Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

High max 10.0

ELSA-2025-20654 1 CVE

Important: redis security update (Oracle Linux 9)

[7.2.10-1.0.2] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
High max 10.0

ELSA-2025-20655 1 CVE

Important: redis security update (Oracle Linux 9)

[6.2.19-1.0.1] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
Medium max 6.5

ELSA-2025-17558 1 CVE

Moderate: iputils security update (Oracle Linux 9)

[20210202-11.0.1.3] - Upstream backport 'ping: Add SA_RESTART to sa_flags' [Orabug: 34573399] [20210202-11.3] - Bump release [20210202-11.2] - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112001) [20210202-11.1] - Fix CVE-2025-47268 iputils: Sig…

Oct 8, 2025
High max 10.0

ELSA-2025-20653 1 CVE

Important: valkey security update (Oracle Linux 10)

[8.0.4-1.0.1] - Fix for CVE-2025-49844 [Orabug: 38515582]

Oct 8, 2025
Medium max 9.8

ELSA-2025-17397 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.78.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Oct 7, 2025
High max 7.8

ELSA-2025-17509 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 8)

[12.3.5-2.0.1.el8.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 2181…

Oct 7, 2025
Medium max 6.5

ELSA-2025-17415 3 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 8)

[3.6.16-8.4] - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 [3.6.16-8.3] - Backport the fix for CVE-2024-12243

Oct 7, 2025
Medium max 8.8

ELSA-2025-17377 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.51.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Oct 7, 2025
High max 7.8

ELSA-2025-17428 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 9)

[12.5.0-1.0.1.2] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21819156…

Oct 7, 2025
High max 7.8

ELSA-2025-17429 1 CVE 1 exploited

Important: open-vm-tools security update (Oracle Linux 10)

[12.5.0-1.0.1.el10_0.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 2…

Oct 7, 2025
Medium max 7.8

ELSA-2025-17396 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.38.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

Oct 7, 2025
Medium max 9.8

ELSA-2025-20650 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.4] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724}

Oct 6, 2025
High max 9.8

ELSA-2025-20649 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-103.40.4.4] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38500610] {CVE-2025-38724} - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38500621] {CVE-2025-39…

Oct 6, 2025
Medium max 7.5

ELSA-2025-16117 1 CVE

Moderate: python3 security update (Oracle Linux 7)

[3.6.8-21.0.5] - tarfile now validates archives to ensure member offsets are non-negative [Orabug: 38442771][CVE-2025-8194]

Oct 2, 2025
High max 9.1

ELSA-2025-17085 1 CVE

Important: ipa security update (Oracle Linux 10)

[4.12.2-15.0.1.el10_0.4] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-15.el10_0.4] - Resolves: RHEL-113245 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host …

Oct 2, 2025
High max 9.1

ELSA-2025-17129 1 CVE

Important: idm:DL1 security update (Oracle Linux 8)

bind-dyndb-ldap [11.6-6] - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa [4.9.13-20.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.13-20] - Refactor ipatests for unique krbcanonicalname Resolves: RHEL-110061 [4.9.13…

Oct 1, 2025
Medium max 7.5

ELSA-2025-17163 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 8)

[1:3.04-4] - Resolves: RHEL-113630 - Fix CVE-2025-40928 - Package tests

Oct 1, 2025
High max 9.1

ELSA-2025-17084 1 CVE

Important: ipa security update (Oracle Linux 9)

[4.12.2-14.0.1.5] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-14.5] - Resolves: RHEL-110068 EMBARGOED CVE-2025-7493 ipa: Privilege escalation from host to domain admi…

Oct 1, 2025
Medium max 7.5

ELSA-2025-17162 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 9)

[1:4.04-1] - Update to 4.04 - Fix CVE-2025-40928

Oct 1, 2025
Medium max 9.8

ELSA-2025-16904 6 CVEs 1 exploited

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.37.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Oct 1, 2025
Medium max 7.5

