Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.8

ELSA-2025-10837 1 CVE

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.26.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Jul 15, 2025
Medium max 9.8

ELSA-2025-11140 2 CVEs

Moderate: glib2 security update (Oracle Linux 9)

[2.68.4-16.2] - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845

Jul 15, 2025
Medium max 5.6

ELSA-2025-11066 1 CVE

Moderate: glibc security update (Oracle Linux 10)

[2.39-43.0.1] - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: March-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-37.0.1 - Forward port Oracle changes to 2.39-37. Reviewed-by: Jose E. Ma…

Jul 15, 2025
Medium max 7.7

ELSA-2025-11043 1 CVE

Moderate: python3.11-setuptools security update (Oracle Linux 8)

[65.5.1-4] - Security fix for CVE-2025-47273 Resolves: RHEL-101126

Jul 14, 2025
Medium

ELSA-2025-11035 1 CVE

Moderate: lz4 security update (Oracle Linux 8)

[1.8.3-5] - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 [1.8.3-4] - Fix CVE-2019-17543 - Resolves: RHEL-87362

Jul 14, 2025
Medium max 7.7

ELSA-2025-11036 1 CVE

Moderate: python-setuptools security update (Oracle Linux 8)

[39.2.0-9] - Security fix for CVE-2025-47273 Resolves: RHEL-96802

Jul 14, 2025
Medium max 9.8

ELSA-2025-11042 1 CVE

Moderate: socat security update (Oracle Linux 8)

[1.7.4.1-2] - add fix for CVE-2024-54661 Resolves: RHEL-70095 - switch to autopatch, remove unused patches

Jul 14, 2025
Medium max 6.8

ELSA-2025-10677 1 CVE

Moderate: golang security update (Oracle Linux 10)

[1.24.4-1] - Update to Go 1.24.4 (fips-1) [1.24.3-3] - Update to Go 1.24.3 (fips-3) [1.24.3-2] - Update to Go 1.24.3 (fips-2) [1.24.3-1] - Update to Go 1.24.3

Jul 10, 2025
Medium max 7.4

ELSA-2025-10742 1 CVE

Moderate: gnome-remote-desktop security update (Oracle Linux 8)

[0.1.8-4] - Backport connection throttling Resolves: RHEL-92791

Jul 9, 2025
Medium max 7.7

ELSA-2025-10618 2 CVEs

Moderate: jq security update (Oracle Linux 8)

[1.6-11] - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) - Resolves: RHEL-92987 [1.6-10] - Fix CVE-2024-23337 jq has signed integer overflow in jv.c:jvp_array_write - Resolves: RHEL-92968

Jul 8, 2025
Medium max 7.7

ELSA-2025-10585 2 CVEs

Moderate: jq security update (Oracle Linux 9)

[1.6-17.el9.2] - Fix CVE-2025-48060 - Resolves: RHEL-92990 [1.6-17.el9.1] - Fix CVE-2024-23337 - Resolves: RHEL-92972 [1.6-17] - Fix SAST findings in jq 1.6 - Resolves: RHEL-28653 [1.6-16] - Make jq 1.6 fast - Resolves: RHEL-13431

Jul 8, 2025
Medium max 7.4

ELSA-2025-10631 1 CVE

Moderate: gnome-remote-desktop security update (Oracle Linux 9)

[40.0-11] - Backport connection throttling Resolves: RHEL-92795

Jul 8, 2025
Medium max 6.8

ELSA-2025-10676 1 CVE

Moderate: golang security update (Oracle Linux 9)

[1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-101074 [1.23.10-1] - Update to Go 1.23.10 - Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874 - Resolves: RHEL-96000

Jul 8, 2025
Medium max 7.4

ELSA-2025-10635 1 CVE

Moderate: gnome-remote-desktop security update (Oracle Linux 10)

[47.3-2] - Backport connection throttling Resolves: RHEL-92787

Jul 8, 2025
Medium max 5.6

ELSA-2025-20406 3 CVEs

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.344.4.3] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129026] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129026] {CVE-2024-36350} {CVE-2024-36357} - KVM: SVM: Adver…

Jul 7, 2025
Medium max 9.8

ELSA-2025-10353 1 CVE

Moderate: socat security update (Oracle Linux 9)

[1.7.4.1-6.1] - add fix for CVE-2024-54661 Resolves: RHEL-70096 - switch to autopatch, remove unused patches

Jul 7, 2025
Medium max 7.7

ELSA-2025-10407 1 CVE

Moderate: python-setuptools security update (Oracle Linux 9)

