Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 6.6
    ELSA-2026-4442 1 CVE

    Moderate: vim security update (Oracle Linux 8)

    [8.0.1763-22.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-22] - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

  • Medium max 7.4
    ELSA-2026-4472 1 CVE

    Moderate: compat-openssl11 security update (Oracle Linux 9)

    [1:1.1.1k-5.2] - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142722

  • Medium max 5.3
    ELSA-2026-50149 2 CVEs

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-10_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409] - Update FIPS module name for Oracle Linux [Orabug: 35925409] [3.8.3-10] - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name …

  • Medium max 5.9
    ELSA-2026-4235 1 CVE

    Moderate: nginx:1.26 security update (Oracle Linux 9)

    [2:1.26.3-2.0.1] - Require oracle-indexhtml

  • Medium max 6.0
    ELSA-2026-4216 3 CVEs

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.13-5.1.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-5.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143104 RHEL-143167 RHEL-144890

  • Medium max 5.3
    ELSA-2026-4188 2 CVEs

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-10] - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831)

  • Medium max 6.0
    ELSA-2026-4168 3 CVEs

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.25-3.0.1.el9_7.1] - Remove upstream URL reference [3.9.25-3.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143108 RHEL-143169 RHEL-144893

  • Medium max 6.0
    ELSA-2026-4165 3 CVEs

    Moderate: python3.12 security update (Oracle Linux 9)

    [3.12.12-4.0.1.el9_7.1] - Remove upstream URL reference [3.12.12-4.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143106 RHEL-143168 RHEL-144891

  • Medium max 6.5
    ELSA-2026-4162 6 CVEs

    Moderate: mysql8.4 security update (Oracle Linux 10)

    [8.4.8-1] - Rebase to 8.4.8 [8.4.7-2] - Skip tests that are failing on Konflux - Resolves: ROK-831

  • Medium max 6.3
    ELSA-2026-2713 1 CVE

    Moderate: python3 security update (Oracle Linux 7)

    [3.6.8-21.0.7] - Security update CVE-2025-12084 [Orabug: 38971895] [3.6.8-21.0.5] - tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194] [3.6.8-21.0.3] - Fix DoS parsing crafted tarfile headers [Orabug: 37…

  • Medium max 6.5
    ELSA-2026-3938 1 CVE

    Moderate: nfs-utils security update (Oracle Linux 8)

    [2.3.3-68.0.1] - nfsd: allow more than 64 backlogged connections - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 35173372] [2.3.3-68] - Add requires for selinux-policy (RHEL-127095) [2.3.3-67] - mountd: Minor refactor of get_r…

  • Medium max 9.1
    ELSA-2026-3842 1 CVE

    Moderate: delve security update (Oracle Linux 9)

    [1.25.2-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-2] - Rebuild without changes. - Resolves: RHEL-153104

  • Medium max 6.5
    ELSA-2026-3940 1 CVE

    Moderate: nfs-utils security update (Oracle Linux 9)

    [2.5.4-38.0.1.el9_7.3] - spec: remove multiple warnings when upgrading nfs-utils with gssproxy [Orabug: 36044562] [2.5.4-38.3] - Add requires for selinux-policy (RHEL-127104) [2.5.4-38.2] - Replace statfs64 with statfs (RHEL-127104) - NFS export symlink vulne…

  • Medium max 6.5
    ELSA-2026-3939 1 CVE

    Moderate: nfs-utils security update (Oracle Linux 10)

    [2.8.3-0.0.1.el10_1.3] - remove multiple warnings when upgrading nfs-utils with gssproxy [2.8.3-3] - Add requires for selinux-policy (RHEL-127092) [2.8.3-2] - mountd: Minor refactor of get_rootfh() (RHEL-127092) - mountd: Separate lookup of the exported direc…

  • Medium max 5.9
    ELSA-2026-3638 1 CVE

    Moderate: nginx:1.24 security update (Oracle Linux 9)

    [1.24.0-5.1.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-5.1] - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connec…

  • Medium
    ELSA-2026-3464 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.109.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • Medium max 8.1
    ELSA-2026-3488 3 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.36.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 5.3
    ELSA-2026-3477 2 CVEs

    Moderate: gnutls security update (Oracle Linux 10)

    [3.8.10-3] - Fix CVE-2025-9820, CVE-2025-14831, drop unused patches - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Drop unused patches

  • Medium max 8.1
    ELSA-2026-3275 4 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.39.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.8
    ELSA-2026-3066 2 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.35.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 7.2
    ELSA-2026-3189 1 CVE

