Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.4

ELSA-2025-7508 3 CVEs

Moderate: java-21-openjdk security update (Oracle Linux 10)

[1:21.0.7.0.6-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.7.0.6-1] - Update to jdk-21.0.7+6 (GA) - Update release notes to 21.0.7+6 - Rebase FIPS support against 21.0.7+5 - Require tzdata 2025a due to upstream inclusion of JDK-8347965 - ** T…

Jun 27, 2025
Medium max 5.3

ELSA-2025-8047 1 CVE

Moderate: unbound security update (Oracle Linux 10)

[1.20.0-10] - Prevent unbounded name compression (CVE-2024-8508)

Jun 27, 2025
Medium max 10.0

ELSA-2025-7494 1 CVE 1 exploited

Moderate: tomcat9 security update (Oracle Linux 10)

[1:9.0.87-5] - Resolves: RHEL-82927 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)

Jun 27, 2025
Medium max 6.5

ELSA-2025-8131 3 CVEs

Moderate: ruby security update (Oracle Linux 10)

[3.3.8-10] - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86116 - Fix userinfo leakage in URI#join, …

Jun 27, 2025
Medium max 9.1

ELSA-2025-8477 1 CVE

Moderate: golang security update (Oracle Linux 10)

[1.23.9-1] - Update to 1.23.9

Jun 27, 2025
Medium max 7.8

ELSA-2025-9121 1 CVE

Moderate: wireshark security update (Oracle Linux 10)

[1:4.4.2-3.0.1] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-3] - Resolves: RHEL-80274 - Increasing NVR due to a build error [1:4.4.2-2] - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark - Resolves: RHEL-931…

Jun 27, 2025
Medium max 9.1

ELSA-2025-9317 1 CVE

Moderate: delve security update (Oracle Linux 10)

[1.24.1-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-2] - Rebuild without changes

Jun 27, 2025
Medium max 10.0

ELSA-2025-7497 3 CVEs 1 exploited

Moderate: tomcat security update (Oracle Linux 10)

[1:10.1.36-1] - Rebase tomcat to 10.1.36 - Resolves: RHEL-82925 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-87272 tomcat: DoS in examples web application (CVE-2024-54677)…

Jun 27, 2025
Medium max 9.8

ELSA-2025-7593 1 CVE

Moderate: ghostscript security update (Oracle Linux 10)

[10.02.1-16] - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow [10.02.1-15] - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: B…

Jun 27, 2025
Medium max 9.1

ELSA-2025-8915 1 CVE

Moderate: grafana-pcp security update (Oracle Linux 10)

[5.2.2-3] - Resolves RHEL-89218: CVE-2025-22871

Jun 27, 2025
Medium max 9.1

ELSA-2025-9146 1 CVE

Moderate: podman security update (Oracle Linux 10)

[6:5.4.0-10.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-10] - rebuild to resolve CVE-202…

Jun 27, 2025
Medium max 9.1

ELSA-2025-9148 1 CVE

Moderate: buildah security update (Oracle Linux 10)

[2:1.39.4-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-2] - Rebuild on new golang to fix CVE-2025-22871 [2:1.39.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Related: RHEL-80…

Jun 27, 2025
Medium max 9.1

ELSA-2025-9151 1 CVE

Moderate: gvisor-tap-vsock security update (Oracle Linux 10)

[6:0.8.5-2] - Rebuild on new golang to fix CVE-2025-22871 [6:0.8.5-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 [6:0.8.4-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8…

Jun 27, 2025
Medium max 6.5

ELSA-2025-9307 1 CVE

Moderate: freerdp security update (Oracle Linux 10)

[2:3.10.3-3] - Initialize function pointers after resource allocation - Fixes CVE-2025-4478 - Resolves: RHEL-91583

Jun 27, 2025
Medium max 5.4

ELSA-2025-9466 1 CVE

Moderate: mod_proxy_cluster security update (Oracle Linux 10)

[1.3.22-1.el10_0.2] - Resolves: RHEL-82256 - Update deprecated misspeled EnableMCPMReceive directive [1.3.22-1.el10_0.1] - Resolves: RHEL-80796 - Rebase mod_proxy_cluster to upstream 1.3.22.Final release [1.3.22-1] - Resolves: RHEL-80480 Rebase mod_proxy_clus…

Jun 27, 2025
Medium max 9.1

ELSA-2025-9156 1 CVE

Moderate: golang-github-openprinting-ipp-usb security update (Oracle Linux 10)

[0.9.27-3] - rebuild to fix CVE-2025-22871

Jun 27, 2025
Medium max 4.0

ELSA-2025-7510 1 CVE

Moderate: libarchive security update (Oracle Linux 10)

[3.7.7-2] - Fix for CVE-2024-57970 - Resolves: RHEL-79877

Jun 27, 2025
Medium max 7.5

ELSA-2025-7512 1 CVE

Moderate: expat security update (Oracle Linux 10)

[2.7.1-1] - Fix behavior change caused by fix for CVE-2024-8176 [2.7.0-1] - Fix CVE-2024-8176

Jun 27, 2025
Medium max 5.9

ELSA-2025-9418 1 CVE

Moderate: krb5 security update (Oracle Linux 10)

[1.21.3-8.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.3-8] - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88705 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88047 - Add PKINIT paChecksum2 from…

Jun 27, 2025
Medium max 4.0

ELSA-2025-9420 1 CVE

Moderate: libarchive security update (Oracle Linux 10)

