Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

  • High max 7.5
    ELSA-2026-9686 8 CVEs

    Important: java-17-openjdk security update (Oracle Linux 8)

    [1:17.0.19.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.19.0.10-1] - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk…

  • Medium max 7.5
    ELSA-2026-50241 10 CVEs

    Moderate: qemu-kvm security update (Oracle Linux 9)

    [7.2.0-37.el9] - hashing: use mmap/munmap for isal functions (Elena Ufimtseva) [Orabug: 39165991] - multifd: replace allocations/free with mmap/munmap (Elena Ufimtseva) [Orabug: 39165991] - page_cache: use mmap() based data pool for cache items (Elena Ufimtse…

  • High max 9.8
    ELSA-2026-10217 6 CVEs

    Important: golang security update (Oracle Linux 10)

    [1.25.9-3] - Do not ignore any tests in check [1.25.9-2] - Skip terminal test in container [1.25.9-1] - Update to Go 1.25.9 (fips-2)

  • High
    ELSA-2026-65027 0 CVEs

    Important: oci-utils security update (Oracle Linux 8)

    [-- 0.14.0-19] - Fix secondary vnic default metric to be a lower priority value [Orabug: 38154477]

  • High max 8.2
    ELSA-2026-9693 12 CVEs

    Important: java-25-openjdk security update (Oracle Linux 9)

    [1:25.0.3.0.9-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:25.0.3.0.9-1] - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, …

  • High max 6.5
    ELSA-2026-10223 1 CVE

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-24] - Resolves RHEL-161790: CVE-2026-27877

  • High max 7.5
    ELSA-2026-9692 18 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.52.3-0.1] - Update to 2.52.1

  • High max 7.5
    ELSA-2026-8312 1 CVE

    Important: bind security update (Oracle Linux 10)

    [9.18.33-10.0.2.el10_1.3] - Hard require needed openssl-libs [Orabug: 38742109] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.18.33-10.3] - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) …

  • High max 9.8
    ELSA-2026-9264 2 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-124.52.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 9.8
    ELSA-2026-9638 5 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [140.9.1-1.0.1] - Add Oracle prefs [140.9.1-1] - Update to 140.9.1 ESR

  • Medium max 5.5
    ELSA-2026-9666 2 CVEs

    Moderate: wireshark security update (Oracle Linux 10)

    [4.4.2-4.0.1.el10_1.4] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-4.4] - Resolves: RHEL-152921 - CVE-2026-3203 Buffer Over-read [1:4.4.2-4.3] - Resolves: RHEL-152912 - CVE-2026-3201 Improperly Controlled Sequential M…

  • High max 7.5
    ELSA-2026-8456 1 CVE

    Important: osbuild-composer security update (Oracle Linux 8)

    [101.4-5.0.1] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - su…

  • High max 9.8
    ELSA-2026-9345 5 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [140.9.1-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.9.1] - Add OpenELA debranding [140.9.1-1] - Update to 140.9.1 ESR

  • High max 9.8
    ELSA-2026-9131 2 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.120.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • High max 7.5
    ELSA-2026-9044 1 CVE

    Important: osbuild-composer security update (Oracle Linux 9)

    [149-5.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OL…

  • High max 8.1
    ELSA-2026-6713 2 CVEs

    Important: ImageMagick security update (Oracle Linux 7)

    [6.9.10.68-7.0.9] - Fix CVE-2026-28691 and CVE-2026-28693 [Orabug: 39174244] [6.9.10.68-7.0.7] - Fixes Local File Disclosure via Path Traversal (CVE-2026-25965) [Orabug: 39118995] - Fixes Memory allocation with excessive without limits in the internal SVG dec…

  • High max 7.5
    ELSA-2026-8468 4 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.126-1.0.1] - Add support for Oracle Linux [8.0.126-1] - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163413

  • High max 7.5
    ELSA-2026-8945 2 CVEs

    Important: freerdp security update (Oracle Linux 8)

    [2:2.11.7-7] - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162949, RHEL-162965

  • High max 5.1
    ELSA-2026-8861 1 CVE

    Important: giflib security update (Oracle Linux 8)

    [5.1.4-4] - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154853)

  • High max 8.4
    ELSA-2026-8863 1 CVE

    Important: OpenEXR security update (Oracle Linux 8)

    [2.2.0-12.1] - fix CVE-2026-27622

  • High max 8.4
    ELSA-2026-8888 1 CVE

    Important: openexr security update (Oracle Linux 9)

