8,314 results · Feed
-
MediumELSA-2025-21926 1 CVE
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-611.9.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…
-
High max 10.0ELSA-2025-20955 4 CVEs
Important: redis:7 security update (Oracle Linux 9)
[7.2.11-1.0.1] - Build with 64k pages to support redis on UEK on aarch64 [7.2.11-1] - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 [7.2.10-1] - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 [7.2.8-1]…
-
High max 8.6ELSA-2025-21111 3 CVEs
Important: bind9.18 security update (Oracle Linux 9)
[32:9.18.29-5.2] - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression [32:9.18.29-5.1] - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Preve…
-
Medium max 8.8ELSA-2025-21469 8 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-611.8.1] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [O…
-
Medium max 8.8ELSA-2025-21917 2 CVEs
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.85.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
Medium max 5.0ELSA-2025-21977 1 CVE
Moderate: libssh security update (Oracle Linux 8)
[0.9.6-16] - Fix CVE-2025-5372 Resolves: RHEL-121232
-
High max 7.5ELSA-2025-21776 1 CVE
Important: expat security update (Oracle Linux 8)
[2.5.0-1] - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618
-
High max 8.8ELSA-2025-21881 9 CVEs
Important: thunderbird security update (Oracle Linux 8)
[140.5.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.5.0] - Add OpenELA debranding [140.5.0-2] - Update to 140.5.0 ESR
-
High max 8.8ELSA-2025-16099 1 CVE
Important: postgresql security update (Oracle Linux 7)
[9.2.24-9.0.7] - Restrict psql meta-commands in plain-text dumps [Orabug: 38442031][CVE-2025-8714] [9.2.24-9.0.5] - Resolves CVE-2025-1094: Improper neutralization of quoting syntax in certain - libpq functions [Orabug: 37843176]
-
Critical max 9.8ELSA-2025-21628 1 CVE
Critical: lasso security update (Oracle Linux 8)
[2.6.0-14] - Fixing CVE-2025-47151 Resolves: RHEL-126687 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso
-
High max 10.0ELSA-2025-19167 1 CVE
Important: squid security update (Oracle Linux 7)
[7:3.5.20-17.0.9.13] - Fixes CVE-2025-62168, squid: Squid vulnerable to information disclosure via - authentication credential leakage in error handling [Orabug: 38587551] [7:3.5.20-17.0.7.13] - Fixes CVE-2025-54574, add URN access disabling config options [O…
-
Medium max 8.4ELSA-2025-21398 1 CVE
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.84.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 8.4ELSA-2025-21232 3 CVEs
Important: container-tools:ol8 security update (Oracle Linux 8)
slirp4netns [1.2.3-1] - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 - Related: Jira:RHEL-2110 [1.2.2-1] - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2 - Related: Jira:RHEL-2110 [1.2.1-1]…
-
Medium max 7.5ELSA-2025-20801 2 CVEs
Moderate: libtiff security update (Oracle Linux 9)
[4.4.0-15] - backport documentation change for CVE-2023-52355 (RHEL-17328) [4.4.0-14] - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)
-
MediumELSA-2025-20838 1 CVE
Moderate: zziplib security update (Oracle Linux 9)
[0.13.71-12] - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266
-
High max 8.6ELSA-2025-21140 2 CVEs
Important: idm:DL1 security update (Oracle Linux 8)
bind-dyndb-ldap [11.6-6] - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa [4.9.13-20.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] ipa-healthcheck opendnssec [2.1.7-2] - Don't creat /var/run/opendnssec directory - Resolv…
-
High max 9.1ELSA-2025-17649 1 CVE
Important: ipa security update (Oracle Linux 7)
[4.6.8-5.0.5.el7_9.17] - Fixes CVE-2025-7493 Enforce uniqueness across krbprincipalname - and krbcanonicalname [Orabug: 38520120] [4.6.8-5.0.3.el7_9.17] - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 [Orabug: 38085890]
-
Medium max 7.5ELSA-2025-18814 2 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1.8.0.472.b08-1.0.1] - Update to 8u472-b08 (GA) [Orabug: 38571645] - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8 - Sync the copy of the …
-
Medium max 7.8ELSA-2025-19931 3 CVEs
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.83.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 9.8ELSA-2025-25755 10 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.349.3.1] - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38604171] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Justin Bronder) [Orabug: 38604171] {CVE-2025-39973} [5.4.17-2136.349.3] - Revert 'net/mlx5e: Updat…
-
High max 8.6ELSA-2025-19950 3 CVEs
Important: bind9.18 security update (Oracle Linux 9)
