8,314 results · Feed
-
High max 7.6ELSA-2026-37129 1 CVE
Important: gstreamer1-plugins-good security update (Oracle Linux 9)
[1.22.12-7.1] - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of t…
-
High max 7.8ELSA-2026-20590 5 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
* Tue Jun 09 2026 Ronan Pigott 1.20.4-29.0.7 - Security update for CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 [Orabug: 39440282] [1.20.4-29.0.5] - Security update for CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 [Orabug: 386911…
-
High max 8.8ELSA-2026-36201 2 CVEs
Important: 389-ds:1.4 security update (Oracle Linux 8)
[1.4.3.39-25] - Bump version to 1.4.3.39-25 - Resolves: RHEL-182162 - EMBARGOED CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-8.10.z] - Resolves: RHEL-183102 - CVE-2026-11774 389-ds-base: 389-ds-b…
-
Low max 7.5ELSA-2026-36728 1 CVE
Low: libtasn1 security update (Oracle Linux 8)
[4.13-6] - Backport the fix for CVE-2025-13151 (RHEL-139546)
-
High max 7.6ELSA-2026-36774 1 CVE
Important: gstreamer1-plugins-good security update (Oracle Linux 8)
[1.16.1-7] - Fix integer overflow vulnerabilities in wavpackdec (CVE-2026-53705) Resolves: RHEL-184473
-
Medium max 7.8ELSA-2026-36730 1 CVE
Moderate: libsolv security update (Oracle Linux 8)
[0.7.20-7] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178970)
-
Medium max 8.2ELSA-2026-36732 1 CVE
Moderate: python-urllib3 security update (Oracle Linux 8)
[1.24.2-10] - Security fix for CVE-2026-44431 Resolves: RHEL-184858
-
Medium max 6.1ELSA-2026-36733 1 CVE
Moderate: cups security update (Oracle Linux 8)
[1:2.2.6-68] - RHEL-177947 CVE-2026-34980 cups: control character injection in option values
-
Low max 2.5ELSA-2026-36734 1 CVE
Low: libxml2 security update (Oracle Linux 8)
[2.9.7-21.6] - Fix CVE-2025-6170 (RHEL-182012)
-
Medium max 9.8ELSA-2026-36721 1 CVE
Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)
[20220126gitbb1bba3d77-13.el8.10] - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch [RHEL-151949] - Resolves: RHEL-151949 ([FJ8.10 Bug] How to Update Secure Boot Certificates with Microsoft 2023 in KVM Guests) [20220126gitbb1bba3d77-13.el8.9] …
-
High max 9.8ELSA-2026-33285 2 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.20.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 7.7ELSA-2026-35892 13 CVEs
Important: nodejs:22 security, bug fix, and enhancement update (Oracle Linux 9)
nodejs [1:22.23.1-1] - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-202…
-
High max 7.5ELSA-2026-36617 1 CVE
Important: oci-seccomp-bpf-hook security update (Oracle Linux 9)
[1.2.11-2] - rebuild for CVE-2026-33811 Resolves: RHEL-187325
-
Medium max 7.1ELSA-2026-36674 2 CVEs
Moderate: gstreamer1-plugins-ugly-free security update (Oracle Linux 9)
[1.22.12-6.1] - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464
-
High max 9.3ELSA-2026-36018 11 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-687.22.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 7.5
Important: tomcat security, bug fix, and enhancement update (Oracle Linux 9)
[1:9.0.117-2] - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build
-
High max 8.8ELSA-2026-36834 4 CVEs
Important: gstreamer1-plugins-bad-free security update (Oracle Linux 9)
[1.22.12-7.1] - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 [1.22.12-4.4] - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388…
-
Low max 3.3ELSA-2026-18142 1 CVE
Low: NetworkManager security update (Oracle Linux 10)
[1.56.0-1.0.1] - Add connectivity check via Oracle servers [Orabug: 32051972] [1:1.56.0-1] - Update to 1.56.0 [1:1.55.91-1] - Update to 1.56.0 (rc2) - Fix CVE-2025-9615 (RHEL-111772) [1:1.55.90-1] - Update to 1.56.0 (rc1) - Support setting protocol version of…
-
Medium max 5.3ELSA-2026-18143 1 CVE
Moderate: p11-kit security update (Oracle Linux 10)
[0.26.2-1] - Rebase to 0.26.2 [0.26.1-1] - Rebase to 0.26.1 [0.25.10-1] - Rebase to 0.25.10 [0.25.9-1] - Rebase to 0.25.9
-
Medium max 6.5ELSA-2026-18160 5 CVEs
Moderate: libssh security update (Oracle Linux 10)
[0.12.0-2] - Fix the verbosity of some new logs added in 0.12.0 Resolves: RHEL-93748 [0.12.0-1] - Rebase to 0.12.0 Resolves: RHEL-133421, RHEL-70825, RHEL-130042 - Add a Requires for crypto-policies instead of a Recommends Resolves: RHEL-139045
-
Medium max 6.5ELSA-2026-18162 1 CVE
Moderate: iputils security update (Oracle Linux 10)
[20240905-5] - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-115832)
-
Medium max 7.7ELSA-2026-18344 1 CVE
