Kernel, glibc, httpd, Firefox, Thunderbird, and Container Tool Updates for Oracle Linux

Oracle Linux 6518 Published 2026-07-21 07:29 by Philipp Esselbach

News

ELBA-2026-40261 Oracle Linux 8 squid:4 bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2026-40261

http://linux.oracle.com/errata/ELBA-2026-40261.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
libecap-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.x86_64.rpm
squid-4.15-10.module+el8.10.0+90962+3a854d0a.12.x86_64.rpm

aarch64:
libecap-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
libecap-devel-1.0.1-2.module+el8.9.0+90083+f7556140.aarch64.rpm
squid-4.15-10.module+el8.10.0+90962+3a854d0a.12.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/libecap-1.0.1-2.module+el8.9.0+90083+f7556140.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/squid-4.15-10.module+el8.10.0+90962+3a854d0a.12.src.rpm

Description of changes:

libecap
[1.0.1-2]
- Resolves: #1695587 - Ensure modular RPM upgrade path

[1.0.1-1]
- new version 1.0.1
- autoconf.h moved from lookaside to dist-git

[1.0.0-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.0.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.0.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.0.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.0.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.0.0-2]
- Rebuilt for GCC 5 C++11 ABI change

[1.0.0-1]
- new version 1.0.0

[0.2.0-10]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

squid
[7:4.15-10.12]
- Resolves: RHEL-137799 - Squid memory usage increases until OOM.

[7:4.15-10.11]
- Fix patch for CVE-2026-32748
- Resolves: RHEL-160675

[7:4.15-10.10]
- Resolves: RHEL-160675 - squid:4/squid: Squid: Denial of Service
via crafted ICP traffic (CVE-2026-32748)
- Resolves: RHEL-160674 - squid:4/squid: Squid: Denial of Service
via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

[7:4.15-10.9]
- Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via
authentication credential leakage in error handling (CVE-2025-62168)

[7:4.15-10.6]
- Resolves: RHEL-84420 - A squid child process causes a memory reference error
and the squid service terminates abnormally

[7:4.15-10.5]
- Resolves: RHEL-66120 - squid caches DNS entries despite having TTL set to 0

[7:4.15-10.4]
- Resolves: RHEL-67870 - Remove gopher mention from spec file

[7:4.15-10.3]
- Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to
a Denial of Service attack against Cache Manager error responses

[7:4.15-10.2]
- Disable ESI support
- Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service
processing ESI response content

[7:4.15-10.1]
- Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent
to the client in its complementary

ELBA-2026-39332 Oracle Linux 9 kernel bug fix and enhancement update

Oracle Linux Bug Fix Advisory ELBA-2026-39332

http://linux.oracle.com/errata/ELBA-2026-39332.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.26.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.26.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.26.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.26.1.el9_8.x86_64.rpm
libperf-5.14.0-687.26.1.el9_8.x86_64.rpm
perf-5.14.0-687.26.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.26.1.el9_8.x86_64.rpm
rtla-5.14.0-687.26.1.el9_8.x86_64.rpm
rv-5.14.0-687.26.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.26.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.26.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.26.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.26.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.26.1.el9_8.aarch64.rpm
libperf-5.14.0-687.26.1.el9_8.aarch64.rpm
perf-5.14.0-687.26.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.26.1.el9_8.aarch64.rpm
rtla-5.14.0-687.26.1.el9_8.aarch64.rpm
rv-5.14.0-687.26.1.el9_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.26.1.el9_8.src.rpm

Description of changes:

