Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 0.0

ELSA-2026-6622 1 CVE

Moderate: crun security update (Oracle Linux 10)

[1.27-1] - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the --user option [rhel-10.1.z] - Resolves: RHEL-161416

Apr 7, 2026
Medium max 4.3

ELSA-2026-6825 1 CVE

Moderate: rsync security update (Oracle Linux 10)

[3.4.1-2.2] - Resolves: RHEL-152885 - CVE-2025-10158 Out of bounds array access via negative index [3.4.1-2.1] - Resolves: RHEL-152878 - clearing DISPLAY breaks SSH_ASKPASS expectations

Apr 7, 2026
Medium max 8.8

ELSA-2026-6632 7 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.49.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Apr 7, 2026
Medium max 6.5

ELSA-2026-6391 6 CVEs

Moderate: mysql:8.4 security update (Oracle Linux 8)

mecab mecab-ipadic mysql [8.4.8-1] - Rebase to 8.4.8

Apr 2, 2026
Medium max 6.5

ELSA-2026-6435 7 CVEs

Moderate: mariadb:10.11 security update (Oracle Linux 8)

galera [26.4.23-1] - Rebase to 26.4.23 Judy mariadb [3:10.11.15-1] - Rebase to 10.11.15 - Resolves: RHBZ#2417697 [3:10.11.14-1] - Rebase to 10.11.14 - Resolves: RHBZ#2386961 [3:10.11.13-1] - Rebase to 10.11.13 [3:10.11.11-1] - Rebase to 10.11.11

Apr 2, 2026
Medium max 4.3

ELSA-2026-6436 1 CVE

Moderate: rsync security update (Oracle Linux 8)

[3.1.3-24] - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index

Apr 2, 2026
Medium max 4.3

ELSA-2026-6390 1 CVE

Moderate: rsync security update (Oracle Linux 9)

[3.2.5-3.2] - Resolves: RHEL-152888 - CVE-2025-10158 Out of bounds array access via negative index [3.2.5-3.1] - Resolves: RHEL-152879 - clearing DISPLAY breaks SSH_ASKPASS expectations

Apr 1, 2026
Medium

ELSA-2026-6266 1 CVE

Moderate: libxslt security update (Oracle Linux 9)

[1.1.34-14.0.1.el9_7.1] - Fix memory leak in exclPrefixPush [Orabug: 37871881] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-14.1] - Fix upgrade path for CVE-2023-40403 (RHEL-82213) [1.1.34-12.1] - Fix CVE-2023-40403 (…

Mar 31, 2026
Medium max 7.8

ELSA-2026-6037 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.115.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

Mar 30, 2026
Medium max 8.8

ELSA-2026-6153 8 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.45.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Mar 30, 2026
Medium max 7.8

ELSA-2026-6053 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.47.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Mar 30, 2026
Medium max 7.3

ELSA-2026-5913 1 CVE

Moderate: ncurses security update (Oracle Linux 10)

[6.4-15.20240127] - fix buffer overflow in infocmp -i (CVE-2025-69720)

Mar 26, 2026
Medium max 6.5

ELSA-2026-5580 6 CVEs

Moderate: mysql:8.0 security update (Oracle Linux 8)

mecab [0.996-2.12] - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: #2180411 [0.996-2] - Rebuild to fix the issue described in #2000986 - Resolves: #2000986 [0.996-1.9]…

Mar 25, 2026
Medium max 7.5

ELSA-2026-5578 1 CVE

Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

hivex [1.3.18-23] - Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976194 libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] libguestfs-winsupport [8.10-1] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE…

Mar 25, 2026
Medium max 6.5

ELSA-2026-5640 6 CVEs

Moderate: mysql:8.4 security update (Oracle Linux 9)

mecab [0.996-3.4] - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 [0.996-3.3] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [0.996-3.2] - Rebuilt…

Mar 25, 2026
Medium max 5.9

ELSA-2026-5599 1 CVE

Moderate: nginx security update (Oracle Linux 9)

[1.20.1-24.0.1.el9_7.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] - Update upstream references [Orabug: 36579090] [2:1.20.1-24.1] - Resolves: RHEL-146525 - nginx: NGINX: Data injection via m…

Mar 25, 2026
Medium max 7.2

ELSA-2026-5513 1 CVE

Moderate: 389-ds:1.4 security update (Oracle Linux 8)

[1.4.3.39-23] - Resolves: RHEL-137074 - CVE-2025-14905 389-ds:1.4/389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-8.10.z] - Resolves: RHEL-152098 - Scalability issue of replication online initialization wit…

Mar 24, 2026
Medium max 5.9

ELSA-2026-5581 1 CVE

Moderate: nginx:1.24 security update (Oracle Linux 8)

