8,313 results · Feed
-
High max 7.5ELSA-2026-72286 1 CVE
Important: ruby security, bug fix, and enhancement update (Oracle Linux 9)
[3.0.7-168] - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 [3.0.7-167] - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injec…
-
High max 9.8ELSA-2026-72623 9 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.53.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 10.0ELSA-2026-73130 44 CVEs
Important: thunderbird security update (Oracle Linux 10)
[140.16.0-1.0.1] - Add Oracle prefs [140.16.0-1] - Update to 140.16.0 ESR [140.15.0-1] - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227
-
High max 5.9ELSA-2026-69129 5 CVEs
Important: openssh security update (Oracle Linux 10)
[9.9p1-27.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37824421] [9.9p1-27] - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245413 - CVE-2026-73281: Fix misinter…
-
High max 7.5ELSA-2026-67872 1 CVE
Important: corosync security update (Oracle Linux 10)
[3.1.10-1.2] - Resolves: RHEL-251541 - totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665)
-
High max 9.3ELSA-2026-72624 10 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)
[6.12.0-211.61.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 8.7ELSA-2026-68707 7 CVEs
Important: freerdp security update (Oracle Linux 7)
[2.1.1-5.0.13] - Backport fix for CVE-2026-55192 [Orabug: 40040632] - Backport fix for CVE-2026-55194 [Orabug: 40040632] [2.1.1-5.0.11] - Backport fix for CVE-2026-64624 [Orabug: 39964800] - Backport fix for CVE-2026-67299 [Orabug: 39964800] - Backport fix fo…
-
High max 9.8ELSA-2026-71329 5 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.168.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
High max 7.5ELSA-2026-72424 1 CVE
Important: resteasy security update (Oracle Linux 9)
[3.0.26-20] - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553
-
High max 7.5ELSA-2026-72663 2 CVEs
Important: expat security update (Oracle Linux 9)
[2.5.0-6.5] - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - Resolves: RHEL-260179 [2.5.0-6.4] - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-269002
-
Critical max 9.8ELSA-2026-72279 8 CVEs
Critical: ipa security, bug fix, and enhancement update (Oracle Linux 10)
[4.13.4-1.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.13.4-1] - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check…
-
High max 7.5ELSA-2026-72427 1 CVE
Important: ruby4.0 security update (Oracle Linux 10)
[4.0.6-37] - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252032
-
High max 7.5ELSA-2026-72785 1 CVE
Important: ruby security update (Oracle Linux 10)
[3.3.12-15] - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252031
-
High max 9.8ELSA-2026-71602 22 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)
[6.12.0-211.60.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 8.5ELSA-2026-71641 5 CVEs
Important: libxml2 security update (Oracle Linux 8)
[2.9.7-21.9] - Fix CVE-2026-86144 (RHEL-256306) - Fix CVE-2026-86140 (RHEL-256021) - Fix CVE-2026-74860 (RHEL-255956) - Fix CVE-2026-86143 (RHEL-256895) - Fix CVE-2026-86138 (RHEL-256950)
-
High max 9.1ELSA-2026-71608 1 CVE
Important: perl-DBI security update (Oracle Linux 8)
[1.641-3] - Force placeholder limit on :N and :pN placeholders (CVE-2026-73194) Resolves: RHEL-247320
-
High max 9.8ELSA-2026-71700 17 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.52.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 8.5ELSA-2026-71586 6 CVEs
Important: libxml2 security update (Oracle Linux 10)
[2.12.5-10.4] - Fix CVE-2026-86144 (RHEL-256302) - Fix CVE-2026-86140 (RHEL-256024) - Fix CVE-2026-74860 (RHEL-255957) - Fix CVE-2026-86142 (RHEL-256368) - Fix CVE-2026-86143 (RHEL-256896) - Fix CVE-2026-86138 (RHEL-256948)
-
High max 8.7ELSA-2026-71658 1 CVE
Important: python-cryptography security update (Oracle Linux 10)
[43.0.0-4] - Fix CVE-2026-69249: add X.509 signature validation budget
-
High max 7.1ELSA-2026-57417 1 CVE
Important: yelp security update (Oracle Linux 7)
[2:3.28.1-1.0.1] - Backport fix for CVE-2026-13601 [Orabug: 39908376]
-
High max 7.0ELSA-2026-69121 1 CVE
Important: abrt security update (Oracle Linux 7)
[2.1.11-60.0.7] - Fix symlink following in event handler scripts [CVE-2026-54230][Orabug: 40051150] [2.1.11-60.0.5] - Fix TOCTOU in SetElement/DeleteElement (CVE-2026-54228) [Orabug: 39811882] - Fix race condition in ChownProblemDir (CVE-2026-54229) [Orabug: …
-
High max 7.8ELSA-2026-48866 2 CVEs
