Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,313 results · Feed

  • Medium max 6.5
    ELSA-2026-54210 1 CVE

    Moderate: dhcpcd security update (Oracle Linux 10)

    [10.0.6-11] - Fix CVE-2026-14258

  • High max 9.8
    ELSA-2026-54343 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.47.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2026-54576 1 CVE

    Important: dracut security update (Oracle Linux 10)

    [107-9.0.1] - Suppress stderr for btrfs subvolume check [Orabug: 39059254] - fips: add logic for /boot subvolume on BTRFS [Orabug: 36028061] - Skip unneeded FIPS logic on UEK with special FIPS [Orabug: 38138800] [Orabug: 38709306] - Include correct modprobe i…

  • High max 7.6
    ELSA-2026-49603 1 CVE

    Important: gstreamer1-plugins-good security update (Oracle Linux 7)

    [1.10.4-2.0.5] - Fix CVE-2026-53705 [Orabug: 39822536] [1.10.4-2.0.3] - Security update for CVE-2026-3083 CVE-2026-3085 [Orabug: 39199326] [1.10.4-2.0.1] - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and - CVE-2024-47607 [Orabug: 37407070]

  • Medium max 7.5
    ELSA-2026-50808 1 CVE

    Moderate: libpng security update (Oracle Linux 7)

    [2:1.5.13-8.0.5] - Fix CVE-2026-33416 [Orabug: 39836909] [2:1.5.13-8.0.3] - Fix CVE-2026-25646 [Orabug: 39093556] [2:1.5.13-8.0.1] - Fix CVE-2025-64720 [Orabug: 38824465]

  • High max 8.5
    ELSA-2026-51063 3 CVEs

    Important: libXfont2 security update (Oracle Linux 7)

    [2.0.3-1.0.1] - Fix CVE-2026-56001, CVE-2026-56002, and CVE-2026-56003 [Orabug: 39843361]

  • High max 7.5
    ELSA-2026-51183 1 CVE

    Important: glib2 security update (Oracle Linux 7)

    [2.56.1-9.0.7] - Fixes CVE-2026-58016 [Orabug: 39844471] [2.56.1-9.0.5] - Fixes CVE-2025-14078 gvariant parser buffer underflow [Orabug: 39418716] [2.56.1-9.0.3] - Fixes CVE-2025-13601 g_escape_uri_string() overflow [Orabug: 38909821] [2.56.1-9.0.1] - Fix ove…

  • High max 9.8
    ELSA-2026-52772 2 CVEs

    Important: perl-DBI:1.641 security update (Oracle Linux 8)

    perl-DBI [1.641-8] - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211151 [1.641-7] - Fix patch. [1.641-6] - Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) Resolves: RHEL-193298 [1.641-5]…

  • High max 8.7
    ELSA-2026-53848 1 CVE

    Important: isns-utils security update (Oracle Linux 8)

    [0.99-1.1] - Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995)

  • Medium max 7.1
    ELSA-2026-52765 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.153.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • Medium max 6.9
    ELSA-2026-54290 1 CVE

    Moderate: python-idna security update (Oracle Linux 8)

    [2.5-8] - Security fix for CVE-2026-45409 Resolves: RHEL-215650

  • High max 8.8
    ELSA-2026-47082 1 CVE

    Important: pipewire security update (Oracle Linux 9)

    [1.4.11-1] - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828

  • High max 7.8
    ELSA-2026-54268 1 CVE

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.25-7.0.1.el9_8.3] - Remove upstream URL reference [3.9.25-7.3] - Security fix for CVE-2026-11940 Resolves: RHEL-227228 [3.9.25-7.2] - Security fix for CVE-2026-15308 Resolves: RHEL-193786 [3.9.25-7.1] - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enoug…

  • Medium max 7.5
    ELSA-2026-54178 4 CVEs

    Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 10)

    [10.2.6-28.4] - Resolves RHEL-211020: CVE-2026-33377 [10.2.6-28.3] - Resolves RHEL-211376: CVE-2026-8609 [10.2.6-28.2] - Resolves RHEL-210981: CVE-2026-33376 [10.2.6-28.1] - Resolves RHEL-211389: CVE-2026-33382 [10.2.6-28] - Resolves RHEL-188282: Remove Lua E…

  • High max 9.8
    ELSA-2026-36541 6 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 8.2
    ELSA-2026-43575 6 CVEs

    Moderate: gnutls security update (Oracle Linux 7)

    [3.3.29-9.0.3] - Backport fixes for CVE-2026-3833 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 [Orabug: 39770407] - CVE-2026-42011 is not applicable to this baseline. [3.3.29-9.0.1] - Regenerate PKCS#11 test certificates [Orabug: 39674042] - Fi…

  • High max 7.5
    ELSA-2026-53364 1 CVE

    Important: resource-agents security update (Oracle Linux 8)

    [4.9.0-54.37] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217924

  • High max 7.5
    ELSA-2026-53363 1 CVE

    Important: fence-agents security update (Oracle Linux 8)

    [4.2.1-129.29] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217923

  • High max 8.8
    ELSA-2026-500162 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-322.203.3.5] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39859219] [5.15.0-322.203.3.4.5] - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack) [Orabug: 39832946] - KVM: x86: …

