8,316 results · Feed
-
High max 8.6ELSA-2025-10867 4 CVEs
Important: java-17-openjdk security update (Oracle Linux 8)
[1:17.0.16.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.16.0.8-2] - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RH…
-
High max 7.8ELSA-2025-10854 1 CVE
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.21.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…
-
Medium max 9.8ELSA-2025-10855 2 CVEs
Moderate: glib2 security update (Oracle Linux 10)
[2.80.4-4.el10_0.6] - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845
-
Medium max 6.6ELSA-2025-11047 1 CVE
Moderate: pcs security update (Oracle Linux 8)
[0.10.18-2.0.1.6] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.6] - Fixed CVE-2024-49761 by updating rubygem rexml Resolves: RHEL-98708
-
Medium max 7.8ELSA-2025-11030 1 CVE
Moderate: emacs security update (Oracle Linux 8)
[1:26.1-15] - Restore definition of variable 'enable-dir-local-variables' (RHEL-92830) [1:26.1-14] - Fix arbitrary code execution via Lisp macro expansion (RHEL-69394)
-
Medium max 7.7ELSA-2025-11044 1 CVE
Moderate: python3.12-setuptools security update (Oracle Linux 8)
[68.2.2-5] - Security fix for CVE-2025-47273 Resolves: RHEL-101131
-
Medium max 6.8ELSA-2025-10672 1 CVE
Moderate: go-toolset:ol8 security update (Oracle Linux 8)
delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-85264 go-toolset [1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-85264
-
Medium max 7.8ELSA-2025-10837 1 CVE
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-570.26.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…
-
Medium max 9.8ELSA-2025-11140 2 CVEs
Moderate: glib2 security update (Oracle Linux 9)
[2.68.4-16.2] - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94290 - Resolves: RHEL-102845
-
Medium max 5.6ELSA-2025-11066 1 CVE
Moderate: glibc security update (Oracle Linux 10)
[2.39-43.0.1] - Forward port Oracle changes. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: March-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.39-37.0.1 - Forward port Oracle changes to 2.39-37. Reviewed-by: Jose E. Ma…
-
High max 9.8ELSA-2025-10181 4 CVEs
Important: firefox security update (Oracle Linux 7)
[128.12.0-1.0.1] - Update to 128.12.0 [Orabug: 38141310][CVE-2025-6424][CVE-2025-6425] [CVE-2025-6429][CVE-2025-6430]
-
Medium max 7.7ELSA-2025-11043 1 CVE
Moderate: python3.11-setuptools security update (Oracle Linux 8)
[65.5.1-4] - Security fix for CVE-2025-47273 Resolves: RHEL-101126
-
MediumELSA-2025-11035 1 CVE
Moderate: lz4 security update (Oracle Linux 8)
[1.8.3-5] - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 [1.8.3-4] - Fix CVE-2019-17543 - Resolves: RHEL-87362
-
Medium max 7.7ELSA-2025-11036 1 CVE
Moderate: python-setuptools security update (Oracle Linux 8)
[39.2.0-9] - Security fix for CVE-2025-47273 Resolves: RHEL-96802
-
Medium max 9.8ELSA-2025-11042 1 CVE
Moderate: socat security update (Oracle Linux 8)
[1.7.4.1-2] - add fix for CVE-2024-54661 Resolves: RHEL-70095 - switch to autopatch, remove unused patches
-
High max 9.8ELSA-2025-20471 56 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.345.5.3] - x86/bpf: Classic BPF program can fail when BHB barrier is used (Alexandre Chartre) [Orabug: 38167806] [5.4.17-2136.345.5.2] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38023241] {CVE-2024-36350} {CVE-2024-36357} - x86/process:…
-
High max 8.8ELSA-2025-10848 1 CVE
Important: cloud-init security update (Oracle Linux 9)
[24.4-4.0.1.el9_6.3] - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168] - Fix log file permission [Orabug: 35302969] - Update detection logic for OL distros in config template [Orabug: 34845400] - Added missing services in rhel/…
-
High max 9.8ELSA-2025-20470 148 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-310.184.5.2] - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) {CVE-2025-38089} - net_sched: sch_sfq: move the limit validation (Octavian Purdila) {CVE-2025-37752} - net_sched: sch_sfq: use a temporary work area for v…
-
High max 8.8ELSA-2025-10844 1 CVE
Important: cloud-init security update (Oracle Linux 10)
[24.4-3.0.1.2] - NetworkManagerActivator brings up interface failed when using sysconfig renderer [RHEL-18981] - Include module cc_write_files_deferred in config template [Orabug: 36959464] - Fix Oracle Datasource network, getdata methods and increase retries…
-
High max 8.8ELSA-2025-9741 1 CVE