[32:9.18.29-4.2] - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression [32:9.18.29-4.1] - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Preve…
-
High max 8.6ELSA-2025-19951 2 CVEs
Important: bind security update (Oracle Linux 9)
[9.16.23-31.0.1] - Fix warning when changing device file permissions [Orabug: 36518580] [32:9.16.23-31.2] - Replace downstream fixes with upstream changes [32:9.16.23-31.1] - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Address various spoofing…
-
Medium max 5.6ELSA-2025-19930 3 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-570.62.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-314.193.5.3] - Revert 'cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry' (Samasth Norway Ananda) [Orabug: 38633525] [5.15.0-314.193.5.2] - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38607608] {CVE-2025-39973} - i40e: …
-
Medium max 8.8ELSA-2025-19962 2 CVEs
Moderate: kernel security update (Oracle Linux 10)
[6.12.0-55.43.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…
-
High max 9.8ELSA-2025-25754 121 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-105.51.5] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Patrisious Haddad) [Orabug: 38226124] - arm64: Utilize for_each_cpu_wrap for reference lookup (Beata Michalska) [Orabug: 38454705] - arm64: Update AMU-based freq scale factor on enterin…
-
High max 8.8ELSA-2025-19906 2 CVEs
Important: mingw-libtiff security update (Oracle Linux 8)
[4.0.9-3] - Fix CVE-2018-5784 CVE-2018-7456 CVE-2017-9935 CVE-2017-9935 - Fix CVE-2017-18013 CVE-2018-8905 CVE-2018-10963 CVE-2018-17100 - Fix CVE-2018-18557 CVE-2018-18661 (RHBZ #1602597) CVE-2018-12900 - Fix CVE-2019-14973 CVE-2019-17546 CVE-2020-35521 CVE-…
-
High max 8.4ELSA-2025-19927 3 CVEs
Important: runc security update (Oracle Linux 9)
[4:1.2.5-3] - Add relevant patches to CVEs - Resolves: RHEL-122402 [4:1.2.5-2] - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122402 - Resolves: RHEL-122404 - Resolves: RHEL-122415 [4:1.2.5-1] - update to https://github.com/opencontainers…
-
High max 7.5ELSA-2025-19513 5 CVEs
Important: pcs security update (Oracle Linux 10)
[0.12.0-3.0.1.el10_0.3] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120943, RHEL-121036, RHEL-123631, RHEL-123644, RHEL-124942
-
Medium max 7.2ELSA-2025-25742 1 CVE
Moderate: linux-firmware security update (Oracle Linux 7)
[20251030-999.44.1.gite9292517.el7] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}
-
High max 7.5ELSA-2025-19719 5 CVEs
Important: pcs security update (Oracle Linux 8)
[0.10.18-2.0.1.7] - Replaced HAM-logo
-
Medium max 7.2ELSA-2025-25743 1 CVE
Moderate: linux-firmware security update (Oracle Linux 8)
[20251030-999.44.1.gite9292517.el8] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}
-
High max 7.3ELSA-2025-19909 3 CVEs
Important: tigervnc security update (Oracle Linux 8)
[1.15.0-8] - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119979 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120001 - Fix CVE-2025-62231: xorg-…
-
Medium max 7.2ELSA-2025-25744 1 CVE
Moderate: linux-firmware security update (Oracle Linux 9)
[20251030-999.44.1.gite9292517.el9] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}
-
Medium max 5.3ELSA-2025-19911 1 CVE
Moderate: qt5-qt3d security update (Oracle Linux 9)
[5.15.9-2.1] - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120988
-
Medium max 7.2ELSA-2025-25745 1 CVE
Moderate: linux-firmware security update (Oracle Linux 10)
[20251030-999.44.1.gite9292517.el10] - Include AMD ucode fix [Orabug: 38523856] {CVE-2025-62626}
-
High max 8.8ELSA-2025-19851 1 CVE
Important: sssd security update (Oracle Linux 10)
[2.10.2-3.0.1.3] - Restore default debug level for sss_cache [Orabug: 32810448] [2.10.2-3.3] - Resolves: RHEL-120286 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.0.z] [2.10.2-3.2] -…
-
High max 8.6ELSA-2025-19912 3 CVEs
Important: bind security update (Oracle Linux 10)
[9.18.33-4.0.1] - Fix warning when changing device file permissions [Orabug: 36518580] [9.18.33-4.2] - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) [9.18.33-4.1] - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofin…
-
High max 8.6ELSA-2025-19793 2 CVEs
Important: bind9.16 security update (Oracle Linux 8)
[32:9.16.23-0.22.4] - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Address various spoofing attacks (CVE-2025-40778) - Replace downstream fixes with upstream changes [32:9.16.23-0.22.3] - Update addresses of b.root-servers.net (RHEL-18449)
-
High max 8.6ELSA-2025-19835 1 CVE
Important: bind security update (Oracle Linux 8)
[32:9.11.36-16.6] - Address various spoofing attacks (CVE-2025-40778) [32:9.11.36-16.5] - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2