5,088 results · Clear filters · Feed
-
High max 9.1ELSA-2026-71608 1 CVE
Important: perl-DBI security update (Oracle Linux 8)
[1.641-3] - Force placeholder limit on :N and :pN placeholders (CVE-2026-73194) Resolves: RHEL-247320
-
High max 9.8ELSA-2026-71700 17 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.52.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 8.5ELSA-2026-71586 6 CVEs
Important: libxml2 security update (Oracle Linux 10)
[2.12.5-10.4] - Fix CVE-2026-86144 (RHEL-256302) - Fix CVE-2026-86140 (RHEL-256024) - Fix CVE-2026-74860 (RHEL-255957) - Fix CVE-2026-86142 (RHEL-256368) - Fix CVE-2026-86143 (RHEL-256896) - Fix CVE-2026-86138 (RHEL-256948)
-
High max 8.7ELSA-2026-71658 1 CVE
Important: python-cryptography security update (Oracle Linux 10)
[43.0.0-4] - Fix CVE-2026-69249: add X.509 signature validation budget
-
High max 7.1ELSA-2026-57417 1 CVE
Important: yelp security update (Oracle Linux 7)
[2:3.28.1-1.0.1] - Backport fix for CVE-2026-13601 [Orabug: 39908376]
-
High max 7.0ELSA-2026-69121 1 CVE
Important: abrt security update (Oracle Linux 7)
[2.1.11-60.0.7] - Fix symlink following in event handler scripts [CVE-2026-54230][Orabug: 40051150] [2.1.11-60.0.5] - Fix TOCTOU in SetElement/DeleteElement (CVE-2026-54228) [Orabug: 39811882] - Fix race condition in ChownProblemDir (CVE-2026-54229) [Orabug: …
-
High max 7.8ELSA-2026-48866 2 CVEs
Important: abrt security update (Oracle Linux 7)
[2.1.11-60.0.5] - Fix TOCTOU in SetElement/DeleteElement (CVE-2026-54228) [Orabug: 39811882] - Fix race condition in ChownProblemDir (CVE-2026-54229) [Orabug: 39811882]
-
High max 9.1ELSA-2026-69112 1 CVE
Important: perl-DBI:1.641 security update (Oracle Linux 8)
perl-DBI [1.641-10] - Fix number of tests Resolves: RHEL-247869 [1.641-9] - Fix placeholder limit on :N and :pN style placeholders (CVE-2026-73194) Resolves: RHEL-247869 [1.641-8] - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211151…
-
High max 7.5ELSA-2026-70641 6 CVEs
Important: skopeo security update (Oracle Linux 9)
[1:1.22.2-8] - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268
-
High max 7.5ELSA-2026-70640 8 CVEs
Important: buildah security update (Oracle Linux 9)
[1.43.3-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.3-2] - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 R…
-
High max 9.1ELSA-2026-71422 1 CVE
Important: perl-DBI security update (Oracle Linux 9)
[1.643-9.6] - Force placeholder limit on :# and :p# too (CVE-2026-73194) Related: RHEL-247327
-
High max 10.0ELSA-2026-70642 44 CVEs
Important: thunderbird security update (Oracle Linux 9)
[140.16.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.16.0] - Add OpenELA debranding [140.16.0-1] - Update to 140.16.0 ESR [140.15.0-1] - Update to 140.15.0 ESR
-
High max 9.8
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.50.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 9.8ELSA-2026-71232 13 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.51.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 8.5ELSA-2026-71585 6 CVEs
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-14.5] - Fix CVE-2026-86144 (RHEL-256304) - Fix CVE-2026-86140 (RHEL-256027) - Fix CVE-2026-74860 (RHEL-256120) - Fix CVE-2026-86142 (RHEL-256365) - Fix CVE-2026-86143 (RHEL-256901) - Fix CVE-2026-86138 (RHEL-256953)
-
High max 7.5ELSA-2026-71543 4 CVEs
Important: cockpit-image-builder security update (Oracle Linux 10)
[94.4-1.0.1] - Switch to old frotend [Orabug: 38011073] [Orabug: 37856296] [Orabug: 37856375] - Replaced additional upstream url [Orabug: 37856187] - Replaced upstream urls in documentation with oracle links [Orabug: 37856187] [94.4-1] - New upstream release
-
High max 7.1ELSA-2026-69609 1 CVE
Important: openexr security update (Oracle Linux 10)
[3.1.10-8.4] - fix CVE-2026-68515
-
High max 6.5ELSA-2026-53416 1 CVE
Important: host-metering security update (Oracle Linux 7)
[1.2.0-4.0.3] - Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 [Orabug: 39863765] [1.2.0-4.0.1] - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 [Orabug: 39352233]
-
High max 9.8ELSA-2026-69095 1 CVE
Important: libtiff security update (Oracle Linux 8)
[4.0.9-39] - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation (RHEL-248298)
-
High max 8.7ELSA-2026-69387 1 CVE
Important: freerdp security update (Oracle Linux 8)
[2:2.11.7-13] - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247353
-
