5,089 results · Clear filters · Feed
-
High max 8.1ELSA-2025-10861 4 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.462.b08-1.0.1] - Update to 8u462-b08 (GA) [Orabug: 38248370] - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the l…
-
High max 9.8ELSA-2025-12662 11 CVEs
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.25.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…
-
High max 9.8ELSA-2025-12278 9 CVEs
Important: firefox security update (Oracle Linux 7)
[128.13.0-1.0.1] - Update to 128.13.0 [Orabug: 38256809][CVE-2025-8027][CVE-2025-8028] [CVE-2025-8029][CVE-2025-8030][CVE-2025-8031][CVE-2025-8032][CVE-2025-8033] [CVE-2025-8034][CVE-2025-8035]
-
High max 7.2ELSA-2025-12349 1 CVE
Important: sqlite security update (Oracle Linux 7)
[3.7.17-8.0.1.1] - Fix for CVE-2025-6965 [Orabug: 38260859]
-
High max 8.8ELSA-2025-12752 6 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.66.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 8.8ELSA-2025-12746 9 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.32.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.0ELSA-2025-10796 1 CVE
Important: libblockdev security update (Oracle Linux 7)
[2.18-5.0.1] - Don't allow suid and dev set on fs resize (CVE-2025-6019) - [Orabug: 38176252]
-
High max 8.6ELSA-2025-11358 2 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.10] - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao) {CVE-2022-50066} [Orabug: 38201271] - net: atm: fix use after free in lec_send() (Dan Carpenter) {CVE-2025-22004} [Orabug: 38201271]
-
High max 7.8ELSA-2025-12450 1 CVE
Important: libxml2 security update (Oracle Linux 8)
[2.9.7.21.2] - Fix CVE-2025-7425 (RHEL-102797) [2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424)
-
High max 7.8ELSA-2025-12447 1 CVE
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-11] - Fix CVE-2025-7425 (RHEL-102806)
-
High max 8.8ELSA-2025-10814 1 CVE
Important: apache-commons-beanutils security update (Oracle Linux 7)
[1.8.3-15.0.1] - Add SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS [Orabug: 38176946][CVE-2025-48734] [1.8.3-15] - Fix CVE-2014-0114 - Fix CVE-2019-10086 [1.8.3-14] - Mass rebuild 2013-12-27 [1.8.3-13] - Add BuildRequires on apache-commons-paren…
-
High max 7.2ELSA-2025-11802 1 CVE
Important: nodejs:22 security update (Oracle Linux 9)
nodejs [1:22.16.0-2] - Patch fix for CVE-2025-6965 Resolves: RHEL-103851 nodejs-nodemon nodejs-packaging
-
High max 7.5ELSA-2025-12008 3 CVEs
Important: redis:7 security update (Oracle Linux 9)
[7.2.10-1.0.1] - Build with 64k pages to support redis on UEK on aarch64 [7.2.10-1] - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 [7.2.8-1] - rebase to 7.2.8 for CVE-2025-21605 [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2…
-
High max 8.7ELSA-2025-12280 1 CVE
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update (Oracle Linux 9)
jackson-annotations [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-core [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-103636 jackson-databind [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-jaxrs-providers…
-
High max 9.8ELSA-2025-11797 9 CVEs
Important: firefox security update (Oracle Linux 10)
[128.13.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.13.0-1] - Update to 128.13.0 build1
-
High max 9.8ELSA-2025-12188 9 CVEs
Important: thunderbird security update (Oracle Linux 10)
[128.13.0-3.0.1] - Add Oracle prefs [128.13.0-3] - Update to 128.13.0 build3 [128.13.0-2] - Update to 128.13.0 build2 [128.13.0-1] - Update to 128.13.0 build1
-
High max 7.5ELSA-2025-12006 2 CVEs
Important: redis:6 security update (Oracle Linux 8)
[6.2.19-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367
-
High max 9.8ELSA-2025-12187 9 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.13.0-3.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.13.0] - Add OpenELA debranding [128.13.0-3] - Update to 128.13.0 build3 [128.13.0-2] - Update to 128.13.0 build2 [128.13.0-1] - Update to 128.13.0 build1
-
High max 8.7ELSA-2025-12064 1 CVE
Important: unbound security update (Oracle Linux 10)
[1.20.0-12] - Fix CVE-2025-5994
-
