{ "$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json", "document": { "category": "csaf_security_advisory", "csaf_version": "2.1", "distribution": { "tlp": { "label": "AMBER" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Generated from an analysis of SBOM cyclonedx.json (cyclonedx-json, sha256 0b7256c1504e598e3be00fc48ebba0a19e2f94d73b9357ca7193838bdda21c5c)." }, { "category": "general", "text": "This advisory is based on an INCOMPLETE analysis. The following analyzers did not produce results, so components they would have covered may carry vulnerabilities not listed here: shieldbom (fail).", "title": "Analysis coverage" } ], "publisher": { "category": "vendor", "contact_details": "security@ndaal.eu", "name": "ndaal Gesellschaft fuer Sicherheit in der Informationstechnik mbH & Co KG", "namespace": "https://ndaal.eu/csaf" }, "references": [ { "category": "self", "summary": "This advisory", "url": "https://ndaal.eu/csaf/ndaal-sba-1239" } ], "title": "Vulnerabilities found in SBOM cyclonedx.json", "tracking": { "current_release_date": "2026-09-01T17:01:35Z", "generator": { "engine": { "name": "ndaal SBOM Auditor", "version": "1.4.18" } }, "id": "ndaal-sba-1239", "initial_release_date": "2026-09-01T17:01:35Z", "revision_history": [ { "date": "2026-09-01T17:01:35Z", "number": "1.0.0", "summary": "Initial advisory generated from an SBOM analysis." } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "full_product_names": [ { "name": "acl@2.3.1-4.el9", "product_id": "CSAFPID-0024", "product_identification_helper": { "purls": [ "pkg:rpm/ol/acl@2.3.1-4.el9?arch=x86_64&upstream=acl-2.3.1-4.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "bzip2-libs@1.0.8-8.el9", "product_id": "CSAFPID-0030", "product_identification_helper": { "purls": [ "pkg:rpm/ol/bzip2-libs@1.0.8-8.el9?arch=x86_64&upstream=bzip2-1.0.8-8.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "coreutils-common@8.32-35.0.1.el9", "product_id": "CSAFPID-0053", "product_identification_helper": { "purls": [ "pkg:rpm/ol/coreutils-common@8.32-35.0.1.el9?arch=x86_64&upstream=coreutils-8.32-35.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "coreutils@8.32-35.0.1.el9", "product_id": "CSAFPID-0052", "product_identification_helper": { "purls": [ "pkg:rpm/ol/coreutils@8.32-35.0.1.el9?arch=x86_64&upstream=coreutils-8.32-35.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "curl@7.76.1-29.el9_4.1", "product_id": "CSAFPID-0026", "product_identification_helper": { "purls": [ "pkg:rpm/ol/curl@7.76.1-29.el9_4.1?arch=x86_64&upstream=curl-7.76.1-29.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "expat@2.5.0-2.el9_4.1", "product_id": "CSAFPID-0014", "product_identification_helper": { "purls": [ "pkg:rpm/ol/expat@2.5.0-2.el9_4.1?arch=x86_64&upstream=expat-2.5.0-2.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "glib2@2.68.4-14.el9_4.1", "product_id": "CSAFPID-0023", "product_identification_helper": { "purls": [ "pkg:rpm/ol/glib2@2.68.4-14.el9_4.1?arch=x86_64&upstream=glib2-2.68.4-14.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "glibc-common@2.34-100.0.1.el9_4.3", "product_id": "CSAFPID-0033", "product_identification_helper": { "purls": [ "pkg:rpm/ol/glibc-common@2.34-100.0.1.el9_4.3?arch=x86_64&upstream=glibc-2.34-100.0.1.el9_4.3.src.rpm&distro=ol-9.4" ] } }, { "name": "glibc-langpack-en@2.34-100.0.1.el9_4.3", "product_id": "CSAFPID-0034", "product_identification_helper": { "purls": [ "pkg:rpm/ol/glibc-langpack-en@2.34-100.0.1.el9_4.3?arch=x86_64&upstream=glibc-2.34-100.0.1.el9_4.3.src.rpm&distro=ol-9.4" ] } }, { "name": "glibc@2.34-100.0.1.el9_4.3", "product_id": "CSAFPID-0032", "product_identification_helper": { "purls": [ "pkg:rpm/ol/glibc@2.34-100.0.1.el9_4.3?arch=x86_64&upstream=glibc-2.34-100.0.1.el9_4.3.src.rpm&distro=ol-9.4" ] } }, { "name": "gnupg2@2.3.3-4.el9", "product_id": "CSAFPID-0015", "product_identification_helper": { "purls": [ "pkg:rpm/ol/gnupg2@2.3.3-4.el9?arch=x86_64&upstream=gnupg2-2.3.3-4.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "gnutls@3.8.3-4.el9_4", "product_id": "CSAFPID-0022", "product_identification_helper": { "purls": [ "pkg:rpm/ol/gnutls@3.8.3-4.el9_4?arch=x86_64&upstream=gnutls-3.8.3-4.el9_4.src.rpm&distro=ol-9.4" ] } }, { "name": "iputils@20210202-9.0.1.el9", "product_id": "CSAFPID-0038", "product_identification_helper": { "purls": [ "pkg:rpm/ol/iputils@20210202-9.0.1.el9?arch=x86_64&upstream=iputils-20210202-9.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "krb5-libs@1.21.1-2.0.1.el9_4", "product_id": "CSAFPID-0002", "product_identification_helper": { "purls": [ "pkg:rpm/ol/krb5-libs@1.21.1-2.0.1.el9_4?arch=x86_64&upstream=krb5-1.21.1-2.0.1.el9_4.src.rpm&distro=ol-9.4" ] } }, { "name": "libacl@2.3.1-4.el9", "product_id": "CSAFPID-0025", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libacl@2.3.1-4.el9?arch=x86_64&upstream=acl-2.3.1-4.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libarchive@3.5.3-4.el9", "product_id": "CSAFPID-0009", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libarchive@3.5.3-4.el9?arch=x86_64&upstream=libarchive-3.5.3-4.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libattr@2.5.1-3.el9", "product_id": "CSAFPID-0055", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libattr@2.5.1-3.el9?arch=x86_64&upstream=attr-2.5.1-3.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libblkid@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0045", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libblkid@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libbrotli@1.0.9-6.el9", "product_id": "CSAFPID-0021", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libbrotli@1.0.9-6.el9?arch=x86_64&upstream=brotli-1.0.9-6.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libcap@2.48-9.el9_2", "product_id": "CSAFPID-0017", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libcap@2.48-9.el9_2?arch=x86_64&upstream=libcap-2.48-9.el9_2.src.rpm&distro=ol-9.4" ] } }, { "name": "libcurl@7.76.1-29.el9_4.1", "product_id": "CSAFPID-0027", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libcurl@7.76.1-29.el9_4.1?arch=x86_64&upstream=curl-7.76.1-29.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "libfdisk@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0046", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libfdisk@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libgcc@11.4.1-3.0.1.el9", "product_id": "CSAFPID-0035", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libgcc@11.4.1-3.0.1.el9?arch=x86_64&upstream=gcc-11.4.1-3.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libgcrypt@1.10.0-10.el9_2", "product_id": "CSAFPID-0029", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libgcrypt@1.10.0-10.el9_2?arch=x86_64&upstream=libgcrypt-1.10.0-10.el9_2.src.rpm&distro=ol-9.4" ] } }, { "name": "libgomp@11.4.1-3.0.1.el9", "product_id": "CSAFPID-0036", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libgomp@11.4.1-3.0.1.el9?arch=x86_64&upstream=gcc-11.4.1-3.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libmount@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0047", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libmount@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libnghttp2@1.43.0-5.el9_4.3", "product_id": "CSAFPID-0028", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libnghttp2@1.43.0-5.el9_4.3?arch=x86_64&upstream=nghttp2-1.43.0-5.el9_4.3.src.rpm&distro=ol-9.4" ] } }, { "name": "libsmartcols@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0048", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libsmartcols@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libsolv@0.7.24-2.el9", "product_id": "CSAFPID-0054", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libsolv@0.7.24-2.el9?arch=x86_64&upstream=libsolv-0.7.24-2.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libssh-config@0.10.4-13.el9", "product_id": "CSAFPID-0040", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libssh-config@0.10.4-13.el9?arch=noarch&upstream=libssh-0.10.4-13.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libssh@0.10.4-13.el9", "product_id": "CSAFPID-0039", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libssh@0.10.4-13.el9?arch=x86_64&upstream=libssh-0.10.4-13.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libstdc++@11.4.1-3.0.1.el9", "product_id": "CSAFPID-0037", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libstdc%2B%2B@11.4.1-3.0.1.el9?arch=x86_64&upstream=gcc-11.4.1-3.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libtasn1@4.16.0-8.el9_1", "product_id": "CSAFPID-0041", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libtasn1@4.16.0-8.el9_1?arch=x86_64&upstream=libtasn1-4.16.0-8.el9_1.src.rpm&distro=ol-9.4" ] } }, { "name": "libuuid@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0049", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libuuid@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "libxml2@2.9.13-6.el9_4", "product_id": "CSAFPID-0005", "product_identification_helper": { "purls": [ "pkg:rpm/ol/libxml2@2.9.13-6.el9_4?arch=x86_64&upstream=libxml2-2.9.13-6.el9_4.src.rpm&distro=ol-9.4" ] } }, { "name": "ncurses-base@6.2-10.20210508.el9", "product_id": "CSAFPID-0057", "product_identification_helper": { "purls": [ "pkg:rpm/ol/ncurses-base@6.2-10.20210508.el9?arch=noarch&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "ncurses-libs@6.2-10.20210508.el9", "product_id": "CSAFPID-0058", "product_identification_helper": { "purls": [ "pkg:rpm/ol/ncurses-libs@6.2-10.20210508.el9?arch=x86_64&upstream=ncurses-6.2-10.20210508.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "openssh-clients@8.7p1-38.0.2.el9_4.4", "product_id": "CSAFPID-0019", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssh-clients@8.7p1-38.0.2.el9_4.4?arch=x86_64&upstream=openssh-8.7p1-38.0.2.el9_4.4.src.rpm&distro=ol-9.4" ] } }, { "name": "openssh-server@8.7p1-38.0.2.el9_4.4", "product_id": "CSAFPID-0020", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssh-server@8.7p1-38.0.2.el9_4.4?arch=x86_64&upstream=openssh-8.7p1-38.0.2.el9_4.4.src.rpm&distro=ol-9.4" ] } }, { "name": "openssh@8.7p1-38.0.2.el9_4.4", "product_id": "CSAFPID-0018", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssh@8.7p1-38.0.2.el9_4.4?arch=x86_64&upstream=openssh-8.7p1-38.0.2.el9_4.4.src.rpm&distro=ol-9.4" ] } }, { "name": "openssl-fips-provider@3.0.7-2.0.1.el9", "product_id": "CSAFPID-0056", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssl-fips-provider@3.0.7-2.0.1.el9?arch=x86_64&upstream=openssl-fips-provider-3.0.7-2.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "openssl-libs@1:3.0.7-28.0.1.el9_4", "product_id": "CSAFPID-0008", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssl-libs@3.0.7-28.0.1.el9_4?arch=x86_64&epoch=1&upstream=openssl-3.0.7-28.0.1.el9_4.src.rpm&distro=ol-9.4" ] } }, { "name": "openssl@1:3.0.7-28.0.1.el9_4", "product_id": "CSAFPID-0007", "product_identification_helper": { "purls": [ "pkg:rpm/ol/openssl@3.0.7-28.0.1.el9_4?arch=x86_64&epoch=1&upstream=openssl-3.0.7-28.0.1.el9_4.src.rpm&distro=ol-9.4" ] } }, { "name": "p11-kit-trust@0.25.3-2.el9", "product_id": "CSAFPID-0044", "product_identification_helper": { "purls": [ "pkg:rpm/ol/p11-kit-trust@0.25.3-2.el9?arch=x86_64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "p11-kit@0.25.3-2.el9", "product_id": "CSAFPID-0043", "product_identification_helper": { "purls": [ "pkg:rpm/ol/p11-kit@0.25.3-2.el9?arch=x86_64&upstream=p11-kit-0.25.3-2.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "pam@1.5.1-19.0.2.el9", "product_id": "CSAFPID-0001", "product_identification_helper": { "purls": [ "pkg:rpm/ol/pam@1.5.1-19.0.2.el9?arch=x86_64&upstream=pam-1.5.1-19.0.2.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "python3-libs@3.9.18-3.el9_4.5", "product_id": "CSAFPID-0004", "product_identification_helper": { "purls": [ "pkg:rpm/ol/python3-libs@3.9.18-3.el9_4.5?arch=x86_64&upstream=python3.9-3.9.18-3.el9_4.5.src.rpm&distro=ol-9.4" ] } }, { "name": "python3-setuptools-wheel@53.0.0-12.el9_4.1", "product_id": "CSAFPID-0031", "product_identification_helper": { "purls": [ "pkg:rpm/ol/python3-setuptools-wheel@53.0.0-12.el9_4.1?arch=noarch&upstream=python-setuptools-53.0.0-12.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "python3@3.9.18-3.el9_4.5", "product_id": "CSAFPID-0003", "product_identification_helper": { "purls": [ "pkg:rpm/ol/python3@3.9.18-3.el9_4.5?arch=x86_64&upstream=python3.9-3.9.18-3.el9_4.5.src.rpm&distro=ol-9.4" ] } }, { "name": "shadow-utils@2:4.9-8.el9", "product_id": "CSAFPID-0059", "product_identification_helper": { "purls": [ "pkg:rpm/ol/shadow-utils@4.9-8.el9?arch=x86_64&epoch=2&upstream=shadow-utils-4.9-8.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "sqlite-libs@3.34.1-7.el9_3", "product_id": "CSAFPID-0006", "product_identification_helper": { "purls": [ "pkg:rpm/ol/sqlite-libs@3.34.1-7.el9_3?arch=x86_64&upstream=sqlite-3.34.1-7.el9_3.src.rpm&distro=ol-9.4" ] } }, { "name": "systemd-libs@252-32.0.2.el9_4.7", "product_id": "CSAFPID-0011", "product_identification_helper": { "purls": [ "pkg:rpm/ol/systemd-libs@252-32.0.2.el9_4.7?arch=x86_64&upstream=systemd-252-32.0.2.el9_4.7.src.rpm&distro=ol-9.4" ] } }, { "name": "systemd-pam@252-32.0.2.el9_4.7", "product_id": "CSAFPID-0012", "product_identification_helper": { "purls": [ "pkg:rpm/ol/systemd-pam@252-32.0.2.el9_4.7?arch=x86_64&upstream=systemd-252-32.0.2.el9_4.7.src.rpm&distro=ol-9.4" ] } }, { "name": "systemd-rpm-macros@252-32.0.2.el9_4.7", "product_id": "CSAFPID-0013", "product_identification_helper": { "purls": [ "pkg:rpm/ol/systemd-rpm-macros@252-32.0.2.el9_4.7?arch=noarch&upstream=systemd-252-32.0.2.el9_4.7.src.rpm&distro=ol-9.4" ] } }, { "name": "systemd@252-32.0.2.el9_4.7", "product_id": "CSAFPID-0010", "product_identification_helper": { "purls": [ "pkg:rpm/ol/systemd@252-32.0.2.el9_4.7?arch=x86_64&upstream=systemd-252-32.0.2.el9_4.7.src.rpm&distro=ol-9.4" ] } }, { "name": "tar@2:1.34-6.el9_4.1", "product_id": "CSAFPID-0042", "product_identification_helper": { "purls": [ "pkg:rpm/ol/tar@1.34-6.el9_4.1?arch=x86_64&epoch=2&upstream=tar-1.34-6.el9_4.1.src.rpm&distro=ol-9.4" ] } }, { "name": "unknown@1.2.18", "product_id": "CSAFPID-0060", "product_identification_helper": { "purls": [ "pkg:pypi/dbus-python@1.2.18" ] } }, { "name": "util-linux-core@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0051", "product_identification_helper": { "purls": [ "pkg:rpm/ol/util-linux-core@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "util-linux@2.37.4-18.0.1.el9", "product_id": "CSAFPID-0050", "product_identification_helper": { "purls": [ "pkg:rpm/ol/util-linux@2.37.4-18.0.1.el9?arch=x86_64&upstream=util-linux-2.37.4-18.0.1.el9.src.rpm&distro=ol-9.4" ] } }, { "name": "vim-minimal@2:8.2.2637-20.0.1.el9_1", "product_id": "CSAFPID-0016", "product_identification_helper": { "purls": [ "pkg:rpm/ol/vim-minimal@8.2.2637-20.0.1.el9_1?arch=x86_64&epoch=2&upstream=vim-8.2.2637-20.0.1.el9_1.src.rpm&distro=ol-9.4" ] } } ] }, "vulnerabilities": [ { "cve": "CVE-2019-12900", "notes": [ { "category": "description", "text": "[1.0.8-10]\n- Revert the previous commit (introduced a regression)\nResolves: CVE-2019-12900\n\n[1.0.8-9]\n- Fix out of bounds access in BZ2_decompress\nResolves: RHEL-65198" } ], "product_status": { "known_affected": [ "CSAFPID-0030" ] }, "title": "ELSA-2025-0925", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.0.8-10.el9_5 or later.", "product_ids": [ "CSAFPID-0030" ] } ] }, { "cve": "CVE-2020-11023", "notes": [ { "category": "description", "text": "[11.5.0-5.0.1]\n- Merge Oracle patches to 11.5.0-5.