Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

367 results · Clear filters · Feed

  • High max 7.8
    ELSA-2025-2627 6 CVEs 2 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-503.31.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • High max 7.8
    ELSA-2025-2473 4 CVEs 2 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.44.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 6.9
    ELSA-2025-1255 1 CVE 1 exploited

    Moderate: doxygen security update (Oracle Linux 7)

    [1:1.8.5-4.0.1] - Fix CVE-2020-11022 and CVE-2022-11023 in vendored jQuery [Orabug: 37577394]

  • Medium max 6.9
    ELSA-2025-1329 1 CVE 1 exploited

    Moderate: doxygen security update (Oracle Linux 9)

    [1:1.9.1-12] - Resolves: RHEL-78146, CVE-2020-11023, CVE-2020-11022

  • Medium max 6.9
    ELSA-2025-1338 1 CVE 1 exploited

    Moderate: gcc-toolset-14-gcc security update (Oracle Linux 8)

    [14.2.1-7.1] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78284) [14.2.1-7] - update from releases/gcc-14 branch (RHEL-74062) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, …

  • Medium max 6.9
    ELSA-2025-1346 1 CVE 1 exploited

    Moderate: gcc security update (Oracle Linux 9)

    [11.5.0-5.0.1] - Merge Oracle patches to 11.5.0-5. Oracle history:

  • Medium max 6.9
    ELSA-2025-1301 1 CVE 1 exploited

    Moderate: gcc security update (Oracle Linux 8)

    [8.5.0-23.0.1] - Merge Oracle patches to 8.5.0-23. Oracle history: May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1 - Merge Oracle patches to 8.5.0-22. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> March-27-2024 Qing Zhao <qing.zhao@oracle…

  • Medium max 6.9
    ELSA-2025-1306 1 CVE 1 exploited

    Moderate: gcc-toolset-13-gcc security update (Oracle Linux 8)

    [13.3.1-2.2.0.1] - Merge Oracle patches to 13.3.1-2.2. gfortran needs install-info at installation time. Orabug: 36472775 [13.3.1-2.2] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78279)

  • High max 9.8
    ELSA-2025-20100 108 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.340.4.1] - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37566743] [5.4.17-2136.340.4] - ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den) - nfsd: restore callback functi…

  • Medium max 6.9
    ELSA-2025-1300 1 CVE 1 exploited

    Moderate: gcc-toolset-14-gcc security update (Oracle Linux 9)

    [14.2.1-1.3] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78383)

  • Medium max 6.9
    ELSA-2025-1309 1 CVE 1 exploited

    Moderate: gcc-toolset-13-gcc security update (Oracle Linux 9)

    [13.3.1-2.2.0.1] - Merge Oracle patches to 13.3.1-2.2. Oracle history: November-20-2024 Qing Zhao <qing.zhao@oracle.com> 13.3.1-2.1.0.1 - gfortran needs install-info at installation time. Orabug: 36472775 [13.3.1-2.2] - disable jQuery use, don't ship jquery.j…

  • High max 7.8
    ELSA-2025-1266 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.40.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.8
    ELSA-2025-1262 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-503.23.2_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • Medium max 6.9
    ELSA-2025-1215 1 CVE 1 exploited

    Moderate: tbb security update (Oracle Linux 8)

    [2018.2-10.1] - Remove jQuery from Doxygen files (RHEL-77669) [2018.2-10] - Apply patches from (BZ #1907561) - Bump release

  • Medium max 6.9
    ELSA-2025-1210 1 CVE 1 exploited

    Moderate: tbb security update (Oracle Linux 9)

    [2020.3-8.1] - Remove jQuery from Doxygen output (RHEL-77693)

  • High max 9.8
    ELSA-2025-20095 192 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-305.176.4] - x86/asm: Make serialize() always_inline (Juergen Gross) - hwmon: (tmp513) Fix division of negative numbers (David Lechner) - Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (Pratyush Yadav) - Revert 'regmap: detach r…

