Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 7.7
    ELSA-2026-3034 1 CVE

    Important: munge security update (Oracle Linux 9)

    [0.5.13-14.0.1] - Updated path for removal of unneeded init file [0.5.13-14] - Fix CVE-2026-25506 - Resolved: RHEL-148533

  • High max 9.1
    ELSA-2026-3040 3 CVEs

    Important: grafana-pcp security update (Oracle Linux 9)

    [5.1.1-12] - Resolves RHEL-146864: CVE-2025-61726 - Resolves RHEL-147082: CVE-2025-61729 - Resolves RHEL-149622: CVE-2025-68121

  • High max 5.6
    ELSA-2026-3067 3 CVEs

    Important: freerdp security update (Oracle Linux 9)

    [2:2.11.7-1.2] - Backport several CVE fixes Resolves: RHEL-148847, RHEL-148887, RHEL-149020

  • High max 8.2
    ELSA-2026-3095 1 CVE

    Important: protobuf security update (Oracle Linux 9)

    [3.14.0-17] - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits

  • High max 9.1
    ELSA-2026-3035 3 CVEs

    Important: grafana-pcp security update (Oracle Linux 10)

    [5.3.0-2] - Resolves RHEL-146722: CVE-2025-61726 - Resolves RHEL-146927: CVE-2025-61729 - Resolves RHEL-149228: CVE-2025-68121

  • High max 7.7
    ELSA-2026-3033 1 CVE

    Important: munge security update (Oracle Linux 10)

    [0.5.15-11] - Fix CVE-2026-25506

  • High max 8.7
    ELSA-2026-3068 5 CVEs

    Important: freerdp security update (Oracle Linux 10)

    [2:3.10.3-5.2] - Backport several CVE fixes Resolves: RHEL-147912, RHEL-148815, RHEL-148859, RHEL-148892, RHEL-148973

  • High max 9.1
    ELSA-2026-3092 2 CVEs

    Important: golang-github-openprinting-ipp-usb security update (Oracle Linux 10)

    [0.9.27-5] - rebuilt to fix CVE-2025-68121, CVE-2025-61726

  • High max 8.2
    ELSA-2026-3094 1 CVE

    Important: protobuf security update (Oracle Linux 10)

    [3.19.6-15] - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits [3.19.6-14] - Disable tests during build that are flaky [3.19.6-13] - Rebuilt for tests directory [3.19.6-12] - Copy patch from c9s to make emacs dependency optional Resolve…

  • High max 9.8
    ELSA-2026-50112 175 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-108.64.6.3] - net/rds: Fix issue with a revert in rds_send_queue_rm (Sharath Srinivasan) [Orabug: 38937451] [6.12.0-108.64.6.2] - Revert 'net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn' (Sharath Srinivasan) [Orabug: 38937451] - R…

  • High max 7.5
    ELSA-2026-0847 5 CVEs

    Important: java-11-openjdk security update (Oracle Linux 7)

    [1:11.0.31.0.1-1.0.1] - Update to jdk-11.0.31+1 [Orabug: 38950473] - Fixes CVE-2025-64720 CVE-2025-65018 CVE-2026-21925 - CVE-2026-21933 CVE-2026-21945

  • High max 7.8
    ELSA-2026-1677 1 CVE

    Important: gnupg2 security update (Oracle Linux 7)

    [2.0.22-5.0.1] - Fix CVE-2025-68973 (gpg.fail/memcpy) [Orabug: 38914175]

  • High max 9.8
    ELSA-2026-2231 13 CVEs

    Important: firefox security update (Oracle Linux 7)

    [140.7.0-1.0.1] - Update to 140.7.0 ESR [Orabug: 38940976][CVE-2025-14327][CVE-2026-0877] [CVE-2026-0878][CVE-2026-0879][CVE-2026-0880][CVE-2026-0882][CVE-2026-0883] [CVE-2026-0884][CVE-2026-0885][CVE-2026-0886][CVE-2026-0887][CVE-2026-0890] [CVE-2026-0891] […

  • High max 7.5
    ELSA-2026-2782 6 CVEs

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.22.0-1] - Update to 22.22.0 Resolves: RHEL-141879 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 [2.0.20-2] - Patch bundled glob-parent - Resolves: CVE-2021-35065 [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-3517 [2.0.1…

  • High max 7.5
    ELSA-2026-2783 6 CVEs

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.20.0-1] - Update to version 20.20.0 Resolves: RHEL-141917 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 [2.0.20-2] - Patch bundled glob-parent - Resolves: CVE-2021-35065 [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-351…

  • High max 9.1
    ELSA-2026-2920 5 CVEs

    Important: grafana security update (Oracle Linux 9)

    [10.2.6-17] - Resolves RHEL-144959: CVE-2026-21721 - Resolves RHEL-146863: CVE-2025-61726 - Resolves RHEL-147081: CVE-2025-61729 - Resolves RHEL-147370: CVE-2025-61728 - Resolves RHEL-149621: CVE-2025-68121 [10.2.6-17] - Resolves RHEL-125692: CVE-2025-58183 -…

  • High max 9.1
    ELSA-2026-2914 5 CVEs

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-22] - Resolves RHEL-144948: CVE-2026-21721 - Resolves RHEL-146721: CVE-2025-61726 - Resolves RHEL-146926: CVE-2025-61729 - Resolves RHEL-147351: CVE-2025-61728 - Resolves RHEL-149227: CVE-2025-68121

  • High max 7.5
    ELSA-2026-2781 6 CVEs

    Important: nodejs:24 security update (Oracle Linux 9)

    nodejs [1:24.13.0-1] - Update to version 24.13.0 nodejs-nodemon [3.0.3-3] - Keep BR on just npm [3.0.3-2] - Fix BR for nodejs-npm nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121581 [2021.06-5] - nod…

  • High max 7.5
    ELSA-2019-2726 2 CVEs

    Important: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

    go-toolset [1.11.13-1] - Bump version to 1.11.13 - Related: rhbz#1743204 - Related: rhbz#1743206 golang [1.11.13-2] - Improve error message when using non-FIPS API in FIPS mode. - Fixes CVE-2019-9512. - Fixes CVE-2019-9514. - Resolves: rhbz#1745711 - Resolves…

  • High max 9.1
    ELSA-2026-2708 4 CVEs

    Important: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.7-1] - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146469

  • High max 7.8
    ELSA-2023-5264 2 CVEs

    Important: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport [8.8-2] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236373 libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-33] - CVE-2023-3354 QEMU: VNC:…

  • High max 7.8
    ELSA-2026-2707 1 CVE

    Important: gimp security update (Oracle Linux 9)

    [2:3.0.4-1.3] - fix CVE-2025-15059

  • High max 9.1
    ELSA-2026-2709 4 CVEs

    Important: golang security update (Oracle Linux 9)

    [1.25.7-1] - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146476

  • High max 9.1
    ELSA-2026-2706 4 CVEs

    Important: golang security update (Oracle Linux 10)

    [1.25.7-1] - Rebase to latest rhel-10-main (170a5b7e084)

  • High max 8.4
    ELSA-2026-2719 1 CVE

    Important: gnupg2 security update (Oracle Linux 10)

    [2.4.5-4] - Fix CVE-2026-24882 (tpm2daemon buffer overflow)

  • High max 9.8
    ELSA-2026-50113 74 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-317.197.5.1] - Revert 'net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn' (Vijayendra Suman) [Orabug: 38961010] - Revert 'net/rds: expand kref coverage to rds_notifier->n_conn' (Sharath Srinivasan) [Orabug: 38961010] [5.15.0-317.197…

  • High max 7.5
    ELSA-2026-2421 6 CVEs

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [1:22.22.0-1] - Update to 22.22.0 Resolves: RHEL-118152 nodejs-nodemon [3.0.1-1] - Exclude ix86 arches from building. Related: RHEL-35991 nodejs-packaging [2021.06-4] - Exclude ix86 arches from building. Related: RHEL-35991

  • High max 8.2
    ELSA-2026-0925 1 CVE

    Important: libsoup security update (Oracle Linux 7)

    [2.62.2-2.0.9] - Fix CVE-2025-14523 [Orabug: 38873507] [2.62.2-2.0.7] - Backport patch for CVE-2025-4945 and CVE-2025-11021 [Orabug: 38664275] [2.62.2-2.0.5] - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 [Orabug: 38085184] - CVE-2025-32906 CVE-2025-32911…

  • High max 7.5
    ELSA-2026-2422 6 CVEs

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.20.0-1] - Update to version 20.20.0 Resolves: RHEL-130972 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883

  • High max 7.5
    ELSA-2026-2389 1 CVE

    Important: brotli security update (Oracle Linux 8)

    [1.0.6-4] - Resolves: RHEL-133986 CVE-2025-6176 Brotli decompression bomb DoS in scrapy

  • High max 7.5
    ELSA-2026-2420 6 CVEs

    Important: nodejs:24 security update (Oracle Linux 8)

    nodejs [1:24.13.0-1] - Update to 24.13.0 Resolves: RHEL-135257 [1:24.4.1-1] - Initial import of nodejs:24 nodejs-nodemon [3.0.3-1] - Initial import into nodejs:24 module nodejs-packaging [2021.06-6] - Properly handle @group/package deps in nodejs-symlink-deps…

  • High max 6.9
    ELSA-2026-2452 1 CVE

    Important: pcs security update (Oracle Linux 9)

    [0.11.10-1.el9_7.2] - Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1 Resolves: RHEL-144292

  • High max 8.6
    ELSA-2026-2410 1 CVE

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs

  • High max 6.9
    ELSA-2026-2438 1 CVE

    Important: pcs security update (Oracle Linux 10)

    [0.12.1-1.el10_1.2] - Fixed CVE-2025-13465 by updating pcs-web-ui to 0.1.23.1 Resolves: RHEL-144292

  • High max 7.5
    ELSA-2026-0931 3 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1.8.0.482.b08-1.0.1] - Update to 8u482-b08 (GA). [Orabug: 38893614] - Update release notes for 8u482-b08. - Resolves: RHEL-142689 - Resolves: RHEL-139521 - Resolves: RHEL-131446 - Resolves: RHEL-131459 - Resolves: RHEL-142865 - Resolves: RHEL-142696 - Fixes …

  • High max 8.6
    ELSA-2026-2215 2 CVEs

    Important: libsoup security update (Oracle Linux 8)

    [2.62.3-13] - Backport patch for CVE-2026-1761 [2.62.3-12] - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode

  • High max 9.8
    ELSA-2026-2220 13 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [140.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.7.0] - Add OpenELA debranding [140.7.0-1] - Update to 140.7.0 ESR

  • High max 7.5
    ELSA-2026-2323 1 CVE

    Important: git-lfs security update (Oracle Linux 8)

    [3.4.1-7] - Rebuild with new Golang - Resolves: RHEL-140536

  • High max 8.1
    ELSA-2026-2264 8 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.104.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • High max 8.6
    ELSA-2026-2216 2 CVEs

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-12.5] - Backport patch for CVE-2026-1761 [2.72.0-12.4] - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode