5,089 results · Clear filters · Feed
-
High max 8.9ELSA-2026-1224 3 CVEs
Important: python3.11-urllib3 security update (Oracle Linux 8)
[1.26.12-6] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140555, RHEL-139408
-
High max 8.9ELSA-2026-1226 3 CVEs
Important: python3.12-urllib3 security update (Oracle Linux 8)
[1.26.19-2] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139409
-
High max 8.8ELSA-2026-1142 4 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.97.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 8.9ELSA-2026-1254 3 CVEs
Important: python-urllib3 security update (Oracle Linux 8)
[1.24.2-9] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139410
-
High max 8.9ELSA-2026-1088 3 CVEs
Important: python3.12-urllib3 security update (Oracle Linux 9)
[1.26.19-1.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139403
-
High max 8.9ELSA-2026-1089 3 CVEs
Important: python3.11-urllib3 security update (Oracle Linux 9)
[1.26.12-5.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140565, RHEL-139404
-
High max 8.9ELSA-2026-1087 3 CVEs
Important: python-urllib3 security update (Oracle Linux 9)
[1.26.5-6.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139401
-
High max 8.9ELSA-2026-1086 3 CVEs
Important: python-urllib3 security update (Oracle Linux 10)
[1.26.19-2.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139387
-
High max 7.5ELSA-2026-0928 5 CVEs
Important: java-21-openjdk security update (Oracle Linux 8)
[1:21.0.10.0.7-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.10.0.7-1] - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that gr…
-
High max 7.1ELSA-2026-0251 1 CVE
Important: libpng security update (Oracle Linux 7)
[2:1.5.13-8.0.1] - Fix CVE-2025-64720 [Orabug: 38824465]
-
High max 7.5ELSA-2026-0927 5 CVEs
Important: java-17-openjdk security update (Oracle Linux 8)
[1:17.0.18.0.8-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.18.0.8-1] - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set …
-
High max 7.5ELSA-2026-0921 1 CVE
Important: go-toolset:ol8 security update (Oracle Linux 8)
delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.5-1] - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139365
-
High max 7.8ELSA-2026-0914 4 CVEs
Important: gimp security update (Oracle Linux 9)
[2:3.0.4-1.2] - fix CVE-2025-14422 - fix CVE-2025-14423 - fix CVE-2025-14424 - fix CVE-2025-14425 [2:3.0.4-1.1] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934
-
High max 7.5ELSA-2026-0923 1 CVE
Important: golang security update (Oracle Linux 9)
[1.25.5-2] - Rebase to rhel-9-main - Related: RHEL-139366 [1.25.5-1] - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139366 [1.25.3-2] - Cleanup lib/ ownership
-
High max 9.8ELSA-2026-0924 13 CVEs
Important: thunderbird security update (Oracle Linux 9)
[140.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.7.0] - Add OpenELA debranding [140.7.0-1] - Update to 140.7.0 ESR
-
High max 7.5ELSA-2026-0922 1 CVE
Important: golang security update (Oracle Linux 10)
[1.25.5-1] - Update to Go 1.25.5 (fips-1) [1.25.3-5] - gating.yaml: Add tier1 s390x tests [1.25.3-4] - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_…
-
High max 7.0ELSA-2026-0698 1 CVE
Important: mariadb-devel:10.3 security update (Oracle Linux 8)
asio [1.10.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild galera [25.3.37-1.0.1] - Bump release for rebuild - x86_64 and i386 need to be built the same day Judy [1.0.5-18.0.1] - Rebuild [Orabug: 31667911] mariadb [3:10.3.39-2.0.1] - …
-
High max 9.8ELSA-2026-0793 5 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-611.24.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 9.8ELSA-2026-0786 1 CVE
Important: kernel security update (Oracle Linux 10)
[6.12.0-124.28.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.5ELSA-2026-0845 1 CVE
Important: brotli security update (Oracle Linux 10)
[1.1.0-7] - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.351.3.2] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38855323] {CVE-2025-40280} - tipc: simplify the finalize work queue (Xin Long) [Orabug: 38855323] - vsock: Ignore signal/timeout on connect() if already e…
