Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2025-7064 1 CVE

Moderate: iptraf-ng security update (Oracle Linux 9)

[1.2.2-1.el9] - New version 1.2.2 (Andrea Claudi) [RHEL-77280] - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]

May 16, 2025
Medium max 7.1

ELSA-2025-7067 1 CVE

Moderate: krb5 security update (Oracle Linux 9)

[1.21.1-6.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-6] - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-76759 [1.21.1-5] - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74374 - k…

May 16, 2025
Medium max 5.3

ELSA-2025-7076 1 CVE

Moderate: gnutls security update (Oracle Linux 9)

[3.8.3-6] - Bump nettle dependency to 3.10.1 (RHEL-52740) [3.8.3-5] - Backport the fix for CVE-2024-12243 (RHEL-78580)

May 16, 2025
Medium max 5.3

ELSA-2025-7077 1 CVE

Moderate: libtasn1 security update (Oracle Linux 9)

[4.16.0-9] - Backport the fix for CVE-2024-12133 (RHEL-78580)

May 16, 2025
Medium max 5.7

ELSA-2025-7085 1 CVE

Moderate: pcs security update (Oracle Linux 9)

[0.11.9-2] - Fixed restarting bundles Resolves: RHEL-79055 - Fixed deletion of misconfigured bundles Resolves: RHEL-79160 - Fixed filtering of resource clones in web console Resolves: RHEL-78653 - Updated bundled rubygem rack Resolves: RHEL-79500 [0.11.9-1] -…

May 16, 2025
Medium max 7.5

ELSA-2025-7094 1 CVE

Moderate: aardvark-dns security update (Oracle Linux 9)

[2:1.14.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 [2:1.13.1-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277

May 16, 2025
Medium max 6.3

ELSA-2025-7107 1 CVE

Moderate: python3.12 security update (Oracle Linux 9)

[3.12.9-1] - Update to 3.12.9 - Security fix for CVE-2025-0938 Resolves: RHEL-77261 [3.12.8-1] - Update to 3.12.8 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64886, RHEL-70320 [3.12.6-1] - Update to 3.12.6 Resolves: RHEL-57417

May 16, 2025
Medium max 6.3

ELSA-2025-7109 1 CVE

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.11-2] - Security fix for CVE-2025-0938 Resolves: RHEL-77262 [3.11.11-1] - Update to 3.11.11 Resolves: RHEL-64883 [3.11.10-1] - Update to 3.11.10 Resolves: RHEL-57412

May 16, 2025
Medium max 7.5

ELSA-2025-7138 1 CVE

Moderate: protobuf security update (Oracle Linux 9)

[3.14.0-16] - Rebuild [3.14.0-15] - Rebuild [3.14.0-14] - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572)

May 16, 2025
Medium max 6.3

ELSA-2025-7147 1 CVE

Moderate: rpm-ostree security update (Oracle Linux 9)

[2025.5-1] - Rebase to 2025.5 Resolves: #RHEL-78697 [2025.4-1] - Rebase to 2025.4 Resolves: #RHEL-68131 [2025.3-1] - Rebase to 2025.3 Resolves: #RHEL-68131 [2025.2-1] - Rebase to 2025.2 Resolves: #RHEL-68131 [2025.1-1] - Rebase to 2025.1 Resolves: #RHEL-68131

May 16, 2025
Medium max 6.3

ELSA-2025-7160 1 CVE

Moderate: bootc security update (Oracle Linux 9)

[1.1.6-3] - Backport https://github.com/containers/bootc/pull/1167 - Resolves: #RHEL-82293 [1.1.5-2] - Sync specfile from upstream - Resolves: #RHEL-80264 - Resolves: #RHEL-81981 [1.1.5-1] - Update to 1.1.5 - Resolves: #RHEL-77733 [1.1.4-2] - Cherry pick patc…

May 16, 2025
Medium max 7.8

ELSA-2025-7163 9 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 9)

