2,729 results · Clear filters · Feed
-
Medium max 5.5ELSA-2026-96215 1 CVE
Moderate: patch security update (Oracle Linux 8)
[2.7.6-12] - CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory allows file creation outside the working directory - Resolves: RHEL-289587
-
Medium max 6.3ELSA-2026-96087 4 CVEs
Moderate: glibc security update (Oracle Linux 8)
[2.28-251.0.5.53] - Forward port of Oracle patches to 2.28-251.53 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: October-14-2026 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.28-251.0.5.48 - Forward port of Oracle patches to 2.28-2…
-
Medium max 10.0
Moderate: ruby security, bug fix, and enhancement update (Oracle Linux 10)
[3.3.13-16] - Rebase to Ruby 3.3.13. Resolves: RHEL-300972 - Fix: integer overflow issue in regular expression compiler (CVE-2026-110264) Resolves: RHEL-292066 - Fix: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) Resolves: RHEL-…
-
Medium max 10.0
Moderate: ruby4.0 security, bug fix, and enhancement update (Oracle Linux 10)
[4.0.9-38] - Upgrade to ruby 4.0.9. Resolves: RHEL-300942 - Fix: integer overflow issue in regular expression compiler (CVE-2026-110264) Resolves: RHEL-292062 - Fix: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) Resolves: RHEL-2…
-
Medium max 6.3ELSA-2026-95618 4 CVEs
Moderate: glibc security update (Oracle Linux 9)
[2.34-284.0.1.4] - Forward-port Oralce patches for ol9-u8 Oracle history: October-13-2026 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-283.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Kris Van Hees <kris.van.hees@oracle.com> August-03-2026 …
-
Medium max 6.1ELSA-2026-95570 3 CVEs
Moderate: cockpit-files security update (Oracle Linux 10)
[36.1-1] - Fix CVE-2026-91202 - Don't de-reference a symlink when pasting (RHEL-263140) - Fix CVE-2026-91205 - Don't de-reference a symlink when creating a directory (RHEL-263132)
-
Medium max 7.8ELSA-2026-95281 1 CVE
Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 8)
[21.1.3-20.5] - Add missing antecedent for CVE-2026-93520 fix Resolves: https://redhat.atlassian.net/browse/RHEL-299853
-
Medium max 7.5ELSA-2026-94485 2 CVEs
Moderate: cockpit security, bug fix, and enhancement update (Oracle Linux 8)
[310.10-1.0.1] - Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589] - Move update-motd out of cockpit_ws_t context [Orabug: 36013589] - Update documentation links [Orabug: 34706402] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34…
-
Medium max 6.6ELSA-2026-76777 2 CVEs
Moderate: glibc security update (Oracle Linux 8)
[2.28-251.0.5.48] - Forward port of Oracle patches to 2.28-251.48 Reviewed-by: Kris Van Hees <kris.van.hees@oracle.com> Oracle history: July-28-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.5.40 - Fixed orabug 39809344 - Default ldso uses…
-
Medium max 5.9ELSA-2026-80798 4 CVEs
Moderate: glibc security update (Oracle Linux 8)
[2.28-251.0.5.48] - Forward port of Oracle patches to 2.28-251.48 Reviewed-by: Kris Van Hees <kris.van.hees@oracle.com> Oracle history: July-28-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.5.40 - Fixed orabug 39809344 - Default ldso uses…
-
Medium max 7.8ELSA-2026-93930 2 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-687.65.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
Medium max 7.8ELSA-2026-93911 1 CVE
Moderate: kernel security update (Oracle Linux 10)
[6.12.0-211.73.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
Medium max 7.7ELSA-2026-76781 4 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 10)
[2.39-145.0.1] - Forward port Oracle chnages to 2.39-145. Oracle history: Sep-01-2026 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> Jul-15-2026 Cup…
-
Medium max 6.6ELSA-2026-79281 6 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 9)
[2.34-283.0.1] - Forward-port Oracle patches for ol9-u8 Reviewed-by: Kris Van Hees <kris.van.hees@oracle.com> Oracle history: August-03-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-275.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: …
-
Medium max 7.5ELSA-2026-90811 2 CVEs
Moderate: grafana security update (Oracle Linux 9)
[10.2.6-23.7] - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-290771 [10.2.6-23.6] - Rebuild against updated golang - Resolves RHEL-287510 - Resolves RHEL-279380 - Resolves RHEL-279012 - Resolves RHE…
-
Medium max 5.5ELSA-2026-93464 1 CVE
Moderate: podman security update (Oracle Linux 10)
[5.8.2-12.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.8.2-12] - update to the latest upstream commit aae8b839 - fixes CVE-2025-11395 - Resolves: RHEL-119569
-
Medium max 5.5ELSA-2026-93442 1 CVE
Moderate: pipewire security update (Oracle Linux 10)
[1.4.11-1.2] - CVE-2026-14330 pipewire: Pulse Server alloca Stack Overflow Resolves: RHEL-296741
-
Medium max 5.9ELSA-2026-84753 4 CVEs
Moderate: glibc security update (Oracle Linux 10)
[2.39-145.0.1] - Forward port Oracle chnages to 2.39-145. Oracle history: Sep-01-2026 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.39-128.0.1 - Forward port Oracle changes to 2.39-128. - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> Jul-15-2026 Cup…
