8,314 results · Feed
-
Low max 3.3ELSA-2026-18597 1 CVE
Low: NetworkManager security update (Oracle Linux 9)
[1.54.3-2.0.1] - disable MPTCP handling by default [Orabug: 34801142] - add connectivity check via Oracle servers [Orabug: 32051972] - Add a dropin file to make Networkmanager-dispatcher persistent [Orabug: 36989910] - Drop 777 permissions from the NetworkMan…
-
Medium max 5.3ELSA-2026-18599 1 CVE
Moderate: p11-kit security update (Oracle Linux 9)
[0.26.2-1] - Rebase to 0.26.2 Resolves: RHEL-147825 [0.26.1-1] - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 [0.25.10-1] - Update to new upstream release 0.25.10 Resolves: RHEL-115453
-
Medium max 6.5ELSA-2026-18683 10 CVEs
Moderate: libssh security update (Oracle Linux 9)
[0.10.4-18] - Resolves: RHEL-150661 - Resolves: CVE-2025-4877 - Resolves: CVE-2025-4878 - Resolves: CVE-2025-5351 - Resolves: CVE-2025-8114 - Resolves: CVE-2025-8277 - Resolves: CVE-2026-0964 - Resolves: CVE-2026-0965 - Resolves: CVE-2026-0966 - Resolves: CVE…
-
Medium max 7.7ELSA-2026-18705 1 CVE
Moderate: mingw-glib2 security update (Oracle Linux 9)
[2.78.6-3] - Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()
-
Medium max 7.5ELSA-2026-18772 1 CVE
Moderate: qemu-kvm security update (Oracle Linux 9)
[10.1.0-17] - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block…
-
High max 7.5ELSA-2026-18786 1 CVE
Important: bind security update (Oracle Linux 9)
[9.16.23-40.0.1.el9_8.1] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-40.1] - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) [32:9.16.23-40] - Add forgotten _libdir/named into bind…
-
Medium max 4.4ELSA-2026-18824 1 CVE
Moderate: luksmeta security update (Oracle Linux 9)
[10-1] - New upstream release v10 Resolves: RHEL-122139
-
High max 8.8ELSA-2026-18868 5 CVEs
Important: linux-sgx security update (Oracle Linux 9)
[2.26-7] - Fix pccs npm security flaws [2.26-6] - Port to pycryptography and pyasn1 and make keyring optional [2.26-5] - Sync specfile changes from Fedora [2.26-4] - Drop sgx-mpa dep from sgx-pccs [2.26-3] - Add scriptlets for PCCS [2.26-2] - Enable pccsadmin…
-
High max 9.1ELSA-2026-18913 3 CVEs
Important: containernetworking-plugins security update (Oracle Linux 9)
[1:1.9.0-2] - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 [1:1.9.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 [1:1.8.0-1] - update to https://github.com/containernetwor…
-
Medium max 7.5ELSA-2026-18931 2 CVEs
Moderate: unbound security update (Oracle Linux 9)
[1.24.2-2] - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time [1.16.2-24] - Add new root key 38696 (RHEL-77716) [1.16.2-23] - Do not verify root.key in lib…
-
High max 7.5ELSA-2026-19173 1 CVE
Important: podman security update (Oracle Linux 9)
[5.8.2-1.0.2] - Rebuild on new golang to support experimental GODEBUG fipsnoenforceems - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.8.2-1] - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CV…
-
High max 9.1ELSA-2026-19175 3 CVEs
Important: python3.11 security update (Oracle Linux 9)
[3.11.13-9.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-9] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 [3.11.13-8] - Security fix for CVE-2026-4519 Resolves: RHEL-158053 [3.11.13-7] - Rebuilding pre…
-
High max 9.1ELSA-2026-19176 9 CVEs
Important: python3.14 security update (Oracle Linux 9)
[3.14.4-2] - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 [3.14.4-1] - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-16…
-