\n Oracle history:" } ], "product_status": { "known_affected": [ "CSAFPID-0035", "CSAFPID-0036", "CSAFPID-0037" ] }, "title": "ELSA-2025-1346", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:11.5.0-5.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0035", "CSAFPID-0036", "CSAFPID-0037" ] } ] }, { "cve": "CVE-2021-3903", "notes": [ { "category": "description", "text": "[8.2.2637-21.0.1]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-21]\n- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2024-9405", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-21.0.1.el9 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2022-29458", "notes": [ { "category": "description", "text": "[6.2-10.20210508.el9_6.2]\n- remove execute permissions from ANNOUNCE file (RHEL-102738)\n\n[6.2-10.20210508.el9_6.1]\n- guard against corrupt terminfo data in string conversion (CVE-2022-29458\n RHEL-100139)" } ], "product_status": { "known_affected": [ "CSAFPID-0057", "CSAFPID-0058" ] }, "title": "ELSA-2025-12876", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:6.2-10.20210508.el9_6.2 or later.", "product_ids": [ "CSAFPID-0057", "CSAFPID-0058" ] } ] }, { "cve": "CVE-2022-49043", "notes": [ { "category": "description", "text": "[2.9.13-6.1]\n- Fix CVE-2022-49043 (RHEL-76298)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-1350", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-6.el9_5.1 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2023-4752", "notes": [ { "category": "description", "text": "[8.2.2637-22.0.1]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-22]\n- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2025-7440", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-22.0.1.el9_6 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2024-0553", "notes": [ { "category": "description", "text": "[3.7.6-23.4_fips]\n- Add FIPS package change: add fips suffix to Release and\n set Epoch to 10 [Orabug: 35925409]\n- Update FIPS module name for Oracle Linux [Orabug: 35925409]\n- Verify salt length and iteration count for PBKDF [Orabug: 35925409]\n\n[3.7.6-23.4]\n- Fix timing side-channel in deterministic ECDSA (RHEL-28958)\n- Fix potential crash during chain building/verification (RHEL-28953)\n\n[3.7.6-23.3]\n- x509: detect loop in certificate chain (RHEL-21759)\n- fips: Zeroize temporary values in integrity check (RHEL-21870)\n\n[3.7.6-23.2]\n- auth/rsa_psk: minimize branching after decryption\n\n[3.7.6-23.1]\n- auth/rsa_psk: side-step potential side-channel (RHEL-16755)\n\n[3.7.6-23]\n- Mark SHA-1 signature verification non-approved in FIPS (#2102751)\n\n[3.7.6-22]\n- Skip KTLS test on old kernel if host and target arches are different" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2024-12336", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 10:3.7.6-23.el9_3.4_fips or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2024-10041", "notes": [ { "category": "description", "text": "[1.5.1-21.0.1]\n- pam_access: clean up the remote host matching code [Orabug: 36771903]\n- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]\n\n[1.5.1-21]\n- pam_unix: always run the helper to obtain shadow password file entries.\n CVE-2024-10041. Resolves: RHEL-62880\n\n[1.5.1-20]\n- libpam: support long lines in service files. Resolves: RHEL-40705\n\n[1.5.1-19]\n- pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS\n situations. CVE-2024-22365. Resolves: RHEL-21244\n\n[1.5.1-18]\n- libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727\n- pam_access: handle hostnames in access.conf. Resolves: RHEL-22300\n\n[1.5.1-17]\n- pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943\n\n[1.5.1-16]\n- libpam: use close_range() to close file descriptors. Resolves: RHEL-5099\n- fix formatting of audit messages. Resolves: RHEL-5100\n\n[1.5.1-15]\n- pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2215007" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "title": "ELSA-2024-11250", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-21.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0001" ] } ] }, { "cve": "CVE-2024-10963", "notes": [ { "category": "description", "text": "[1.5.1-22.0.1]\n- pam_access: clean up the remote host matching code [Orabug: 36771903]\n- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]\n\n[1.5.1-22]\n- pam_access: rework resolving of tokens as hostname.\n Resolves: CVE-2024-10963 and RHEL-66245\n\n[1.5.1-21]\n- pam_unix: always run the helper to obtain shadow password file entries.\n CVE-2024-10041. Resolves: RHEL-62880" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "title": "ELSA-2024-10244", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-22.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0001" ] } ] }, { "cve": "CVE-2024-11168", "notes": [ { "category": "description", "text": "[3.9.21-1]\n- Update to 3.9.21\n- Security fix for CVE-2024-11168 and CVE-2024-9287\nResolves: RHEL-64888\nResolves: RHEL-67259" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2024-10983", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.21-1.el9_5 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2024-12133", "notes": [ { "category": "description", "text": "[4.16.0-9]\n- Backport the fix for CVE-2024-12133 (RHEL-78580)" } ], "product_status": { "known_affected": [ "CSAFPID-0041" ] }, "title": "ELSA-2025-7077", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:4.16.0-9.el9 or later.", "product_ids": [ "CSAFPID-0041" ] } ] }, { "cve": "CVE-2024-12243", "notes": [ { "category": "description", "text": "[3.8.3-6]\n- Bump nettle dependency to 3.10.1 (RHEL-52740)\n\n[3.8.3-5]\n- Backport the fix for CVE-2024-12243 (RHEL-78580)" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2025-7076", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.8.3-6.el9 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2024-12718", "notes": [ { "category": "description", "text": "[3.9.21-2.1]\n- Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435\nResolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2025-10136", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.21-2.el9_6.1 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2024-12797", "notes": [ { "category": "description", "text": "[3.2.2-6.0.1.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.2.2-6.1]\n- RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) \n Resolves: RHEL-76755" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2025-1330", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.2.2-6.0.1.el9_5.1 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2024-2236", "notes": [ { "category": "description", "text": "[1.10.0-11]\n- Fix CVE-2024-2236 (RHEL-34579)" } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "title": "ELSA-2024-9404", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.10.0-11.el9 or later.", "product_ids": [ "CSAFPID-0029" ] } ] }, { "cve": "CVE-2024-2511", "notes": [ { "category": "description", "text": "openssl\n[1:3.2.2-6.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.2.2-6]\n- rebuilt\n Related: RHEL-55339\n\n[1:3.2.2-5]\n- Fix CVE-2024-6119: Possible denial of service in X.509 name checks\n Resolves: RHEL-55339\n\n[1:3.2.2-4]\n- Fix CVE-2024-5535: SSL_select_next_proto buffer overread\n Resolves: RHEL-45657\n\n[1:3.2.2-3]\n- Replace HKDF backward compatibility patch with the official one\n Related: RHEL-40823\n\n[1:3.2.2-2]\n- Add workaround for EVP_PKEY_CTX_add1_hkdf_info with older providers\n Resolves: RHEL-40823\n\n[1:3.2.2-1]\n- Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,\n and Minerva attack.\n Resolves: RHEL-32148\n Resolves: RHEL-36792\n Resolves: RHEL-38514\n Resolves: RHEL-39111\n\n[1:3.2.1-2]\n- Update RNG changing for FIPS purpose\n Resolves: RHEL-35380\n\n[1:3.2.1-1]\n- Rebasing OpenSSL to 3.2.1\n Resolves: RHEL-26271\n\n[1:3.0.7-27]\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n Related: RHEL-23474\n\n[1:3.0.7-26]\n- Avoid implicit function declaration when building openssl\n Related: RHEL-1780\n- In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails\n Resolves: RHEL-17104\n- Add a directory for OpenSSL providers configuration\n Resolves: RHEL-17193\n- Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context\n Resolves: RHEL-19515\n- POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)\n Resolves: RHEL-21151\n- Excessive time spent checking invalid RSA public keys (CVE-2023-6237)\n Resolves: RHEL-21654\n- SSL ECDHE Kex fails when pkcs11 engine is set in config file\n Resolves: RHEL-20249\n- Denial of service via null dereference in PKCS#12\n Resolves: RHEL-22486\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n Resolves: RHEL-23474\n\n[1:3.0.7-25]\n- Provide relevant diagnostics when FIPS checksum is corrupted\n Resolves: RHEL-5317\n- Don't limit using SHA1 in KDFs in non-FIPS mode.\n Resolves: RHEL-5295\n- Provide empty evp_properties section in main OpenSSL configuration file\n Resolves: RHEL-11439\n- Avoid implicit function declaration when building openssl\n Resolves: RHEL-1780\n- Forbid explicit curves when created via EVP_PKEY_fromdata\n Resolves: RHEL-5304\n- AES-SIV cipher implementation contains a bug that causes it to ignore empty\n associated data entries (CVE-2023-2975)\n Resolves: RHEL-5302\n- Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n Resolves: RHEL-5306\n- Excessive time spent checking DH q parameter value (CVE-2023-3817)\n Resolves: RHEL-5308\n- Fix incorrect cipher key and IV length processing (CVE-2023-5363)\n Resolves: RHEL-13251\n- Switch explicit FIPS indicator for RSA-OAEP to approved following\n clarification with CMVP\n Resolves: RHEL-14083\n- Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)\n Resolves: RHEL-14083\n- Add missing ECDH Public Key Check in FIPS mode\n Resolves: RHEL-15990\n- Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)\n Resolves: RHEL-15954\n\n[1:3.0.7-24]\n- Make FIPS module configuration more crypto-policies friendly\n Related: rhbz#2216256\n\n[1:3.0.7-23]\n- Add a workaround for lack of EMS in FIPS mode\n Resolves: rhbz#2216256\n\n[1:3.0.7-22]\n- Remove unsupported curves from nist_curves.\n Resolves: rhbz#2069336\n\n[1:3.0.7-21]\n- Remove the listing of brainpool curves in FIPS mode.\n Related: rhbz#2188180\n\n[1:3.0.7-20]\n- Fix possible DoS translating ASN.1 object identifiers\n Resolves: CVE-2023-2650\n- Release the DRBG in global default libctx early\n Resolves: rhbz#2211340\n\n[1:3.0.7-19]\n- Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode\n Resolves: rhbz#2169757\n\n[1:3.0.7-18]\n- Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode\n Resolves: rhbz#2160797\n\n[1:3.0.7-17]\n- Enforce using EMS in FIPS mode - better alerts\n Related: rhbz#2157951\n\n[1:3.0.7-16]\n- Upload new upstream sources without manually hobbling them.\n- Remove the hobbling script as it is redundant. It is now allowed to ship\n the sources of patented EC curves, however it is still made unavailable to use\n by compiling with the 'no-ec2m' Configure option. The additional forbidden\n curves such as P-160, P-192, wap-tls curves are manually removed by updating\n 0011-Remove-EC-curves.patch.\n- Enable Brainpool curves.\n- Apply the changes to ec_curve.c and ectest.c as a new patch\n 0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.\n- Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.\n- Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.\n Resolves: rhbz#2130618, rhbz#2188180\n\n[1:3.0.7-15]\n- Backport implicit rejection for RSA PKCS#1 v1.5 encryption\n Resolves: rhbz#2153471\n\n[1:3.0.7-14]\n- Input buffer over-read in AES-XTS implementation on 64 bit ARM\n Resolves: rhbz#2188554\n\n[1:3.0.7-13]\n- Enforce using EMS in FIPS mode\n Resolves: rhbz#2157951\n- Fix excessive resource usage in verifying X509 policy constraints\n Resolves: rhbz#2186661\n- Fix invalid certificate policies in leaf certificates check\n Resolves: rhbz#2187429\n- Certificate policy check not enabled\n Resolves: rhbz#2187431\n- OpenSSL rsa_verify_recover key length checks in FIPS mode\n Resolves: rhbz#2186819\n\n[1:3.0.7-12]\n- Change explicit FIPS indicator for RSA decryption to unapproved\n Resolves: rhbz#2179379\n\n[1:3.0.7-11]\n- Add missing reference to patchfile to add explicit FIPS indicator to RSA\n encryption and RSASVE and fix the gettable parameter list for the RSA\n asymmetric cipher implementation.