Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 9.8
    ELSA-2025-15430 5 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.14.0-2.0.1] - Update to 128.14.0 [Orabug: 38400668][CVE-2025-9179][CVE-2025-9180] [CVE-2025-9181][CVE-2025-9182][CVE-2025-9185]

  • High max 9.8
    ELSA-2025-20609 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5.3] - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38454666] {CVE-2025-38494} - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38454665] {CVE-2025-38618} - clone_private_mnt(): make sur…

  • High max 9.8
    ELSA-2025-20608 6 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-103.40.4.3] - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38453836] {CVE-2025-38560} - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug: 38453837] {CVE-2025-38500} -…

  • High max 8.8
    ELSA-2025-16108 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 8.8
    ELSA-2025-16156 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [140.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

  • High max 8.8
    ELSA-2025-16109 7 CVEs

    Important: firefox security update (Oracle Linux 10)

    [140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 8.8
    ELSA-2025-16157 7 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [140.3.0-1.0.1] - Add Oracle prefs [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

  • High max 7.8
    ELSA-2025-14748 9 CVEs

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.11.el7.OL7] - kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) - kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) - kernel: ext4: fix off-by-one error in do_split (CVE-2025…

  • High max 8.1
    ELSA-2025-15904 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Ger…

  • High max 8.1
    ELSA-2025-15900 1 CVE

    Important: podman security update (Oracle Linux 9)

    [5.4.0-13.0.1] - Fix a potential deadlock during podman cp [Orabug: 38252957] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case…

  • High max 8.1
    ELSA-2025-15901 1 CVE

    Important: podman security update (Oracle Linux 10)

    [6:5.4.0-13.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-13] - update to the latest conte…

  • High max 7.8
    ELSA-2025-15785 4 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.75.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.8
    ELSA-2025-14828 1 CVE

    Important: libarchive security update (Oracle Linux 7)

    [3.1.2-14.0.1] - rar: Fix double free [Orabug: 38364091][CVE-2025-5914]

  • High max 7.8
    ELSA-2025-15661 4 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.42.2.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.8
    ELSA-2025-15662 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.32.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

  • High max 8.0
    ELSA-2025-15701 2 CVEs

    Important: cups security update (Oracle Linux 10)

    [-1:2.4.10-11.1] - CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

  • High max 8.0
    ELSA-2025-15702 1 CVE

    Important: cups security update (Oracle Linux 8)

    [1:2.2.6-63] - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

  • High max 8.0
    ELSA-2025-15700 2 CVEs

    Important: cups security update (Oracle Linux 9)

    [1.2.3.3op2-33.1] - RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS [1.2.3.3op2-33.1] - RHEL-112438 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

  • High max 7.8
    ELSA-2025-15447 4 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.31.1.0.1.el10_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin…

  • High max 7.8
    ELSA-2025-15429 2 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.41.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2025-15608 1 CVE

    Important: python3.12-cryptography security update (Oracle Linux 9)

    [41.0.7-2.1] - Security fix for CVE-2024-26130 Resolves: RHEL-112483

  • High max 7.8
    ELSA-2025-15471 2 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.74.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High
    ELSA-2025-20560 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.347.6.1] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343661] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343661] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343661] - x86…

  • High max 9.8
    ELSA-2025-20553 47 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.347.6] - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [Orabug: 38377926] {CVE-2025-37752} - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [Orabug: 38377926] - net_sched: sch_sfq:…

  • High
    ELSA-2025-20559 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5.1] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343660] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343660] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343660] - x86/…

  • High
    ELSA-2025-20558 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-103.40.4.2.el10uek] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343659] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343659] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343659]…

  • High max 9.8
    ELSA-2025-20552 117 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5] - Revert 'mm: hugetlb: independent PMD page table shared count' (Harshit Mogalapalli) [Orabug: 38327655] [5.15.0-312.187.4] - rds: Fix NULL ptr deref in xas_start (Hakon Bugge) [Orabug: 38166374] - KVM: x86: use array_index_nospec with indi…

  • High max 9.8
    ELSA-2025-20551 268 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-103.40.4.1.el10uek] - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38361037] [6.12.0-103.40.4.el10uek] - rds: Fix NULL ptr deref in xas_start (Hakon Bugge) [Orabug: 38169301] - KVM: x86: use array_index_nospec w…

  • High max 8.8
    ELSA-2025-15115 2 CVEs

    Important: postgresql:12 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [12.22-5] - Fix previous Backport [12.22-4] - Backport CVE-2025-8715

  • High max 7.8
    ELSA-2025-15099 2 CVEs

    Important: pam security update (Oracle Linux 9)

    [1.5.1-26.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-26] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96729

  • High max 9.8
    ELSA-2025-15011 7 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.39.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 8.5
    ELSA-2025-15020 1 CVE

    Important: udisks2 security update (Oracle Linux 10)

    [2.10.90-5.0.1.1] - Enable btrfs support for OL supported arches [Orabug: 37464632] [2.10.90-5.1] - udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067) [2.10.90-5] - mdraid: Avoid acquiring system inhibit lock for external array operations (RHEL-74012…

  • High max 7.8
    ELSA-2025-10357 1 CVE

    Important: pam security update (Oracle Linux 7)

    [1.1.8-23.0.3] - pam_namespace: fix potential privilege escalation CVE-2025-6020 [Orabug: 38156729]

  • High max 8.5
    ELSA-2025-15017 1 CVE

    Important: udisks2 security update (Oracle Linux 8)

    [2.9.0-16.1] - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109408)

  • High max 8.8
    ELSA-2025-15021 2 CVEs

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 pg_repack [1.4.6-3] - Release bump - enable gating [1.4.6-2] - Rebuild - Resolves:#1954442 [1.4.6-1] - Rebase to upstream release 1.4.6 [1.4.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora…

  • High max 8.8
    ELSA-2025-15022 2 CVEs

    Important: postgresql:15 security update (Oracle Linux 8)

    pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 pg_repack [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128241 [1.4.6-4] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 po…

  • High max 8.5
    ELSA-2025-15018 1 CVE

    Important: udisks2 security update (Oracle Linux 9)

    [2.9.4-11.0.1.1] - Enable btrfs support for OL supported arches [Orabug: 37464632] [2.9.4-11.1] - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109417) [2.9.4-11] - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lv…

  • High max 8.8
    ELSA-2025-14862 2 CVEs

    Important: postgresql:15 security update (Oracle Linux 9)

    pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …

  • High max 8.8
    ELSA-2025-14899 2 CVEs

    Important: postgresql:16 security update (Oracle Linux 8)

    pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…

  • High max 8.8
    ELSA-2025-14878 2 CVEs

    Important: postgresql security update (Oracle Linux 9)

    [13.22-1] - Update to 13.22 [13.18-1] - Update to 13.18