Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 6.5

ELSA-2025-23342 4 CVEs

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.25-2.0.1] - Remove upstream URL reference [3.9.25-2] - Move _sysconfigdata_d_linux*.py to the debug subpackage [3.9.25-1] - Update to Python 3.9.25 [3.9.24-1] - Update to Python 3.9.24

Dec 18, 2025
Medium max 5.3

ELSA-2025-23343 1 CVE

Moderate: binutils security update (Oracle Linux 9)

[2.35.2-67.0.1.1] - Merge Oracle patches to 2.35.2-67.1. - CVE-2025-11083 - Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: September-24-2025 Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1 - Merge Oracle patches to 2.35.2-66. -…

Dec 18, 2025
Medium max 4.3

ELSA-2025-23294 1 CVE

Moderate: skopeo security update (Oracle Linux 10)

[1:1.20.0-2] - rebuild for CVE-2025-58183 - Resolves: RHEL-125643

Dec 18, 2025
Medium max 4.3

ELSA-2025-23295 1 CVE

Moderate: podman security update (Oracle Linux 10)

[5.6.0-8.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-8] - update to the latest content o…

Dec 18, 2025
Medium max 3.6

ELSA-2025-23479 2 CVEs

Moderate: openssh security update (Oracle Linux 10)

[9.9p1-12.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37824421] [9.9p1-12] - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128397 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128387

Dec 17, 2025
Medium max 8.1

ELSA-2025-23484 1 CVE

Moderate: libssh security update (Oracle Linux 10)

[0.11.1-5] - Fix CVE-2025-5987 Resolves: RHEL-130040

Dec 17, 2025
Medium max 7.8

ELSA-2025-21063 6 CVEs

Moderate: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.14] - HID: core: fix shift-out-of-bounds in hid_report_raw_event {CVE-2022-48978} [Orabug: 38644370] - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} [Orabug: 38644370] - nfsd: don't ignore the return code of svc_proc_register() …

Dec 16, 2025
Medium max 5.5

ELSA-2025-23137 8 CVEs

Moderate: mysql:8.4 security update (Oracle Linux 8)

mecab mecab-ipadic mysql [8.4.7-1] - Rebase to 8.4.7

Dec 12, 2025
Medium max 5.5

ELSA-2025-23134 8 CVEs

Moderate: mysql:8.0 security update (Oracle Linux 8)

mecab mecab-ipadic mysql [8.0.44-1] - Rebase to MySQL 8.0.44

Dec 12, 2025
Medium max 5.5

ELSA-2025-23111 8 CVEs

Moderate: mysql:8.4 security update (Oracle Linux 9)

mecab mecab-ipadic mysql [8.4.7-1] - Rebase to 8.4.7 rapidjson

Dec 12, 2025
Medium max 5.5

ELSA-2025-23109 8 CVEs

Moderate: mysql security update (Oracle Linux 9)

[8.0.44-1] - Rebase to MySQL 8.0.44

Dec 12, 2025
Medium max 7.5

ELSA-2025-23062 3 CVEs

Moderate: ruby:3.3 security update (Oracle Linux 8)

ruby [3.3.10-5] - Upgrade to Ruby 3.3.10. Resolves: RHEL-106820 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL…

Dec 11, 2025
Medium max 7.5

ELSA-2025-23063 3 CVEs

Moderate: ruby:3.3 security update (Oracle Linux 9)

ruby [3.3.10-5] - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL…

Dec 11, 2025
Medium max 7.5

ELSA-2025-23139 1 CVE

Moderate: libsoup3 security update (Oracle Linux 10)

[3.6.5-7] - Add patch for CVE-2025-12105

Dec 11, 2025
Medium max 7.5

ELSA-2025-23141 3 CVEs

Moderate: ruby security update (Oracle Linux 10)

[3.3.10-11] - Upgrade to Ruby 3.3.10. Resolves: RHEL-130160 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122…

Dec 11, 2025
Medium max 4.4

ELSA-2025-23086 1 CVE

Moderate: luksmeta security update (Oracle Linux 8)

[9-4.1] - Fix handling of large metadata Resolves: RHEL-122138

Dec 10, 2025
Medium max 4.3

ELSA-2025-23087 1 CVE

Moderate: grafana security update (Oracle Linux 9)

[10.2.6-17] - Resolves RHEL-125692: CVE-2025-58183 - Resolves RHEL-120426: Grafana-selinux prevents plugins from searching cgroups

