Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 9.1
    ELSA-2025-9150 1 CVE

    Moderate: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.8.5-2] - rebuild for CVE-2025-22871 - Resolves: RHEL-90038

  • Medium max 9.1
    ELSA-2025-8918 1 CVE

    Moderate: grafana-pcp security update (Oracle Linux 8)

    [5.1.1-10] - Resolves RHEL-89274: CVE-2025-22871

  • Medium max 5.6
    ELSA-2025-8958 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-20] - Fix CVE-2025-32414 (RHEL-88198)

  • Medium max 9.1
    ELSA-2025-8916 1 CVE

    Moderate: grafana-pcp security update (Oracle Linux 9)

    [5.1.1-11] - Resolves RHEL-89314: CVE-2025-22871

  • Medium max 7.1
    ELSA-2025-8743 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.56.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 7.8
    ELSA-2025-8686 1 CVE

    Moderate: glibc security update (Oracle Linux 8)

    [2.28-251.0.3.22] - Forward port of Oracle patches Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: April-14-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by: Elena Zannoni <…

  • Medium max 9.1
    ELSA-2025-8667 1 CVE

    Moderate: grafana security update (Oracle Linux 8)

    [9.2.10-25] - Resolves RHEL-89269: CVE-2025-22871

  • Medium
    ELSA-2025-8676 1 CVE

    Moderate: libxslt security update (Oracle Linux 8)

    [1.1.32-6.2.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-6.2] - Fix CVE-2023-40403 (aka 2022-4909) (RHEL-89374)

  • Medium max 9.1
    ELSA-2025-8682 1 CVE

    Moderate: grafana security update (Oracle Linux 9)

    [10.2.6-14] - Resolves RHEL-89309: CVE-2025-22871

  • Medium max 7.8
    ELSA-2025-8655 1 CVE

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-168.0.1.19] - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust <david.faust@oracle.com> Oracle history:

  • Medium max 9.1
    ELSA-2025-8478 1 CVE

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 go-toolset [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636

  • Medium max 9.1
    ELSA-2025-8476 1 CVE

    Moderate: golang security update (Oracle Linux 9)

    [1.23.9-1] - Update to Go 1.23.9 - Remove runtime-usleep-s390x.patch, already merged - Resolves: RHEL-93212

  • Medium max 9.8
    ELSA-2025-8421 1 CVE

    Moderate: ghostscript security update (Oracle Linux 8)

    [9.27-17] - RHEL-88965 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

  • Medium max 5.9
    ELSA-2025-8411 1 CVE

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-32.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-32] - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 fr…

  • Medium max 7.5
    ELSA-2025-8414 1 CVE

    Moderate: git security update (Oracle Linux 8)

    [2.43.5-3] - add the option to sanitize sideband channel messages - Resolves: RHEL-74177

  • Medium
    ELSA-2025-8432 1 CVE

    Moderate: perl-CPAN security update (Oracle Linux 8)

    [2.18-402] - Resolves: RHEL-9605 - Add 2022 PAUSE public key. - Change default value for urllist to https://www.cpan.org - Use gpg --verify --output ... to disentangle data and signature

  • Medium max 7.8
    ELSA-2025-8333 2 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.19.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium
    ELSA-2025-8246 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.54.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 5.3
    ELSA-2025-8197 1 CVE

    Moderate: unbound security update (Oracle Linux 9)

    [1.16.2-18] - Prevent unbounded name compression (CVE-2024-8508)

  • Medium max 5.5
    ELSA-2025-8142 1 CVE

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.18.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.5
    ELSA-2025-7444 1 CVE

    Moderate: expat security update (Oracle Linux 9)

    [2.5.0-5] - Fix CVE-2024-8176 - Resolves: RHEL-57489 [2.5.0-4] - Fix CVE-2024-50602 - Resolves: RHEL-65066

  • Medium max 7.4
    ELSA-2025-7672 1 CVE

    Moderate: xdg-utils security update (Oracle Linux 9)

    [1.1.3-13] - Update documentation for CVE-2022-4055 (RHEL-87487) [1.1.3-12] - Fix CVE-2022-4055 (RHEL-87487)

  • Medium max 5.3
    ELSA-2025-7437 1 CVE

    Moderate: avahi security update (Oracle Linux 9)

    [0.8-22] - Fix CVE-2024-52616 (RHEL-67722)