[5.14.0-687.26.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 cb[] in ip4ip6_err() (Eric Dumazet)
- ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Eric Dumazet)
- tg3: Fix race for querying speed/duplex (Thomas Bogendoerfer)
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak (Yochai Eisenrich)
- net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak (Jiayuan Chen)
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Norbert Szetei)
- dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning (Frank Li)
- btrfs: reject root items with drop_progress and zero drop_level (ZhengYuan Huang)
- HID: multitouch: Check to ensure report responses match the request (Lee Jones)
- objtool: Fix Clang jump table detection (Josh Poimboeuf)
- btrfs: don't take device_list_mutex when querying zone info (Johannes Thumshirn)
- atm: lec: fix use-after-free in sock_def_readable() (Deepanshu Kartikey)
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (Benoît Sevens)
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Davidlohr Bueso)
- dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA (Tomi Valkeinen)
- dmaengine: xilinx_dma: Program interrupt delay timeout (Radhey Shyam Pandey)
- dmaengine: idxd: Fix freeing the allocated ida too late (Vinicius Costa Gomes)
- btrfs: fix lost error when running device stats on multiple devices fs (Filipe Manana)
- btrfs: fix super block offset in error message in btrfs_validate_super() (Mark Harmstone)
- dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA (Marek Vasut)
- dmaengine: xilinx: xilinx_dma: Fix dma_device directions (Marek Vasut)
- phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() (Felix Gu)
- ext4: always drain queued discard work in ext4_mb_release() (Theodore Ts'o)
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (Baokun Li)
- ext4: reject mount if bigalloc with s_first_data_block != 0 (Helen Koike)
- ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (Ye Bin)
- ext4: make recently_deleted() properly work with lazy itable initialization (Jan Kara)
- ext4: convert inline data to extents when truncate exceeds inline size (Deepanshu Kartikey)
- xfs: stop reclaim before pushing AIL during unmount (Yuto Ohnuki)
- jbd2: gracefully abort on checkpointing state corruptions (Milos Nikic)
- scsi: ses: Handle positive SCSI error from ses_recv_diag() (Greg Kroah-Hartman)
- scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (Tyllis Xu)
- alarmtimer: Fix argument order in alarm_timer_forward() (Zhan Xusheng)
- erofs: add GFP_NOIO in the bio completion if needed (Jiucheng Xu)
- virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (xietangxin)
- media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Yuchan Nam)
- cpufreq: conservative: Reset requested_freq on limits change (Viresh Kumar)
- can: gw: fix OOB heap access in cgw_csum_crc8_rel() (Ali Norouzi)
- s390/barrier: Make array_index_mask_nospec() __always_inline (Vasily Gorbik)
- s390/syscalls: Add spectre boundary for syscall dispatch table (Greg Kroah-Hartman)
- spi: spi-fsl-lpspi: fix teardown order issue (UAF) (Marc Kleine-Budde)
- ASoC: adau1372: Fix clock leak on PLL lock failure (Jihed Chaibi)
- ASoC: adau1372: Fix unchecked clk_prepare_enable() return value (Jihed Chaibi)
- sysctl: fix uninitialized variable in proc_do_large_bitmap (Marc Buerg)
- hwmon: (adm1177) fix sysfs ABI violation and current unit conversion (Sanman Pradhan)
- ACPI: EC: Fix ECDT probe ordering issues (Hans de Goede)
- ACPI: EC: Fix EC address space handler unregistration (Hans de Goede)
- ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (Hans de Goede)
- ACPICA: include/acpi/acpixf.h: Fix indentation (Hans de Goede)
- ASoC: Intel: catpt: Fix the device initialization (Cezary Rojewski)
- drm/i915/gmbus: fix spurious timeout on 512-byte burst reads (Samasth Norway Ananda)
- x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size (Mike Rapoport (Microsoft))
- scsi: scsi_transport_sas: Fix the maximum channel scanning issue (Yihang Li)
- RDMA/irdma: Return EINVAL for invalid arp index error (Tatyana Nikolova)
- RDMA/irdma: Fix deadlock during netdev reset with active connections (Anil Samal)
- RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() (Tatyana Nikolova)
- RDMA/irdma: Clean up unnecessary dereference of event->cm_node (Ivan Barrera)
- RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() (Tatyana Nikolova)
- RDMA/irdma: Update ibqp state to error if QP is already in error state (Tatyana Nikolova)
- RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Chuck Lever)
- regmap: Synchronize cache for the page selector (Andy Shevchenko)
- net: macb: use the current queue number for stats (Paolo Valerio)
- netfilter: ctnetlink: use netlink policy range checks (David Carlier)
- netlink: allow be16 and be32 types in all uint policy checks (Florian Westphal)
- netlink: introduce bigendian integer types (Florian Westphal)
- netfilter: nft_payload: reject out-of-range attributes via policy (Florian Westphal)
- netlink: introduce NLA_POLICY_MAX_BE (Florian Westphal)
- netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Weiming Shi)
- netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (Ren Wei)
- netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Weiming Shi)
- Bluetooth: btusb: clamp SCO altsetting table indices (Pengpeng Hou)
- Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop (Hyunwoo Kim)
- dma-mapping: add missing inline for dma_free_attrs (Miguel Ojeda)
- net: enetc: fix the output issue of 'ethtool --show-ring' (Wei Fang)
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich)
- platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen (Alok Tiwari)
- rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size (Sabrina Dubroca)
- net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer (Qi Tang)
- openvswitch: validate MPLS set/set_masked payload length (Yang Yang)
- nfc: nci: fix circular locking dependency in nci_close_device (Jakub Kicinski)
- ionic: fix persistent MAC address override on PF (Mohammad Heib)
- pinctrl: mediatek: common: Fix probe failure for devices without EINT (Luca Leonardo Scorcia)
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (Helen Koike)
- Bluetooth: hci_ll: Fix firmware leak on error path (Anas Iqbal)
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (Hyunwoo Kim)
- Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() (Hyunwoo Kim)
- can: statistics: add missing atomic access in hot path (Oliver Hartkopp)
- af_key: validate families in pfkey_send_migrate() (Eric Dumazet)
- esp: fix skb leak with espintcp and async crypto (Sabrina Dubroca)
- xfrm: Fix the usage of skb->sk (Steffen Klassert)
- xfrm: call xdo_dev_state_delete during state update (Sabrina Dubroca)
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 (Uzair Mughal)
- dma-buf: Include ioctl.h in UAPI header (Isaac J. Manjarres)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() (Mark Brown)
- ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() (Mark Brown)
- module: Fix kernel panic when a symbol st_shndx is out of bounds (Ihor Solodrai)
- HID: mcp2221: cancel last I2C command on read error (Romain Sioen)
- net: usb: r8152: add TRENDnet TUC-ET2G (Valentin Spreckels)
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup() (Günther Noack)
- HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 (Julius Lehmann)
- nvme-pci: ensure we're polling a polled queue (Keith Busch)
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 (Hans de Goede)
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (Leif Skunberg)
- nvme-pci: cap queue creation to used queues (Keith Busch)
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (Peter Metz)
- HID: asus: avoid memory leak in asus_report_fixup() (Günther Noack)
- bpf: Release module BTF IDR before module unload (Kumar Kartikeya Dwivedi)
- sh: platform_early: remove pdev->driver_override check (Danilo Krummrich)
- xen/privcmd: add boot control for restricted usage in domU (Juergen Gross)
- xen/privcmd: restrict usage in unprivileged domU (Juergen Gross)
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal)
- netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal)
- tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure (Josh Law)
- lib/bootconfig: check xbc_init_node() return in override path (Josh Law)
- drm/i915/gt: Check set_default_submission() before deferencing (Rahul Bukte)
- ksmbd: fix use-after-free of share_conf in compound request (Hyunwoo Kim)
- mtd: rawnand: brcmnand: skip DMA during panic write (Kamal Dasu)
- mtd: rawnand: serialize lock/unlock against other NAND operations (Kamal Dasu)
- i2c: fsi: Fix a potential leak in fsi_i2c_probe() (Christophe JAILLET)
- hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() (Sanman Pradhan)
- icmp: fix NULL pointer dereference in icmp_tag_validation() (Weiming Shi)
- net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths (Anas Iqbal)
- net: mvpp2: guard flow control update with global_tx_fc in buffer switching (Muhammad Hammad Ijaz)
- nfnetlink_osf: validate individual option lengths in fingerprints (Weiming Shi)
