Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

High max 7.8

ELSA-2025-13464 1 CVE

Important: libxml2 security update (Oracle Linux 7)

[2.9.1-6.0.9.6] - Fix CVE-2025-7425: heap-use-after-free in xmlFreeID [Orabug: 38290330]

Aug 25, 2025
High max 9.8

ELSA-2025-14442 5 CVEs

Important: firefox security update (Oracle Linux 8)

[128.14.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.14.0-2] - Add missing translations [128.14.0-1] - Update to 128.14.0 …

Aug 25, 2025
Medium max 7.5

ELSA-2025-14546 1 CVE

Moderate: python3.12 security update (Oracle Linux 8)

[3.12.11-2] - Security fix for CVE-2025-8194 Resolves: RHEL-106343

Aug 25, 2025
Medium

ELSA-2025-14438 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.71.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Aug 25, 2025
High max 9.8

ELSA-2025-14416 5 CVEs

Important: firefox security update (Oracle Linux 9)

[128.14.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

Aug 25, 2025
High max 6.2

ELSA-2025-14493 1 CVE

Important: aide security update (Oracle Linux 9)

[0.16-103.2] RHEL 9.6.Z ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109910

Aug 25, 2025
High max 7.8

ELSA-2025-14420 3 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-570.37.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 25, 2025
High max 9.8

ELSA-2025-14417 5 CVEs

Important: firefox security update (Oracle Linux 10)

[128.14.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

Aug 25, 2025
High max 8.7

ELSA-2025-14126 1 CVE

Important: pki-deps:10.6 security update (Oracle Linux 8)

apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent [69-1] - Rebase to version 69 - Resolves: RHEL-103106 glassfish-fastinfoset glassfish-jaxb glassfish-jaxb-api jackson-annotations [2.19.1-1] - Rebase to upstream v…

Aug 22, 2025
High max 7.5

ELSA-2025-14179 6 CVEs

Important: tomcat security update (Oracle Linux 10)

[1:10.1.36-1.2] - tomcat: Apache Tomcat DoS in multipart upload (CVE-2025-48988) - tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - apache-commons-fileupload: Apache Commons FileUpload DoS via part headers (CVE-2025-…

Aug 22, 2025
High max 7.5

ELSA-2025-14178 7 CVEs

Important: tomcat9 security update (Oracle Linux 10)

[1:9.0.87-5.3] - Resolves: tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: tomcat: Dos in multipart upload (CVE-2025-48988)…

Aug 21, 2025
High max 9.8

ELSA-2025-14009 5 CVEs

Important: kernel security update (Oracle Linux 10)

[6.12.0-55.28.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Aug 21, 2025
High max 7.8

ELSA-2025-14135 1 CVE

Important: libarchive security update (Oracle Linux 8)

[3.3.3-6] - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515

Aug 20, 2025
High max 7.5

ELSA-2025-14177 7 CVEs

Important: tomcat security update (Oracle Linux 8)

[1:9.0.87-1.el8_10.6] - Resolves: RHEL-102193 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989) [1:9.0.87-1.el8_10.5] - Resolves: RHEL-108486 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resol…

Aug 20, 2025
High max 7.8

ELSA-2025-14130 1 CVE

Important: libarchive security update (Oracle Linux 9)

[3.5.3-6] - Resolves: CVE-2025-5914

Aug 20, 2025
High max 7.5

ELSA-2025-14181 7 CVEs

Important: tomcat security update (Oracle Linux 9)

[1:9.0.87-3.el9_6.3] - Resolves: RHEL-102200 tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989) [1:9.0.87-3.el9_6.2] - Resolves: RHEL-108491 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolve…

Aug 20, 2025
High max 7.8

ELSA-2025-14137 1 CVE

Important: libarchive security update (Oracle Linux 10)

[3.7.7-4] - Resolves: CVE-2025-5914

Aug 20, 2025
High max 7.2

ELSA-2025-14101 1 CVE

Important: mingw-sqlite security update (Oracle Linux 8)

[3.26.0.0-2] - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix CVE-2023-7104 - Fix CVE-2025-6965 Resolves: RHEL-103830

Aug 19, 2025
Medium

ELSA-2025-14075 1 CVE

Moderate: xterm security update (Oracle Linux 9)

[366-12] - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 [366-11] - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430

Aug 19, 2025
Medium max 6.2

ELSA-2025-20533 1 CVE

Moderate: python-zipp security update (Oracle Linux 9)

[3.20.1-2] - Make package buildable for epel>=9 [3.20.1-1] - Update to 3.20.1 (rhbz#2307990) [3.20.0-1] - Update to 3.20.0 (rhbz#2304028) [3.19.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild [3.19.2-2] - Rebuilt for Python 3.13 [3.19…

Aug 19, 2025
Medium max 6.2

ELSA-2025-38828 1 CVE

Moderate: python-zipp security update (Oracle Linux 9)

[3.20.1-2] - Make package buildable for epel>=9 [3.20.1-1] - Update to 3.20.1 (rhbz#2307990) [3.20.0-1] - Update to 3.20.0 (rhbz#2304028) [3.19.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild [3.19.2-2] - Rebuilt for Python 3.13 [3.19…

Aug 19, 2025
High max 9.8

ELSA-2025-13962 9 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-570.35.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 19, 2025
High max 7.8

ELSA-2025-13960 4 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.70.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Aug 18, 2025
High max 8.6

ELSA-2025-13940 1 CVE

Important: go-toolset:ol8 security update (Oracle Linux 8)

delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.24.6-1] - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106455 go-toolset [1.24.6-1] - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106455

Aug 18, 2025
High max 8.6

ELSA-2025-13941 1 CVE

Important: golang security update (Oracle Linux 10)

[1.24.6-1] - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106464

Aug 18, 2025
High max 6.6

ELSA-2025-13944 1 CVE

Important: openjpeg2 security update (Oracle Linux 10)

[2.5.2-4.1] - fix OpenJPEG OOB heap memory write (CVE-2025-54874)

Aug 18, 2025
High max 10.0

ELSA-2025-20530 1345 CVEs 3 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-102.36.5.2] - iommu/vt-d: Fix misplaced domain_attached assignment (Ban ZuoXiang) [Orabug: 38294635] [6.12.0-102.36.5.1] - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337] [6.12.0-102.36.5] - uek-…

Aug 18, 2025
High max 8.6

ELSA-2025-13935 1 CVE

Important: golang security update (Oracle Linux 9)

[1.24.6-1] - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106464

Aug 17, 2025
Medium max 8.8

ELSA-2025-13598 7 CVEs

Moderate: kernel security update (Oracle Linux 10)

[6.12.0-55.27.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…

Aug 15, 2025
High max 9.1

ELSA-2025-12240 4 CVEs

Important: libxml2 security update (Oracle Linux 7)

[2.9.1-6.0.7.6] - Fix CVE-2025-6021, CVE-2025-32414, CVE-2025-49794, CVE-2025-49796 - [Orabug: 38255814]

Aug 13, 2025
High max 8.8

ELSA-2025-13780 9 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.48.5-1] - Update to 2.48.5

Aug 13, 2025
High max 8.8

ELSA-2025-13782 9 CVEs 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.48.5-1] - Update to 2.48.5

Aug 13, 2025
Medium max 8.8

ELSA-2025-13602 2 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-570.33.2.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

Aug 13, 2025
High max 8.2

ELSA-2025-12346 1 CVE

Important: konsole security update (Oracle Linux 7)

[4.10.5-5.0.1] - Clear the arguments if the command is not found [Orabug: 38260855][CVE-2025-49091]

Aug 12, 2025
High max 8.1

ELSA-2025-11688 1 CVE 1 exploited

Important: git security update (Oracle Linux 7)

[1.8.3.1-25.0.1] - Fixed CVE-2025-48384 [Orabug: 38234220 ]

Aug 12, 2025
High max 9.8

ELSA-2025-13676 9 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.13.0-3.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.13.0] - Add OpenELA debranding [128.13.0-3] - Update to 128.13.0 build3 [128.13.0-2] - Update to 128.13.0 build2 [128.13.0-1] - Update to 128.13.0 build1

Aug 12, 2025
Medium max 8.8

ELSA-2025-13589 6 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.69.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Aug 11, 2025
Medium max 7.7

ELSA-2025-13578 1 CVE

Moderate: python3.11-setuptools security update (Oracle Linux 9)

[65.5.1-4] - Security fix for CVE-2025-47273 Resolves: RHEL-101113

Aug 11, 2025
Medium max 5.3

ELSA-2025-13604 1 CVE

Moderate: python-requests security update (Oracle Linux 10)

[2.32.4-1] - Update to 2.32.4 - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs Resolves: RHEL-105460

Aug 11, 2025
High max 9.8

ELSA-2025-20521 42 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.346.6] - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju) [Orabug: 38109070] - net/rds: poll eq during user-reset (Praveen Kumar Kannoju) [Orabug: 38189315] [5.4.17-2136.346.5] - perf: Fix perf_event_validate_size() lockdep s…

Aug 10, 2025