    Moderate: 389-ds-base security update (Oracle Linux 9)

    [2.7.0-10] - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z] - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z] - Resolves: RHEL-137083 - CVE-2025-14905 389-ds-base: 389-ds-base: Remot…

  • Medium max 7.2
    ELSA-2026-3208 1 CVE

    Moderate: 389-ds-base security update (Oracle Linux 10)

    [3.1.3-7] - Bump version to 3.1.3-7 - Resolves: RHEL-117764 - Replication online reinitialization of a large database gets stalled. [rhel-10.1.z] - Resolves: RHEL-123274 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-10.1.z]…

  • Medium max 7.4
    ELSA-2026-3042 1 CVE

    Moderate: openssl security update (Oracle Linux 8)

    [1:1.1.1k-15] - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 [1:1.1.1k-14.1] - Backport fix…

  • Medium max 7.5
    ELSA-2026-50118 2 CVEs

    Moderate: virt:kvm_utils3 security update (Oracle Linux 8)

    hivex [1.3.18-23] - Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976194 [1.3.18-22.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504) resolve…

  • Medium max 9.8
    ELSA-2026-0755 4 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.17] - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} [Orabug: 38860426] - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} [Orabug: 38860426] - net_sched: hfsc: Fix a potential UAF in hfsc_deque…

  • Medium max 9.8
    ELSA-2026-2776 1 CVE

    Moderate: edk2 security update (Oracle Linux 9)

    [20241117-4.0.1.el9_7.3] - Replace upstream references [Orabug:36569119] [20241117-4.el9_7.3] - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-125104] - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-125104] - edk2-Ovm…

  • Medium max 6.5
    ELSA-2026-2799 2 CVEs

    Moderate: php security update (Oracle Linux 9)

    [8.0.30-5] - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177

  • Medium max 8.4
    ELSA-2026-2786 3 CVEs

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-231.0.1.10] - Forward-port Oracle patches for ol9-u7 Reviewed-by: [TBD] Oracle history: November-14-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-231.0.1.2 - Forward-port Oracle patches for ol9-u7 Reviewed-by: Jose E. Marchesi <jose.march…

  • Medium max 9.8
    ELSA-2026-50114 1 CVE

    Moderate: openssl security update (Oracle Linux 7)

    [1.0.2k-26.0.1_fips] - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison [Orabug: 32467026] - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059] - Add TLS KDF self-test [Orabug: 32467193] - Add EC keys pairwi…

  • Medium max 8.8
    ELSA-2026-2720 3 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.105.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • Medium max 5.5
    ELSA-2023-3822 1 CVE

    Moderate: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8)

    hivex libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key para…

  • Medium max 9.8
    ELSA-2026-2722 7 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.34.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 8.0
    ELSA-2026-2721 7 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.38.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 9.8
    ELSA-2026-1720 1 CVE

    Moderate: openssl security update (Oracle Linux 7)

    [1:1.0.2k-26.0.1] - Fixes CVE-2025-9230 Fix incorrect check of unwrapped key size [Orabug: 38916245]

  • Medium max 5.3
    ELSA-2026-2627 1 CVE

    Moderate: gcc-toolset-14-binutils security update (Oracle Linux 8)

    [2.41-3.1] - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130636) * Thu Feb 20 2025 Nick Clifton <nickc@redhat.com> - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. [2.41-3] - NVR Bump to …

  • Medium max 7.7
    ELSA-2026-1608 1 CVE

    Moderate: glib2 security update (Oracle Linux 7)

    [2.56.1-9.0.3] - Fixes CVE-2025-13601 g_escape_uri_string() overflow [Orabug: 38909821] [2.56.1-9.0.1] - Fix overflow of GDBusConnection serial [Orabug: 38666376]

  • Medium max 6.5
    ELSA-2026-2470 13 CVEs

    Moderate: php:7.4 security update (Oracle Linux 8)

    libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php [7.4.33-3] - Fix Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface GHSA-4w77-75f9-2c8w - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs …

  • Medium max 6.3
    ELSA-2026-2419 1 CVE

    Moderate: python3.12 security update (Oracle Linux 8)

    [3.12.12-2] - Security fix for CVE-2025-13836 Resolves: RHEL-140993

  • Medium max 8.8
    ELSA-2026-2212 16 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.30.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 9.8
    ELSA-2026-2282 8 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.35.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…