  • High max 9.8
    ELSA-2024-12868 80 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.543.3] - rds: Add rds stuck shutdown timeout (Rohit Nair) [Orabug: 37214079] - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso) - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai) …

  • High max 6.3
    ELSA-2024-10481 1 CVE 1 exploited

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.46.3-2] - Add patch for CVE-2024-44309

  • High max 6.3
    ELSA-2024-10472 1 CVE 1 exploited

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.46.3-2] - Add patch for CVE-2024-44309

  • High max 9.8
    ELSA-2024-9552 11 CVEs 1 exploited

    Important: thunderbird security update (Oracle Linux 9)

    [128.4.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.4.0] - Add OpenELA debranding [128.4.0-1] - Update to 128.4.0 build1

  • High max 9.8
    ELSA-2024-9554 11 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 9)

    [128.4.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 9.8
    ELSA-2024-8034 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [128.3.1-2.0.1] - Update to 128.3.1 [Orabug: 37168934]

  • High max 9.8
    ELSA-2024-8024 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 8)

    [128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

  • High max 9.8
    ELSA-2024-8025 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 9)

    [128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

  • High max 9.8
    ELSA-2024-7977 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 8)

    [128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.1-1] - Update to 128.3.1

  • High max 9.8
    ELSA-2024-7958 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 9)

    [128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 7.8
    ELSA-2024-5259 2 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.3.el7.OL7] - net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36947298] [3.10.0-1160.119.1.0.2.el7.OL7] - md/raid5: fix oops during stripe resizing (Ritika Srivastava) [Orabug: 34048726] - blk-mq: Remove generation seqeunce (…

  • High max 9.1
    ELSA-2024-4943 3 CVEs 1 exploited

    Important: httpd security update (Oracle Linux 7)

    [2.4.6-99.0.3.1] - Opt-ins for unsafe prefix_stat and %3f [Orabug: 36904263][CVE-2024-38474][CVE-2024-38475] - mod_proxy: validate hostname [Orabug: 36904263][CVE-2024-38477]

  • High max 10.0
    ELSA-2024-5363 46 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-427.31.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • High max 10.0
    ELSA-2024-12585 52 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.334.6.el7] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB h…

  • High max 10.0
    ELSA-2024-12581 52 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.334.6] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB handl…

  • High max 10.0
    ELSA-2024-12584 52 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.334.6.el8] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB h…

  • High max 9.8
    ELSA-2024-5101 160 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.16.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 9.1
    ELSA-2024-4720 5 CVEs 1 exploited

    Important: httpd:2.4 security update (Oracle Linux 8)

    httpd [2.4.37-65.0.1.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-65.1] - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474) - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding prob…

  • High max 9.1
    ELSA-2024-4726 5 CVEs 1 exploited

    Important: httpd security update (Oracle Linux 9)

    [2.4.57-11.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-11] - Resolves: RHEL-45792 - httpd: Encoding problem in mod_proxy (CVE-2024-38473) [2.4.57-9] - Resolves: RHEL-45766 - httpd: null pointer dereference in mod_proxy (CVE-2…

  • High max 7.8
    ELSA-2024-12378 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.536.5] - mmc: core: Fix switch on gp3 partition (Dominique Martinet) - Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu) - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin) - Revert 'x86/mm/ident_map…

  • High max 9.8
    ELSA-2024-2394 57 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

    [5.14.0-427.13.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • High max 7.8
    ELSA-2024-1607 7 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-513.24.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  • High max 7.8
    ELSA-2024-12270 2 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.535.2.1] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36467681] {CVE-2024-1086} [4.14.35-2047.535.2] - Fix null ptr in rds_tcp_recv_path (Allison Henderson) [Orabug: 33499812] - LTS version: v4.14.338 …

  • High max 7.8
    ELSA-2024-12274 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.330.7.1.el7] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2…