Moderate: mingw-glib2 security update (Oracle Linux 10)
[2.87.0-1] - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()
-
Medium max 4.4ELSA-2026-18421 1 CVE
Moderate: luksmeta security update (Oracle Linux 10)
[10-1] - Align to upstream release 10
-
High max 8.4ELSA-2026-18465 1 CVE
Important: edk2 security update (Oracle Linux 10)
[20251114-5.0.1] - Replace upstream references [Orabug:36569119] [20251114-5] - edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696] - Resolves: RHEL-150696 (edk2: Add JSON descriptors for uefi-vars builds) [20251114-4] - edk2-OvmfPkg-X86QemuLoadImageLi…
-
High max 8.8ELSA-2026-18479 6 CVEs
Important: qemu-kvm security update (Oracle Linux 10)
[10.1.0-16] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224] - kvm-io-uring-Resubmit…
-
High max 8.8ELSA-2026-18480 5 CVEs
Important: linux-sgx security update (Oracle Linux 10)
[2.26-7] - Fix pccs npm security flaws [2.26-6] - Port to pycryptography and pyasn1 and make keyring optional [2.26-5] - Sync specfile changes from Fedora [2.26-4] - Drop sgx-mpa dep from sgx-pccs [2.26-3] - Add scriptlets for PCCS [2.26-2] - Enable pccsadmin…
-
Medium max 7.5ELSA-2026-18556 2 CVEs
Moderate: unbound security update (Oracle Linux 10)
[1.24.2-7] - Recreate configure unconditionally [1.24.2-6] - Add byacc into BuildRequires [1.24.2-5] - Change the default of tls-use-system-policy-versions at build-time [1.24.2-4] - Switch TLS configuration to follow TLS sockets by crypto-policy again [1.24.…
-
High max 8.8ELSA-2026-19009 5 CVEs
Important: postgresql18 security update (Oracle Linux 10)
[18.3-1.0.1] - Replace upstream reference [18.3-1] - Update to 18.3 - Enable pltcl - Update gating configuration - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005:…
-
High max 8.8ELSA-2026-19010 4 CVEs
Important: postgresql16 security update (Oracle Linux 10)
[16.13-1.0.1] - Replace upstream reference [Orabug: 37044148]
-
Medium max 9.1ELSA-2026-19013 3 CVEs
Moderate: delve security update (Oracle Linux 10)
[1.26.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.26.1-1] - Update Delve to version 1.26.1
-
High max 7.5ELSA-2026-19017 2 CVEs
Important: podman security update (Oracle Linux 10)
[5.8.2-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.8.2-1] - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolve…
-
High max 9.1ELSA-2026-19019 9 CVEs
Important: python3.14 security update (Oracle Linux 10)
[3.14.4-2] - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-168121, RHEL-167887 [3.14.4-1] - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-16…
-
Medium max 0.0ELSA-2026-19020 1 CVE
Moderate: crun security update (Oracle Linux 10)
[1.27-2] - enable krun handler for crun on RHEL 10 - Resolves: RHEL-161090
-
Medium max 8.6ELSA-2026-19021 1 CVE
Moderate: galera and mariadb11.8 security update (Oracle Linux 10)
galera [26.4.25-1] - Rebased to 26.4.25 [26.4.24-1] - Rebase to 26.4.24 [26.4.23-1] - Rebase to 26.4.23 [26.4.22-1] - Rebase to 26.4.22 [26.4.21-2] - Add sysusers.d config file to allow rpm to create users/groups automatically mariadb11.8 [3:11.8.6-2] - Added…
-
High max 7.5ELSA-2026-19022 2 CVEs
Important: golang security update (Oracle Linux 10)
[1.26.2-2.0.1] - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var [1.26.2-2] - Do not ignore any tests in check [1.26.2-1] - Update to Go 1.26.2 (fips-2) [1.26.1-1] - Update to Go 1.26.1 [1.25.7-1] - Update to Go 1.25.7 (fips-1) [1.25.5-1] - Update to Go …
-
High max 8.8ELSA-2026-19024 7 CVEs
Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update (Oracle Linux 10)
gstreamer1-plugins-bad-free [1.26.7-2] - Add patches for CVE-2026-2923 and CVE-2026-3082 Resolves: RHEL-156114, RHEL-156172 [1.26.7-1] - Update to 1.26.7 Resolves: RHEL-126057 [1.26.2-1] - Update to 1.26.2 Resolves: DESKTOP-1858 gstreamer1-plugins-base [1.26.…
-
High max 7.5ELSA-2026-19026 1 CVE
Important: grafana-pcp security update (Oracle Linux 10)
[5.3.0-4] - Resolves RHEL-158485: CVE-2026-25679
-
High max 7.5ELSA-2026-19027 1 CVE
Important: grafana security update (Oracle Linux 10)
[10.2.6-25] - Resolves RHEL-158484: CVE-2026-25679
-
High max 7.5ELSA-2026-19031 1 CVE
Important: skopeo security update (Oracle Linux 10)
[2:1.22.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168168 [1:1.22.0-3] - enable sequoia - Resolves: RHEL-56364 …
-
High max 7.5ELSA-2026-19032 1 CVE
Important: buildah security update (Oracle Linux 10)
[1.43.1-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.1-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/c6eb14c) - fix…