Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 6.5

ELSA-2025-22063 1 CVE

Moderate: cups security update (Oracle Linux 8)

[1:2.2.6-64] - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

Nov 25, 2025
Medium max 9.8

ELSA-2025-28011 1 CVE

Moderate: openssl security update (Oracle Linux 9)

[3.5.1-4.0.2_fips] - Update additional upstream references [3.5.1-4.0.1_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276] - Update FIPS module name [Orabug: 35824276] [3.5.1-4.0.1] - Enable openssl-fips-provide…

Nov 25, 2025
Medium max 4.3

ELSA-2025-21815 1 CVE

Moderate: delve and golang security update (Oracle Linux 9)

delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 - Resolves: RHEL-111801 golang [1.25.3-1] - Update to Go 1.25.3 - Resolves: RHEL-121220 [1.25.1-1] - Update to Go 1.25.1 - Resolves: RHEL-11…

Nov 25, 2025
Medium max 6.5

ELSA-2025-22005 1 CVE

Moderate: go-rpm-macros security update (Oracle Linux 9)

[3.6.0-12] - Rebuilt to include Go1.25.3 to address CVE-2025-47906 - Resolves: RHEL-125569

Nov 25, 2025
Medium max 5.4

ELSA-2025-20943 1 CVE

Moderate: libssh security update (Oracle Linux 9)

[0.10.4-15] - Bump spec to make the 9.7 NVR higher than the 9.6 one [0.10.4-14] - Fix CVE-2025-5318 Resolves: RHEL-111732

Nov 25, 2025
Medium max 4.1

ELSA-2025-20945 2 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-23.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-23] - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal

Nov 25, 2025
Medium max 5.3

ELSA-2025-20963 1 CVE

Moderate: qt5-qt3d security update (Oracle Linux 9)

[5.15.9-2.1] - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120986

Nov 25, 2025
Medium max 7.3

ELSA-2025-20960 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

[23.2.7-5] - CVE fix for: CVE-2025-62229 (RHEL-119974), CVE-2025-62230 (RHEL-120021), CVE-2025-62231 (RHEL-125017)

Nov 25, 2025
Medium max 7.3

ELSA-2025-20961 3 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 9)

[1.20.11-32] - CVE fix for: CVE-2025-62229 (RHEL-119960), CVE-2025-62230 (RHEL-120033), CVE-2025-62231 (RHEL-125002)

Nov 25, 2025
Medium max 9.8

ELSA-2025-21255 1 CVE

Moderate: openssl security update (Oracle Linux 9)

[3.5.1-4.0.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [3.5.1.openela.0.1] - Add OpenELA specific changes [1:3.5.1-4] …

Nov 25, 2025
Medium

ELSA-2025-21926 1 CVE

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.9.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…

Nov 25, 2025
Medium max 8.8

ELSA-2025-21469 8 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.8.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…

Nov 25, 2025
Medium max 8.8

ELSA-2025-21917 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.85.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Nov 24, 2025
Medium max 5.0

ELSA-2025-21977 1 CVE

Moderate: libssh security update (Oracle Linux 8)

[0.9.6-16] - Fix CVE-2025-5372 Resolves: RHEL-121232

Nov 24, 2025
Medium max 8.4

ELSA-2025-21398 1 CVE

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.84.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Nov 17, 2025
Medium max 7.5

ELSA-2025-20801 2 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-15] - backport documentation change for CVE-2023-52355 (RHEL-17328) [4.4.0-14] - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)

Nov 17, 2025
Medium

ELSA-2025-20838 1 CVE

Moderate: zziplib security update (Oracle Linux 9)

[0.13.71-12] - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266

Nov 17, 2025
Medium max 7.5

ELSA-2025-18814 2 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

[1.8.0.472.b08-1.0.1] - Update to 8u472-b08 (GA) [Orabug: 38571645] - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8 - Sync the copy of the …

Nov 11, 2025
Medium max 7.8

ELSA-2025-19931 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.83.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Nov 10, 2025
Medium max 5.6

ELSA-2025-19930 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.62.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…