    [3.1.1-3.1] - fix CVE-2026-27622

  • High max 7.5
    ELSA-2026-8469 4 CVEs

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.126-1.0.1] - Add support for Oracle Linux [8.0.126-1] - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163416

  • High max 5.1
    ELSA-2026-8859 1 CVE

    Important: giflib security update (Oracle Linux 9)

    [5.2.1-9.1] - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154863)

  • High max 9.8
    ELSA-2026-8921 2 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-611.49.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • High max 7.5
    ELSA-2026-8842 2 CVEs

    Important: delve security update (Oracle Linux 10)

    [1.25.2-3.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-3] - Rebuild with latest Go

  • High max 7.5
    ELSA-2026-8841 1 CVE

    Important: go-rpm-macros security update (Oracle Linux 9)

    [3.6.0-14] - Rebuild with latest Go - Resolves: RHEL-158726

  • High max 7.5
    ELSA-2026-8840 1 CVE

    Important: go-rpm-macros security update (Oracle Linux 10)

    [3.6.0-8] - Rebuild with latest Go

  • High max 5.1
    ELSA-2026-8858 1 CVE

    Important: giflib security update (Oracle Linux 10)

    [5.2.1-22.1] - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154849)

  • High max 8.7
    ELSA-2026-8339 4 CVEs

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.20.2-1] - Update to version 20.20.2 - Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-154018 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 nodejs-nodemon [3…

  • Medium max 5.9
    ELSA-2026-5393 2 CVEs

    Moderate: python security update (Oracle Linux 7)

    [2.7.5-94.0.5] - Fix for CVE-2025-15366 and CVE-2025-15367 [Orabug: 39114639] [2.7.5-94.0.3] - Fix for CVE-2025-12084 [Orabug: 38902314]

  • Medium max 7.2
    ELSA-2026-6220 1 CVE

    Moderate: 389-ds-base security update (Oracle Linux 7)

    [1.3.11.1-5.0.7] - Security fix for CVE-2025-14905 [Orabug: 39146844] [1.3.11.1-5.0.5] - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [Orabug: 38388205]

  • Medium max 6.0
    ELSA-2026-6464 3 CVEs

    Moderate: python3 security update (Oracle Linux 7)

    [3.6.8-21.0.9] - Security update CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 [Orabug: 39159999] [3.6.8-21.0.7] - Security update CVE-2025-12084 [Orabug: 38971895] [3.6.8-21.0.5] - tarfile now validates archives to ensure member offsets are non-negative [Ora…

  • High max 9.2
    ELSA-2026-8317 2 CVEs

    Important: squid:4 security update (Oracle Linux 8)

    libecap [1.0.1-2] - Resolves: #1695587 - Ensure modular RPM upgrade path [1.0.1-1] - new version 1.0.1 - autoconf.h moved from lookaside to dist-git [1.0.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.0.0-6] - Rebuilt for…

  • High max 7.5
    ELSA-2026-8473 4 CVEs

    Important: .NET 10.0 security update (Oracle Linux 8)

    [10.0.106-1.0.1] - Add support for Oracle Linux [10.0.106-1] - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163381

  • High max 7.5
    ELSA-2026-8475 4 CVEs

    Important: .NET 9.0 security update (Oracle Linux 8)

    [9.0.116-1.0.1] - Add support for Oracle Linux [9.0.116-1] - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389

  • High max 7.5
    ELSA-2026-8534 2 CVEs

    Important: libarchive security update (Oracle Linux 8)

    [3.3.3-7] - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121

  • Medium max 5.9
    ELSA-2026-8096 1 CVE

    Moderate: perl:5.32 security update (Oracle Linux 8)

    perl [4:5.32.1-474] - Resolves: RHEL-153834 - Fix CVE-2025-40909 - Clone dirhandles without fchdir [4:5.32.1-473] - Fix CVE-2023-47038 - Added perl-autouse and perl-ExtUtils-MM-Utils to perl run-requires [4:5.32.1-472] - Add definition of OPTIMIZE to .ph file…

  • High max 7.5
    ELSA-2026-8457 2 CVEs

    Important: freerdp security update (Oracle Linux 9)

    [2:2.11.7-1.6] - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-162958, RHEL-162978

  • High max 9.8
    ELSA-2026-8459 5 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [140.9.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.9.1] - Add OpenELA debranding [140.9.1-1] - Update to 140.9.1 ESR

  • High max 7.5
    ELSA-2026-8471 4 CVEs

    Important: .NET 10.0 security update (Oracle Linux 9)

    [10.0.106-1.0.1] - Add support for Oracle Linux [10.0.106-1] - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163384