Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 9.8
    ELSA-2025-18983 7 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [140.4.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.4.0] - Add OpenELA debranding [140.4.0-2] - Update to 140.4.0 ESR

  • Medium max 7.5
    ELSA-2025-18821 2 CVEs

    Moderate: java-17-openjdk security update (Oracle Linux 8)

    [1:17.0.17.0.10-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.17.0.10-1] - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set is_ga to …

  • Medium max 5.6
    ELSA-2025-10108 1 CVE

    Moderate: microcode_ctl security update (Oracle Linux 7)

    [2:2.1-73.24.0.20250512] - update microcode bundle to 20250512 [Orabug: 38139038] [2:2.1-73.23.0.20250211] - update microcode bundle to 20250211 [Orabug: 37670820] - drop releasenote.md file [2:2.1-73.20.0.1] - don't bother calling dracut if virtualized [Orab…

  • Medium max 7.8
    ELSA-2025-17161 6 CVEs

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.13] - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} [Orabug: 38493400] - md-raid10: fix KASAN warning {CVE-2022-50211} [Orabug: 38493400] - ALSA: bcd2000: Fix a UAF bug on the error path o…

  • High max 9.8
    ELSA-2025-18285 7 CVEs

    Important: firefox security update (Oracle Linux 8)

    [140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.4.0-3] - Update to 140.4.0 ESR

  • Medium max 7.8
    ELSA-2025-18297 3 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.80.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 9.8
    ELSA-2025-18281 7 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.55.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing K…

  • High max 9.8
    ELSA-2025-18321 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [140.4.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.4.0] - Add OpenELA debranding [140.4.0-2] - Update to 140.4.0 ESR

  • High max 9.8
    ELSA-2025-18097 5 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.50.1-1] - Update to 2.50.1 [2.50.0-1] - Update to 2.50.0

  • High max 9.8
    ELSA-2025-18320 7 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [140.4.0-2.0.1] - Add Oracle prefs [140.4.0-2] - Update to 140.4.0 ESR

  • Medium max 9.8
    ELSA-2025-18318 6 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.40.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

  • Medium max 5.4
    ELSA-2025-18286 1 CVE

    Moderate: libssh security update (Oracle Linux 8)

    [0.9.6-15] - Fix CVE-2025-5318 Resolves: RHEL-111724

  • Medium max 7.5
    ELSA-2025-14997 2 CVEs

    Moderate: httpd security update (Oracle Linux 7)

    [2.4.6-99.0.7.1] - Fixed security update CVE-2024-47252 CVE-2025-49812 [Orabug: 38378160]

  • High max 9.9
    ELSA-2025-18148 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116865

  • High max 9.9
    ELSA-2025-18150 3 CVEs

    Important: .NET 9.0 security update (Oracle Linux 8)

    [9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116856

  • High max 9.8
    ELSA-2025-18070 1 CVE

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.50.1-1] - Update to 2.50.1

  • High max 9.9
    ELSA-2025-18149 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116866

  • High max 9.9
    ELSA-2025-18151 3 CVEs

    Important: .NET 9.0 security update (Oracle Linux 9)

    [9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116857

  • High max 9.8
    ELSA-2025-18155 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • Medium max 5.4
    ELSA-2025-18275 1 CVE

    Moderate: libssh security update (Oracle Linux 9)

    [0.10.4-15] - Rebuild due to broken build auto-tagging [0.10.4-14] - Fix CVE-2025-5318 Resolves: RHEL-111730

  • High max 9.9
    ELSA-2025-18152 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 10)

    [8.0.121-1.0.1] - Add support for Oracle Linux [8.0.121-1] - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116868

  • High max 9.9
    ELSA-2025-18153 3 CVEs

    Important: .NET 9.0 security update (Oracle Linux 10)

    [9.0.111-1.0.1] - Add support for Oracle Linux [9.0.111-1] - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116860

  • High max 7.5
    ELSA-2025-18183 1 CVE

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-7] - Fix handling of invalid dates in cookie expires attribute (CVE-2025-11021) [3.6.5-6] - Add patch for CVE-2025-32907 [3.6.5-5] - Fix release field [3.6.5-4] - Fix several CVEs

