Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,088 results · Clear filters · Feed

  • High max 9.1
    ELSA-2026-22450 11 CVEs

    Important: osbuild-composer security update (Oracle Linux 10)

    [176-1.0.1] - Track github upstream

  • High max 8.8
    ELSA-2026-36956 4 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 8.5
    ELSA-2026-53845 2 CVEs

    Important: iscsi-initiator-utils security, bug fix, and enhancement update (Oracle Linux 10)

    [6.2.1.11-1.git4b3e853.0.1.el10_2.2] - Validate interface IP against target address family [Orabug: 39491397] - iscsi delay reconnect until interface has valid IP [Orabug: 38445491] - Change the order of restart iscsi services in spec file [Orabug: 37749406] …

  • High max 9.8
    ELSA-2026-54343 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.47.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2026-54576 1 CVE

    Important: dracut security update (Oracle Linux 10)

    [107-9.0.1] - Suppress stderr for btrfs subvolume check [Orabug: 39059254] - fips: add logic for /boot subvolume on BTRFS [Orabug: 36028061] - Skip unneeded FIPS logic on UEK with special FIPS [Orabug: 38138800] [Orabug: 38709306] - Include correct modprobe i…

  • High max 7.6
    ELSA-2026-49603 1 CVE

    Important: gstreamer1-plugins-good security update (Oracle Linux 7)

    [1.10.4-2.0.5] - Fix CVE-2026-53705 [Orabug: 39822536] [1.10.4-2.0.3] - Security update for CVE-2026-3083 CVE-2026-3085 [Orabug: 39199326] [1.10.4-2.0.1] - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and - CVE-2024-47607 [Orabug: 37407070]

  • High max 8.5
    ELSA-2026-51063 3 CVEs

    Important: libXfont2 security update (Oracle Linux 7)

    [2.0.3-1.0.1] - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 [Orabug: 39843361]

  • High max 7.5
    ELSA-2026-51183 1 CVE

    Important: glib2 security update (Oracle Linux 7)

    [2.56.1-9.0.7] - Fixes CVE-2026-58016 [Orabug: 39844471] [2.56.1-9.0.5] - Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716] [2.56.1-9.0.3] - Fixes CVE-2025-13601 g_escape_uri_string() overflow [Orabug: 38909821] [2.56.1-9.0.1] - Fix ove…

  • High max 9.8
    ELSA-2026-52772 2 CVEs

    Important: perl-DBI:1.641 security update (Oracle Linux 8)

    perl-DBI [1.641-8] - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211151 [1.641-7] - Fix patch. [1.641-6] - Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) Resolves: RHEL-193298 [1.641-5]…

  • High max 8.7
    ELSA-2026-53848 1 CVE

    Important: isns-utils security update (Oracle Linux 8)

    [0.99-1.1] - Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995)

  • High max 8.8
    ELSA-2026-47082 1 CVE

    Important: pipewire security update (Oracle Linux 9)

    [1.4.11-1] - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828

  • High max 7.8
    ELSA-2026-54268 1 CVE

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.25-7.0.1.el9_8.3] - Remove upstream URL reference [3.9.25-7.3] - Security fix for CVE-2026-11940 Resolves: RHEL-227228 [3.9.25-7.2] - Security fix for CVE-2026-15308 Resolves: RHEL-193786 [3.9.25-7.1] - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enoug…

  • High max 9.8
    ELSA-2026-36541 6 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2026-53364 1 CVE

    Important: resource-agents security update (Oracle Linux 8)

    [4.9.0-54.37] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217924

  • High max 7.5
    ELSA-2026-53363 1 CVE

    Important: fence-agents security update (Oracle Linux 8)

    [4.2.1-129.29] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217923

  • High max 8.8
    ELSA-2026-500162 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-322.203.3.5] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39859219] [5.15.0-322.203.3.4.5] - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack) [Orabug: 39832946] - KVM: x86: …

  • High max 7.5
    ELSA-2026-52395 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.23-5] - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 [13.23-4] - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479

  • High max 7.5
    ELSA-2026-53365 1 CVE

    Important: fence-agents security update (Oracle Linux 9)

    [4.10.0-110.6] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934

  • High max 7.5
    ELSA-2026-42877 10 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.502.b07-1.1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.502.b07-1.1] - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bum…

  • High max 8.1
    ELSA-2026-53329 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

    [5.14.0-687.38.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • High max 8.7
    ELSA-2026-53847 1 CVE

    Important: isns-utils security update (Oracle Linux 9)

    [0.101-4.1] - Fix CVE-2026-55995: prevent double-free in attrs.c error paths

  • High max 7.8
    ELSA-2026-53435 1 CVE

    Important: udisks2 security update (Oracle Linux 10)