  • Medium max 9.8
    ELSA-2025-7586 1 CVE

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-19] - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow [9.54.0-18] - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Exe…

  • Medium max 6.3
    ELSA-2025-7432 8 CVEs

    Moderate: php:8.2 security update (Oracle Linux 9)

    php [8.2.28-1] - rebase to 8.2.28 [8.2.25-1] - rebase to 8.2.25 RHEL-65837 [8.2.13-1] - rebase to 8.2.13 RHEL-14699 - add %__phpize and %__phpconfig macros - move httpd/nginx wants directives to config files in /etc - php-fpm.conf: move include directive afte…

  • Medium max 6.3
    ELSA-2025-7431 5 CVEs

    Moderate: php security update (Oracle Linux 9)

    [8.0.30-3] - Fix libxml streams use wrong content-type header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 by…

  • Medium max 4.9
    ELSA-2025-7395 1 CVE

    Moderate: 389-ds-base security update (Oracle Linux 9)

    [2.6.1-8] - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.6] [2.6.1-7] - Bump version to 2.6.1-7 [2.6.1-6] - Resolves: RHEL-86065 - Backport lib389 fixes required for WebUI [rhel-9.6.z] - Resolve…

  • Medium max 7.5
    ELSA-2025-7409 1 CVE

    Moderate: git security update (Oracle Linux 9)

    [2.47.1-2] - add the option to sanitize sideband channel messages - Resolves: RHEL-84513

  • Medium max 8.3
    ELSA-2025-7426 1 CVE

    Moderate: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.19.1-1] - Update to version 20.19.1 Resolves: RHEL-78764 [1:20.18.2-3] - Update c-ares to 1.34.5 to address CVE-2025-31498 nodejs-nodemon nodejs-packaging

  • Medium max 8.4
    ELSA-2025-7422 6 CVEs

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-18] - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Dir…

  • Medium max 7.1
    ELSA-2025-7402 3 CVEs

    Moderate: nginx security update (Oracle Linux 9)

    [1.20.1-22.0.1.2] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] - Update upstream references [Orabug: 36579090] [2:1.20.1-22.2] - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_…

  • Medium max 6.6
    ELSA-2025-7389 1 CVE

    Moderate: buildah security update (Oracle Linux 9)

    [1.39.4-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Resolves: RHEL-85114 [2:1.39.3-1] - update to https://github.com/containers/b…

  • Medium max 6.6
    ELSA-2025-7397 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/commit/bfd0850) - fixes 'CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.6.z]' - Resol…

  • Medium max 6.7
    ELSA-2025-7539 2 CVEs

    Moderate: ruby:2.5 security update (Oracle Linux 8)

    ruby [2.5.9-114] - Fix integer overflow in search_in_range function in regexec.c (CVE-2019-19012). Resolves: RHEL-87505 rubygem-abrt rubygem-bson rubygem-bundler [1.16.1-5] - Fix unexpected code execution in Gemfiles (CVE-2021-43809) Resolves: RHEL-87017 ruby…

  • Medium max 6.3
    ELSA-2025-6977 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.21-2] - Security fix for CVE-2025-0938 Resolves: RHEL-77263

  • Medium max 6.7
    ELSA-2025-6990 8 CVEs

    Moderate: grub2 security update (Oracle Linux 9)

    [2.06-104.0.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946] - net/…

  • Medium max 6.8
    ELSA-2025-6993 1 CVE

    Moderate: openssh security update (Oracle Linux 9)

    [8.7p1-45.0.2] - Upstream references found with /usr/bin/ssh [Orabug: 37814929] [8.7p1-45.0.1] - upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064] - Update upstream references [Orabug: 36564626] [8.7p1-45] - Fix missing e…

  • Medium max 6.5
    ELSA-2025-7043 3 CVEs

    Moderate: microcode_ctl security update (Oracle Linux 9)

    [4:20250211-1.0.1] - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized [Orabug: 35710094] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no…

  • Medium max 5.6
    ELSA-2025-7049 1 CVE

    Moderate: python-requests security update (Oracle Linux 9)

    [2.25.1-9] - Security fix for CVE-2024-35195 Resolves: RHEL-37609

  • Medium max 6.5
    ELSA-2025-7050 3 CVEs

    Moderate: rsync security update (Oracle Linux 9)

    [3.2.5-3] - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 [3.2.5-2] - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to …