Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

Medium max 6.8

ELSA-2026-5603 1 CVE

Moderate: opencryptoki security update (Oracle Linux 9)

[3.25.0-4.2] - Resolves: RHEL-144820, Privilege Escalation or Data Exposure via Symlink Following

Mar 24, 2026
Medium max 6.6

ELSA-2026-5602 1 CVE

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-23.0.1.el9_7.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-23.1] - RHEL-147940 CVE-2026-25749 vim: Heap Overflow in Vim

Mar 24, 2026
High max 9.8

ELSA-2026-50160 152 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-200.74.27] - Revert 'uek-rpm: update kABI for FIPS regarding crypto_user' (Saeed Mirzamohammadi) [Orabug: 39033195] - Revert 'fips: remove crypto_user from the FIPS module' (Saeed Mirzamohammadi) [Orabug: 39033195] - Revert 'crypto_user: use FIPS algo…

Mar 20, 2026
Medium max 7.5

ELSA-2026-4772 2 CVEs

Moderate: glibc security update (Oracle Linux 8)

[2.28-251.0.4.31] - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: February-24-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.4.27 - Fixed orabug 38834066 stpcpy MTE support Reviewed…

Mar 19, 2026
High max 7.8

ELSA-2026-5113 4 CVEs

Important: gimp:2.8 security update (Oracle Linux 8)

gimp [2:2.8.22-26.5] - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2048 [2:2.8.22-26.4] - fix CVE-2025-14422 [2:2.8.22-26.3] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 …

Mar 19, 2026
High max 7.5

ELSA-2026-5080 1 CVE

Important: libarchive security update (Oracle Linux 9)

[3.5.3-7] - Resolves: CVE-2026-4111

Mar 19, 2026
High max 7.5

ELSA-2026-5063 1 CVE

Important: libarchive security update (Oracle Linux 10)

[3.7.7-5] - Resolves: CVE-2026-4111

Mar 19, 2026
High max 9.1

ELSA-2026-5146 3 CVEs

Important: yggdrasil security update (Oracle Linux 10)

[0.4.8-3] - Bump release for rebuild

Mar 19, 2026
High max 7.5

ELSA-2026-5145 1 CVE

Important: yggdrasil-worker-package-manager security update (Oracle Linux 10)

[0.2.3-4] - Bump release for rebuild

Mar 19, 2026
High max 7.5

ELSA-2026-4148 1 CVE

Important: python-pyasn1 security update (Oracle Linux 7)

[0.1.9-7.0.1] - Fixes CVE-2026-23490 fixes potential memory exhaustion [Orabug: 39060516]

Mar 18, 2026
Medium max 6.5

ELSA-2026-4828 6 CVEs

Moderate: mysql security update (Oracle Linux 9)

[8.0.45-1] - Rebase to 8.0.45

Mar 18, 2026
Medium max 7.8

ELSA-2026-4760 1 CVE

Moderate: grub2 security update (Oracle Linux 9)

[2.06-114.0.1.el9_7.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946…

Mar 18, 2026
Medium max 4.8

ELSA-2026-4898 2 CVEs

Moderate: capstone security update (Oracle Linux 9)

[4.0.2-11] - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137758

Mar 18, 2026
High max 8.3

ELSA-2026-4728 3 CVEs

Important: libpng security update (Oracle Linux 8)

[2:1.6.34-10] - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659)

Mar 17, 2026
High max 9.1

ELSA-2026-4672 3 CVEs

Important: container-tools:rhel8 security update (Oracle Linux 8)

aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 [2:1.10.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 [2:1.9.0-1] - update to https://github.com/containers/a…

Mar 17, 2026
Medium max 7.8

ELSA-2026-4648 1 CVE

Moderate: grub2 security update (Oracle Linux 8)

[2.02-170.0.1.el8_10.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 3769394…

Mar 17, 2026
Medium max 7.8

ELSA-2026-4759 2 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.41.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Mar 17, 2026
Medium max 6.0

ELSA-2026-4713 4 CVEs

Moderate: python3.12 security update (Oracle Linux 10)

[3.12.12-3.0.1.el10_1.1] - Remove upstream URL reference [3.12.12-3.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143054 RHEL-143105 RHEL-144852

Mar 17, 2026
Medium max 6.6

ELSA-2026-4715 1 CVE

Moderate: vim security update (Oracle Linux 10)

[9.1.083-6.0.1.el10_1.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-6.1] - RHEL-147922 CVE-2026-25749 vim: Heap Overflow in Vim