[1.20.11-28] - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) …

May 16, 2025
Medium max 7.8

ELSA-2025-7165 9 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

[23.2.7-3] - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) [2…

May 16, 2025
Medium max 7.8

ELSA-2025-7178 2 CVEs

Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update (Oracle Linux 9)

gstreamer1 [1.22.12-3] - Rebuild - Resolves: RHEL-38511, RHEL-41157 [1.22.12-2] - Rebuild - Resolves: RHEL-38511, RHEL-41157 [1.22.12-1] - Update to 1.22.12 [1.22.9-1] - 1.22.9 [1.22.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild [1.…

May 16, 2025
Medium max 9.0

ELSA-2025-7201 1 CVE

Moderate: corosync security update (Oracle Linux 9)

[3.1.9-2] - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) [3.1.9-1] - Resolves: RHEL-65699 - New upstream release (RHEL-65699)

May 16, 2025
Medium max 6.3

ELSA-2025-7241 1 CVE

Moderate: rust-bootupd security update (Oracle Linux 9)

[0.2.27-3] - spec: remove ExcludeArch ix86 as this is c9s Resolves: #RHEL-77736, #RHEL-79091 [0.2.27-2] - Add git to the build requires Resolves: #RHEL-77736, #RHEL-79091 [0.2.27-1] - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: #RHEL-7773…

May 16, 2025
Medium max 6.9

ELSA-2025-7242 17 CVEs

Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

[1.22.12-4] - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-…

May 16, 2025
Medium max 6.9

ELSA-2025-7243 4 CVEs

Moderate: gstreamer1-plugins-base security update (Oracle Linux 9)

[1.22.12-4] - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163…

May 16, 2025
Medium max 9.8

ELSA-2025-7256 6 CVEs

Moderate: git-lfs security update (Oracle Linux 9)

[3.6.1-1] - Update to 3.6.1 - Resolves: RHEL-73940 [3.6.0-1] - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 [3.4.1-3] - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 [3.4.1-2] - Rebuild with new Golang…

May 16, 2025
Medium max 5.6

ELSA-2025-7309 2 CVEs

Moderate: openjpeg2 security update (Oracle Linux 9)

[2.4.0-8] - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521)

May 16, 2025
Medium max 6.3

ELSA-2025-7313 1 CVE

Moderate: keylime-agent-rust security update (Oracle Linux 9)

[0.2.2-2] - Update openssl crate to version 0.10.70 to fix CVE-2025-24898

May 16, 2025
Medium max 7.5

ELSA-2025-7315 9 CVEs

Moderate: php security update (Oracle Linux 9)

[8.0.30-2] - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode f…

May 16, 2025
Medium max 6.3

ELSA-2025-7317 1 CVE

Moderate: python3.12-cryptography security update (Oracle Linux 9)

[41.0.7-2] - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 [41.0.7-1] - Update to 41.0.7, fixes CVE-2023-49083 [41.0.5-2] - Rebuilt for timestamp .pyc invalidation mode [41.0.5-1] - Initial package - Fedora contributions by…

May 16, 2025
Medium max 4.3

ELSA-2025-7331 1 CVE

Moderate: nginx security update (Oracle Linux 9)

[1.20.1-22.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] - Update upstream references [Orabug: 36579090] [2:1.20.1-22] - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (…

May 16, 2025
Medium max 5.3

ELSA-2025-7350 1 CVE

Moderate: perl-Module-ScanDeps security update (Oracle Linux 9)

[1.30-6] - Resolves: RHEL-68282 - Fix CVE-2024-10224 - Package tests

May 16, 2025
Medium max 10.0

ELSA-2025-6966 355 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.12.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] [5.14.0-570.12.1_6.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Orac…

May 16, 2025
Medium

ELSA-2025-7540 1 CVE

Moderate: libjpeg-turbo security update (Oracle Linux 8)

