Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 7.5

ELSA-2026-5145 1 CVE

Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)

[0.2.3-4] - Bump release for rebuild

Mar 19, 2026
High max 7.5

ELSA-2026-4148 1 CVE

Important: python-pyasn1 security update (Oracle Linux 7)

[0.1.9-7.0.1] - Fixes CVE-2026-23490 fixes potential memory exhaustion [Orabug: 39060516]

Mar 18, 2026
High max 8.3

ELSA-2026-4728 3 CVEs

Important: libpng security update (Oracle Linux 8)

[2:1.6.34-10] - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659)

Mar 17, 2026
High max 9.1

ELSA-2026-4672 3 CVEs

Important: container-tools:rhel8 security update (Oracle Linux 8)

aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 [2:1.10.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 [2:1.9.0-1] - update to https://github.com/containers/a…

Mar 17, 2026
High max 7.7

ELSA-2026-2714 5 CVEs

Important: freerdp security update (Oracle Linux 7)

[2:2.2.0-5.0.1] - fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533 CVE-2026-23884 [Orabug: 38971897]

Mar 16, 2026
High max 8.8

ELSA-2026-4629 1 CVE

Important: libvpx security update (Oracle Linux 10)

[1.14.1-6] - Add patch for superindex full Resolves: RHEL-150332

Mar 16, 2026
High max 7.5

ELSA-2026-4443 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 8)

[9.0.115-1.0.1] - Add support for Oracle Linux [9.0.115-1] - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152941

Mar 13, 2026
High max 7.5

ELSA-2026-4455 1 CVE

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.125-1.0.1] - Add support for Oracle Linux [8.0.125-1] - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152929

Mar 12, 2026
High max 7.5

ELSA-2026-4458 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 8)

[10.0.104-1.0.1] - Add support for Oracle Linux [10.0.104-1] - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152949

Mar 12, 2026
High max 8.8

ELSA-2026-4447 1 CVE

Important: libvpx security update (Oracle Linux 9)

[1.9.0-10] - Add patch for superindex full Resolves: RHEL-150344

Mar 12, 2026
High max 7.5

ELSA-2026-4445 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 9)

[10.0.104-1.0.1] - Add support for Oracle Linux [10.0.104-1] - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152952

Mar 12, 2026
High max 7.5

ELSA-2026-4454 1 CVE

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.125-1.0.1] - Add support for Oracle Linux [8.0.125-1] - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152936

Mar 12, 2026
High max 7.5

ELSA-2026-4456 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 9)

[9.0.115-1.0.1] - Add support for Oracle Linux [9.0.115-1] - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152944

Mar 12, 2026
High max 7.5

ELSA-2026-4450 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 10)

[9.0.115-1.0.1] - Add support for Oracle Linux [9.0.115-1] - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152946

Mar 12, 2026
High max 7.5

ELSA-2026-4451 1 CVE

Important: .NET 8.0 security update (Oracle Linux 10)

[8.0.125-1.0.1] - Add support for Oracle Linux [8.0.125-1] - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152937

Mar 12, 2026
High max 7.5

ELSA-2026-4453 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 10)

[10.0.104-1.0.1] - Add support for Oracle Linux [10.0.104-1] - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152954

Mar 12, 2026
High max 8.3

ELSA-2026-4306 3 CVEs

Important: mingw-libpng security update (Oracle Linux 8)

[1.6.34-2] - Fix the following CVEs CVE-2026-22695 CVE-2026-22801 CVE-2026-25646 - Resolves: RHEL-148855 - Resolves: RHEL-146662 - Resolves: RHEL-148341

Mar 11, 2026
High max 8.1

ELSA-2026-3058 2 CVEs

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-7.0.5] - Fix CVE-2025-62171 and CVE-2026-23876 [Orabug: 38997140] [6.9.10.68-7.0.3] - Security update CVE-2025-57803 [Orabug: 38455460] [6.9.10.68-7.0.1] - Fix for CVE-2025-55154 [Orabug: 38417011]

Mar 10, 2026
High max 8.8

ELSA-2026-4064 3 CVEs

Important: postgresql:12 security update (Oracle Linux 8)

[12.22-6.0.1] - Add backport of CVE-2025-8714 [Orabug: 38667546] [12.22-6] - Fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 [12.22-5] - Fix previous Backport [12.22-4] - Backport CVE-2025-8715 [12.22-3] - Fix backport for CVE-2025-1094 [12.22-2] - Backport fix…

Mar 10, 2026
High max 7.8

ELSA-2026-3966 2 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-611.38.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Mar 10, 2026
High max 7.8

ELSA-2026-4173 5 CVEs

Important: gimp security update (Oracle Linux 9)