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show (Xiang Mei)
- udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n (Xiang Mei)
- net: macb: fix uninitialized rx_fs_lock (Fedor Pchelkin)
- wifi: mac80211: fix NULL deref in mesh_matches_local() (Xiang Mei)
- igc: fix missing update of skb->tail in igc_xmit_frame() (Kohei Enju)
- net: usb: aqc111: Do not perform PM inside suspend callback (Nikola Z. Ivanov)
- net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (Jiayuan Chen)
- net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
- net/smc: Only save the original clcsock callback functions (Wen Gu)
- PM: runtime: Fix a race condition related to device removal (Bart Van Assche)
- sched: idle: Consolidate the handling of two special cases (Rafael J. Wysocki)
- net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown (Dipayaan Roy)
- net: bcmgenet: increase WoL poll timeout (Justin Chen)
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Jenny Guanni Qu)
- netfilter: xt_time: use unsigned int for monthday bit shift (Jenny Guanni Qu)
- netfilter: xt_CT: drop pending enqueued packets on template removal (Pablo Neira Ayuso)
- netfilter: nft_ct: drop pending enqueued packets on removal (Pablo Neira Ayuso)
- netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko)
- netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Jenny Guanni Qu)
- netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Lukas Johannes Möller)
- netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Hyunwoo Kim)
- netfilter: ctnetlink: remove refcounting in expectation dumpers (Florian Westphal)
- net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect (Jiayuan Chen)
- Bluetooth: qca: fix ROM version reading on WCN3998 chips (Dmitry Baryshkov)
- Bluetooth: HIDP: Fix possible UAF (Luiz Augusto von Dentz)
- Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU (Christian Eggers)
- Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU (Christian Eggers)
- firmware: arm_scpi: Fix device_node reference leak in probe path (Felix Gu)
- of: Add cleanup.h based auto release via __free(device_node) markings (Jonathan Cameron)
- wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. (Kuniyuki Iwashima)
- soc: fsl: qbman: fix race condition in qman_destroy_fq (Richard Genoud)
- btrfs: tree-checker: fix misleading root drop_level error message (ZhengYuan Huang)
- batman-adv: avoid OGM aggregation when skb tailroom is insufficient (Yang Yang)
- pmdomain: bcm: bcm2835-power: Increase ASB control timeout (Maíra Canal)
- mptcp: pm: avoid sending RM_ADDR over same subflow (Matthieu Baerts (NGI0))
- drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink (Natalie Vock)
- net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (Andrew Lunn)
- smb: client: Don't log plaintext credentials in cifs_set_cifscreds (Thorsten Blum)
- RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() (Jason Gunthorpe)
- wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() (Daniil Dulov)
- wifi: cfg80211: move scan done work to wiphy work (Johannes Berg)
- wifi: libertas: fix use-after-free in lbs_free_adapter() (Daniel Hodges)
- ext4: always allocate blocks only from groups inode can use (Jan Kara)
- ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
- ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster)
- ext4: drop extent cache when splitting extent fails (Zhang Yi)
- ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (Zhang Yi)
- ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths (Fedor Pchelkin)
- drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free (Jeongjun Park)
- drm/exynos: vidi: fix to avoid directly dereferencing user pointer (Jeongjun Park)
- drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() (Jeongjun Park)
- net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
- net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz (Huacai Chen)
- drm/radeon: apply state adjust rules to some additional HAINAN vairants (Alex Deucher)
- serial: uartlite: fix PM runtime usage count underflow on probe (Maciej Andrzejewski ICEYE)
- serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Ilpo Järvinen)
- serial: 8250: Fix TX deadlock when using DMA (Raul E Rangel)
- serial: 8250_pci: add support for the AX99100 (Martin Roukala (né Peres))
- iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Guanghui Feng)
- mtd: Avoid boot crash in RedBoot partition table parser (Finn Thain)
- mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() (Chen Ni)
- mtd: rawnand: pl353: make sure optimal timings are applied (Olivier Sobrie)
- mmc: sdhci: fix timing selection for 1-bit bus width (Luke Wang)
- mmc: sdhci-pci-gli: fix GL9750 DMA write corruption (Matthew Schwartz)
- Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access (Lukas Johannes Möller)
- Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() (Lukas Johannes Möller)
- net: macb: fix use-after-free access to PTP clock (Fedor Pchelkin)
- NFC: nxp-nci: allow GPIOs to sleep (Ian Ray)
- nvdimm/bus: Fix potential use after free in asynchronous initialization (Ira Weiny)
- sunrpc: fix cache_request leak in cache_release (Jeff Layton)
- driver: iio: add missing checks on iio_info's callback access (Julien Stephan)
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (Jens Axboe)
- l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
- bpf: Forget ranges when refining tnum after JSET (Paul Chaignon)
- i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor (Adrian Hunter)
- i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort (Adrian Hunter)
- i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors (Adrian Hunter)
- iio: imu: inv_icm42600: fix odr switch to the same value (Jean-Baptiste Maneyrol)
- iio: gyro: mpu3050-i2c: fix pm_runtime error handling (Antoniu Miclaus)
- iio: gyro: mpu3050-core: fix pm_runtime error handling (Antoniu Miclaus)
- iio: chemical: bme680: Fix measurement wait duration calculation (Chris Spencer)
- iio: potentiometer: mcp4131: fix double application of wiper shift (Lukas Schmid)
- iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() (Antoniu Miclaus)
- iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() (Antoniu Miclaus)
- iio: dac: ds4424: reject -128 RAW value (Oleksij Rempel)
- btrfs: abort transaction on failure to update root in the received subvol ioctl (Filipe Manana)
- lib/bootconfig: check bounds before writing in __xbc_open_brace() (Josh Law)
- lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() (Josh Law)
- x86/apic: Disable x2apic on resume if the kernel expects so (Shashank Balaji)
- lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error (Josh Law)
- xfs: fix undersized l_iclog_roundoff values (Darrick J. Wong)
- tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G (Calvin Owens)
- drm/amdgpu: Fix use-after-free race in VM acquire (Alysa Liu)
- net: ethernet: arc: emac: quiesce interrupts before requesting IRQ (Fan Wu)
- net: ncsi: fix skb leak in error paths (Jian Zhang)
- parisc: Fix initial page table creation for boot (Helge Deller)
- hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (Sanman Pradhan)
- nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (Dave Airlie)
- parisc: Increase initial mapping to 64 MB with KALLSYMS (Helge Deller)
- batman-adv: Avoid double-rtnl_lock ELP metric worker (Sven Eckelmann)
- ice: fix retry for AQ command 0x06EE (Jakub Staniszewski)
- net: mana: Ring doorbell at 4 CQ wraparounds (Long Li)
- media: dvb-net: fix OOB access in ULE extension header tables (Ariel Silver)
- staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() (Greg Kroah-Hartman)
- staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (Luka Gejak)
- irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports (Marc Zyngier)
- device property: Allow secondary lookup in fwnode_get_next_child_node() (Andy Shevchenko)
- time/jiffies: Mark jiffies_64_to_clock_t() notrace (Steven Rostedt)
- time: add kernel-doc in time.c (Randy Dunlap)
- ceph: fix i_nlink underrun during async unlink (Max Kellermann)
- libceph: admit message frames only in CEPH_CON_S_OPEN state (Ilya Dryomov)
- libceph: Use u32 for non-negative values in ceph_monmap_decode() (Raphael Zimmer)
- libceph: prevent potential out-of-bounds reads in process_message_header() (Ilya Dryomov)
- libceph: reject preamble if control segment is empty (Ilya Dryomov)
- libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (Raphael Zimmer)
- tipc: fix divide-by-zero in tipc_sk_filter_connect() (Mehul Rao)
- mmc: core: Avoid bitfield RMW for claim/retune flags (Penghe Geng)
- mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() (Felix Gu)
- mm/tracing: rss_stat: ensure curr is false from kthread context (Kalesh Singh)
- usb: image: mdc800: kill download URB on timeout (Ziyi Guo)
- usb: mdc800: handle signal and read racing (Oliver Neukum)
- usb: renesas_usbhs: fix use-after-free in ISR during device removal (Fan Wu)
- usb: class: cdc-wdm: fix reordering issue in read code path (Oliver Neukum)
- USB: core: Limit the length of unkillable synchronous timeouts (Alan Stern)
