5,089 results · Clear filters · Feed
-
High max 9.2ELSA-2025-7418 6 CVEs
Important: php:8.3 security update (Oracle Linux 9)
php [8.3.19-1] - rebase to 8.3.19 [8.3.15-1] - rebase to 8.3.15 [8.3.12-1] - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser ver…
-
High max 8.3ELSA-2025-7433 2 CVEs
Important: nodejs:22 security update (Oracle Linux 9)
nodejs [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches Resolves: RHEL-87319 RHEL-86586 [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87319 [1:22.13.1-3] - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHE…
-
High max 7.6ELSA-2025-7893 1 CVE
Important: grafana security update (Oracle Linux 9)
[10.2.6-13] - Resolves RHEL-89954: CVE-2025-4123 [10.2.6-12] - Resolves RHEL-88922: Move home directory of grafana to /var/lib/grafana [10.2.6-11] - Resolves RHEL-84636: CVE-2025-30204 [10.2.6-10] - Resolves RHEL-75919: grafana selinux issue with autofs_t
-
High max 6.4ELSA-2025-7435 3 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs
-
High max 8.2ELSA-2025-7903 3 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.17.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 9.8ELSA-2025-7423 6 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.16.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 9.8ELSA-2025-8060 2 CVEs
Important: firefox security update (Oracle Linux 8)
[128.10.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.10.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.10.1-1] - Update to 128.10.1
-
High max 9.8ELSA-2025-8056 3 CVEs
Important: kernel security update (Oracle Linux 8)
- [4.18.0-553.53.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…
-
High max 7.8ELSA-2025-7410 1 CVE
Important: libxslt security update (Oracle Linux 9)
[1.1.34-13.0.1] - Fix memory leak in exclPrefixPush [Orabug: 37871881] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-13] - Rebuild for z-stream/0day - Resolves: RHEL-83514 - Resolves: RHEL-85988 [1.1.34-12] - Include a…
-
High max 7.5ELSA-2025-7387 7 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0
-
High max 8.2ELSA-2025-7419 1 CVE
Important: mod_auth_openidc security update (Oracle Linux 9)
[2.4.10-1.el9_6.1] Resolves: RHEL-86224 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)
-
High max 9.1ELSA-2025-7428 5 CVEs
Important: firefox security update (Oracle Linux 9)
[128.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …
-
High max 7.8ELSA-2025-7417 4 CVEs
Important: gimp security update (Oracle Linux 9)
-
High max 7.5ELSA-2025-7429 1 CVE
Important: redis:7 security update (Oracle Linux 9)
[7.2.8-1] - rebase to 7.2.8 for CVE-2025-21605 [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 [7.2.6-1] - rebase to 7.2.6 RHEL-26628 [7.0.12-1] - rebase to 7.0.12 #2221899 [7.0.11-1] - rebase to 7.0.11 for new redis:7 stream #2129826
-
High max 7.5ELSA-2025-7391 2 CVEs
Important: podman security update (Oracle Linux 9)
[5.4.0-9.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [5:5.4.0-9] - update to the latest content o…
-
High max 7.5ELSA-2025-7404 1 CVE
Important: grafana security update (Oracle Linux 9)
[10.2.6-11] - Resolves RHEL-84636: CVE-2025-30204 [10.2.6-10] - Resolves RHEL-75919: grafana selinux issue with autofs_t
-
High max 7.5ELSA-2025-7425 1 CVE
Important: osbuild-composer security update (Oracle Linux 9)
[132.2-1.0.1] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Lin…
-
High max 6.5ELSA-2025-8046 2 CVEs
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.48.2-1] - Update to 2.48.2 - Reenable JavaScriptCore JIT
-
High max 7.5ELSA-2025-7967 1 CVE
Important: osbuild-composer security update (Oracle Linux 8)
[101-3.0.1] - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA…
-
High max 7.4ELSA-2025-7895 1 CVE
Important: compat-openssl10 security update (Oracle Linux 8)
[1.1.0.2o-4.1] - Fix CVE-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-9699
-
High max 7.6ELSA-2025-7894 1 CVE
Important: grafana security update (Oracle Linux 8)
[9.2.10-23] - Resolves RHEL-89949: CVE-2025-4123
-
High max 8.0ELSA-2025-7571 1 CVE
Important: .NET 9.0 security update (Oracle Linux 8)
[9.0.106-1.0.1] - Add support for Oracle Linux [9.0.106-1] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89451 [9.0.105-2] - Update to .NET SDK 9.0.105 and Runtime 9.0.4 - Resolves: RHEL-85279
