2,729 results · Clear filters · Feed
-
Medium max 6.5ELSA-2026-18162 1 CVE
Moderate: iputils security update (Oracle Linux 10)
[20240905-5] - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-115832)
-
Medium max 7.7ELSA-2026-18344 1 CVE
Moderate: mingw-glib2 security update (Oracle Linux 10)
[2.87.0-1] - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()
-
Medium max 4.4ELSA-2026-18421 1 CVE
Moderate: luksmeta security update (Oracle Linux 10)
[10-1] - Align to upstream release 10
-
Medium max 7.5ELSA-2026-18556 2 CVEs
Moderate: unbound security update (Oracle Linux 10)
[1.24.2-7] - Recreate configure unconditionally [1.24.2-6] - Add byacc into BuildRequires [1.24.2-5] - Change the default of tls-use-system-policy-versions at build-time [1.24.2-4] - Switch TLS configuration to follow TLS sockets by crypto-policy again [1.24.…
-
Medium max 9.1ELSA-2026-19013 3 CVEs
Moderate: delve security update (Oracle Linux 10)
[1.26.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.26.1-1] - Update Delve to version 1.26.1
-
Medium max 0.0ELSA-2026-19020 1 CVE
Moderate: crun security update (Oracle Linux 10)
[1.27-2] - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090
-
Medium max 8.6ELSA-2026-19021 1 CVE
Moderate: galera and mariadb11.8 security update (Oracle Linux 10)
galera [26.4.25-1] - Rebased to 26.4.25 [26.4.24-1] - Rebase to 26.4.24 [26.4.23-1] - Rebase to 26.4.23 [26.4.22-1] - Rebase to 26.4.22 [26.4.21-2] - Add sysusers.d config file to allow rpm to create users/groups automatically mariadb11.8 [3:11.8.6-2] - Added…
-
Medium max 8.7ELSA-2026-19034 2 CVEs
Moderate: python-tornado security update (Oracle Linux 10)
[6.5.5-1] - Update to 6.5.5 Resolves: RHEL-160935
-
Medium max 8.2ELSA-2026-19043 2 CVEs
Moderate: corosync security update (Oracle Linux 10)
[3.1.10-1.1] - Resolves: RHEL-163802 - Resolves: RHEL-163823 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) [3.1.10-1] - Resolves: RHEL-122945 - New upstream re…
-
Medium max 7.5ELSA-2026-19053 1 CVE
Moderate: freeipmi security update (Oracle Linux 10)
[1.6.17-1] - Update to 1.6.17
-
Medium max 7.5ELSA-2026-19061 2 CVEs
Moderate: glibc security update (Oracle Linux 10)
[2.39-121.0.1] - Forward port Oracle changes to 2.39-121. - Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: April-2-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-113.0.1 - Reverted to version 2.39-113. - Reviewed-by: David Fau…
-
Medium max 7.5ELSA-2026-19066 1 CVE
Moderate: openssl security update (Oracle Linux 10)
[3.5.5-2.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.5-2] - Fix CVE-2026-31790 Resolves: RHEL-161574 [1:3.5.5-1] - Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RH…
-
Medium max 5.5ELSA-2026-19068 1 CVE
Moderate: systemd security update (Oracle Linux 10)
[257-23.0.1.el10_2.1] - Fix detection of Oracle Virtualization or BM envs [Orabug: 37531877] - Avoid udevadm warnings when using udev valid configs [Orabug: 37503197] - allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469] - set 'RemoveIPC=no' in l…
-
Medium max 7.5ELSA-2026-36307 1 CVE
Moderate: freeipmi security update (Oracle Linux 8)
[1.6.18-1] - Update to 1.6.18, fixes CVE-2026-50031
-
Medium max 7.5ELSA-2026-36210 1 CVE
Moderate: freeipmi security update (Oracle Linux 9)
[1.6.18-1] - Update to 1.6.18, fixes CVE-2026-50031
-
Medium max 6.2ELSA-2026-36318 1 CVE
Moderate: aardvark-dns security update (Oracle Linux 9)
[2:1.17.1-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170152
-
Medium max 9.1ELSA-2026-50379 15 CVEs
Moderate: openssl security update (Oracle Linux 9)
[3.5.5-4.0.1_fips] - Replace upstream references in fips man pages [Orabug: 35824276] - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276] - Update FIPS module name [Orabug: 35824…
-
Medium max 5.6ELSA-2026-19566 1 CVE
Moderate: glib2 security update (Oracle Linux 7)
[2.56.1-9.0.5] - Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716] [2.56.1-9.0.3] - Fixes CVE-2025-13601 g_escape_uri_string() overflow [Orabug: 38909821] [2.56.1-9.0.1] - Fix overflow of GDBusConnection serial [Orabug: 38666376]
-
Medium max 6.5ELSA-2026-20546 8 CVEs
Moderate: freerdp security update (Oracle Linux 7)
[2.1.1-5.0.9] - Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 [Orabug: 39440279] [2.1.1-5.0.7] - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 C…
-
Medium max 7.8ELSA-2026-34155 1 CVE
Moderate: rrdtool security update (Oracle Linux 8)
[1.7.0-17] - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173259
-
Medium max 7.8ELSA-2026-34156 1 CVE
Moderate: rrdtool security update (Oracle Linux 9)
