Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 9.8
    ELSA-2025-20609 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5.3] - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38454666] {CVE-2025-38494} - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38454665] {CVE-2025-38618} - clone_private_mnt(): make sur…

  • High max 9.8
    ELSA-2025-20608 6 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-103.40.4.3] - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38453836] {CVE-2025-38560} - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug: 38453837] {CVE-2025-38500} -…

  • Medium max 6.5
    ELSA-2025-20606 4 CVEs

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-6.2_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409] - Update FIPS module name for Oracle Linux [Orabug: 35925409] [3.8.3-6.2] - key_update: rework the rekeying logic (RHEL-107498) [3.8.3-6.1] - Fix CVE…

  • Medium max 6.5
    ELSA-2025-16115 4 CVEs

    Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 10)

    [3.8.9-9.14] - key_update: rework the rekeying logic (RHEL-107498) - Fix CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990

  • Medium max 6.5
    ELSA-2025-16116 4 CVEs

    Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 9)

    [3.8.3-6.2] - key_update: rework the rekeying logic (RHEL-107498) [3.8.3-6.1] - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395

  • High max 8.8
    ELSA-2025-16108 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 8.8
    ELSA-2025-16156 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [140.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

  • Medium max 6.7
    ELSA-2025-16154 5 CVEs

    Moderate: grub2 security update (Oracle Linux 10)

    [2.12-15.0.1] - efinet: Close and reopen card on failure [Orabug: 37808688] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only wi…

  • Medium max 7.8
    ELSA-2025-15782 7 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.33.1.0.1.el10_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin…

  • High max 8.8
    ELSA-2025-16109 7 CVEs

    Important: firefox security update (Oracle Linux 10)

    [140.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [140.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • High max 8.8
    ELSA-2025-16157 7 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [140.3.0-1.0.1] - Add Oracle prefs [140.3.0] - Add OpenELA debranding [140.3.0-1] - Update to 140.3.0 ESR

  • High max 7.8
    ELSA-2025-14748 9 CVEs

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.11.el7.OL7] - kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) - kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) - kernel: ext4: fix off-by-one error in do_split (CVE-2025…

  • Medium max 7.8
    ELSA-2025-14987 1 CVE

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.11.el7.OL7] - kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) - kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) - kernel: ext4: fix off-by-one error in do_split (CVE-2025…

  • High max 8.1
    ELSA-2025-15904 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Ger…

  • Medium max 7.5
    ELSA-2025-16046 53 CVEs

    Moderate: mysql:8.4 security update (Oracle Linux 9)

    mecab mecab-ipadic mysql [8.4.6-1] - Rebase to 8.4.6 [8.4.5-1] - Rebase to 8.4.5 rapidjson [1.1.0-19] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1.1.0-18] - Remove gtest dependency and turn off tests Resolves: #1977656 [1.1.0-17]…

  • High max 8.1
    ELSA-2025-15900 1 CVE

    Important: podman security update (Oracle Linux 9)

    [5.4.0-13.0.1] - Fix a potential deadlock during podman cp [Orabug: 38252957] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case…

  • Medium max 5.9
    ELSA-2025-15874 1 CVE

    Moderate: python-cryptography security update (Oracle Linux 9)

    [36.0.1-5] - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97450

  • High max 8.1
    ELSA-2025-15901 1 CVE

    Important: podman security update (Oracle Linux 10)

    [6:5.4.0-13.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-13] - update to the latest conte…

  • High max 7.8
    ELSA-2025-15785 4 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.75.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 7.8
    ELSA-2025-15740 1 CVE

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.44.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.8
    ELSA-2025-14828 1 CVE

    Important: libarchive security update (Oracle Linux 7)

    [3.1.2-14.0.1] - rar: Fix double free [Orabug: 38364091][CVE-2025-5914]

  • High max 7.8
    ELSA-2025-15661 4 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.42.2.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.8
    ELSA-2025-15662 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.32.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

  • High max 8.0
    ELSA-2025-15701 2 CVEs

    Important: cups security update (Oracle Linux 10)

    [-1:2.4.10-11.1] - CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

  • Medium max 7.5
    ELSA-2025-14683 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 7)

    [2.36.12-3.0.1] - jpeg: Be more careful with chunked icc data [Orabug: 38359772][CVE-2025-7345]

  • Medium max 6.3
    ELSA-2025-15687 8 CVEs

    Moderate: php:8.2 security update (Oracle Linux 8)

    libzip php [8.2.28-1] - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

  • High max 8.0
    ELSA-2025-15702 1 CVE

    Important: cups security update (Oracle Linux 8)

    [1:2.2.6-63] - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

  • High max 8.0
    ELSA-2025-15700 2 CVEs

    Important: cups security update (Oracle Linux 9)

    [1.2.3.3op2-33.1] - RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS [1.2.3.3op2-33.1] - RHEL-112438 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling

  • Medium max 7.5
    ELSA-2025-15699 53 CVEs

    Moderate: mysql-selinux and mysql8.4 security update (Oracle Linux 10)

    mysql-selinux [1.0.14-1] - Update to version 1.0.14 - Resolves: rhbz#2380217 mysql8.4 [8.4.6-1] - Rebase to 8.4.6 [8.4.5-1] - Rebase to 8.4.5

  • High max 7.8
    ELSA-2025-15447 4 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.31.1.0.1.el10_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin…

  • Medium max 5.6
    ELSA-2025-10991 1 CVE

    Moderate: microcode_ctl security update (Oracle Linux 8)

    [4:20250512-1.0.1] - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized [Orabug: 35710077] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no…

  • High max 7.8
    ELSA-2025-15429 2 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.41.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2025-15608 1 CVE

    Important: python3.12-cryptography security update (Oracle Linux 9)

    [41.0.7-2.1] - Security fix for CVE-2024-26130 Resolves: RHEL-112483

  • High max 7.8
    ELSA-2025-15471 2 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.74.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High
    ELSA-2025-20560 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.347.6.1] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343661] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343661] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343661] - x86…

  • High max 9.8
    ELSA-2025-20553 47 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.347.6] - net_sched: sch_sfq: move the limit validation (Octavian Purdila) [Orabug: 38377926] {CVE-2025-37752} - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila) [Orabug: 38377926] - net_sched: sch_sfq:…

  • High
    ELSA-2025-20559 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5.1] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343660] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343660] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343660] - x86/…

  • High
    ELSA-2025-20558 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-103.40.4.2.el10uek] - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343659] - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343659] - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343659]…

  • Medium max 2.9
    ELSA-2025-13789 1 CVE

    Moderate: libxml2 security update (Oracle Linux 7)

    [2.9.1-6.0.11.6] - Fix CVE-2025-32415: Fix heap buffer overflow [Orabug: 38310750]

  • High max 9.8
    ELSA-2025-20552 117 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-312.187.5] - Revert 'mm: hugetlb: independent PMD page table shared count' (Harshit Mogalapalli) [Orabug: 38327655] [5.15.0-312.187.4] - rds: Fix NULL ptr deref in xas_start (Hakon Bugge) [Orabug: 38166374] - KVM: x86: use array_index_nospec with indi…