5,089 results · Clear filters · Feed
-
High max 8.1ELSA-2026-18065 1 CVE
Important: ruby security update (Oracle Linux 10)
[3.3.10-12] - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171244
-
High max 6.6ELSA-2026-6617 4 CVEs
Important: vim security update (Oracle Linux 7)
[2:7.4.629-8.0.3] - Security update CVE-2026-25749 CVE-2026-28417 - CVE-2026-28421 CVE-2026-33412 [Orabug: 39170094]
-
High max 5.1ELSA-2026-8883 1 CVE
Important: giflib security update (Oracle Linux 7)
[4.1.6-9.0.3] - Security update for CVE-2026-23868 [Orabug: 39230174]
-
High max 7.5ELSA-2026-11371 1 CVE
Important: bind security update (Oracle Linux 7)
[32:9.11.4-26.0.7.P2.16] - Resolve CVE-2026-1519 [Orabug: 39275755] [32:9.11.4-26.0.5.P2.16] - Resolve CVE-2025-40778 [Orabug: 38699863] [32:9.11.4-26.0.3.P2.16] - Resolve CVE-2024-11187 [Orabug: 37616907]
-
High max 7.8ELSA-2026-17533 4 CVEs
Important: gimp:2.8 security update (Oracle Linux 8)
gimp [2:2.8.22-26.6] - fix CVE-2026-4150 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 [2:2.8.22-26.5] - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2048 [2:2.8.22-26.4] - fix CVE-2025-14422 [2:2.8.22-26.3] - fix CVE…
-
High max 7.4ELSA-2026-17481 1 CVE
Important: rsync security update (Oracle Linux 8)
[3.1.3-25] - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling
-
High max 7.5ELSA-2026-16252 2 CVEs
Important: jq security update (Oracle Linux 8)
[1.6-12] - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions - Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized() - Resolves: RHEL-168174 - Resolves: RHEL-168192
-
High max 7.5ELSA-2026-16875 4 CVEs
Important: git-lfs security update (Oracle Linux 8)
[3.4.1-10] - Rebuild with new Golang - Resolves: RHEL-167541, RHEL-167379, RHEL-166518 [3.4.1-9] - Rebuild with new Golang - Resolves: RHEL-156637
-
High max 5.9ELSA-2026-16799 2 CVEs
Important: krb5 security update (Oracle Linux 8)
[1.18.2-34.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-34] - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594
-
High max 8.8ELSA-2026-16195 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.124.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
High max 7.8ELSA-2026-16484 6 CVEs
Important: gimp security update (Oracle Linux 9)
[2:3.0.4-1.5] - fix CVE-2026-4150 - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887
-
High max 7.5ELSA-2026-16693 2 CVEs
Important: jq security update (Oracle Linux 9)
[1.6-19.0.2] - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions - Resolves: RHEL-168184 [1.6-19.1] - Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized() - Resolves: RHEL-168201 [1.6-19] - Fix CVE-2025-48060 - Resolv…
-
High max 8.8ELSA-2026-16206 1 CVE
Important: kernel security update (Oracle Linux 9)
[5.14.0-611.55.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 9.8ELSA-2026-50271 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-320.202.8.3] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Jeff Layton) [Orabug: 39362036] {CVE-2026-31402} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [Orabug: 39362005] {CVE-2026-2327…
-
High max 7.5ELSA-2026-16692 2 CVEs
Important: jq security update (Oracle Linux 10)
[1.7.1-13] - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions [1.7.1-12] - Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()
-
High max 7.5ELSA-2026-17075 2 CVEs
Important: yggdrasil security update (Oracle Linux 10)
[0.4.8-5] - Bump release for rebuild
-
High max 9.8ELSA-2026-50270 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-202.76.4.2] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (Victor Nogueira) [Orabug: 39361451] {CVE-2026-23270} - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [Orabug: 39361449]…
-
High max 8.8ELSA-2026-16062 1 CVE
Important: kernel security update (Oracle Linux 10)
[6.12.0-124.56.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.8ELSA-2026-16055 1 CVE
Important: libtiff security update (Oracle Linux 8)
[4.0.9-37] - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159316)
-
High max 8.6ELSA-2026-15887 1 CVE
Important: openexr security update (Oracle Linux 9)
[3.1.1-3.2] - fix CVE-2026-34588
-
High max 9.8
Important: thunderbird security update (Oracle Linux 9)
[140.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.10.0] - Add OpenELA debranding [140.10.0-1] - Update to 140.10.0 ESR
