Oracle Linux

Latest advisories

• High max 7.3
  ELSA-2026-98105 1 CVE

  Important: libimobiledevice security update (Oracle Linux 8)

  [1.2.0-18] - Fix double free in afc_receive_data() when service_receive() fails [1.2.0-17] - CVE-2026-116260 libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive double free in service_receive

  Nov 11, 2026
• High max 7.8
  ELSA-2026-98119 1 CVE

  Important: vim security, bug fix, and enhancement update (Oracle Linux 8)

  [8.0.1763-34.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-34] - RHEL-285535 CVE-2026-43961 vim: Vimscript injection via unescaped filename in netrw s:Net…

  Nov 11, 2026
• High max 7.5
  ELSA-2026-96234 7 CVEs

  Important: nodejs:22 security, bug fix, and enhancement update (Oracle Linux 9)

  nodejs [1:22.23.2-2.0.1] - Fix out-of-bounds write in bundled Brotli decoder [CVE-2026-111497] - Expose the decoder block-switch error and add regression coverage - Require the patched system Brotli for shared builds [1:22.23.2-2] - Patches Pacote CVE and upd…

  Nov 11, 2026
• High max 8.8
  ELSA-2026-96083 14 CVEs

  Important: dpdk security update (Oracle Linux 8)

  [23.11-3] - Backport fixes for CVE-2026-86846 CVE-2026-86848 CVE-2026-86561 CVE-2026-86562 CVE-2026-86563 CVE-2026-86567 CVE-2026-86566 CVE-2026-86849 CVE-2026-86845 CVE-2026-86847 CVE-2026-86856 CVE-2026-86565 CVE-2026-93683 CVE-2026-100236

  Nov 9, 2026
• Medium max 5.5
  ELSA-2026-96215 1 CVE

  Moderate: patch security update (Oracle Linux 8)

  [2.7.6-12] - CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory allows file creation outside the working directory - Resolves: RHEL-289587

  Nov 9, 2026