Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,313 results · Feed

High max 9.3

ELSA-2026-34911 7 CVEs 1 exploited

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 10, 2026
Medium max 7.5

ELSA-2026-43702 1 CVE

Moderate: libpng12 security update (Oracle Linux 7)

[1.2.50-10.0.3] - Fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE [Orabug: 39771480] [1.2.50-10.0.1] - Fix CVE-2026-25646: heap buffer overflow in png_set_quantize [Orabug: 39183864]

Aug 8, 2026
High max 7.6

ELSA-2026-37397 2 CVEs

Important: ruby security update (Oracle Linux 7)

[2.0.0.648-39.0.1] - Fix CVE-2026-42246 and CVE-2026-42258 [Orabug: 39711420]

Aug 8, 2026
High max 9.3

ELSA-2026-500150 21 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-205.92.4.2] - net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (Dongli Zhang) [Orabug: 39844842] - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39844812] {CVE-2026-68480} - KV…

Aug 8, 2026
Low max 5.6

ELSA-2026-48197 1 CVE

Low: php:8.3 security, bug fix, and enhancement update (Oracle Linux 9)

php [8.3.32-1] - rebase to 8.3.32 php-pecl-apcu [5.1.23-1] - update to 5.1.23 for PHP 8.2 RHEL-14699 [5.1.21-1] - update to 5.1.21 for PHP 8.1 #2070040 php-pecl-redis6 [6.1.0-3] - use valkey for tests [6.1.0-2] - ignore 1 ONLINE test [6.1.0-1] - RHEL build [6…

Aug 7, 2026
High max 7.8

ELSA-2026-51153 1 CVE

Important: gpsd-minimal security update (Oracle Linux 9)

[3.26.1-2.0.1.el9_8.1] - Replaced upstream reference [Orabug: 35865525] [1:3.26.1-2.el9_8.1] - fix command injection in gpsprof (CVE-2026-58459) [1:3.26.1-2] - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navc…

Aug 7, 2026
High max 6.0

ELSA-2026-50828 6 CVEs

Important: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 9)

ruby [3.3.12-8] - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 [0.5.5-3] - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 [0.5.5-2] - Adapt tests to openssl 3.2 Resolves: RHEL-80222 [0.5.5-1] - Upgrade to …

Aug 7, 2026
Medium max 6.7

ELSA-2026-500145 1 CVE

Moderate: libgcrypt security update (Oracle Linux 9)

[1.10.0-13_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35961378] - Update FIPS module name for Oracle Linux [Orabug: 35961378] [1.10.0-13] - Bump version to fix wrong build target. [1.10.0.12] - Fix CVE-2026-41989:…

Aug 7, 2026
Medium max 9.8

ELSA-2026-51295 1 CVE

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.44.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 7, 2026
High max 7.8

ELSA-2026-33685 4 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 7, 2026
High max 7.5

ELSA-2026-34372 3 CVEs

Important: gnutls security update (Oracle Linux 7)

[3.3.29-9.0.1] - Regenerate PKCS#11 test certificates [Orabug: 39674042] - Fix for CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 [Orabug: 39674042]

Aug 6, 2026
High max 7.3

ELSA-2026-50978 1 CVE

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-553.153.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

Aug 6, 2026
Medium max 6.7

ELSA-2026-500138 1 CVE

Moderate: libgcrypt security update (Oracle Linux 8)

[ 1.8.5-8_fips] - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations [Orabug: 33081130] - Change Epoch from 1 to 10 [1.8.5-8] - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

Aug 6, 2026
Medium max 7.8

ELSA-2026-51035 2 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-687.36.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Aug 6, 2026
High max 8.8

ELSA-2026-51105 1 CVE

Important: LibRaw security update (Oracle Linux 9)

[0.21.1-2.1] - Fix CVE-2026-51235 Resolves: RHEL-219221

Aug 6, 2026
High max 7.7

ELSA-2026-47756 5 CVEs

Important: openssh security update (Oracle Linux 9)

[9.9p1-9.0.1] - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076] - Upstream references found with /usr/bin/ssh [Orabug: 37814929] [9.9p1-9] - CVE-2026-59996: Fix remote glob result of '..' ca…

Aug 6, 2026
High max 8.8

ELSA-2026-500137 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[5.15.0-322.203.3.4.5] - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults (David Matlack) [Orabug: 39832946] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson) [Orabug: 39832946] {CV…

Aug 6, 2026
High max 9.8

ELSA-2026-30129 8 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 6, 2026
High max 7.8

ELSA-2026-51075 1 CVE

Important: gpsd security update (Oracle Linux 10)

[3.26.1-3.0.1.el10_2.1] - Replace upstream reference [Orabug: 37033219] [1:3.26.1-3.el10_2.1] - fix command injection in gpsprof (CVE-2026-58459)

Aug 6, 2026
Medium

ELSA-2026-49871 2 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.43.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 6, 2026
High max 8.8

ELSA-2026-500135 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-204.92.4.4.3] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Sean Christopherson) [Orabug: 39832878] {CVE-2026-64561} - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 398328…

Aug 6, 2026
Medium max 8.2

ELSA-2026-47126 1 CVE

Moderate: resource-agents security update (Oracle Linux 8)

[4.9.0-54.36] - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598

Aug 5, 2026
Medium max 7.8

ELSA-2026-49857 1 CVE

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-553.151.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

Aug 5, 2026
High max 8.8

ELSA-2026-500136 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.358.2.0.1] - x86/bugs: Make Safe-RET robust against interrupt injection (Borislav Petkov (AMD)) [Orabug: 39832992] {CVE-2026-68480} - x86/alternatives: Disable interrupts and sync when optimizing NOPs in place (Thomas Gleixner) [Orabug: 39832992]…

Aug 5, 2026
High max 9.1

ELSA-2026-22714 11 CVEs

Important: osbuild-composer security update (Oracle Linux 9)

[175-1.0.1] - Track github upstream

Aug 5, 2026
Low

ELSA-2026-49870 1 CVE

Low: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-687.34.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Aug 5, 2026
High max 7.8

ELSA-2026-50817 3 CVEs

Important: gimp security update (Oracle Linux 9)

[2:3.0.4-4.9] - fix CVE-2026-42169 [2:3.0.4-4.8] - fix CVE-2026-66758 - fix CVE-2026-66759

Aug 5, 2026
High max 9.8

ELSA-2026-27288 15 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.34.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 5, 2026
High max 7.5

ELSA-2026-50747 1 CVE

Important: freerdp security update (Oracle Linux 10)

[2:3.10.3-12.7] - Add codecID checks for CACHE_BITMAP_V3_ORDER (CVE-2026-55827) - Fix boundary checks in gdi_Bitmap_Decompress (CVE-2026-55827) Resolves: RHEL-194327

Aug 5, 2026
High max 7.5

ELSA-2026-49512 8 CVEs

Important: mingw-glib2 security update (Oracle Linux 8)

[2.70.1-9] - Fix CVE-2026-58010: off-by-one error in gvs_tuple_is_normal() Resolves: RHEL-212164 [2.70.1-8] - Fix CVE-2026-58011: g_date_time_add_full() range validation Resolves: RHEL-212184 [2.70.1-7] - Fix CVE-2026-58013: memcmp buffer over-read in giochan…

Aug 4, 2026
High max 8.2

ELSA-2026-49520 1 CVE

Important: ldns security update (Oracle Linux 8)

[1.7.0-23] - Fix CVE-2026-10846: validate DNS response source address, transaction ID, and query section matching - Resolves: RHEL-210700

Aug 4, 2026
High max 9.8

ELSA-2026-49922 33 CVEs

Important: thunderbird security update (Oracle Linux 8)

[140.13.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.13.0] - Add OpenELA debranding [140.13.0-1] - Update to 140.13.0 ESR

Aug 4, 2026
Medium max 8.2

ELSA-2026-49927 1 CVE

Moderate: fence-agents security update (Oracle Linux 8)

[4.2.1-129.28] - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178594

Aug 4, 2026
High max 9.8

ELSA-2026-49212 3 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-687.33.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Aug 4, 2026
Medium max 6.2

ELSA-2026-49667 1 CVE

Moderate: p11-kit security update (Oracle Linux 9)

[0.26.2-1] - Rebase to 0.26.2 Resolves: RHEL-147825 [0.26.1-1] - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 [0.25.10-1] - Update to new upstream release 0.25.10 Resolves: RHEL-115453 [0.25.3-3] - Fix regression in trust where file creati…

Aug 4, 2026
High max 7.5

ELSA-2026-49838 2 CVEs

Important: osbuild-composer security, bug fix, and enhancement update (Oracle Linux 9)

[175-1.0.1] - Track github upstream

Aug 4, 2026
High max 9.8

ELSA-2026-49921 33 CVEs

Important: thunderbird security update (Oracle Linux 9)

[140.13.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.13.0] - Add OpenELA debranding [140.13.0-1] - Update to 140.13.0 ESR

Aug 4, 2026
High max 9.2

ELSA-2026-48034 3 CVEs

Important: nodejs24 security update (Oracle Linux 10)

[1:24.18.0-3.0.1] - Update upstream references [1:24.18.0-3] - Fix CVE-2026-13149 (brace-expansion) [1:24.18.0-2] - Fix CVE-2026-59873 and CVE-2026-59874 (nodejs-tar)

Aug 4, 2026
High max 9.8

ELSA-2026-49211 3 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.42.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 4, 2026
Low max 5.6

ELSA-2026-49914 1 CVE

Low: php8.4 security, bug fix, and enhancement update (Oracle Linux 10)

[8.4.23-1] - rebase to 8.4.23

Aug 4, 2026