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts (Alan Stern)
- USB: usbcore: Introduce usb_bulk_msg_killable() (Alan Stern)
- usb: cdc-acm: Restore CAP_BRK functionnality to CH343 (Marc Zyngier)
- usb: core: don't power off roothub PHYs if phy_set_mode() fails (Gabor Juhos)
- usb: misc: uss720: properly clean up reference in uss720_probe() (Greg Kroah-Hartman)
- usb: yurex: fix race in probe (Oliver Neukum)
- usb: xhci: Fix memory leak in xhci_disable_slot() (Zilin Guan)
- usb/core/quirks: Add Huawei ME906S-device to wakeup quirk (Christoffer Sandberg)
- net: usb: lan78xx: skip LTM configuration for LAN7850 (Oleksij Rempel)
- net: usb: lan78xx: fix silent drop of packets with checksum errors (Oleksij Rempel)
- cgroup: fix race between task migration and iteration (Qingye Zhao)
- octeontx2-af: devlink: fix NIX RAS reporter recovery condition (Alok Tiwari)
- ASoC: detect empty DMI strings (Casey Connolly)
- ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition (Chen Ni)
- ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Ben Dooks)
- e1000/e1000e: Fix leak in DMA error cleanup (Matt Vollrath)
- i40e: fix src IP mask checks and memcpy argument names in cloud filter (Alok Tiwari)
- nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (Sungwoo Kim)
- regulator: pca9450: Correct interrupt type (Peng Fan)
- regulator: pca9450: Make IRQ optional (Frieder Schrempf)
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Yuan Tan)
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Hyunwoo Kim)
- netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Hyunwoo Kim)
- netfilter: x_tables: guard option walkers against 1-byte tail reads (David Dull)
- netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Jenny Guanni Qu)
- can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value (Wenyuan Li)
- serial: caif: hold tty->link reference in ldisc_open and ser_release (Shuangpeng Bai)
- ASoC: soc-core: flush delayed work before removing DAIs and widgets (matteo.cotifava)
- ASoC: core: Do not call link_exit() on uninitialized rtd objects (Amadeusz Sławiński)
- ASoC: core: Exit all links before removing their components (Cezary Rojewski)
- ASoC: soc-core: accept zero format at snd_soc_runtime_set_dai_fmt() (Kuninori Morimoto)
- ASoC: soc-core: drop delayed_work_pending() check before flush (matteo.cotifava)
- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (Weiming Shi)
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Gal Pressman)
- bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states (Hangbin Liu)
- xprtrdma: Decrement re_receiving on the early exit paths (Eric Badger)
- powerpc: 83xx: km83xx: Fix keymile vendor prefix (J. Neuschäfer)
- remoteproc: sysmon: Correct subsys_name_len type in QMI request (Bjorn Andersson)
- powerpc/uaccess: Fix inline assembly for clang build on PPC32 (Christophe Leroy (CS GROUP))
- ALSA: usb-audio: Check max frame size for implicit feedback mode, too (Takashi Iwai)
- ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (Takashi Iwai)
- scsi: ses: Fix devices attaching to different hosts (Tomas Henzl)
- ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Sofia Schneider)
- unshare: fix unshare_fs() handling (Al Viro)
- scsi: mpi3mr: Add NULL checks when resetting request and reply queues (Ranjan Kumar)
- ACPI: PM: Save NVS memory on Lenovo G70-35 (Piotr Mazek)
- scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (Jan Kiszka)
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira)
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (Jiayuan Chen)
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (Fernando Fernandez Mancera)
- net: stmmac: Fix error handling in VLAN add and delete paths (Ovidiu Panait)
- nfc: rawsock: cancel tx_work before socket teardown (Jakub Kicinski)
- nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback (Jakub Kicinski)
- nfc: nci: free skb on nci_transceive early error paths (Jakub Kicinski)
- net: nfc: nci: Fix zero-length proprietary notifications (Ian Ray)
- net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (Koichiro Den)
- amd-xgbe: fix sleep while atomic on suspend/resume (Raju Rangoju)
- ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (Jakub Kicinski)
- xen/acpi-processor: fix _CST detection using undersized evaluation buffer (David Thomson)
- indirect_call_wrapper: do not reevaluate function pointer (Eric Dumazet)
- wifi: wlcore: Fix a locking bug (Bart Van Assche)
- can: mcp251x: fix deadlock in error path of mcp251x_open (Alban Bedel)
- can: bcm: fix locking for bcm_op runtime updates (Oliver Hartkopp)
- atm: lec: fix null-ptr-deref in lec_arp_clear_vccs (Jiayuan Chen)
- dpaa2-switch: do not clear any interrupts automatically (Ioana Ciornei)
- net: dpaa2-switch: serialize changes to priv->mac with a mutex (Vladimir Oltean)
- net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() (Vladimir Oltean)
- net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call (Vladimir Oltean)
- net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() (Vladimir Oltean)
- net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table (Chintan Vankar)
- platform/x86: thinkpad_acpi: Fix errors reading battery thresholds (Jonathan Teh)
- selftests: mptcp: more stable simult_flows tests (Paolo Abeni)
- drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() (Lars Ellenberg)
- Squashfs: check metadata block offset is within range (Phillip Lougher)
- net/sched: ets: fix divide by zero in the offload path (Davide Caratti)
- IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() (Jason Gunthorpe)
- wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() (Vahagn Vardanian)
- wifi: radiotap: reject radiotap with unknown bits (Johannes Berg)
- ALSA: usb-audio: Use correct version for UAC3 header validation (Jun Seo)
- platform/x86: dell-wmi: Add audio/mic mute key codes (Kurt Borja)
- platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (Thorsten Blum)
- x86/efi: defer freeing of boot services memory (Mike Rapoport (Microsoft))
- HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (Greg Kroah-Hartman)
- can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (Greg Kroah-Hartman)
- can: ucan: Fix infinite loop from zero-length messages (Greg Kroah-Hartman)
- can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message (Greg Kroah-Hartman)
- net: usb: pegasus: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kalmia: validate USB endpoints (Greg Kroah-Hartman)
- net: usb: kaweth: validate USB endpoints (Greg Kroah-Hartman)
- nfc: pn533: properly drop the usb interface reference on disconnect (Greg Kroah-Hartman)
- media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (Jens Axboe)
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Jann Horn)
- net: arcnet: com20020-pci: fix support for 2.5Mbit cards (Ethan Nelson-Moore)
- ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 (Takashi Iwai)
- fbcon: check return value of con2fb_acquire_newinfo() (Andrey Vatoropin)
- fbcon: move more common code into fb_open() (Daniel Vetter)
- fbcon: Extract fbcon_open/release helpers (Daniel Vetter)
- fbcon: Use delayed work for cursor (Daniel Vetter)
- ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths (Namjae Jeon)
- ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 (Takashi Iwai)
- usb: cdns3: fix role switching during resume (Thomas Richard (TI))
- usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() (Théo Lebrun)
- usb: cdns3: remove redundant if branch (Hongyu Xie)
- clk: tegra: tegra124-emc: fix device leak on set_rate() (Johan Hovold)
- mfd: omap-usb-host: Fix OF populate on driver rebind (Johan Hovold)
- mfd: omap-usb-host: Convert to platform remove callback returning void (Uwe Kleine-König)
- mfd: qcom-pm8xxx: Fix OF populate on driver rebind (Johan Hovold)
- mfd: qcom-pm8xxx: Convert to platform remove callback returning void (Uwe Kleine-König)
- mfd: qcom-pm8xxx: switch away from using chained IRQ handlers (Dmitry Baryshkov)
- drm/tegra: dsi: fix device leak on probe (Johan Hovold)
- ata: libata-scsi: refactor ata_scsi_translate() (Damien Le Moal)
- ata: libata: remove pointless VPRINTK() calls (Hannes Reinecke)
- ata: libata-scsi: drop DPRINTK calls for cdb translation (Hannes Reinecke)
- scsi: ata: Call scsi_done() directly (Bart Van Assche)
- ARM: omap2: Fix reference count leaks in omap_control_init() (Wentao Liang)
- ARM: OMAP2+: add missing of_node_put before break and return (Wang Qing)
- memory: mtk-smi: fix device leak on larb probe (Johan Hovold)
- memory: mtk-smi: Convert to platform remove callback returning void (Uwe Kleine-König)
- bpf: Fix stack-out-of-bounds write in devmap (Kohei Enju)
- btrfs: fix incorrect key offset in error message in check_dev_extent_item() (Mark Harmstone)
- ALSA: usb-audio: Use inclusive terms (Takashi Iwai)
- ALSA: usb-audio: Cap the packet size pre-calculations (Takashi Iwai)
- scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume (Peter Wang)
- scsi: ufs: core: Always initialize the UIC done completion (Bart Van Assche)
- scsi: lpfc: Properly set WC for DPP mapping (Mathias Krause)
- ARM: clean up the memset64() C wrapper (Thomas Weißschuh)

