Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 9.8

ELSA-2025-19102 6 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.81.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Oct 27, 2025
Medium max 7.5

ELSA-2025-18815 2 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.472.b08-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.472.b08-1] - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no…

Oct 24, 2025
Medium max 7.5

ELSA-2025-18824 3 CVEs

Moderate: java-21-openjdk security update (Oracle Linux 8)

[1:21.0.9.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.9.0.10-1] - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double s…

Oct 24, 2025
Medium max 7.5

ELSA-2025-18821 2 CVEs

Moderate: java-17-openjdk security update (Oracle Linux 8)

[1:17.0.17.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.17.0.10-1] - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set is_ga to …

Oct 23, 2025
Medium max 5.6

ELSA-2025-10108 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.24.0.20250512] - update microcode bundle to 20250512 [Orabug: 38139038] [2:2.1-73.23.0.20250211] - update microcode bundle to 20250211 [Orabug: 37670820] - drop releasenote.md file [2:2.1-73.20.0.1] - don't bother calling dracut if virtualized [Orab…

Oct 20, 2025
Medium max 7.8

ELSA-2025-17161 6 CVEs

Moderate: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.13] - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} [Orabug: 38493400] - md-raid10: fix KASAN warning {CVE-2022-50211} [Orabug: 38493400] - ALSA: bcd2000: Fix a UAF bug on the error path o…

Oct 20, 2025
Medium max 7.8

ELSA-2025-18297 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.80.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Oct 20, 2025
Medium max 9.8

ELSA-2025-18281 7 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.55.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…

Oct 20, 2025
Medium max 9.8

ELSA-2025-18318 6 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.40.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Oct 20, 2025
Medium max 5.4

ELSA-2025-18286 1 CVE

Moderate: libssh security update (Oracle Linux 8)

[0.9.6-15] - Fix CVE-2025-5318 Resolves: RHEL-111724

Oct 19, 2025
Medium max 7.5

ELSA-2025-14997 2 CVEs

Moderate: httpd security update (Oracle Linux 7)

[2.4.6-99.0.7.1] - Fixed security update CVE-2024-47252 CVE-2025-49812 [Orabug: 38378160]

Oct 16, 2025
Medium max 5.4

ELSA-2025-18275 1 CVE

Moderate: libssh security update (Oracle Linux 9)

[0.10.4-15] - Rebuild due to broken build auto-tagging [0.10.4-14] - Fix CVE-2025-5318 Resolves: RHEL-111730

Oct 16, 2025
Medium max 5.4

ELSA-2025-18231 1 CVE

Moderate: libssh security update (Oracle Linux 10)

[0.11.1-4] - Rebuild due to broken build auto-tagging [0.11.1-3] - Fix CVE-2025-5318 Resolves: RHEL-111720 [0.11.1-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018

Oct 16, 2025
Medium max 4.1

ELSA-2025-17913 2 CVEs

Moderate: vim security update (Oracle Linux 10)

[9.1.083-5.0.1.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-5.1] - RHEL-113550 CVE-2025-53906 vim: Vim path traversal - RHEL-113544 CVE-2025-53905 vim: Vim path traversial

Oct 14, 2025
Medium max 8.8

ELSA-2025-17797 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.79.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Oct 13, 2025
Medium max 4.1

ELSA-2025-17742 2 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-22.0.1.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-22.1] - RHEL-112006 CVE-2025-53905 vim: Vim path traversial - RHEL-112010 CVE-2025-53906 vim: Vim path traversal [2:8.2.2637-22] - RHEL-2159 vim: Heap Use After Free in function i…

Oct 13, 2025
Medium max 7.8

ELSA-2025-17760 4 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.52.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Oct 13, 2025
Medium max 8.8

ELSA-2025-17776 3 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.39.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Oct 13, 2025
Medium max 4.1

ELSA-2025-17715 2 CVEs

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-21.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-21] - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim…

Oct 9, 2025
Medium max 6.5

ELSA-2025-17558 1 CVE

Moderate: iputils security update (Oracle Linux 9)

[20210202-11.0.1.3] - Upstream backport 'ping: Add SA_RESTART to sa_flags' [Orabug: 34573399] [20210202-11.3] - Bump release [20210202-11.2] - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112001) [20210202-11.1] - Fix CVE-2025-47268 iputils: Sig…

Oct 8, 2025
Medium max 9.8

ELSA-2025-17397 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.78.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Oct 7, 2025
Medium max 6.5

ELSA-2025-17415 3 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 8)

[3.6.16-8.4] - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 [3.6.16-8.3] - Backport the fix for CVE-2024-12243

Oct 7, 2025
Medium max 8.8

ELSA-2025-17377 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.51.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Oct 7, 2025
Medium max 7.8

ELSA-2025-17396 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.38.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Oct 7, 2025
Medium max 9.8

ELSA-2025-20650 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.4] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}

Oct 6, 2025
Medium max 7.5

ELSA-2025-16117 1 CVE

Moderate: python3 security update (Oracle Linux 7)

[3.6.8-21.0.5] - tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194]

Oct 2, 2025
Medium max 7.5

ELSA-2025-17163 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 8)

[1:3.04-4] - Resolves: RHEL-113630 - Fix CVE-2025-40928 - Package tests

Oct 1, 2025
Medium max 7.5

ELSA-2025-17162 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 9)

[1:4.04-1] - Update to 4.04 - Fix CVE-2025-40928

Oct 1, 2025
Medium max 9.8

ELSA-2025-16904 6 CVEs 1 exploited

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.37.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Oct 1, 2025
Medium max 7.5

ELSA-2025-17119 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 10)

[1:4.04-1] - Update to 4.04 - Resolves: RHEL-113624 - Fix CVE-2025-40928

Sep 30, 2025
Medium max 6.5

ELSA-2025-16861 51 CVEs

Moderate: mysql:8.0 security update (Oracle Linux 8)

mecab mecab-ipadic mysql [8.0.43-1] - Rebase to MySQL 8.0.43 [8.0.42-1] - Rebase to MySQL 8.0.42

Sep 29, 2025
Medium max 7.8

ELSA-2025-16919 4 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.77.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 29, 2025
Medium max 9.8

ELSA-2025-16880 5 CVEs 1 exploited

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.49.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Sep 29, 2025
Medium max 6.8

ELSA-2025-16823 1 CVE

Moderate: openssh security update (Oracle Linux 8)

[8.0p1-26.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-26] - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228

Sep 26, 2025
Medium max 9.8

ELSA-2025-16354 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.34.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Sep 24, 2025
Medium max 7.8

ELSA-2025-16398 4 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.46.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Sep 23, 2025
Medium max 5.9

ELSA-2025-16428 1 CVE

Moderate: libtpms security update (Oracle Linux 10)

[0.9.6-11] - Fix CVE-2025-49133 Resolves: RHEL-96247

Sep 23, 2025
Medium max 5.3

ELSA-2025-16441 1 CVE

Moderate: avahi security update (Oracle Linux 10)

[0.9~rc2-1.1] - Fix for CVE-2024-52615 (RHEL-67715)

Sep 23, 2025
Medium max 7.8

ELSA-2025-16372 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.76.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 22, 2025
Medium max 6.5

ELSA-2025-16086 51 CVEs

Moderate: mysql security update (Oracle Linux 9)

[8.0.43-1] - Rebase to MySQL 8.0.43 [8.0.42-1] - Rebase to MySQL 8.0.42

Sep 22, 2025