Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 7.8
    ELSA-2025-10027 1 CVE

    Important: pam security update (Oracle Linux 8)

    [1.3.1-37.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695] [1.3.1-37] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724

  • High max 9.4
    ELSA-2025-10031 5 CVEs

    Important: python3.12 security update (Oracle Linux 8)

    [3.12.11-1] - Update to 3.12.11 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98040, RHEL-98010, RHEL-97808, RHEL-98070, RHEL-98213

  • High max 9.4
    ELSA-2025-10128 5 CVEs

    Important: python3 security update (Oracle Linux 8)

    [3.6.8-70.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-70] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030…

  • High max 2.8
    ELSA-2025-10110 1 CVE

    Important: sudo security update (Oracle Linux 8)

    [1.9.5p2-1.0.1] - Fixes sudo -s unclosed sessions when use_pty option used [Orabug: 36952911] [1.9.5p2-10.1] RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014

  • High max 8.8
    ELSA-2025-9318 2 CVEs

    Important: javapackages-tools:201801 security update (Oracle Linux 8)

    ant ant-contrib [1.0-0.32.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild antlr aopalliance apache-commons-beanutils [1.9.3-5] - Fix improper access control vulnerabilities - Resolves: CVE-2019-10086, CVE-2025-48734 apache-commons-cli …

  • High max 9.8
    ELSA-2025-10074 4 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.12.0-1] - Update to 128.12.0 build1

  • High max 9.4
    ELSA-2025-10136 5 CVEs

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.21-2.1] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219

  • High max 9.8
    ELSA-2025-10072 4 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 8.0
    ELSA-2025-7601 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 10)

    [9.0.107-1.0.1] - Add support for Oracle Linux [9.0.107-1] - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 [9.0.106-2] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 [9.0.105-2] - Update to .NET SDK 9.0.105 and Run…

  • High max 7.5
    ELSA-2025-7503 1 CVE

    Important: osbuild-composer security update (Oracle Linux 10)

    [134.1-2.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …

  • High max 9.8
    ELSA-2025-10073 4 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.12.0-1] - Update to 128.12.0 build1

  • High max 7.0
    ELSA-2025-9878 1 CVE

    Important: libblockdev security update (Oracle Linux 8)

    [2.28-7.0.1] - enable btrfs support [Orabug: 30792917] [2.28-7] - Don't allow suid and dev set on fs resize (CVE-2025-6019) Resolves: RHEL-96034

  • High max 2.8
    ELSA-2025-9978 1 CVE

    Important: sudo security update (Oracle Linux 9)

    [1.9.5p2-10.1] RHEL 9.6.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100016

  • High max 5.3
    ELSA-2025-8636 1 CVE

    Important: perl-FCGI security update (Oracle Linux 10)

    [1:0.82-13.1] - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters)

  • High max 7.6
    ELSA-2025-7892 1 CVE

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

  • High max 8.1
    ELSA-2025-8196 4 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 9.1
    ELSA-2025-7506 5 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 9.1
    ELSA-2025-7507 8 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.0
    ELSA-2025-7599 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 10)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 [8.0.116-2] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 [8.0.115-2] - Update to .NET SDK 8.0.115 and R…

  • High max 9.8
    ELSA-2025-8125 2 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 7.5
    ELSA-2025-8814 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 10)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 [8.0.116-2] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 [8.0.115-2] - Update to .NET SDK 8.0.115 and R…

  • High max 7.5
    ELSA-2025-7462 2 CVEs

    Important: podman security update (Oracle Linux 10)

    [6:5.4.0-10.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-10] - rebuild to resolve CVE-202…

  • High max 7.5
    ELSA-2025-7475 1 CVE

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

  • High max 7.5
    ELSA-2025-7484 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 10)

    [6:0.8.5-2] - Rebuild on new golang to fix CVE-2025-22871 [6:0.8.5-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 [6:0.8.4-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8…

  • High max 8.1
    ELSA-2025-7491 3 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.1
    ELSA-2025-7493 3 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 7.5
    ELSA-2025-7505 6 CVEs

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-3.el10_0.6] - Fix CVE-2025-4035, CVE-2025-4948, CVE-2025-32049, CVE-2025-32907 [3.6.5-3] - Add patch to hopefully fix http2-body-size-test timeouts [3.6.5-2] - Add patch to hopefully fix server-test timeouts [3.6.5-1] - Update to 3.6.5 and add patches …

  • High max 7.5
    ELSA-2025-8816 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 10)

    [9.0.107-1.0.1] - Add support for Oracle Linux [9.0.107-1] - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 [9.0.106-2] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 [9.0.105-2] - Update to .NET SDK 9.0.105 and Run…

  • High max 8.2
    ELSA-2025-7490 1 CVE

    Important: mod_auth_openidc security update (Oracle Linux 10)

    [2.4.15-4.el10_0.1] - Fix CVE-2025-31492

  • High max 8.8
    ELSA-2025-8184 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 10)

    [1.24.11-2] - fix for CVE-2025-3887 Resolves: RHEL-93045

  • High max 8.1
    ELSA-2025-8341 7 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 5.4
    ELSA-2025-9120 1 CVE

    Important: libvpx security update (Oracle Linux 10)

    [1.14.1-3] - Add patch for double free Resolves: RHEL-93905

  • High max 8.8
    ELSA-2025-9166 1 CVE

    Important: apache-commons-beanutils security update (Oracle Linux 10)

    [1.9.4-21] - Fix improper access control vulnerability - Resolves: CVE-2025-48734

  • High max 5.4
    ELSA-2025-7476 1 CVE

    Important: python-jinja2 security update (Oracle Linux 10)

    [3.1.6-1] - Update to 3.1.6 - Security fix for CVE-2025-27516 Resolves: RHEL-85058

  • High max 7.8
    ELSA-2025-7592 2 CVEs

    Important: yggdrasil security update (Oracle Linux 10)

    [0.4.5-3] - Fix CVE-2025-3931

  • High max 7.5
    ELSA-2025-8493 2 CVEs

    Important: nodejs22 security update (Oracle Linux 10)

    [1:22.16.0-1] - Update to version 22.16.0 [1:22.15.0-3] - Make grep Source stricter in nodejs-tarball [1:22.15.0-2] - Add unit-test during build for nodejs22 [1:22.15.0-1] - Update to version 22.15.0 [1:22.13.1-6] - Update c-ares with fix for CVE-2025-31498 […

  • High max 9.8
    ELSA-2025-8608 9 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 9.1
    ELSA-2025-9190 1 CVE

    Important: ipa security update (Oracle Linux 10)

    [4.12.2-15.0.1.el10_0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-15.el10_0.1] - Resolves: RHEL-89908 EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host t…

  • High max 7.0
    ELSA-2025-9328 1 CVE

    Important: libblockdev security update (Oracle Linux 10)

    [3.2.0-4.0.1] - enable btrfs support [Orabug: 30792917] [3.2.0-4] - Don't allow suid and dev set on fs resize - CVE-2025-6019

  • High max 6.9
    ELSA-2025-7517 1 CVE

    Important: sqlite security update (Oracle Linux 10)

    [3.46.1-4] - Fix for CVE-2025-3277 - Resolves: RHEL-87295