Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

Medium max 6.5

ELSA-2026-19148 2 CVEs

Moderate: glib2 security update (Oracle Linux 10)

[2.80.4-13] - Fix CVE-2025-14087 and CVE-2025-14512

Jul 16, 2026
High max 7.5

ELSA-2026-19149 3 CVEs

Important: dovecot security update (Oracle Linux 10)

[1:2.3.21-19] - update release for rebuild [1:2.3.21-18] - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161626) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE com…

Jul 16, 2026
High max 7.8

ELSA-2026-19150 1 CVE

Important: libtiff security update (Oracle Linux 10)

[4.6.0-8.1] - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159310)

Jul 16, 2026
High max 7.5

ELSA-2026-19151 2 CVEs

Important: jq security update (Oracle Linux 10)

[1.7.1-13] - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions [1.7.1-12] - Fix CVE-2026-39979 out-of-bounds read in jv_parse_sized()

Jul 16, 2026
High max 8.4

ELSA-2026-19158 6 CVEs

Important: dnsmasq security update (Oracle Linux 10)

[2.90-7] - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent …

Jul 16, 2026
High max 9.1

ELSA-2026-22937 8 CVEs

Important: image-builder security update (Oracle Linux 10)

[58-1.0.1] - v58 with osbuild/images v0.256.0 with OL support patches - Add Azure image type - Correct dnf-plugin-spacewalk package filters [56-1.0.1] - v56 with osbuild/images v0.254.0 with OL support patches - Add gce (gcp) image type to OL distro types [55…

Jul 16, 2026
High max 7.5

ELSA-2026-19560 1 CVE

Important: libsndfile security update (Oracle Linux 10)

[1.2.2-6.1] - apply patch for CVE-2026-37555 Resolves: ?RHEL-174531

Jul 16, 2026
High max 7.8

ELSA-2026-20600 2 CVEs

Important: wireshark security update (Oracle Linux 10)

[4.4.2-10.0.1] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-10] - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory [1:4.4.2-9] - Resolves: RHEL-173218 - CVE-2026-5405 He…

Jul 16, 2026
High max 8.0

ELSA-2026-21676 1 CVE

Important: cockpit security update (Oracle Linux 10)

[356.2-1.0.1] - Storage: Enable btrfs support [Orabug: 37464632] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in…

Jul 16, 2026
High max 9.3

ELSA-2026-21757 2 CVEs

Important: flatpak security update (Oracle Linux 10)

[1.16.0-9.1] - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157

Jul 16, 2026
Medium max 4.0

ELSA-2026-22529 1 CVE

Moderate: libexif security update (Oracle Linux 10)

[0.6.24-9.1] - Fix integer underflow in MakerNote decoding (CVE-2026-40386) Resolves: RHEL-170240

Jul 16, 2026
High max 2.9

ELSA-2026-22715 1 CVE

Important: expat security update (Oracle Linux 10)

[2.7.3-57] - expat: backport CVE-2026-45186 fix (attribute collision check DoS) [2.7.3-56] - Rebase to 2.7.3 and add VCS tag * Thu Jun 05 2025 psklenar@redhat.com <psklenar@redhat.com> - https://issues.redhat.com/browse/RHELMISC-13073 * Fri Mar 28 2025 Tomas …

Jul 16, 2026
Critical max 9.0

ELSA-2026-22963 6 CVEs

Critical: samba security update (Oracle Linux 10)

[0:4.23.5-109] - Bump build number [0:4.23.5-108] - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156279 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: …

Jul 16, 2026
High max 7.5

ELSA-2026-23102 3 CVEs

Important: delve security update (Oracle Linux 10)

[1.26.1-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.26.1-2] - Bump

Jul 16, 2026
High max 7.3

ELSA-2026-23388 5 CVEs

Important: php security update (Oracle Linux 10)

[8.3.31-1] - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode

Jul 16, 2026
High max 7.5

ELSA-2026-24338 2 CVEs

Important: bind security update (Oracle Linux 10)

[9.18.33-15.0.1.el10_2.2] - Hard require needed openssl-libs [Orabug: 38742109] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.18.33-15.2] - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-59…

Jul 16, 2026
High max 7.5

ELSA-2026-24347 2 CVEs

Important: frr security update (Oracle Linux 10)

[10.4.4-1] - Resolves: RHEL-166035 - Bump FRR to 10.4.3 to fix EVPN problems

Jul 16, 2026
High max 7.8

ELSA-2026-24985 1 CVE

Important: poppler security update (Oracle Linux 10)

[24.02.0-7.el10_2.2] - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Bump NVR for MR - Resolves: RHEL-180565 [24.02.0-7.el10_2.1] - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180565

Jul 16, 2026
High max 7.5

ELSA-2026-25111 2 CVEs

Important: .NET 8.0 security update (Oracle Linux 10)

[8.0.128-1.0.1] - Add support for Oracle Linux [8.0.128-1] - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 [8.0.127-1] - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924

Jul 16, 2026
High max 7.5

ELSA-2026-25112 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 10)

[9.0.118-1.0.1] - Add support for Oracle Linux [9.0.118-1] - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181554 [9.0.117-1] - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173919

Jul 16, 2026
High max 7.5

ELSA-2026-25115 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 10)

[10.0.109-1.0.1] - Add support for Oracle Linux [10.0.109-1] - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181559 [10.0.108-1] - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173909 [10.0.106-3] - Adjust build limits - Re…