High max 9.1ELSA-2026-19177 12 CVEs
Important: python3.12 security update (Oracle Linux 9)
[3.12.13-2.0.1] - Remove upstream URL reference [3.12.13-2] - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 [3.12.13-1] - Update to 3.12.13 - Security fixes for C…
-
Medium max 0.0ELSA-2026-19178 1 CVE
Moderate: crun security update (Oracle Linux 9)
[1.27-1] - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the --user option [rhel-9.8] - Resolves: RHEL-161441
-
High max 8.8ELSA-2026-19180 7 CVEs
Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free security update (Oracle Linux 9)
gstreamer1-plugins-bad-free [1.22.12-7] - Rebuild to fix missing binaries due to buildsystem oversight [1.22.12-6] - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 gstreamer1-plugins-base [1.22.12-8] - Rebuild again -7 was build in wrong target [1.22…
-
High max 7.5ELSA-2026-19181 2 CVEs
Important: golang security update (Oracle Linux 9)
[1.26.2-1.0.1] - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var [1.26.2-1] - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 [1.26.1-1] - Update to Go 1.26.1 - Resolves: RHEL-153434 [1.25.7-1] - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 …
-
High max 7.5ELSA-2026-19184 1 CVE
Important: grafana-pcp security update (Oracle Linux 9)
[5.1.1-14] - Resolves RHEL-158769: CVE-2026-25679
-
High max 7.5ELSA-2026-19185 1 CVE
Important: grafana security update (Oracle Linux 9)
[10.2.6-21] - Resolves RHEL-158767: CVE-2026-25679
-
High max 7.5ELSA-2026-19186 1 CVE
Important: buildah security update (Oracle Linux 9)
[1.43.1-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.43.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 [2:1.43.0-3] - update to the lat…
-
Medium max 7.4ELSA-2026-19187 1 CVE
Moderate: compat-openssl11 security update (Oracle Linux 9)
[1:1.1.1k-5.2] - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723
-
Medium max 8.7ELSA-2026-19189 2 CVEs
Moderate: python-tornado security update (Oracle Linux 9)
[6.5.5-1] - Update to 6.5.5 Resolves: RHEL-160942
-
Low max 5.3ELSA-2026-19197 1 CVE
Low: python-jwcrypto security update (Oracle Linux 9)
[1.5.6-3] - Limit max plaintext size for JWE decompression Resolves: RHEL-166029
-
Medium max 8.2ELSA-2026-19200 2 CVEs
Moderate: corosync security update (Oracle Linux 9)
[3.1.10-1.1] - Resolves: RHEL-163816 - Resolves: RHEL-163837 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) [3.1.10-1] - Resolves: RHEL-122942 - New upstream re…
-
High max 9.8ELSA-2026-19201 25 CVEs
Important: firefox security update (Oracle Linux 9)
[140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
-
High max 7.5ELSA-2026-19206 18 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.52.3-1] - Update to 2.52.3 [2.50.4-1] - Update to 2.50.4 [2.50.3-1] - Update to 2.50.3 [2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0 [2.48.5-1] - Update to 2.48.5 [2.48.3-1] - Update to 2.48.3 [2.48.2-1] - Update to 2.48.2 - Reenable JIT [2.4…
-
Medium max 7.5ELSA-2026-19208 1 CVE
Moderate: freeipmi security update (Oracle Linux 9)
[1.6.17-1] - Update to 1.6.17, fixes CVE-2026-33554
-
High max 7.5ELSA-2026-19210 1 CVE
Important: gdk-pixbuf2 security update (Oracle Linux 9)
* Tue Apr 21 2026 Benjamin Otte <botte@redhat.com - 2.42.6-6.1 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069
-
Medium max 5.5ELSA-2026-19213 1 CVE
Moderate: systemd security update (Oracle Linux 9)