-
Medium max 6.8ELSA-2026-55774 3 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1.8.0.504.b01-1.0.1] - update to open-jdk 8u504-b01 (GA) [Orabug: 39966086] - Security update for CVE-2026-60589 CVE-2026-61308 and CVE-2026-70907
-
Medium max 7.7ELSA-2026-89830 2 CVEs
Moderate: gcc security update (Oracle Linux 8)
[8.5.0-30.0.1] - Merge Oracle patches to 8.5.0-30. Oracle history: August-26-2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-28.0.1 - Merge Oracle patches to 8.5.0-28. March-31-2025 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-26.0.1 - Merge Oracle patches t…
-
Medium max 7.4ELSA-2026-91056 1 CVE
Moderate: libXi security update (Oracle Linux 9)
[1.7.10-8.1] - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270061
-
Medium max 7.5ELSA-2026-92907 1 CVE
Moderate: curl security update (Oracle Linux 9)
[7.76.1-40.el9_8.9] - fix incomplete mTLS config in connection reuse (CVE-2026-8932)
-
Medium max 7.0ELSA-2026-90915 1 CVE
Moderate: gcc-toolset-15-gcc security update (Oracle Linux 8)
[15.2.1-7.2] - fix CVE-2026-102010, PR libstdc++/127656 (RHEL-272113)
-
Medium max 7.4ELSA-2026-91268 1 CVE
Moderate: libXi security update (Oracle Linux 8)
[1.7.10-2] - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270049
-
Medium max 7.4ELSA-2026-91004 1 CVE
Moderate: libXi security update (Oracle Linux 10)
[1.8.1-7.1] - CVE fix for CVE-2026-93541, CVE-2026-93542, CVE-2026-93543 Resolves: RHEL-270054
-
Medium max 9.8ELSA-2026-89754 6 CVEs
Moderate: freeipmi security, bug fix, and enhancement update (Oracle Linux 8)
[1.6.20-1] - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. [1.6.19-1] - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509
-
Medium max 8.8ELSA-2026-89816 1 CVE
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.179.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
Medium max 9.8ELSA-2026-89753 6 CVEs
Moderate: freeipmi security, bug fix, and enhancement update (Oracle Linux 9)
[1.6.20-1] - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. [1.6.19-1] - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509
-
Medium max 1.7ELSA-2026-89749 1 CVE
Moderate: xz security update (Oracle Linux 9)
[5.2.5-8.1] - Fix: a buffer overflow in lzma_index_append() - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environment) - Resolves: CVE-2026-34743
-
Medium max 5.9ELSA-2026-89746 1 CVE
Moderate: bind9.18 security update (Oracle Linux 9)
[32:9.18.29-14.11] - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
-
Medium max 5.9ELSA-2026-89745 1 CVE
Moderate: bind security update (Oracle Linux 9)
[9.16.23-40.0.1.el9_8.12] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-40.12] - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. [32:9.16.23-40.11] - Backport 'Do not use header_prev in exp…
-
Medium max 5.9ELSA-2026-90328 1 CVE
Moderate: bind security update (Oracle Linux 10)
[9.18.33-15.0.1.el10_2.13] - Hard require needed openssl-libs [Orabug: 38742109] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.18.33-15.13] - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. [32:9…
-
Medium max 9.8ELSA-2026-89905 6 CVEs
Moderate: freeipmi security, bug fix, and enhancement update (Oracle Linux 10)
[1.6.20-1] - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. [1.6.19-1] - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509
-
Medium max 7.0ELSA-2026-89891 1 CVE
Moderate: gcc-toolset-15-gcc security update (Oracle Linux 10)
[15.2.1-7.1] - fix CVE-2026-102010, PR libstdc++/127656 (RHEL-272094)
-
Medium max 6.5ELSA-2026-85917 1 CVE
Moderate: perl:5.32 security update (Oracle Linux 8)
perl [4:5.32.1-475] - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-247945 perl-Algorithm-Diff [1.1903-10] - Rebuild with enable hardening (bug #1636329) perl-Archive-Tar [2.38-5] - Fix CVE-2026-9538: Denial of Service via c…
-
Medium max 6.5ELSA-2026-88211 5 CVEs
Moderate: openssh security update (Oracle Linux 8)
[8.0p1-34.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-34] - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE…
-
Medium max 5.5ELSA-2026-86970 3 CVEs
Moderate: cockpit-machines security update (Oracle Linux 9)
[348.1-1.0.1] - Apply the patch for upstream reference [Orabug: 39248919] - Replace upstream references [Orabug: 34340088] [348.1-1] - CVE-2026-92768 (RHEL-263127) - CVE-2026-92747 (RHEL-263114) - CVE-2026-92745 (RHEL-263111)
-
Medium max 5.3ELSA-2026-86982 1 CVE
Moderate: fetchmail security update (Oracle Linux 8)
[6.4.24-1.1] - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) Resolves: RHEL-265182
-
Medium max 7.5ELSA-2026-86706 2 CVEs
Moderate: jackson-core security update (Oracle Linux 9)
[2.21.6-1.2] - Resolves: RHEL-286626 - CVE-2026-89425 jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing unbounded StringBuilder growth during malformed token processing [2.21.6-1.1] - Resolves: …
-
Medium max 4.8ELSA-2026-85958 3 CVEs
Moderate: openssh security update (Oracle Linux 9)
[9.9p1-13.0.1] - Restore pam_ssh_agent_rel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value [Orabug: 39825354] - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM…