Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

  • High max 7.7
    ELSA-2026-2081 7 CVEs

    Important: freerdp security update (Oracle Linux 8)

    [2:2.11.7-2] - Backport several CVE fixes Resolves: RHEL-142417, RHEL-142401, RHEL-142385, RHEL-142369, RHEL-142353 Resolves: RHEL-142337, RHEL-142321

  • High max 7.1
    ELSA-2026-2090 1 CVE

    Important: python3.12-wheel security update (Oracle Linux 8)

    [0.41.2-4] - Security fix for CVE-2026-24049 Resolves: RHEL-143636

  • Medium max 6.0
    ELSA-2026-2128 4 CVEs

    Moderate: python3 security update (Oracle Linux 8)

    [3.6.8-73.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-73] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120…

  • High max 7.5
    ELSA-2026-2042 1 CVE

    Important: brotli security update (Oracle Linux 9)

    [1.0.9-9] - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy [1.0.9-8] - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy

  • High max 7.7
    ELSA-2026-2048 7 CVEs

    Important: freerdp security update (Oracle Linux 9)

    [2:2.11.7-1.1] - Backport several CVE fixes Resolves: RHEL-142426, RHEL-142410, RHEL-142394, RHEL-142378, RHEL-142362, Resolves: RHEL-142346, RHEL-142330

  • High max 8.8
    ELSA-2026-2039 3 CVEs

    Important: fontforge security update (Oracle Linux 9)

    [20201107-7] - Resolves: RHEL-138206 CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138228 CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow - Resolves: RHEL-138158 CVE-2025-15269 SFD File Parsing Use-After-Free

  • High max 7.1
    ELSA-2026-1902 1 CVE

    Important: python-wheel security update (Oracle Linux 10)

    [1:0.41.2-5.1] - Security fix for CVE-2026-24049 Resolves: RHEL-143630

  • Medium max 4.3
    ELSA-2026-1838 1 CVE

    Moderate: image-builder security update (Oracle Linux 10)

    [45-1.0.2] - Fix CVE-2025-58183

  • High max 7.5
    ELSA-2026-1905 1 CVE

    Important: fence-agents security update (Oracle Linux 10)

    [4.16.0-13.2] - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142444

  • High max 8.6
    ELSA-2026-2182 2 CVEs

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-9] - Fix CVE-2026-0719 [3.6.5-8] - Fix CVE-2025-14523 [3.6.5-7] - Add patch for CVE-2025-12105 [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs

  • Medium max 6.1
    ELSA-2026-1852 1 CVE

    Moderate: util-linux security update (Oracle Linux 8)

    [2.32.1-48.0.1] - Orabug 35995159 - report lost loop device [2.32.1-48] - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104]

  • High max 7.5
    ELSA-2026-1904 1 CVE

    Important: resource-agents security update (Oracle Linux 8)

    [4.9.0-54.28] - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142448

  • High max 7.5
    ELSA-2026-1906 1 CVE

    Important: fence-agents security update (Oracle Linux 8)

    [4.2.1-129.21] - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142447

  • High max 7.5
    ELSA-2026-1903 1 CVE

    Important: fence-agents security update (Oracle Linux 9)

    [4.10.0-98.5] - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142459

  • Medium max 6.1
    ELSA-2026-1913 1 CVE

    Moderate: util-linux security update (Oracle Linux 9)

    [2.37.4-21.0.1] - Orabug 35995271 - report lost loop device

  • Medium max 7.5
    ELSA-2026-1831 1 CVE

    Moderate: qemu-kvm security update (Oracle Linux 10)

    [10.0.0-14.el10_1.5] - kvm-Revert-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-be.patch [RHEL-135453] - Resolves: RHEL-135453 (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: pdcm [rhel-…

  • Medium max 4.3
    ELSA-2026-1837 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 10)

    [149-4.0.1] - Add missing dependency over dracut-config-rescue for image-installer [Orabug: 38587453] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893…

  • High max 7.5
    ELSA-2026-1843 6 CVEs

    Important: nodejs22 security update (Oracle Linux 10)

    [1:22.22.0-3] - Bump release to get correct RHEL build [1:22.22.0-2] - Filter for nodejs22.fmf in gating plan [1:22.22.0-1] - Update to 22.22.0 [1:22.19.0-3] - Unit-tests adjustment - disable internet/test-dgram-membership

  • High max 7.5
    ELSA-2026-1842 6 CVEs

    Important: nodejs24 security update (Oracle Linux 10)

    [1:24.13.0-1.0.1] - Update upstream references [1:24.13.0-1] - Update to 24.13.0 [1:24.11.1-2] - makefile: change package manager to RH one

  • High max 9.8
    ELSA-2026-0926 1 CVE

    Important: net-snmp security update (Oracle Linux 7)