[2:3.0.4-1.4] - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048

Mar 10, 2026
High max 9.8

ELSA-2026-50145 147 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-318.199.3.2] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet) [Orabug: 39057366] - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet) [Orabug: 39057366] {CVE-2026-23209} - netfilter: nf_t…

Mar 10, 2026
High max 7.8

ELSA-2026-4012 10 CVEs

Important: kernel security update (Oracle Linux 10)

[6.12.0-124.43.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Mar 10, 2026
High max 9.1

ELSA-2026-4164 3 CVEs

Important: git-lfs security update (Oracle Linux 10)

[3.6.1-7] - Rebuild with new Golang [3.6.1-6] - Rebuild with new Golang [3.6.1-5] - Rebuild with new Golang

Mar 10, 2026
High max 9.8

ELSA-2026-50144 58 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-109.67.6] - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Menglong Dong) [Orabug: 39027305] [6.12.0-109.67.5] - uek-rpm: fixed specs to explicitly call python3 as set as a requirement (Mark Nicholson) [Orabug: 38933158] - Revert 'net/…

Mar 10, 2026
High max 7.8

ELSA-2026-3963 2 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.111.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

Mar 9, 2026
High max 8.8

ELSA-2026-3967 1 CVE

Important: libvpx security update (Oracle Linux 8)

[1.7.0-13] - Add patch for superframe index full Resolves: RHEL-150334

Mar 9, 2026
High max 9.1

ELSA-2026-3985 2 CVEs

Important: git-lfs security update (Oracle Linux 8)

[3.4.1-8] - Rebuild with new Golang - Resolves: RHEL-146094, RHEL-149269

Mar 9, 2026
High max 8.8

ELSA-2026-4024 3 CVEs

Important: postgresql:13 security update (Oracle Linux 8)

pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 [1.4.0-4] - Bump release for rebuild against libpq-12.1-3 [1.4.0-3] - BuildRequires libpq-devel [1.4.0-2] - BuildRequires postgresql-server-devel [1.4.0-1] - Update to 1.4.0 [1.3.1-1] - Update to 1…

Mar 9, 2026
High max 8.8

ELSA-2026-4059 3 CVEs

Important: postgresql:15 security update (Oracle Linux 8)

pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 [1.5.0-1] - Update to version 1.5.0 Related: #1855776 [1.4.0-4] - Bump release for rebuild against libpq-12.1-3 [1.4.0-3] - BuildRequires libpq-devel [1.4.0-2] - BuildRequires pos…

Mar 9, 2026
High max 8.8

ELSA-2026-4063 3 CVEs

Important: postgresql:16 security update (Oracle Linux 8)

pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…

Mar 9, 2026
High max 7.5

ELSA-2026-4146 1 CVE

Important: python-pyasn1 security update (Oracle Linux 8)

[0.3.7-6.el8_10.1] - Resolves: RHEL-148145

Mar 9, 2026
High max 8.8

ELSA-2026-3896 3 CVEs

Important: postgresql:15 security update (Oracle Linux 9)

pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …

Mar 9, 2026
High max 8.8

ELSA-2026-4110 4 CVEs

Important: postgresql:16 security update (Oracle Linux 9)

pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pg_repack [1.5.1-1] - Update to v1.5.1 [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 [1.4.8-1] - Res…

Mar 9, 2026
High max 7.8

ELSA-2026-50142 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.353.3] - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca) [Orabug: 38934000] - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 38934000] - Revert 'xfrm: destroy xfrm_…

Mar 8, 2026
High max 9.1

ELSA-2026-3898 2 CVEs

Important: osbuild-composer security update (Oracle Linux 8)

[101.4-4.0.1] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - su…

Mar 6, 2026
High max 9.1

ELSA-2026-3839 3 CVEs

Important: image-builder security update (Oracle Linux 9)

[45-1.0.3] - Rebuilt to fix CVE-2025-61726, CVE-2025-61729, CVE-2025-68121

Mar 6, 2026
High max 9.1

ELSA-2026-3840 3 CVEs

Important: image-builder security update (Oracle Linux 10)

[45-1.0.3] - Rebuilt to fix CVE-2025-61726, CVE-2025-61729, CVE-2025-68121

Mar 6, 2026
High max 9.1

ELSA-2026-3753 4 CVEs

Important: osbuild-composer security update (Oracle Linux 9)

[149-4.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OL…

Mar 5, 2026
High max 9.1

ELSA-2026-3928 3 CVEs

Important: git-lfs security update (Oracle Linux 9)

[3.6.1-7] - Rebuild with new Golang - Resolves: RHEL-146860, RHEL-149620 [3.6.1-6] - Rebuild with new Golang - Resolves: RHEL-147080 [3.6.1-5] - Rebuild with new Golang - Resolves: RHEL-147103

Mar 5, 2026