8,314 results · Feed
-
High max 9.8ELSA-2026-0924 13 CVEs
Important: thunderbird security update (Oracle Linux 9)
[140.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.7.0] - Add OpenELA debranding [140.7.0-1] - Update to 140.7.0 ESR
-
Medium max 7.7ELSA-2026-0936 1 CVE
Moderate: glib2 security update (Oracle Linux 9)
[2.68.4-18.1] - Add patch for CVE-2025-13601
-
High max 7.5ELSA-2026-0922 1 CVE
Important: golang security update (Oracle Linux 10)
[1.25.5-1] - Update to Go 1.25.5 (fips-1) [1.25.3-5] - gating.yaml: Add tier1 s390x tests [1.25.3-4] - Cleanup lib/ ownership - Remove legacy logic forcing lib/ into golang-tests - Move lib/wasm, lib/fips140, and lib/time to main golang package - Fixes go_js_…
-
High max 7.0ELSA-2026-0698 1 CVE
Important: mariadb-devel:10.3 security update (Oracle Linux 8)
asio [1.10.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild galera [25.3.37-1.0.1] - Bump release for rebuild - x86_64 and i386 need to be built the same day Judy [1.0.5-18.0.1] - Rebuild [Orabug: 31667911] mariadb [3:10.3.39-2.0.1] - …
-
High max 9.8ELSA-2026-0793 5 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-611.24.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […
-
High max 9.8ELSA-2026-0786 1 CVE
Important: kernel security update (Oracle Linux 10)
[6.12.0-124.28.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
High max 7.5ELSA-2026-0845 1 CVE
Important: brotli security update (Oracle Linux 10)
[1.1.0-7] - Resolves: RHEL-133984 CVE-2025-6176 Brotli decompression bomb DoS in scrapy
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.351.3.2] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38855323] {CVE-2025-40280} - tipc: simplify the finalize work queue (Xin Long) [Orabug: 38855323] - vsock: Ignore signal/timeout on connect() if already e…
-
High max 9.8ELSA-2026-0750 1 CVE
Important: net-snmp security update (Oracle Linux 8)
[5.8-33.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 34905643] [1:5.8-33] - fix out of bound access (RHEL-137501) - perl modern auth enablement (RHEL-137310)
-
Medium max 7.8ELSA-2026-0756 1 CVE
Moderate: transfig security update (Oracle Linux 8)
[1:3.2.6a-5] - Detect nan in spline control values - Fix for CVE-2025-46397
-
High max 9.8ELSA-2026-0759 5 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.94.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 7.5ELSA-2026-0753 1 CVE
Important: container-tools:ol8 security update (Oracle Linux 8)
aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah [2:1.33.14-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/a7f8179) - f…
-
High max 8.2ELSA-2026-0752 1 CVE
Important: jmc security update (Oracle Linux 9)
[8.2.0-4] - Bump LZ4 Version to 1.10.2. Related: RHEL-135478
-
High max 9.8ELSA-2026-0771 2 CVEs
Important: gpsd-minimal security update (Oracle Linux 9)
[1:3.26.1-1.0.1.el9_7.1] - Replaced upstream reference [Orabug: 35865525]
-
High max 9.8ELSA-2026-0770 2 CVEs
Important: gpsd security update (Oracle Linux 10)
[1:3.26.1-1.0.1.el10_1.1] - Replace upstream reference [Orabug: 37033219] [1:3.26.1-1.el10_1.1] - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269)
-
High max 9.8ELSA-2026-0667 13 CVEs
Important: firefox security update (Oracle Linux 8)
[140.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.7.0-1] - Update to 140.7.0 ESR
-
High max 9.8ELSA-2026-0694 13 CVEs
Important: firefox security update (Oracle Linux 9)
[140.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
High max 7.8ELSA-2026-50060 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-107.59.3.3] - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38858283] {CVE-2025-40248}
-
High max 9.8ELSA-2026-0007 10 CVEs
Important: firefox security update (Oracle Linux 7)
[140.6.0-1.0.1] - Update to 140.6.0 ESR [Orabug: 38813993][CVE-2025-14321][CVE-2025-14322] [CVE-2025-14323][CVE-2025-14324][CVE-2025-14325][CVE-2025-14328] [CVE-2025-14329][CVE-2025-14330][CVE-2025-14331][CVE-2025-14333] [140.5.0-1.0.1] - Update to 140.5.0 ES…
-
Medium max 6.5ELSA-2026-0608 1 CVE
Moderate: vsftpd security update (Oracle Linux 8)
