Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 6.3
    ELSA-2026-1537 1 CVE

    Moderate: python security update (Oracle Linux 7)

    [2.7.5-94.0.3] - Fix for CVE-2025-12084 [Orabug: 38902314]

  • Medium max 6.0
    ELSA-2026-2128 4 CVEs

    Moderate: python3 security update (Oracle Linux 8)

    [3.6.8-73.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-73] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120…

  • Medium max 4.3
    ELSA-2026-1838 1 CVE

    Moderate: image-builder security update (Oracle Linux 10)

    [45-1.0.2] - Fix CVE-2025-58183

  • Medium max 6.1
    ELSA-2026-1852 1 CVE

    Moderate: util-linux security update (Oracle Linux 8)

    [2.32.1-48.0.1] - Orabug 35995159 - report lost loop device [2.32.1-48] - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

  • Medium max 6.1
    ELSA-2026-1913 1 CVE

    Moderate: util-linux security update (Oracle Linux 9)

    [2.37.4-21.0.1] - Orabug 35995271 - report lost loop device

  • Medium max 7.5
    ELSA-2026-1831 1 CVE

    Moderate: qemu-kvm security update (Oracle Linux 10)

    [10.0.0-14.el10_1.5] - kvm-Revert-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-be.patch [RHEL-135453] - Resolves: RHEL-135453 (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: pdcm [rhel-…

  • Medium max 4.3
    ELSA-2026-1837 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 10)

    [149-4.0.1] - Add missing dependency over dracut-config-rescue for image-installer [Orabug: 38587453] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893…

  • Medium max 7.5
    ELSA-2026-1825 1 CVE

    Moderate: curl security update (Oracle Linux 10)

    [8.12.1-2.el10_1.2] - openssl: respect system crypto policy for TLS max version (RHEL-128923) [8.12.1-2.el10_1.1] - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-122689

  • Medium max 6.3
    ELSA-2026-1828 2 CVEs

    Moderate: python3.12 security update (Oracle Linux 10)

    [3.12.12-3.0.1] - Remove upstream URL reference [3.12.12-3] - Security fix for CVE-2025-13836 Resolves: RHEL-140978 [3.12.12-2] - Security fix for CVE-2025-12084 Resolves: RHEL-135387

  • Medium max 9.8
    ELSA-2026-1662 10 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.100.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • Medium max 7.8
    ELSA-2026-1617 3 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.27.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 6.1
    ELSA-2026-1696 1 CVE

    Moderate: util-linux security update (Oracle Linux 10)

    [2.40.2-15] - libblkid: use snprintf() instead of sprintf() [2.40.2-14] - Fix setpwnam() buffer use [CVE-2025-14104]

  • Medium max 7.8
    ELSA-2026-1714 1 CVE

    Moderate: wireshark security update (Oracle Linux 10)

    [4.4.2-4.0.1.el10_1.2] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-4.2] - Resolves: RHEL-136916 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) [1:4.4.2-4.1] - Resolves: RHEL-130425 - Access of Uninitialized P…

  • Medium max 6.3
    ELSA-2026-1631 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [3.6.8-72.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-72] - Security fix for CVE-2025-12084 Resolves: RHEL-135911

  • Medium max 9.8
    ELSA-2025-23947 11 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.16] - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} [Orabug: 38790244] - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} [Orabug: 38790244] - iomap: iomap: fix memory corruption when recor…

  • Medium max 6.5
    ELSA-2026-1592 1 CVE

    Moderate: iperf3 security update (Oracle Linux 8)

    [3.5-12] - Resolves: RHEL-136175 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • Medium max 4.3
    ELSA-2026-50076 1 CVE

    Moderate: image-builder security update (Oracle Linux 9)

    [45-1.0.2] - Fix CVE-2025-58183

  • Medium max 6.5
    ELSA-2026-1595 1 CVE

    Moderate: iperf3 security update (Oracle Linux 9)

    [3.9-14.1] - Resolves: RHEL-136181 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • Medium max 6.5
    ELSA-2026-1597 1 CVE

    Moderate: iperf3 security update (Oracle Linux 10)

    [3.17.1-5] - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • Medium max 8.8
    ELSA-2025-22910 7 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.15] - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} [Orabug: 38742878] - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put [Orabug: 38742878] - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} …

  • Medium max 4.3
    ELSA-2026-1380 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 8)

    [101.4-2.0.1] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - su…

  • Medium max 4.3
    ELSA-2026-1381 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 9)

    [149-3.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OL…

  • Medium max 6.3
    ELSA-2026-1478 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.25-3.0.1] - Remove upstream URL reference [3.9.25-3] - Security fix for CVE-2025-12084 Resolves: RHEL-135897