High max 5.9ELSA-2026-69266 3 CVEs
Important: openssh security, bug fix, and enhancement update (Oracle Linux 8)
[8.0p1-33.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-33] - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 [8.0p1-32] - Improve fix for CVE-2023-38408, avoid invoking const…
-
High max 8.8ELSA-2026-69923 16 CVEs
Important: postgresql:15 security update (Oracle Linux 8)
pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 [1.5.0-1] - Update to version 1.5.0 Related: #1855776 [1.4.0-4] - Bump release for rebuild against libpq-12.1-3 [1.4.0-3] - BuildRequires libpq-devel [1.4.0-2] - BuildRequires pos…
-
High max 8.8ELSA-2026-69924 14 CVEs
Important: postgresql:12 security update (Oracle Linux 8)
[12.22-10.0.1] - Add backport of CVE-2025-8714 [Orabug: 38667546] [12.22-10] - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-146…
-
High max 8.8ELSA-2026-69876 16 CVEs
Important: postgresql:16 security update (Oracle Linux 8)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…
-
High max 7.5ELSA-2026-69277 1 CVE
Important: corosync security update (Oracle Linux 8)
[3.1.8-1.2] - Resolves: RHEL-251531 - totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665)
-
High max 5.9ELSA-2026-70191 1 CVE
Important: runc security update (Oracle Linux 9)
[4:1.4.2-3] - rebuild for CVE-2026-56860 - Resolves: RHEL-241703
-
High max 7.5ELSA-2026-70391 5 CVEs
Important: containernetworking-plugins security update (Oracle Linux 9)
[1:1.9.0-4] - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374
-
High max 9.1ELSA-2026-69961 9 CVEs
Important: podman security update (Oracle Linux 9)
[5.8.2-7.0.1] - Rework CNI/Netavark detection logic [JIRA: EVG-3769] - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.8.2-7] - update to the latest u…
-
High max 8.8ELSA-2026-69914 16 CVEs
Important: postgresql:15 security update (Oracle Linux 9)
pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …
-
High max 8.8ELSA-2026-69607 15 CVEs
Important: postgresql security update (Oracle Linux 9)
[13.23-6] - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-184…
-
High max 8.8ELSA-2026-70186 16 CVEs
Important: postgresql16 security update (Oracle Linux 10)
[16.15-1.0.1] - Replace upstream reference [Orabug: 37044148] [16.15-1] - Update to 16.15
-
High max 7.5ELSA-2026-70201 11 CVEs
Important: podman security update (Oracle Linux 10)
[5.8.2-9.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.8.2-9] - bump golang.org/x/text to v0.39.0 to fix CVE-2026-56852 - Resolves: RHEL-250818 [7:5.8.2-8] - update to the latest upstream commit 66780e9b - Resolves…
-
High max 9.8ELSA-2026-69125 6 CVEs
Important: curl security update (Oracle Linux 10)
[8.12.1-4.6] - fix cookie injection via trailing dot super cookies (CVE-2026-8924) - fix digest auth state leak on origin or credential change (CVE-2026-11856) - fix netrc password lookup for non-matching login (CVE-2026-8926) [8.12.1-4.5] - fix proxy auth no…
-
High max 9.1ELSA-2026-70753 1 CVE
Important: perl-DBI security update (Oracle Linux 10)
[1.643-26.6] - Fix CVE-2026-73194: enforce placeholder range limit on :N style placeholders Resolves: RHEL-247316
-
High max 7.1ELSA-2026-69608 1 CVE
Important: openexr security update (Oracle Linux 9)
[3.1.1-3.4] - fix CVE-2026-68515
-
High max 7.5ELSA-2026-67873 1 CVE
Important: corosync security update (Oracle Linux 9)
[3.1.10-1.2] - Resolves: RHEL-251542 - totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665)
-
High max 5.9ELSA-2026-69130 5 CVEs
Important: openssh security update (Oracle Linux 9)
[9.9p1-11.0.1] - Restore pam_ssh_agent_rel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value [Orabug: 39825354] - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM…
-
High max 9.6ELSA-2026-69462 28 CVEs
Important: firefox security update (Oracle Linux 9)
[140.16.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.16.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …
-
High max 7.5ELSA-2026-69540 1 CVE
Important: rsyslog security update (Oracle Linux 9)
[8.2510.0-2.0.1.el9_8.2] - Fixes rsyslog segfault during shutdown when relp is configured with TLS [Orabug: 37588023] [8.2510.0-2.2] - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 [8.2510.0-2.1] - Backport:…
-
High max 9.6ELSA-2026-69461 28 CVEs
Important: firefox security update (Oracle Linux 10)
[140.16.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.16.0-1] - Update to 140.16.0 ESR