  • High max 7.5
    ELSA-2026-52395 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.23-5] - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 [13.23-4] - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479

  • High max 7.5
    ELSA-2026-53365 1 CVE

    Important: fence-agents security update (Oracle Linux 9)

    [4.10.0-110.6] - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934

  • Medium max 7.5
    ELSA-2026-53452 1 CVE

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

    [1.22.12-7.2] - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162

  • High max 7.5
    ELSA-2026-42877 10 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.502.b07-1.1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.502.b07-1.1] - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bum…

  • High max 8.1
    ELSA-2026-53329 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

    [5.14.0-687.38.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • High max 8.7
    ELSA-2026-53847 1 CVE

    Important: isns-utils security update (Oracle Linux 9)

    [0.101-4.1] - Fix CVE-2026-55995: prevent double-free in attrs.c error paths

  • High max 7.8
    ELSA-2026-53435 1 CVE

    Important: udisks2 security update (Oracle Linux 10)

    [2.11.0-2.0.1.el10_2.1] - Enable btrfs support for OL supported arches [Orabug: 37464632] [2.11.0-2.1] - Rework fstab mount authorization for as-user (CVE-2026-7867) (RHEL-173437)

  • Medium max 7.5
    ELSA-2026-53451 1 CVE

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 10)

    [1.26.7-2.3] - Fix excessive memory allocation from malicious RTP fragmentation unit packets in rtph264depay/rtph265depay (CVE-2026-18649) Resolves: RHEL-224158

  • High max 8.7
    ELSA-2026-53846 1 CVE

    Important: isns-utils security update (Oracle Linux 10)

    [0.103-1.1] - Fix double-free vulnerability in attrs.c error paths (CVE-2026-55995) Resolves: RHEL-219472

  • High max 8.2
    ELSA-2026-53330 7 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

    [6.12.0-211.46.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.4
    ELSA-2026-13895 1 CVE

    Important: sudo security update (Oracle Linux 7)

    [1.8.23-10.0.3.3] - Security update for CVE-2026-35535 [Orabug: 39320917] [1.8.23-10.0.1.3] - CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]

  • High max 8.8
    ELSA-2026-47176 2 CVEs

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 7)

    [1.10.4-4.0.3] - Security update for CVE-2026-52720 CVE-2026-52722 [Orabug: 39799399] [1.10.4-4.0.1] - Security update for CVE-2026-3082 [Orabug: 39199326]

  • High max 7.5
    ELSA-2026-8517 2 CVEs

    Important: libarchive security update (Oracle Linux 7)

    [3.1.2-14.0.3] - Fix CVE-2026-4424 CVE-2026-5121 [Orabug: 39219508] [3.1.2-14.0.1] - rar: Fix double free [Orabug: 38364091][CVE-2025-5914]

  • High max 7.5
    ELSA-2026-26564 4 CVEs

    Important: dovecot security update (Oracle Linux 7)

    [1:2.2.36-8] - update release number [1:2.2.36-7.1] - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866752) - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866757) - fix CVE-2020-12674 crash due to assert in …

  • High max 8.4
    ELSA-2026-41904 1 CVE

    Important: evince security update (Oracle Linux 7)

    [3.28.2-10.0.1] - Fix CVE-2026-46529 [Orabug: 39757172]

  • High max 4.3
    ELSA-2026-49513 1 CVE

    Important: dovecot security update (Oracle Linux 7)

    [1:2.2.36-8.0.3] - Backport fix for CVE-2026-42006 [Orabug: 39820967] [1:2.2.36-8.0.1] - Backport fix for CVE-2025-59032 [Orabug: 39573795] - Backport fix for CVE-2026-27856 [Orabug: 39573795] - Backport fix for CVE-2026-27857 [Orabug: 39573795] - Backport fi…

  • High max 6.0
    ELSA-2026-50728 6 CVEs

    Important: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 8)

    ruby [3.3.12-8] - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg

  • High max 6.0
    ELSA-2026-50827 6 CVEs

    Important: ruby:4.0 security, bug fix, and enhancement update (Oracle Linux 9)

    ruby [4.0.6-34] - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 rubygem-mysql2 [0.5.7-1] - Upgrade to mysql2 0.5.7. Related: RHEL-142278 [0.5.5-3] - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 [0.5.5-2] - Adapt tests to…

  • Medium max 7.5
    ELSA-2026-52674 1 CVE

    Moderate: libarchive security update (Oracle Linux 9)

    [3.5.3-11] - Related: CVE-2026-14164 [3.5.3-10] - Resolves: CVE-2026-14164

  • Medium max 7.5
    ELSA-2026-52675 1 CVE

    Moderate: libarchive security update (Oracle Linux 10)

    [3.7.7-10] - Related: CVE-2026-14164 [3.7.7-9] - Resolves: CVE-2026-14164

  • High max 7.5
    ELSA-2026-52841 1 CVE

    Important: nodejs-nodemon security update (Oracle Linux 10)

    [3.1.14-3] - Fix CVE-2026-69152 - brace-expansion