Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 4.7
    ELSA-2026-18153 1 CVE

    Moderate: systemd security update (Oracle Linux 10)

    [257-23.0.1.el10_2.2] - Fix detection of Oracle Virtualization or BM envs [Orabug: 37531877] - Avoid udevadm warnings when using udev valid configs [Orabug: 37503197] - allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469] - set 'RemoveIPC=no' in l…

  • Medium max 7.5
    ELSA-2026-27740 1 CVE

    Moderate: golang-github-openprinting-ipp-usb security update (Oracle Linux 10)

    [0.9.27-7.2] - rebuilt with golang-1.26.4-1.el10_2 to fix CVE-2026-33811, CVE-2026-27145 [0.9.27-7.1] - rebuilt with golang-1.26.3-4.el10_2 to fix CVE-2026-32281 [0.9.27-7] - rebuilt to fix CVE-2026-32280, CVE-2026-32282, CVE-2026-32283, CVE-2026-33810

  • Medium max 7.5
    ELSA-2026-18139 1 CVE

    Moderate: glibc security update (Oracle Linux 10)

    [2.39-126.0.1] - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-124.0.1 - Forward port Oracle changes to 2.39-124. - Revie…

  • Medium max 9.8
    ELSA-2026-18134 28 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.5
    ELSA-2026-20594 1 CVE

    Moderate: glibc security update (Oracle Linux 10)

    [2.39-126.0.1] - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-124.0.1 - Forward port Oracle changes to 2.39-124. - Revie…

  • Medium max 7.5
    ELSA-2026-22528 1 CVE

    Moderate: mod_http2 security update (Oracle Linux 10)

    [2.0.29-4.2] - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 [2.0.29-4.1] - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.29-4] - Resolves: RHEL-16626…

  • Medium max 5.9
    ELSA-2026-19143 2 CVEs

    Moderate: libsoup3 security update (Oracle Linux 10)

    [3.6.5-11] - Add patches for CVE-2026-4271 and CVE-2026-5119 [3.6.5-10] - Add patch for CVE-2026-1761 [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing […

  • Medium max 6.5
    ELSA-2026-19148 2 CVEs

    Moderate: glib2 security update (Oracle Linux 10)

    [2.80.4-13] - Fix CVE-2025-14087 and CVE-2025-14512

  • Medium max 4.0
    ELSA-2026-22529 1 CVE

    Moderate: libexif security update (Oracle Linux 10)

    [0.6.24-9.1] - Fix integer underflow in MakerNote decoding (CVE-2026-40386) Resolves: RHEL-170240

  • Medium max 6.4
    ELSA-2026-25999 1 CVE

    Moderate: yggdrasil-worker-package-manager security update (Oracle Linux 10)

    [0.2.3-7] - Bump release for rebuild [0.2.3-6] - Bump release for rebuild

  • Medium max 6.8
    ELSA-2026-28231 1 CVE

    Moderate: opencryptoki security update (Oracle Linux 10)

    [3.26.0-3.1] - Resolves: RHEL-171556, Fix possible out-of-bounds access in BER decode functions [3.26.0-3] - Resolves: RHEL-169565, Fix syslog message printing about different CPs

  • Medium max 7.6
    ELSA-2026-28233 2 CVEs

    Moderate: libpng security update (Oracle Linux 10)

    [2:1.6.40-11.1] - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)

  • Medium max 7.8
    ELSA-2026-28236 3 CVEs

    Moderate: libsolv security update (Oracle Linux 10)

    [0.7.33-5] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178270) [0.7.33-4] - Cope with integer overflow in data size arithmetics in repo_add_solv() (CVE-2026-9149) (RHEL-178267) [0.7.33-3] - Fix a buffer overflow when copying S…

  • Medium max 6.3
    ELSA-2026-28582 1 CVE

    Moderate: keylime security update (Oracle Linux 10)

    [7.14.1-6] - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795]

  • Medium max 5.5
    ELSA-2026-28584 1 CVE

    Moderate: libxslt security update (Oracle Linux 10)

    [1.1.39-8.1] - Fix CVE-2025-10911 (RHEL-171996)

  • Medium max 7.3
    ELSA-2026-30845 1 CVE

    Moderate: mod_md security update (Oracle Linux 10)

    [1:2.4.26-5.1] - Resolves: RHEL-175647 - mod_md: OCSP response limits (CVE-2026-29168) [1:2.4.26-5] - Resolves: RHEL-134484 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) [1:2.4.26-3] - Bump release for October 2024 ma…

  • Medium max 9.1
    ELSA-2026-22141 4 CVEs

    Moderate: go-fdo-client and go-fdo-server security update (Oracle Linux 10)

    go-fdo-client [1.0.0-4] - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 [1.0.0-3] - Rebuild to fix CVE-2026-32283 go-fdo-server [1.0.1-2] - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 [1.0.1-1] - Update to 1.0.1 upstream release - Resolves: RHEL-16547…

  • Medium max 4.4
    ELSA-2026-33124 1 CVE

    Moderate: coreutils security update (Oracle Linux 10)

    [9.5-8.0.1] - clean up empty file if cp is failed [Orabug 15973168] [9.5-8] - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180649)

  • Medium max 7.8
    ELSA-2026-33731 1 CVE

    Moderate: rrdtool security update (Oracle Linux 10)

    [1.8.0-21] - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264

  • Medium max 7.3
    ELSA-2026-34355 2 CVEs

    Moderate: mod_http2 security, bug fix, and enhancement update (Oracle Linux 10)

    [2.0.29-4.2] - Resolves: RHEL-188008 - address CVE-2026-43951, CVE-2026-48913 [2.0.29-4.1] - Resolves: RHEL-182410 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.29-4] - Resolves: RHEL-16626…

  • Medium max 9.8
    ELSA-2026-33092 1 CVE

    Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 10)

    [2.39-126.0.1] - Forward port Oracle changes to 2.39-126. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: Jul-15-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-124.0.1 - Forward port Oracle changes to 2.39-124. - Revie…

  • Medium max 7.5
    ELSA-2026-36211 1 CVE

    Moderate: freeipmi security update (Oracle Linux 10)

    [1.6.18-1] - Update to 1.6.18

  • Medium max 7.1
    ELSA-2026-36673 1 CVE

    Moderate: gstreamer1-plugins-ugly-free security update (Oracle Linux 10)

    [1.26.7-2.1] - Fix CVE-2026-53703: multiple security issues in rmdemux Resolves: RHEL-184439

  • Medium max 6.2
    ELSA-2026-36782 1 CVE

    Moderate: aardvark-dns security update (Oracle Linux 10)

    [2:1.17.1-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170143

  • Medium max 7.4
    ELSA-2026-39296 1 CVE

    Moderate: libinput security update (Oracle Linux 10)

    [1.30.1-2] - CVE-2026-50292: sanitize phys before printing it in libinput-device-group Resolves: RHEL-182371

  • Medium max 6.1
    ELSA-2026-39302 1 CVE

    Moderate: cups security update (Oracle Linux 10)

    [1:2.4.10-18] - RHEL-177945 CVE-2026-34980 cups: control character injection in option values

  • Medium max 7.5
    ELSA-2026-39297 2 CVEs

    Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 10)

    [20251114-5.0.1.el10_2.2] - Replace upstream references [Orabug:36569119] [20251114-5.el10_2.2] - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch [RHEL-182421] - edk2-Bumped-to-OpenSSL-3.5.5-3.patch [RHEL-165699] - Resolves: RHEL-182421 (edk2/…

  • Medium max 6.5
    ELSA-2026-20693 19 CVEs

    Moderate: mysql8.4 security update (Oracle Linux 10)

    [8.4.9-1] - Rebase to 8.4.9 [8.4.8-2] - Revert to soft static allocation of MariaDB and MySQL sysusers.d files

  • Medium max 9.8
    ELSA-2026-33126 1 CVE

    Moderate: glibc security update (Oracle Linux 8)

    [2.28-251.0.4.38] - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: May-26-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by: David Faus…

  • Medium max 7.8
    ELSA-2026-39315 1 CVE

    Moderate: libsolv security update (Oracle Linux 9)

    [0.7.24-6] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178982)

  • Medium max 6.1
    ELSA-2026-39316 1 CVE

    Moderate: cups security update (Oracle Linux 9)

    [1:2.3.3op2-39] - RHEL-177957 CVE-2026-34980 cups: control character injection in option values

  • Medium max 7.5
    ELSA-2026-38503 1 CVE

    Moderate: openssl security update (Oracle Linux 8)

    [1:1.1.1k-17] - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783

  • Medium max 4.0
    ELSA-2026-26567 2 CVEs

    Moderate: libexif security update (Oracle Linux 7)

    [0.6.22-2.0.1] - Backport fix for CVE-2026-40386 [Orabug: 39574457] - Backport fix for CVE-2026-40385 [Orabug: 39574457]

  • Medium max 7.8
    ELSA-2026-36730 1 CVE

    Moderate: libsolv security update (Oracle Linux 8)

    [0.7.20-7] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178970)

  • Medium max 8.2
    ELSA-2026-36732 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 8)

    [1.24.2-10] - Security fix for CVE-2026-44431 Resolves: RHEL-184858

  • Medium max 6.1
    ELSA-2026-36733 1 CVE

    Moderate: cups security update (Oracle Linux 8)

    [1:2.2.6-68] - RHEL-177947 CVE-2026-34980 cups: control character injection in option values

  • Medium max 9.8
    ELSA-2026-36721 1 CVE

    Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)

    [20220126gitbb1bba3d77-13.el8.10] - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch [RHEL-151949] - Resolves: RHEL-151949 ([FJ8.10 Bug] How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests) [20220126gitbb1bba3d77-13.el8.9] …

  • Medium max 7.1
    ELSA-2026-36674 2 CVEs

    Moderate: gstreamer1-plugins-ugly-free security update (Oracle Linux 9)

    [1.22.12-6.1] - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464

  • Medium max 5.3
    ELSA-2026-18143 1 CVE

    Moderate: p11-kit security update (Oracle Linux 10)

    [0.26.2-1] - Rebase to 0.26.2 [0.26.1-1] - Rebase to 0.26.1 [0.25.10-1] - Rebase to 0.25.10 [0.25.9-1] - Rebase to 0.25.9

  • Medium max 6.5
    ELSA-2026-18160 5 CVEs

    Moderate: libssh security update (Oracle Linux 10)

    [0.12.0-2] - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 [0.12.0-1] - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825, RHEL-130042 - Add a Requires for crypto-policies instead of a Recommends Resolves: RHEL-139045