Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 7.8

ELSA-2025-4098 2 CVEs

Important: libxslt security update (Oracle Linux 7)

[1.1.28-6.0.3] - Fix CVE-2024-55549 issue due to memory leak [Orabug: 37795485] - Fix CVE-2025-24855 issue due to use after free.

May 2, 2025
High max 9.8

ELSA-2025-4341 5 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-503.40.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Apr 30, 2025
High max 6.4

ELSA-2025-4229 3 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.9.2-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.9.2] - Add OpenELA debranding [128.9.2-1] - Update to 128.9.2

Apr 28, 2025
High max 7.8

ELSA-2025-3612 2 CVEs

Important: libxslt security update (Oracle Linux 7)

[1.1.28-6.0.3] - Fix CVE-2024-55549 issue due to memory leak [Orabug: 37795485] - Fix CVE-2025-24855 issue due to use after free.

Apr 27, 2025
High max 8.1

ELSA-2025-4170 3 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.9.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.9.0] - Add OpenELA debranding [128.9.0-2] - Update to 128.9.0 build3 [128.9.0-1] - Update to 128.9.0 build1

Apr 24, 2025
High max 8.1

ELSA-2025-4169 3 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.9.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.9.0] - Add OpenELA debranding [128.9.0-2] - Update to 128.9.0 build3 [128.9.0-1] - Update to 128.9.0 build1

Apr 24, 2025
High max 8.1

ELSA-2025-3628 3 CVEs

Important: firefox security update (Oracle Linux 7)

[128.9.0-2.0.1] - Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029] [CVE-2025-3030]

Apr 22, 2025
High max 8.2

ELSA-2025-3997 1 CVE

Important: mod_auth_openidc:2.3 security update (Oracle Linux 8)

cjose mod_auth_openidc [2.4.9.4-7] - Resolves: RHEL-86218 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)

Apr 22, 2025
High max 7.6

ELSA-2025-3367 1 CVE

Important: grub2 security update (Oracle Linux 8)

[2.02-164.0.2] - fs/ext2: Rework out-of-bounds read for inline and external extents [Orabug: 37829911] [2.02-164.0.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693…

Apr 21, 2025
High max 7.8

ELSA-2025-4025 1 CVE

Important: libxslt security update (Oracle Linux 9)

[1.1.34-9.0.1.el9_5.2] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-9.2] - Fix CVE-2024-55549 (RHEL-83515) [1.1.34-9.1] - Fix CVE-2025-24855 (RHEL-83501)

Apr 21, 2025
High max 7.5

ELSA-2025-3974 7 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.48.1-1] - Update to 2.48.1

Apr 17, 2025
High max 7.2

ELSA-2025-3390 1 CVE

Important: libreoffice security update (Oracle Linux 7)

[5.3.6.1-26.0.3] - Fix CVE-2025-1080, do not process macros in exotic uri schemes [Orabug: 37770225]

Apr 16, 2025
High max 7.8

ELSA-2025-20271 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.342.5] - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835558] {CVE-2024-39494} [5.4.17-2136.342.4] - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Hoiland-Jorgensen) - udf: Fix use of ch…

Apr 14, 2025
High max 7.5

ELSA-2025-3833 1 CVE

Important: gvisor-tap-vsock security update (Oracle Linux 9)

[6:0.8.5-1] - Fix CVE-2025-22869 by updating to 0.8.5 - Resolves: RHEL-81312

Apr 14, 2025
High max 8.1

ELSA-2025-3395 1 CVE 1 exploited

Important: freetype security update (Oracle Linux 7)

[2.8-14.0.1.el7_9.1] - Fix CVE-2025-27363 Out-of-bounds Write [Orabug: 37770275][CVE-2025-27363]

Apr 11, 2025
High max 7.6

ELSA-2025-3396 1 CVE

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.27.el7.14] - Fix OOB write in grub_net_search_config_file() CVE-2025-0624 [Orabug: 37770226] - Also adds implementation of grub_strlcpy() for clean backport

Apr 11, 2025
High max 10.0

ELSA-2025-20270 12 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-307.178.5] - net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter) [Orabug: 37434242] {CVE-2024-56660} - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer) [Orabug: 37703179] - net: hsr: fix fill_frame…

Apr 11, 2025
High max 7.5

ELSA-2025-3773 1 CVE

Important: delve and golang security update (Oracle Linux 9)

delve [1.24.1-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-2] - Fix 3 test failures - Resolves: RHEL-83939 - Resolves: RHEL-83958 - Resolves: RHEL-7373 [1.24.1-1] - Rebase to Delve 1.24.1 - Resolves: RHEL-64445 golang [1.23.6-2…

Apr 10, 2025
High max 7.5

ELSA-2025-3713 7 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0

Apr 8, 2025
High max 7.8

ELSA-2025-2879 8 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-29.0.1] - Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 - CVE-2025-26601 [Orabug: 37712847]

