Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 6.5

ELSA-2025-20606 4 CVEs

Moderate: gnutls security update (Oracle Linux 9)

[3.8.3-6.2_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409] - Update FIPS module name for Oracle Linux [Orabug: 35925409] [3.8.3-6.2] - key_update: rework the rekeying logic (RHEL-107498) [3.8.3-6.1] - Fix CVE…

Sep 19, 2025
Medium max 6.5

ELSA-2025-16115 4 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 10)

[3.8.9-9.14] - key_update: rework the rekeying logic (RHEL-107498) - Fix CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990

Sep 19, 2025
Medium max 6.5

ELSA-2025-16116 4 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 9)

[3.8.3-6.2] - key_update: rework the rekeying logic (RHEL-107498) [3.8.3-6.1] - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395

Sep 18, 2025
Medium max 6.7

ELSA-2025-16154 5 CVEs

Moderate: grub2 security update (Oracle Linux 10)

[2.12-15.0.1] - efinet: Close and reopen card on failure [Orabug: 37808688] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only wi…

Sep 18, 2025
Medium max 7.8

ELSA-2025-15782 7 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.33.1.0.1.el10_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin…

Sep 18, 2025
Medium max 7.8

ELSA-2025-14987 1 CVE

Moderate: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.11.el7.OL7] - kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) - kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) - kernel: ext4: fix off-by-one error in do_split (CVE-2025…

Sep 17, 2025
Medium max 7.5

ELSA-2025-16046 53 CVEs

Moderate: mysql:8.4 security update (Oracle Linux 9)

mecab mecab-ipadic mysql [8.4.6-1] - Rebase to 8.4.6 [8.4.5-1] - Rebase to 8.4.5 rapidjson [1.1.0-19] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1.1.0-18] - Remove gtest dependency and turn off tests Resolves: #1977656 [1.1.0-17]…

Sep 17, 2025
Medium max 5.9

ELSA-2025-15874 1 CVE

Moderate: python-cryptography security update (Oracle Linux 9)

[36.0.1-5] - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97450

Sep 16, 2025
Medium max 7.8

ELSA-2025-15740 1 CVE

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.44.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Sep 15, 2025
Medium max 7.5

ELSA-2025-14683 1 CVE

Moderate: gdk-pixbuf2 security update (Oracle Linux 7)

[2.36.12-3.0.1] - jpeg: Be more careful with chunked icc data [Orabug: 38359772][CVE-2025-7345]

Sep 11, 2025
Medium max 6.3

ELSA-2025-15687 8 CVEs

Moderate: php:8.2 security update (Oracle Linux 8)

libzip php [8.2.28-1] - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

Sep 11, 2025
Medium max 7.5

ELSA-2025-15699 53 CVEs

Moderate: mysql-selinux and mysql8.4 security update (Oracle Linux 10)

mysql-selinux [1.0.14-1] - Update to version 1.0.14 - Resolves: rhbz#2380217 mysql8.4 [8.4.6-1] - Rebase to 8.4.6 [8.4.5-1] - Rebase to 8.4.5

Sep 11, 2025
Medium max 5.6

ELSA-2025-10991 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 8)

[4:20250512-1.0.1] - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized [Orabug: 35710077] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no…

Sep 10, 2025
Medium max 2.9

ELSA-2025-13789 1 CVE

Moderate: libxml2 security update (Oracle Linux 7)

[2.9.1-6.0.11.6] - Fix CVE-2025-32415: Fix heap buffer overflow [Orabug: 38310750]

Sep 8, 2025
Medium max 9.1

ELSA-2025-15123 4 CVEs

Moderate: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-65.5.0.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-65.5] - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient escaping of …

Sep 4, 2025
Medium max 9.8

ELSA-2025-15005 7 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.30.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Sep 4, 2025
Medium max 5.3

ELSA-2025-14999 1 CVE

Moderate: resource-agents security update (Oracle Linux 8)

[4.9.0-54.16] - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104761 [4.9.0-54.15] - ocf-shellfuncs/AWS agents: dont sleep after the final try in curl_retry() Resolves: RHEL-102731 [4.9.0-54.13] - Filesystem: add support for aznfs Resolves: RHEL-91257 […

Sep 3, 2025
Medium max 9.8

ELSA-2025-15008 4 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.72.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 3, 2025
Medium max 9.1

ELSA-2025-15095 3 CVEs

Moderate: httpd security update (Oracle Linux 10)

[2.4.63-1.0.1.2] - Replace index.html with Oracle's index page oracle_index.html.