  • High max 9.8
    ELSA-2025-18154 7 CVEs

    Important: firefox security update (Oracle Linux 10)

    [140.4.0-3.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.4.0-3] - Update to 140.4.0 ESR

  • Medium max 5.4
    ELSA-2025-18231 1 CVE

    Moderate: libssh security update (Oracle Linux 10)

    [0.11.1-4] - Rebuild due to broken build auto-tagging [0.11.1-3] - Fix CVE-2025-5318 Resolves: RHEL-111720 [0.11.1-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018

  • High max 8.0
    ELSA-2025-17054 1 CVE

    Important: cups security update (Oracle Linux 7)

    [1:1.6.3-52.0.1] - CVE-2025-58060: Authentication Bypass in CUPS Authorization Handling - [Orabug: 38489251]

  • High max 9.8
    ELSA-2025-20716 35 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-313.189.5.1] - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [Orabug: 38528187] {CVE-2025-38236} - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38528183] {CVE-2025-39866} - rtnetlink: Fix L3…

  • Medium max 4.1
    ELSA-2025-17913 2 CVEs

    Moderate: vim security update (Oracle Linux 10)

    [9.1.083-5.0.1.1] - Remove upstream references [Orabug: 31197557] [2:9.1.083-5.1] - RHEL-113550 CVE-2025-53906 vim: Vim path traversal - RHEL-113544 CVE-2025-53905 vim: Vim path traversial

  • High max 9.8
    ELSA-2025-20662 102 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-104.43.4.2.el10uek] - Revert 'sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails' (Joseph Salisbury) [Orabug: 38517178] [6.12.0-104.43.4.1.el10uek] - io_uring: Hide kabi magic from user space (Sherry Yang) [Orabug: 38478874] [6.12.0-1…

  • High max 7.5
    ELSA-2025-16313 1 CVE

    Important: ImageMagick security update (Oracle Linux 7)

    [6.9.10.68-7.0.3] - Security update CVE-2025-57803 [Orabug: 38455460] [6.9.10.68-7.0.1] - Fix for CVE-2025-55154 [Orabug: 38417011]

  • Medium max 8.8
    ELSA-2025-17797 2 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.79.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 9.8
    ELSA-2025-17802 4 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.50.0-1] - Update to 2.50.0

  • Medium max 4.1
    ELSA-2025-17742 2 CVEs

    Moderate: vim security update (Oracle Linux 9)

    [8.2.2637-22.0.1.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-22.1] - RHEL-112006 CVE-2025-53905 vim: Vim path traversial - RHEL-112010 CVE-2025-53906 vim: Vim path traversal [2:8.2.2637-22] - RHEL-2159 vim: Heap Use After Free in function i…

  • Medium max 7.8
    ELSA-2025-17760 4 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.52.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 8.8
    ELSA-2025-17776 3 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.39.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • High max 9.8
    ELSA-2025-20663 141 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.348.3] - hugetlbfs: take read_lock on i_mmap for PMD sharing (Waiman Long) [Orabug: 38459576] - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 37629344] [Orabug: 38418686] - kallsyms: export module_kallsyms_on_each…

  • High max 8.8
    ELSA-2025-17675 1 CVE

    Important: compat-libtiff3 security update (Oracle Linux 8)

    [3.9.4-14] - fix CVE-2025-9900: Write-What-Where via TIFFReadRGBAImageOriented (RHEL-112528)

  • Medium max 4.1
    ELSA-2025-17715 2 CVEs

    Moderate: vim security update (Oracle Linux 8)

    [8.0.1763-21.0.1] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-21] - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim…

  • High max 8.5
    ELSA-2025-16130 1 CVE

    Important: udisks2 security update (Oracle Linux 7)

    [2.8.4-1.0.1] - Fix index underflow in LoopSetup (CVE-2025-8067) [Orabug: 38444282]

  • Critical max 10.0
    ELSA-2025-20656 1 CVE

    Critical: redis security update (Oracle Linux 8)

    [6.2.9-1.0.2] - Fix for CVE-2025-49844 [Orabug: 38515582]