Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 7.7
    ELSA-2025-13578 1 CVE

    Moderate: python3.11-setuptools security update (Oracle Linux 9)

    [65.5.1-4] - Security fix for CVE-2025-47273 Resolves: RHEL-101113

  • Medium max 5.3
    ELSA-2025-13604 1 CVE

    Moderate: python-requests security update (Oracle Linux 10)

    [2.32.4-1] - Update to 2.32.4 - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs Resolves: RHEL-105460

  • Medium max 5.6
    ELSA-2025-13429 2 CVEs

    Moderate: libxml2 security update (Oracle Linux 10)

    [2.12.5-9] - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861)

  • Medium max 5.3
    ELSA-2025-13234 1 CVE

    Moderate: python-requests security update (Oracle Linux 8)

    [2.20.0-6] - Security fix for CVE-2024-47081 Resolves: RHEL-102420

  • Medium max 7.5
    ELSA-2025-13315 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 8)

    [2.36.12-7] - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102346

  • Medium max 5.6
    ELSA-2025-13428 2 CVEs

    Moderate: libxml2 security update (Oracle Linux 9)

    [2.9.13-12] - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873)

  • Medium max 5.9
    ELSA-2025-13240 1 CVE

    Moderate: glibc security update (Oracle Linux 10)

    [2.39-46.0.1] - Forward port Oracle changes. Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: July-15-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-43.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.march…

  • Medium max 2.9
    ELSA-2025-13203 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7.21.3] - Fix CVE-2025-32415 (RHEL-100177) [2.9.7.21.2] - Fix CVE-2025-7425 (RHEL-102797) [2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424)

  • Medium max 7.7
    ELSA-2025-11984 1 CVE

    Moderate: python-setuptools security update (Oracle Linux 7)

    [0.9.8-7.0.3] - Fix CVE-2025-47273 [Orabug: 38247921]

  • Medium max 5.9
    ELSA-2025-12980 1 CVE

    Moderate: glibc security update (Oracle Linux 8)

    [2.28-251.0.3.25] - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: June-9-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.22 - Forward port of Oracle patches Reviewed-by: David Faus…

  • Medium max 7.5
    ELSA-2025-12838 1 CVE

    Moderate: mod_security security update (Oracle Linux 9)

    [2.9.6-2.1] - Resolves: RHEL-100102 - CVE-2025-48866 mod_security: ModSecurity Denial of Service Vulnerability

  • Medium max 7.7
    ELSA-2025-12834 1 CVE

    Moderate: python3.12-setuptools security update (Oracle Linux 9)

    [68.2.2-5] - Security fix for CVE-2025-47273 Resolves: RHEL-101118

  • Medium max 5.3
    ELSA-2025-12842 2 CVEs

    Moderate: qt5-qt3d security update (Oracle Linux 9)

    [5.15.9-2] - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-105000 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105005

  • Medium max 7.5
    ELSA-2025-12841 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 9)

    [2.42.6-6] - Fix an oversight - Related: RHEL-102354 [2.42.6-5] - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354

  • Medium max 5.9
    ELSA-2025-12748 1 CVE

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-168.0.1.23] - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history:

  • Medium max 7.5
    ELSA-2025-12862 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 10)

    [2.42.12-4] - jpeg: Be more careful with chunked icc data

  • Medium max 7.7
    ELSA-2025-12882 2 CVEs

    Moderate: jq security update (Oracle Linux 10)

    [1.7.1-8.el10_0.1] - jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337) - jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)

  • Medium max 7.7
    ELSA-2025-11607 1 CVE

    Moderate: python3-setuptools security update (Oracle Linux 7)

    [39.2.0-10.0.5] - Back port fix for CVE-2025-47273 [Orabug: 38229296]

  • Medium max 5.9
    ELSA-2025-12527 1 CVE

    Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

    hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] libguestfs-winsupport [8.10-1] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236373 libiscsi libnbd [1.6.0-6.el8] - Fix CVE-2024-7…