Important: abrt security update (Oracle Linux 7)
[2.1.11-60.0.5] - Fix TOCTOU in SetElement/DeleteElement (CVE-2026-54228) [Orabug: 39811882] - Fix race condition in ChownProblemDir (CVE-2026-54229) [Orabug: 39811882]
-
High max 9.1ELSA-2026-69112 1 CVE
Important: perl-DBI:1.641 security update (Oracle Linux 8)
perl-DBI [1.641-10] - Fix number of tests Resolves: RHEL-247869 [1.641-9] - Fix placeholder limit on :N and :pN style placeholders (CVE-2026-73194) Resolves: RHEL-247869 [1.641-8] - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211151…
-
Critical max 9.1ELSA-2026-70754 3 CVEs
Critical: unbound security update (Oracle Linux 8)
[1.16.2-5.14.4] - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) [1.16.2-5.14.3] - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit t…
-
High max 7.5ELSA-2026-70641 6 CVEs
Important: skopeo security update (Oracle Linux 9)
[1:1.22.2-8] - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268
-
High max 7.5ELSA-2026-70640 8 CVEs
Important: buildah security update (Oracle Linux 9)
[1.43.3-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.3-2] - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 R…
-
Critical max 9.8ELSA-2026-70564 8 CVEs
Critical: ipa security, bug fix, and enhancement update (Oracle Linux 9)
[4.13.4-1.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.13.4-1] - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code …
-
High max 9.1ELSA-2026-71422 1 CVE
Important: perl-DBI security update (Oracle Linux 9)
[1.643-9.6] - Force placeholder limit on :# and :p# too (CVE-2026-73194) Related: RHEL-247327
-
High max 10.0ELSA-2026-70642 44 CVEs
Important: thunderbird security update (Oracle Linux 9)
[140.16.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.16.0] - Add OpenELA debranding [140.16.0-1] - Update to 140.16.0 ESR [140.15.0-1] - Update to 140.15.0 ESR
-
High max 9.8
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.50.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
Critical max 9.1ELSA-2026-71487 3 CVEs
Critical: unbound security update (Oracle Linux 9)
[1.24.2-3.8] - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) [1.24.2-3.7] - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit tests f…
-
High max 9.8ELSA-2026-71232 13 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.51.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 8.5ELSA-2026-71585 6 CVEs
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-14.5] - Fix CVE-2026-86144 (RHEL-256304) - Fix CVE-2026-86140 (RHEL-256027) - Fix CVE-2026-74860 (RHEL-256120) - Fix CVE-2026-86142 (RHEL-256365) - Fix CVE-2026-86143 (RHEL-256901) - Fix CVE-2026-86138 (RHEL-256953)
-
High max 7.5ELSA-2026-71543 4 CVEs
Important: cockpit-image-builder security update (Oracle Linux 10)
[94.4-1.0.1] - Switch to old frotend [Orabug: 38011073] [Orabug: 37856296] [Orabug: 37856375] - Replaced additional upstream url [Orabug: 37856187] - Replaced upstream urls in documentation with oracle links [Orabug: 37856187] [94.4-1] - New upstream release
-
High max 7.1ELSA-2026-69609 1 CVE
Important: openexr security update (Oracle Linux 10)
[3.1.10-8.4] - fix CVE-2026-68515
-
Critical max 9.1ELSA-2026-71419 3 CVEs
Critical: unbound security update (Oracle Linux 10)
[1.24.2-23] - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) [1.24.2-22] - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) [1.24.2-21] - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Add un…
-
High max 6.5ELSA-2026-53416 1 CVE
Important: host-metering security update (Oracle Linux 7)
[1.2.0-4.0.3] - Rebuild with latest go-toolset-1.19-golang to fix CVE-2026-27145 [Orabug: 39863765] [1.2.0-4.0.1] - Rebuild with new go-toolset-1.19-golang to fix CVE-2026-32283 [Orabug: 39352233]
-
Medium max 9.1ELSA-2026-69113 4 CVEs
Moderate: apr-util security update (Oracle Linux 8)
[1.6.1-9.1] - Resolves: RHEL-236630 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236267 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR …
-
Medium max 5.7ELSA-2026-69120 1 CVE
Moderate: unbound security update (Oracle Linux 8)
[1.16.2-5.14.2] - Backport additional fix from 1.26.0 (CVE-2026-50252) - Correct new warning in previous change (CVE-2026-44690) [1.16.2-5.14.1] - Fix CVE-2026-50252 (cache poisoning via source port prediction)
-
High max 9.8ELSA-2026-69095 1 CVE
Important: libtiff security update (Oracle Linux 8)
[4.0.9-39] - fix CVE-2026-52490: integer overflow in tiffcrop subdivision calculation (RHEL-248298)