\n Resolves: rhbz#2179379\n\n[1:3.0.7-10]\n- Add explicit FIPS indicator to RSA encryption and RSASVE\n Resolves: rhbz#2179379\n\n[1:3.0.7-9]\n- Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes\n Resolves: rhbz#2175864\n\n[1:3.0.7-8]\n- Fix Wpointer-sign compiler warning\n Resolves: rhbz#2178034\n\n[1:3.0.7-7]\n- Add explicit FIPS indicators to key derivation functions\n Resolves: rhbz#2175860 rhbz#2175864\n- Zeroize FIPS module integrity check MAC after check\n Resolves: rhbz#2175873\n- Add explicit FIPS indicator for IV generation in AES-GCM\n Resolves: rhbz#2175868\n- Add explicit FIPS indicator for PBKDF2, use test vector with FIPS-compliant\n salt in PBKDF2 FIPS self-test\n Resolves: rhbz#2178137\n- Limit RSA_NO_PADDING for encryption and signature in FIPS mode\n Resolves: rhbz#2178029\n- Pairwise consistency tests should use Digest+Sign/Verify\n Resolves: rhbz#2178034\n- Forbid DHX keys import in FIPS mode\n Resolves: rhbz#2178030\n- DH PCT should abort on failure\n Resolves: rhbz#2178039\n- Increase RNG seeding buffer size to 32\n Related: rhbz#2168224\n\n[1:3.0.7-6]\n- Fixes RNG slowdown in FIPS mode\n Resolves: rhbz#2168224\n\n[1:3.0.7-5]\n- Fixed X.509 Name Constraints Read Buffer Overflow\n Resolves: CVE-2022-4203\n- Fixed Timing Oracle in RSA Decryption\n Resolves: CVE-2022-4304\n- Fixed Double free after calling PEM_read_bio_ex\n Resolves: CVE-2022-4450\n- Fixed Use-after-free following BIO_new_NDEF\n Resolves: CVE-2023-0215\n- Fixed Invalid pointer dereference in d2i_PKCS7 functions\n Resolves: CVE-2023-0216\n- Fixed NULL dereference validating DSA public key\n Resolves: CVE-2023-0217\n- Fixed X.400 address type confusion in X.509 GeneralName\n Resolves: CVE-2023-0286\n- Fixed NULL dereference during PKCS7 data verification\n Resolves: CVE-2023-0401\n\n[1:3.0.7-4]\n- Disallow SHAKE in RSA-OAEP decryption in FIPS mode\n Resolves: rhbz#2142121\n\n[1:3.0.7-3]\n- Refactor OpenSSL fips module MAC verification\n Resolves: rhbz#2157965\n\n[1:3.0.7-2]\n- Various provider-related imrovements necessary for PKCS#11 provider correct operations\n Resolves: rhbz#2142517\n- We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream\n Resolves: rhbz#2133809\n- Removed recommended package for openssl-libs\n Resolves: rhbz#2093804\n- Adjusting include for the FIPS_mode macro\n Resolves: rhbz#2083879\n- Backport of ppc64le Montgomery multiply enhancement\n Resolves: rhbz#2130708\n- Fix explicit indicator for PSS salt length in FIPS mode when used with\n negative magic values\n Resolves: rhbz#2142087\n- Update change to default PSS salt length with patch state from upstream\n Related: rhbz#2142087\n\n[1:3.0.7-1]\n- Rebasing to OpenSSL 3.0.7\n Resolves: rhbz#2129063\n\n[1:3.0.1-44]\n- SHAKE-128/256 are not allowed with RSA in FIPS mode\n Resolves: rhbz#2144010\n- Avoid memory leaks in TLS\n Resolves: rhbz#2144008\n- FIPS RSA CRT tests must use correct parameters\n Resolves: rhbz#2144006\n- FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC\n Resolves: rhbz#2144017\n- Remove support for X9.31 signature padding in FIPS mode\n Resolves: rhbz#2144015\n- Add explicit indicator for SP 800-108 KDFs with short key lengths\n Resolves: rhbz#2144019\n- Add explicit indicator for HMAC with short key lengths\n Resolves: rhbz#2144000\n- Set minimum password length for PBKDF2 in FIPS mode\n Resolves: rhbz#2144003\n- Add explicit indicator for PSS salt length in FIPS mode\n Resolves: rhbz#2144012\n- Clamp default PSS salt length to digest size for FIPS 186-4 compliance\n Related: rhbz#2144012\n- Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode\n Resolves: rhbz#2145170\n\n[1:3.0.1-43]\n- CVE-2022-3602: X.509 Email Address Buffer Overflow\n- CVE-2022-3786: X.509 Email Address Buffer Overflow\n Resolves: CVE-2022-3602\n\nopenssl-fips-provider\n[3.0.7-6.0.1]\n- Drop OpenELA branding [Orabug: 37274593]\n- Add bundle with Oracle Linux 9 OpenSSL FIPS Provider module files [Orabug: 37274593]\n- Update extract-src.sh script to support non-hobbled openssl tarball [Orabug: 37274593]\n\n[3.0.7.openela.0.1]\n- Add OpenELA specific changes\n\n[3.0.7-6]\n- Try to fix an upgrade issue with pkg version numbers\n Resolves: RHEL-58662\n\n[3.0.7-5]\n- Add an empty metapackage and proper requires to correctly\n handle upgrades.\n Related: RHEL-32123\n\n[3.0.7-4]\n- Change subpackage names to avoid build gating issues\n Related: RHEL-32123\n\n[3.0.7-3]\n- Change tarball source contents\n- Rework file extraction process\n- Fixes debug packages\n Resolves: RHEL-32123" } ], "product_status": { "known_affected": [ "CSAFPID-0008" ] }, "title": "ELSA-2024-9333", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.2.2-6.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0008" ] } ] }, { "cve": "CVE-2024-26458", "notes": [ { "category": "description", "text": "[1.21.1-3.0.1]\n- Fixed race condition in krb5_set_password() [Orabug: 33609767]\n\n[1.21.1-3]\n- CVE-2024-37370 CVE-2024-37371\n Fix vulnerabilities in GSS message token handling\n Resolves: RHEL-45402 RHEL-45392" } ], "product_status": { "known_affected": [ "CSAFPID-0002" ] }, "title": "ELSA-2024-9331", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.21.1-3.0.1.el9 or later.", "product_ids": [ "CSAFPID-0002" ] } ] }, { "cve": "CVE-2024-28834", "notes": [ { "category": "description", "text": "[3.8.3-4_fips]\n- Add FIPS package change: add fips suffix to Release and\n set Epoch to 10 [Orabug: 35925409]\n- Update FIPS module name for Oracle Linux [Orabug: 35925409]\n\n[3.8.3-4]\n- Bump release to ensure el9 package is greater than el9_* packages\n\n[3.8.3-3]\n- Bump release to ensure el9 package is greater than el9_* packages\n\n[3.8.3-2]\n- Fix timing side-channel in deterministic ECDSA (RHEL-28959)\n- Fix potential crash during chain building/verification (RHEL-28954)\n\n[3.8.3-1]\n- Update to gnutls 3.8.3 (RHEL-14891)\n\n[3.8.2-3]\n- Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.3 as well (RHEL-18498)\n\n[3.8.2-2]\n- Bump nettle dependency to 3.9.1\n- Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)\n\n[3.8.2-1]\n- Update to gnutls 3.8.2 (RHEL-14891)" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2024-12364", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 10:3.8.3-4.el9_4_fips or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2024-34459", "notes": [ { "category": "description", "text": "[2.9.13-14.1]\n- Fix CVE-2024-34459 (RHEL-177882)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2026-28254", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-14.el9_8.1 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2024-3596", "notes": [ { "category": "description", "text": "[1.21.1-4.0.1]\n- Fixed race condition in krb5_set_password() [Orabug: 33609767]\n\n[1.21.1-4]\n- libkrad: implement support for Message-Authenticator (CVE-2024-3596)\n Resolves: RHEL-55423\n- Fix various issues detected by static analysis\n Resolves: RHEL-58216\n- Remove RSA protocol for PKINIT\n Resolves: RHEL-15323" } ], "product_status": { "known_affected": [ "CSAFPID-0002" ] }, "title": "ELSA-2024-9474", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.21.1-4.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0002" ] } ] }, { "cve": "CVE-2024-4741", "notes": [ { "category": "description", "text": "openssl\n[1:3.2.2-6.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.2.2-6]\n- rebuilt\n Related: RHEL-55339\n\n[1:3.2.2-5]\n- Fix CVE-2024-6119: Possible denial of service in X.509 name checks\n Resolves: RHEL-55339\n\n[1:3.2.2-4]\n- Fix CVE-2024-5535: SSL_select_next_proto buffer overread\n Resolves: RHEL-45657\n\n[1:3.2.2-3]\n- Replace HKDF backward compatibility patch with the official one\n Related: RHEL-40823\n\n[1:3.2.2-2]\n- Add workaround for EVP_PKEY_CTX_add1_hkdf_info with older providers\n Resolves: RHEL-40823\n\n[1:3.2.2-1]\n- Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,\n and Minerva attack.\n Resolves: RHEL-32148\n Resolves: RHEL-36792\n Resolves: RHEL-38514\n Resolves: RHEL-39111\n\n[1:3.2.1-2]\n- Update RNG changing for FIPS purpose\n Resolves: RHEL-35380\n\n[1:3.2.1-1]\n- Rebasing OpenSSL to 3.2.1\n Resolves: RHEL-26271\n\n[1:3.0.7-27]\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n Related: RHEL-23474\n\n[1:3.0.7-26]\n- Avoid implicit function declaration when building openssl\n Related: RHEL-1780\n- In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails\n Resolves: RHEL-17104\n- Add a directory for OpenSSL providers configuration\n Resolves: RHEL-17193\n- Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context\n Resolves: RHEL-19515\n- POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)\n Resolves: RHEL-21151\n- Excessive time spent checking invalid RSA public keys (CVE-2023-6237)\n Resolves: RHEL-21654\n- SSL ECDHE Kex fails when pkcs11 engine is set in config file\n Resolves: RHEL-20249\n- Denial of service via null dereference in PKCS#12\n Resolves: RHEL-22486\n- Use certified FIPS module instead of freshly built one in Red Hat distribution\n Resolves: RHEL-23474\n\n[1:3.0.7-25]\n- Provide relevant diagnostics when FIPS checksum is corrupted\n Resolves: RHEL-5317\n- Don't limit using SHA1 in KDFs in non-FIPS mode.\n Resolves: RHEL-5295\n- Provide empty evp_properties section in main OpenSSL configuration file\n Resolves: RHEL-11439\n- Avoid implicit function declaration when building openssl\n Resolves: RHEL-1780\n- Forbid explicit curves when created via EVP_PKEY_fromdata\n Resolves: RHEL-5304\n- AES-SIV cipher implementation contains a bug that causes it to ignore empty\n associated data entries (CVE-2023-2975)\n Resolves: RHEL-5302\n- Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n Resolves: RHEL-5306\n- Excessive time spent checking DH q parameter value (CVE-2023-3817)\n Resolves: RHEL-5308\n- Fix incorrect cipher key and IV length processing (CVE-2023-5363)\n Resolves: RHEL-13251\n- Switch explicit FIPS indicator for RSA-OAEP to approved following\n clarification with CMVP\n Resolves: RHEL-14083\n- Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)\n Resolves: RHEL-14083\n- Add missing ECDH Public Key Check in FIPS mode\n Resolves: RHEL-15990\n- Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)\n Resolves: RHEL-15954\n\n[1:3.0.7-24]\n- Make FIPS module configuration more crypto-policies friendly\n Related: rhbz#2216256\n\n[1:3.0.7-23]\n- Add a workaround for lack of EMS in FIPS mode\n Resolves: rhbz#2216256\n\n[1:3.0.7-22]\n- Remove unsupported curves from nist_curves.\n Resolves: rhbz#2069336\n\n[1:3.0.7-21]\n- Remove the listing of brainpool curves in FIPS mode.\n Related: rhbz#2188180\n\n[1:3.0.7-20]\n- Fix possible DoS translating ASN.1 object identifiers\n Resolves: CVE-2023-2650\n- Release the DRBG in global default libctx early\n Resolves: rhbz#2211340\n\n[1:3.0.7-19]\n- Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode\n Resolves: rhbz#2169757\n\n[1:3.0.7-18]\n- Use OAEP padding and aes-128-cbc by default in cms command in FIPS mode\n Resolves: rhbz#2160797\n\n[1:3.0.7-17]\n- Enforce using EMS in FIPS mode - better alerts\n Related: rhbz#2157951\n\n[1:3.0.7-16]\n- Upload new upstream sources without manually hobbling them.\n- Remove the hobbling script as it is redundant. It is now allowed to ship\n the sources of patented EC curves, however it is still made unavailable to use\n by compiling with the 'no-ec2m' Configure option. The additional forbidden\n curves such as P-160, P-192, wap-tls curves are manually removed by updating\n 0011-Remove-EC-curves.patch.\n- Enable Brainpool curves.\n- Apply the changes to ec_curve.c and ectest.c as a new patch\n 0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.\n- Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.\n- Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.\n Resolves: rhbz#2130618, rhbz#2188180\n\n[1:3.0.7-15]\n- Backport implicit rejection for RSA PKCS#1 v1.5 encryption\n Resolves: rhbz#2153471\n\n[1:3.0.7-14]\n- Input buffer over-read in AES-XTS implementation on 64 bit ARM\n Resolves: rhbz#2188554\n\n[1:3.0.7-13]\n- Enforce using EMS in FIPS mode\n Resolves: rhbz#2157951\n- Fix excessive resource usage in verifying X509 policy constraints\n Resolves: rhbz#2186661\n- Fix invalid certificate policies in leaf certificates check\n Resolves: rhbz#2187429\n- Certificate policy check not enabled\n Resolves: rhbz#2187431\n- OpenSSL rsa_verify_recover key length checks in FIPS mode\n Resolves: rhbz#2186819\n\n[1:3.0.7-12]\n- Change explicit FIPS indicator for RSA decryption to unapproved\n Resolves: rhbz#2179379\n\n[1:3.0.7-11]\n- Add missing reference to patchfile to add explicit FIPS indicator to RSA\n encryption and RSASVE and fix the gettable parameter list for the RSA\n asymmetric cipher implementation.\n Resolves: rhbz#2179379\n\n[1:3.0.7-10]\n- Add explicit FIPS indicator to RSA encryption and RSASVE\n Resolves: rhbz#2179379\n\n[1:3.0.7-9]\n- Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes\n Resolves: rhbz#2175864\n\n[1:3.0.7-8]\n- Fix Wpointer-sign compiler warning\n Resolves: rhbz#2178034\n\n[1:3.0.7-7]\n- Add explicit FIPS indicators to key derivation functions\n Resolves: rhbz#2175860 rhbz#2175864\n- Zeroize FIPS module integrity check MAC after check\n Resolves: rhbz#2175873\n- Add explicit FIPS indicator for IV generation in AES-GCM\n Resolves: rhbz#2175868\n- Add explicit FIPS indicator for PBKDF2, use test vector with FIPS-compliant\n salt in PBKDF2 FIPS self-test\n Resolves: rhbz#2178137\n- Limit RSA_NO_PADDING for encryption and signature in FIPS mode\n Resolves: rhbz#2178029\n- Pairwise consistency tests should use Digest+Sign/Verify\n Resolves: rhbz#2178034\n- Forbid DHX keys import in FIPS mode\n Resolves: rhbz#2178030\n- DH PCT should abort on failure\n Resolves: rhbz#2178039\n- Increase RNG seeding buffer size to 32\n Related: rhbz#2168224\n\n[1:3.0.7-6]\n- Fixes RNG slowdown in FIPS mode\n Resolves: rhbz#2168224\n\n[1:3.0.7-5]\n- Fixed X.509 Name Constraints Read Buffer Overflow\n Resolves: CVE-2022-4203\n- Fixed Timing Oracle in RSA Decryption\n Resolves: CVE-2022-4304\n- Fixed Double free after calling PEM_read_bio_ex\n Resolves: CVE-2022-4450\n- Fixed Use-after-free following BIO_new_NDEF\n Resolves: CVE-2023-0215\n- Fixed Invalid pointer dereference in d2i_PKCS7 functions\n Resolves: CVE-2023-0216\n- Fixed NULL dereference validating DSA public key\n Resolves: CVE-2023-0217\n- Fixed X.400 address type confusion in X.509 GeneralName\n Resolves: CVE-2023-0286\n- Fixed NULL dereference during PKCS7 data verification\n Resolves: CVE-2023-0401\n\n[1:3.0.7-4]\n- Disallow SHAKE in RSA-OAEP decryption in FIPS mode\n Resolves: rhbz#2142121\n\n[1:3.0.7-3]\n- Refactor OpenSSL fips module MAC verification\n Resolves: rhbz#2157965\n\n[1:3.0.7-2]\n- Various provider-related imrovements necessary for PKCS#11 provider correct operations\n Resolves: rhbz#2142517\n- We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream\n Resolves: rhbz#2133809\n- Removed recommended package for openssl-libs\n Resolves: rhbz#2093804\n- Adjusting include for the FIPS_mode macro\n Resolves: rhbz#2083879\n- Backport of ppc64le Montgomery multiply enhancement\n Resolves: rhbz#2130708\n- Fix explicit indicator for PSS salt length in FIPS mode when used with\n negative magic values\n Resolves: rhbz#2142087\n- Update change to default PSS salt length with patch state from upstream\n Related: rhbz#2142087\n\n[1:3.0.7-1]\n- Rebasing to OpenSSL 3.0.7\n Resolves: rhbz#2129063\n\n[1:3.0.1-44]\n- SHAKE-128/256 are not allowed with RSA in FIPS mode\n Resolves: rhbz#2144010\n- Avoid memory leaks in TLS\n Resolves: rhbz#2144008\n- FIPS RSA CRT tests must use correct parameters\n Resolves: rhbz#2144006\n- FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC\n Resolves: rhbz#2144017\n- Remove support for X9.31 signature padding in FIPS mode\n Resolves: rhbz#2144015\n- Add explicit indicator for SP 800-108 KDFs with short key lengths\n Resolves: rhbz#2144019\n- Add explicit indicator for HMAC with short key lengths\n Resolves: rhbz#2144000\n- Set minimum password length for PBKDF2 in FIPS mode\n Resolves: rhbz#2144003\n- Add explicit indicator for PSS salt length in FIPS mode\n Resolves: rhbz#2144012\n- Clamp default PSS salt length to digest size for FIPS 186-4 compliance\n Related: rhbz#2144012\n- Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode\n Resolves: rhbz#2145170\n\n[1:3.0.1-43]\n- CVE-2022-3602: X.509 Email Address Buffer Overflow\n- CVE-2022-3786: X.509 Email Address Buffer Overflow\n Resolves: CVE-2022-3602\n\nopenssl-fips-provider\n[3.0.7-6.0.1]\n- Drop OpenELA branding [Orabug: 37274593]\n- Add bundle with Oracle Linux 9 OpenSSL FIPS Provider module files [Orabug: 37274593]\n- Update extract-src.sh script to support non-hobbled openssl tarball [Orabug: 37274593]\n\n[3.0.7.openela.0.1]\n- Add OpenELA specific changes\n\n[3.0.7-6]\n- Try to fix an upgrade issue with pkg version numbers\n Resolves: RHEL-58662\n\n[3.0.7-5]\n- Add an empty metapackage and proper requires to correctly\n handle upgrades.\n Related: RHEL-32123\n\n[3.0.7-4]\n- Change subpackage names to avoid build gating issues\n Related: RHEL-32123\n\n[3.0.7-3]\n- Change tarball source contents\n- Rework file extraction process\n- Fixes debug packages\n Resolves: RHEL-32123" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0056" ] }, "title": "ELSA-2024-9333", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.2.2-6.0.1.el9_5 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0056" ] } ] }, { "cve": "CVE-2024-50602", "notes": [ { "category": "description", "text": "[2.5.0-3.1]\n- Fix CVE-2024-50602\n- Resolves: RHEL-65064\n\n[2.5.0-3]\n- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492\n- Resolves: RHEL-56761\n- Resolves: RHEL-57520\n- Resolves: RHEL-57511" } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "title": "ELSA-2024-9541", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-3.el9_5.1 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2024-5642", "notes": [ { "category": "description", "text": "[3.9.25-2.0.1]\n- Remove upstream URL reference\n\n[3.9.25-2]\n- Move _sysconfigdata_d_linux*.py to the debug subpackage\n\n[3.9.25-1]\n- Update to Python 3.9.25\n\n[3.9.24-1]\n- Update to Python 3.9.24" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2025-23342", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-2.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2024-56433", "notes": [ { "category": "description", "text": "[2:4.9-15]\n- nss.c: shadow_logfd to stderr. Resolves: RHEL-83431\n- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940" } ], "product_status": { "known_affected": [ "CSAFPID-0059" ] }, "title": "ELSA-2025-20559-0", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:4.9-15.el9 or later.", "product_ids": [ "CSAFPID-0059" ] } ] }, { "cve": "CVE-2024-6119", "notes": [ { "category": "description", "text": "[3.0.7-28.0.1_fips]\n- Replace upstream references in fips man pages [Orabug: 35824276]\n- Add FIPS package change: add fips suffix to Release and\n set Epoch to 10 [Orabug: 35824276]\n- Update FIPS module name and remove upstream references from\n fips_module_indicators manpage [Orabug: 35824276]\n\n[3.0.7-28.0.1]\n- Drop OpenELA branding, apply Oracle branding patches\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.0.7-28]\n- Patch for CVE-2024-6119\n Resolves: RHEL-55340" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2024-12675", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 10:3.0.7-28.0.1.el9_4_fips or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2024-6232", "notes": [ { "category": "description", "text": "[3.9.18-3.6]\n- Fix: CVE-2024-6232\n- Resolves: RHEL-57421" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2024-8446", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.18-3.el9_4.6 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2024-8088", "notes": [ { "category": "description", "text": "[3.9.19-8]\n- Security fix for CVE-2024-8088\nResolves: RHEL-55967\n\n[3.9.19-7]\n- Security fix for CVE-2024-6923\nResolves: RHEL-53045\n\n[3.9.19-6]\n- Ensure 3rd party extension modules for the debug build use the -O0 flag\n\n[3.9.19-5]\n- Properly propagate the optimization flags to C extensions\n\n[3.9.19-4]\n- Build Python with -O3\n- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3\n\n[3.9.19-3]\n- Security fix for CVE-2024-4032\nResolves: RHEL-44107\n\n[3.9.19-2]\n- Enable importing of hash-based .pyc files under FIPS mode\nResolves: RHEL-40750\n\n[3.9.19-1]\n- Update to 3.9.19\n- Security fixes for CVE-2023-6597 and CVE-2024-0450\n- Fix tests for XMLPullParser with Expat with fixed CVE\nResolves: RHEL-33679, RHEL-33691" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2024-9371", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.19-8.el9 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2024-8176", "notes": [ { "category": "description", "text": "[2.5.0-3.3]\n- Improve fix for CVE-2024-8176\n- Resolves: RHEL-57488\n\n[2.5.0-3.2]\n- Fix CVE-2024-8176\n- Resolves: RHEL-57488" } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "title": "ELSA-2025-3531", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-3.el9_5.3 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2025-0395", "notes": [ { "category": "description", "text": "[2.34-125.0.1.8]\n- Forward-port Oracle patches for ol9-u5 (glibc-2.34-125.0.1.8)\n Reviewed by: David Faust \n Oracle history:" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2025-4244", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-125.0.1.el9_5.8 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2025-0938", "notes": [ { "category": "description", "text": "[3.9.21-2]\n- Security fix for CVE-2025-0938\nResolves: RHEL-77263" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2025-6977", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.21-2.el9 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2025-11187", "notes": [ { "category": "description", "text": "[3.5.1-7.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[3.5.1.openela.0.1]\n- Add OpenELA specific changes\n\n[1:3.5.1-7]\n- Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469\n CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420\n CVE-2025-69421 CVE-2026-22795 CVE-2026-22796\n Resolves: RHEL-142068\n Resolves: RHEL-142002\n Resolves: RHEL-142055\n Resolves: RHEL-142051\n Resolves: RHEL-142047\n Resolves: RHEL-142043\n Resolves: RHEL-142039\n Resolves: RHEL-142035\n Resolves: RHEL-142031\n Resolves: RHEL-142011\n Resolves: RHEL-142027\n Resolves: RHEL-142023\n\n[1:3.5.1-6]\n- Fix AES/GCM ppc64le encrypt/decrypt\n Resolves: RHEL-139131" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2026-1473", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.1-7.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2025-12084", "notes": [ { "category": "description", "text": "[3.9.25-3.0.1]\n- Remove upstream URL reference\n\n[3.9.25-3]\n- Security fix for CVE-2025-12084\nResolves: RHEL-135897" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-1478", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-3.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2025-13151", "notes": [ { "category": "description", "text": "[4.16.0-10]\n- Backport the fix for CVE-2025-13151 (RHEL-139568)" } ], "product_status": { "known_affected": [ "CSAFPID-0041" ] }, "title": "ELSA-2026-28253", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:4.16.0-10.el9_8 or later.", "product_ids": [ "CSAFPID-0041" ] } ] }, { "cve": "CVE-2025-13601", "notes": [ { "category": "description", "text": "[2.68.4-18.1]\n- Add patch for CVE-2025-13601" } ], "product_status": { "known_affected": [ "CSAFPID-0023" ] }, "title": "ELSA-2026-0936", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-18.el9_7.1 or later.", "product_ids": [ "CSAFPID-0023" ] } ] }, { "cve": "CVE-2025-14087", "notes": [ { "category": "description", "text": "[2.68.4-18.2]\n- Add patch for CVE-2025-14087 and CVE-2025-14512" } ], "product_status": { "known_affected": [ "CSAFPID-0023" ] }, "title": "ELSA-2026-15971", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-18.el9_7.2 or later.", "product_ids": [ "CSAFPID-0023" ] } ] }, { "cve": "CVE-2025-14104", "notes": [ { "category": "description", "text": "[2.37.4-21.0.1]\n- Orabug 35995271 - report lost loop device" } ], "product_status": { "known_affected": [ "CSAFPID-0045", "CSAFPID-0046", "CSAFPID-0047", "CSAFPID-0048", "CSAFPID-0049", "CSAFPID-0050", "CSAFPID-0051" ] }, "title": "ELSA-2026-1913", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.37.4-21.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0045", "CSAFPID-0046", "CSAFPID-0047", "CSAFPID-0048", "CSAFPID-0049", "CSAFPID-0050", "CSAFPID-0051" ] } ] }, { "cve": "CVE-2025-14831", "notes": [ { "category": "description", "text": "[3.8.3-10]\n- Fix PKCS#11 token initialization label overflow (CVE-2025-9820)\n- Fix name constraint processing performance issue (CVE-2025-14831)" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2026-4188", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.8.3-10.el9_7 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2025-15281", "notes": [ { "category": "description", "text": "[2.34-231.0.1.10]\n- Forward-port Oracle patches for ol9-u7\n Reviewed-by: [TBD]\n Oracle history:\n November-14-2025 Cupertino Miranda - 2.34-231.0.1.2\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-24-2025 Cupertino Miranda - 2.34-231.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-8-2025 Jose E. Marchesi - 2.34-228.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-217.0.1\n - Forward-port Oralce patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-168.0.1.23\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-30-2025 Cupertino Miranda - 2.34-168.0.1.20\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-9-2025 Cupertino Miranda - 2.34-168.0.1.19\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: David Faust \n May-17-2025 Cupertino Miranda - 2.34-168.0.1.14\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n March-6-2025 Cupertino Miranda - 2.34-168.0.1\n - Forward-port Oracle patches for ol9-u6\n Reviewed by: Jose E. Marchesi \n February-18-2025 Cupertino Miranda - 2.34-160.0.1\n - Forward-port Oracle patches for ol9-u6 DP\n Reviewed by: Jose E. Marchesi \n November-12-2024 Cupertino Miranda - 2.34-125.0.1.1\n - Forward-port Oracle patches for ol9-u5\n Reviewed by: Jose E. Marchesi \n October-1-2024 Cupertino Miranda - 2.34-100.0.1.4\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n August-26-2024 Jose E. Marchesi - 2.34-100.0.1.3\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n May-24-2024 Cupertino Miranda - 2.34-100.0.1.2\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Jose E. Marchesi \n April-30-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Indu Bhagat \n March-28-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4-beta\n Reviewed by: Jose E. Marchesi \n March 15 2024 Cupertino Miranda - 2.34-83.0.2.12\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n February-26-2024 Cupertino Miranda - 2.34-83.0.2.7\n - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family\n Reviewed by: Jose E. Marchesi \n October-24-2023 Cupertino Miranda - 2.34-83.0.1.7\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n October-4-2023 Cupertino Miranda - 2.34-82.0.1\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n April-18-2023 Cupertino Miranda - 2.34-60.0.2\n - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks\n - Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n can be used for stack allocation.\n - In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n 0, glibc will madvise the kernel not to use allow hugepages for stack\n allocations.\n Reviewed by: Jose E. Marchesi \n March-28-2023 Cupertino Miranda - 2.34-60.0.1\n - Merge Oracle patches for ol9-u2 beta\n Reviewed by: Jose E. Marchesi \n September-28-2022 Patrick McGehearty - 2.34-40.0.1\n - Merge Oracle patches for ol9-u1 beta\n Reviewed by: Jose E. Marchesi \n April-25-2022 Patrick McGehearty - 2.34-28.0.1\n - Merge Oracle patches with ol9 beta\n - Reviewed-by: Jose E. Marchesi \n\n[2.34-231.10]\n- Handle FUSE_GETXATTR during FUSE FS mount in tests (RHEL-145151)\n\n[2.34-231.9]\n- CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-144079)\n\n[2.34-231.8]\n- Ignore LD_PROFILE in SUID binaries (RHEL-142195)\n\n[2.34-231.7]\n- Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142195)\n\n[2.34-231.6]\n- CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141851)\n\n[2.34-231.5]\n- patch-git: Avoid trailing tabs in changelog (RHEL-141921)\n\n[2.34-231.4]\n- CVE-2026-0861: Check for alignment overflow in memalign functions\n (RHEL-141738)\n\n[2.34-231.3]\n- patch-git: Add auto-generated/ prefix to Source: files (RHEL-126050)\n\n[2.34-231.2]\n- patch-git: Import from rhel-9-main and turn on (RHEL-117087)" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2026-2786", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-231.0.1.el9_7.10 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2025-15366", "notes": [ { "category": "description", "text": "[3.9.25-3.0.1.el9_7.1]\n- Remove upstream URL reference\n\n[3.9.25-3.1]\n- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299\nResolves: RHEL-143108 RHEL-143169 RHEL-144893" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-4168", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-3.0.1.el9_7.1 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2025-24528", "notes": [ { "category": "description", "text": "[1.21.1-6.0.1]\n- Fixed race condition in krb5_set_password() [Orabug: 33609767]\n\n[1.21.1-6]\n- Prevent overflow when calculating ulog block size (CVE-2025-24528)\n Resolves: RHEL-76759\n\n[1.21.1-5]\n- Support PKCS11 EC client certs in PKINIT\n Resolves: RHEL-74374\n- kdb5_util: fix DB entry flags on modification\n Resolves: RHEL-56059\n- Add ECDH support for PKINIT (RFC5349)\n Resolves: RHEL-4902" } ], "product_status": { "known_affected": [ "CSAFPID-0002" ] }, "title": "ELSA-2025-7067", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.21.1-6.0.1.el9 or later.", "product_ids": [ "CSAFPID-0002" ] } ] }, { "cve": "CVE-2025-24928", "notes": [ { "category": "description", "text": "[2.9.13-6.2]\n- Fix CVE-2024-56171 (RHEL-80128)\n- Fix CVE-2025-24928 (RHEL-80143)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-2679", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-6.el9_5.2 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2025-25724", "notes": [ { "category": "description", "text": "[3.5.3-5]\n- Resolves: CVE-2025-25724" } ], "product_status": { "known_affected": [ "CSAFPID-0009" ] }, "title": "ELSA-2025-9431", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.5.3-5.el9_6 or later.", "product_ids": [ "CSAFPID-0009" ] } ] }, { "cve": "CVE-2025-26465", "notes": [ { "category": "description", "text": "[8.7p1-45.0.2]\n- Upstream references found with /usr/bin/ssh [Orabug: 37814929]\n\n[8.7p1-45.0.1]\n- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]\n- Update upstream references [Orabug: 36564626]\n\n[8.7p1-45]\n- Fix missing error codes set and invalid error code checks in OpenSSH. It\n prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS\n is on (CVE-2025-26465).\n Resolves: RHEL-78700\n\n[8.7p1-44]\n- Add extra help information on ssh early failure\n Resolves: RHEL-33809\n- Provide details on crypto error instead of 'error in libcrypto'\n Resolves: RHEL-52293\n- Allow duplicate Subsystem directive\n Resolves: RHEL-47112" } ], "product_status": { "known_affected": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] }, "title": "ELSA-2025-6993", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:8.7p1-45.0.2.el9 or later.", "product_ids": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2025-32414", "notes": [ { "category": "description", "text": "[2.9.13-12]\n- Fix CVE-2025-32415 (RHEL-100182)\n- Fix CVE-2025-32414 (RHEL-99873)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-13428", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-12.el9_6 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2025-32988", "notes": [ { "category": "description", "text": "[3.8.3-6.2_fips]\n- Add FIPS package change: add fips suffix to Release and\n set Epoch to 10 [Orabug: 35925409]\n- Update FIPS module name for Oracle Linux [Orabug: 35925409]\n\n[3.8.3-6.2]\n- key_update: rework the rekeying logic (RHEL-107498)\n\n[3.8.3-6.1]\n- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2025-20606", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 10:3.8.3-6.el9_6.2_fips or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2025-32989", "notes": [ { "category": "description", "text": "[3.8.3-6.2]\n- key_update: rework the rekeying logic (RHEL-107498)\n\n[3.8.3-6.1]\n- Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2025-16116", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.8.3-6.el9_6.2 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2025-3576", "notes": [ { "category": "description", "text": "[1.21.1-8.0.1]\n- Fixed race condition in krb5_set_password() [Orabug: 33609767]\n\n[1.21.1-9]\n- Do not block HMAC-MD4/5 in FIPS mode\n Resolves: RHEL-88704\n- Don't issue RC4 session keys by default (CVE-2025-3576)\n Resolves: RHEL-88048\n- Add PKINIT paChecksum2 from MS-PKCA v20230920\n Resolves: RHEL-82647\n\n[1.21.1-7]\n- Add dedicated tests sub-package" } ], "product_status": { "known_affected": [ "CSAFPID-0002" ] }, "title": "ELSA-2025-9430", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.21.1-8.0.1.el9_6 or later.", "product_ids": [ "CSAFPID-0002" ] } ] }, { "cve": "CVE-2025-4373", "notes": [ { "category": "description", "text": "[2.68.4-16.2]\n- Add patches for CVE-2024-52533 and CVE-2025-4373\n- Update GDateTime test for new tzdata\n- Resolves: RHEL-94290\n- Resolves: RHEL-102845" } ], "product_status": { "known_affected": [ "CSAFPID-0023" ] }, "title": "ELSA-2025-11140", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-16.el9_6.2 or later.", "product_ids": [ "CSAFPID-0023" ] } ] }, { "cve": "CVE-2025-45582", "notes": [ { "category": "description", "text": "[2:1.34-9]\n- Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277\n also, fix another tiny mistake in the patch (w/o visible consequences)\n\n[2:1.34-8]\n- Backport upstream changes to jailify extraction directory\n Includes related gnulib changes to add openat2\n Fixes CVE-2025-45582" } ], "product_status": { "known_affected": [ "CSAFPID-0042" ] }, "title": "ELSA-2026-0067", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:1.34-9.el9_7 or later.", "product_ids": [ "CSAFPID-0042" ] } ] }, { "cve": "CVE-2025-4598", "notes": [ { "category": "description", "text": "[252-51.0.2]\n- coredump: use %d in kernel core pattern - CVE-2025-4598" } ], "product_status": { "known_affected": [ "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012", "CSAFPID-0013" ] }, "title": "ELSA-2025-20344", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:252-51.0.2.el9 or later.", "product_ids": [ "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012", "CSAFPID-0013" ] } ] }, { "cve": "CVE-2025-47268", "notes": [ { "category": "description", "text": "[20210202-11.0.1.1]\n- Upstream backport 'ping: Add SA_RESTART to sa_flags' [Orabug: 34573399]\n\n[20210202-11.1]\n- Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94335)\n\n[20210202-11]\n- ping: Fix ping6 binding to VRF and address (RHEL-57734)\n\n[20210202-10]\n- arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)\n- arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)\n- ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)\n- ping: Fix socket error reporting (RHEL-4608)" } ], "product_status": { "known_affected": [ "CSAFPID-0038" ] }, "title": "ELSA-2025-9432", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:20210202-11.0.1.el9_6.1 or later.", "product_ids": [ "CSAFPID-0038" ] } ] }, { "cve": "CVE-2025-47273", "notes": [ { "category": "description", "text": "[53.0.0-13.1]\n- Security fix for CVE-2025-47273\nResolves: RHEL-96807" } ], "product_status": { "known_affected": [ "CSAFPID-0031" ] }, "title": "ELSA-2025-10407", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:53.0.0-13.el9_6.1 or later.", "product_ids": [ "CSAFPID-0031" ] } ] }, { "cve": "CVE-2025-4802", "notes": [ { "category": "description", "text": "[2.34-168.0.1.19]\n- Forward-port Oracle patches for ol9-u6\n Reviewed-by: David Faust \n Oracle history:" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2025-8655", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-168.0.1.el9_6.19 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2025-4877", "notes": [ { "category": "description", "text": "[0.10.4-18]\n- Resolves: RHEL-150661\n- Resolves: CVE-2025-4877\n- Resolves: CVE-2025-4878\n- Resolves: CVE-2025-5351\n- Resolves: CVE-2025-8114\n- Resolves: CVE-2025-8277\n- Resolves: CVE-2026-0964\n- Resolves: CVE-2026-0965\n- Resolves: CVE-2026-0966\n- Resolves: CVE-2026-0967\n- Resolves: CVE-2026-0968" } ], "product_status": { "known_affected": [ "CSAFPID-0039", "CSAFPID-0040" ] }, "title": "ELSA-2026-18683", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.10.4-18.el9 or later.", "product_ids": [ "CSAFPID-0039", "CSAFPID-0040" ] } ] }, { "cve": "CVE-2025-48964", "notes": [ { "category": "description", "text": "[20210202-11.0.1.3]\n- Upstream backport 'ping: Add SA_RESTART to sa_flags' [Orabug: 34573399]\n\n[20210202-11.3]\n- Bump release\n\n[20210202-11.2]\n- Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112001)\n\n[20210202-11.1]\n- Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94335)\n\n[20210202-11]\n- ping: Fix ping6 binding to VRF and address (RHEL-57734)\n\n[20210202-10]\n- arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)\n- arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)\n- ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)\n- ping: Fix socket error reporting (RHEL-4608)" } ], "product_status": { "known_affected": [ "CSAFPID-0038" ] }, "title": "ELSA-2025-17558", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:20210202-11.0.1.el9_6.3 or later.", "product_ids": [ "CSAFPID-0038" ] } ] }, { "cve": "CVE-2025-5278", "notes": [ { "category": "description", "text": "[8.32-41.0.1]\n- clean up empty file if cp is failed [Orabug 15973168]\n\n[9.5-8]\n- CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)" } ], "product_status": { "known_affected": [ "CSAFPID-0052", "CSAFPID-0053" ] }, "title": "ELSA-2026-28911", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:8.32-41.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0052", "CSAFPID-0053" ] } ] }, { "cve": "CVE-2025-5318", "notes": [ { "category": "description", "text": "[0.10.4-15]\n- Rebuild due to broken build auto-tagging\n\n[0.10.4-14]\n- Fix CVE-2025-5318\n Resolves: RHEL-111730" } ], "product_status": { "known_affected": [ "CSAFPID-0039", "CSAFPID-0040" ] }, "title": "ELSA-2025-18275", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.10.4-15.el9_6 or later.", "product_ids": [ "CSAFPID-0039", "CSAFPID-0040" ] } ] }, { "cve": "CVE-2025-53905", "notes": [ { "category": "description", "text": "[8.2.2637-23.0.1]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-23]\n- RHEL-112005 CVE-2025-53905 vim: Vim path traversial\n- RHEL-112009 CVE-2025-53906 vim: Vim path traversal" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2025-20945", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-23.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2025-53906", "notes": [ { "category": "description", "text": "[8.2.2637-22.0.1.1]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-22.1]\n- RHEL-112006 CVE-2025-53905 vim: Vim path traversial\n- RHEL-112010 CVE-2025-53906 vim: Vim path traversal\n\n[2:8.2.2637-22]\n- RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim\n\n[2:8.2.2637-21]\n- RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2025-17742", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-22.0.1.el9_6.1 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2025-5702", "notes": [ { "category": "description", "text": "[2.34-168.0.1.20]\n- Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n Oracle history:" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2025-9877", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-168.0.1.el9_6.20 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2025-5914", "notes": [ { "category": "description", "text": "[3.5.3-6]\n- Resolves: CVE-2025-5914" } ], "product_status": { "known_affected": [ "CSAFPID-0009" ] }, "title": "ELSA-2025-14130", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.5.3-6.el9_6 or later.", "product_ids": [ "CSAFPID-0009" ] } ] }, { "cve": "CVE-2025-59375", "notes": [ { "category": "description", "text": "[2.5.0-5.1]\n- Fix CVE-2025-59375\n- Resolves: RHEL-114644" } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "title": "ELSA-2025-22175", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-5.el9_7.1 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2025-5987", "notes": [ { "category": "description", "text": "[0.10.4-17]\n- Bump spec to resolve build tagging issues\n\n[0.10.4-16]\n- Fix CVE-2025-5987\n Resolves: RHEL-130051\n- Workaround sshd failure rate limiting in tests\n Resolves: RHEL-135506" } ], "product_status": { "known_affected": [ "CSAFPID-0039", "CSAFPID-0040" ] }, "title": "ELSA-2025-23483", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.10.4-17.el9_7 or later.", "product_ids": [ "CSAFPID-0039", "CSAFPID-0040" ] } ] }, { "cve": "CVE-2025-6020", "notes": [ { "category": "description", "text": "[1.5.1-26.0.1]\n- pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534]\n\n[1.5.1-26]\n- pam_namespace: fix potential privilege escalation.\n Resolves: CVE-2025-6020 and RHEL-96729" } ], "product_status": { "known_affected": [ "CSAFPID-0001" ] }, "title": "ELSA-2025-15099", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.5.1-26.0.1.el9_6 or later.", "product_ids": [ "CSAFPID-0001" ] } ] }, { "cve": "CVE-2025-6021", "notes": [ { "category": "description", "text": "[2.9.13-10]\n- Fix CVE-2025-6021 (RHEL-96507)\n- Fix CVE-2025-49794 (RHEL-96405)\n- Fix CVE-2025-49796 (RHEL-96431)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-10699", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-10.el9_6 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2025-6170", "notes": [ { "category": "description", "text": "[2.9.13-14.2]\n- Fix CVE-2025-6170 (RHEL-182016)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2026-39317", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-14.el9_8.2 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2025-6176", "notes": [ { "category": "description", "text": "[1.0.9-9]\n- Resolves: RHEL-133995\n Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy\n\n[1.0.9-8]\n- Resolves: RHEL-133995\n CVE-2025-6176 Brotli decompression bomb DoS in scrapy" } ], "product_status": { "known_affected": [ "CSAFPID-0021" ] }, "title": "ELSA-2026-2042", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.0.9-9.el9_7 or later.", "product_ids": [ "CSAFPID-0021" ] } ] }, { "cve": "CVE-2025-61984", "notes": [ { "category": "description", "text": "[8.7p1-47.0.1]\n- Upstream references found with /usr/bin/ssh [Orabug: 37814929]\n- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]\n- Update upstream references [Orabug: 36564626]\n\n[8.7p1-47]\n- CVE-2025-61984: Reject usernames with control characters\n Resolves: RHEL-128401\n- CVE-2025-61985: Reject URL-strings with NULL characters\n Resolves: RHEL-128392" } ], "product_status": { "known_affected": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] }, "title": "ELSA-2025-23480", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:8.7p1-47.