Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

  • High max 8.8
    ELSA-2026-11504 1 CVE

    Important: PackageKit security update (Oracle Linux 9)

    [1.2.6-2.0.1] - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch [1.2.6-2] - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170502

  • High max 7.5
    ELSA-2026-11704 2 CVEs

    Important: grafana-pcp security update (Oracle Linux 9)

    [5.1.1-14] - Resolves RHEL-166656: CVE-2026-32282 - Resolves RHEL-167661: CVE-2026-32283

  • High max 7.5
    ELSA-2026-11711 2 CVEs

    Important: grafana security update (Oracle Linux 9)

    [10.2.6-21] - Resolves RHEL-166655: CVE-2026-32282 - Resolves RHEL-167660: CVE-2026-32283

  • High max 7.5
    ELSA-2026-11712 2 CVEs

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-25] - Resolves RHEL-166432: CVE-2026-32282 - Resolves RHEL-167473: CVE-2026-32283

  • High max 9.1
    ELSA-2026-11077 2 CVEs

    Important: python3 security update (Oracle Linux 8)

    [3.6.8-76.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-76] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128

  • Medium max 6.2
    ELSA-2026-11349 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-21.4] - Fix CVE-2025-9714 (RHEL-119279) [2.9.7.21.3] - Fix CVE-2025-32415 (RHEL-100177) [2.9.7.21.2] - Fix CVE-2025-7425 (RHEL-102797) [2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424)

  • Medium
    ELSA-2026-65202 0 CVEs

    Moderate: oci-utils security update (Oracle Linux 8)

    [-- 0.14.0-21] - Update the debugging log file path. [Orabug: 39250938]

  • High max 7.8
    ELSA-2026-11369 3 CVEs

    Important: xorg-x11-server-Xwayland security update (Oracle Linux 9)

    [23.2.7-6] - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163198 Resolves: https://redhat.atlassian.net/browse/RHEL-163294 Resolves: https://redhat.atlassian.net/…

  • High max 9.8
    ELSA-2026-11360 2 CVEs

    Important: LibRaw security update (Oracle Linux 9)

    [0.21.1-2] - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165373, RHEL-165456

  • High max 7.8
    ELSA-2026-11388 3 CVEs

    Important: xorg-x11-server security update (Oracle Linux 9)

    [1.20.11-33] - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163225 Resolves: https://redhat.atlassian.net/browse/RHEL-163307 Resolves: https://redhat.atlassian.ne…

  • High max 7.8
    ELSA-2026-11352 3 CVEs

    Important: xorg-x11-server-Xwayland security update (Oracle Linux 10)

    [24.1.5-6] - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163188 Resolves: https://redhat.atlassian.net/browse/RHEL-163284 Resolves: https://redhat.atlassian.net/…

  • High max 8.1
    ELSA-2026-10713 1 CVE

    Important: pcs security update (Oracle Linux 10)

    [0.12.1-1.el10_1.3] - Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.23.2 Resolves: RHEL-164062

  • High max 8.2
    ELSA-2026-11389 1 CVE

    Important: vim security update (Oracle Linux 10)

    [9.1.083-6.0.1.el10_1.4] - Remove upstream references [Orabug: 31197557] [2:9.1.083-6.4] - Resolves: RHEL-164951 vim: arbitrary command execution via modeline sandbox bypass [2:9.1.083-6.3] - RHEL-159615 CVE-2026-33412 vim: Vim: Arbitrary code execution via c…

  • High max 7.5
    ELSA-2026-11412 1 CVE

    Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)

    [0.2.3-5] - Bump release for rebuild

  • High max 7.5
    ELSA-2026-11413 1 CVE

    Important: yggdrasil security update (Oracle Linux 10)

    [0.4.8-4] - Bump release for rebuild

  • High max 7.5
    ELSA-2026-10702 18 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.52.3-1] - Update to 2.52.3

  • High max 7.5
    ELSA-2026-10741 1 CVE

    Important: gdk-pixbuf2 security update (Oracle Linux 8)

    * Wed Apr 22 2026 Benjamin Otte <botte@redhat.com - 2.36.12-8 - Backport fixes for CVE-2026-5201 - Related: RHEL-163056

  • High max 9.1
    ELSA-2026-10950 11 CVEs

    Important: python3.12 security update (Oracle Linux 8)

    [3.12.13-2] - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168130, RHEL-167892 [3.12.13-1] - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CV…

  • High max 9.1
    ELSA-2026-11062 2 CVEs

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.13-7.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-7] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168129, RHEL-167891

  • High max 9.8
    ELSA-2026-10704 6 CVEs

    Important: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.9-1] - Update to Go 1.25.9 (fips-2) - Resolves: RHEL-169932 [1.25.7-2] - Upd…

  • High max 9.8
    ELSA-2026-10766 26 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 8)

    [140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.10.0-1] - Update to 140.10.0 ESR

  • High max 8.5
    ELSA-2026-10739 4 CVEs

    Important: tigervnc security update (Oracle Linux 9)

    [1.15.0-6.1] - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-1677…

  • High max 7.5
    ELSA-2026-9683 7 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.492.b09-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.492.b09-1] - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate …

  • High max 7.5
    ELSA-2026-10708 1 CVE

    Important: gdk-pixbuf2 security update (Oracle Linux 9)

    * Tue Apr 21 2026 Benjamin Otte <botte@redhat.com - 2.42.6-6.1 - Backport fixes for CVE-2026-5201 - Related: RHEL-163067

  • High max 9.1
    ELSA-2026-10745 2 CVEs

    Important: python3.12 security update (Oracle Linux 9)

    [3.12.12-4.0.1.el9_7.3] - Remove upstream URL reference [3.12.12-4.3] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168156, RHEL-167914 [3.12.12-4.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158051 [3.12.12-4.1] - Security fixes for …

  • High max 9.1
    ELSA-2026-10774 2 CVEs

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.13-5.3.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-5.3] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167913, RHEL-168155

  • High max 9.1
    ELSA-2026-10949 2 CVEs

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.25-3.0.1.el9_7.3] - Remove upstream URL reference [3.9.25-3.3] - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-168157, RHEL-167915 [3.9.25-3.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158052 [3.9.25-3.1] - Security fixes for C…

  • High max 7.1
    ELSA-2026-1939 1 CVE

    Important: python3.12-wheel security update (Oracle Linux 9)

    [0.41.2-3.1] - Security fix for CVE-2026-24049 Resolves: RHEL-143652

  • High max 9.8
    ELSA-2026-10757 26 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 9)

    [140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 7.5
    ELSA-2026-10707 1 CVE

    Important: gdk-pixbuf2 security update (Oracle Linux 10)

    [2.42.12-5] - jpeg: Reject unsupported number of components

  • High max 9.1
    ELSA-2026-10711 2 CVEs

    Important: python3.12 security update (Oracle Linux 10)

    [3.12.12-3.0.1.el10_1.3] - Remove upstream URL reference [3.12.12-3.3] - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167885, RHEL-168119 [3.12.12-3.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158127 [3.12.12-3.1] - Security fixes for…

  • High max 7.4
    ELSA-2026-10758 1 CVE

    Important: sudo security update (Oracle Linux 10)

    [1.9.15-10.p5] - Resolves: RHEL-164619 - CVE-2026-35535 sudo: Sudo: Privilege escalation due to failure in privilege drop calls

  • High max 7.5
    ELSA-2026-9689 8 CVEs

    Important: java-21-openjdk security update (Oracle Linux 8)

    [1:21.0.11.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.11.0.10-1] - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump fr…

  • High max 9.8
    ELSA-2026-10767 26 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 10)

    [140.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.10.0-1] - Update to 140.10.0 ESR

  • High max 8.1
    ELSA-2026-10710 1 CVE

    Important: pcs security update (Oracle Linux 9)

    [0.11.10-1.el9_7.3] - Fixed CVE-2026-4800 by updating pcs-web-ui to 0.1.23.2 Resolves: RHEL-164191

  • High max 8.3
    ELSA-2026-7032 1 CVE

    Important: libpng12 security update (Oracle Linux 7)

    [1.2.50-10.0.1] - Fix CVE-2026-25646: heap buffer overflow in png_set_quantize [Orabug: 39183864]

  • Medium max 6.5
    ELSA-2026-50239 6 CVEs

    Moderate: virt:kvm_utils3 bug fix update (Oracle Linux 8)

    hivex [1.3.18-23] - Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976194 [1.3.18-22.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504) resolve…

  • High max 7.5
    ELSA-2026-10135 1 CVE

    Important: buildah security update (Oracle Linux 9)

    [1.41.8-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.41.8-3] - rebuild for CVE-2026-34986 - Resolves: RHEL-165027

  • High max 9.8
    ELSA-2026-10219 6 CVEs

    Important: golang security update (Oracle Linux 9)

    [1.25.9-1] - Update to Go 1.25.9 (fips-2) - Resolves: RHEL-169931

  • High max 6.5
    ELSA-2026-10226 1 CVE

    Important: grafana security update (Oracle Linux 9)

    [10.2.6-20] - Resolves RHEL-161802: CVE-2026-27877