Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 10.0
    ELSA-2025-20372 30 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.344.4.1] - certs: Reference revocation list for all keyrings (Eric Snowberg) [Orabug: 38052126] [5.4.17-2136.344.4] - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967555] [5.4.17-2136.344.3] - net/mlx5e:…

  • High max 7.5
    ELSA-2025-8837 1 CVE

    Important: mod_security security update (Oracle Linux 9)

    [2.9.6-2] - add fix for CVE-2025-47947 - Resolves: RHEL-93016

  • High max 7.5
    ELSA-2025-8813 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94420

  • High max 9.8
    ELSA-2025-8756 12 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.11.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.11.0] - Add OpenELA debranding [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.8
    ELSA-2025-8643 6 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.21.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 5.6
    ELSA-2025-20368 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-100.28.2] - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967533] - Revert 'block: sysfs option to change ioticks granulari…

  • High max 5.3
    ELSA-2025-8635 1 CVE

    Important: perl-FCGI security update (Oracle Linux 9)

    [1:0.79-8.1] - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters)

  • High
    ELSA-2025-8314 1 CVE

    Important: zlib security update (Oracle Linux 7)

    [1.2.7-21.0.1] - Resolves: CVE-2025-4638 [Orabug: 38010977]

  • High max 8.8
    ELSA-2025-20365 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-309.180.4] - nvme: unblock ctrl state transition for firmware update (Daniel Wagner) - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) - ice: Ch…

  • High max 9.8
    ELSA-2025-8465 2 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.10.1-1.0.1] - Update to 128.10.1 [Orabug: 38028280][CVE-2025-4918][CVE-2025-4919] [128.10.0-1.0.1] - Updated to 128.10.0 build [Orabug: 37924620] - Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and - CVE-2025-4093 [128.9.0-2.0.1] - Update…

  • High max 7.5
    ELSA-2025-20364 1 CVE

    Important: python3.12-cryptography security update (Oracle Linux 8)

    [41.0.7-1.0.1] - CVE-2024-26130 [Orabug: 37982815]

  • High max 9.8
    ELSA-2025-8607 8 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.11.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.11.0] - Add OpenELA debranding [128.11.0-1] - Update to 128.11.0

  • High max 7.5
    ELSA-2025-8506 1 CVE

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [1:22.15-1-1] - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300 [1:22.13.1-3] - Update c-ares t…

  • High max 7.5
    ELSA-2025-8467 1 CVE

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.16.0-1] - Update to 22.16.0 Resolves: RHEL-89600 RHEL-92872 RHEL-92420

  • High max 7.5
    ELSA-2025-8468 1 CVE

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.19.2-1] - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging

  • High max 5.4
    ELSA-2025-8336 1 CVE

    Important: varnish:6 security update (Oracle Linux 8)

    varnish [6.0.13-1.1] - Resolves: RHEL-89695 - varnish: request smuggling attacks (CVE-2025-47905) varnish-modules

  • High max 9.0
    ELSA-2025-8292 10 CVEs 1 exploited

    Important: mingw-freetype and spice-client-win security update (Oracle Linux 8)

    [2.8-3.1] - Fix CVE-2025-27363 Resolves: RHEL-83101

  • High max 5.4
    ELSA-2025-8337 1 CVE

    Important: varnish security update (Oracle Linux 9)

    [6.6.2-6.1] - Resolves: RHEL-89700 - varnish: request smuggling attacks (CVE-2025-47905)

  • High max 9.1
    ELSA-2025-4751 5 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.10.0-1.0.1] - Updated to 128.10.0 build [Orabug: 37924620] - Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and - CVE-2025-4093 [128.9.0-2.0.1] - Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029] [CVE-2025-3030] [12…

  • High max 8.1
    ELSA-2025-8308 6 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.11.0-1] - Update to 128.11.0

  • High max 4.7
    ELSA-2025-20343 1 CVE

    Important: systemd security update (Oracle Linux 8)

    [239-82.0.4.5] - coredump: use %d in kernel core pattern - CVE-2025-4598

  • High max 7.5
    ELSA-2025-8256 1 CVE

    Important: pcs security update (Oracle Linux 9)

    [0.11.9-2.el9_6.1] - rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)

  • High max 8.1
    ELSA-2025-8293 6 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.11.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 4.7
    ELSA-2025-20344 1 CVE

    Important: systemd security update (Oracle Linux 9)

    [252-51.0.2] - coredump: use %d in kernel core pattern - CVE-2025-4598

  • High max 7.5
    ELSA-2025-8254 2 CVEs

    Important: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.el8_10.5] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.5] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-93167 - Fixed CVE-2025-46727 by updating bundled rubygem rack Resolves: RHEL-90147

  • High max 8.8
    ELSA-2025-8201 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 8)

    [1.16.1-5.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-5] - fix for CVE-2025-3887 Resolves: RHEL-93051

  • High max 8.8
    ELSA-2025-8183 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 9)

    [1.22.12-4] - fix for CVE-2025-3887 Resolves: RHEL-93063

  • High max 8.1
    ELSA-2025-8203 4 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.10.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.10.1] - Add OpenELA debranding [128.10.1-1] - Update to 128.10.1

  • High max 7.5
    ELSA-2025-8132 4 CVEs

    Important: libsoup security update (Oracle Linux 8)

    [2.62.3-9] - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032

  • High max 7.5
    ELSA-2025-8126 4 CVEs

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-10.2] - Backport patches for various CVEs Resolves: RHEL-85888 Resolves: RHEL-87081 Resolves: RHEL-88332 Resolves: RHEL-92285

  • High max 7.5
    ELSA-2025-8136 1 CVE

    Important: python-tornado security update (Oracle Linux 9)

    [6.4.2-2.2] - tests: add ci_test.fmf + update gating.yaml Related: RHEL-91999 [6.4.2-2.1] - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91999

  • High max 7.4
    ELSA-2025-7430 1 CVE

    Important: yelp security update (Oracle Linux 9)

    [2:40.3-2.1] - Fix CVE-2025-3155 (RHEL-85926)

  • High max 9.0
    ELSA-2025-7436 9 CVEs

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-10.1] - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85906 Resolves: RHEL-85912 Resolves: RHEL-85919 Resolves: RHEL-87061 Resolves: RHEL-87069 Resolves: RHEL-87102 Resolves: RHEL-87120 Resolves: RHEL-88364 Resolves: RHEL-88…

  • High max 8.0
    ELSA-2025-7598 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.116-1.0.1] - Add support for Oracle Linux [8.0.116-1] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89448

  • High max 8.0
    ELSA-2025-7600 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 9)

    [9.0.106-1.0.1] - Add support for Oracle Linux [9.0.106-1] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89453

  • High max 7.4
    ELSA-2025-7937 1 CVE

    Important: compat-openssl11 security update (Oracle Linux 9)

    [1:1.1.1k-5.1] - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 [1:1.1.1k-5] - Update expired certificates used in the testsuite Resolves: RHEL-5297

  • High max 7.5
    ELSA-2025-7416 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 9)

    [0.8.5-1] - Fix CVE-2025-22869 by updating to 0.8.5 - Resolves: RHEL-81313

  • High max 6.5
    ELSA-2025-7995 2 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.48.2-1] - Update to 2.48.2 - Reenable JIT

  • High max 7.5
    ELSA-2025-7438 1 CVE

    Important: redis security update (Oracle Linux 9)

    [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605

  • High max 9.8
    ELSA-2025-8049 2 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.10.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …