Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 7.0

ELSA-2025-0595 10 CVEs

Important: redis:6 security update (Oracle Linux 8)

[6.2.17-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.17-1] - rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-66165

Jan 23, 2025
High max 8.5

ELSA-2025-0673 1 CVE

Important: git-lfs security update (Oracle Linux 9)

[3.4.1-4] - Backport CVE-2024-53263 fixes - Resolves: RHEL-73936

Jan 23, 2025
High max 5.4

ELSA-2025-0667 1 CVE

Important: python-jinja2 security update (Oracle Linux 9)

[2.11.3-7] - Security fix for CVE-2024-56326 Resolves: RHEL-74690

Jan 23, 2025
High max 9.2

ELSA-2025-0401 2 CVEs

Important: grafana security update (Oracle Linux 8)

[9.2.10-21] - Resolves RHEL-72881: CVE-2025-21614 - Resolves RHEL-72869: CVE-2025-21613

Jan 19, 2025
High max 8.8

ELSA-2025-0382 4 CVEs

Important: .NET 9.0 security update (Oracle Linux 8)

Jan 17, 2025
High max 7.7

ELSA-2025-0132 7 CVEs

Important: firefox security update (Oracle Linux 7)

[128.6.0-1.0.1] - Update to 128.6.0 build1 [Orabug: 37460830][CVE-2025-0237][CVE-2025-0238] [CVE-2025-0239][CVE-2025-0240][CVE-2025-0241][CVE-2025-0242][CVE-2025-0243] - Enable PipeWire camera support for RHEL 10 + backport upstream fixes for PipeWire camera …

Jan 16, 2025
High max 8.8

ELSA-2025-0381 3 CVEs

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.112-1.0.1] - Add support for Oracle Linux [8.0.112-1] - Update to .NET SDK 8.0.112 and Runtime 8.0.12 - Resolves: RHEL-71554

Jan 16, 2025
High max 7.5

ELSA-2025-0325 1 CVE

Important: rsync security update (Oracle Linux 8)

[3.1.3-20] - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents

Jan 15, 2025
High max 7.5

ELSA-2025-0324 1 CVE

Important: rsync security update (Oracle Linux 9)

[3.2.3-20.1] - Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents

Jan 15, 2025
High max 9.3

ELSA-2025-0314 1 CVE

Important: raptor2 security update (Oracle Linux 8)

[2.0.15-17] - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser

Jan 14, 2025
High max 9.3

ELSA-2025-0312 1 CVE

Important: raptor2 security update (Oracle Linux 9)

[2.0.15-32] - Bump NVR [2.0.15-31] - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser

Jan 14, 2025
High max 5.4

ELSA-2025-0308 2 CVEs

Important: fence-agents security update (Oracle Linux 9)

[4.10.0-76.4] - bundled jinja2: fix CVE-2024-56201 and CVE-2024-56326 Resolves: RHEL-72070, RHEL-72063

Jan 14, 2025
High max 6.5

ELSA-2025-0281 2 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.6.0-3.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.6.0] - Add OpenELA debranding [128.6.0-3] - Update to 128.6.0 build3 [128.6.0-1] - Update to 128.6.0 build1

Jan 13, 2025
High max 7.5

ELSA-2025-20019 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.339.5] - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov) - vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393533] - vhost-scsi: protect vq->log_base with vq->mutex (Dong…

Jan 11, 2025
High max 9.8

ELSA-2025-20018 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-304.171.4] - Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds) - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno) - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwash…

Jan 11, 2025
High max 8.4

ELSA-2024-11048 1 CVE

Important: python-virtualenv security update (Oracle Linux 7)

[15.1.0-7.0.1] - Fixes CVE-2024-53899 Quote template strings in activation scripts [Orabug: 37396464]

Jan 10, 2025
High max 7.7

ELSA-2025-0144 7 CVEs

Important: firefox security update (Oracle Linux 8)

[128.6.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.6.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.6.0-1] - Update to 128.6.0 build1

Jan 10, 2025
High max 7.7

ELSA-2025-0080 7 CVEs

Important: firefox security update (Oracle Linux 9)

[128.6.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.6.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Jan 10, 2025
High max 7.8

ELSA-2025-0059 4 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-503.21.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Jan 10, 2025
High max 8.8

ELSA-2025-0145 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.46.5-1] - Update to 2.46.5

Jan 9, 2025
High max 7.4

ELSA-2025-0222 1 CVE

Important: dpdk security update (Oracle Linux 8)

[23.11-2] - Backport fixes for CVE-2024-11614 (RHEL-68600)

Jan 9, 2025
High max 7.8

ELSA-2025-0065 2 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.34.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Jan 9, 2025
High max 7.5

ELSA-2025-0168 1 CVE

Important: iperf3 security update (Oracle Linux 8)

[3.5-11] - Resolves: RHEL-72924 - Denial of Service in iperf Due to Improper JSON Handling

Jan 9, 2025
High max 8.8

ELSA-2025-0146 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.46.5-1] - Update to 2.46.5

Jan 9, 2025
High max 7.5

ELSA-2025-0161 1 CVE

Important: iperf3 security update (Oracle Linux 9)

[3.9-13.1] - Resolves: RHEL-72929 - Denial of Service in iperf Due to Improper JSON Handling

Jan 9, 2025
High max 7.4

ELSA-2025-0210 1 CVE

Important: dpdk security update (Oracle Linux 9)

[23.11-2] - Backport fixes for CVE-2024-11614 (RHEL-68601)

Jan 9, 2025
High max 6.5

ELSA-2025-0147 2 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.6.0-3.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.6.0] - Add OpenELA debranding [128.6.0-3] - Update to 128.6.0 build3 [128.6.0-1] - Update to 128.6.0 build1

Jan 9, 2025
High

ELSA-2025-20007 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.93.1] - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li) [Orabug: 36544657] {CVE-2024-26840}

Jan 8, 2025
High max 8.8

ELSA-2024-10882 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-9.0.3] - Fixes CVE-2024-10979 where environment variable mutations [Orabug: 37370704] - are incorrectly allowed from trusted PL/Perl code

Dec 23, 2024
High max 8.6

ELSA-2024-11345 3 CVEs

Important: gstreamer1-plugins-base security update (Oracle Linux 8)

[1.16.1-5.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-5] - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615 Resolves: RHEL-70974, RHEL-71010, RHEL-70986

Dec 19, 2024
High max 7.5

ELSA-2024-11217 1 CVE

Important: skopeo security update (Oracle Linux 9)

[2:1.16.1-2] - rebuild to fix CVE-2024-34156

Dec 19, 2024
High max 9.8

ELSA-2024-12887 225 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-303.171.5.2] - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37393454] - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37384237] - x86/pkeys: Change caller of update_pkru_…

Dec 18, 2024
High max 8.6

ELSA-2024-11299 5 CVEs

Important: gstreamer1-plugins-good security update (Oracle Linux 8)

[1.16.1-5] - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, CVE-2024-47613 Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022 Resolves: RHEL-70998

Dec 17, 2024
High max 7.8

ELSA-2024-10666 2 CVEs

Important: gimp:2.8.22 security update (Oracle Linux 7)

[2:2.8.22-1.0.1] - Fix CVE-2023-44442 [Orabug: 37344570] - Fix CVE-2023-44444

Dec 16, 2024
High max 8.8

ELSA-2024-8495 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-9.0.1] - Backport fix for CVE-2023-7348 [Orabug: 37220738] - Adds restriction on non-system views

Dec 16, 2024
High max 8.8

ELSA-2024-10881 6 CVEs

Important: firefox security update (Oracle Linux 7)

[128.5.1-1.0.1] - Update to 128.5.1 [Orabug: 37370369][CVE-2024-11692][CVE-2024-11694] [CVE-2024-11695][CVE-2024-11696][CVE-2024-11697][CVE-2024-11699]

Dec 16, 2024
High max 9.8

ELSA-2024-12884 122 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.338.4.1] - Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang) [Orabug: 37383196] [5.4.17-2136.338.4] - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev) [Orabug: 37284641] {…

Dec 16, 2024
High max 8.6

ELSA-2024-11122 5 CVEs

Important: gstreamer1-plugins-good security update (Oracle Linux 9)

[1.22.1-3] - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, CVE-2024-47613 Resolves: RHEL-70954, RHEL-70967, RHEL-70941, RHEL-71027, Resolves: RHEL-71003

Dec 16, 2024
High max 8.6

ELSA-2024-11123 3 CVEs

Important: gstreamer1-plugins-base security update (Oracle Linux 9)

[1.22.1-3] - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615 Resolves: RHEL-70979, RHEL-71015, RHEL-70991

Dec 16, 2024
High max 8.4

ELSA-2024-10953 1 CVE

Important: python36:3.6 security update (Oracle Linux 8)

python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo python-PyMySQL python-sqlalchemy python-virtualenv [15.1.0-23] - Security fix for CVE-2024-53899 Resolves: RHEL-68876 python-wheel scipy

Dec 12, 2024