Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

  • High max 8.8
    ELSA-2025-22760 1 CVE

    Important: abrt security update (Oracle Linux 8)

    [2.10.9-25.0.1] - Replaces sosreport to sos report in sosreport-event.conf [Orabug: 38590929] - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473] - Disable autoreporting on Oracle Linux [Orabug: 32890748] - Add orabug32082455-Upstream_refere…

  • Medium max 6.5
    ELSA-2025-22668 2 CVEs

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 (Sync from CentOS Stream 9) - Related: RHEL-121223 golang [1.25.3-1] - Update to Go 1.25.3 (sync from CentOS Stream 9) - Build go-toolset as…

  • Medium
    ELSA-2025-21931 2 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 9.8
    ELSA-2025-22395 6 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.16.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 4.7
    ELSA-2025-22660 1 CVE

    Moderate: systemd security update (Oracle Linux 9)

    [252-55.0.3.7] - serialize: don't allocate 1M on the stack just like that [LINUX-16166] - Route logs from container mapped uids to the system journal [Orabug: 38135007] - Drop delay when nspawn fails to reset loginuid [Orabug: 37793135] - Improve logging for …

  • Medium max 9.8
    ELSA-2025-21463 4 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.0
    ELSA-2025-20669 4 CVEs

    Important: edk2 security update (Oracle Linux 8)

    [20250905-4.el8] - Create new 20250905 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause "Protection Mechanism Failure" by local access [Orabug: 38381983] {CVE-2025-3770} - EDK2:…

  • Medium max 4.3
    ELSA-2025-21816 1 CVE

    Moderate: delve and golang security update (Oracle Linux 10)

    delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update Delve to 1.25.2 [1.24.1-3] - Update CI support golang [1.25.3-1] - Update to Go 1.25.3 [1.25.1-1] - Update to Go1.25.1 -Resolves: RHEL-116849 [1.25.0-5] - D…

  • Medium max 9.8
    ELSA-2025-21118 12 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-124.13.1] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 7.5
    ELSA-2025-21485 3 CVEs

    Moderate: java-25-openjdk security update (Oracle Linux 10)

    [1:25.0.1.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:25.0.1.0.8-2] - Remove superfluous backslashes that cause two alternative commands to be combined - Related: RHEL-120553 [1:25.0.1.0.8-1] - Update to jdk-25.0.1+8 (GA) - Update release not…

  • High max 8.1
    ELSA-2025-20983 2 CVEs

    Important: podman security update (Oracle Linux 10)

    [5.6.0-6.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-6] - update to the latest content o…

  • High max 7.5
    ELSA-2025-21006 1 CVE

    Important: kea security update (Oracle Linux 10)

    [3.0.1-2] - Fixes CVE-2025-11232 [3.0.1-1] - New version 3.0.1 - Fixes CVE-2025-40779

  • High
    ELSA-2025-28026 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.349.3.2] - crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38705546] {CVE-2025-40019}

  • High
    ELSA-2025-28024 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-314.193.5.5] - crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38705933] {CVE-2025-40019}

  • High max 7.8
    ELSA-2025-28025 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-105.51.5.1] - crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38712788] {CVE-2025-40019} - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso) [Orabug: 38712786] {CVE-2025-38678}

  • Medium max 4.1
    ELSA-2025-21015 2 CVEs

    Moderate: vim security update (Oracle Linux 10)

    [9.1.083-6.0.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-6] - RHEL-113549 CVE-2025-53906 vim: Vim path traversal - RHEL-113543 CVE-2025-53905 vim: Vim path traversial

  • High max 7.5
    ELSA-2025-21030 1 CVE

    Important: expat security update (Oracle Linux 10)

    [2.7.1-3] - Fix CVE-2025-59375 - backport allocation tracking improvements [2.7.1-2] - https://issues.redhat.com/browse/RHELMISC-13073

  • High max 7.5
    ELSA-2025-21032 2 CVEs

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-6] - Fix integer overflow in date/time parsing [3.6.5-5] - Bump revision number [3.6.5-4] - Fix several CVEs

  • High max 8.6
    ELSA-2025-21034 3 CVEs

    Important: bind security update (Oracle Linux 10)

    [9.18.33-10.0.1] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.18.33-10.2] - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) [32:9.18.33-10.1] - Refuse malformed DNSKEY records (CVE-2025-8677) - Address variou…

  • High max 8.6
    ELSA-2025-21142 2 CVEs

    Important: python-kdcproxy security update (Oracle Linux 10)

    [1.0.0-19] - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-122777 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-122776

  • Medium max 9.8
    ELSA-2025-21248 1 CVE

    Moderate: openssl security update (Oracle Linux 10)

    [3.5.1-4.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.1-4] - Fix CVE-2025-9230 Resolves: RHEL-115885