    [2.11.0-2.0.1.el10_2.1] - Enable btrfs support for OL supported arches [Orabug: 37464632] [2.11.0-2.1] - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)

  • High max 8.7
    ELSA-2026-53846 1 CVE

    Important: isns-utils security update (Oracle Linux 10)

    [0.103-1.1] - Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995) Resolves: RHEL-219472

  • High max 8.2
    ELSA-2026-53330 7 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.46.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.4
    ELSA-2026-13895 1 CVE

    Important: sudo security update (Oracle Linux 7)

    [1.8.23-10.0.3.3] - Security update for CVE-2026-35535 [Orabug: 39320917] [1.8.23-10.0.1.3] - CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]

  • High max 8.8
    ELSA-2026-47176 2 CVEs

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 7)

    [1.10.4-4.0.3] - Security update for CVE-2026-52720 CVE-2026-52722 [Orabug: 39799399] [1.10.4-4.0.1] - Security update for CVE-2026-3082 [Orabug: 39199326]

  • High max 7.5
    ELSA-2026-8517 2 CVEs

    Important: libarchive security update (Oracle Linux 7)

    [3.1.2-14.0.3] - Fix CVE-2026-4424 CVE-2026-5121 [Orabug: 39219508] [3.1.2-14.0.1] - rar: Fix double free [Orabug: 38364091][CVE-2025-5914]

  • High max 7.5
    ELSA-2026-26564 4 CVEs

    Important: dovecot security update (Oracle Linux 7)

    [1:2.2.36-8] - update release number [1:2.2.36-7.1] - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752) - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757) - fix CVE-2020-12674 crash due to assert in …

  • High max 8.4
    ELSA-2026-41904 1 CVE

    Important: evince security update (Oracle Linux 7)

    [3.28.2-10.0.1] - Fix CVE-2026-46529 [Orabug: 39757172]

  • High max 4.3
    ELSA-2026-49513 1 CVE

    Important: dovecot security update (Oracle Linux 7)

    [1:2.2.36-8.0.3] - Backport fix for CVE-2026-42006 [Orabug: 39820967] [1:2.2.36-8.0.1] - Backport fix for CVE-2025-59032 [Orabug: 39573795] - Backport fix for CVE-2026-27856 [Orabug: 39573795] - Backport fix for CVE-2026-27857 [Orabug: 39573795] - Backport fi…

  • High max 6.0
    ELSA-2026-50728 6 CVEs

    Important: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 8)

    ruby [3.3.12-8] - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg

  • High max 6.0
    ELSA-2026-50827 6 CVEs

    Important: ruby:4.0 security, bug fix, and enhancement update (Oracle Linux 9)

    ruby [4.0.6-34] - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 [0.5.7-1] - Upgrade to mysql2 0.5.7. Related: RHEL-142278 [0.5.5-3] - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 [0.5.5-2] - Adapt tests to…

  • High max 7.5
    ELSA-2026-52841 1 CVE

    Important: nodejs-nodemon security update (Oracle Linux 10)

    [3.1.14-3] - Fix CVE-2026-69152 - brace-expansion

  • High max 9.3
    ELSA-2026-34911 7 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.6
    ELSA-2026-37397 2 CVEs

    Important: ruby security update (Oracle Linux 7)

    [2.0.0.648-39.0.1] - Fix CVE-2026-42246 and CVE-2026-42258 [Orabug: 39711420]

  • High max 9.3
    ELSA-2026-500150 21 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-205.92.4.2] - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39844842] - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39844812] {CVE-2026-68480} - KV…

  • High max 7.8
    ELSA-2026-51153 1 CVE

    Important: gpsd-minimal security update (Oracle Linux 9)

    [3.26.1-2.0.1.el9_8.1] - Replaced upstream reference [Orabug: 35865525] [1:3.26.1-2.el9_8.1] - fix command injection in gpsprof (CVE-2026-58459) [1:3.26.1-2] - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navc…

  • High max 6.0
    ELSA-2026-50828 6 CVEs

    Important: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 9)

    ruby [3.3.12-8] - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 [0.5.5-3] - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 [0.5.5-2] - Adapt tests to openssl 3.2 Resolves: RHEL-80222 [0.5.5-1] - Upgrade to …

  • High max 7.8
    ELSA-2026-33685 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2026-34372 3 CVEs

    Important: gnutls security update (Oracle Linux 7)

    [3.3.29-9.0.1] - Regenerate PKCS#11 test certificates [Orabug: 39674042] - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 [Orabug: 39674042]