Sep 3, 2025
Medium max 7.5

ELSA-2025-15007 1 CVE

Moderate: python3.12 security update (Oracle Linux 9)

[3.12.9-1.2] - Security fix for CVE-2025-8194 Resolves: RHEL-106370

Sep 2, 2025
Medium max 7.5

ELSA-2025-15010 1 CVE

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.11-2.2] - Security fix for CVE-2025-8194 Resolves: RHEL-106366

Sep 2, 2025
Medium max 9.1

ELSA-2025-15023 3 CVEs

Moderate: httpd security update (Oracle Linux 9)

[2.4.62-4.0.1.4] - Replace index.html with Oracle's index page oracle_index.html. [2.4.62-4.4] - Resolves: RHEL-99949 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade [2.4.62-4.1] - Resolves: RHEL-99972 - CVE-2024-47252 httpd: insufficient escapi…

Sep 2, 2025
Medium max 7.5

ELSA-2025-15019 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.21-2.2] - Security fix for CVE-2025-8194 Resolves: RHEL-106375

Sep 2, 2025
Medium max 7.5

ELSA-2025-14984 1 CVE

Moderate: python3.12 security update (Oracle Linux 10)

[3.12.9-2.0.1.3] - Remove upstream URL reference [3.12.9-2.3] - Security fix for CVE-2025-8194 Resolves: RHEL-106370 [3.12.9-2.2] - Enable PAC and BTI protections for aarch64 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CV…

Sep 2, 2025
Medium max 7.5

ELSA-2025-14983 1 CVE

Moderate: mod_http2 security update (Oracle Linux 9)

[2.0.26-4.1] - Resolves: RHEL-99956 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module

Sep 1, 2025
Medium max 7.7

ELSA-2025-14900 2 CVEs

Moderate: python39:3.9 security update (Oracle Linux 8)

mod_wsgi numpy python39 [3.9.20-2] - Security fix for CVE-2025-8194 Resolves: RHEL-106359 python3x-pip python3x-setuptools [50.3.2-7] - Security fix for CVE-2025-47273 Resolves: RHEL-104339 python3x-six python-cffi python-chardet python-cryptography python-id…

Aug 29, 2025
Medium max 7.5

ELSA-2025-14841 1 CVE

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.13-2.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-2] - Security fix for CVE-2025-8194 Resolves: RHEL-106338

Aug 28, 2025
Medium max 5.3

ELSA-2025-14750 1 CVE

Moderate: fence-agents security update (Oracle Linux 8)

[4.2.1-129.14] - fence_aws: add skip_os_shutdown parameter Resolves: RHEL-109814 [4.2.1-129.13] - bundled requests: fix CVE-2024-47081 Resolves: RHEL-104741 [4.2.1-129.12] - fence_ibm_vpc: add apikey file support Resolves: RHEL-107506

Aug 27, 2025
Medium max 5.9

ELSA-2025-14553 1 CVE

Moderate: python-cryptography security update (Oracle Linux 8)

[3.2.1-8] - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97452

Aug 26, 2025
Medium max 7.5

ELSA-2025-14560 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-71.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-71] - Security fix for CVE-2025-8194 Resolves: RHEL-106333

Aug 26, 2025
Medium max 7.5

ELSA-2025-14625 1 CVE

Moderate: mod_http2 security update (Oracle Linux 10)

[2.0.29-2.1] - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module

Aug 26, 2025
Medium max 7.8

ELSA-2025-10219 1 CVE

Moderate: glibc security update (Oracle Linux 7)

[2.17-326.0.11.3] - Back port fix for CVE-2025-4802 [Orabug: 38144086]

Aug 25, 2025
Medium max 7.5

ELSA-2025-14546 1 CVE

Moderate: python3.12 security update (Oracle Linux 8)

[3.12.11-2] - Security fix for CVE-2025-8194 Resolves: RHEL-106343

Aug 25, 2025
Medium

ELSA-2025-14438 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.71.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Aug 25, 2025
Medium

ELSA-2025-14075 1 CVE

Moderate: xterm security update (Oracle Linux 9)

[366-12] - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 [366-11] - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430

Aug 19, 2025
Medium max 6.2

ELSA-2025-20533 1 CVE

Moderate: python-zipp security update (Oracle Linux 9)

[3.20.1-2] - Make package buildable for epel>=9 [3.20.1-1] - Update to 3.20.1 (rhbz#2307990) [3.20.0-1] - Update to 3.20.0 (rhbz#2304028) [3.19.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild [3.19.2-2] - Rebuilt for Python 3.13 [3.19…

Aug 19, 2025
Medium max 6.2

ELSA-2025-38828 1 CVE

Moderate: python-zipp security update (Oracle Linux 9)

[3.20.1-2] - Make package buildable for epel>=9 [3.20.1-1] - Update to 3.20.1 (rhbz#2307990) [3.20.0-1] - Update to 3.20.0 (rhbz#2304028) [3.19.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild [3.19.2-2] - Rebuilt for Python 3.13 [3.19…

Aug 19, 2025
Medium max 8.8

ELSA-2025-13598 7 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.27.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Aug 15, 2025
Medium max 8.8

ELSA-2025-13602 2 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.33.2.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 13, 2025
Medium max 8.8

ELSA-2025-13589 6 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.69.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Aug 11, 2025