8,316 results · Feed
-
High max 8.6ELSA-2025-19793 2 CVEs
Important: bind9.16 security update (Oracle Linux 8)
[32:9.16.23-0.22.4] - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Address various spoofing attacks (CVE-2025-40778) - Replace downstream fixes with upstream changes [32:9.16.23-0.22.3] - Update addresses of b.root-servers.net (RHEL-18449)
-
High max 8.6ELSA-2025-19835 1 CVE
Important: bind security update (Oracle Linux 8)
[32:9.11.36-16.6] - Address various spoofing attacks (CVE-2025-40778) [32:9.11.36-16.5] - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2
-
Medium max 5.5ELSA-2025-19572 5 CVEs
Moderate: mariadb:10.5 security update (Oracle Linux 8)
galera [26.4.22-1] - Rebase to 26.4.22 Judy [1.0.5-18] - Remove README.Fedora; no longer needed since 1.0.5 version - Resolves: #1638717 [1.0.5-17] - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28 - Drop legacy BuildRoot: and Group: tags - D…
-
Medium max 5.5ELSA-2025-19584 5 CVEs
Moderate: galera and mariadb security update (Oracle Linux 9)
galera [26.4.22-1] - Rebase to 26.4.22 mariadb [3:10.5.29-2] - Release bump for rebuild [3:10.5.29-1] - Rebase to 10.5.29
-
Medium max 6.6ELSA-2025-19594 1 CVE
Moderate: osbuild-composer security update (Oracle Linux 9)
[132.2-3.0.1] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Lin…
-
High max 10.0ELSA-2025-19675 4 CVEs
Important: valkey security update (Oracle Linux 10)
[8.0.6-1.0.1] - Fix for CVE-2025-49844 [Orabug: 38515582] [8.0.6-1] - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
-
High max 9.4ELSA-2025-19772 1 CVE
Important: qt6-qtsvg security update (Oracle Linux 10)
[6.8.1-1.1] - Fix CVE-2025-10729: Prevent dangling pointers from misplaced elements Resolves: RHEL-119697
-
High max 8.8ELSA-2025-19610 1 CVE
Important: sssd security update (Oracle Linux 8)
[2.9.4-5.0.2.3] - Missing ntohs to service port [Orabug: 37389651] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-5.3] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-202…
-
High max 7.5ELSA-2025-19714 2 CVEs
Important: libsoup security update (Oracle Linux 8)
[2.62.3-10] - Backport patch for CVE-2025-4945 and CVE-2025-11021
-
Medium max 7.3ELSA-2025-19623 3 CVEs
Moderate: xorg-x11-server-Xwayland update (Oracle Linux 9)
[23.2.7-5] - CVE fix for: CVE-2025-62229 (RHEL-119975), CVE-2025-62230 (RHEL-120020), CVE-2025-62231 (RHEL-125016)
-
High max 7.5ELSA-2025-19713 2 CVEs
Important: libsoup security update (Oracle Linux 9)
[2.72.0-10.3] - Backport patch for CVE-2025-4945 and CVE-2025-11021 [2.72.0-10.2] - Backport patches for various CVEs Resolves: RHEL-85888 Resolves: RHEL-87081 Resolves: RHEL-88332 Resolves: RHEL-92285 [2.72.0-10.1] - Backport patches for various CVEs, plus t…
-
Medium max 6.6ELSA-2025-19566 1 CVE
Moderate: osbuild-composer security update (Oracle Linux 10)
[134.1-3.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …
-
Low max 3.7ELSA-2025-19720 1 CVE
Low: libsoup3 security update (Oracle Linux 10)
[3.6.5-9] - Revert 'Fix handling of invalid dates in cookie expires attribute (CVE-2025-11021)' [3.6.5-8] - Fix integer overflow in date/time parsing [3.6.5-7] - Fix handling of invalid dates in cookie expires attribute (CVE-2025-11021) [3.6.5-6] - Add patch …
-
Medium max 7.3ELSA-2025-19432 3 CVEs
Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 8)
[21.1.3-19] - CVE fix for: CVE-2025-62229 (RHEL-119967), CVE-2025-62230 (RHEL-120015), CVE-2025-62231 (RHEL-125007)
-
Medium max 7.3ELSA-2025-19434 3 CVEs
Moderate: xorg-x11-server security update (Oracle Linux 8)
[1.20.11-27] - CVE fix for: CVE-2025-62229 (RHEL-119953), CVE-2025-62230 (RHEL-120027), CVE-2025-62231 (RHEL-124993)
-
Medium max 8.8ELSA-2025-19447 3 CVEs
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.82.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
Medium max 7.3ELSA-2025-19433 3 CVEs
Moderate: xorg-x11-server update (Oracle Linux 9)
[1.20.11-32] - CVE fix for: CVE-2025-62229 (RHEL-119961), CVE-2025-62230 (RHEL-120032), CVE-2025-62231 (RHEL-125001)
-
High max 7.3ELSA-2025-19489 3 CVEs
Important: tigervnc security update (Oracle Linux 9)
[1.14.1-9] - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119987 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120006 - Fix CVE-2025-62231: xorg-…
-