Dec 10, 2025
Medium max 5.5

ELSA-2025-23008 8 CVEs

Moderate: mysql8.4 security update (Oracle Linux 10)

[8.4.7-1] - Rebase to 8.4.7

Dec 10, 2025
Medium max 4.3

ELSA-2025-23088 1 CVE

Moderate: grafana security update (Oracle Linux 10)

[10.2.6-21] - Resolves RHEL-125631: CVE-2025-58183 - Resolves RHEL-132760: Grafana-selinux prevents plugins from searching cgroups

Dec 10, 2025
Medium max 7.8

ELSA-2025-22865 2 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.13.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Dec 9, 2025
Medium max 7.8

ELSA-2025-22801 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.89.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Dec 8, 2025
Medium max 9.8

ELSA-2025-22854 9 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.20.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Dec 8, 2025
Medium max 6.5

ELSA-2025-22668 2 CVEs

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.3-1] - Update to Go 1.25.3 (sync from CentOS Stream 9) - Build go-toolset as…

Dec 5, 2025
Medium

ELSA-2025-21931 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Dec 5, 2025
Medium max 9.8

ELSA-2025-22395 6 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.16.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Dec 5, 2025
Medium max 4.7

ELSA-2025-22660 1 CVE

Moderate: systemd security update (Oracle Linux 9)

[252-55.0.3.7] - serialize: don't allocate 1M on the stack just like that [LINUX-16166] - Route logs from container mapped uids to the system journal [Orabug: 38135007] - Drop delay when nspawn fails to reset loginuid [Orabug: 37793135] - Improve logging for …

Dec 4, 2025
Medium max 9.8

ELSA-2025-21463 4 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Dec 4, 2025
Medium max 4.3

ELSA-2025-21816 1 CVE

Moderate: delve and golang security update (Oracle Linux 10)

delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update Delve to 1.25.2 [1.24.1-3] - Update CI support golang [1.25.3-1] - Update to Go 1.25.3 [1.25.1-1] - Update to Go1.25.1 -Resolves: RHEL-116849 [1.25.0-5] - D…

Dec 3, 2025
Medium max 9.8

ELSA-2025-21118 12 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Dec 3, 2025
Medium max 7.5

ELSA-2025-21485 3 CVEs

Moderate: java-25-openjdk security update (Oracle Linux 10)

[1:25.0.1.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:25.0.1.0.8-2] - Remove superfluous backslashes that cause two alternative commands to be combined - Related: RHEL-120553 [1:25.0.1.0.8-1] - Update to jdk-25.0.1+8 (GA) - Update release not…

Dec 3, 2025
Medium max 4.1

ELSA-2025-21015 2 CVEs

Moderate: vim security update (Oracle Linux 10)

[9.1.083-6.0.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-6] - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial

Dec 2, 2025
Medium max 9.8

ELSA-2025-21248 1 CVE

Moderate: openssl security update (Oracle Linux 10)

[3.5.1-4.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.1-4] - Fix CVE-2025-9230 Resolves: RHEL-115885

Dec 2, 2025
Medium max 9.4

ELSA-2025-22394 1 CVE

Moderate: qt6-qtsvg security update (Oracle Linux 10)

[6.9.1-2.2] - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion guard to prevent stack overflow Resolves: RHEL-119719 [6.9.1-2.1] - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699

Dec 2, 2025
Medium max 7.3

ELSA-2025-21035 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 10)

[24.1.5-5] - CVE fix for: CVE-2025-62229 (RHEL-119965), CVE-2025-62230 (RHEL-120014), CVE-2025-62231 (RHEL-125004)

Dec 2, 2025
Medium max 5.3

ELSA-2025-22361 1 CVE

Moderate: qt6-qtquick3d security update (Oracle Linux 10)

[6.9.1-1.1] - Fix CVE-2025-11277 in bundled assimp library Resolves: RHEL-120981

Dec 2, 2025
Medium max 5.4

ELSA-2025-21013 1 CVE

Moderate: libssh security update (Oracle Linux 10)

[0.11.1-4] - Rebuild due to broken build auto-tagging

Dec 2, 2025
Medium max 9.8

ELSA-2025-22388 6 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.87.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Dec 1, 2025
Medium max 6.2

ELSA-2025-22376 1 CVE

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-14] - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) [2.9.13-13] - Fix CVE-2025-9714 (RHEL-119283)

Dec 1, 2025
Medium max 9.8

ELSA-2025-22405 8 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.11.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Dec 1, 2025
Medium max 9.8

ELSA-2025-21112 13 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.7.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…

Nov 26, 2025