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2025-68973", "notes": [ { "category": "description", "text": "[2.3.3-5]\n- Fix CVE-2025-68973 (gpg.fail/memcpy)" } ], "product_status": { "known_affected": [ "CSAFPID-0015" ] }, "title": "ELSA-2026-0719", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.3.3-5.el9_7 or later.", "product_ids": [ "CSAFPID-0015" ] } ] }, { "cve": "CVE-2025-6965", "notes": [ { "category": "description", "text": "[3.34.1-8]\n- Fixes CVE-2025-6965" } ], "product_status": { "known_affected": [ "CSAFPID-0006" ] }, "title": "ELSA-2025-11992", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.34.1-8.el9_6 or later.", "product_ids": [ "CSAFPID-0006" ] } ] }, { "cve": "CVE-2025-7425", "notes": [ { "category": "description", "text": "[2.9.13-11]\n- Fix CVE-2025-7425 (RHEL-102806)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-12447", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-11.el9_6 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2025-8058", "notes": [ { "category": "description", "text": "[2.34-168.0.1.23]\n- Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n Oracle history:" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2025-12748", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-168.0.1.el9_6.23 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2025-8194", "notes": [ { "category": "description", "text": "[3.9.21-2.2]\n- Security fix for CVE-2025-8194\nResolves: RHEL-106375" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2025-15019", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.21-2.el9_6.2 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2025-9086", "notes": [ { "category": "description", "text": "[7.76.1-35.el9_7.3]\n- http: fix crash in rate-limited upload (RHEL-129493)\n\n[7.76.1-35.el9_7.2]\n- openssl: respect system crypto policy for TLS max version (RHEL-128921)\n\n[7.76.1-35.el9_7.1]\n- rebuild for rhel-9.7.0 z-stream (RHEL-121659)\n\n[7.76.1-35]\n- cookie: don't treat the leading slash as trailing (CVE-2025-9086)\n Resolves: RHEL-121659" } ], "product_status": { "known_affected": [ "CSAFPID-0026", "CSAFPID-0027" ] }, "title": "ELSA-2026-1350", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:7.76.1-35.el9_7.3 or later.", "product_ids": [ "CSAFPID-0026", "CSAFPID-0027" ] } ] }, { "cve": "CVE-2025-9230", "notes": [ { "category": "description", "text": "[3.5.1-4.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[3.5.1.openela.0.1]\n- Add OpenELA specific changes\n\n[1:3.5.1-4]\n- Fix CVE-2025-9230\n Resolves: RHEL-115929" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2025-21255", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.1-4.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2025-9714", "notes": [ { "category": "description", "text": "[2.9.13-14]\n- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)\n\n[2.9.13-13]\n- Fix CVE-2025-9714 (RHEL-119283)" } ], "product_status": { "known_affected": [ "CSAFPID-0005" ] }, "title": "ELSA-2025-22376", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.9.13-14.el9_7 or later.", "product_ids": [ "CSAFPID-0005" ] } ] }, { "cve": "CVE-2026-0865", "notes": [ { "category": "description", "text": "[3.9.25-7.0.1]\n- Remove upstream URL reference\n\n[3.9.25-7]\n- Security fixes for CVE-2026-4786 and CVE-2026-6100\nResolves: RHEL-167919, RHEL-168161\n\n[3.9.25-6]\n- Security fix for CVE-2026-4519\nResolves: RHEL-158117\n\n[3.9.25-5]\n- Rebuilding previous fixes for different build target\nRelated: RHEL-143117, RHEL-143174, RHEL-144897\n\n[3.9.25-4]\n- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299\nResolves: RHEL-143117\nResolves: RHEL-143174\nResolves: RHEL-144897" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-18693", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-7.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2026-11822", "notes": [ { "category": "description", "text": "[3.34.1-11]\n- Fixes CVE-2026-11822\n- Fixes CVE-2026-11824\n- Resolves: RHEL-218247\n- Resolves: RHEL-218282" } ], "product_status": { "known_affected": [ "CSAFPID-0006" ] }, "title": "ELSA-2026-58936", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.34.1-11.el9_8 or later.", "product_ids": [ "CSAFPID-0006" ] } ] }, { "cve": "CVE-2026-11940", "notes": [ { "category": "description", "text": "[3.9.25-7.0.1.el9_8.3]\n- Remove upstream URL reference\n\n[3.9.25-7.3]\n- Security fix for CVE-2026-11940\nResolves: RHEL-227228\n\n[3.9.25-7.2]\n- Security fix for CVE-2026-15308\nResolves: RHEL-193786\n\n[3.9.25-7.1]\n- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+\nResolves: RHEL-194207" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-54268", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-7.0.1.el9_8.3 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2026-13757", "notes": [ { "category": "description", "text": "[0.26.2-1]\n- Rebase to 0.26.2\n Resolves: RHEL-147825\n\n[0.26.1-1]\n- Rebase to 0.26.1\n Resolves: RHEL-139075, RHEL-118361, RHEL-126132\n\n[0.25.10-1]\n- Update to new upstream release 0.25.10\n Resolves: RHEL-115453\n\n[0.25.3-3]\n- Fix regression in trust where file creation fails for long cert labels\n Resolves: RHEL-58899\n- Fix usage message in p11-kit list-tokens command\n Resolves: RHEL-31810" } ], "product_status": { "known_affected": [ "CSAFPID-0043", "CSAFPID-0044" ] }, "title": "ELSA-2026-49667", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.26.4-1.el9_8 or later.", "product_ids": [ "CSAFPID-0043", "CSAFPID-0044" ] } ] }, { "cve": "CVE-2026-14164", "notes": [ { "category": "description", "text": "[3.5.3-11]\n- Related: CVE-2026-14164\n\n[3.5.3-10]\n- Resolves: CVE-2026-14164" } ], "product_status": { "known_affected": [ "CSAFPID-0009" ] }, "title": "ELSA-2026-52674", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.5.3-11.el9_8 or later.", "product_ids": [ "CSAFPID-0009" ] } ] }, { "cve": "CVE-2026-15308", "notes": [ { "category": "description", "text": "[3.9.25-7.0.1.el9_8.2]\n- Remove upstream URL reference\n\n[3.9.25-7.2]\n- Security fix for CVE-2026-15308\nResolves: RHEL-193786\n\n[3.9.25-7.1]\n- Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+\nResolves: RHEL-194207" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-39798", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-7.0.1.el9_8.2 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2026-15588", "notes": [ { "category": "description", "text": "[2.68.4-19.9]\n- Fix CVE-2026-15588: limit D-Bus auth line read length\n\n[2.68.4-19.8]\n- Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking\n- Resolves: RHEL-212157\n\n[2.68.4-19.7]\n- Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW\n- Resolves: RHEL-212217\n\n[2.68.4-19.6]\n- Fix CVE-2026-58011: range validation in g_date_time_add_full()\n- Resolves: RHEL-212194\n\n[2.68.4-19.5]\n- Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators\n- Resolves: RHEL-212236\n\n[2.68.4-19.4]\n- Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list\n- Resolves: RHEL-190589\n\n[2.68.4-19.3]\n- Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context\n- Resolves: RHEL-212261" } ], "product_status": { "known_affected": [ "CSAFPID-0023" ] }, "title": "ELSA-2026-55440", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-19.el9_8.9 or later.", "product_ids": [ "CSAFPID-0023" ] } ] }, { "cve": "CVE-2026-1965", "notes": [ { "category": "description", "text": "[7.76.1-40.el9_8.5]\n- fix missing %patch macros for Patch46 and Patch47\n\n[7.76.1-40.el9_8.4]\n- fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965)\n- fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783)\n- tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind)\n\n[7.76.1-40.3]\n- tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race)\n\n[7.76.1-40.1]\n- fix SSH host key mismatch on type difference (CVE-2026-9547)\n- fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286)" } ], "product_status": { "known_affected": [ "CSAFPID-0026", "CSAFPID-0027" ] }, "title": "ELSA-2026-55439", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:7.76.1-40.el9_8.5 or later.", "product_ids": [ "CSAFPID-0026", "CSAFPID-0027" ] } ] }, { "cve": "CVE-2026-2100", "notes": [ { "category": "description", "text": "[0.26.2-1]\n- Rebase to 0.26.2\n Resolves: RHEL-147825\n\n[0.26.1-1]\n- Rebase to 0.26.1\n Resolves: RHEL-139075, RHEL-118361, RHEL-126132\n\n[0.25.10-1]\n- Update to new upstream release 0.25.10\n Resolves: RHEL-115453" } ], "product_status": { "known_affected": [ "CSAFPID-0043", "CSAFPID-0044" ] }, "title": "ELSA-2026-18599", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.26.2-1.el9 or later.", "product_ids": [ "CSAFPID-0043", "CSAFPID-0044" ] } ] }, { "cve": "CVE-2026-25749", "notes": [ { "category": "description", "text": "[8.2.2637-23.0.1.el9_7.1]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-23.1]\n- RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-5602", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-23.0.1.el9_7.1 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-27135", "notes": [ { "category": "description", "text": "[1.43.0-6.1]\n- fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135)" } ], "product_status": { "known_affected": [ "CSAFPID-0028" ] }, "title": "ELSA-2026-7668", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.43.0-6.el9_7.1 or later.", "product_ids": [ "CSAFPID-0028" ] } ] }, { "cve": "CVE-2026-28390", "notes": [ { "category": "description", "text": "[3.5.5-4.0.1]\n- Replace upstream references [Orabug: 34340177]\n\n[3.5.5.openela.0.1]\n- Add OpenELA specific changes\n\n[1:3.5.5-4]\n- Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,\nCVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,\nCVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,\nCVE-2026-34182.\nResolves: RHEL-179274\nResolves: RHEL-179287\nResolves: RHEL-179539\nResolves: RHEL-179544\nResolves: RHEL-179547\nResolves: RHEL-179552\nResolves: RHEL-179556\nResolves: RHEL-179633\nResolves: RHEL-179661\nResolves: RHEL-179678\nResolves: RHEL-179684\nResolves: RHEL-179688\nResolves: RHEL-179691\nResolves: RHEL-179696\nResolves: RHEL-179699\n\n[1:3.5.5-3]\n- Fix CVE-2026-28390\n Resolves: RHEL-165870" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2026-22312", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2026-28417", "notes": [ { "category": "description", "text": "[8.2.2637-23.0.1.el9_7.2]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-23.2]\n- RHEL-155437 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin\n- RHEL-155422 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file\n- RHEL-159629 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function\n\n[2:8.2.2637-23.1]\n- RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-8259", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-23.0.1.el9_7.2 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-29111", "notes": [ { "category": "description", "text": "[252-55.0.3.el9_7.9]\n- serialize: don't allocate 1M on the stack just like that [LINUX-16166]\n- Route logs from container mapped uids to the system journal [Orabug: 38135007]\n- Drop delay when nspawn fails to reset loginuid [Orabug: 37793135]\n- Improve logging for api bus connection and subscribers [Orabug: 38040980]\n- Defer processing of timeout events in sd-bus api [Orabug: 38064217]\n- coredump: use %d in kernel core pattern - CVE-2025-4598\n- Add bus description to sd-bus outgoing sockets [Orabug: 37347576]\n- Add log messages about daemon-reload requester and duration [Orabug: 37347576]\n- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.\n- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]\n- 1A) Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 36269319]\n- 1B) Add 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]\n- 1C) Add required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]\n- 1D) Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]\n- Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to\n- previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.\n- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]\n- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.\n- Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792]\n- Backport upstream pstore dmesg fix [Orabug: 34868110]\n- Remove upstream references [Orabug: 33995357]\n- Disable unprivileged BPF by default [Orabug: 32870980]\n- udev rules: fix memory hot add and remove [Orabug: 31310273]\n- set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874]\n- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]\n- shutdown: get only active md arrays. [Orabug: 34467234]\n- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]\n- Removed unneeded patches from the systemd.spec\n- 1A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]\n- 1B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]\n- 1C) 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]\n- Removed the following, associated with [Orabug: 36269319]:\n- 2A) Remove 1001-systemd-fstab-generator-reload-targets.patch\n- 2B) Remove Fix local-fs and remote-fs targets during system boot [Orabug: 36269319]\n- 2C) Remove 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]\n- 2D) Remove required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]\n- 2E) Remove Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]\n\n[252-55.9]\n- core: validate input cgroup path more prudently (RHEL-155391)" } ], "product_status": { "known_affected": [ "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012", "CSAFPID-0013" ] }, "title": "ELSA-2026-13677", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:252-55.0.3.el9_7.9 or later.", "product_ids": [ "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012", "CSAFPID-0013" ] } ] }, { "cve": "CVE-2026-31790", "notes": [ { "category": "description", "text": "[3.5.5-2.0.1]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.5.5-2]\n- Fix CVE-2026-31790\n Resolves: RHEL-161586\n\n[1:3.5.5-1]\n- Rebase to OpenSSL 3.5.5\n Resolves: RHEL-136895\n Resolves: RHEL-142004\n Resolves: RHEL-142012\n Resolves: RHEL-142020\n Resolves: RHEL-142024\n Resolves: RHEL-142028\n Resolves: RHEL-142032\n Resolves: RHEL-142036\n Resolves: RHEL-142040\n Resolves: RHEL-142044\n Resolves: RHEL-142048\n Resolves: RHEL-142052\n Resolves: RHEL-142056" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2026-19218", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-2.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2026-33845", "notes": [ { "category": "description", "text": "[3.8.10-4]\n- Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)\n- Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)\n- Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)\n- Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)\n- Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)\n- Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)\n- Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)\n- Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)\n- Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)\n- Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)\n- Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)\n- Fix CVE-2026-3832 (OCSP, Low, revocation bypass)\n- Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)\n- Fix upstream security issue #1808 (PSK rehandshake)\n- Fix upstream security issue #1810 (EKU OID prefix match)\n- Fix upstream security issue #1813 (pkcs11-provider persistent keys)\n- Fix upstream security issue #1818 (RSA correctness, OpenSSL format import)\n- Fix upstream security issue #1819 (PKCS#11 trust removal error path)\n- Fix upstream security issue #1822 (SCT extension parser OOB read)\n- Fix upstream security issue #1841 (key zeroization in hybrid kex)\n- Fix upstream security issue #1823 (malformed certtool template)\n- Fix upstream security issue #1817 (session parameter loading robustness)\n- Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving)\n- gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in" } ], "product_status": { "known_affected": [ "CSAFPID-0022" ] }, "title": "ELSA-2026-20612", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.8.10-4.el9_8 or later.", "product_ids": [ "CSAFPID-0022" ] } ] }, { "cve": "CVE-2026-34180", "notes": [ { "category": "description", "text": "[3.5.5-4.0.1]\n- Replace upstream references [Orabug: 34340177]\n\n[3.5.5.openela.0.1]\n- Add OpenELA specific changes\n\n[1:3.5.5-4]\n- Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,\nCVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,\nCVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,\nCVE-2026-34182.\nResolves: RHEL-179274\nResolves: RHEL-179287\nResolves: RHEL-179539\nResolves: RHEL-179544\nResolves: RHEL-179547\nResolves: RHEL-179552\nResolves: RHEL-179556\nResolves: RHEL-179633\nResolves: RHEL-179661\nResolves: RHEL-179678\nResolves: RHEL-179684\nResolves: RHEL-179688\nResolves: RHEL-179691\nResolves: RHEL-179696\nResolves: RHEL-179699\n\n[1:3.5.5-3]\n- Fix CVE-2026-28390\n Resolves: RHEL-165870" } ], "product_status": { "known_affected": [ "CSAFPID-0007", "CSAFPID-0008" ] }, "title": "ELSA-2026-25239", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 1:3.5.5-4.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008" ] } ] }, { "cve": "CVE-2026-3497", "notes": [ { "category": "description", "text": "[8.7p1-48.0.1]\n- Upstream references found with /usr/bin/ssh [Orabug: 37814929]\n- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]\n- Update upstream references [Orabug: 36564626]\n\n[8.7p1-48]\n- CVE-2026-3497: Fix information disclosure or denial of service due\n to uninitialized variables in gssapi-keyex\n Resolves: RHEL-155823" } ], "product_status": { "known_affected": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] }, "title": "ELSA-2026-6462", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:8.7p1-48.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-34982", "notes": [ { "category": "description", "text": "[8.2.2637-23.0.1.el9_7.3]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-23.3]\n- Resolves: RHEL-164965 vim: arbitrary command execution via modeline sandbox bypass\n\n[2:8.2.2637-23.2]\n- RHEL-155437 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin\n- RHEL-155422 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file\n- RHEL-159629 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function\n\n[2:8.2.2637-23.1]\n- RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-11510", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-23.0.1.el9_7.3 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-35177", "notes": [ { "category": "description", "text": "[8.2.2637-26.0.1.el9_8.5]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-26.5]\n- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite\n via path traversal bypass\n\n[2:8.2.2637-26.4]\n- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass\n\n[2:8.2.2637-26.3]\n- Related: RHEL-159630 rebuild to build with exception target\n\n[2:8.2.2637-26.2]\n- remove -O0 from flags\n\n[2:8.2.2637-26.1]\n- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-22717", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-26.0.1.el9_8.5 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-35385", "notes": [ { "category": "description", "text": "[8.7p1-49.0.1]\n- Upstream references found with /usr/bin/ssh [Orabug: 37814929]\n- upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064]\n- Update upstream references [Orabug: 36564626]\n\n[8.7p1-49]\n- CVE-2026-35385: Fix privilege escalation via scp legacy protocol\n when not in preserving file mode\n Resolves: RHEL-164752\n- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode\n multiplexing sessions\n Resolves: RHEL-166249\n- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms\n and HostbasedAcceptedAlgorithms with regard to ECDSA keys\n Resolves: RHEL-166233\n- CVE-2026-35414: Fix mishandling of authorized_keys principals option\n Resolves: RHEL-166201\n- CVE-2026-35386: Add validation rules to usernames and hostnames\n set for ProxyJump/-J on the commandline\n Resolves: RHEL-166217" } ], "product_status": { "known_affected": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] }, "title": "ELSA-2026-13381", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:8.7p1-49.0.1.el9_7 or later.", "product_ids": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-40355", "notes": [ { "category": "description", "text": "[1.21.1-10.0.1]\n- Fixed race condition in krb5_set_password() [Orabug: 33609767]\n\n[1.21.1-10]\n- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)\n Resolves: RHEL-171590 RHEL-171596" } ], "product_status": { "known_affected": [ "CSAFPID-0002" ] }, "title": "ELSA-2026-19357", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.21.1-10.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0002" ] } ] }, { "cve": "CVE-2026-4046", "notes": [ { "category": "description", "text": "[2.34-270.0.1]\n- Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n Oracle history:\n May-20-2026 Cupertino Miranda - 2.34-266.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-25-2026 Cupertino Miranda - 2.34-262.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-6-2026 Cupertino Miranda - 2.34-256.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n February-3-2026 Cupertino Miranda - 2.34-245.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n November-14-2025 Cupertino Miranda - 2.34-231.0.1.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-24-2025 Cupertino Miranda - 2.34-231.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-8-2025 Jose E. Marchesi - 2.34-228.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-217.0.1\n - Forward-port Oralce patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-168.0.1.23\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-30-2025 Cupertino Miranda - 2.34-168.0.1.20\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-9-2025 Cupertino Miranda - 2.34-168.0.1.19\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: David Faust \n May-17-2025 Cupertino Miranda - 2.34-168.0.1.14\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n March-6-2025 Cupertino Miranda - 2.34-168.0.1\n - Forward-port Oracle patches for ol9-u6\n Reviewed by: Jose E. Marchesi \n February-18-2025 Cupertino Miranda - 2.34-160.0.1\n - Forward-port Oracle patches for ol9-u6 DP\n Reviewed by: Jose E. Marchesi \n November-12-2024 Cupertino Miranda - 2.34-125.0.1.1\n - Forward-port Oracle patches for ol9-u5\n Reviewed by: Jose E. Marchesi \n October-1-2024 Cupertino Miranda - 2.34-100.0.1.4\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n August-26-2024 Jose E. Marchesi - 2.34-100.0.1.3\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n May-24-2024 Cupertino Miranda - 2.34-100.0.1.2\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Jose E. Marchesi \n April-30-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Indu Bhagat \n March-28-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4-beta\n Reviewed by: Jose E. Marchesi \n March 15 2024 Cupertino Miranda - 2.34-83.0.2.12\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n February-26-2024 Cupertino Miranda - 2.34-83.0.2.7\n - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family\n Reviewed by: Jose E. Marchesi \n October-24-2023 Cupertino Miranda - 2.34-83.0.1.7\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n October-4-2023 Cupertino Miranda - 2.34-82.0.1\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n April-18-2023 Cupertino Miranda - 2.34-60.0.2\n - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks\n - Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n can be used for stack allocation.\n - In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n 0, glibc will madvise the kernel not to use allow hugepages for stack\n allocations.\n Reviewed by: Jose E. Marchesi \n March-28-2023 Cupertino Miranda - 2.34-60.0.1\n - Merge Oracle patches for ol9-u2 beta\n Reviewed by: Jose E. Marchesi \n September-28-2022 Patrick McGehearty - 2.34-40.0.1\n - Merge Oracle patches for ol9-u1 beta\n Reviewed by: Jose E. Marchesi \n April-25-2022 Patrick McGehearty - 2.34-28.0.1\n - Merge Oracle patches with ol9 beta\n - Reviewed-by: Jose E. Marchesi \n\n[2.34-270]\n- Fix incorrect setting of CXX variable in spec file (RHEL-148252)\n\n[2.34-269]\n- Fix __nss_get_default_domain logic to restore netgroup user enumeration\n (RHEL-168096)\n\n[2.34-268]\n- resolv: Correctly count records and check hostname validity (RHEL-168851,\n RHEL-168852)\n\n[2.34-267]\n- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules\n (RHEL-162901)" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2026-20597", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-270.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2026-4111", "notes": [ { "category": "description", "text": "[3.5.3-7]\n- Resolves: CVE-2026-4111" } ], "product_status": { "known_affected": [ "CSAFPID-0009" ] }, "title": "ELSA-2026-5080", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.5.3-7.el9_7 or later.", "product_ids": [ "CSAFPID-0009" ] } ] }, { "cve": "CVE-2026-41411", "notes": [ { "category": "description", "text": "[8.2.2637-26.0.1.el9_8.6]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-26.6]\n- CVE-2026-41411 vim: Command injection via backticks in tag files\n\n[2:8.2.2637-26.5]\n- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite\n via path traversal bypass\n\n[2:8.2.2637-26.4]\n- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass\n\n[2:8.2.2637-26.3]\n- Related: RHEL-159630 rebuild to build with exception target\n\n[2:8.2.2637-26.2]\n- remove -O0 from flags\n\n[2:8.2.2637-26.1]\n- RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-28209", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-26.0.1.el9_8.6 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-41989", "notes": [ { "category": "description", "text": "[1.10.0-13_fips]\n- Add FIPS package change: add fips suffix to Release and\n set Epoch to 10 [Orabug: 35961378]\n- Update FIPS module name for Oracle Linux [Orabug: 35961378]\n\n[1.10.0-13]\n- Bump version to fix wrong build target.\n\n[1.10.0.12]\n- Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext" } ], "product_status": { "known_affected": [ "CSAFPID-0029" ] }, "title": "ELSA-2026-500145", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 10:1.10.0-13.el9_8_fips or later.", "product_ids": [ "CSAFPID-0029" ] } ] }, { "cve": "CVE-2026-4424", "notes": [ { "category": "description", "text": "[3.5.3-9]\n- Resolves: CVE-2026-4424\n- Resolves: CVE-2026-5121\n\n[3.5.3-8]\n- Release bump" } ], "product_status": { "known_affected": [ "CSAFPID-0009" ] }, "title": "ELSA-2026-8510", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.5.3-9.el9_7 or later.", "product_ids": [ "CSAFPID-0009" ] } ] }, { "cve": "CVE-2026-45186", "notes": [ { "category": "description", "text": "[2.5.0-6.1]\n- Fix CVE-2026-45186\n- Resolves: RHEL-177988" } ], "product_status": { "known_affected": [ "CSAFPID-0014" ] }, "title": "ELSA-2026-23230", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.5.0-6.el9_8.1 or later.", "product_ids": [ "CSAFPID-0014" ] } ] }, { "cve": "CVE-2026-4519", "notes": [ { "category": "description", "text": "[3.9.25-7.0.1]\n- Remove upstream URL reference\n\n[3.9.25-7]\n- Security fixes for CVE-2026-4786 and CVE-2026-6100\nResolves: RHEL-167919, RHEL-168161\n\n[3.9.25-6]\n- Security fix for CVE-2026-4519\nResolves: RHEL-158117\n\n[3.9.25-5]\n- Rebuilding previous fixes for different build target\nRelated: RHEL-143117, RHEL-143174, RHEL-144897\n\n[3.9.25-4]\n- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299\nResolves: RHEL-143117\nResolves: RHEL-143174\nResolves: RHEL-144897" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-19216", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-7.