-
High max 9.8ELSA-2026-0750 1 CVE
Important: net-snmp security update (Oracle Linux 8)
[5.8-33.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 34905643] [1:5.8-33] - fix out of bound access (RHEL-137501) - perl modern auth enablement (RHEL-137310)
-
High max 9.8ELSA-2026-0759 5 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.94.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 7.5ELSA-2026-0753 1 CVE
Important: container-tools:ol8 security update (Oracle Linux 8)
aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah [2:1.33.14-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/a7f8179) - f…
-
High max 8.2ELSA-2026-0752 1 CVE
Important: jmc security update (Oracle Linux 9)
[8.2.0-4] - Bump LZ4 Version to 1.10.2. Related: RHEL-135478
-
High max 9.8ELSA-2026-0771 2 CVEs
Important: gpsd-minimal security update (Oracle Linux 9)
[1:3.26.1-1.0.1.el9_7.1] - Replaced upstream reference [Orabug: 35865525]
-
High max 9.8ELSA-2026-0770 2 CVEs
Important: gpsd security update (Oracle Linux 10)
[1:3.26.1-1.0.1.el10_1.1] - Replace upstream reference [Orabug: 37033219] [1:3.26.1-1.el10_1.1] - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269)
-
High max 9.8ELSA-2026-0667 13 CVEs
Important: firefox security update (Oracle Linux 8)
[140.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.7.0-1] - Update to 140.7.0 ESR
-
High max 9.8ELSA-2026-0694 13 CVEs
Important: firefox security update (Oracle Linux 9)
[140.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
High max 7.8ELSA-2026-50060 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-107.59.3.3] - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38858283] {CVE-2025-40248}
-
High max 9.8ELSA-2026-0007 10 CVEs
Important: firefox security update (Oracle Linux 7)
[140.6.0-1.0.1] - Update to 140.6.0 ESR [Orabug: 38813993][CVE-2025-14321][CVE-2025-14322] [CVE-2025-14323][CVE-2025-14324][CVE-2025-14325][CVE-2025-14328] [CVE-2025-14329][CVE-2025-14330][CVE-2025-14331][CVE-2025-14333] [140.5.0-1.0.1] - Update to 140.5.0 ES…
-
High max 7.8ELSA-2026-0728 1 CVE
Important: gnupg2 security update (Oracle Linux 8)
[2.2.20-4] - Fix CVE-2025-68973 (gpg.fail/memcpy)
-
High max 9.8ELSA-2026-0696 1 CVE
Important: net-snmp security update (Oracle Linux 9)
[5.9.1-17.0.1.1] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.1-17.1] - fix out of bound access issue (RHEL-137510) - enable PQC (RHEL-132653)
-
High max 7.8ELSA-2026-0719 1 CVE
Important: gnupg2 security update (Oracle Linux 9)
[2.3.3-5] - Fix CVE-2025-68973 (gpg.fail/memcpy)
-
High max 9.8ELSA-2026-0668 1 CVE
Important: net-snmp security update (Oracle Linux 10)
[1:5.9.4-15.0.1.2] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.4-15.2] - fix out of bound access (RHEL-137497) [1:5.9.4-15.1] - enable PQC (RHEL-112338)
-
High max 7.8ELSA-2026-0697 1 CVE
Important: gnupg2 security update (Oracle Linux 10)
[2.4.5-3] - Fix CVE-2025-68973 (gpg.fail/memcpy) - Avoid weak dependencies
-
High max 7.5ELSA-2026-0545 1 CVE
Important: podman security update (Oracle Linux 10)
[5.6.0-11.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-11] - update to the latest content…
-
High max 7.8ELSA-2026-50007 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-316.196.4.1] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38788585] {CVE-2025-40280} - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38788587] {CVE-2025-40271} - vsock: Ignore signal/timeout on connect…
-
High max 9.8ELSA-2026-50006 104 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-107.59.3.2] - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) {CVE-2025-40215} [6.12.0-107.59.3.1] - Revert 'iommu/amd: Skip enabling command/event buffers for kdump' (Dongli Zhang) [Orabug: 38781323] [6.12.0-107.59.3] - rds: Add smp_rmb befor…
-
High max 7.8ELSA-2026-50005 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.351.3.1] - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38787139] {CVE-2025-40271} [5.4.17-2136.351.3] - Reapply 'cpuidle: menu: Avoid discarding useful information' (Harshvardhan Jha) [Orabug: 38715366] - fbcon: fix integer overflow…