Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 9.1
    ELSA-2025-1671 49 CVEs

    Important: mysql security update (Oracle Linux 9)

    [8.0.41-2] - Fix patching of logrotate [8.0.41-1] - Update to MySQL 8.0.41 [8.0.40-1] - Update to MySQL 8.0.40 [8.0.39-1] - Rebase to version 8.0.39 [8.0.37-2] - Use signal to flush logs when rotating [8.0.37-1] - Update to MySQL 8.0.37 - Remove some legacy c…

  • High max 6.5
    ELSA-2025-1047 1 CVE

    Important: libsoup security update (Oracle Linux 7)

    [2.62.2-2.0.3] - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in - soup_header_parse_param_list_strict [Orabug: 37557504]

  • High max 7.5
    ELSA-2025-1675 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-16.4] - Change patches applying to use -P parameter [32:9.11.36-16.3] - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended

  • High max 7.5
    ELSA-2025-1676 1 CVE

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-0.22.2] - Fix application of patch for CVE-2024-11187 - Resolves: RHEL-77103 [32:9.16.23-0.22.1] - Limit additional section records CPU processing (CVE-2024-11187) - Fix test backport changes

  • High max 9.1
    ELSA-2025-1673 49 CVEs

    Important: mysql:8.0 security update (Oracle Linux 8)

    mecab [0.996-2.12] - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: #2180411 mecab-ipadic [2.7.0.20070801-17.0.1] - Rename the LICENSE.Fedora to LICENSE.oracle [2.7.0.2…

  • High max 7.5
    ELSA-2025-1681 1 CVE

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-24.0.1.el9_5.3] - Fix bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

  • High max 8.1
    ELSA-2025-1738 1 CVE

    Important: libpq security update (Oracle Linux 9)

    [13.20-1] - Update to 13.20

  • High max 8.1
    ELSA-2025-1742 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.18-1] - Update to 13.18

  • High max 7.7
    ELSA-2025-1613 3 CVEs

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.13.1-1] - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 [1:22.11.0-1] - Update to version 22.11.0 [22.4.1-4] - Initial import of nodeJS 22 nodejs-nodemon nodejs-packaging

  • High max 7.7
    ELSA-2025-1611 3 CVEs

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [22.13.1-1] - Upgrade to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76362 RHEL-76897 [22.11.0-1] - Upgrade to nodejs 22.11.0. Resolves: RHEL-35991 [22.4.1-4] - Exclude ix86 arches from building. Related: RHEL-3599…

  • High max 7.5
    ELSA-2025-0714 1 CVE

    Important: rsync security update (Oracle Linux 7)

    [3.1.2-12.0.1] * Back port fix for CVE-2024-12085 [Orabug: 37524229]

  • High max 7.7
    ELSA-2025-1443 3 CVEs

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.18.2] - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 [1:20.18.1-1] - Update to version 20.18.1 nodejs-nodemon nodejs-packaging

  • High max 7.7
    ELSA-2025-1351 3 CVEs

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.18.2-1] - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76001 RHEL-76146 [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 [1:20.12.2-2] - Backport nghttp2 patch f…

  • High max 8.6
    ELSA-2025-1372 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah [2:1.33.12-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/58af1cd) - Resolves: RHEL-67612 cockpit-podman conmon containernetworking-plugins contai…

  • High max 8.1
    ELSA-2025-1350 1 CVE

    Important: libxml2 security update (Oracle Linux 9)

    [2.9.13-6.1] - Fix CVE-2022-49043 (RHEL-76298)

  • High max 9.8
    ELSA-2025-1132 8 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.7.0-1.0.1] - Update to 128.7.0 build1 [Orabug: 37564202][CVE-2025-1009][CVE-2025-1010] [CVE-2025-1011][CVE-2025-1012][CVE-2025-1013][CVE-2025-1014][CVE-2025-1016] [CVE-2025-1017]

  • High max 9.8
    ELSA-2025-20100 108 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.340.4.1] - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37566743] [5.4.17-2136.340.4] - ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den) - nfsd: restore callback functi…

  • High max 7.4
    ELSA-2025-1330 1 CVE

    Important: openssl security update (Oracle Linux 9)

    [3.2.2-6.0.1.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [1:3.2.2-6.1] - RFC7250 handshakes with unauthenticated serve…

  • High max 9.8
    ELSA-2025-1283 8 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.7.0-1] - Update to 128.7.0 build1