-
High max 8.0ELSA-2025-7589 1 CVE
Important: .NET 8.0 security update (Oracle Linux 8)
[8.0.116-1.0.1] - Add support for Oracle Linux [8.0.116-1] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89446
-
High max 7.5ELSA-2025-7686 1 CVE
Important: redis:6 security update (Oracle Linux 8)
[6.2.18-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605
-
High max 7.5ELSA-2025-7118 3 CVEs
Important: osbuild and osbuild-composer security update (Oracle Linux 9)
osbuild [141-1.0.1] - Add runner for ol8 and ol9 [Orabug: 36400619] [141-1] - New upstream release [140-1] - New upstream release [139-1] - New upstream release [138-1] - New upstream release [137-1] - New upstream release [136-1] - New upstream release [135-…
-
High max 7.4ELSA-2025-7569 1 CVE
Important: yelp and yelp-xsl security update (Oracle Linux 8)
yelp [2:3.28.1-3.1] - Fix CVE-2025-3155 (RHEL-85922) yelp-xsl [3.28.0-2.1] - Fix CVE-2025-3155 (RHEL-85922)
-
High max 7.8ELSA-2025-7531 2 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.52.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 9.1ELSA-2025-4797 5 CVEs
Important: thunderbird security update (Oracle Linux 8)
[128.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file - Force use of gcc-toolset-13 due to clang dependency [128.10.0] - Add OpenELA debranding [128.10.0-1] - Update to 128.10.0 build1
-
High max 5.6ELSA-2025-20318 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-1.23.3.1] - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920680] - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920680] - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Ora…
-
High max 5.6ELSA-2025-20323 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-308.179.6.2] - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920681] - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920681] - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) […
-
High max 7.5ELSA-2025-20319 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.343.5.1] - nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37920457] [5.4.17-2136.343.5] - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [Orabug: 37846673] - sctp: sysctl: cookie_hmac_alg: avoid us…
-
High max 8.8ELSA-2025-20320 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-308.179.6] - net: bridge: IP defragmentation failing for jumboframes (Venkat Venkatsubra) [Orabug: 37847171] - uek-rpm: remove .el9 from shim version (Samasth Norway Ananda) [Orabug: 37834731] - RDS: avoid using offlined CPU during reconnect (Arumugam…
-
High max 7.5ELSA-2025-4669 1 CVE
Important: osbuild-composer security update (Oracle Linux 9)
[118.2-1.0.1] - jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
-
High max 6.4ELSA-2025-4649 3 CVEs
Important: thunderbird security update (Oracle Linux 8)
[128.9.2-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file - Force use of gcc-toolset-13 due to clang dependency [128.9.2] - Add OpenELA debranding [128.9.2-1] - Update to 128.9.2
-
High max 9.1ELSA-2025-4458 5 CVEs
Important: firefox security update (Oracle Linux 8)
[128.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] - Force use of gcc-toolset-13 due to clang dependency [128.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.10.0-1] - Updat…
-
High max 9.0ELSA-2025-4560 8 CVEs
Important: libsoup security update (Oracle Linux 8)
[2.62.3-8] - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351
-
High max 7.5ELSA-2025-4039 1 CVE
Important: virtuoso-opensource security update (Oracle Linux 7)
[1:6.1.6-7.0.1] - Back port fix for CVE-2024-57656 [Orabug:37856848]
-
High max 8.3ELSA-2025-4459 2 CVEs
Important: nodejs:22 security update (Oracle Linux 8)
nodejs [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300 [1:22.13.1-3] - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86581
-
High max 9.1ELSA-2025-4443 5 CVEs
Important: firefox security update (Oracle Linux 9)
[128.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …
-
High max 9.1ELSA-2025-4460 5 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.10.0] - Add OpenELA debranding [128.10.0-1] - Update to 128.10.0 build1