Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,314 results · Feed

High max 7.8

ELSA-2025-22417 7 CVEs

Important: gimp:2.8 security update (Oracle Linux 8)

gimp [2:2.8.22-26.3] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 [2:2.8.22-26.2] - fix CVE-2025-5473 (RHEL-95696) [2:2.8.22-26.1] - fix CVE-2025-48797 (RHEL…

Dec 1, 2025
Medium max 9.8

ELSA-2025-22388 6 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.87.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…

Dec 1, 2025
Medium max 6.2

ELSA-2025-22376 1 CVE

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-14] - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) [2.9.13-13] - Fix CVE-2025-9714 (RHEL-119283)

Dec 1, 2025
Medium max 9.8

ELSA-2025-22405 8 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.11.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) […

Dec 1, 2025
High max 8.8

ELSA-2025-28019 1 CVE

Important: postgresql security update (Oracle Linux 8)

[12.22-5.0.1] - Add backport of CVE-2025-8714 [Orabug: 38667546] [12.22-5] - Fix previous Backport [12.22-4] - Backport CVE-2025-8715 [12.22-3] - Fix backport for CVE-2025-1094 [12.22-2] - Backport fix for CVE-2025-1094 [12.22-1] - Update to 12.22 - Fixes: CV…

Nov 28, 2025
High max 7.5

ELSA-2025-22175 1 CVE

Important: expat security update (Oracle Linux 9)

[2.5.0-5.1] - Fix CVE-2025-59375 - Resolves: RHEL-114644

Nov 26, 2025
Medium max 9.8

ELSA-2025-21112 13 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-611.7.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…

Nov 26, 2025
High max 7.5

ELSA-2025-21974 1 CVE

Important: mingw-expat security update (Oracle Linux 8)

[2.5.0-1] - Rebase to version 2.5.0 - Fix the following CVEs CVE-2023-52425 CVE-2024-28757 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2024-50602 CVE-2024-8176 CVE-2025-59375 - Resolves: RHEL-114628

Nov 25, 2025
Medium max 6.5

ELSA-2025-22063 1 CVE

Moderate: cups security update (Oracle Linux 8)

[1:2.2.6-64] - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

Nov 25, 2025
Medium max 9.8

ELSA-2025-28011 1 CVE

Moderate: openssl security update (Oracle Linux 9)

[3.5.1-4.0.2_fips] - Update additional upstream references [3.5.1-4.0.1_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276] - Update FIPS module name [Orabug: 35824276] [3.5.1-4.0.1] - Enable openssl-fips-provide…

Nov 25, 2025
Critical max 9.8

ELSA-2025-21462 1 CVE

Critical: lasso security update (Oracle Linux 9)

[ - 2.7.0-11.3] - Fix CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso Resolves: RHEL-126684

Nov 25, 2025
High max 7.5

ELSA-2025-21693 1 CVE

Important: haproxy security update (Oracle Linux 9)

[2.8.14-1.1] - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126664

Nov 25, 2025
High max 7.3

ELSA-2025-21702 1 CVE

Important: podman security update (Oracle Linux 9)

[5.6.0-7.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.6.0-7] - update to the latest content o…

Nov 25, 2025
Medium max 4.3

ELSA-2025-21815 1 CVE

Moderate: delve and golang security update (Oracle Linux 9)

delve [1.25.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.25.2-1] - Update to Delve 1.25.2 - Resolves: RHEL-111801 golang [1.25.3-1] - Update to Go 1.25.3 - Resolves: RHEL-121220 [1.25.1-1] - Update to Go 1.25.1 - Resolves: RHEL-11…

Nov 25, 2025
High max 8.8

ELSA-2025-21842 9 CVEs

Important: thunderbird security update (Oracle Linux 9)

[140.5.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.5.0-1] - Update to 140.5.0 ESR

Nov 25, 2025
High max 7.8

ELSA-2025-21968 7 CVEs

Important: gimp security update (Oracle Linux 9)

[2:3.0.4-1.1] - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934

Nov 25, 2025
Medium max 6.5

ELSA-2025-22005 1 CVE

Moderate: go-rpm-macros security update (Oracle Linux 9)

[3.6.0-12] - Rebuilt to include Go1.25.3 to address CVE-2025-47906 - Resolves: RHEL-125569

Nov 25, 2025
High max 7.3

ELSA-2025-22011 2 CVEs

Important: buildah security update (Oracle Linux 9)

[1.41.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.41.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 (https://github.com/containers/buildah/commit/2ece502) - fix…

Nov 25, 2025
High max 9.8

ELSA-2025-20922 5 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0 [2.48.5-1] - Update to 2.48.5 [2.48.3-1] - Update to 2.48.3 [2.48.2-1] - Update to 2.48.2 - Reenable JIT [2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0 [2.46.6-1] - Update to 2.46.6 [2.4…

Nov 25, 2025
High max 10.0

ELSA-2025-20935 1 CVE

Important: squid security update (Oracle Linux 9)

[7:5.5-22.1] - Resolves: RHEL-122492 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) [7:5.5-22] - Resolves: RHEL-77084 - squid crashes with noteDestinationsEnd check failed

Nov 25, 2025
High max 7.2

ELSA-2025-20936 1 CVE

Important: sqlite security update (Oracle Linux 9)

[3.34.1-9] - Fixes CVE-2025-6965

Nov 25, 2025
Medium max 5.4

ELSA-2025-20943 1 CVE

Moderate: libssh security update (Oracle Linux 9)

[0.10.4-15] - Bump spec to make the 9.7 NVR higher than the 9.6 one [0.10.4-14] - Fix CVE-2025-5318 Resolves: RHEL-111732

Nov 25, 2025
Medium max 4.1

ELSA-2025-20945 2 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-23.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-23] - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal

Nov 25, 2025
High max 8.8

ELSA-2025-20954 1 CVE

Important: sssd security update (Oracle Linux 9)

[2.9.7-4.0.1.1] - Restore default debug level for sss_cache [Orabug: 32810448] * Fri Oct 17 2025 Tomas Halman <thalman@redhat.com - 2.9.7.4.1 - Resolves: RHEL-120298 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-…

Nov 25, 2025
High max 8.8

ELSA-2025-20956 2 CVEs

Important: libtiff security update (Oracle Linux 9)

[4.4.0-15.2] - fix CVE-2025-8176: tiffdither and tiffmedian skip first line of input images (RHEL-120239) [4.4.0-15.1] - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented (RHEL-112545)

Nov 25, 2025
High max 8.4

ELSA-2025-20957 3 CVEs

Important: runc security update (Oracle Linux 9)

[4:1.3.0-4] - rename errors.go to errors_linux.go - Related: RHEL-122400 [4:1.3.0-3] - Add relevant patches to CVEs - Resolves: RHEL-122400 [4:1.3.0-2] - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122400 - Resolves: RHEL-122403 - Resolv…

Nov 25, 2025
High max 7.3

ELSA-2025-20958 3 CVEs

Important: tigervnc security update (Oracle Linux 9)

[1.15.0-6] - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-…

Nov 25, 2025
High max 7.5

ELSA-2025-20959 2 CVEs

Important: libsoup security update (Oracle Linux 9)

[2.72.0-12.1] - Backport patch for CVE-2025-4945 and CVE-2025-11021 [2.72.0-12] - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 [2.72.0-11] - Backport patches for various CVEs, plus test …

Nov 25, 2025
Medium max 5.3

ELSA-2025-20963 1 CVE

Moderate: qt5-qt3d security update (Oracle Linux 9)

[5.15.9-2.1] - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120986

Nov 25, 2025
High max 8.6

ELSA-2025-21110 2 CVEs

Important: bind security update (Oracle Linux 9)

[32:9.16.23-34.0.1.1] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-34.1] - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE…

Nov 25, 2025
High max 10.0

ELSA-2025-21916 4 CVEs

Important: valkey security update (Oracle Linux 9)

[8.0.6-2] - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

Nov 25, 2025
High max 7.5

ELSA-2025-20962 5 CVEs

Important: pcs security update (Oracle Linux 9)

[0.11.10-1.el9_7.1] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945, RHEL-121035, RHEL-123630, RHEL-123642, RHEL-124938 [0.11.10-1] - Rebased pcs to the latest sourc…

Nov 25, 2025
High max 8.1

ELSA-2025-20909 2 CVEs

Important: podman security update (Oracle Linux 9)

[5.6.0-6.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.6.0-6] - update to the latest content o…

Nov 25, 2025
High max 10.0

ELSA-2025-20926 4 CVEs

Important: redis security update (Oracle Linux 9)

[6.2.20-2] - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [6.2.19-2] - fix ownership of /usr/lib64/redis RHEL-6784 [6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 [6.2.18-1] - rebase to 6.2.18 for CVE-20…

Nov 25, 2025
High max 9.1

ELSA-2025-20928 1 CVE

Important: ipa security update (Oracle Linux 9)

[4.12.2-22.0.1.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-22.1] - Resolves: RHEL-118449 ipa: Privilege escalation from host to domain admin in FreeIPA [4.12.2-22]…

Nov 25, 2025
Medium max 7.3

ELSA-2025-20960 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

[23.2.7-5] - CVE fix for: CVE-2025-62229 (RHEL-119974), CVE-2025-62230 (RHEL-120021), CVE-2025-62231 (RHEL-125017)

Nov 25, 2025
Medium max 7.3

ELSA-2025-20961 3 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 9)

[1.20.11-32] - CVE fix for: CVE-2025-62229 (RHEL-119960), CVE-2025-62230 (RHEL-120033), CVE-2025-62231 (RHEL-125002)

Nov 25, 2025
High max 8.6

ELSA-2025-21139 2 CVEs

Important: python-kdcproxy security update (Oracle Linux 9)

[1.0.0-9] - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-122779 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-122778

Nov 25, 2025
Medium max 9.8

ELSA-2025-21255 1 CVE

Moderate: openssl security update (Oracle Linux 9)

[3.5.1-4.0.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [3.5.1.openela.0.1] - Add OpenELA specific changes [1:3.5.1-4] …

Nov 25, 2025
High max 8.8

ELSA-2025-21280 9 CVEs

Important: firefox security update (Oracle Linux 9)

[140.5.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.5.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Nov 25, 2025