[3.0.3-36.3] - Rebuild to test with proper configuration - Related: RHEL-134160 [3.0.3-36.2] - Rebuild to test with proper configuration - Related: RHEL-134160 [3.0.3-36.1] - Fix CVE-2025-14242 - Resolves: RHEL-134160
-
Medium max 5.9ELSA-2026-0695 1 CVE
Moderate: libpq security update (Oracle Linux 8)
[13.23-1] - Rebase to upstream release 13.23 - Resolves: RHEL-131269 (CVE-2025-12818)
-
High max 7.8ELSA-2026-0728 1 CVE
Important: gnupg2 security update (Oracle Linux 8)
[2.2.20-4] - Fix CVE-2025-68973 (gpg.fail/memcpy)
-
Medium max 5.9ELSA-2026-0493 2 CVEs
Moderate: postgresql:16 security update (Oracle Linux 9)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pg_repack [1.5.1-1] - Update to v1.5.1 [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 [1.4.8-1] - Res…
-
Medium max 6.5ELSA-2026-0605 1 CVE
Moderate: vsftpd security update (Oracle Linux 9)
[3.0.5-6.2] - Rebuild to test with proper configuration - Related: RHEL-134169 [3.0.5-6.1] - Fix CVE-2025-14242 - Resolves: RHEL-134169
-
High max 9.8ELSA-2026-0696 1 CVE
Important: net-snmp security update (Oracle Linux 9)
[5.9.1-17.0.1.1] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.1-17.1] - fix out of bound access issue (RHEL-137510) - enable PQC (RHEL-132653)
-
Medium max 7.8ELSA-2026-0700 1 CVE
Moderate: transfig security update (Oracle Linux 9)
[1:3.2.7b-11] - Detect nan in spline control values - CVE-2025-46397
-
High max 7.8ELSA-2026-0719 1 CVE
Important: gnupg2 security update (Oracle Linux 9)
[2.3.3-5] - Fix CVE-2025-68973 (gpg.fail/memcpy)
-
High max 9.8ELSA-2026-0668 1 CVE
Important: net-snmp security update (Oracle Linux 10)
[1:5.9.4-15.0.1.2] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.4-15.2] - fix out of bound access (RHEL-137497) [1:5.9.4-15.1] - enable PQC (RHEL-112338)
-
Medium max 6.5ELSA-2026-0606 1 CVE
Moderate: vsftpd security update (Oracle Linux 10)
[3.0.5-10.1] - Fix CVE-2025-14242 - Resolves: RHEL-134158
-
High max 7.8ELSA-2026-0697 1 CVE
Important: gnupg2 security update (Oracle Linux 10)
[2.4.5-3] - Fix CVE-2025-68973 (gpg.fail/memcpy) - Avoid weak dependencies
-
Medium max 5.9ELSA-2026-0523 2 CVEs
Moderate: postgresql:13 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [13.23-1] - Update to 13.23 - Resolves: RHEL-128818 (CVE-2025-12818)
-
Medium max 5.9ELSA-2026-0524 2 CVEs
Moderate: postgresql:15 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [15.15-1] - Update to 15.15 - Resolves: RHEL-128819 (CVE-2025-12818)
-
Medium max 6.0ELSA-2026-0596 2 CVEs
Moderate: cups security update (Oracle Linux 8)
[1:2.2.6-66] - fix use-after-free reported by OSH [1:2.2.6-65] - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues
-
Medium max 5.9ELSA-2026-0491 2 CVEs
Moderate: postgresql security update (Oracle Linux 9)
[13.23-1] - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) [13.22-3] - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 [13.22-2] - Define tmpfiles.d to enable ostree and bootc support
-
Medium max 5.9ELSA-2026-0492 2 CVEs
Moderate: postgresql:15 security update (Oracle Linux 9)
pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …
-
High max 7.5ELSA-2026-0545 1 CVE
Important: podman security update (Oracle Linux 10)
[5.6.0-11.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-11] - update to the latest content…
-
Medium max 5.9ELSA-2026-0594 1 CVE
Moderate: libpq security update (Oracle Linux 10)
[16.11-3] - Release bump [16.11-1] - Rebase to upstream release 16.11
-
Medium max 5.9ELSA-2026-0519 2 CVEs
Moderate: postgresql:16 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [16.11-1] - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818)
-
High max 7.8ELSA-2026-50007 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-316.196.4.1] - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38788585] {CVE-2025-40280} - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38788587] {CVE-2025-40271} - vsock: Ignore signal/timeout on connect…
-
Medium max 5.9ELSA-2026-0525 1 CVE
Moderate: postgresql16 security update (Oracle Linux 10)
[16.11-1.0.1] - Replace upstream reference [Orabug: 37044148] [16.11-1] - Update to 16.11 [16.10-3] - Add tmpfiles.d configuration for PostgreSQL 16 - Ensures proper directory permissions for /var/lib/pgsql [16.10-2] - Add OpenSSL support to upgrade_configure…