8,316 results · Feed
-
High max 9.8ELSA-2025-12187 9 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.13.0-3.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.13.0] - Add OpenELA debranding [128.13.0-3] - Update to 128.13.0 build3 [128.13.0-2] - Update to 128.13.0 build2 [128.13.0-1] - Update to 128.13.0 build1
-
Medium max 5.9ELSA-2025-12100 1 CVE
Moderate: libtpms security update (Oracle Linux 9)
[0.9.1-5.20211126git1ff6fe1f43] - Fix CVE-2025-49133 Resolves: RHEL-96258
-
Medium max 5.9ELSA-2025-12056 1 CVE
Moderate: perl security update (Oracle Linux 10)
[4:5.40.2-512.2] - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir
-
High max 8.7ELSA-2025-12064 1 CVE
Important: unbound security update (Oracle Linux 10)
[1.20.0-12] - Fix CVE-2025-5994
-
High max 8.6ELSA-2025-10873 4 CVEs
Important: java-21-openjdk security update (Oracle Linux 8)
[1:21.0.8.0.9-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.8.0.9-1.1] - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is em…
-
High max 7.2ELSA-2025-11933 1 CVE
Important: sqlite security update (Oracle Linux 10)
[3.46.1-5] - Fix CVE-2025-6965 [3.46.1-4] - Fix for CVE-2025-3277 - Resolves: RHEL-87295 [3.46.1-3] - Enabled sqlite-session feature - Resolves: RHEL-77326 [3.46.1-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [3.46.1-1] - Update to 3.…
-
High max 7.2ELSA-2025-11803 1 CVE
Important: nodejs:22 security update (Oracle Linux 8)
nodejs [1:22.16.0-2] - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 [1:22.15-1-1] - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for s…
-
Medium max 5.9ELSA-2025-11805 1 CVE
Moderate: perl security update (Oracle Linux 8)
[4:5.26.3-423] - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x
-
High max 8.7ELSA-2025-11884 1 CVE
Important: unbound security update (Oracle Linux 8)
[1.16.2-5.9] - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104123
-
Medium max 7.8ELSA-2025-11850 3 CVEs
Moderate: kernel security update (Oracle Linux 8)
[4.18.0-553.64.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 7.2ELSA-2025-12010 1 CVE
Important: sqlite security update (Oracle Linux 8)
[3.26.0-20] - Fixes CVE-2025-6965
-
Medium max 5.9ELSA-2025-11804 1 CVE
Moderate: perl security update (Oracle Linux 9)
[4:5.32.1-481.1] - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir
-
High max 8.7ELSA-2025-11849 1 CVE
Important: unbound security update (Oracle Linux 9)
[1.16.2-19.1] - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104128
-
High max 7.2ELSA-2025-11992 1 CVE
Important: sqlite security update (Oracle Linux 9)
[3.34.1-8] - Fixes CVE-2025-6965
-
High max 8.1ELSA-2025-10862 4 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.462.b08-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.462.b08-1] - Update to 8u462-b08 (GA) - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion of JDK-8352716 - Add early backport of JDK-8339414 - S…
-
Medium max 7.0ELSA-2025-11888 1 CVE
Moderate: icu security update (Oracle Linux 10)
[74.2-5] - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96667 [74.2-4] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [74.2-3] - Resolves: RHEL-59365 Fix coverity warnings [74.2-2] - Bump release for June 2024 mass rebu…
-
Critical max 9.8ELSA-2025-11747 9 CVEs
Critical: firefox security update (Oracle Linux 8)
[128.13.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.13.0-1] - Update to 128.13.0 build1
-
Critical max 9.8ELSA-2025-11748 9 CVEs
Critical: firefox security update (Oracle Linux 9)
[128.13.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …
-
High max 2.8ELSA-2025-10871 1 CVE
Important: sudo security update (Oracle Linux 7)
[1.8.23-10.0.1.3] - CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]
-
Medium max 7.5ELSA-2025-10548 1 CVE
Moderate: apache-commons-vfs security update (Oracle Linux 7)
[2.0-11.0.1] - Simplify UriParser [Orabug: 38161936][CVE-2025-27553]
-
High max 7.8ELSA-2025-10360 5 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-29.0.3] - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695] [1.20.4-29.0.1] - Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 - CVE-20…
