Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 9.8

ELSA-2025-18285 7 CVEs

Important: firefox security update (Oracle Linux 8)

[140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.4.0-3] - Update to 140.4.0 ESR

Oct 20, 2025
High max 9.8

ELSA-2025-18321 7 CVEs

Important: thunderbird security update (Oracle Linux 9)

[140.4.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.4.0] - Add OpenELA debranding [140.4.0-2] - Update to 140.4.0 ESR

Oct 20, 2025
High max 9.8

ELSA-2025-18097 5 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0

Oct 20, 2025
High max 9.8

ELSA-2025-18320 7 CVEs

Important: thunderbird security update (Oracle Linux 10)

[140.4.0-2.0.1] - Add Oracle prefs [140.4.0-2] - Update to 140.4.0 ESR

Oct 20, 2025
High max 9.9

ELSA-2025-18148 3 CVEs

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116865

Oct 16, 2025
High max 9.9

ELSA-2025-18150 3 CVEs

Important: .NET 9.0 security update (Oracle Linux 8)

[9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116856

Oct 16, 2025
High max 9.8

ELSA-2025-18070 1 CVE

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.50.1-1] - Update to 2.50.1

Oct 16, 2025
High max 9.9

ELSA-2025-18149 3 CVEs

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116866

Oct 16, 2025
High max 9.9

ELSA-2025-18151 3 CVEs

Important: .NET 9.0 security update (Oracle Linux 9)

[9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116857

Oct 16, 2025
High max 9.8

ELSA-2025-18155 7 CVEs

Important: firefox security update (Oracle Linux 9)

[140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Oct 16, 2025
High max 9.9

ELSA-2025-18152 3 CVEs

Important: .NET 8.0 security update (Oracle Linux 10)

[8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116868

Oct 16, 2025
High max 9.9

ELSA-2025-18153 3 CVEs

Important: .NET 9.0 security update (Oracle Linux 10)

[9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116860

Oct 16, 2025
High max 7.5

ELSA-2025-18183 1 CVE

Important: libsoup3 security update (Oracle Linux 10)

[3.6.5-7] - Fix handling of invalid dates in cookie expires attribute (CVE-2025-11021) [3.6.5-6] - Add patch for CVE-2025-32907 [3.6.5-5] - Fix release field [3.6.5-4] - Fix several CVEs

Oct 16, 2025
High max 9.8

ELSA-2025-18154 7 CVEs

Important: firefox security update (Oracle Linux 10)

[140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.4.0-3] - Update to 140.4.0 ESR

Oct 16, 2025
High max 8.0

ELSA-2025-17054 1 CVE

Important: cups security update (Oracle Linux 7)

[1:1.6.3-52.0.1] - CVE-2025-58060: Authentication Bypass in CUPS Authorization Handling - [Orabug: 38489251]

Oct 15, 2025
High max 9.8

ELSA-2025-20716 35 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-313.189.5.1] - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [Orabug: 38528187] {CVE-2025-38236} - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38528183] {CVE-2025-39866} - rtnetlink: Fix L3…

Oct 14, 2025
High max 9.8

ELSA-2025-20662 102 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-104.43.4.2.el10uek] - Revert 'sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails' (Joseph Salisbury) [Orabug: 38517178] [6.12.0-104.43.4.1.el10uek] - io_uring: Hide kabi magic from user space (Sherry Yang) [Orabug: 38478874] [6.12.0-1…

Oct 14, 2025
High max 7.5

ELSA-2025-16313 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-7.0.3] - Security update CVE-2025-57803 [Orabug: 38455460] [6.9.10.68-7.0.1] - Fix for CVE-2025-55154 [Orabug: 38417011]

Oct 13, 2025
High max 9.8

ELSA-2025-17802 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.50.0-1] - Update to 2.50.0

Oct 13, 2025
High max 9.8

ELSA-2025-20663 141 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.348.3] - hugetlbfs: take read_lock on i_mmap for PMD sharing (Waiman Long) [Orabug: 38459576] - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 37629344] [Orabug: 38418686] - kallsyms: export module_kallsyms_on_each…

Oct 11, 2025
High max 8.8

ELSA-2025-17675 1 CVE

Important: compat-libtiff3 security update (Oracle Linux 8)

[3.9.4-14] - fix CVE-2025-9900: Write-What-Where via TIFFReadRGBAImageOriented (RHEL-112528)

Oct 9, 2025
High max 8.5

ELSA-2025-16130 1 CVE

Important: udisks2 security update (Oracle Linux 7)

[2.8.4-1.0.1] - Fix index underflow in LoopSetup (CVE-2025-8067) [Orabug: 38444282]

Oct 8, 2025
High max 10.0

ELSA-2025-20654 1 CVE

Important: redis security update (Oracle Linux 9)

[7.2.10-1.0.2] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
High max 10.0

ELSA-2025-20655 1 CVE

Important: redis security update (Oracle Linux 9)

[6.2.19-1.0.1] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
High max 10.0

ELSA-2025-20653 1 CVE

Important: valkey security update (Oracle Linux 10)

[8.0.4-1.0.1] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
High max 7.8

ELSA-2025-17509 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 8)

[12.3.5-2.0.1.el8.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 2181…

Oct 7, 2025
High max 7.8

ELSA-2025-17428 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 9)

[12.5.0-1.0.1.2] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156…

Oct 7, 2025
High max 7.8

ELSA-2025-17429 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 10)

[12.5.0-1.0.1.el10_0.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 2…

Oct 7, 2025
High max 9.8

ELSA-2025-20649 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-103.40.4.4] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38500610] {CVE-2025-38724} - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38500621] {CVE-2025-39…

Oct 6, 2025
High max 9.1

ELSA-2025-17085 1 CVE

Important: ipa security update (Oracle Linux 10)

[4.12.2-15.0.1.el10_0.4] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-15.el10_0.4] - Resolves: RHEL-113245 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host …

Oct 2, 2025
High max 9.1

ELSA-2025-17129 1 CVE

Important: idm:DL1 security update (Oracle Linux 8)

bind-dyndb-ldap [11.6-6] - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa [4.9.13-20.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.13-20] - Refactor ipatests for unique krbcanonicalname Resolves: RHEL-110061 [4.9.13…

Oct 1, 2025
High max 9.1

ELSA-2025-17084 1 CVE

Important: ipa security update (Oracle Linux 9)

[4.12.2-14.0.1.5] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-14.5] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admi…

Oct 1, 2025
High max 9.3

ELSA-2025-14414 2 CVEs

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.7.13] - Fixes CVE-2025-54574, add URN access disabling config options [Orabug: 38350105] [7:3.5.20-17.0.5.13] - Fixed cve 2023-46846 for http and icap request/response smuggling [Orabug: 37326730]

Sep 29, 2025
High max 8.8

ELSA-2025-20645 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.3] - uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38462132]

Sep 29, 2025
High max 6.2

ELSA-2025-15728 1 CVE

Important: aide security update (Oracle Linux 7)

[0.15.1-13.0.3] - aide security update CVE-2025-54389 [Orabug: 38427919]

Sep 25, 2025
High max 7.8

ELSA-2025-15648 2 CVEs 1 exploited

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.12] - scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) [Orabug: 38414589] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) [Orabug: 38414589]

Sep 25, 2025
High max 8.8

ELSA-2025-16589 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[140.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

Sep 25, 2025
High max 8.8

ELSA-2025-20632 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.2] - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38453918] {CVE-2025-38499} - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38453914] - HID: core: ensure t…

Sep 24, 2025
High max 8.8

ELSA-2025-15666 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-7.0.1] - Fix for CVE-2025-55154 [Orabug: 38417011]

Sep 23, 2025
High max 8.8

ELSA-2025-16260 7 CVEs

Important: firefox security update (Oracle Linux 8)

[140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.3.0-1] - Update to 140.3.0

Sep 23, 2025