[5.15.0-322.202.1]
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito) [Orabug: 39446044]
- scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (Michael Bommarito) [Orabug: 39446044]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito) [Orabug: 39446044]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito) [Orabug: 39446044]
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler) [Orabug: 39390378]
- net: sched: act_api: implement generic walker and search for tc action (Zhengchao Shao) [Orabug: 39342047]
- btrfs: reserve extra space for the free space tree (Josef Bacik) [Orabug: 39281379]
- btrfs: include the free space tree in the global rsv minimum calculation (Josef Bacik) [Orabug: 39281379]

[5.15.0-321.202.5]
- Revert "ip6_tunnel: Fix usage of skb_vlan_inet_prepare()" (Harshit Mogalapalli) [Orabug: 39476647]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463672]

[5.15.0-321.202.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429143]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429143]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429143]

[5.15.0-321.202.3]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368827] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368827]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384274] {CVE-2026-46333}
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (David Hildenbrand (Red Hat)) [Orabug: 38474901]
- Revert "mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation" (Samasth Norway Ananda) [Orabug: 38474901]
- mm/rmap: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat)) [Orabug: 38474901]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (David Hildenbrand (Red Hat)) [Orabug: 38474901]
- mm/hugetlb: fix hugetlb_pmd_shared() (David Hildenbrand (Red Hat)) [Orabug: 38474901]

ELSA-2026-22145 Important: Oracle Linux 10 .NET 10.0 security update

Oracle Linux Security Advisory ELSA-2026-22145

http://linux.oracle.com/errata/ELSA-2026-22145.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
aspnetcore-runtime-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
aspnetcore-runtime-dbg-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
aspnetcore-targeting-pack-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-apphost-pack-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-host-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-hostfxr-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-runtime-dbg-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-10.0-10.0.109-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-aot-10.0-10.0.109-1.0.1.el10_2.x86_64.rpm
dotnet-sdk-dbg-10.0-10.0.109-1.0.1.el10_2.x86_64.rpm
dotnet-targeting-pack-10.0-10.0.9-1.0.1.el10_2.x86_64.rpm
dotnet-templates-10.0-10.0.109-1.0.1.el10_2.x86_64.rpm

aarch64:
aspnetcore-runtime-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
aspnetcore-runtime-dbg-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
aspnetcore-targeting-pack-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-apphost-pack-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-host-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-hostfxr-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-runtime-dbg-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-10.0-10.0.109-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-aot-10.0-10.0.109-1.0.1.el10_2.aarch64.rpm
dotnet-sdk-dbg-10.0-10.0.109-1.0.1.el10_2.aarch64.rpm
dotnet-targeting-pack-10.0-10.0.9-1.0.1.el10_2.aarch64.rpm
dotnet-templates-10.0-10.0.109-1.0.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/dotnet10.0-10.0.109-1.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-42899

Description of changes:

[10.0.109-1.0.1]
- Add support for Oracle Linux

[10.0.109-1]
- Update to .NET SDK 10.0.109 and Runtime 10.0.9
- Resolves: RHEL-181559

[10.0.108-1]
- Update to .NET SDK 10.0.108 and Runtime 10.0.8
- Resolves: RHEL-173909

[10.0.106-3]
- Adjust build limits
- Resolves: RHEL-169518

ELSA-2026-33092 Moderate: Oracle Linux 10 glibc security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2026-33092