[1.5.3-14] - updated previous fix (RHEL-87364) [1.5.3-13] - fix CVE-2020-13790: heap-based buffer over-read in get_rgb_row (RHEL-87364)

May 15, 2025
Medium max 7.4

ELSA-2025-3844 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.442.b06-1.0.3] - Fixed CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 [Orabug: 37840723]

May 12, 2025
Medium max 7.5

ELSA-2025-4791 1 CVE

Moderate: python39:3.9 security update (Oracle Linux 8)

mod_wsgi [4.7.1-7.1] - Resolves: RHEL-87514 - CVE-2022-2255 python39:3.9/mod_wsgi: Trusted Proxy Headers Removing Bypass numpy python39 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python…

May 12, 2025
Medium max 7.8

ELSA-2025-4787 1 CVE

Moderate: emacs security update (Oracle Linux 9)

[1:27.2-11.el9_5.2] - Fix arbitrary code execution via Lisp macro expansion (RHEL-69395)

May 12, 2025
Medium

ELSA-2025-4658 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-34] - fix CVE-2017-17095: heap-based buffer overflow in pal2rgb (RHEL-87363)

May 7, 2025
Medium max 7.5

ELSA-2025-4597 1 CVE

Moderate: mod_auth_openidc:2.3 security update (Oracle Linux 8)

cjose mod_auth_openidc [2.4.9.4-8] - Resolves: RHEL-87759 - Empty POST causes crash with OIDCPreservePost

May 7, 2025
Medium max 5.8

ELSA-2025-4487 2 CVEs

Moderate: ruby security update (Oracle Linux 9)

[3.0.7-165] - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 [3.0.7-164] - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix p…

May 7, 2025
Medium max 5.9

ELSA-2025-4488 7 CVEs

Moderate: ruby:3.1 security update (Oracle Linux 9)

ruby [3.1.7-146] - Upgrade to Ruby 3.1.7. Resolves: RHEL-55410 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-86077

May 6, 2025
Medium max 4.9

ELSA-2025-4491 1 CVE

Moderate: 389-ds-base security update (Oracle Linux 9)

[2.5.2-9] - Resolves: RHEL-83874 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.5.z] - Resolves: RHEL-80712 - Increased memory consumption caused by NDN cache [rhel-9.5.z] - Resolves: RHEL-87194 - Some replication sta…

May 6, 2025
Medium max 5.5

ELSA-2025-4492 2 CVEs

Moderate: qemu-kvm security update (Oracle Linux 9)

[9.0.0-10.el9_5.3] - kvm-target-i386-fix-feature-dependency-for-WAITPKG.patch [RHEL-84866] - Resolves: RHEL-84866 (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: waitpkg [rhel-9.5.z])

May 6, 2025
Medium max 6.5

ELSA-2025-4493 3 CVEs

Moderate: ruby:3.3 security update (Oracle Linux 9)

ruby [3.3.8-4] - Upgrade to Ruby 3.3.8. Resolves: RHEL-86933 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-87182 - Fix userinfo leakage in URI#jo…

May 6, 2025
Medium max 8.3

ELSA-2025-4461 1 CVE

Moderate: nodejs:20 security update (Oracle Linux 8)

nodejs [1:20.19.1-1] - Update to version 20.19.1 Resolves: RHEL-78763 [1:20.18.2-4] - Update c-ares to 1.34.5 to address CVE-2025-31498

May 5, 2025
Medium max 8.4

ELSA-2025-4362 7 CVEs

Moderate: ghostscript security update (Oracle Linux 8)

[9.27-16] - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-15067 CVE-2020-27792 ghostscript: heap …

Apr 30, 2025
Medium max 6.3

ELSA-2025-4263 8 CVEs

Moderate: php:8.1 security update (Oracle Linux 9)

php [8.1.32-1] - rebase to 8.1.32 php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip:

Apr 29, 2025