Apr 7, 2025
High max 7.8

ELSA-2025-3615 2 CVEs

Important: libxslt security update (Oracle Linux 8)

[1.1.32-6.1.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-6.1] - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492)

Apr 7, 2025
High max 7.8

ELSA-2025-3617 4 CVEs

Important: gimp security update (Oracle Linux 9)

[2:2.99.8-4] - Applying fixes for vulnerabilities that led to possible RCE conditions. - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444 - Resolves: RHEL-86048 RHEL-86045 RHEL-86042 RHEL-86039

Apr 7, 2025
High max 8.1

ELSA-2025-3582 3 CVEs

Important: firefox security update (Oracle Linux 8)

[128.9.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.9.0-2] - Update to 128.9.0 build2 [128.9.0-1] - Update to 128.9.0 build1

Apr 3, 2025
High max 8.1

ELSA-2025-3556 3 CVEs

Important: firefox security update (Oracle Linux 9)

[128.9.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Apr 3, 2025
High max 7.8

ELSA-2025-2861 8 CVEs

Important: tigervnc security update (Oracle Linux 7)

[1.8.0-33.0.5] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor [Orabug: 37712725] - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() - Fix CV…

Mar 31, 2025
High max 5.4

ELSA-2025-3388 1 CVE

Important: python-jinja2 security update (Oracle Linux 8)

[2.10.1-7] - Security fix for CVE-2025-27516 Resolves: RHEL-85066

Mar 31, 2025
High max 8.1

ELSA-2025-3421 1 CVE 1 exploited

Important: freetype security update (Oracle Linux 8)

[2.9.1-10] - Fix CVE-2025-27363 Out-of-bounds Write - Resolves: RHEL-83094

Mar 31, 2025
High max 5.4

ELSA-2025-3406 1 CVE

Important: python-jinja2 security update (Oracle Linux 9)

[2.11.3-8] - Security fix for CVE-2025-27516 Resolves: RHEL-85064

Mar 31, 2025
High max 8.1

ELSA-2025-3407 1 CVE 1 exploited

Important: freetype security update (Oracle Linux 9)

[2.10.4-10] - Fix for CVE-2025-27363 out-of-bound write vulnerability - Patch initially by Marc Deslauriers of Canonical - https://www.openwall.com/lists/oss-security/2025/03/14/3 - Adjusted for EL9 by Jonathan Wright of AlmaLinux - and a member of the Meta s…

Mar 31, 2025
High max 7.2

ELSA-2025-3408 1 CVE

Important: libreoffice security update (Oracle Linux 9)

[1:7.1.8.1-15.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [1:7.1.8.1-15] - Fix CVE-2025-1080 Filter out more unwanted command URIs

Mar 31, 2025
High max 7.8

ELSA-2025-2501 3 CVEs 2 exploited

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.7] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Beno_t Sevens) {CVE-2024-53197} [Orabug: 37686305] - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) {CVE-2023-52922} [Orabug: 37686305] - HID: core:…

Mar 28, 2025
High max 7.5

ELSA-2025-3336 1 CVE

Important: podman security update (Oracle Linux 9)

[5.2.2-15.0.1] - podman: do not set rlimits to the default value [Orabug: 37310981] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket tes…

Mar 27, 2025
High max 7.5

ELSA-2025-3344 1 CVE

Important: grafana security update (Oracle Linux 9)

[10.2.6-9] - Resolves RHEL-84634: CVE-2025-30204

Mar 27, 2025
High max 7.5

ELSA-2025-3210 1 CVE

Important: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Ger…

Mar 26, 2025
High max 7.8

ELSA-2025-3260 1 CVE

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.46.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Mar 26, 2025
High max 7.8

ELSA-2025-3208 1 CVE

Important: kernel security update (Oracle Linux 9)

[5.14.0-503.34.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Mar 26, 2025
High max 5.4

ELSA-2025-3113 1 CVE

Important: fence-agents security update (Oracle Linux 9)

[4.10.0-76.6] - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and avoid edge-case of writing empty token file Resolves: RHEL-83487 [4.10.0-76.5] - bundled jinja2: fix CVE-2025-27516 Resolves: RHEL-82712

Mar 25, 2025
High max 7.8

ELSA-2025-3107 1 CVE

Important: libxslt security update (Oracle Linux 9)

[1.1.34-9.0.1.el9_5.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-9.1] - Fix CVE-2025-24855 (RHEL-83501)

Mar 24, 2025
High max 8.8

ELSA-2025-2130 1 CVE

Important: emacs security update (Oracle Linux 7)

[1:24.3-23.0.1.1] - Fix CVE-2025-1244 man.el shell injection vulnerability [Orabug: 37658579]

Mar 21, 2025
High max 8.1

ELSA-2025-3082 1 CVE

Important: postgresql:12 security update (Oracle Linux 8)

pgaudit postgres-decoderbufs postgresql [12.22-3] - Fix backport for CVE-2025-1094 [12.22-2] - Backport fix for CVE-2025-1094

Mar 21, 2025