  • Medium max 5.3
    ELSA-2025-12519 1 CVE

    Moderate: python-requests security update (Oracle Linux 9)

    [2.25.1-10] - Security fix for CVE-2024-47081 Resolves: RHEL-105461

  • Medium max 8.4
    ELSA-2025-11855 5 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.24.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • Medium max 8.4
    ELSA-2025-11861 10 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.30.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.0
    ELSA-2025-12083 1 CVE

    Moderate: icu security update (Oracle Linux 9)

    [67.1-10] - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664

  • Medium max 5.9
    ELSA-2025-12100 1 CVE

    Moderate: libtpms security update (Oracle Linux 9)

    [0.9.1-5.20211126git1ff6fe1f43] - Fix CVE-2025-49133 Resolves: RHEL-96258

  • Medium max 5.9
    ELSA-2025-12056 1 CVE

    Moderate: perl security update (Oracle Linux 10)

    [4:5.40.2-512.2] - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir

  • Medium max 5.9
    ELSA-2025-11805 1 CVE

    Moderate: perl security update (Oracle Linux 8)

    [4:5.26.3-423] - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x

  • Medium max 7.8
    ELSA-2025-11850 3 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.64.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 5.9
    ELSA-2025-11804 1 CVE

    Moderate: perl security update (Oracle Linux 9)

    [4:5.32.1-481.1] - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir

  • Medium max 7.0
    ELSA-2025-11888 1 CVE

    Moderate: icu security update (Oracle Linux 10)

    [74.2-5] - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96667 [74.2-4] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [74.2-3] - Resolves: RHEL-59365 Fix coverity warnings [74.2-2] - Bump release for June 2024 mass rebu…

  • Medium max 7.5
    ELSA-2025-10548 1 CVE

    Moderate: apache-commons-vfs security update (Oracle Linux 7)

    [2.0-11.0.1] - Simplify UriParser [Orabug: 38161936][CVE-2025-27553]

  • Medium max 9.8
    ELSA-2025-11455 2 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    - [4.18.0-553.63.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…

  • Medium max 7.7
    ELSA-2025-11463 1 CVE

    Moderate: fence-agents security update (Oracle Linux 9)

    [4.10.0-86.7] - bundled setuptools: fix CVE-2025-47273 Resolves: RHEL-95903 [4.10.0-86.6] - fence_kubevirt: use hard poweroff Resolves: RHEL-96183

  • Medium max 5.3
    ELSA-2025-11402 1 CVE

    Moderate: avahi security update (Oracle Linux 9)

    [0.8-22.1] - Fix CVE-2024-52615 (RHEL-94847)

  • Medium max 9.8
    ELSA-2025-11327 3 CVEs

    Moderate: glib2 security update (Oracle Linux 8)

    [2.56.4-166] - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848

  • Medium max 9.1
    ELSA-2025-11298 8 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    - [4.18.0-553.62.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…

  • Medium max 9.8
    ELSA-2025-10855 2 CVEs

    Moderate: glib2 security update (Oracle Linux 10)

    [2.80.4-4.el10_0.6] - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845

  • Medium max 6.6
    ELSA-2025-11047 1 CVE

    Moderate: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.6] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.6] - Fixed CVE-2024-49761 by updating rubygem rexml Resolves: RHEL-98708

  • Medium max 7.8
    ELSA-2025-11030 1 CVE

    Moderate: emacs security update (Oracle Linux 8)

    [1:26.1-15] - Restore definition of variable 'enable-dir-local-variables' (RHEL-92830) [1:26.1-14] - Fix arbitrary code execution via Lisp macro expansion (RHEL-69394)

  • Medium max 7.7
    ELSA-2025-11044 1 CVE

    Moderate: python3.12-setuptools security update (Oracle Linux 8)

    [68.2.2-5] - Security fix for CVE-2025-47273 Resolves: RHEL-101131

  • Medium max 6.8
    ELSA-2025-10672 1 CVE

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-85264 go-toolset [1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-85264