  • High max 9.1
    ELSA-2025-20994 1 CVE

    Important: ipa security update (Oracle Linux 10)

    [4.12.2-24.0.1.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-24.1] - Resolves: RHEL-118447 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeI…

  • High max 7.3
    ELSA-2025-21220 1 CVE

    Important: podman security update (Oracle Linux 10)

    [5.6.0-6.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [7:5.6.0-6] - update to the latest content o…

  • High max 7.5
    ELSA-2025-21691 1 CVE

    Important: haproxy security update (Oracle Linux 10)

    [3.0.5-4.1] - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126652

  • High max 8.8
    ELSA-2025-21843 9 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [140.5.0-2.0.1] - Add Oracle prefs [140.5.0-2] - Update to 140.5.0 ESR

  • High max 10.0
    ELSA-2025-21936 4 CVEs

    Important: valkey security update (Oracle Linux 10)

    [8.0.6-2] - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [8.0.4-3] - fix ImageMode: ensure ownership of /etc/valkey [8.0.4-2] - fix ImageMode: add tmpfiles.d entries for directories below /var [8.0.4-1] - rebase to 8.0.4 for…

  • High max 7.3
    ELSA-2025-22012 2 CVEs

    Important: buildah security update (Oracle Linux 10)

    [1.41.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.41.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 (https://github.com/containers/buildah/commit/2ece502) - fix…

  • Medium max 9.4
    ELSA-2025-22394 1 CVE

    Moderate: qt6-qtsvg security update (Oracle Linux 10)

    [6.9.1-2.2] - Fix CVE-2025-10728: Replace quadratic cycle check with linear recursion guard to prevent stack overflow Resolves: RHEL-119719 [6.9.1-2.1] - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699

  • High max 10.0
    ELSA-2025-21002 1 CVE

    Important: squid security update (Oracle Linux 10)

    [7:6.10-6.1] - Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling [7:6.10-6] - Resolves: RHEL-86817 - "TCP connection to XX.XX.XX.XX/XXXX failed" message is output f…

  • Medium max 7.3
    ELSA-2025-21035 3 CVEs

    Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 10)

    [24.1.5-5] - CVE fix for: CVE-2025-62229 (RHEL-119965), CVE-2025-62230 (RHEL-120014), CVE-2025-62231 (RHEL-125004)

  • Medium max 5.3
    ELSA-2025-22361 1 CVE

    Moderate: qt6-qtquick3d security update (Oracle Linux 10)

    [6.9.1-1.1] - Fix CVE-2025-11277 in bundled assimp library Resolves: RHEL-120981

  • High max 7.5
    ELSA-2025-21036 5 CVEs

    Important: pcs security update (Oracle Linux 10)

    [0.12.1-1.el10_1.1] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938

  • High max 7.5
    ELSA-2025-21038 1 CVE

    Important: kea security update (Oracle Linux 10)

    [3.0.1-2] - Fixes CVE-2025-11232 [3.0.1-1] - New version 3.0.1 - Fixes CVE-2025-40779

  • High max 8.8
    ELSA-2025-21281 9 CVEs

    Important: firefox security update (Oracle Linux 10)

    [140.5.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.5.0-2] - Update to 140.5.0 ESR

  • High max 8.8
    ELSA-2025-20998 1 CVE

    Important: libtiff security update (Oracle Linux 10)

    [4.6.0-6.1] - Fix buffer underflow in TIFFReadRGBAImageOriented(). - Resolves: RHEL-112524

  • Medium max 5.4
    ELSA-2025-21013 1 CVE

    Moderate: libssh security update (Oracle Linux 10)

    [0.11.1-4] - Rebuild due to broken build auto-tagging

  • High max 8.8
    ELSA-2025-21020 1 CVE

    Important: sssd security update (Oracle Linux 10)

    [2.11.1-2.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.11.1-2.1] - Resovles: RHEL-120288 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.1.z]

  • High max 9.4
    ELSA-2025-21037 1 CVE

    Important: qt6-qtsvg security update (Oracle Linux 10)

    [6.9.1-2.1] - Fix CVE-2025-10729: Prevent dangling pointers in SVG group node creation Resolves: RHEL-119699

  • High max 8.8
    ELSA-2025-21407 3 CVEs

    Important: libtiff security update (Oracle Linux 7)

    [4.0.3-35.0.1] - fix CVE-2025-8176: prevent skipping first line in tiffdither and tiffmedian tools [Orabug: 38658716] - fix CVE-2025-8177: buffer overflow thumbnail setrow [Orabug: 38658716] - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOrie…

  • High max 8.8
    ELSA-2025-22363 9 CVEs

    Important: firefox security update (Oracle Linux 8)

    [140.5.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.5.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.5.0-1] - Update to 140.5.0 ESR