5,088 results · Clear filters · Feed
-
High max 9.8ELSA-2026-54248 33 CVEs
Important: firefox security update (Oracle Linux 7)
[140.13.0-1.0.1] - Update to 140.13.0 ESR [Orabug: 39947841][CVE-2026-15718][CVE-2026-15719] [CVE-2026-16349][CVE-2026-16350][CVE-2026-16351][CVE-2026-16352][CVE-2026-16353] [CVE-2026-16354][CVE-2026-16355][CVE-2026-16356][CVE-2026-16357][CVE-2026-16358] [CVE…
-
High max 7.5ELSA-2026-55758 3 CVEs
Important: 389-ds-base security update (Oracle Linux 7)
[1.3.11.1-5.0.13] - Security update for CVE-2026-11770 CVE-2026-11788 CVE-2026-15722 [Orabug: 39892253] [1.3.11.1-5.0.11] - Security update for CVE-2026-11610 CVE-2026-11774 [Orabug: 39697075] [1.3.11.1-5.0.9] - Security fix for CVE-2026-9064 [Orabug: 3957020…
-
High max 8.8ELSA-2026-69098 37 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.52.5-1] - Update to 2.52.5 [2.52.4-1] - Update to 2.52.4 [2.52.3-1] - Update to 2.52.3 [2.50.4-1] - Update to 2.50.4 [2.50.3-1] - Update to 2.50.3 [2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0 [2.48.5-1] - Update to 2.48.5 [2.48.3-1] - Update…
-
High max 7.8ELSA-2026-69123 1 CVE
Important: sudo security update (Oracle Linux 9)
[1.9.17p2-3.1] - CVE-2026-82474 sudo: execveat(2) intercept/log_subcmds bypass Resolves: RHEL-255647
-
High max 9.1ELSA-2026-69126 2 CVEs
Important: curl security update (Oracle Linux 9)
[7.76.1-40.el9_8.7] - add sasl service name to connection reuse checks (CVE-2026-8458) [7.76.1-40.el9_8.6] - detect proxy changes read from environment (CVE-2026-8927)
-
High max 7.8ELSA-2026-69100 2 CVEs
Important: gstreamer1-plugins-base security update (Oracle Linux 9)
[1.22.12-8.2] - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253753 [1.22.12-8.1] - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff pale…
-
High max 7.5ELSA-2026-69308 5 CVEs
Important: yggdrasil security update (Oracle Linux 10)
[0.4.9.2-3] - Rebuild yggdrasil against updated golang [0.4.9.2-2] - Rebuild yggdrasil against updated golang
-
High max 7.5ELSA-2026-69541 1 CVE
Important: rsyslog security update (Oracle Linux 10)
[8.2510.0-5.2] - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246633
-
High max 7.5ELSA-2026-69099 2 CVEs
Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)
[0.2.3-8] - Rebuild against updated golang
-
High max 8.2ELSA-2026-67943 1 CVE
Important: python-lxml security update (Oracle Linux 8)
[4.2.3-5] - Security fix for CVE-2026-49825: missing xlink:href in known HTML link attributes Resolves: RHEL-251508 [4.2.3-4] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 [4.2.3-3] - Security fix for CVE-2021-28957 Resolves: rhbz#1941534 [4.2.3-2]…
-
High max 9.8ELSA-2026-68531 22 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.164.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
High max 9.8ELSA-2026-68570 31 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.49.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 8.8ELSA-2026-500330 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.359.3.2] - sctp: prevent peer transport count overflow (Asim Viladi Oglu Manizada) [Orabug: 40036878] {CVE-2026-74469} - pppoe: reload header pointer after dev_hard_header() (Asim Viladi Oglu Manizada) [Orabug: 40036877] {CVE-2026-68121} - xfrm: …
-
High max 7.0ELSA-2026-68233 2 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8)
[9.0.121-1.0.1] - Add support for Oracle Linux [9.0.121-1] - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252274
-
High max 10.0ELSA-2026-68549 10 CVEs
Important: firefox security update (Oracle Linux 8)
[140.15.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] - diable wasi_sdk to prevent build failure with newer llvm [140.15.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.15.0-1] - …
-
High max 7.0ELSA-2026-68676 2 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 8)
[10.0.112-1.0.1] - Add support for Oracle Linux [10.0.112-1] - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252315
-
High max 7.5ELSA-2026-68787 1 CVE
Important: perl-Net-DNS security update (Oracle Linux 8)
[1.15-2] - Fix unbounded recursion in TSIG record processing (CVE-2026-81928) - Resolves: RHEL-256266 [1.15] - Resolves rhbz#1544065 Update to 1.15 - Maintenance only [1.14-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.14-1] - Upda…
-
High max 9.2ELSA-2026-67908 6 CVEs
Important: libevent security update (Oracle Linux 8)
[2.1.8-11] - Fix CVE-2026-63385: HTTP header injection via CRLF in header values - Resolves: RHEL-253566 [2.1.8-10] - Fix CVE-2026-63387: out-of-bounds write in evdns dnsname_to_labels - Resolves: RHEL-249889 [2.1.8-9] - Fix CVE-2026-63383: out-of-bounds read…
-
High max 9.8ELSA-2026-68677 8 CVEs
Important: tomcat security update (Oracle Linux 8)