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2026-46483", "notes": [ { "category": "description", "text": "[8.2.2637-26.0.1.el9_8.10]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-26.10]\n- RHEL-186659 CVE-2026-47162 vim: code injection via\n NetrwBookHistSave()\n\n[2:8.2.2637-26.9]\n- RHEL-186646 CVE-2026-52858 vim: possible code execution with\n python3complete\n\n[2:8.2.2637-26.8]\n- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin\n\n[2:8.2.2637-26.7]\n- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin\n\n[2:8.2.2637-26.6]\n- CVE-2026-41411 vim: Command injection via backticks in tag files\n\n[2:8.2.2637-26.5]\n- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite\n via path traversal bypass\n\n[2:8.2.2637-26.4]\n- Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass\n\n[2:8.2.2637-26.3]\n- Related: RHEL-159630 rebuild to build with exception target\n\n[2:8.2.2637-26.2]\n- remove -O0 from flags" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-38511", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-26.0.1.el9_8.10 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-4786", "notes": [ { "category": "description", "text": "[3.9.25-3.0.1.el9_7.3]\n- Remove upstream URL reference\n\n[3.9.25-3.3]\n- Security fixes for CVE-2026-4786 and CVE-2026-6100\nResolves: RHEL-168157, RHEL-167915\n\n[3.9.25-3.2]\n- Security fix for CVE-2026-4519\nResolves: RHEL-158052\n\n[3.9.25-3.1]\n- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299\nResolves: RHEL-143108 RHEL-143169 RHEL-144893" } ], "product_status": { "known_affected": [ "CSAFPID-0003", "CSAFPID-0004" ] }, "title": "ELSA-2026-10949", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:3.9.25-3.0.1.el9_7.3 or later.", "product_ids": [ "CSAFPID-0003", "CSAFPID-0004" ] } ] }, { "cve": "CVE-2026-4878", "notes": [ { "category": "description", "text": "[2.48-10.1]\n- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n Resolves: RHEL-169311" } ], "product_status": { "known_affected": [ "CSAFPID-0017" ] }, "title": "ELSA-2026-12441", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.48-10.el9_7.1 or later.", "product_ids": [ "CSAFPID-0017" ] } ] }, { "cve": "CVE-2026-48864", "notes": [ { "category": "description", "text": "[0.7.24-6]\n- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)\n (RHEL-178982)" } ], "product_status": { "known_affected": [ "CSAFPID-0054" ] }, "title": "ELSA-2026-39315", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:0.7.24-6.el9_8 or later.", "product_ids": [ "CSAFPID-0054" ] } ] }, { "cve": "CVE-2026-5435", "notes": [ { "category": "description", "text": "[2.34-274.0.1]\n- Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n Reviewed-by: David Faust \n Oracle history:\n June-30-2026 Cupertino Miranda - 2.34-272.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n Reviewed-by: David Faust \n June-5-2026 Cupertino Miranda - 2.34-270.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n May-20-2026 Cupertino Miranda - 2.34-266.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-25-2026 Cupertino Miranda - 2.34-262.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-6-2026 Cupertino Miranda - 2.34-256.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n February-3-2026 Cupertino Miranda - 2.34-245.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n November-14-2025 Cupertino Miranda - 2.34-231.0.1.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-24-2025 Cupertino Miranda - 2.34-231.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-8-2025 Jose E. Marchesi - 2.34-228.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-217.0.1\n - Forward-port Oralce patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-168.0.1.23\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-30-2025 Cupertino Miranda - 2.34-168.0.1.20\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-9-2025 Cupertino Miranda - 2.34-168.0.1.19\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: David Faust \n May-17-2025 Cupertino Miranda - 2.34-168.0.1.14\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n March-6-2025 Cupertino Miranda - 2.34-168.0.1\n - Forward-port Oracle patches for ol9-u6\n Reviewed by: Jose E. Marchesi \n February-18-2025 Cupertino Miranda - 2.34-160.0.1\n - Forward-port Oracle patches for ol9-u6 DP\n Reviewed by: Jose E. Marchesi \n November-12-2024 Cupertino Miranda - 2.34-125.0.1.1\n - Forward-port Oracle patches for ol9-u5\n Reviewed by: Jose E. Marchesi \n October-1-2024 Cupertino Miranda - 2.34-100.0.1.4\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n August-26-2024 Jose E. Marchesi - 2.34-100.0.1.3\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n May-24-2024 Cupertino Miranda - 2.34-100.0.1.2\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Jose E. Marchesi \n April-30-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Indu Bhagat \n March-28-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4-beta\n Reviewed by: Jose E. Marchesi \n March 15 2024 Cupertino Miranda - 2.34-83.0.2.12\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n February-26-2024 Cupertino Miranda - 2.34-83.0.2.7\n - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family\n Reviewed by: Jose E. Marchesi \n October-24-2023 Cupertino Miranda - 2.34-83.0.1.7\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n October-4-2023 Cupertino Miranda - 2.34-82.0.1\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n April-18-2023 Cupertino Miranda - 2.34-60.0.2\n - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks\n - Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n can be used for stack allocation.\n - In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n 0, glibc will madvise the kernel not to use allow hugepages for stack\n allocations.\n Reviewed by: Jose E. Marchesi \n March-28-2023 Cupertino Miranda - 2.34-60.0.1\n - Merge Oracle patches for ol9-u2 beta\n Reviewed by: Jose E. Marchesi \n September-28-2022 Patrick McGehearty - 2.34-40.0.1\n - Merge Oracle patches for ol9-u1 beta\n Reviewed by: Jose E. Marchesi \n April-25-2022 Patrick McGehearty - 2.34-28.0.1\n - Merge Oracle patches with ol9 beta\n - Reviewed-by: Jose E. Marchesi \n\n[2.34-274]\n- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,\n RHEL-185614)\n\n[2.34-273]\n- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2026-42952", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-274.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2026-54369", "notes": [ { "category": "description", "text": "[2.4.0-1]\n- rebase to 2.4.0 to fix the following CVEs:\n - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111)\n - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216)" } ], "product_status": { "known_affected": [ "CSAFPID-0024", "CSAFPID-0025" ] }, "title": "ELSA-2026-42736", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.4.0-1.el9_8 or later.", "product_ids": [ "CSAFPID-0024", "CSAFPID-0025" ] } ] }, { "cve": "CVE-2026-54371", "notes": [ { "category": "description", "text": "[2.6.0-1]\n- rebase to 2.6.0 to fix the following CVEs:\n - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121)" } ], "product_status": { "known_affected": [ "CSAFPID-0055" ] }, "title": "ELSA-2026-60226-0", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.6.0-1.el9_8 or later.", "product_ids": [ "CSAFPID-0055" ] } ] }, { "cve": "CVE-2026-5450", "notes": [ { "category": "description", "text": "[2.34-272.0.1]\n- Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n Reviewed-by: David Faust \n Oracle history:\n June-5-2026 Cupertino Miranda - 2.34-270.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: Jose E. Marchesi \n May-20-2026 Cupertino Miranda - 2.34-266.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-25-2026 Cupertino Miranda - 2.34-262.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n March-6-2026 Cupertino Miranda - 2.34-256.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n February-3-2026 Cupertino Miranda - 2.34-245.0.1\n - Forward-port Oracle patches for ol9-u8\n Reviewed-by: David Faust \n November-14-2025 Cupertino Miranda - 2.34-231.0.1.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-24-2025 Cupertino Miranda - 2.34-231.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n September-8-2025 Jose E. Marchesi - 2.34-228.0.1\n - Forward-port Oracle patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-217.0.1\n - Forward-port Oralce patches for ol9-u7\n Reviewed-by: Jose E. Marchesi \n August-5-2025 Cupertino Miranda - 2.34-168.0.1.23\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-30-2025 Cupertino Miranda - 2.34-168.0.1.20\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n June-9-2025 Cupertino Miranda - 2.34-168.0.1.19\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: David Faust \n May-17-2025 Cupertino Miranda - 2.34-168.0.1.14\n - Forward-port Oracle patches for ol9-u6\n Reviewed-by: Jose E. Marchesi \n March-6-2025 Cupertino Miranda - 2.34-168.0.1\n - Forward-port Oracle patches for ol9-u6\n Reviewed by: Jose E. Marchesi \n February-18-2025 Cupertino Miranda - 2.34-160.0.1\n - Forward-port Oracle patches for ol9-u6 DP\n Reviewed by: Jose E. Marchesi \n November-12-2024 Cupertino Miranda - 2.34-125.0.1.1\n - Forward-port Oracle patches for ol9-u5\n Reviewed by: Jose E. Marchesi \n October-1-2024 Cupertino Miranda - 2.34-100.0.1.4\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n August-26-2024 Jose E. Marchesi - 2.34-100.0.1.3\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: David Faust \n May-24-2024 Cupertino Miranda - 2.34-100.0.1.2\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Jose E. Marchesi \n April-30-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4\n Reviewed by: Indu Bhagat \n March-28-2024 Cupertino Miranda - 2.34-100.0.1\n - Forward-port Oracle patches for ol9-u4-beta\n Reviewed by: Jose E. Marchesi \n March 15 2024 Cupertino Miranda - 2.34-83.0.2.12\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n February-26-2024 Cupertino Miranda - 2.34-83.0.2.7\n - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family\n Reviewed by: Jose E. Marchesi \n October-24-2023 Cupertino Miranda - 2.34-83.0.1.7\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n October-4-2023 Cupertino Miranda - 2.34-82.0.1\n - Forward-port Oracle patches for ol9\n Reviewed by: Jose E. Marchesi \n April-18-2023 Cupertino Miranda - 2.34-60.0.2\n - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks\n - Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n can be used for stack allocation.\n - In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n 0, glibc will madvise the kernel not to use allow hugepages for stack\n allocations.\n Reviewed by: Jose E. Marchesi \n March-28-2023 Cupertino Miranda - 2.34-60.0.1\n - Merge Oracle patches for ol9-u2 beta\n Reviewed by: Jose E. Marchesi \n September-28-2022 Patrick McGehearty - 2.34-40.0.1\n - Merge Oracle patches for ol9-u1 beta\n Reviewed by: Jose E. Marchesi \n April-25-2022 Patrick McGehearty - 2.34-28.0.1\n - Merge Oracle patches with ol9 beta\n - Reviewed-by: Jose E. Marchesi \n\n[2.34-272]\n- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)\n\n[2.34-271]\n- Fix gconv module reference counter overflow in swscanf and swprintf\n families (RHEL-145156)" } ], "product_status": { "known_affected": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] }, "title": "ELSA-2026-33226", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.34-272.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0032", "CSAFPID-0033", "CSAFPID-0034" ] } ] }, { "cve": "CVE-2026-55653", "notes": [ { "category": "description", "text": "[9.9p1-9.0.1]\n- Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076]\n- Upstream references found with /usr/bin/ssh [Orabug: 37814929]\n\n[9.9p1-9]\n- CVE-2026-59996: Fix remote glob result of '..' causing files to be placed\n in unintended parent directories when scp performs remote-to-remote copy\n via the local host\n Resolves: RHEL-193178\n- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange\n Resolves: RHEL-193024\n\n[9.9p1-8]\n- CVE-2026-55653: Fix double free in openssh DH-GEX client path during\n FIPS known-group validation that leads to client-side denial of service\n Resolves: RHEL-186439\n- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator\n cleanup due to missing NULL terminator\n Resolves: RHEL-185836\n- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket\n pre-binding\n Resolves: RHEL-185854" } ], "product_status": { "known_affected": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] }, "title": "ELSA-2026-47756", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:9.9p1-9.0.1.el9_8 or later.", "product_ids": [ "CSAFPID-0018", "CSAFPID-0019", "CSAFPID-0020" ] } ] }, { "cve": "CVE-2026-55693", "notes": [ { "category": "description", "text": "[8.2.2637-26.0.1.el9_8.13]\n- Remove upstream references [Orabug: 31197557]\n\n[2:8.2.2637-26.13]\n- RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution\n in C omni-completion\n- RHEL-201197 CVE-2026-59856 vim: potential command execution in\n PHP omni-completion\n\n[2:8.2.2637-26.12]\n- RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold()\n- RHEL-192113 CVE-2026-57456 vim: possible code execution with\n python complete via crafted docstrings\n\n[2:8.2.2637-26.11]\n- RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in\n tree_count_words() and sug_filltree()\n\n[2:8.2.2637-26.10]\n- RHEL-186659 CVE-2026-47162 vim: code injection via\n NetrwBookHistSave()\n\n[2:8.2.2637-26.9]\n- RHEL-186646 CVE-2026-52858 vim: possible code execution with\n python3complete\n\n[2:8.2.2637-26.8]\n- RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin\n\n[2:8.2.2637-26.7]\n- RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin\n\n[2:8.2.2637-26.6]\n- CVE-2026-41411 vim: Command injection via backticks in tag files\n\n[2:8.2.2637-26.5]\n- RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite\n via path traversal bypass" } ], "product_status": { "known_affected": [ "CSAFPID-0016" ] }, "title": "ELSA-2026-47982", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 2:8.2.2637-26.0.1.el9_8.13 or later.", "product_ids": [ "CSAFPID-0016" ] } ] }, { "cve": "CVE-2026-58016", "notes": [ { "category": "description", "text": "[2.68.4-19.2]\n- Fix CVE-2026-58016: broken node element nesting validation in\n D-Bus introspection XML parsing\n- Resolves: RHEL-190632" } ], "product_status": { "known_affected": [ "CSAFPID-0023" ] }, "title": "ELSA-2026-42089", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:2.68.4-19.el9_8.2 or later.", "product_ids": [ "CSAFPID-0023" ] } ] }, { "cve": "CVE-2026-58055", "notes": [ { "category": "description", "text": "[1.43.0-6.2]\n- fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055)" } ], "product_status": { "known_affected": [ "CSAFPID-0028" ] }, "title": "ELSA-2026-54662", "remediations": [ { "category": "vendor_fix", "details": "Upgrade to 0:1.43.0-6.el9_8.2 or later.", "product_ids": [ "CSAFPID-0028" ] } ] }, { "notes": [ { "category": "description", "text": "`dbus-python` is deprecated upstream: PyPI classifier: Development Status :: 7 - Inactive" } ], "product_status": { "known_affected": [ "CSAFPID-0060" ] }, "title": "bomdrift.deprecated" } ] }