Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 10.0

ELSA-2025-21936 4 CVEs

Important: valkey security update (Oracle Linux 10)

[8.0.6-2] - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [8.0.4-3] - fix ImageMode: ensure ownership of /etc/valkey [8.0.4-2] - fix ImageMode: add tmpfiles.d entries for directories below /var [8.0.4-1] - rebase to 8.0.4 for…

Dec 2, 2025
High max 7.3

ELSA-2025-22012 2 CVEs

Important: buildah security update (Oracle Linux 10)

[1.41.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.41.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 (https://github.com/containers/buildah/commit/2ece502) - fix…

Dec 2, 2025
High max 10.0

ELSA-2025-21002 1 CVE

Important: squid security update (Oracle Linux 10)

[7:6.10-6.1] - Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling [7:6.10-6] - Resolves: RHEL-86817 - "TCP connection to XX.XX.XX.XX/XXXX failed" message is output f…

Dec 2, 2025
High max 7.5

ELSA-2025-21036 5 CVEs

Important: pcs security update (Oracle Linux 10)

[0.12.1-1.el10_1.1] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938

Dec 2, 2025
High max 7.5

ELSA-2025-21038 1 CVE

Important: kea security update (Oracle Linux 10)

[3.0.1-2] - Fixes CVE-2025-11232 [3.0.1-1] - New version 3.0.1 - Fixes CVE-2025-40779

Dec 2, 2025
High max 8.8

ELSA-2025-21281 9 CVEs

Important: firefox security update (Oracle Linux 10)

[140.5.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.5.0-2] - Update to 140.5.0 ESR

Dec 2, 2025
High max 8.8

ELSA-2025-20998 1 CVE

Important: libtiff security update (Oracle Linux 10)

[4.6.0-6.1] - Fix buffer underflow in TIFFReadRGBAImageOriented(). - Resolves: RHEL-112524

Dec 2, 2025
High max 8.8

ELSA-2025-21020 1 CVE

Important: sssd security update (Oracle Linux 10)

[2.11.1-2.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.11.1-2.1] - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.1.z]

Dec 2, 2025
High max 9.4

ELSA-2025-21037 1 CVE

Important: qt6-qtsvg security update (Oracle Linux 10)

[6.9.1-2.1] - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699

Dec 2, 2025
High max 8.8

ELSA-2025-21407 3 CVEs

Important: libtiff security update (Oracle Linux 7)

[4.0.3-35.0.1] - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools [Orabug: 38658716] - fix CVE-2025-8177: buffer overflow thumbnail setrow [Orabug: 38658716] - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOrie…

Dec 1, 2025
High max 8.8

ELSA-2025-22363 9 CVEs

Important: firefox security update (Oracle Linux 8)

[140.5.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.5.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.5.0-1] - Update to 140.5.0 ESR

Dec 1, 2025
High max 7.8

ELSA-2025-22417 7 CVEs

Important: gimp:2.8 security update (Oracle Linux 8)

gimp [2:2.8.22-26.3] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 [2:2.8.22-26.2] - fix CVE-2025-5473 (RHEL-95696) [2:2.8.22-26.1] - fix CVE-2025-48797 (RHEL…

Dec 1, 2025
High max 8.8

ELSA-2025-28019 1 CVE

Important: postgresql security update (Oracle Linux 8)

[12.22-5.0.1] - Add backport of CVE-2025-8714 [Orabug: 38667546] [12.22-5] - Fix previous Backport [12.22-4] - Backport CVE-2025-8715 [12.22-3] - Fix backport for CVE-2025-1094 [12.22-2] - Backport fix for CVE-2025-1094 [12.22-1] - Update to 12.22 - Fixes: CV…

Nov 28, 2025
High max 7.5

ELSA-2025-22175 1 CVE

Important: expat security update (Oracle Linux 9)

[2.5.0-5.1] - Fix CVE-2025-59375 - Resolves: RHEL-114644

Nov 26, 2025
High max 7.5

ELSA-2025-21974 1 CVE

Important: mingw-expat security update (Oracle Linux 8)

[2.5.0-1] - Rebase to version 2.5.0 - Fix the following CVEs CVE-2023-52425 CVE-2024-28757 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2024-50602 CVE-2024-8176 CVE-2025-59375 - Resolves: RHEL-114628

Nov 25, 2025
High max 7.5

ELSA-2025-21693 1 CVE

Important: haproxy security update (Oracle Linux 9)

[2.8.14-1.1] - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126664

Nov 25, 2025
High max 7.3

ELSA-2025-21702 1 CVE

Important: podman security update (Oracle Linux 9)

[5.6.0-7.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.6.0-7] - update to the latest content o…

Nov 25, 2025
High max 8.8

ELSA-2025-21842 9 CVEs

Important: thunderbird security update (Oracle Linux 9)

[140.5.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.5.0-1] - Update to 140.5.0 ESR

Nov 25, 2025
High max 7.8

ELSA-2025-21968 7 CVEs

Important: gimp security update (Oracle Linux 9)

[2:3.0.4-1.1] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934

Nov 25, 2025
High max 7.3

ELSA-2025-22011 2 CVEs

Important: buildah security update (Oracle Linux 9)