Mar 17, 2026
Medium max 6.8

ELSA-2026-4717 1 CVE

Moderate: opencryptoki security update (Oracle Linux 10)

[3.25.0-5.2] - Resolves: RHEL-144815, Privilege Escalation or Data Exposure via Symlink Following

Mar 17, 2026
Medium max 7.8

ELSA-2026-4649 1 CVE

Moderate: grub2 security update (Oracle Linux 10)

[2.12-29.0.1.el10_1.2] - efinet: Close and reopen card on failure [Orabug: 37808688] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub…

Mar 17, 2026
Medium max 5.9

ELSA-2026-4705 1 CVE

Moderate: nginx security update (Oracle Linux 10)

[2:1.26.3-2.0.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] [2:1.26.3-2] - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections

Mar 17, 2026
Medium max 7.8

ELSA-2026-4723 1 CVE

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.45.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Mar 17, 2026
High max 7.7

ELSA-2026-2714 5 CVEs

Important: freerdp security update (Oracle Linux 7)

[2:2.2.0-5.0.1] - fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533 CVE-2026-23884 [Orabug: 38971897]

Mar 16, 2026
High max 8.8

ELSA-2026-4629 1 CVE

Important: libvpx security update (Oracle Linux 10)

[1.14.1-6] - Add patch for superindex full Resolves: RHEL-150332

Mar 16, 2026
High max 7.5

ELSA-2026-4443 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 8)

[9.0.115-1.0.1] - Add support for Oracle Linux [9.0.115-1] - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152941

Mar 13, 2026
Medium max 5.5

ELSA-2026-50151 1 CVE

Moderate: dtrace security update (Oracle Linux 8)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement: The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 5.5

ELSA-2026-50152 1 CVE

Moderate: dtrace security update (Oracle Linux 8)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 5.5

ELSA-2026-50153 1 CVE

Moderate: dtrace security update (Oracle Linux 9)

[2.0.6-1] - Fix dtprobed unsafe probe description handling (CVE-2026-21991). [Orabug: 39054018] Credit Statement: The following people or organizations reported security vulnerabilities addressed by this ELSA to Oracle: Dhiraj Mishra: CVE-2026-21991

Mar 13, 2026
Medium max 6.0

ELSA-2026-4463 4 CVEs

Moderate: python3.12 security update (Oracle Linux 8)

[3.12.12-3] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143065 Resolves: RHEL-143122 Resolves: RHEL-144862

Mar 12, 2026
Medium max 6.0

ELSA-2026-4473 4 CVEs

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.13-5.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-5] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143064 Resolves: RHEL-143121 Resolves: RHEL-144861

Mar 12, 2026
Medium max 6.6

ELSA-2026-4442 1 CVE

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-22.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-22] - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim

Mar 12, 2026
High max 7.5

ELSA-2026-4455 1 CVE

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.125-1.0.1] - Add support for Oracle Linux [8.0.125-1] - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152929

Mar 12, 2026
High max 7.5

ELSA-2026-4458 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 8)

[10.0.104-1.0.1] - Add support for Oracle Linux [10.0.104-1] - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152949

Mar 12, 2026
High max 8.8

ELSA-2026-4447 1 CVE

Important: libvpx security update (Oracle Linux 9)

[1.9.0-10] - Add patch for superindex full Resolves: RHEL-150344

Mar 12, 2026
Medium max 7.4

ELSA-2026-4472 1 CVE

Moderate: compat-openssl11 security update (Oracle Linux 9)

[1:1.1.1k-5.2] - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142722

Mar 12, 2026
High max 7.5

ELSA-2026-4445 2 CVEs

Important: .NET 10.0 security update (Oracle Linux 9)

[10.0.104-1.0.1] - Add support for Oracle Linux [10.0.104-1] - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152952

Mar 12, 2026
High max 7.5

ELSA-2026-4454 1 CVE

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.125-1.0.1] - Add support for Oracle Linux [8.0.125-1] - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152936

Mar 12, 2026
Medium max 5.3

ELSA-2026-50149 2 CVEs

Moderate: gnutls security update (Oracle Linux 9)

[3.8.3-10_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409] - Update FIPS module name for Oracle Linux [Orabug: 35925409] [3.8.3-10] - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name …

Mar 12, 2026
High max 7.5

ELSA-2026-4456 2 CVEs

Important: .NET 9.0 security update (Oracle Linux 9)

[9.0.115-1.0.1] - Add support for Oracle Linux [9.0.115-1] - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152944

Mar 12, 2026