  • High max 9.8
    ELSA-2025-1292 10 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.7.0] - Add OpenELA debranding [128.7.0-1] - Update to 128.2.0 build1

  • High max 7.8
    ELSA-2025-1266 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.40.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.8
    ELSA-2025-1262 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-503.23.2_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 9.8
    ELSA-2025-1184 10 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.7.0] - Add OpenELA debranding [128.7.0-1] - Update to 128.2.0 build1

  • High max 9.8
    ELSA-2025-20095 192 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-305.176.4] - x86/asm: Make serialize() always_inline (Juergen Gross) - hwmon: (tmp513) Fix division of negative numbers (David Lechner) - Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (Pratyush Yadav) - Revert 'regmap: detach r…

  • High max 9.3
    ELSA-2025-0319 1 CVE

    Important: raptor2 security update (Oracle Linux 7)

    [2.0.9-3.0.1] - CVE-2024-57823: memcpy integer underflow and heap read overflow [Orabug: 37476410]

  • High max 9.8
    ELSA-2025-1066 8 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 8.6
    ELSA-2025-0922 1 CVE

    Important: podman security update (Oracle Linux 9)

    [5.2.2-13.0.1] - podman: do not set rlimits to the default value [Orabug: 37310981] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket tes…

  • High max 8.6
    ELSA-2025-0923 1 CVE

    Important: buildah security update (Oracle Linux 9)

    [1.37.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.37.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.37 (https://github.com/containers/buildah/commit/fd39521) - Res…

  • High max 8.6
    ELSA-2024-11344 7 CVEs

    Important: gstreamer1-plugins-base and gstreamer1-plugins-good security update (Oracle Linux 7)

    gstreamer1-plugins-base [1.10.4-2.0.1] - Fixed CVE-2024-47607,CVE-2024-47538 and CVE-2024-47615 [Orabug: 37407070] gstreamer1-plugins-good [1.10.4-2.0.1] - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and - CVE-2024-47607 [Orabug: 37407070]

  • High max 8.0
    ELSA-2025-0837 2 CVEs

    Important: unbound security update (Oracle Linux 8)

    [1.16.2-5.8] - Prevent unbounded name compression (CVE-2024-8508) [1.16.2-5.7] - Rebuild to propagate to CentOS Stream (RHEL-25500)

  • High max 6.5
    ELSA-2025-0838 1 CVE

    Important: libsoup security update (Oracle Linux 8)

    [2.62.3-7] - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376

  • High max 8.5
    ELSA-2025-0845 1 CVE

    Important: git-lfs security update (Oracle Linux 8)

    [3.4.1-4] - Backport CVE-2024-53263 fixes - Resolves: RHEL-73931

  • High max 6.5
    ELSA-2025-0791 1 CVE

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-8.3] - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76381

  • High max 7.8
    ELSA-2025-0746 3 CVEs

    Important: gimp:2.8 security update (Oracle Linux 8)

    gimp [2:2.28.22-26] - bump spec pygobject2 [2.28.7-5] - bump spec to fix NVR pygtk2 [2.24.0-25] - Fix shebang mangling for _prefix=app (#1907579) - disable numpy for flatpak (#1907579) python2-pycairo [1.16.3-7] - bump spec for NVR fix

  • High max 5.4
    ELSA-2025-0711 1 CVE

    Important: python-jinja2 security update (Oracle Linux 8)

    [2.10.1-6] - Security fix for CVE-2024-56326 Resolves: RHEL-74677

  • High max 7.0
    ELSA-2025-0693 5 CVEs

    Important: redis security update (Oracle Linux 9)

    [6.2.17-1] -- rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-26627

  • High max 7.5
    ELSA-2024-11003 2 CVEs

    Important: unbound security update (Oracle Linux 7)

    [1.6.6-5.0.1] - Fix CVE-2023-50387 and CVE-2023-50868 [Orabug: 37387426]

  • High max 7.5
    ELSA-2025-0402 1 CVE

    Important: iperf3 security update (Oracle Linux 7)

    [3.1.7-3.0.1] - Fixes Improper JSON Handling CVE-2024-53580 [Orabug: 37495333]

  • High max 7.0
    ELSA-2025-0692 2 CVEs

    Important: redis:7 security update (Oracle Linux 9)

    [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741

  • High max 7.8
    ELSA-2025-20066 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-304.171.4.3] - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974} - NFSD: Async COPY result needs to return a write verifier (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974} - security/keys: f…