http://linux.oracle.com/errata/ELSA-2026-33092.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
glibc-2.39-126.0.1.el10_2.x86_64.rpm
glibc-all-langpacks-2.39-126.0.1.el10_2.x86_64.rpm
glibc-benchtests-2.39-126.0.1.el10_2.x86_64.rpm
glibc-common-2.39-126.0.1.el10_2.x86_64.rpm
glibc-devel-2.39-126.0.1.el10_2.x86_64.rpm
glibc-doc-2.39-126.0.1.el10_2.noarch.rpm
glibc-gconv-extra-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-aa-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-af-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-agr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ak-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-am-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-an-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-anp-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ar-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-as-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ast-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ayc-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-az-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-be-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bem-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ber-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bg-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bhb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bho-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-br-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-brx-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-bs-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-byn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ca-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ce-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-chr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ckb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-cmn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-crh-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-cs-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-csb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-cv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-cy-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-da-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-de-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-doi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-dsb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-dv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-dz-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-el-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-en-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-eo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-es-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-et-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-eu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fa-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ff-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fil-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fur-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-fy-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ga-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gbm-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gd-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gez-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-gv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ha-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hak-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-he-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hif-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hne-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hsb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ht-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-hy-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ia-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-id-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ig-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ik-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-is-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-it-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-iu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ja-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ka-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kab-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kk-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-km-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ko-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kok-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ks-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ku-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-kw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ky-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lg-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-li-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lij-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ln-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lt-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-lzh-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mag-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mai-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mfe-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mg-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mhr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-miq-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mjw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mk-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ml-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mni-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mnw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ms-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-mt-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-my-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nan-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nb-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nds-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ne-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nhn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-niu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-nso-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-oc-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-om-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-or-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-os-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-pa-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-pap-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-pl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ps-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-pt-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-quz-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-raj-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-rif-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ro-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ru-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-rw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sa-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sah-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sat-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sc-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sd-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-se-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sgs-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-shn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-shs-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-si-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sid-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sk-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sm-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-so-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sq-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ss-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ssy-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-st-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-su-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sv-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-sw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-syr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-szl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ta-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tcy-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-te-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tg-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-th-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-the-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ti-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tig-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tk-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tl-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tn-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-to-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tok-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tpi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tr-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ts-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-tt-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ug-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-uk-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-unm-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ur-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-uz-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-ve-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-vi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-wa-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-wae-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-wal-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-wo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-xh-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-yi-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-yo-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-yue-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-yuw-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-zgh-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-zh-2.39-126.0.1.el10_2.x86_64.rpm
glibc-langpack-zu-2.39-126.0.1.el10_2.x86_64.rpm
glibc-locale-source-2.39-126.0.1.el10_2.x86_64.rpm
glibc-minimal-langpack-2.39-126.0.1.el10_2.x86_64.rpm
glibc-nss-devel-2.39-126.0.1.el10_2.x86_64.rpm
glibc-static-2.39-126.0.1.el10_2.x86_64.rpm
glibc-utils-2.39-126.0.1.el10_2.x86_64.rpm
libnsl-2.39-126.0.1.el10_2.x86_64.rpm
nss_db-2.39-126.0.1.el10_2.x86_64.rpm
nss_hesiod-2.39-126.0.1.el10_2.x86_64.rpm

aarch64:
glibc-2.39-126.0.1.el10_2.aarch64.rpm
glibc-all-langpacks-2.39-126.0.1.el10_2.aarch64.rpm
glibc-benchtests-2.39-126.0.1.el10_2.aarch64.rpm
glibc-common-2.39-126.0.1.el10_2.aarch64.rpm
glibc-devel-2.39-126.0.1.el10_2.aarch64.rpm
glibc-doc-2.39-126.0.1.el10_2.noarch.rpm
glibc-gconv-extra-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-aa-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-af-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-agr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ak-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-am-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-an-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-anp-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ar-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-as-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ast-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ayc-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-az-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-be-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bem-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ber-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bg-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bhb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bho-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-br-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-brx-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-bs-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-byn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ca-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ce-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-chr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ckb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-cmn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-crh-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-cs-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-csb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-cv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-cy-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-da-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-de-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-doi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-dsb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-dv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-dz-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-el-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-en-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-eo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-es-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-et-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-eu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fa-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ff-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fil-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fur-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-fy-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ga-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gbm-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gd-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gez-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-gv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ha-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hak-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-he-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hif-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hne-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hsb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ht-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-hy-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ia-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-id-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ig-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ik-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-is-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-it-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-iu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ja-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ka-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kab-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kk-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-km-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ko-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kok-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ks-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ku-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-kw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ky-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lg-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-li-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lij-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ln-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lt-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-lzh-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mag-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mai-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mfe-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mg-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mhr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-miq-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mjw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mk-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ml-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mni-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mnw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ms-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-mt-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-my-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nan-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nb-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nds-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ne-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nhn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-niu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-nso-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-oc-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-om-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-or-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-os-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-pa-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-pap-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-pl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ps-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-pt-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-quz-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-raj-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-rif-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ro-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ru-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-rw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sa-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sah-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sat-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sc-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sd-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-se-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sgs-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-shn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-shs-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-si-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sid-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sk-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sm-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-so-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sq-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ss-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ssy-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-st-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-su-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sv-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-sw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-syr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-szl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ta-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tcy-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-te-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tg-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-th-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-the-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ti-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tig-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tk-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tl-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tn-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-to-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tok-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tpi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tr-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ts-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-tt-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ug-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-uk-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-unm-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ur-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-uz-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-ve-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-vi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-wa-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-wae-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-wal-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-wo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-xh-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-yi-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-yo-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-yue-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-yuw-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-zgh-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-zh-2.39-126.0.1.el10_2.aarch64.rpm
glibc-langpack-zu-2.39-126.0.1.el10_2.aarch64.rpm
glibc-locale-source-2.39-126.0.1.el10_2.aarch64.rpm
glibc-minimal-langpack-2.39-126.0.1.el10_2.aarch64.rpm
glibc-nss-devel-2.39-126.0.1.el10_2.aarch64.rpm
glibc-static-2.39-126.0.1.el10_2.aarch64.rpm
glibc-utils-2.39-126.0.1.el10_2.aarch64.rpm
libnsl-2.39-126.0.1.el10_2.aarch64.rpm
nss_db-2.39-126.0.1.el10_2.aarch64.rpm
nss_hesiod-2.39-126.0.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/glibc-2.39-126.0.1.el10_2.src.rpm

Related CVEs:

CVE-2026-5450

Description of changes:

[2.39-126.0.1]
- Forward port Oracle changes to 2.39-126.
- Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
Oracle history:
Jul-15-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-124.0.1
- Forward port Oracle changes to 2.39-124.
- Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
May-19-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-121.0.1
- Forward port Oracle changes to 2.39-121.
- Reviewed-by: David Faust [david.faust@oracle.com]
April-2-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-113.0.1
- Reverted to version 2.39-113.
- Reviewed-by: David Faust [david.faust@oracle.com]
February-3-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-99.0.1
- Forward port Oracle changes to 2.39-99.
- Reviewed-by: David Faust [david.faust@oracle.com]
January-27-2026 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-58.0.1.7
- Forward port Oracle changes to 2.39-58.7.
- Reviewed-by: David Faust [david.faust@oracle.com]
November-26-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-58.0.1.2
- Forward port Oracle changes to 2.39-58.2.
- Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
September-29-2025 David Faust [david.faust@oracle.com] - 2.39-58.0.1
- Forward port Oracle changes to 2.39-58.
- Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
August-29-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-54.0.1
- Forward port Oracle changes.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
August-7-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-46.0.1
- Forward port Oracle changes.
Reviewed-by: David Faust [david.faust@oracle.com]
July-15-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-43.0.1
- Forward port Oracle changes.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
March-5-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-37.0.1
- Forward port Oracle changes to 2.39-37.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]
Jan-22-2025 Cupertino Miranda [cupertino.miranda@oracle.com] - 2.39-32.0.1
- Integration of relevant Oracle patches.
Reviewed-by: Jose E. Marchesi [jose.marchesi@oracle.com]

