Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

High max 8.2

ELSA-2026-1412 6 CVEs

Important: php:8.2 security update (Oracle Linux 8)

libzip [1.7.3-1] - update to 1.7.3 [1.6.1-1] - update to 1.6.1 - enable lzma support [1.5.2-1] - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available [1.5.1-1] - update to 1.5.1 - drop …

Jan 28, 2026
Medium max 4.3

ELSA-2026-1380 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 8)

[101.4-2.0.1] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - su…

Jan 28, 2026
High max 7.5

ELSA-2026-1518 1 CVE

Important: grafana-pcp security update (Oracle Linux 8)

[5.1.1-11] - Resolves RHEL-140538: CVE-2025-61729

Jan 28, 2026
Medium max 4.3

ELSA-2026-1381 1 CVE

Moderate: osbuild-composer security update (Oracle Linux 9)

[149-3.0.1] - Add missing dependency over dracut-config-rescue for image-installer [ORABUG: 38587453] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OL…

Jan 28, 2026
Medium max 6.3

ELSA-2026-1478 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.25-3.0.1] - Remove upstream URL reference [3.9.25-3] - Security fix for CVE-2025-12084 Resolves: RHEL-135897

Jan 28, 2026
High max 8.8

ELSA-2026-1473 12 CVEs

Important: openssl security update (Oracle Linux 9)

[3.5.1-7.0.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [3.5.1.openela.0.1] - Add OpenELA specific changes [1:3.5.1-7] …

Jan 28, 2026
High max 8.2

ELSA-2026-1429 3 CVEs

Important: php:8.3 security update (Oracle Linux 9)

php [8.3.29-1] - rebase to 8.3.29 php-pecl-apcu php-pecl-redis6 php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

Jan 28, 2026
High max 8.8

ELSA-2026-1472 12 CVEs

Important: openssl security update (Oracle Linux 10)

[3.5.1-7.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.1-7] - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69…

Jan 28, 2026
High max 7.5

ELSA-2026-0932 5 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 8)

[1.8.0.482.b08-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.482.b08-1] - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - …

Jan 27, 2026
High max 8.9

ELSA-2026-1240 3 CVEs

Important: fence-agents security update (Oracle Linux 8)

[4.2.1-129.20] - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139756, RHEL-140783 [4.2.1-129.17] - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136027 [4.2.1-129.16] - fence_nutanix_ahv: new fence agent Resolv…

Jan 27, 2026
High max 7.5

ELSA-2026-1344 1 CVE

Important: grafana security update (Oracle Linux 8)

[9.2.10-27.0.1] - Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520] [9.2.10-27] - Resolves RHEL-140537: CVE-2025-61729

Jan 27, 2026
Medium max 6.3

ELSA-2026-1374 2 CVEs

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.13-4.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-4] - Security fix for CVE-2025-13836 Resolves: RHEL-140992 [3.11.13-3] - Security fix for CVE-2025-12084 Resolves: RHEL-135390

Jan 27, 2026
High max 8.9

ELSA-2026-1239 3 CVEs

Important: fence-agents security update (Oracle Linux 9)

[4.10.0-98.4] - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139793, RHEL-140795 [4.10.0-98.1] - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136061

Jan 27, 2026
Medium max 7.5

ELSA-2026-1350 1 CVE

Moderate: curl security update (Oracle Linux 9)

[7.76.1-35.el9_7.3] - http: fix crash in rate-limited upload (RHEL-129493) [7.76.1-35.el9_7.2] - openssl: respect system crypto policy for TLS max version (RHEL-128921) [7.76.1-35.el9_7.1] - rebuild for rhel-9.7.0 z-stream (RHEL-121659) [7.76.1-35] - cookie: …

Jan 27, 2026
Medium max 5.3

ELSA-2026-1359 1 CVE

Moderate: gcc-toolset-15-binutils security update (Oracle Linux 9)

[2.44-3.1] - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130674)

Jan 27, 2026
Medium max 6.3

ELSA-2026-1408 2 CVEs

Moderate: python3.12 security update (Oracle Linux 9)

[3.12.12-4.0.1] - Remove upstream URL reference [3.12.12-4] - Release bump to correct the build for wrong release Related: RHEL-141026 [3.12.12-3] - Security fix for CVE-2025-13836 Resolves: RHEL-141026 [3.12.12-2] - Security fix for CVE-2025-12084 Resolves: …

Jan 27, 2026
Medium max 6.3

ELSA-2026-1410 2 CVEs

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.13-5.0.1] - Remove upstream URL reference [Orabug: 36073032] [3.11.13-5] - Security fix for CVE-2025-13836 Resolves: RHEL-141025 [3.11.13-4] - Security fix for CVE-2025-12084 Resolves: RHEL-135395

Jan 27, 2026
High max 9.8

ELSA-2026-1143 8 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-611.26.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Jan 27, 2026
Medium max 8.4