High max 8.6ELSA-2025-10873 4 CVEs
Important: java-21-openjdk security update (Oracle Linux 8)
[1:21.0.8.0.9-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.8.0.9-1.1] - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is em…
-
High max 7.2ELSA-2025-11933 1 CVE
Important: sqlite security update (Oracle Linux 10)
[3.46.1-5] - Fix CVE-2025-6965 [3.46.1-4] - Fix for CVE-2025-3277 - Resolves: RHEL-87295 [3.46.1-3] - Enabled sqlite-session feature - Resolves: RHEL-77326 [3.46.1-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [3.46.1-1] - Update to 3.…
-
High max 7.2ELSA-2025-11803 1 CVE
Important: nodejs:22 security update (Oracle Linux 8)
nodejs [1:22.16.0-2] - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 [1:22.15-1-1] - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for s…
-
High max 8.7ELSA-2025-11884 1 CVE
Important: unbound security update (Oracle Linux 8)
[1.16.2-5.9] - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104123
-
High max 7.2ELSA-2025-12010 1 CVE
Important: sqlite security update (Oracle Linux 8)
[3.26.0-20] - Fixes CVE-2025-6965
-
High max 8.7ELSA-2025-11849 1 CVE
Important: unbound security update (Oracle Linux 9)
[1.16.2-19.1] - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104128
-
High max 7.2ELSA-2025-11992 1 CVE
Important: sqlite security update (Oracle Linux 9)
[3.34.1-8] - Fixes CVE-2025-6965
-
High max 8.1ELSA-2025-10862 4 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.462.b08-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.462.b08-1] - Update to 8u462-b08 (GA) - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - S…
-
High max 2.8ELSA-2025-10871 1 CVE
Important: sudo security update (Oracle Linux 7)
[1.8.23-10.0.1.3] - CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]
-
High max 7.8ELSA-2025-10360 5 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-29.0.3] - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695] [1.20.4-29.0.1] - Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 - CVE-20…
-
High max 7.8ELSA-2025-10375 5 CVEs
Important: tigervnc security update (Oracle Linux 7)
[1.8.0-33.0.7] - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695]
-
High max 8.6
Important: git security update (Oracle Linux 8)
[2.43.7-1] - update to 2.43.7 - Resolves: RHEL-102440, RHEL-102454, RHEL-102674, RHEL-102680
-
High max 7.5ELSA-2025-11453 2 CVEs
Important: redis security update (Oracle Linux 9)
[6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605 [6.2.17-1] -- rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-26627
-
High max 8.6
Important: git security update (Oracle Linux 10)
[2.47.3-1] - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679
-
High max 9.8ELSA-2025-11428 5 CVEs
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.22.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…
-
High max 9.3
Important: sudo security update (Oracle Linux 10)
[1.9.15-8.p5.2] - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022
-
High max 8.8ELSA-2025-11324 1 CVE
Important: cloud-init security update (Oracle Linux 8)
[23.4-7.0.2.el8_10.10] - Fixes regression in cloud-init with module cc_write_files_deferred [Orabug: 37382965] - Update IPv6 IMDS endpoint to ULA and drop NIC identifier [Orabug: 35965980] - Enable IPv6 [Orabug: 36502414] - Added missing services in rhel/syst…
-
High max 8.6
Important: git security update (Oracle Linux 9)
[2.47.3-1] - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681
-
High max 9.8ELSA-2025-11411 2 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.28.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.5ELSA-2025-11401 3 CVEs
Important: valkey security update (Oracle Linux 10)
[8.0.4-1] - update to 8.0.4 fixes CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 [8.0.3.1] - rebase to 8.0.3 [8.0.2.1] - rebase to 8.0.2 Resolves: RHEL-73273 [7.2.6-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [7.2.6.1] - rebase to …
-
High max 9.8ELSA-2025-11332 2 CVEs
Important: tomcat9 security update (Oracle Linux 10)
[1:9.0.87-5.1] - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71981 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)