  • Medium max 6.3
    ELSA-2026-1374 2 CVEs

    Moderate: python3.11 security update (Oracle Linux 8)

    [3.11.13-4.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-4] - Security fix for CVE-2025-13836 Resolves: RHEL-140992 [3.11.13-3] - Security fix for CVE-2025-12084 Resolves: RHEL-135390

  • Medium max 7.5
    ELSA-2026-1350 1 CVE

    Moderate: curl security update (Oracle Linux 9)

    [7.76.1-35.el9_7.3] - http: fix crash in rate-limited upload (RHEL-129493) [7.76.1-35.el9_7.2] - openssl: respect system crypto policy for TLS max version (RHEL-128921) [7.76.1-35.el9_7.1] - rebuild for rhel-9.7.0 z-stream (RHEL-121659) [7.76.1-35] - cookie: …

  • Medium max 5.3
    ELSA-2026-1359 1 CVE

    Moderate: gcc-toolset-15-binutils security update (Oracle Linux 9)

    [2.44-3.1] - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130674)

  • Medium max 6.3
    ELSA-2026-1408 2 CVEs

    Moderate: python3.12 security update (Oracle Linux 9)

    [3.12.12-4.0.1] - Remove upstream URL reference [3.12.12-4] - Release bump to correct the build for wrong release Related: RHEL-141026 [3.12.12-3] - Security fix for CVE-2025-13836 Resolves: RHEL-141026 [3.12.12-2] - Security fix for CVE-2025-12084 Resolves: …

  • Medium max 6.3
    ELSA-2026-1410 2 CVEs

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.13-5.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-5] - Security fix for CVE-2025-13836 Resolves: RHEL-141025 [3.11.13-4] - Security fix for CVE-2025-12084 Resolves: RHEL-135395

  • Medium max 8.4
    ELSA-2026-1334 2 CVEs

    Moderate: glibc security update (Oracle Linux 10)

    [2.39-58.0.1.7] - Forward port Oracle changes to 2.39-58.7. - Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: November-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.2 - Forward port Oracle changes to 2.39-58.2. - Rev…

  • Medium max 8.1
    ELSA-2026-0079 1 CVE

    Moderate: perl security update (Oracle Linux 7)

    [4:5.16.3-299.0.1] - Fixed CVE-2023-31484 verify TLS certificates [Orabug: 38816274]

  • Medium
    ELSA-2026-50071 1 CVE

    Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.351.3.3] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38884602] {CVE-2025-40022}

  • Medium
    ELSA-2026-1178 1 CVE

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.29.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.7
    ELSA-2026-0991 1 CVE

    Moderate: glib2 security update (Oracle Linux 8)

    [2.56.4-168] - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase

  • Medium max 7.7
    ELSA-2026-0975 1 CVE

    Moderate: glib2 security update (Oracle Linux 10)

    [2.80.4-12] - Fix NVR [2.80.4-11] - Add patch for CVE-2025-13601

  • Medium max 7.5
    ELSA-2026-0930 2 CVEs

    Moderate: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.el8_10.8] - Replaced HAM-logo [0.10.18] - Debrand PCS [0.10.18-2.el8_10.8] - Fixed CVE-2025-67725, CVE-2025-67726 by patching bundled Tornado Resolves: RHEL-136415, RHEL-136420

  • Medium max 7.7
    ELSA-2026-0936 1 CVE

    Moderate: glib2 security update (Oracle Linux 9)

    [2.68.4-18.1] - Add patch for CVE-2025-13601

  • Medium max 7.8
    ELSA-2026-0756 1 CVE

    Moderate: transfig security update (Oracle Linux 8)

    [1:3.2.6a-5] - Detect nan in spline control values - Fix for CVE-2025-46397

  • Medium max 6.5
    ELSA-2026-0608 1 CVE

    Moderate: vsftpd security update (Oracle Linux 8)

    [3.0.3-36.3] - Rebuild to test with proper configuration - Related: RHEL-134160 [3.0.3-36.2] - Rebuild to test with proper configuration - Related: RHEL-134160 [3.0.3-36.1] - Fix CVE-2025-14242 - Resolves: RHEL-134160

  • Medium max 5.9
    ELSA-2026-0695 1 CVE

    Moderate: libpq security update (Oracle Linux 8)

    [13.23-1] - Rebase to upstream release 13.23 - Resolves: RHEL-131269 (CVE-2025-12818)

  • Medium max 5.9
    ELSA-2026-0493 2 CVEs

    Moderate: postgresql:16 security update (Oracle Linux 9)

    pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pg_repack [1.5.1-1] - Update to v1.5.1 [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 [1.4.8-1] - Res…