Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 9.1

ELSA-2026-6470 1 CVE

Important: perl-YAML-Syck security update (Oracle Linux 8)

[1.30-6] - Resolves: RHEL-156475 - Fix CVE-2026-4177

Apr 3, 2026
High max 2.7

ELSA-2026-6462 1 CVE

Important: openssh security update (Oracle Linux 9)

[8.7p1-48.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37814929] - upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064] - Update upstream references [Orabug: 36564626] [8.7p1-48] - CVE-2026-3497: Fix informati…

Apr 3, 2026
High max 8.3

ELSA-2026-6439 1 CVE

Important: libpng15 security update (Oracle Linux 8)

[1.5.30-8] - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148340)

Apr 2, 2026
High max 2.7

ELSA-2026-6461 1 CVE

Important: openssh security update (Oracle Linux 8)

[8.0p1-28.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-28] - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814

Apr 2, 2026
High max 7.0

ELSA-2026-6473 1 CVE

Important: python3 security update (Oracle Linux 8)

[3.6.8-75.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-75] - Security fix for CVE-2026-4519 Resolves: RHEL-158077

Apr 2, 2026
High max 8.3

ELSA-2026-6445 1 CVE

Important: libpng12 security update (Oracle Linux 8)

[1.2.57-6] - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148339)

Apr 2, 2026
High max 2.7

ELSA-2026-6463 1 CVE

Important: openssh security update (Oracle Linux 10)

[9.9p1-13.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37824421] [9.9p1-13] - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155811

Apr 2, 2026
High max 9.3

ELSA-2026-6340 13 CVEs

Important: freerdp security update (Oracle Linux 9)

[2:2.11.7-1.5] - Fix use of nsc_process_message Resolves: RHEL-155993 [2:2.11.7-1.4] - Backport several CVE fixes Resolves: RHEL-148046, RHEL-148049, RHEL-148054, RHEL-148061, RHEL-148079 Resolves: RHEL-148094, RHEL-148096, RHEL-148104, RHEL-148939, RHEL-1490…

Apr 1, 2026
High max 7.5

ELSA-2026-6382 1 CVE

Important: grafana security update (Oracle Linux 9)

[10.2.6-19] - Resolves RHEL-158728: CVE-2026-25679 [10.2.6-17] - Resolves RHEL-144959: CVE-2026-21721 - Resolves RHEL-146863: CVE-2025-61726 - Resolves RHEL-147081: CVE-2025-61729 - Resolves RHEL-147370: CVE-2025-61728 - Resolves RHEL-149621: CVE-2025-68121 […

Apr 1, 2026
High max 7.5

ELSA-2026-6383 1 CVE

Important: grafana-pcp security update (Oracle Linux 9)

[5.1.1-13] - Resolves RHEL-158731: CVE-2026-25679

Apr 1, 2026
High max 8.8

ELSA-2026-6300 7 CVEs

Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update (Oracle Linux 9)

gstreamer1-plugins-bad-free [1.22.12-5] - fix for CVE-2026-2923, CVE-2026-3082 Resolves: RHEL-156231, RHEL-156248 gstreamer1-plugins-base [1.22.12-5] - Apply patch for CVE-2026-2921 Resolves: RHEL-156241 gstreamer1-plugins-good [1.22.12-5] - Apply patches for…

Apr 1, 2026
High max 10.0

ELSA-2026-6342 39 CVEs

Important: thunderbird security update (Oracle Linux 10)

[140.9.0-1.0.1] - Add Oracle prefs [140.9.0-1] - Update to 140.9.0 ESR

Apr 1, 2026
High max 7.5

ELSA-2026-6344 1 CVE

Important: grafana security update (Oracle Linux 10)

[10.2.6-23] - Resolves RHEL-158458: CVE-2026-25679

Apr 1, 2026
High max 7.5

ELSA-2026-6388 1 CVE

Important: grafana-pcp security update (Oracle Linux 10)

[5.3.0-3] - Resolves RHEL-158459: CVE-2026-25679

Apr 1, 2026
High max 7.0

ELSA-2026-6281 1 CVE

Important: python3.11 security update (Oracle Linux 8)

[3.11.13-6.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-6] - Security fix for CVE-2026-4519 Resolves: RHEL-158028

Mar 31, 2026
High max 7.0

ELSA-2026-6283 1 CVE

Important: python3.12 security update (Oracle Linux 8)

[3.12.12-4] - Security fix for CVE-2026-4519 Resolves: RHEL-158029

Mar 31, 2026
High max 7.0

ELSA-2026-6285 1 CVE

Important: python3.12 security update (Oracle Linux 9)

[3.12.12-4.0.1.el9_7.2] - Remove upstream URL reference [3.12.12-4.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158051 [3.12.12-4.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143106 RHEL-143168 R…

Mar 31, 2026
High max 7.0

ELSA-2026-6286 1 CVE

Important: python3.11 security update (Oracle Linux 9)

[3.11.13-5.2.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-5.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158050

Mar 31, 2026
High max 9.2

ELSA-2026-6301 2 CVEs

Important: squid security update (Oracle Linux 9)

[7:5.5-22.4] - Resolves: RHEL-160692 - squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) [7:5.5-22.3] - Resolves: RHEL-160693 - squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)

Mar 31, 2026
High max 7.0

ELSA-2026-6256 1 CVE

Important: python3.12 security update (Oracle Linux 10)

[3.12.12-3.0.1.el10_1.2] - Remove upstream URL reference [3.12.12-3.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158127 [3.12.12-3.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143054 RHEL-143105 …

Mar 31, 2026
High max 8.8

ELSA-2026-6259 7 CVEs

Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update (Oracle Linux 10)

gstreamer1-plugins-bad-free [1.24.11-3] - fix for CVE-2026-2923, CVE-2026-3082 Resolves: RHEL-156111, RHEL-156158 gstreamer1-plugins-base [1.24.11-2] - Apply patch for CVE-2026-2921 Resolves: RHEL-156120 gstreamer1-plugins-good [1.24.11-2] - Apply patches for…

Mar 31, 2026
High max 8.8

ELSA-2026-6005 2 CVEs

Important: freerdp security update (Oracle Linux 8)

[2:2.11.7-4] - Backport several CVE fixes Resolves: RHEL-151979, RHEL-152206

Mar 30, 2026
High max 8.8

ELSA-2026-6004 2 CVEs

Important: freerdp security update (Oracle Linux 9)

[2:2.11.7-1.3] - Backport several CVE fixes Resolves: RHEL-151988, RHEL-152215

Mar 30, 2026
High max 10.0

ELSA-2026-6188 39 CVEs

Important: thunderbird security update (Oracle Linux 9)

[140.9.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.9.0] - Add OpenELA debranding [140.9.0-1] - Update to 140.9.0 ESR

Mar 30, 2026
High max 5.6

ELSA-2026-4471 3 CVEs

Important: freerdp security update (Oracle Linux 7)

[2:2.2.0-5.0.3] - Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 [Orabug: 39075086] [2:2.2.0-5.0.1] - fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533 CVE-2026-23884 [Orabug: 38971897] [2:2.2.0-5] - Update: Refactored RPC gateway parser (…

Mar 27, 2026
High max 8.3

ELSA-2026-4756 1 CVE

Important: libpng security update (Oracle Linux 7)

[2:1.5.13-8.0.3] - Fix CVE-2026-25646 [Orabug: 39093556] [2:1.5.13-8.0.1] - Fix CVE-2025-64720 [Orabug: 38824465]

Mar 27, 2026
High max 10.0

ELSA-2026-5932 37 CVEs

Important: firefox security update (Oracle Linux 8)

[140.9.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.9.0-1] - Update to 140.9.0 ESR

Mar 27, 2026
High max 10.0

ELSA-2026-5930 37 CVEs

Important: firefox security update (Oracle Linux 9)

[140.9.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Mar 27, 2026
High max 10.0

ELSA-2026-5931 37 CVEs

Important: firefox security update (Oracle Linux 10)

[140.9.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.9.0-1] - Update to 140.9.0 ESR

Mar 27, 2026
High max 7.8

ELSA-2026-5942 2 CVEs

Important: golang security update (Oracle Linux 9)

[1.25.8-2] - Update to Go 1.25.8 (fips-1) - Resolves: RHEL-157451

Mar 26, 2026
High max 8.1

ELSA-2026-50171 1 CVE

Unbreakable Enterprise kernel bug fix update (NA) (Oracle Linux 8)

[5.15.0-318.199.3.2.1] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson) [Orabug: 39071316] [5.15.0-318.199.3.2] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [O…

Mar 26, 2026
High max 8.8

ELSA-2026-5939 2 CVEs

Important: freerdp security update (Oracle Linux 10)

[2:3.10.3-5.3] - Backport several CVE fixes Resolves: RHEL-151975, RHEL-152202

Mar 26, 2026
High max 7.8

ELSA-2026-5941 2 CVEs

Important: golang security update (Oracle Linux 10)

[1.25.8-1] - Update to Go 1.25.8 (fips-1)

Mar 26, 2026
High max 8.1

ELSA-2026-50170 1 CVE

Unbreakable Enterprise kernel bug fix update (NA) (Oracle Linux 9)

[6.12.0-200.74.27.1] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Sean Christopherson) [Orabug: 39071315]

Mar 26, 2026
High max 7.8

ELSA-2026-3685 9 CVEs

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.19] - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673} [Orabug: 39036029] - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} [Orabug: 39036029] - atm: clip: Fix infinite recursive call of clip_push(). {CV…

Mar 24, 2026
High max 9.8

ELSA-2026-50160 152 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-200.74.27] - Revert 'uek-rpm: update kABI for FIPS regarding crypto_user' (Saeed Mirzamohammadi) [Orabug: 39033195] - Revert 'fips: remove crypto_user from the FIPS module' (Saeed Mirzamohammadi) [Orabug: 39033195] - Revert 'crypto_user: use FIPS algo…

Mar 20, 2026
High max 7.8

ELSA-2026-5113 4 CVEs

Important: gimp:2.8 security update (Oracle Linux 8)

gimp [2:2.8.22-26.5] - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2048 [2:2.8.22-26.4] - fix CVE-2025-14422 [2:2.8.22-26.3] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 …

Mar 19, 2026
High max 7.5

ELSA-2026-5080 1 CVE

Important: libarchive security update (Oracle Linux 9)

[3.5.3-7] - Resolves: CVE-2026-4111

Mar 19, 2026
High max 7.5

ELSA-2026-5063 1 CVE

Important: libarchive security update (Oracle Linux 10)

[3.7.7-5] - Resolves: CVE-2026-4111

Mar 19, 2026
High max 9.1

ELSA-2026-5146 3 CVEs

Important: yggdrasil security update (Oracle Linux 10)

[0.4.8-3] - Bump release for rebuild

Mar 19, 2026