[53.0.0-13.1] - Security fix for CVE-2025-47273 Resolves: RHEL-96807

Jul 7, 2025
Medium max 5.6

ELSA-2025-20404 2 CVEs

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-309.180.4.2] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129825] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129825] {CVE-2024-36350} {CVE-2024-36357} - Add normal count…

Jul 7, 2025
Medium max 6.6

ELSA-2025-7459 1 CVE

Moderate: buildah security update (Oracle Linux 10)

[2:1.39.4-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-2] - Rebuild on new golang to fix CVE-2025-22871 [2:1.39.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Related: RHEL-80…

Jul 7, 2025
Medium max 5.6

ELSA-2025-20405 2 CVEs

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-100.28.2.2.el10uek] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129827] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129827] {CVE-2024-36350} {CVE-2024-36357} - Add norma…

Jul 7, 2025
Medium max 6.5

ELSA-2025-10217 3 CVEs

Moderate: ruby:3.3 security update (Oracle Linux 8)

ruby [3.3.8-4] - Upgrade to Ruby 3.3.8. Resolves: RHEL-68632 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) - Fix userinfo leakage in URI#join, URI#merge and URI…

Jul 3, 2025
Medium max 7.8

ELSA-2025-7956 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Jul 3, 2025
Medium max 7.8

ELSA-2025-8374 3 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Jul 3, 2025
Medium max 7.8

ELSA-2025-9348 3 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Jul 3, 2025
Medium max 7.5

ELSA-2025-9896 3 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Jul 3, 2025
Medium max 9.0

ELSA-2025-7478 1 CVE

Moderate: corosync security update (Oracle Linux 10)

[3.1.9-1.1] - Resolves: RHEL-84612 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)

Jul 2, 2025
Medium max 6.6

ELSA-2025-7467 1 CVE

Moderate: skopeo security update (Oracle Linux 10)

[1:1.18.1-2] - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 [1:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/co…

Jul 1, 2025
Medium max 9.1

ELSA-2025-9623 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 10)

[134.1-2.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …

Jul 1, 2025
Medium max 5.6

ELSA-2025-9877 1 CVE

Moderate: glibc security update (Oracle Linux 9)

[2.34-168.0.1.20] - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history:

Jun 30, 2025
Medium

ELSA-2025-9880 1 CVE

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.24.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Jun 30, 2025
Medium max 9.1

ELSA-2025-8666 1 CVE

Moderate: grafana security update (Oracle Linux 10)

[10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

Jun 30, 2025
Medium max 8.4

ELSA-2025-9486 1 CVE

Moderate: qt6-qtbase security update (Oracle Linux 10)

[6.8.1-9] - qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)

Jun 30, 2025
Medium max 8.4

ELSA-2025-7499 5 CVEs

Moderate: ghostscript security update (Oracle Linux 10)

[10.02.1-16] - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow [10.02.1-15] - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: B…

Jun 30, 2025
Medium max 8.3

ELSA-2025-7502 1 CVE

Moderate: nodejs22 security update (Oracle Linux 10)

[1:22.16.0-1] - Update to version 22.16.0 [1:22.15.0-3] - Make grep Source stricter in nodejs-tarball [1:22.15.0-2] - Add unit-test during build for nodejs22 [1:22.15.0-1] - Update to version 22.15.0 [1:22.13.1-6] - Update c-ares with fix for CVE-2025-31498 […

Jun 30, 2025
Medium max 9.1

ELSA-2025-9149 1 CVE

Moderate: skopeo security update (Oracle Linux 10)

[1:1.18.1-2] - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 [1:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/co…

Jun 30, 2025
Medium max 7.7

ELSA-2025-9940 1 CVE

Moderate: python-setuptools security update (Oracle Linux 10)

[69.0.3-12] - Security fix for CVE-2025-47273 [69.0.3-11] - Change the test source location

Jun 30, 2025
Medium max 9.1

ELSA-2025-9844 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 8)

[101-4.0.1] - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA…

Jun 27, 2025
Medium max 5.3

ELSA-2025-7457 1 CVE

Moderate: exiv2 security update (Oracle Linux 10)

[0.28.3-3.2] - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106

Jun 27, 2025
Medium max 6.1

ELSA-2025-7466 3 CVEs

Moderate: delve and golang security update (Oracle Linux 10)

delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-1] - Update Delve to 1.24.1 [1.22.1-6] - plans/ci.fmf: Update repo golang [1.23.7-1] - Update to 1.23.7 - golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can b…

Jun 27, 2025
Medium max 7.5

ELSA-2025-7482 1 CVE

Moderate: git security update (Oracle Linux 10)

[2.47.1-2] - add the option to sanitize sideband channel messages - Resolves: RHEL-74175

Jun 27, 2025