-
High max 8.6ELSA-2026-15888 1 CVE
Important: openexr security update (Oracle Linux 10)
[3.1.10-8.2] - fix CVE-2026-34588
-
High max 8.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.355.3.1] - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39344527] {CVE-2026-43284} - x86/CPU/AMD: Add a fix for AMD-SB-7052 (Prathyushi Nangia) [Orabug: 39344576] {CVE-2025-54518} [5.4.17-2136.355.3] - crypto: a…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-320.202.8.2] - xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman) [Orabug: 39344515] {CVE-2026-43284} - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39344515] {CVE-2026-43284} [5.15.0-320.202.8.1] - x86/CPU/A…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
-
High max 8.8ELSA-2026-50258 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.354.4.3] - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39342682] {CVE-2026-43284}
-
High max 8.8ELSA-2026-50257 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-319.201.4.6] - xfrm: esp: ipv4: fix up flags setting (Greg Kroah-Hartman) [Orabug: 39342679] {CVE-2026-43284} - xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [Orabug: 39342679] {CVE-2026-43284} [5.15.0-319.201.4.5] - iommu/arm…
-
High max 8.8ELSA-2026-50259 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-201.74.2.3] - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [Orabug: 39342689] {CVE-2026-43500} - rxrpc: Fix conn-level packet handling to unshare RESPONSE packets (David Howells) [Orabug: 39342689] - rxrpc: only…
-
High max 7.8ELSA-2026-14929 1 CVE
Important: mingw-libtiff security update (Oracle Linux 8)
[4.0.9-4] - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile Resolves: RHEL-159337
-
High max 7.5ELSA-2026-13902 1 CVE
Important: resource-agents security update (Oracle Linux 8)
[4.9.0-54.33] - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157190 [4.9.0-54.32] - db2: do not use db2stop to avoid divergence in the log Resolves: RHEL-166181 [4.9.0-54.31] - db2: set reintegration when promotion is successful Resolves: RHEL-153157
-
High max 8.8ELSA-2026-7673 4 CVEs
Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update (Oracle Linux 7)
gstreamer1-plugins-bad-free [1.10.4-4.0.1] - Security update for CVE-2026-3082 [Orabug: 39199326] gstreamer1-plugins-base [1.10.4-2.0.3] - Security update for CVE-2026-2921 [Orabug: 39199326] [1.10.4-2.0.1] - Fixed CVE-2024-47607,CVE-2024-47538 and CVE-2024-4…
-
High max 7.5ELSA-2026-13830 3 CVEs
Important: dovecot security update (Oracle Linux 8)
[1:2.3.16-7] - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161630) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162282) - fix CVE-2026-27857: den…
-
High max 7.5ELSA-2026-13857 3 CVEs
Important: dovecot security update (Oracle Linux 9)
[1:2.3.16-15.1] - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161639) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162287) - fix CVE-2026-27857: …
-
High max 7.5ELSA-2026-13917 1 CVE
Important: fence-agents security update (Oracle Linux 9)
[4.10.0-98.13] - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157201 [4.10.0-98.12] - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-148436, RHEL-155675
-
High max 7.5ELSA-2026-13671 1 CVE
Important: image-builder security update (Oracle Linux 9)
[45-1.0.4] - Rebuilt to fix CVE-2026-25679, CVE-2026-27137
-
High max 7.5ELSA-2026-14200 3 CVEs
Important: git-lfs security update (Oracle Linux 9)
[3.6.1-8.1] - Rebuild with new Golang - Resolves: RHEL-167659, RHEL-170836, RHEL-166651
-
High max 8.2ELSA-2026-13672 2 CVEs
Important: fence-agents security update (Oracle Linux 9)
[4.10.0-98.12] - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-148436, RHEL-155675
-
High max 7.5ELSA-2026-13916 2 CVEs
Important: fence-agents security update (Oracle Linux 10)
[4.16.0-13.4] - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157186, RHEL-155667
-
High max 7.5ELSA-2026-13642 1 CVE
Important: image-builder security update (Oracle Linux 10)
[45-1.0.4] - Rebuilt to fix CVE-2026-25679, CVE-2026-27137
-
High max 9.8ELSA-2026-8578 2 CVEs
Important: perl-XML-Parser security update (Oracle Linux 7)
[2.41-10.0.3] - Security update for CVE-2006-10002 and CVE-2006-10003 [Orabug: 39220442]