[1:9.0.120-1] - Resolves: RHEL-192806 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-219561 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219581 Insufficient documentation for E…
-
High max 9.8ELSA-2026-500329 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-324.217.5.3] - net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40035523] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (Asim Viladi Oglu Manizada) [Orabug: 40035522] {CVE-2026-80844} - tcp: clear sock_ops cb…
-
High max 7.5ELSA-2026-68786 1 CVE
Important: perl-Net-DNS security update (Oracle Linux 9)
[1.29-6.1] - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG - Resolves: RHEL-256275
-
High max 7.6ELSA-2026-68235 3 CVEs
Important: libsoup3 security update (Oracle Linux 10)
[3.6.5-14] - Fix CVE-2026-85197: http2 crash after connection destroyed [3.6.5-13] - Fix CVE-2026-15711: Reject oversized WebSocket control frames [3.6.5-12] - Fix CVE-2026-15709: bound decompressed WebSocket message size [3.6.5-11] - Add patches for CVE-2026…
-
High max 9.8ELSA-2026-500328 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-206.104.4.4] - net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40035126] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (Asim Viladi Oglu Manizada) [Orabug: 40035125] {CVE-2026-80844} - RDMA/nldev: Fix lockin…
-
High max 9.8ELSA-2026-68507 19 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)
[6.12.0-211.56.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.8ELSA-2026-68692 1 CVE
Important: sudo security, bug fix, and enhancement update (Oracle Linux 10)
[1.9.17-6] - Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass [1.9.17-5.p2] - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'
-
High max 6.8ELSA-2026-67832 1 CVE
Important: tesseract security update (Oracle Linux 8)
[4.1.1-3] - Resolves: CVE-2026-73066
-
High max 6.8ELSA-2026-67831 1 CVE
Important: tesseract security update (Oracle Linux 9)
[4.1.1-8] - Resolves: CVE-2026-73066
-
High max 7.0ELSA-2026-67613 2 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 9)
[10.0.112-1.0.1] - Add support for Oracle Linux [10.0.112-1] - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319
-
High max 7.0ELSA-2026-67614 2 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 9)
[9.0.121-1.0.1] - Add support for Oracle Linux [9.0.121-1] - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278
-
High max 8.8ELSA-2026-67491 17 CVEs
Important: postgresql:16 security update (Oracle Linux 9)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pg_repack [1.5.1-1] - Update to v1.5.1 [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 [1.4.8-1] - Res…
-
High max 8.8ELSA-2026-67848 20 CVEs
Important: postgresql:18 security update (Oracle Linux 9)
pgaudit [18.0-1] - Update to 18.0 - Initial import for postgresql18 pg_repack [1.5.3-1] - Update to 1.5.3 - Initial import for postgresql18 [1.5.1-1] - Update to v1.5.1 [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604…
-
High max 9.2ELSA-2026-67910 8 CVEs
Important: libevent security update (Oracle Linux 9)
[2.1.13-1] - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385
-
High max 6.8ELSA-2026-67830 1 CVE
Important: tesseract security update (Oracle Linux 10)
[5.3.4-7] - Resolves: CVE-2026-73066
-
High max 8.5ELSA-2026-500239 14 CVEs
Important: microcode_ctl security update (Oracle Linux 8)
[4:20260812-1.0.3] - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized [Orabug: 35710077] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enab…
-
High max 9.2ELSA-2026-67909 8 CVEs
Important: libevent security update (Oracle Linux 10)
[2.1.13-1] - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385
-
High max 7.0ELSA-2026-67528 2 CVEs
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 10)
[9.0.121-1.0.1] - Add support for Oracle Linux [9.0.121-1] - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279
-
High max 7.0ELSA-2026-67530 2 CVEs
Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 10)
[10.0.112-1.0.1] - Add support for Oracle Linux [10.0.112-1] - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252320
-
High max 9.1ELSA-2026-48790 5 CVEs
Important: osbuild-composer security update (Oracle Linux 8)
[101.5-1.0.1] - Bump to 101.5-1.0.1 - CVE-2026-32280 - CVE-2026-32282 - CVE-2026-32283 - CVE-2026-33186 - CVE-2026-34986
-
High max 7.5ELSA-2026-54752 2 CVEs
Important: gstreamer1-plugins-bad-free security update (Oracle Linux 7)
[1.10.4-4.0.5] - Security update for CVE-2026-59691 CVE-2026-59692 [Orabug: 39878399] [1.10.4-4.0.3] - Security update for CVE-2026-52720 CVE-2026-52722 [Orabug: 39799399] [1.10.4-4.0.1] - Security update for CVE-2026-3082 [Orabug: 39199326]
-
High max 8.9ELSA-2026-9031 1 CVE
Important: python-urllib3 security update (Oracle Linux 7)
[1.10.2-7.0.3] - Backport fix for CVE-2025-66471 [Orabug: 39233228]