    [1:5.7.2-49.0.3] - Fix out of bound access [Orabug: 38873509][CVE-2025-68615]

  • Medium max 7.5
    ELSA-2026-1825 1 CVE

    Moderate: curl security update (Oracle Linux 10)

    [8.12.1-2.el10_1.2] - openssl: respect system crypto policy for TLS max version (RHEL-128923) [8.12.1-2.el10_1.1] - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-122689

  • Medium max 6.3
    ELSA-2026-1828 2 CVEs

    Moderate: python3.12 security update (Oracle Linux 10)

    [3.12.12-3.0.1] - Remove upstream URL reference [3.12.12-3] - Security fix for CVE-2025-13836 Resolves: RHEL-140978 [3.12.12-2] - Security fix for CVE-2025-12084 Resolves: RHEL-135387

  • Medium max 9.8
    ELSA-2026-1662 10 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.100.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey […

  • Medium max 7.8
    ELSA-2026-1617 3 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-611.27.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

  • Medium max 6.1
    ELSA-2026-1696 1 CVE

    Moderate: util-linux security update (Oracle Linux 10)

    [2.40.2-15] - libblkid: use snprintf() instead of sprintf() [2.40.2-14] - Fix setpwnam() buffer use [CVE-2025-14104]

  • Medium max 7.8
    ELSA-2026-1714 1 CVE

    Moderate: wireshark security update (Oracle Linux 10)

    [4.4.2-4.0.1.el10_1.2] - Fix post script to not fail during initial installation [Orabug: 37565359] [1:4.4.2-4.2] - Resolves: RHEL-136916 - NULL Pointer Dereference in Wireshark (CVE-2025-9817) [1:4.4.2-4.1] - Resolves: RHEL-130425 - Access of Uninitialized P…

  • High max 7.5
    ELSA-2026-1715 1 CVE

    Important: golang-github-openprinting-ipp-usb security update (Oracle Linux 10)

    [0.9.27-4] - rebuild to fix CVE-2025-61729

  • High max 9.8
    ELSA-2026-1690 19 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-124.31.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 6.3
    ELSA-2026-1631 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [3.6.8-72.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-72] - Security fix for CVE-2025-12084 Resolves: RHEL-135911

  • High max 8.2
    ELSA-2026-1628 3 CVEs

    Important: php security update (Oracle Linux 10)

    [8.3.29-1] - rebase to 8.3.29

  • Medium max 9.8
    ELSA-2025-23947 11 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.16] - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} [Orabug: 38790244] - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} [Orabug: 38790244] - iomap: iomap: fix memory corruption when recor…

  • Medium max 6.5
    ELSA-2026-1592 1 CVE

    Moderate: iperf3 security update (Oracle Linux 8)

    [3.5-12] - Resolves: RHEL-136175 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • High max 7.8
    ELSA-2026-1574 1 CVE

    Important: gimp:2.8 security update (Oracle Linux 8)

    gimp [2:2.8.22-26.4] - fix CVE-2025-14422 pygobject2 pygtk2 python2-pycairo

  • Medium max 4.3
    ELSA-2026-50076 1 CVE

    Moderate: image-builder security update (Oracle Linux 9)

    [45-1.0.2] - Fix CVE-2025-58183

  • High max 8.8
    ELSA-2026-50075 12 CVEs

    Important: openssl security update (Oracle Linux 9)

    [3.5.1-7.0.1_fips] - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276] - Update FIPS module name [Orabug: 35824276] [3.5.1-7.0.1] - Enable openssl-fips-provider dependency [Orabu…

  • Medium max 6.5
    ELSA-2026-1595 1 CVE

    Moderate: iperf3 security update (Oracle Linux 9)

    [3.9-14.1] - Resolves: RHEL-136181 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • High max 8.2
    ELSA-2026-1409 6 CVEs

    Important: php:8.2 security update (Oracle Linux 9)

    php [8.2.30-1] - rebase to 8.2.30 php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

  • Medium max 6.5
    ELSA-2026-1597 1 CVE

    Moderate: iperf3 security update (Oracle Linux 10)

    [3.17.1-5] - Resolves: RHEL-136170 - iperf Heap Buffer Overflow (CVE-2025-54349)

  • High max 7.0
    ELSA-2026-0367 1 CVE

    Important: mariadb security update (Oracle Linux 7)

    [1:5.5.68-1.0.1] - Fixes CVE-2025-13699, remote code execution via improper path validation [Orabug: 38829265] - Fixes failing SSL and timezone tests

  • Medium max 8.8
    ELSA-2025-22910 7 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.15] - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() {CVE-2022-3640} [Orabug: 38742878] - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put [Orabug: 38742878] - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} …