[1.24.0-2.0.1] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-2] - Resolves: RHEL-146517 - nginx:1.24/nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) [1:1.24.0-1] - Resolves: RHEL-14714 - add ngin…

Mar 24, 2026
Medium max 5.3

ELSA-2026-5585 2 CVEs

Moderate: gnutls security update (Oracle Linux 8)

[3.6.16-8.5] - Backport the fixes for CVE-2025-9820 and CVE-2025-14831

Mar 24, 2026
Medium max 6.8

ELSA-2026-5587 1 CVE

Moderate: opencryptoki security update (Oracle Linux 8)

[3.22.0-3.2] - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following

Mar 24, 2026
Medium max 6.3

ELSA-2026-5588 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-74.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-74] - Security fix for CVE-2025-0938 Resolves: RHEL-153235

Mar 24, 2026
Medium max 6.8

ELSA-2026-5603 1 CVE

Moderate: opencryptoki security update (Oracle Linux 9)

[3.25.0-4.2] - Resolves: RHEL-144820, Privilege Escalation or Data Exposure via Symlink Following

Mar 24, 2026
Medium max 6.6

ELSA-2026-5602 1 CVE

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-23.0.1.el9_7.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-23.1] - RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim

Mar 24, 2026
Medium max 7.5

ELSA-2026-4772 2 CVEs

Moderate: glibc security update (Oracle Linux 8)

[2.28-251.0.4.31] - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: February-24-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.4.27 - Fixed orabug 38834066 stpcpy MTE support Reviewed…

Mar 19, 2026
Medium max 6.5

ELSA-2026-4828 6 CVEs

Moderate: mysql security update (Oracle Linux 9)

[8.0.45-1] - Rebase to 8.0.45

Mar 18, 2026
Medium max 7.8

ELSA-2026-4760 1 CVE

Moderate: grub2 security update (Oracle Linux 9)

[2.06-114.0.1.el9_7.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946…

Mar 18, 2026
Medium max 4.8

ELSA-2026-4898 2 CVEs

Moderate: capstone security update (Oracle Linux 9)

[4.0.2-11] - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137758

Mar 18, 2026
Medium max 7.8

ELSA-2026-4648 1 CVE

Moderate: grub2 security update (Oracle Linux 8)

[2.02-170.0.1.el8_10.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 3769394…

Mar 17, 2026
Medium max 7.8

ELSA-2026-4759 2 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.41.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Mar 17, 2026
Medium max 6.0

ELSA-2026-4713 4 CVEs

Moderate: python3.12 security update (Oracle Linux 10)

[3.12.12-3.0.1.el10_1.1] - Remove upstream URL reference [3.12.12-3.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143054 RHEL-143105 RHEL-144852

Mar 17, 2026
Medium max 6.6

ELSA-2026-4715 1 CVE

Moderate: vim security update (Oracle Linux 10)

[9.1.083-6.0.1.el10_1.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-6.1] - RHEL-147922 CVE-2026-25749 vim: Heap Overflow in Vim

Mar 17, 2026
Medium max 6.8

ELSA-2026-4717 1 CVE

Moderate: opencryptoki security update (Oracle Linux 10)

[3.25.0-5.2] - Resolves: RHEL-144815, Privilege Escalation or Data Exposure via Symlink Following

Mar 17, 2026
Medium max 7.8

ELSA-2026-4649 1 CVE

Moderate: grub2 security update (Oracle Linux 10)

[2.12-29.0.1.el10_1.2] - efinet: Close and reopen card on failure [Orabug: 37808688] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub…

Mar 17, 2026
Medium max 5.9

ELSA-2026-4705 1 CVE

Moderate: nginx security update (Oracle Linux 10)

[2:1.26.3-2.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] [2:1.26.3-2] - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections

Mar 17, 2026
Medium max 7.8

ELSA-2026-4723 1 CVE

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.45.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Mar 17, 2026
Medium max 5.5

ELSA-2026-50151 1 CVE

Moderate: dtrace security update (Oracle Linux 8)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement: The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 5.5

ELSA-2026-50152 1 CVE

Moderate: dtrace security update (Oracle Linux 8)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 5.5

ELSA-2026-50153 1 CVE

Moderate: dtrace security update (Oracle Linux 9)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement: The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 6.0

ELSA-2026-4463 4 CVEs

Moderate: python3.12 security update (Oracle Linux 8)

[3.12.12-3] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143065 Resolves: RHEL-143122 Resolves: RHEL-144862

Mar 12, 2026
Medium max 6.0

ELSA-2026-4473 4 CVEs

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.13-5.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-5] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143064 Resolves: RHEL-143121 Resolves: RHEL-144861

Mar 12, 2026