ELSA-2026-1334 2 CVEs

Moderate: glibc security update (Oracle Linux 10)

[2.39-58.0.1.7] - Forward port Oracle changes to 2.39-58.7. - Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: November-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-58.0.1.2 - Forward port Oracle changes to 2.39-58.2. - Rev…

Jan 27, 2026
Medium max 8.1

ELSA-2026-0079 1 CVE

Moderate: perl security update (Oracle Linux 7)

[4:5.16.3-299.0.1] - Fixed CVE-2023-31484 verify TLS certificates [Orabug: 38816274]

Jan 26, 2026
Medium

ELSA-2026-50071 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.351.3.3] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38884602] {CVE-2025-40022}

Jan 26, 2026
High max 8.9

ELSA-2026-1241 3 CVEs

Important: resource-agents security update (Oracle Linux 8)

[4.9.0-54.27] - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139760, RHEL-140787 [4.9.0-54.24] - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136031 [4.9.0-54.23] - nfsserver: add ability to set e.g. 'pipefs-d…

Jan 26, 2026
High max 8.9

ELSA-2026-1224 3 CVEs

Important: python3.11-urllib3 security update (Oracle Linux 8)

[1.26.12-6] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140555, RHEL-139408

Jan 26, 2026
High max 8.9

ELSA-2026-1226 3 CVEs

Important: python3.12-urllib3 security update (Oracle Linux 8)

[1.26.19-2] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139409

Jan 26, 2026
High max 8.8

ELSA-2026-1142 4 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.97.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Jan 26, 2026
High max 8.9

ELSA-2026-1254 3 CVEs

Important: python-urllib3 security update (Oracle Linux 8)

[1.24.2-9] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139410

Jan 26, 2026
High max 8.9

ELSA-2026-1088 3 CVEs

Important: python3.12-urllib3 security update (Oracle Linux 9)

[1.26.19-1.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139403

Jan 26, 2026
High max 8.9

ELSA-2026-1089 3 CVEs

Important: python3.11-urllib3 security update (Oracle Linux 9)

[1.26.12-5.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140565, RHEL-139404

Jan 26, 2026
High max 8.9

ELSA-2026-1087 3 CVEs

Important: python-urllib3 security update (Oracle Linux 9)

[1.26.5-6.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139401

Jan 26, 2026
High max 8.9

ELSA-2026-1086 3 CVEs

Important: python-urllib3 security update (Oracle Linux 10)

[1.26.19-2.1] - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139387

Jan 26, 2026
Medium

ELSA-2026-1178 1 CVE

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-124.29.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Jan 26, 2026
High max 7.5

ELSA-2026-0928 5 CVEs

Important: java-21-openjdk security update (Oracle Linux 8)

[1:21.0.10.0.7-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.10.0.7-1] - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that gr…

Jan 23, 2026
High max 7.1

ELSA-2026-0251 1 CVE

Important: libpng security update (Oracle Linux 7)

[2:1.5.13-8.0.1] - Fix CVE-2025-64720 [Orabug: 38824465]

Jan 22, 2026
Medium max 7.7

ELSA-2026-0991 1 CVE

Moderate: glib2 security update (Oracle Linux 8)

[2.56.4-168] - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase

Jan 22, 2026
High max 7.5

ELSA-2026-0927 5 CVEs

Important: java-17-openjdk security update (Oracle Linux 8)

[1:17.0.18.0.8-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.18.0.8-1] - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set …

Jan 22, 2026
Medium max 7.7

ELSA-2026-0975 1 CVE

Moderate: glib2 security update (Oracle Linux 10)

[2.80.4-12] - Fix NVR [2.80.4-11] - Add patch for CVE-2025-13601

Jan 22, 2026
Medium max 7.5

ELSA-2026-0930 2 CVEs

Moderate: pcs security update (Oracle Linux 8)

[0.10.18-2.0.1.el8_10.8] - Replaced HAM-logo [0.10.18] - Debrand PCS [0.10.18-2.el8_10.8] - Fixed CVE-2025-67725, CVE-2025-67726 by patching bundled Tornado Resolves: RHEL-136415, RHEL-136420

Jan 21, 2026
High max 7.5

ELSA-2026-0921 1 CVE

Important: go-toolset:ol8 security update (Oracle Linux 8)

delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.5-1] - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139365

Jan 21, 2026
High max 7.8

ELSA-2026-0914 4 CVEs

Important: gimp security update (Oracle Linux 9)

[2:3.0.4-1.2] - fix CVE-2025-14422 - fix CVE-2025-14423 - fix CVE-2025-14424 - fix CVE-2025-14425 [2:3.0.4-1.1] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934

Jan 21, 2026
High max 7.5

ELSA-2026-0923 1 CVE

Important: golang security update (Oracle Linux 9)

[1.25.5-2] - Rebase to rhel-9-main - Related: RHEL-139366 [1.25.5-1] - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139366 [1.25.3-2] - Cleanup lib/ ownership

Jan 21, 2026