Nov 10, 2025
Medium max 8.8

ELSA-2025-19962 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.43.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Nov 10, 2025
Medium max 7.2

ELSA-2025-25742 1 CVE

Moderate: linux-firmware security update (Oracle Linux 7)

[20251030-999.44.1.gite9292517.el7] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

Nov 6, 2025
Medium max 7.2

ELSA-2025-25743 1 CVE

Moderate: linux-firmware security update (Oracle Linux 8)

[20251030-999.44.1.gite9292517.el8] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

Nov 6, 2025
Medium max 7.2

ELSA-2025-25744 1 CVE

Moderate: linux-firmware security update (Oracle Linux 9)

[20251030-999.44.1.gite9292517.el9] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

Nov 6, 2025
Medium max 5.3

ELSA-2025-19911 1 CVE

Moderate: qt5-qt3d security update (Oracle Linux 9)

[5.15.9-2.1] - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120988

Nov 6, 2025
Medium max 7.2

ELSA-2025-25745 1 CVE

Moderate: linux-firmware security update (Oracle Linux 10)

[20251030-999.44.1.gite9292517.el10] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}

Nov 6, 2025
Medium max 5.5

ELSA-2025-19572 5 CVEs

Moderate: mariadb:10.5 security update (Oracle Linux 8)

galera [26.4.22-1] - Rebase to 26.4.22 Judy [1.0.5-18] - Remove README.Fedora; no longer needed since 1.0.5 version - Resolves: #1638717 [1.0.5-17] - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28 - Drop legacy BuildRoot: and Group: tags - D…

Nov 5, 2025
Medium max 5.5

ELSA-2025-19584 5 CVEs

Moderate: galera and mariadb security update (Oracle Linux 9)

galera [26.4.22-1] - Rebase to 26.4.22 mariadb [3:10.5.29-2] - Release bump for rebuild [3:10.5.29-1] - Rebase to 10.5.29

Nov 5, 2025
Medium max 6.6

ELSA-2025-19594 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 9)

[132.2-3.0.1] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Lin…

Nov 5, 2025
Medium max 7.3

ELSA-2025-19623 3 CVEs

Moderate: xorg-x11-server-Xwayland update (Oracle Linux 9)

[23.2.7-5] - CVE fix for: CVE-2025-62229 (RHEL-119975), CVE-2025-62230 (RHEL-120020), CVE-2025-62231 (RHEL-125016)

Nov 4, 2025
Medium max 6.6

ELSA-2025-19566 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 10)

[134.1-3.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …

Nov 4, 2025
Medium max 7.3

ELSA-2025-19432 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 8)

[21.1.3-19] - CVE fix for: CVE-2025-62229 (RHEL-119967), CVE-2025-62230 (RHEL-120015), CVE-2025-62231 (RHEL-125007)

Nov 3, 2025
Medium max 7.3

ELSA-2025-19434 3 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 8)

[1.20.11-27] - CVE fix for: CVE-2025-62229 (RHEL-119953), CVE-2025-62230 (RHEL-120027), CVE-2025-62231 (RHEL-124993)

Nov 3, 2025
Medium max 8.8

ELSA-2025-19447 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.82.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Nov 3, 2025
Medium max 7.3

ELSA-2025-19433 3 CVEs

Moderate: xorg-x11-server update (Oracle Linux 9)

[1.20.11-32] - CVE fix for: CVE-2025-62229 (RHEL-119961), CVE-2025-62230 (RHEL-120032), CVE-2025-62231 (RHEL-125001)

Nov 3, 2025
Medium max 9.8

ELSA-2025-19409 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.60.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…

Nov 3, 2025
Medium max 7.3

ELSA-2025-19435 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 10)

[24.1.5-5] - CVE fix for: CVE-2025-62229 (RHEL-119964), CVE-2025-62230 (RHEL-120013), CVE-2025-62231 (RHEL-125006)

Nov 3, 2025
Medium max 9.8

ELSA-2025-19469 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.42.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Nov 3, 2025
Medium max 8.4

ELSA-2025-19105 5 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.58.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…

Oct 28, 2025
Medium max 8.8

ELSA-2025-19106 6 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.41.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Oct 28, 2025