Jul 16, 2026
High max 7.7

ELSA-2026-25216 3 CVEs

Important: valkey security update (Oracle Linux 10)

[8.0.9-1] - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631

Jul 16, 2026
High max 7.4

ELSA-2026-25902 1 CVE

Important: fence-agents security update (Oracle Linux 10)

[4.16.0-21.2] - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182314 [4.16.0-21.1] - bundled pyasn1: replace with dependency to fix CVE-2026-30922 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-157187, RHEL-1…

Jul 16, 2026
High max 3.7

ELSA-2026-25930 1 CVE

Important: postfix security update (Oracle Linux 10)

[2:3.8.5-10] - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554

Jul 16, 2026
Medium max 6.4

ELSA-2026-25999 1 CVE

Moderate: yggdrasil-worker-package-manager security update (Oracle Linux 10)

[0.2.3-7] - Bump release for rebuild [0.2.3-6] - Bump release for rebuild

Jul 16, 2026
High max 8.1

ELSA-2026-26332 2 CVEs

Important: rsync security, bug fix, and enhancement update (Oracle Linux 10)

[3.4.4-1] - Resolves: RHEL-181630 - Rebase rsync to version 3.4.4 - Resolves: RHEL-174929 - TOCTOU symlink race condition (CVE-2026-29518) - Resolves: RHEL-174949 - Memory disclosure via int overflow (CVE-2026-43618) [3.4.1-3] - Resolves: RHEL-118549 - Do not…

Jul 16, 2026
High max 7.8

ELSA-2026-26566 9 CVEs

Important: xorg-x11-server-Xwayland security, bug fix, and enhancement update (Oracle Linux 10)

[24.1.9-4.2] - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184290 [24.1.9-4.1] - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Re…

Jul 16, 2026
High max 8.1

ELSA-2026-27842 1 CVE

Important: memcached security update (Oracle Linux 10)

[0:1.6.23-7.1] - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179083

Jul 16, 2026
High max 8.9

ELSA-2026-27929 2 CVEs

Important: python3.14-urllib3 security update (Oracle Linux 10)

[2.6.3-2] - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184903 - Resolves: RHEL-185128

Jul 16, 2026
High max 8.9

ELSA-2026-28000 2 CVEs

Important: python-urllib3 security update (Oracle Linux 10)

[1.26.19-4] - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184817, RHEL-185121 [1.26.19-3] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142737, RHEL-13…

Jul 16, 2026
Medium max 6.8

ELSA-2026-28231 1 CVE

Moderate: opencryptoki security update (Oracle Linux 10)

[3.26.0-3.1] - Resolves: RHEL-171556, Fix possible out-of-bounds access in BER decode functions [3.26.0-3] - Resolves: RHEL-169565, Fix syslog message printing about different CPs

Jul 16, 2026
Medium max 7.6

ELSA-2026-28233 2 CVEs

Moderate: libpng security update (Oracle Linux 10)

[2:1.6.40-11.1] - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161329) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161213)

Jul 16, 2026
Low max 7.5

ELSA-2026-28235 1 CVE

Low: libtasn1 security update (Oracle Linux 10)

[4.20.0-5] - Fix for CVE-2025-13151 stack buffer overflow [4.20.0-4] - Switch to autosetup [4.20.0-3] - plans/ci: modify plan names [4.20.0-2] - Properly check valgrind arches

Jul 16, 2026
Medium max 7.8

ELSA-2026-28236 3 CVEs

Moderate: libsolv security update (Oracle Linux 10)

[0.7.33-5] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178270) [0.7.33-4] - Cope with integer overflow in data size arithmetics in repo_add_solv() (CVE-2026-9149) (RHEL-178267) [0.7.33-3] - Fix a buffer overflow when copying S…

Jul 16, 2026
High max 6.7

ELSA-2026-19130 1 CVE

Important: libcap security update (Oracle Linux 10)

[2.69-7.1] - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169302

Jul 16, 2026
High max 7.5

ELSA-2026-24348 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 10)

[42.7.2-1.2] - Add tests for CVE-2026-42198 [42.7.2-1.1] - Limit SCRAM PBKDF2 iterations to prevent DoS via malicious server - Resolves: RHEL-173479

Jul 16, 2026
High max 7.0

ELSA-2026-28581 2 CVEs

Important: python3.14 security, bug fix, and enhancement update (Oracle Linux 10)

[3.14.5-1] - Update to 3.14.5 Resolves: RHEL-176147 [3.14.5~rc1-1] - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-176147

Jul 16, 2026
Medium max 6.3

ELSA-2026-28582 1 CVE

Moderate: keylime security update (Oracle Linux 10)

[7.14.1-6] - keylime: Fix hardcoded attestation challenge nonce (CVE-2026-6420) [RHEL-168795]

Jul 16, 2026
Medium max 5.5

ELSA-2026-28584 1 CVE

Moderate: libxslt security update (Oracle Linux 10)

[1.1.39-8.1] - Fix CVE-2025-10911 (RHEL-171996)

Jul 16, 2026
High max 7.5

ELSA-2026-29035 4 CVEs

Important: skopeo security update (Oracle Linux 10)

[2:1.22.2-2] - Rebuild for CVE-2026-25679 - Resolves: RHEL-158499

Jul 16, 2026