)
- usb: dwc2: fix hang during shutdown if set as peripheral (Jisheng Zhang)
- usb: dwc2: disable platform lowlevel hw resources during shutdown (Jisheng Zhang)
- usb: chaoskey: fix locking for O_NONBLOCK (Oliver Neukum)
- ima: Handle error code returned by ima_filter_rule_match() (Zhao Yipeng) [Orabug: 38798922] {CVE-2025-68740}
- wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (Seungjin Bae) [Orabug: 38798815] {CVE-2025-68362}
- mfd: mt6358-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
- mfd: mt6397-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
- pwm: bcm2835: Make sure the channel is enabled after pwm_request() (Uwe Kleine-König)
- drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue (Jay Liu)
- fs/ntfs3: Prevent memory leaks in add sub record (Edward Adam Davis)
- fs/ntfs3: out1 also needs to put mi (Edward Adam Davis)
- fs/ntfs3: Make ni_ins_new_attr return error (Konstantin Komarov)
- fs/ntfs3: Add new argument is_mft to ntfs_mark_rec_free (Konstantin Komarov)
- fs/ntfs3: Remove unused mi_mark_free (Konstantin Komarov)
- powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format (Ritesh Harjani)
- wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() (Abdun Nihaal) [Orabug: 38818222] {CVE-2025-68759}
- NFSD/blocklayout: Fix minlength check in proc_layoutget (Sergey Bashirov)
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Xu Wang)
- watchdog: wdat_wdt: Stop watchdog when uninstalling module (Liu Xinpeng)
- selftests/bpf: Fix failure paths in send_signal test (Alexei Starovoitov)
- ps3disk: use memcpy_{from,to}_bvec index (René Rebe)
- PCI: keystone: Exit ks_pcie_probe() for invalid mode (Siddharth Vadapalli)
- leds: netxbig: Fix GPIO descriptor leak in error paths (Xu Wang)
- scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls (Xu Wang)
- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Xu Wang)
- ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Dmitry Antipov) [Orabug: 38798824] {CVE-2025-68364}
- lib/vsprintf: Check pointer before dereferencing in time_and_date() (Andy Shevchenko)
- clk: renesas: r9a06g032: Fix memory leak in error path (Xu Wang)
- coresight: etm4x: Add context synchronization before enabling trace (Leo Yan)
- coresight: etm4x: Extract the trace unit controlling (Leo Yan)
- coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
- coresight: etm4x: Use Trace Filtering controls dynamically (Suzuki K Poulose)
- coresight: etm4x: Save restore TRFCR_EL1 (Suzuki K Poulose)
- nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [Orabug: 38798833] {CVE-2025-68366}
- wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() (Abdun Nihaal)
- macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Long Li) [Orabug: 38798838] {CVE-2025-68367}
- powerpc/32: Fix unpaired stwcx. on interrupt exit (Christophe Leroy)
- RDMA/rtrs: server: Fix error handling in get_or_create_srv (Ma Ke)
- dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Manivannan Sadhasivam)
- dt-bindings: PCI: convert amlogic,meson-pcie.txt to dt-schema (Neil Armstrong)
- scsi: stex: Fix reboot_notifier leak in probe error path (Xu Wang)
- nbd: defer config put in recv_work (Zheng Qixing) [Orabug: 38798851] {CVE-2025-68372}
- nbd: partition nbd_read_stat() into nbd_read_reply() and nbd_handle_reply() (Yu Kuai)
- nbd: clean up return value checking of sock_xmit() (Yu Kuai)
- regulator: core: disable supply if enabling main regulator fails (Gabor Juhos)
- perf/x86/intel: Correct large PEBS flag check (Dapeng Mi)
- ext4: correct the checking of quota files before moving extents (Zhang Yi)
- ext4: minor defrag code improvements (Eric Whitney)
- mfd: da9055: Fix missing regmap_del_irq_chip() in error path (Xu Wang)
- spi: tegra210-quad: Fix timeout handling (Vishwaroop A) [Orabug: 38798944] {CVE-2025-68746}
- spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A)
- scsi: target: Do not write NUL characters into ASCII configfs output (Bart Van Assche)
- power: supply: apm_power: only unset own apm_get_power_status (Ahelenia Ziemiańska)
- power: supply: wm831x: Check wm831x_set_bits() return value (Ivan Abramov)
- i3c: master: svc: Prevent incomplete IBI transaction (Stanley Chu)
- i3c: fix refcount inconsistency in i3c_master_register (Frank Li)
- pinctrl: stm32: fix hwspinlock resource leak in probe function (Xu Wang)
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() (Tengda Wu)
- x86: kmsan: don't instrument stack walking functions (Alexander Potapenko)
- kmsan: introduce __no_sanitize_memory and __no_kmsan_checks (Alexander Potapenko)
- compiler-gcc.h: Define __SANITIZE_ADDRESS__ under hwaddress sanitizer (Kees Cook)
- sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Kuniyuki Iwashima)
- phy: mscc: Fix PTP for VSC8574 and VSC8572 (Horatiu Vultur)
- firmware: imx: scu-irq: fix OF node leak in (Peng Fan)
- s390/ap: Don't leak debug feature files if AP instructions are not available (Heiko Carstens)
- s390/smp: Fix fallback CPU detection (Heiko Carstens)
- crypto: hisilicon/qm - restore original qos values (Nieweiqiang)
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [Orabug: 38798875] {CVE-2025-68724}
- uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe (Li Qiang)
- arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl (Tim Harvey)
- iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member (Francesco Lavra)
- iio: imu: st_lsm6dsx: discard samples during filters settling time (Lorenzo Bianconi)
- iio: imu: st_lsm6dsx: introduce st_lsm6dsx_device_set_enable routine (Lorenzo Bianconi)
- inet: Avoid ehash lookup race in inet_ehash_insert() (Luoxuanqiang)
- rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Luoxuanqiang)
- ntfs3: Fix uninit buffer allocated by __getname() (Sidharth Seela)
- ntfs3: fix uninit memory after failed mi_read in mi_format_new (Raphael Pinsonneault-Thibeault)
- irqchip/qcom-irq-combiner: Fix section mismatch (Johan Hovold)
- USB: Fix descriptor count when handling invalid MBIM extended descriptor (Seungjin Bae)
- drm/vgem-fence: Fix potential deadlock on release (Janusz Krzysztofik) [Orabug: 38818212] {CVE-2025-68757}
- drm/panel: visionox-rm69299: Don't clear all mode flags (Guido Günther)
- gpu: host1x: Fix race in syncpt alloc/free (Mainak Sen) [Orabug: 38798899] {CVE-2025-68732}
- smack: fix bug: unprivileged task can create labels (Konstantin Andreev)
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing (Navaneeth K) [Orabug: 38773544] {CVE-2025-68254}
- staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing (Navaneeth K) [Orabug: 38773554] {CVE-2025-68255}
- comedi: check device's attached status in compat ioctls (Nikita Zhandarovich)
- comedi: multiq3: sanitize config options in multiq3_attach() (Nikita Zhandarovich)
- comedi: c6xdigio: Fix invalid PNP driver unregistration (Ian Abbott)
- HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Naoki Ueki)
- platform/x86: huawei-wmi: add keys for HONOR models (Ston Jia)
- platform/x86: acer-wmi: Ignore backlight event (Armin Wolf)
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration (Praveen Talari)
- bfs: Reconstruct file type when loading from disk (Tetsuo Handa)
- spi: imx: keep dma request disabled before dma transfer setup (Robin Gong)
- spi: xilinx: increase number of retries before declaring stall (Alvaro Gamez Machado)
- USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Johan Hovold)
- USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Johan Hovold)
- serial: add support of CPCI cards (Magne Bruno)
- USB: serial: ftdi_sio: match on interface number for jtag (Johan Hovold)
- USB: serial: option: move Telit 0x10c7 composition in the right place (Fabio Porcedda)
- USB: serial: option: add Telit Cinterion FE910C04 new compositions (Fabio Porcedda)
- USB: serial: option: add Foxconn T99W760 (Slark Xiao)
- comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() (Nikita Zhandarovich)
- ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (Alexey Nepomnyashih) [Orabug: 38773587] {CVE-2025-68261}
- locking/spinlock/debug: Fix data-race in do_raw_write_lock (Alexander Sverdlin)
- ext4: refresh inline data size before write operations (Deepanshu Kartikey) [Orabug: 38773603] {CVE-2025-68264}
- jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (Ye Bin) [Orabug: 38792633] {CVE-2025-68337}
- Documentation: process: Also mention Sasha Levin as stable tree maintainer (Bagas Sanjaya)
- leds: spi-byte: Use devm_led_classdev_register_ext() (Stefan Kalscheuer)
- leds: Replace all non-returning strlcpy with strscpy (Azeem Shaikh)
- drm/i915/selftests: Fix inconsistent IS_ERR and PTR_ERR (Kai Song)
- dpaa2-mac: bail if the dpmacs fwnode is not found (Robert-Ionut Alexa)
- xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 39004269] {CVE-2025-40256}
- Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca)

ELSA-2026-45192 Important: Oracle Linux 9 kernel security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2026-45192

http://linux.oracle.com/errata/ELSA-2026-45192.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.30.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.30.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.30.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.30.1.el9_8.x86_64.rpm
libperf-5.14.0-687.30.1.el9_8.x86_64.rpm
perf-5.14.0-687.30.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.30.1.el9_8.x86_64.rpm
rtla-5.14.0-687.30.1.el9_8.x86_64.rpm
rv-5.14.0-687.30.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.30.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.30.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.30.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.30.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.30.1.el9_8.aarch64.rpm
libperf-5.14.0-687.30.1.el9_8.aarch64.rpm
perf-5.14.0-687.30.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.30.1.el9_8.aarch64.rpm
rtla-5.14.0-687.30.1.el9_8.aarch64.rpm
rv-5.14.0-687.30.1.el9_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.30.1.el9_8.src.rpm

Related CVEs:

CVE-2025-40026
CVE-2026-52950
CVE-2026-52976
CVE-2026-53006
CVE-2026-53059

Description of changes:

[5.14.0-687.30.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64