8,313 results · Feed
-
High max 7.5ELSA-2026-49526 2 CVEs
Important: osbuild-composer security update (Oracle Linux 10)
[176-1.0.1] - Track github upstream
-
High max 7.5ELSA-2026-49511 1 CVE
Important: frr security update (Oracle Linux 8)
[7.5.1-25.0.1] - Fix POSTIN scriptlet [Orabug: 34712485] [7.5.1-25] - Fix EVPN and ENCAP/VNC packet parsing validation (CVE-2026-37460) - Resolves: RHEL-193233
-
High max 7.5ELSA-2026-49524 1 CVE
Important: perl-Archive-Tar security update (Oracle Linux 8)
[2.30-3] - Fix CVE-2026-9538: cap per-entry declared size during tar read to defend against attacker-controlled size-field memory DoS - Resolves: RHEL-191913
-
High max 9.8ELSA-2026-49214 4 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.150.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
High max 9.8ELSA-2026-500121 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.358.2] - xfs: resample the data fork mapping after cycling ILOCK (Darrick J. Wong) [Orabug: 39776792] {CVE-2026-64600} - net: Work around Marvell NIC TX stalls (Venkat Venkatsubra) [Orabug: 39765820] [5.4.17-2136.358.1] - KVM: x86: Fix shadow pag…
-
High max 7.5ELSA-2026-49525 1 CVE
Important: perl-Archive-Tar security update (Oracle Linux 9)
[2.38-6.2] - Fix CVE-2026-9538: add cap for tar entry size during read to prevent memory allocation DoS - Resolves: RHEL-191917
-
High max 7.5ELSA-2026-49527 1 CVE
Important: frr security, bug fix, and enhancement update (Oracle Linux 9)
[8.5.3-15.1] - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing [8.5.3-15] - Resolves: RHEL-176258 - AVC when reading user's site-packages [8.5.3-14] - Resolves: RHEL-152300 - ignored route in the kernel after flapping…
-
High max 9.8ELSA-2026-49612 2 CVEs
Important: perl-DBI security update (Oracle Linux 9)
[1.643-9.3] - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 [1.643-9.2] - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306
-
High max 7.5ELSA-2026-49607 1 CVE
Important: frr10 security, bug fix, and enhancement update (Oracle Linux 9)
[10.4.3-3.2] - Resolves: RHEL-222338 - AVC when reading user's site-packages [10.4.3-3.1] - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232
-
High max 7.8ELSA-2026-49508 1 CVE
Important: gstreamer1-plugins-good security update (Oracle Linux 10)
[1.26.7-2.2] - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling (CVE-2026-5056) Resolves: RHEL-222333
-
High max 9.8ELSA-2026-49514 2 CVEs
Important: perl-DBI security update (Oracle Linux 10)
[1.643-26.3] - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Resolves: RHEL-211146 [1.643-26.2] - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders - Resolves: RHEL-193293
-
High max 7.5ELSA-2026-49523 1 CVE
Important: perl-Archive-Tar security update (Oracle Linux 10)
[3.02-512.2] - Fix CVE-2026-9538: cap per-entry declared size during archive reading to prevent memory DoS - Resolves: RHEL-191918
-
Medium max 6.2ELSA-2026-49668 1 CVE
Moderate: p11-kit security update (Oracle Linux 10)
[0.26.4-1] - Rebase to 0.26.4
-
High max 9.8ELSA-2026-49621 33 CVEs
Important: thunderbird security update (Oracle Linux 10)
[140.13.0-1.0.1] - Add Oracle prefs [140.13.0-1] - Update to 140.13.0 ESR
-
High max 8.2ELSA-2026-49836 1 CVE
Important: ldns security update (Oracle Linux 10)
[1.8.3-18.1] - Fix CVE-2026-10846: Off-path poisoning attacks due to insufficient query-response matching (RHEL-210690)
-
Low max 5.6ELSA-2026-47749 1 CVE
Low: php:8.2 security, bug fix, and enhancement update (Oracle Linux 8)
libzip php [8.2.32-1] - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip
-
Low max 5.6ELSA-2026-47750 1 CVE
Low: php:7.4 security, bug fix, and enhancement update (Oracle Linux 8)
libzip php [7.4.33-5] - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug php-pecl-zip
-
High max 7.5ELSA-2026-48225 1 CVE
Important: perl:5.32 security update (Oracle Linux 8)
perl [4:5.32.1-474] - Resolves: RHEL-153834 - Fix CVE-2025-40909 - Clone dirhandles without fchdir perl-Algorithm-Diff [1.1903-10] - Rebuild with enable hardening (bug #1636329) perl-Archive-Tar [2.38-5] - Fix CVE-2026-9538: Denial of Service via crafted tar …
-
Medium max 5.0ELSA-2026-47755 2 CVEs
Moderate: openssh security update (Oracle Linux 8)
[8.0p1-30.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-30] - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fi…
-
High max 8.8ELSA-2026-41948 1 CVE
Important: javapackages-tools:201801 security update (Oracle Linux 8)
ant-contrib [1.0-0.32.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.0-0.31.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.0-0.30.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild […
-
High max 9.2ELSA-2026-47057 3 CVEs
Important: nodejs:24 security update (Oracle Linux 9)
nodejs [1:24.18.0-3] - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar [1:24.18.0-2] - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion [1:24.18.0-1] - Update to version 24.18.0 [1:24.14.1-2] - Update bundled nghttp2 to…
-
High max 8.8ELSA-2026-22146 1 CVE
Important: PackageKit security update (Oracle Linux 7)
[1.1.10-2.0.3] - Backport fix for CVE-2026-41651 [Orabug: 39467887]
-
High max 7.8ELSA-2026-26168 4 CVEs
Important: gimp security update (Oracle Linux 7)
[2:2.8.22-1.0.9] - Fixes CVE-2026-4150, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887 [Orabug: 39564202] [2:2.8.22-1.0.7] - Fixes CVE-2025-14422 [Orabug: 38904303] [2:2.22-1.0.5] - Fixes CVE-2025-10922 and CVE-2025-10934 [Orabug: 38739185] [2:2.8.22-1.0.3] …
-
Medium max 8.7ELSA-2026-24342 2 CVEs
Moderate: python-tornado security update (Oracle Linux 7)
[4.2.1-5.0.3] - Backport fix for CVE-2026-31958 [Orabug: 39521310] - Backport fix for CVE-2026-35536 [Orabug: 39521310]
-
High max 7.8ELSA-2026-24992 1 CVE
Important: compat-libtiff3 security update (Oracle Linux 7)
[3.9.4-12.0.3] - Backport fix for CVE-2026-4775 [Orabug: 39535879] [3.9.4-12.0.1] - Fixes CVE-2025-9900 buffer underflow [Orabug: 38523840]
-
High max 7.4ELSA-2026-25172 1 CVE
Important: rsync security update (Oracle Linux 7)
[3.1.2-12.0.5] - Backport fix for CVE-2026-41035 [Orabug: 39542074] [3.1.2-12.0.3] - Fix CVE-2024-12087 [Orabug: 38771262] [3.1.2-12.0.1] - Back port fix for CVE-2024-12085 [Orabug: 37524229]
-
High max 8.3ELSA-2026-48021 2 CVEs
Important: python-pillow security update (Oracle Linux 8)
[5.1.1-23] - Security fix for CVE-2026-54058, CVE-2026-59197 Resolves: RHEL-211857, RHEL-211848
-
High max 8.4ELSA-2026-48703 4 CVEs
Important: vim security update (Oracle Linux 8)
[8.0.1763-31.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-31] - RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion [2:8.…
-
High max 9.8ELSA-2026-47011 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.148.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
High max 8.4ELSA-2026-47982 5 CVEs
Important: vim security update (Oracle Linux 9)
[8.2.2637-26.0.1.el9_8.13] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-26.13] - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-compl…
-
High max 8.8ELSA-2026-47040 5 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.31.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 7.7ELSA-2026-47757 5 CVEs
Important: openssh security update (Oracle Linux 10)
[9.9p1-25.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37824421] [9.9p1-25] - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host …
-
High max 7.5ELSA-2026-48585 1 CVE
Important: fence-agents security update (Oracle Linux 10)
[4.16.0-21.5] - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193812
-
High max 8.4ELSA-2026-48650 5 CVEs
Important: vim security update (Oracle Linux 10)
[9.1.083-9.0.1.el10_2.12] - Remove upstream references [Orabug: 31197557] [2:9.1.083-9.12] - RHEL-201113 CVE-2026-59856 vim: potential command execution in PHP omni-completion [2:9.1.083-9.11] - RHEL-203857 CVE-2026-59858 vim: arbitrary Ex command execution d…
-
High max 9.8ELSA-2026-47017 4 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)
[6.12.0-211.40.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 9.8ELSA-2026-45115 3 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.147.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […
-
Medium max 6.7ELSA-2026-47117 1 CVE
Moderate: libgcrypt security update (Oracle Linux 8)
[1.8.5-8] - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext
-
High max 7.5ELSA-2026-47731 2 CVEs
Important: gstreamer1-plugins-bad-free security update (Oracle Linux 8)
[1.16.1-9.0.1.el8_10.1] - Update origin URL [Orabug: 36209826] [1.16.1-9.1] - Fix buffer overflow in DTLS certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193570 [1.16.1-9] - Fix rfbsrc/librfb vulnerabilities in rfbdecoder.c (CVE-2026-59691) Re…
-
High max 7.5ELSA-2026-47736 1 CVE
Important: fence-agents security update (Oracle Linux 8)
[4.2.1-129.27] - bundled httplib2: fix CVE-2026-59939 Resolves: RHEL-193803 [4.2.1-129.26] - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186317
-
High max 9.2ELSA-2026-47059 3 CVEs
Important: nodejs:22 security update (Oracle Linux 8)
nodejs [1:22.23.1-2] - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-193842 RHEL-193874 RHEL-208661 [1:22.23.1-1] - Update to version 22.23.1 Resolves: RHEL-176170 Fixes: CVE-2026-12151 CVE-2026-48618 CVE…