5,089 results · Clear filters · Feed
-
High max 7.8ELSA-2025-2673 2 CVEs
Important: libxml2 security update (Oracle Linux 7)
[2.9.1-6.0.5] - Fix CVE-2024-56171 [Orabug: 37694105] - Fix CVE-2025-24928 [Orabug: 37694105] [2.9.1-6.0.3] - Rebuild to include attribution logo [Orabug: 33024216] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in t…
-
High max 7.8ELSA-2025-20190 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.341.3.3] - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 37727037] {CVE-2024-39494} [5.4.17-2136.341.3.2] - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37707634] {CVE-2024-5789…
-
High max 7.8ELSA-2025-3026 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.45.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 7.5ELSA-2025-2872 1 CVE
Important: pcs security update (Oracle Linux 8)
[0.10.18-2.0.1.el8_10.4] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.4] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924
-
High max 7.2ELSA-2025-2868 1 CVE
Important: libreoffice security update (Oracle Linux 8)
[1:6.4.7.2-19.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-19] - Fix CVE-2025-1080 Filter out more unwanted command URIs [6.4.7.2] - R…
-
High max 8.8ELSA-2025-2699 9 CVEs
Important: firefox security update (Oracle Linux 7)
[128.8.0-1.0.1] - Update to 128.8.0 build1 [Orabug: 37700882][CVE-2025-1930][CVE-2025-1931] [CVE-2025-1932][CVE-2025-1933][CVE-2025-1934][CVE-2025-1935][CVE-2025-1936] [CVE-2025-1937][CVE-2025-1938]
-
High max 10.0
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.46.6-2] - Add patch for CVE-2025-24201
-
High max 7.5ELSA-2025-2900 2 CVEs
Important: thunderbird security update (Oracle Linux 8)
[128.8.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.8.0] - Add OpenELA debranding [128.8.0-2] - Update to 128.8.0 build5 [128.8.0-1] - Update to 128.8.0 build1
-
High max 10.0
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.46.6-2] - Add patch for CVE-2025-24201
-
High max 7.6ELSA-2025-2867 1 CVE
Important: grub2 security update (Oracle Linux 9)
[2.06-94.0.1] - Rework the scripts to cover both in-place upgrade and update scenarios [Orabug: 36768566] - Restore correct order of processing config files [Orabug: 36758359] - Support setting custom kernels as default kernels [Orabug: 36043978] - Bump SBAT …
-
High max 7.5ELSA-2025-2899 2 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.8.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.8.0] - Add OpenELA debranding [128.8.0-2] - Update to 128.8.0 build5 [128.8.0-1] - Update to 128.8.0 build1
-
High max 7.8
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.6.el7.OL7] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) {CVE-2024-53104} [Orabug: 37584712]
-
High max 7.0ELSA-2025-2670 1 CVE
Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 8)
[8.0.114-1.0.1] - Add support for Oracle Linux [8.0.114-1] - Update to .NET SDK 8.0.114 and Runtime 8.0.14 - Resolves: RHEL-81639
-
High max 7.8ELSA-2025-2686 2 CVEs
Important: libxml2 security update (Oracle Linux 8)
[2.9.7-19] - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) [2.9.7.18.2] - Fix CVE-2022-49043 (RHEL-76289) [2.9.7-18.1] - Fix CVE-2024-25062 (RHEL-31056)
-
High max 7.0ELSA-2025-2667 1 CVE
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8)
[9.0.104-1.0.1] - Add support for Oracle Linux [9.0.104-1] - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves: RHEL-81645
-
High max 7.0ELSA-2025-2668 1 CVE
Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 9)
[9.0.104-1.0.1] - Add support for Oracle Linux [9.0.104-1] - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves: RHEL-81649
-
High max 7.0ELSA-2025-2669 1 CVE
Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 9)
[8.0.114-1.0.1] - Add support for Oracle Linux [8.0.114-1] - Update to .NET SDK 8.0.114 and Runtime 8.0.14 - Resolves: RHEL-81640
-
High max 7.8ELSA-2025-2679 2 CVEs
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-6.2] - Fix CVE-2024-56171 (RHEL-80128) - Fix CVE-2025-24928 (RHEL-80143)
-
High max 7.5ELSA-2025-2471 1 CVE
Important: pcs security update (Oracle Linux 9)
[0.11.8-1.el9_5.2] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924
-
High max 7.8
Important: kernel security update (Oracle Linux 9)
[5.14.0-503.31.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 7.5ELSA-2025-1718 1 CVE
Important: bind security update (Oracle Linux 7)
[32:9.11.4-26.0.3.P2.16] - Resolve CVE-2024-11187 [Orabug: 37616907]
-
High max 7.8ELSA-2025-2502 8 CVEs
Important: tigervnc security update (Oracle Linux 8)
[1.13.1-15] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79397 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-79401 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWri…
-
High max 7.8
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.44.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 8.1ELSA-2025-20153 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.341.3.1] - Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang) [Orabug: 37667080] [5.4.17-2136.341.3] - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 37565787] - io_uring/r…
-
High max 7.8ELSA-2025-2500 8 CVEs
Important: tigervnc security update (Oracle Linux 9)
[1.14.1-1.1] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79406 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80018 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWr…
-
High max 7.8ELSA-2025-20152 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-306.177.4] - Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (Greg Kroah-Hartman) - drm/v3d: Assign job pointer to NULL before signaling the fence (Maira Canal) - scsi: mpi3mr: Fix corr…
-
High max 8.8ELSA-2025-2452 9 CVEs
Important: firefox security update (Oracle Linux 8)
[128.8.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.8.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.8.0-1] - Update to 128.8.0 build1
-
High max 9.3ELSA-2024-11049 1 CVE
Important: squid security update (Oracle Linux 7)
[7:3.5.20-17.0.5.13] - Fixed cve 2023-46846 for http and icap request/response smuggling [Orabug: 37326730]
-
High max 8.8ELSA-2025-2359 9 CVEs
Important: firefox security update (Oracle Linux 9)
[128.8.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.8.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
High max 8.8ELSA-2025-2034 5 CVEs
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.46.6-1] - Update to 2.46.6
-
High max 8.8ELSA-2025-2035 5 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.46.6-1] - Update to 2.46.6
-
High max 8.8ELSA-2025-1915 1 CVE
Important: emacs security update (Oracle Linux 9)
[1:27.2-11.1] - Eliminate use of obsolete patch syntax (RHEL-80443) [1:27.2-11] - Fix man.el shell injection vulnerability (RHEL-79025)
-
High max 8.8ELSA-2025-1917 1 CVE
Important: emacs security update (Oracle Linux 8)
[1:26.1-13] - Fix man.el shell injection vulnerability (RHEL-79016)
-
High max 8.1ELSA-2025-1736 1 CVE
Important: postgresql:13 security update (Oracle Linux 8)
pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 pg_repack [1.4.6-3] - Release bump - enable gating postgres-decoderbufs [0.10.0-2] - Release bump for rebuild against libpq-12.1-3 postgresql [13.20-1] - Update to 13.20 - Fix CVE-2025-1094
-
High max 8.1
-
High max 8.1ELSA-2025-1739 1 CVE
Important: postgresql:15 security update (Oracle Linux 8)
pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 pg_repack [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128241 postgres-decoderbufs [1.9.7-1.Final] - Iitial import for postgresql 15 stream - Rela…
-
High max 8.1ELSA-2025-1740 1 CVE
Important: postgresql:16 security update (Oracle Linux 8)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…
-
High max 7.5ELSA-2025-1670 2 CVEs
Important: bind9.18 security update (Oracle Linux 9)
[32:9.18.29-1.el9_5.1] - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load
-
High max 8.1ELSA-2025-1741 1 CVE
Important: postgresql:15 security update (Oracle Linux 9)
pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …
-
High max 8.1ELSA-2025-1743 1 CVE
Important: postgresql:16 security update (Oracle Linux 9)
pgaudit pg_repack [1.5.1-1] - Update to v1.5.1 pgvector [0.6.2-1] - Initial packaging postgres-decoderbufs postgresql [16.8-1] - Update to 16.8 - Fix CVE-2025-1094