ELSA-2025-17119 1 CVE

Moderate: perl-JSON-XS security update (Oracle Linux 10)

[1:4.04-1] - Update to 4.04 - Resolves: RHEL-113624 - Fix CVE-2025-40928

Sep 30, 2025
High max 9.3

ELSA-2025-14414 2 CVEs

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.7.13] - Fixes CVE-2025-54574, add URN access disabling config options [Orabug: 38350105] [7:3.5.20-17.0.5.13] - Fixed cve 2023-46846 for http and icap request/response smuggling [Orabug: 37326730]

Sep 29, 2025
High max 8.8

ELSA-2025-20645 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.3] - uek-rpm: Move ifb module to nano modules (Harshit Mogalapalli) [Orabug: 38462132]

Sep 29, 2025
Medium max 6.5

ELSA-2025-16861 51 CVEs

Moderate: mysql:8.0 security update (Oracle Linux 8)

mecab mecab-ipadic mysql [8.0.43-1] - Rebase to MySQL 8.0.43 [8.0.42-1] - Rebase to MySQL 8.0.42

Sep 29, 2025
Medium max 7.8

ELSA-2025-16919 4 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.77.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 29, 2025
Medium max 9.8

ELSA-2025-16880 5 CVEs 1 exploited

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.49.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Sep 29, 2025
Medium max 6.8

ELSA-2025-16823 1 CVE

Moderate: openssh security update (Oracle Linux 8)

[8.0p1-26.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-26] - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228

Sep 26, 2025
High max 6.2

ELSA-2025-15728 1 CVE

Important: aide security update (Oracle Linux 7)

[0.15.1-13.0.3] - aide security update CVE-2025-54389 [Orabug: 38427919]

Sep 25, 2025
High max 7.8

ELSA-2025-15648 2 CVEs 1 exploited

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.12] - scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332) [Orabug: 38414589] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352) [Orabug: 38414589]

Sep 25, 2025
High max 8.8

ELSA-2025-16589 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[140.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

Sep 25, 2025
High max 8.8

ELSA-2025-20632 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.347.6.2] - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38453918] {CVE-2025-38499} - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38453914] - HID: core: ensure t…

Sep 24, 2025
Medium max 9.8

ELSA-2025-16354 2 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.34.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Sep 24, 2025
High max 8.8

ELSA-2025-15666 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-7.0.1] - Fix for CVE-2025-55154 [Orabug: 38417011]

Sep 23, 2025
High max 8.8

ELSA-2025-16260 7 CVEs

Important: firefox security update (Oracle Linux 8)

[140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [140.3.0-1] - Update to 140.3.0

Sep 23, 2025
Medium max 7.8

ELSA-2025-16398 4 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.46.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Sep 23, 2025
Medium max 5.9

ELSA-2025-16428 1 CVE

Moderate: libtpms security update (Oracle Linux 10)

[0.9.6-11] - Fix CVE-2025-49133 Resolves: RHEL-96247

Sep 23, 2025
Medium max 5.3

ELSA-2025-16441 1 CVE

Moderate: avahi security update (Oracle Linux 10)

[0.9~rc2-1.1] - Fix for CVE-2024-52615 (RHEL-67715)

Sep 23, 2025
High max 9.8

ELSA-2025-15430 5 CVEs

Important: firefox security update (Oracle Linux 7)

[128.14.0-2.0.1] - Update to 128.14.0 [Orabug: 38400668][CVE-2025-9179][CVE-2025-9180] [CVE-2025-9181][CVE-2025-9182][CVE-2025-9185]

Sep 22, 2025
Medium max 7.8

ELSA-2025-16372 3 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.76.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 22, 2025
Medium max 6.5

ELSA-2025-16086 51 CVEs

Moderate: mysql security update (Oracle Linux 9)

[8.0.43-1] - Rebase to MySQL 8.0.43 [8.0.42-1] - Rebase to MySQL 8.0.42

Sep 22, 2025