Medium max 9.8ELSA-2025-19409 3 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-570.60.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…
-
High max 7.5ELSA-2025-19512 5 CVEs
Important: pcs security update (Oracle Linux 9)
[0.11.9-2.el9_6.2] - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120943, RHEL-121036, RHEL-123631, RHEL-123644, RHEL-124942
-
High max 8.8ELSA-2025-25733 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-313.189.5.3] - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38603025] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Justin Bronder) [Orabug: 38603025]
-
Medium max 7.3ELSA-2025-19435 3 CVEs
Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 10)
[24.1.5-5] - CVE fix for: CVE-2025-62229 (RHEL-119964), CVE-2025-62230 (RHEL-120013), CVE-2025-62231 (RHEL-125006)
-
Medium max 9.8ELSA-2025-19469 2 CVEs
Moderate: kernel security update (Oracle Linux 10)
[6.12.0-55.42.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…
-
High max 8.8ELSA-2025-25731 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.348.3.1] - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38604168] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Justin Bronder) [Orabug: 38604168] {CVE-2025-39973}
-
High max 7.5ELSA-2025-19403 1 CVE
Important: expat security update (Oracle Linux 10)
[2.7.1-3] - Backport security fixes to expat [2.7.1-2] - https://issues.redhat.com/browse/RHELMISC-13073
-
High max 10.0ELSA-2025-19345 4 CVEs
Important: redis:7 security update (Oracle Linux 9)
[7.2.11-1.0.1] - Build with 64k pages to support redis on UEK on aarch64 [7.2.11-1] - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
-
High max 10.0ELSA-2025-19238 4 CVEs
Important: redis:6 security update (Oracle Linux 8)
[6.2.20-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.20-1] - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
-
High max 10.0ELSA-2025-19237 4 CVEs
Important: redis security update (Oracle Linux 9)
[6.2.20-1] - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
-
High max 8.8ELSA-2025-17710 1 CVE
Important: compat-libtiff3 security update (Oracle Linux 7)
[3.9.4-12.0.1] - Fixes CVE-2025-9900 buffer underflow [Orabug: 38523840]
-
High max 8.8ELSA-2025-19276 1 CVE
Important: libtiff security update (Oracle Linux 8)
[4.0.9-35] - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented() (RHEL-112533)
-
High max 8.8ELSA-2025-19113 2 CVEs
Important: libtiff security update (Oracle Linux 9)
[4.4.0-13.2] - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither and tiffmedian - Resolves: RHEL-120243 [4.4.0-13.1] - fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriented - Resolves: RHEL-112542
-
Medium max 8.4ELSA-2025-19105 5 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-570.58.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…
-
High max 8.8ELSA-2025-19156 1 CVE
Important: libtiff security update (Oracle Linux 10)
[4.6.0-6.1] - Fix buffer underflow crash in TIFFReadRGBAImageOriented - Resolves: RHEL-112522
-
Medium max 8.8ELSA-2025-19106 6 CVEs
Moderate: kernel security update (Oracle Linux 10)
[6.12.0-55.41.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…
-
Medium max 9.8ELSA-2025-19102 6 CVEs
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.81.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [O…
-
High max 10.0ELSA-2025-19107 1 CVE
Important: squid:4 security update (Oracle Linux 8)
libecap squid [7:4.15-10.9] - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)
-
Medium max 7.5ELSA-2025-18815 2 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.472.b08-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.472.b08-1] - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-313.189.5.2] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38575798] {CVE-2025-38724} - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38575792] - crypto: af_alg -…
-
Medium max 7.5ELSA-2025-18824 3 CVEs
Moderate: java-21-openjdk security update (Oracle Linux 8)
[1:21.0.9.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.9.0.10-1] - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double s…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-104.43.4.3] - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38572958] {CVE-2025-39698} - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38572953] {CVE-2025-39866} - kernfs: …