[3.7.7-3] - Resolves: CVE-2025-25724

Jun 27, 2025
Medium max 6.5

ELSA-2025-9421 1 CVE

Moderate: iputils security update (Oracle Linux 10)

[20240905-2.1] - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94582)

Jun 27, 2025
Medium max 9.1

ELSA-2025-9845 1 CVE

Moderate: weldr-client security update (Oracle Linux 8)

[35.12-3] - Update test repository snapshot urls rhel 8.10 and remove cs8 repos The snapshots for cs8 have been removed from the service - Rebuild for CVE-2025-22871 Resolves: RHEL-89289

Jun 26, 2025
Medium max 9.1

ELSA-2025-9063 1 CVE

Moderate: git-lfs security update (Oracle Linux 10)

[3.6.1-2] - Rebuild with new Golang

Jun 26, 2025
Medium max 8.8

ELSA-2025-9580 4 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.58.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Jun 25, 2025
Medium max 9.1

ELSA-2025-9634 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 9)

[132.2-2.0.1] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Lin…

Jun 25, 2025
Medium max 9.1

ELSA-2025-9635 1 CVE

Moderate: weldr-client security update (Oracle Linux 9)

[35.12-4] - Bump release for y-stream AND z-stream building using centpkg build --rhel-target=zstream Related: RHEL-89344 [35.12-3] - tests: OSTree does not support the qcow2 image type - Add test repositories for RHEL 9.6 and 9.7 - Rebuild for CVE-2025-22871…

Jun 25, 2025
Medium max 5.9

ELSA-2025-9430 1 CVE

Moderate: krb5 security update (Oracle Linux 9)

[1.21.1-8.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-9] - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88704 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88048 - Add PKINIT paChecksum2 from…

Jun 24, 2025
Medium max 6.5

ELSA-2025-9432 1 CVE

Moderate: iputils security update (Oracle Linux 9)

[20210202-11.0.1.1] - Upstream backport 'ping: Add SA_RESTART to sa_flags' [Orabug: 34573399] [20210202-11.1] - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94335) [20210202-11] - ping: Fix ping6 bindin…

Jun 24, 2025
Medium max 5.4

ELSA-2025-9434 1 CVE

Moderate: mod_proxy_cluster security update (Oracle Linux 9)

[1.3.22-1.el9_6.1] - Resolves: RHEL-81070 Rebase mod_proxy_cluster to upstream 1.3.22.Final release [1.3.20-1] - Rebase mod_cluster to upstream 1.3.20.Final tag - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release

Jun 24, 2025
Medium max 7.8

ELSA-2025-9448 1 CVE

Moderate: emacs security update (Oracle Linux 9)

[1:27.2-14.el9_6.2] - Restore definition of variable 'enable-dir-local-variables' (RHEL-92653) [1:27.2-14.el9_6.1] - Bump Z-stream release [1:27.2-14] - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) [1:27.2-13] - Bump release [1:27.2-12] …

Jun 24, 2025
Medium max 4.0

ELSA-2025-9431 1 CVE

Moderate: libarchive security update (Oracle Linux 9)

[3.5.3-5] - Resolves: CVE-2025-25724

Jun 24, 2025
Medium max 8.4

ELSA-2025-9462 1 CVE

Moderate: qt5-qtbase security update (Oracle Linux 9)

[5.15.9-11] - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96233

Jun 24, 2025
Medium max 7.8

ELSA-2025-9302 5 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.23.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Jun 23, 2025
Medium max 9.1

ELSA-2025-9142 1 CVE

Moderate: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns buildah [2:1.33.12-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/cf49e7c) - fixes 'CVE-2025-22871 container-tools:rhel8/buildah: Request smuggling due to…

Jun 17, 2025
Medium max 9.1

ELSA-2025-9144 1 CVE

Moderate: podman security update (Oracle Linux 9)

[5.4.0-10.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [5:5.4.0-10] - rebuild to fix CVE-2025-2287…

Jun 17, 2025
Medium max 9.1

ELSA-2025-9147 1 CVE

Moderate: buildah security update (Oracle Linux 9)

[1.39.4-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-2] - rebuild to fix CVE-2025-22871 buildah: Request smuggling due to acceptance of invalid chunked data in net/http - Resolves: RHEL-89294

Jun 17, 2025
Medium max 9.1

ELSA-2025-9060 1 CVE

Moderate: git-lfs security update (Oracle Linux 8)

[3.4.1-5] - Rebuild with new Golang - Resolves: RHEL-89264

Jun 16, 2025
Medium max 9.1

ELSA-2025-9106 1 CVE

Moderate: git-lfs security update (Oracle Linux 9)

[3.6.1-2] - Rebuild with new Golang - Resolves: RHEL-89304

Jun 16, 2025
Medium max 9.1

ELSA-2025-9143 1 CVE

Moderate: containernetworking-plugins security update (Oracle Linux 9)

[1:1.6.2-2] - rebuild to fix CVE-2025-22871 containernetworking-plugins: Request smuggling due to acceptance of invalid chunked data in net/http - Resolves: RHEL-90031

Jun 16, 2025
Medium max 9.1

ELSA-2025-9145 1 CVE

Moderate: skopeo security update (Oracle Linux 9)

[2:1.18.1-2] - rebuild to fix CVE-2025-22871 skopeo: Request smuggling due to acceptance of invalid chunked data in net/http - Resolves: RHEL-89329

Jun 16, 2025