[252-67.0.1.el9_8.2] - serialize: don't allocate 1M on the stack just like that [LINUX-16166] - Route logs from container mapped uids to the system journal [Orabug: 38135007] - Drop delay when nspawn fails to reset loginuid [Orabug: 37793135] - Improve loggin…
-
High max 9.1ELSA-2026-19216 3 CVEs
Important: python3.9 security update (Oracle Linux 9)
[3.9.25-7.0.1] - Remove upstream URL reference [3.9.25-7] - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 [3.9.25-6] - Security fix for CVE-2026-4519 Resolves: RHEL-158117 [3.9.25-5] - Rebuilding previous fixes for diff…
-
Medium max 7.5ELSA-2026-19218 1 CVE
Moderate: openssl security update (Oracle Linux 9)
[3.5.5-2.0.1] - Replace upstream references [Orabug: 34340177] [1:3.5.5-2] - Fix CVE-2026-31790 Resolves: RHEL-161586 [1:3.5.5-1] - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-…
-
High max 7.5ELSA-2026-19219 5 CVEs
Important: openssh security update (Oracle Linux 9)
[9.9p1-7.0.2] - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el10_2 ML-KEM/NIST backport [Orabug: 39423076] [9.9p1-7.0.1] - Upstream references found with /usr/bin/ssh [Orabug: 37814929] [9.9p1-7 + 0.10.4-9] - Version bump [9.9p1-5 + …
-
High max 7.4ELSA-2026-19220 1 CVE
Important: sudo security update (Oracle Linux 9)
[1.9.17p2-3] - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166069 [1.9.17p2-2] - Request to backport support for regex in sudo [rhel-9] Resolves: RHEL-1376 - Rebase of sudo to 1.9.17p2 [rhel-9] Resolves: RHE…
-
High max 8.2ELSA-2026-19224 1 CVE
Important: vim security update (Oracle Linux 9)
[2:8.2.2637-26.0.1.el9_8.4] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-26.4] - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass [2:8.2.2637-26.3] - Related: RHEL-159630 rebuild to build with exception target …
-
High max 8.8
Important: kernel security update (Oracle Linux 9)
[5.14.0-687.5.3] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…
-
High max 9.8ELSA-2026-13977 5 CVEs
Important: firefox security update (Oracle Linux 7)
[140.9.1-1.0.1] - Update to 140.9.1 ESR [Orabug: 39324689][CVE-2026-5731][CVE-2026-5732] [CVE-2026-5734][CVE-2026-33416][CVE-2026-33636] [140.9.0-1.0.1] - Update to 140.9.0 ESR [Orabug: 39361657][CVE-2026-4684][CVE-2026-4685] [CVE-2026-4686][CVE-2026-4687][CV…
-
High max 10.0ELSA-2026-8427 37 CVEs
Important: firefox security update (Oracle Linux 7)
[140.9.0-1.0.1] - Update to 140.9.0 ESR [Orabug: 39361657][CVE-2026-4684][CVE-2026-4685] [CVE-2026-4686][CVE-2026-4687][CVE-2026-4688][CVE-2026-4689][CVE-2026-4690] [CVE-2026-4691][CVE-2026-4692][CVE-2026-4693][CVE-2026-4694][CVE-2026-4695] [CVE-2026-4696][CV…
-
High max 7.5ELSA-2026-25110 2 CVEs
Important: .NET 8.0 security update (Oracle Linux 8)
[8.0.128-1.0.1] - Add support for Oracle Linux [8.0.128-1] - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181052 [8.0.126-2] - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163413 [8.0.125-2] - Update to .NET SDK 8.0.125 and…
-
High max 7.5ELSA-2026-25113 2 CVEs
Important: .NET 9.0 security update (Oracle Linux 8)
[9.0.118-1.0.1] - Add support for Oracle Linux [9.0.118-1] - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181550 [9.0.116-2] - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389 [9.0.115-2] - Update to .NET SDK 9.0.115 and…
-
High max 7.5ELSA-2026-25114 2 CVEs
Important: .NET 10.0 security update (Oracle Linux 8)
[10.0.109-1.0.1] - Add support for Oracle Linux [10.0.109-1] - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181555 [10.0.106-2] - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163381 [10.0.104-2] - Update to .NET SDK 10.0.…