[2.39-126]
- x86-64: Prefer EVEX512 string and memory functions on AMD Zen5
(RHEL-174869)

[2.39-125]
- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172694)

[2.39-124]
- Add LD_DEBUG=tls for tracking thread-local storage and TCB management
(RHEL-159427)

[2.39-123]
- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
(RHEL-162885)

[2.39-122]
- Fix __nss_get_default_domain logic to restore netgroup user enumeration
(RHEL-149709)

ELSA-2026-39323 Important: Oracle Linux 9 pacemaker security update

Oracle Linux Security Advisory ELSA-2026-39323

http://linux.oracle.com/errata/ELSA-2026-39323.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
pacemaker-cluster-libs-2.1.10-3.0.1.el9_8.i686.rpm
pacemaker-cluster-libs-2.1.10-3.0.1.el9_8.x86_64.rpm
pacemaker-libs-2.1.10-3.0.1.el9_8.i686.rpm
pacemaker-libs-2.1.10-3.0.1.el9_8.x86_64.rpm
pacemaker-schemas-2.1.10-3.0.1.el9_8.noarch.rpm

aarch64:
pacemaker-cluster-libs-2.1.10-3.0.1.el9_8.aarch64.rpm
pacemaker-libs-2.1.10-3.0.1.el9_8.aarch64.rpm
pacemaker-schemas-2.1.10-3.0.1.el9_8.noarch.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/pacemaker-2.1.10-3.0.1.el9_8.src.rpm

Related CVEs:

CVE-2026-10649

Description of changes:

[2.1.10-3.0.1]
- Replace bug url [Orabug: 34202300]
- Upstream reference in pacemaker crm_report binary [Orabug: 32825154]

[2.1.10-3]
- Fix integer overflows in remote message decompression code (CVE-2026-10649)
- Resolves: RHEL-181150

ELSA-2026-22937 Important: Oracle Linux 10 image-builder security update

Oracle Linux Security Advisory ELSA-2026-22937

http://linux.oracle.com/errata/ELSA-2026-22937.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
image-builder-58-1.0.1.el10.x86_64.rpm

aarch64:
image-builder-58-1.0.1.el10.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/image-builder-58-1.0.1.el10.src.rpm

Related CVEs:

CVE-2025-61726
CVE-2025-68121
CVE-2026-25679
CVE-2026-27137
CVE-2026-32282
CVE-2026-32283
CVE-2026-33186
CVE-2026-34986

Description of changes:

[58-1.0.1]
- v58 with osbuild/images v0.256.0 with OL support patches
- Add Azure image type
- Correct dnf-plugin-spacewalk package filters

[56-1.0.1]
- v56 with osbuild/images v0.254.0 with OL support patches
- Add gce (gcp) image type to OL distro types

[55-1.0.1]
- v55 with osbuild/images v0.252.0 with OL support patches
- Add azure image type to OL distro types

ELBA-2026-500008 Unbreakable Enterprise kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2026-500008

http://linux.oracle.com/errata/ELBA-2026-500008.html

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-core-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-devel-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-doc-6.12.0-204.92.4.3.1.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-tools-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.3.1.el10uek.x86_64.rpm

aarch64:
kernel-uek-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-devel-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-doc-6.12.0-204.92.4.3.1.el10uek.noarch.rpm
kernel-uek-modules-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-deprecated-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-desktop-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-extra-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-extra-netfilter-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-usb-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-modules-wireless-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-tools-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-devel-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-deprecated-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-desktop-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-extra-netfilter-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-usb-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek-debug-modules-wireless-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-devel-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-core-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-deprecated-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-desktop-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-extra-netfilter-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-usb-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm
kernel-uek64k-modules-wireless-6.12.0-204.92.4.3.1.el10uek.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-uek-6.12.0-204.92.4.3.1.el10uek.src.rpm

Description of changes:

[6.12.0-204.92.4.3.1]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [Orabug: 39711604]

ELBA-2026-500009 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update

Oracle Linux Bug Fix Advisory ELBA-2026-500009

http://linux.oracle.com/errata/ELBA-2026-500009.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

aarch64:
kernel-uek-5.4.17-2136.357.3.3.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.357.3.3.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.357.3.3.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.357.3.3.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.357.3.3.el8uek.noarch.rpm

SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.357.3.3.el8uek.src.rpm

Description of changes:

[5.4.17-2136.357.3.3]
- xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [Orabug: 39711602]

[5.4.17-2136.357.3.2]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [Orabug: 39706958]
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [Orabug: 39706958] {CVE-2026-43499}

[5.4.17-2136.357.3.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 39673892]
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/MMU: Recursively zap nested TDP SPs when zapping last/only parent (Ben Gardon) [Orabug: 39673892]
- KVM: x86/mmu: Move flush logic from mmu_page_zap_pte() to FNAME(invlpg) (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [Orabug: 39673892]
- KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() (Like Xu) [Orabug: 39673892]
- KVM: MMU: load PDPTRs outside mmu_lock (Paolo Bonzini) [Orabug: 39673892]
- KVM: x86/mmu: Check PDPTRs before allocating PAE roots (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (David Matlack) [Orabug: 39673892]
- KVM: x86/mmu: Derive shadow MMU page role from parent (David Matlack) [Orabug: 39673892]
- KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct (Lai Jiangshan) [Orabug: 39673892]
- KVM: X86: Synchronize the shadow pagetable before link it (Lai Jiangshan) [Orabug: 39673892]
- KVM: X86: Fix missed remote tlb flush in rmap_write_protect() (Lai Jiangshan) [Orabug: 39673892]
- KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce indentation (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (David Matlack) [Orabug: 39673892]
- KVM: x86/mmu: Use a bool for direct (David Matlack) [Orabug: 39673892]
- kvm: mmu: Replace unsigned with unsigned int for PTE access (Ben Gardon) [Orabug: 39673892]
- KVM: x86/mmu: Ensure MMU pages are available when allocating roots (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Allocate the lm_root before allocating PAE roots (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Stash 'kvm' in a local variable in kvm_mmu_free_roots() (Sean Christopherson) [Orabug: 39673892]
- KVM: x86/mmu: Add a helper to consolidate root sp allocation (Sean Christopherson) [Orabug: 39673892]
- net/sched: act_pedit: fix action bind logic (Pedro Tammela) [Orabug: 39680880]
- net/sched: act_pedit: free pedit keys on bail from offset check (Pedro Tammela) [Orabug: 39680880]
- net/sched: fix pedit partial COW leading to page cache corruption (Rajat Gupta) [Orabug: 39680880] {CVE-2026-46331}
- net/sched: act_pedit: Parse L3 Header for L4 offset (Max Tottenham) [Orabug: 39680880]
- net/sched: act_pedit: rate limit datapath messages (Pedro Tammela) [Orabug: 39680880]
- net/sched: act_pedit: check static offsets a priori (Pedro Tammela) [Orabug: 39680880]
- net/sched: act_pedit: remove extra check for key type (Pedro Tammela) [Orabug: 39680880]
- net/sched: simplify tcf_pedit_act (Pedro Tammela) [Orabug: 39680880]
- net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela) [Orabug: 39680880]
- net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys (Pedro Tammela) [Orabug: 39680880]