[1.7.2-22] - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257
-
Medium max 5.5ELSA-2026-18748 1 CVE
Moderate: libvirt security update (Oracle Linux 9)
[11.10.0-12.3.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [11.10.0-12.3.el9_8] - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags ha…
-
Medium max 5.4ELSA-2026-28290 1 CVE
Moderate: libreoffice security update (Oracle Linux 9)
[1:7.1.8.1-15.0.1.el9_8.1] - Added the --with-hamcrest option to configure. - Replace colors with Oracle colors [Orabug: 32120093] [1:7.1.8.1-15.el9_8.1] - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL…
-
Medium max 9.8ELSA-2026-33226 1 CVE
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 9)
[2.34-272.0.1] - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: June-5-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-270.0.1 - Fo…
-
Medium max 6.2ELSA-2026-22420 1 CVE
Moderate: libxml2 security update (Oracle Linux 7)
[2.9.1-6.0.13.6] - Backport fix for CVE-2025-9714 [Orabug: 39476695] [2.9.1-6.0.11.6] - Fix CVE-2025-32415: Fix heap buffer overflow [Orabug: 38310750] [2.9.1-6.0.9.6] - Fix CVE-2025-7425: heap-use-after-free in xmlFreeID [Orabug: 38290330] [2.9.1-6.0.7.6] - …
-
Medium max 5.9ELSA-2026-24722 1 CVE
Moderate: libsoup security update (Oracle Linux 7)
[2.62.2-2.0.13] - Backport fix for CVE-2026-5119 [Orabug: 39527088] [2.62.2-2.0.11] - Fixes CVE-2026-0719 CVE-2026-1761 [Orabug: 38958074] [2.62.2-2.0.9] - Fix CVE-2025-14523 [Orabug: 38873507] [2.62.2-2.0.7] - Backport patch for CVE-2025-4945 and CVE-2025-11…
-
Medium max 7.3ELSA-2026-30844 1 CVE
Moderate: mod_md security update (Oracle Linux 9)
[1:2.4.26-2.1] - Resolves: RHEL-175644 - mod_md: OCSP response limits (CVE-2026-29168) [1:2.4.26-2] - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
-
Medium max 7.5ELSA-2026-22312 1 CVE
Moderate: openssl security update (Oracle Linux 9)
[3.5.5-4.0.1] - Replace upstream references [Orabug: 34340177] [3.5.5.openela.0.1] - Add OpenELA specific changes [1:3.5.5-4] - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, C…
-
Medium max 7.8ELSA-2026-18587 14 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-687.17.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
Medium max 5.9ELSA-2026-18957 1 CVE
Moderate: python3.11 security update (Oracle Linux 9)
[3.11.13-10.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-10] - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519
-
Medium max 5.9ELSA-2026-18958 1 CVE
Moderate: python3.12 security update (Oracle Linux 9)
[3.12.13-3.0.1] - Remove upstream URL reference [3.12.13-3] - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474
-
Medium max 5.4ELSA-2026-28922 1 CVE
Moderate: libreoffice security update (Oracle Linux 8)
[1:6.4.7.2-20.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-20] - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.1…
-
Medium max 5.3ELSA-2026-29981 1 CVE
Moderate: golang security, bug fix, and enhancement update (Oracle Linux 9)
[1.26.4-1.0.1] - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var [1.26.4-1] - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349
-
Medium max 7.5ELSA-2026-22551 1 CVE
Moderate: mod_http2 security update (Oracle Linux 9)
[2.0.26-6.1] - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) [2.0.26-6] - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)
-
Medium max 6.5ELSA-2026-23332 22 CVEs
Moderate: mysql security update (Oracle Linux 9)
[8.0.46-1] - Rebase to 8.0.46 [8.0.45-2] - Revert to soft static allocation of MariaDB and MySQL sysusers.d files
-
Medium max 7.5ELSA-2026-29898 1 CVE
Moderate: libpng security update (Oracle Linux 8)
[2:1.6.37-11] - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161344)
-
Medium max 4.4ELSA-2026-28911 1 CVE
Moderate: coreutils security update (Oracle Linux 9)
[8.32-41.0.1] - clean up empty file if cp is failed [Orabug 15973168] [9.5-8] - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification (RHEL-180331)
-
Medium max 6.6ELSA-2026-28553 1 CVE
Moderate: vim security update (Oracle Linux 8)
[8.0.1763-24.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-24] - CVE-2026-41411 vim: Command injection via backticks in tag files
-
Medium max 1.7ELSA-2026-50324 1 CVE
Moderate: pyOpenSSL security update (Oracle Linux 9)
[19.0.0-1.0.3] - Backport CVE-2026-27448 [Orabug: 39565553]
-
Medium max 6.5ELSA-2026-25052 19 CVEs
Moderate: mysql:8.4 security update (Oracle Linux 9)
mecab [0.996-3.4] - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 [0.996-3.3] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [0.996-3.2] - Rebuilt…