-
High max 7.8ELSA-2025-10375 5 CVEs
Important: tigervnc security update (Oracle Linux 7)
[1.8.0-33.0.7] - Fix CVE-2025-49175, CVE-2025-49176, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180 [Orabug: 38157695]
-
High max 8.6
Important: git security update (Oracle Linux 8)
[2.43.7-1] - update to 2.43.7 - Resolves: RHEL-102440, RHEL-102454, RHEL-102674, RHEL-102680
-
High max 7.5ELSA-2025-11453 2 CVEs
Important: redis security update (Oracle Linux 9)
[6.2.19-1] - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605 [6.2.17-1] -- rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-26627
-
High max 8.6
Important: git security update (Oracle Linux 10)
[2.47.3-1] - update to 2.47.3 - Resolves: RHEL-102437, RHEL-102451, RHEL-102673, RHEL-102679
-
High max 9.8ELSA-2025-11428 5 CVEs
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.22.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…
-
High max 9.3
Important: sudo security update (Oracle Linux 10)
[1.9.15-8.p5.2] - RHEL 10.1 ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009 - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022
-
Medium max 9.8ELSA-2025-11455 2 CVEs
Moderate: kernel security update (Oracle Linux 8)
- [4.18.0-553.63.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…
-
High max 8.8ELSA-2025-11324 1 CVE
Important: cloud-init security update (Oracle Linux 8)
[23.4-7.0.2.el8_10.10] - Fixes regression in cloud-init with module cc_write_files_deferred [Orabug: 37382965] - Update IPv6 IMDS endpoint to ULA and drop NIC identifier [Orabug: 35965980] - Enable IPv6 [Orabug: 36502414] - Added missing services in rhel/syst…
-
High max 8.6
Important: git security update (Oracle Linux 9)
[2.47.3-1] - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681
-
Medium max 7.7ELSA-2025-11463 1 CVE
Moderate: fence-agents security update (Oracle Linux 9)
[4.10.0-86.7] - bundled setuptools: fix CVE-2025-47273 Resolves: RHEL-95903 [4.10.0-86.6] - fence_kubevirt: use hard poweroff Resolves: RHEL-96183
-
High max 9.8ELSA-2025-11411 2 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-570.28.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
Medium max 5.3ELSA-2025-11402 1 CVE
Moderate: avahi security update (Oracle Linux 9)
[0.8-22.1] - Fix CVE-2024-52615 (RHEL-94847)
-
High max 7.5ELSA-2025-11401 3 CVEs
Important: valkey security update (Oracle Linux 10)
[8.0.4-1] - update to 8.0.4 fixes CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 [8.0.3.1] - rebase to 8.0.3 [8.0.2.1] - rebase to 8.0.2 Resolves: RHEL-73273 [7.2.6-2] - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 [7.2.6.1] - rebase to …
-
High max 9.8ELSA-2025-11332 2 CVEs
Important: tomcat9 security update (Oracle Linux 10)
[1:9.0.87-5.1] - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71981 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)
-
High max 10.0
Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)
[6.12.0-101.33.4.3.el10uek] - Revert 'Add normal counters' (Boris Ostrovsky) [Orabug: 38171405] [6.12.0-101.33.4.2.el10uek] - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38178286] {CVE-2025-38089} - mm: memcontro…
-
Medium max 9.8ELSA-2025-11327 3 CVEs
Moderate: glib2 security update (Oracle Linux 8)
[2.56.4-166] - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848
-
High max 9.8ELSA-2025-11333 2 CVEs
Important: tomcat security update (Oracle Linux 8)
[1:9.0.87-1.el8_10.4] - Resolves: RHEL-91761 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71971 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)
-
Medium max 9.1ELSA-2025-11298 8 CVEs
Moderate: kernel security update (Oracle Linux 8)
- [4.18.0-553.62.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…
-
High max 9.8ELSA-2025-11335 2 CVEs
Important: tomcat security update (Oracle Linux 9)
[1:9.0.87-3.el9_6.1] - Resolves: RHEL-91765 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71981 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) [1:9.0.87-3] - R…