8,316 results · Feed
-
High max 9.8ELSA-2025-20520 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-311.185.9] - nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng) [Orabug: 37781252] [5.15.0-311.185.8] - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju) [Orabug: 38182400] - net/rds: poll eq during user-reset (Praveen Kumar K…
-
High max 8.1ELSA-2025-10861 4 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.462.b08-1.0.1] - Update to 8u462-b08 (GA) [Orabug: 38248370] - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - Sync the copy of the portable specfile with the l…
-
High max 9.8ELSA-2025-12662 11 CVEs
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.25.1.0.1] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Di…
-
Medium max 5.6ELSA-2025-13429 2 CVEs
Moderate: libxml2 security update (Oracle Linux 10)
[2.12.5-9] - Fix CVE-2025-32415 (RHEL-100174) - Fix CVE-2025-32414 (RHEL-99861)
-
High max 9.8ELSA-2025-12278 9 CVEs
Important: firefox security update (Oracle Linux 7)
[128.13.0-1.0.1] - Update to 128.13.0 [Orabug: 38256809][CVE-2025-8027][CVE-2025-8028] [CVE-2025-8029][CVE-2025-8030][CVE-2025-8031][CVE-2025-8032][CVE-2025-8033] [CVE-2025-8034][CVE-2025-8035]
-
Medium max 5.3ELSA-2025-13234 1 CVE
Moderate: python-requests security update (Oracle Linux 8)
[2.20.0-6] - Security fix for CVE-2024-47081 Resolves: RHEL-102420
-
Medium max 7.5ELSA-2025-13315 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 8)
[2.36.12-7] - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102346
-
Medium max 5.6ELSA-2025-13428 2 CVEs
Moderate: libxml2 security update (Oracle Linux 9)
[2.9.13-12] - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873)
-
Medium max 5.9ELSA-2025-13240 1 CVE
Moderate: glibc security update (Oracle Linux 10)
[2.39-46.0.1] - Forward port Oracle changes. Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: July-15-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-43.0.1 - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.march…
-
Medium max 2.9ELSA-2025-13203 1 CVE
Moderate: libxml2 security update (Oracle Linux 8)
[2.9.7.21.3] - Fix CVE-2025-32415 (RHEL-100177) [2.9.7.21.2] - Fix CVE-2025-7425 (RHEL-102797) [2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424)
-
Medium max 7.7ELSA-2025-11984 1 CVE
Moderate: python-setuptools security update (Oracle Linux 7)
[0.9.8-7.0.3] - Fix CVE-2025-47273 [Orabug: 38247921]
-
High max 7.2ELSA-2025-12349 1 CVE
Important: sqlite security update (Oracle Linux 7)
[3.7.17-8.0.1.1] - Fix for CVE-2025-6965 [Orabug: 38260859]
-
High max 8.8ELSA-2025-12752 6 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.66.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
Medium max 5.9ELSA-2025-12980 1 CVE
Moderate: glibc security update (Oracle Linux 8)
[2.28-251.0.3.25] - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: June-9-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.22 - Forward port of Oracle patches Reviewed-by: David Faus…
-
Medium max 7.5ELSA-2025-12838 1 CVE
Moderate: mod_security security update (Oracle Linux 9)
[2.9.6-2.1] - Resolves: RHEL-100102 - CVE-2025-48866 mod_security: ModSecurity Denial of Service Vulnerability
-
Low max 7.1ELSA-2025-12876 1 CVE
Low: ncurses security update (Oracle Linux 9)
[6.2-10.20210508.el9_6.2] - remove execute permissions from ANNOUNCE file (RHEL-102738) [6.2-10.20210508.el9_6.1] - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100139)
-
Medium max 7.7ELSA-2025-12834 1 CVE
Moderate: python3.12-setuptools security update (Oracle Linux 9)
[68.2.2-5] - Security fix for CVE-2025-47273 Resolves: RHEL-101118
-
Medium max 5.3ELSA-2025-12842 2 CVEs
Moderate: qt5-qt3d security update (Oracle Linux 9)
[5.15.9-2] - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-105000 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105005
-
Medium max 7.5ELSA-2025-12841 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 9)
[2.42.6-6] - Fix an oversight - Related: RHEL-102354 [2.42.6-5] - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354
-
High max 8.8ELSA-2025-12746 9 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.32.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
Medium max 5.9ELSA-2025-12748 1 CVE