[1.41.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.41.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 (https://github.com/containers/buildah/commit/2ece502) - fix…

Nov 25, 2025
High max 9.8

ELSA-2025-20922 5 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0 [2.48.5-1] - Update to 2.48.5 [2.48.3-1] - Update to 2.48.3 [2.48.2-1] - Update to 2.48.2 - Reenable JIT [2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0 [2.46.6-1] - Update to 2.46.6 [2.4…

Nov 25, 2025
High max 10.0

ELSA-2025-20935 1 CVE

Important: squid security update (Oracle Linux 9)

[7:5.5-22.1] - Resolves: RHEL-122492 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) [7:5.5-22] - Resolves: RHEL-77084 - squid crashes with noteDestinationsEnd check failed

Nov 25, 2025
High max 7.2

ELSA-2025-20936 1 CVE

Important: sqlite security update (Oracle Linux 9)

[3.34.1-9] - Fixes CVE-2025-6965

Nov 25, 2025
High max 8.8

ELSA-2025-20954 1 CVE

Important: sssd security update (Oracle Linux 9)

[2.9.7-4.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] * Fri Oct 17 2025 Tomas Halman <thalman@redhat.com - 2.9.7.4.1 - Resolves: RHEL-120298 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-…

Nov 25, 2025
High max 8.8

ELSA-2025-20956 2 CVEs

Important: libtiff security update (Oracle Linux 9)

[4.4.0-15.2] - fix CVE-2025-8176: tiffdither and tiffmedian skip first line of input images (RHEL-120239) [4.4.0-15.1] - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented (RHEL-112545)

Nov 25, 2025
High max 8.4

ELSA-2025-20957 3 CVEs

Important: runc security update (Oracle Linux 9)

[4:1.3.0-4] - rename errors.go to errors_linux.go - Related: RHEL-122400 [4:1.3.0-3] - Add relevant patches to CVEs - Resolves: RHEL-122400 [4:1.3.0-2] - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolv…

Nov 25, 2025
High max 7.3

ELSA-2025-20958 3 CVEs

Important: tigervnc security update (Oracle Linux 9)

[1.15.0-6] - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-…

Nov 25, 2025
High max 7.5

ELSA-2025-20959 2 CVEs

Important: libsoup security update (Oracle Linux 9)

[2.72.0-12.1] - Backport patch for CVE-2025-4945 and CVE-2025-11021 [2.72.0-12] - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 [2.72.0-11] - Backport patches for various CVEs, plus test …

Nov 25, 2025
High max 8.6

ELSA-2025-21110 2 CVEs

Important: bind security update (Oracle Linux 9)

[32:9.16.23-34.0.1.1] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-34.1] - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE…

Nov 25, 2025
High max 10.0

ELSA-2025-21916 4 CVEs

Important: valkey security update (Oracle Linux 9)

[8.0.6-2] - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

Nov 25, 2025
High max 7.5

ELSA-2025-20962 5 CVEs

Important: pcs security update (Oracle Linux 9)

[0.11.10-1.el9_7.1] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938 [0.11.10-1] - Rebased pcs to the latest sourc…

Nov 25, 2025
High max 8.1

ELSA-2025-20909 2 CVEs

Important: podman security update (Oracle Linux 9)

[5.6.0-6.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.6.0-6] - update to the latest content o…

Nov 25, 2025
High max 10.0

ELSA-2025-20926 4 CVEs

Important: redis security update (Oracle Linux 9)

[6.2.20-2] - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [6.2.19-2] - fix ownership of /usr/lib64/redis RHEL-6784 [6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 [6.2.18-1] - rebase to 6.2.18 for CVE-20…

Nov 25, 2025
High max 9.1

ELSA-2025-20928 1 CVE

Important: ipa security update (Oracle Linux 9)

[4.12.2-22.0.1.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-22.1] - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA [4.12.2-22]…

Nov 25, 2025
High max 8.6

ELSA-2025-21139 2 CVEs

Important: python-kdcproxy security update (Oracle Linux 9)

[1.0.0-9] - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-122779 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-122778

Nov 25, 2025
High max 8.8

ELSA-2025-21280 9 CVEs

Important: firefox security update (Oracle Linux 9)

[140.5.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.5.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Nov 25, 2025
High max 10.0

ELSA-2025-20955 4 CVEs

Important: redis:7 security update (Oracle Linux 9)

[7.2.11-1.0.1] - Build with 64k pages to support redis on UEK on aarch64 [7.2.11-1] - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [7.2.10-1] - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 [7.2.8-1]…

Nov 25, 2025
High max 8.6

ELSA-2025-21111 3 CVEs

Important: bind9.18 security update (Oracle Linux 9)

[32:9.18.29-5.2] - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression [32:9.18.29-5.1] - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Preve…

Nov 25, 2025
High max 7.5

ELSA-2025-21776 1 CVE

Important: expat security update (Oracle Linux 8)

[2.5.0-1] - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618

Nov 20, 2025
High max 8.8

ELSA-2025-21881 9 CVEs

Important: thunderbird security update (Oracle Linux 8)

[140.5.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.5.0] - Add OpenELA debranding [140.5.0-2] - Update to 140.5.0 ESR

Nov 20, 2025