Important: perl-File-Find-Rule security update (Oracle Linux 7)
[0.33-5.0.1] - Use 3 arg open in grep() [Orabug: 38120380][CVE-2011-10007]
-
Medium max 6.8ELSA-2025-10677 1 CVE
Moderate: golang security update (Oracle Linux 10)
[1.24.4-1] - Update to Go 1.24.4 (fips-1) [1.24.3-3] - Update to Go 1.24.3 (fips-3) [1.24.3-2] - Update to Go 1.24.3 (fips-2) [1.24.3-1] - Update to Go 1.24.3
-
High max 8.8ELSA-2025-10669 3 CVEs
Important: kernel security update (Oracle Linux 8)
- [4.18.0-553.60.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…
-
High max 9.1ELSA-2025-10698 3 CVEs
Important: libxml2 security update (Oracle Linux 8)
[2.9.7-21.1] - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) [2.9.7-21] - Fix integer overflow (RHEL-74345)
-
Medium max 7.4ELSA-2025-10742 1 CVE
Moderate: gnome-remote-desktop security update (Oracle Linux 8)
[0.1.8-4] - Backport connection throttling Resolves: RHEL-92791
-
High max 9.1ELSA-2025-10699 3 CVEs
Important: libxml2 security update (Oracle Linux 9)
[2.9.13-10] - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431)
-
High max 5.4ELSA-2025-9331 1 CVE
Important: libvpx security update (Oracle Linux 7)
[1.3.0-8.0.1] - Fixes CVE-2025-5283 vpx_codec_enc_init_multi fix double free on init fail [Orabug: 38103810]
-
HighELSA-2025-9332 1 CVE
Important: mpfr security update (Oracle Linux 7)
[3.1.1-4.0.1] - Fixes buffer overflow in mpfr_strtofr (CVE-2014-9474) [Orabug: 38103811]
-
High max 8.8ELSA-2025-9740 1 CVE
Important: perl-File-Find-Rule-Perl security update (Oracle Linux 7)
[1.13-2.0.1] - Use 3 arg open in grep() [Orabug: 38120371][CVE-2011-10007]
-
Medium max 7.7ELSA-2025-10618 2 CVEs
Moderate: jq security update (Oracle Linux 8)
[1.6-11] - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) - Resolves: RHEL-92987 [1.6-10] - Fix CVE-2024-23337 jq has signed integer overflow in jv.c:jvp_array_write - Resolves: RHEL-92968
-
High max 8.3ELSA-2025-10551 1 CVE
Important: container-tools:ol8 security update (Oracle Linux 8)
aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman [4.9.4-22.0.1] - Fixes issue of container created in cgroupv2 not start in cgroup…
-
High max 8.3ELSA-2025-10550 1 CVE
Important: podman security update (Oracle Linux 9)
[5.4.0-12.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [5:5.4.0-12] - update to the latest content…
-
Medium max 7.7ELSA-2025-10585 2 CVEs
Moderate: jq security update (Oracle Linux 9)
[1.6-17.el9.2] - Fix CVE-2025-48060 - Resolves: RHEL-92990 [1.6-17.el9.1] - Fix CVE-2024-23337 - Resolves: RHEL-92972 [1.6-17] - Fix SAST findings in jq 1.6 - Resolves: RHEL-28653 [1.6-16] - Make jq 1.6 fast - Resolves: RHEL-13431
-
Medium max 7.4ELSA-2025-10631 1 CVE
Moderate: gnome-remote-desktop security update (Oracle Linux 9)
[40.0-11] - Backport connection throttling Resolves: RHEL-92795
-
Medium max 6.8ELSA-2025-10676 1 CVE
Moderate: golang security update (Oracle Linux 9)
[1.24.4-1] - Update to Go 1.24.4 (fips-1) - Resolves: RHEL-101074 [1.23.10-1] - Update to Go 1.23.10 - Fix for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874 - Resolves: RHEL-96000
-
High max 8.3ELSA-2025-10549 1 CVE
Important: podman security update (Oracle Linux 10)
[6:5.4.0-12.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-12] - update to the latest conte…
-
Medium max 7.4ELSA-2025-10635 1 CVE
Moderate: gnome-remote-desktop security update (Oracle Linux 10)
[47.3-2] - Backport connection throttling Resolves: RHEL-92787
-
High max 8.6ELSA-2025-10371 3 CVEs
Important: kernel security update (Oracle Linux 10)
[6.12.0-55.20.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…
-
High max 9.1ELSA-2025-10630 4 CVEs
Important: libxml2 security update (Oracle Linux 10)
[2.12.5-7] - Refresh patches from upstream (RHEL-96395, RHEL-96408 and RHEL-96421) [2.12.5-6] - Fix CVE-2025-6021 (RHEL-96495) - Fix CVE-2025-49794 (RHEL-96395) - Fix CVE-2025-49795 (RHEL-96408) - Fix CVE-2025-49796 (RHEL-96421)
-
High max 9.1ELSA-2025-9189 1 CVE
Important: ipa security update (Oracle Linux 7)
[4.6.8-5.0.3.el7_9.17] - Fix privilege escalation from host to domain vulnerability - CVE-2025-4404 [Orabug: 38085890]
-
Medium max 5.6ELSA-2025-20406 3 CVEs
Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.344.4.3] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129026] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129026] {CVE-2024-36350} {CVE-2024-36357} - KVM: SVM: Adver…