[5.4.17-2136.357.3]
- net: skbuff: fix missing zerocopy reference in pskb_carve helpers (Minh Nguyen) [Orabug: 39619389] {CVE-2026-52943}

[5.4.17-2136.357.2]
- net: fix fanout UAF in packet_release() via NETDEV_UP race (Yochai Eisenrich) [Orabug: 39250953] {CVE-2026-31504}
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams) [Orabug: 39429802]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh) [Orabug: 39429802]
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null (Cezar Bulinaru) [Orabug: 39526882] {CVE-2022-50073}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Rutland) [Orabug: 39548666] {CVE-2025-10263}
- arm64: tlb: Add ARM64_WORKAROUND_REPEAT_TLBI_SYNC (Mark Rutland) [Orabug: 39548666]
- ARM: uek: Disable CONFIG_QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky) [Orabug: 39548666]
- arm64: tlb: allow XZR argument to TLBI ops (Mark Rutland) [Orabug: 39548666]
- arm64: cputype: Add C1-Premium definitions (Mark Rutland) [Orabug: 39548666]
- arm64: cputype: Add C1-Ultra definitions (Mark Rutland) [Orabug: 39548666]
- ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Eric Dumazet) [Orabug: 39300926] {CVE-2026-43037}

[5.4.17-2136.357.1]
- batman-adv: hold claim backbone gateways by reference (Haoze Xie) [Orabug: 39262375] {CVE-2026-31657}
- scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (Michael Bommarito) [Orabug: 39446045]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Michael Bommarito) [Orabug: 39446045]
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Michael Bommarito) [Orabug: 39446045]
- rds: Drop rds conn in connect worker if not in down state. (Rohit Nair) [Orabug: 39152239]

[5.4.17-2136.356.4.1]
- smb: client: reject userspace cifs.spnego descriptions (Asim Viladi Oglu Manizada) [Orabug: 39463669] {CVE-2026-46243}

[5.4.17-2136.356.4]
- tun: free page on build_skb failure in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]
- tap: free page on error paths in tap_get_user_xdp() (Weiming Shi) [Orabug: 39429147]
- tun: free page on short-frame rejection in tun_xdp_one() (Weiming Shi) [Orabug: 39429147]

[5.4.17-2136.356.3]
- ptrace: slightly saner 'get_dumpable()' logic (Linus Torvalds) [Orabug: 39384275,39391459] {CVE-2026-46333}
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [Orabug: 39368828,39441326] {CVE-2026-43503,CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (William Bowling) [Orabug: 39368828] {CVE-2026-46300}

[5.4.17-2136.356.2]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39167617,39368718] {CVE-2026-31402}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [Orabug: 38985173,39368732] {CVE-2026-23216}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [Orabug: 38970455,39368774] {CVE-2026-23193}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39334580,39367147] {CVE-2026-43284}
- x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39218897] {CVE-2025-54518}

ELSA-2026-25191 Critical: Oracle Linux 10 kernel security update

Oracle Linux Security Advisory ELSA-2026-25191

http://linux.oracle.com/errata/ELSA-2026-25191.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-abi-stablelists-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-cross-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-debug-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-devel-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-doc-6.12.0-211.34.1.el10_2.noarch.rpm
kernel-headers-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-core-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-modules-extra-matched-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-6.12.0-211.34.1.el10_2.x86_64.rpm
kernel-uki-virt-addons-6.12.0-211.34.1.el10_2.x86_64.rpm
libperf-6.12.0-211.34.1.el10_2.x86_64.rpm
perf-6.12.0-211.34.1.el10_2.x86_64.rpm
python3-perf-6.12.0-211.34.1.el10_2.x86_64.rpm
rtla-6.12.0-211.34.1.el10_2.x86_64.rpm
rv-6.12.0-211.34.1.el10_2.x86_64.rpm

aarch64:
kernel-cross-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-headers-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-6.12.0-211.34.1.el10_2.aarch64.rpm
kernel-tools-libs-devel-6.12.0-211.34.1.el10_2.aarch64.rpm
libperf-6.12.0-211.34.1.el10_2.aarch64.rpm
perf-6.12.0-211.34.1.el10_2.aarch64.rpm
python3-perf-6.12.0-211.34.1.el10_2.aarch64.rpm
rtla-6.12.0-211.34.1.el10_2.aarch64.rpm
rv-6.12.0-211.34.1.el10_2.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/kernel-6.12.0-211.34.1.el10_2.src.rpm

Related CVEs:

CVE-2026-31419
CVE-2026-31467
CVE-2026-31532
CVE-2026-31581
CVE-2026-43037
CVE-2026-43501
CVE-2026-46054

Description of changes:

[6.12.0-211.34.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64

OpenSSH, Wireshark, Libseccomp, and Core Utilities updates for Fedora

Sssd, Glib2, Satellite, and more updates for RHEL

Kernel, glibc, httpd, Firefox, Thunderbird, and Container Tool Updates for Oracle Linux

ELBA-2026-40261 Oracle Linux 8 squid:4 bug fix and enhancement update

ELBA-2026-39332 Oracle Linux 9 kernel bug fix and enhancement update

ELSA-2026-22145 Important: Oracle Linux 10 .NET 10.0 security update

ELSA-2026-33092 Moderate: Oracle Linux 10 glibc security, bug fix, and enhancement update

ELSA-2026-39323 Important: Oracle Linux 9 pacemaker security update

ELSA-2026-22937 Important: Oracle Linux 10 image-builder security update

ELBA-2026-500008 Unbreakable Enterprise kernel bug fix update

ELBA-2026-500009 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update

ELSA-2026-25191 Critical: Oracle Linux 10 kernel security update

Windows

Linux

macOS

Community