Moderate: glibc security update (Oracle Linux 9)
[2.34-168.0.1.23] - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history:
-
Medium max 7.5ELSA-2025-12862 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 10)
[2.42.12-4] - jpeg: Be more careful with chunked icc data
-
Medium max 7.7ELSA-2025-12882 2 CVEs
Moderate: jq security update (Oracle Linux 10)
[1.7.1-8.el10_0.1] - jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337) - jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)
-
Medium max 7.7ELSA-2025-11607 1 CVE
Moderate: python3-setuptools security update (Oracle Linux 7)
[39.2.0-10.0.5] - Back port fix for CVE-2025-47273 [Orabug: 38229296]
-
Medium max 5.9ELSA-2025-12527 1 CVE
Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)
hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] libguestfs-winsupport [8.10-1] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236373 libiscsi libnbd [1.6.0-6.el8] - Fix CVE-2024-7…
-
Medium max 5.3ELSA-2025-12519 1 CVE
Moderate: python-requests security update (Oracle Linux 9)
[2.25.1-10] - Security fix for CVE-2024-47081 Resolves: RHEL-105461
-
High max 7.0ELSA-2025-10796 1 CVE
Important: libblockdev security update (Oracle Linux 7)
[2.18-5.0.1] - Don't allow suid and dev set on fs resize (CVE-2025-6019) - [Orabug: 38176252]
-
High max 8.6ELSA-2025-11358 2 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.10] - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao) {CVE-2022-50066} [Orabug: 38201271] - net: atm: fix use after free in lec_send() (Dan Carpenter) {CVE-2025-22004} [Orabug: 38201271]
-
High max 7.8ELSA-2025-12450 1 CVE
Important: libxml2 security update (Oracle Linux 8)
[2.9.7.21.2] - Fix CVE-2025-7425 (RHEL-102797) [2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424)
-
High max 7.8ELSA-2025-12447 1 CVE
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-11] - Fix CVE-2025-7425 (RHEL-102806)
-
High max 8.8ELSA-2025-10814 1 CVE
Important: apache-commons-beanutils security update (Oracle Linux 7)
[1.8.3-15.0.1] - Add SuppressPropertiesBeanIntrospector.SUPPRESS_DECLARING_CLASS [Orabug: 38176946][CVE-2025-48734] [1.8.3-15] - Fix CVE-2014-0114 - Fix CVE-2019-10086 [1.8.3-14] - Mass rebuild 2013-12-27 [1.8.3-13] - Add BuildRequires on apache-commons-paren…
-
High max 7.2ELSA-2025-11802 1 CVE
Important: nodejs:22 security update (Oracle Linux 9)
nodejs [1:22.16.0-2] - Patch fix for CVE-2025-6965 Resolves: RHEL-103851 nodejs-nodemon nodejs-packaging
-
High max 7.5ELSA-2025-12008 3 CVEs
Important: redis:7 security update (Oracle Linux 9)
[7.2.10-1.0.1] - Build with 64k pages to support redis on UEK on aarch64 [7.2.10-1] - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 [7.2.8-1] - rebase to 7.2.8 for CVE-2025-21605 [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2…
-
High max 8.7ELSA-2025-12280 1 CVE
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update (Oracle Linux 9)
jackson-annotations [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-core [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-103636 jackson-databind [2.19.1-1] - Update to version 2.19.1 - Resolves: RHEL-100233 jackson-jaxrs-providers…
-
High max 9.8ELSA-2025-11797 9 CVEs
Important: firefox security update (Oracle Linux 10)
[128.13.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.13.0-1] - Update to 128.13.0 build1
-
High max 9.8ELSA-2025-12188 9 CVEs
Important: thunderbird security update (Oracle Linux 10)
[128.13.0-3.0.1] - Add Oracle prefs [128.13.0-3] - Update to 128.13.0 build3 [128.13.0-2] - Update to 128.13.0 build2 [128.13.0-1] - Update to 128.13.0 build1
-
Medium max 8.4ELSA-2025-11855 5 CVEs
Moderate: kernel security update (Oracle Linux 10)
[6.12.0-55.24.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…
-
High max 7.5ELSA-2025-12006 2 CVEs
Important: redis:6 security update (Oracle Linux 8)
[6.2.19-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367
-
Medium max 8.4ELSA-2025-11861 10 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-570.30.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
Medium max 7.0ELSA-2025-12083 1 CVE
Moderate: icu security update (Oracle Linux 9)
[67.1-10] - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664