Oracle has released a batch of updates for Linux versions 8, 9, and 10 that address kernel security vulnerabilities alongside standard bug fixes and performance improvements. The patches cover a wide range of system components, including firewalld, NetworkManager, Apache httpd, FreeRDP, GIMP, and libguestfs across both x86_64 and aarch64 architectures. Administrators will see specific CVE resolutions inside the httpd server module, the kernel networking stack, and the FreeRDP graphics library, which fix memory corruption and buffer overflow issues.

ELSA-2026-49870 Low: Oracle Linux 9 kernel security, bug fix, and enhancement update
ELBA-2026-50168-0 Oracle Linux 9 firewalld bug fix and enhancement update
ELBA-2026-50173-0 Oracle Linux 9 egl-wayland bug fix and enhancement update
ELBA-2026-50174-0 Oracle Linux 9 NetworkManager bug fix and enhancement update
ELBA-2026-50177-0 Oracle Linux 9 passt bug fix and enhancement update
ELBA-2026-500095 Oracle Linux 8 oVirt 4.5 ovirt-log-collector bug fix update
ELBA-2026-45115-1 Oracle Linux 8 kernel bug fix update
ELSA-2026-49857 Moderate: Oracle Linux 8 kernel security, bug fix, and enhancement update
ELBA-2026-500090 Oracle Linux 8 oracle-database-preinstall-19c bug fix update
ELBA-2026-50178-0 Oracle Linux 10 passt bug fix and enhancement update
ELBA-2026-50161-0 Oracle Linux 10 virt-v2v bug fix and enhancement update
ELSA-2026-50817 Important: Oracle Linux 9 gimp security update
ELBA-2026-50158-0 Oracle Linux 10 httpd bug fix and enhancement update
ELBA-2026-50169-0 Oracle Linux 10 NetworkManager bug fix and enhancement update
ELBA-2026-50163-0 Oracle Linux 10 libguestfs bug fix and enhancement update
ELSA-2026-50747 Important: Oracle Linux 10 freerdp security update
ELSA-2026-27288 Important: Oracle Linux 10 kernel security, bug fix, and enhancement update
ELSA-2026-22714 Important: Oracle Linux 9 osbuild-composer security update

ELSA-2026-49870 Low: Oracle Linux 9 kernel security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2026-49870

http://linux.oracle.com/errata/ELSA-2026-49870.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-abi-stablelists-5.14.0-687.34.1.el9_8.noarch.rpm
kernel-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-cross-headers-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-debug-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-devel-matched-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-doc-5.14.0-687.34.1.el9_8.noarch.rpm
kernel-headers-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-core-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-modules-extra-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-libs-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-tools-libs-devel-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-uki-virt-5.14.0-687.34.1.el9_8.x86_64.rpm
kernel-uki-virt-addons-5.14.0-687.34.1.el9_8.x86_64.rpm
libperf-5.14.0-687.34.1.el9_8.x86_64.rpm
perf-5.14.0-687.34.1.el9_8.x86_64.rpm
python3-perf-5.14.0-687.34.1.el9_8.x86_64.rpm
rtla-5.14.0-687.34.1.el9_8.x86_64.rpm
rv-5.14.0-687.34.1.el9_8.x86_64.rpm

aarch64:
kernel-cross-headers-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-headers-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-libs-5.14.0-687.34.1.el9_8.aarch64.rpm
kernel-tools-libs-devel-5.14.0-687.34.1.el9_8.aarch64.rpm
libperf-5.14.0-687.34.1.el9_8.aarch64.rpm
perf-5.14.0-687.34.1.el9_8.aarch64.rpm
python3-perf-5.14.0-687.34.1.el9_8.aarch64.rpm
rtla-5.14.0-687.34.1.el9_8.aarch64.rpm
rv-5.14.0-687.34.1.el9_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/kernel-5.14.0-687.34.1.el9_8.src.rpm

Related CVEs:

CVE-2025-68214

Description of changes:

[5.14.0-687.34.1]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}

[6.12.0-211.26.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}

ELSA-2026-22714 Important: Oracle Linux 9 osbuild-composer security update

Oracle Linux Security Advisory ELSA-2026-22714

http://linux.oracle.com/errata/ELSA-2026-22714.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
osbuild-composer-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-core-175-1.0.1.el9_8.x86_64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.x86_64.rpm

aarch64:
osbuild-composer-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-core-175-1.0.1.el9_8.aarch64.rpm
osbuild-composer-worker-175-1.0.1.el9_8.aarch64.rpm

SRPMS:
http://oss.oracle.com/ol9/SRPMS-updates/osbuild-composer-175-1.0.1.el9_8.src.rpm

Related CVEs:

CVE-2025-61726
CVE-2025-61728
CVE-2025-68121
CVE-2026-4427
CVE-2026-25679
CVE-2026-27137
CVE-2026-32282
CVE-2026-32283
CVE-2026-32286
CVE-2026-33186
CVE-2026-34986

Description of changes:

[175-1.0.1]
- Track github upstream