Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 9.8
    ELSA-2025-10353 1 CVE

    Moderate: socat security update (Oracle Linux 9)

    [1.7.4.1-6.1] - add fix for CVE-2024-54661 Resolves: RHEL-70096 - switch to autopatch, remove unused patches

  • Medium max 7.7
    ELSA-2025-10407 1 CVE

    Moderate: python-setuptools security update (Oracle Linux 9)

    [53.0.0-13.1] - Security fix for CVE-2025-47273 Resolves: RHEL-96807

  • Medium max 5.6
    ELSA-2025-20404 2 CVEs

    Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-309.180.4.2] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129825] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129825] {CVE-2024-36350} {CVE-2024-36357} - Add normal count…

  • High max 8.6
    ELSA-2025-10379 5 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.25.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.8
    ELSA-2025-7458 9 CVEs

    Important: xorg-x11-server-Xwayland security update (Oracle Linux 10)

    [24.1.5-4] - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135), CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147), CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159) [24.1.5-3] Rebuild for 10.0.z required due to issue when rel…

  • Medium max 6.6
    ELSA-2025-7459 1 CVE

    Moderate: buildah security update (Oracle Linux 10)

    [2:1.39.4-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-2] - Rebuild on new golang to fix CVE-2025-22871 [2:1.39.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Related: RHEL-80…

  • Medium max 5.6
    ELSA-2025-20405 2 CVEs

    Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-100.28.2.2.el10uek] - Add Zen34 clients (Borislav Petkov (AMD)) [Orabug: 38129827] {CVE-2024-36350} {CVE-2024-36357} - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38129827] {CVE-2024-36350} {CVE-2024-36357} - Add norma…

  • Medium max 6.5
    ELSA-2025-10217 3 CVEs

    Moderate: ruby:3.3 security update (Oracle Linux 8)

    ruby [3.3.8-4] - Upgrade to Ruby 3.3.8. Resolves: RHEL-68632 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) - Fix userinfo leakage in URI#join, URI#merge and URI…

  • High max 9.8
    ELSA-2025-7501 1 CVE

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • Medium max 7.8
    ELSA-2025-7956 2 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • High max 7.8
    ELSA-2025-8137 2 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • Medium max 7.8
    ELSA-2025-8374 3 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • High max 8.8
    ELSA-2025-8669 5 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • High max 9.8
    ELSA-2025-9079 8 CVEs

    Important: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • Medium max 7.8
    ELSA-2025-9348 3 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • Medium max 7.5
    ELSA-2025-9896 3 CVEs

    Moderate: kernel security update (Oracle Linux 10)

    [6.12.0-55.19.1.0.1_0.OL10] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyon…

  • High max 7.5
    ELSA-2025-8664 1 CVE

    Important: python-tornado security update (Oracle Linux 7)

    [4.2.1-5.0.1] - Fixed CVE-2025-47287 Raise errors instead of logging [Orabug: 38049949]

  • High max 7.8
    ELSA-2025-9501 3 CVEs

    Important: gimp security update (Oracle Linux 7)

    [2:2.8.22-1.0.3] - Fixes CVE-2025-5473 (GIMP ICO File Parsing Integer Overflow) [Orabug: 38110877] - Fixes CVE-2025-48797 (Multiple heap buffer overflows in TGA parser) - Fixes CVE-2025-48798 (Multiple use after free in XCF parser)

  • High max 9.0
    ELSA-2025-9179 7 CVEs

    Important: libsoup security update (Oracle Linux 7)

    [2.62.2-2.0.5] - Fixes CVE-2025-2784 CVE-2025-4948 CVE-2025-32049 [Orabug: 38085184] - CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 CVE-2025-32914 [2.62.2-2.0.3] - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in - soup_header_parse_param_list_str…

  • High max 6.5
    ELSA-2025-10246 1 CVE

    Important: thunderbird security update (Oracle Linux 8)

    [128.12.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.12.0] - Add OpenELA debranding [128.12.0-1] - Update to 128.12.0 build1

  • High max 9.4
    ELSA-2025-10148 5 CVEs

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.11-2.1] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98045, RHEL-98015, RHEL-98238, RHEL-98177, RHEL-98206

  • High max 9.4
    ELSA-2025-10189 5 CVEs

    Important: python3.12 security update (Oracle Linux 9)

    [3.12.9-1.1] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211

  • High max 6.5
    ELSA-2025-10196 1 CVE

    Important: thunderbird security update (Oracle Linux 9)

    [128.12.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.12.0] - Add OpenELA debranding [128.12.0-1] - Update to 128.12.0 build1

  • Medium max 9.0
    ELSA-2025-7478 1 CVE

    Moderate: corosync security update (Oracle Linux 10)

    [3.1.9-1.1] - Resolves: RHEL-84612 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472)

  • High max 7.5
    ELSA-2025-8319 1 CVE

    Important: pcs security update (Oracle Linux 10)

    [0.12.0-3.el10_0.2] - Rebased pcs to the latest sources (see CHANGELOG.md) Resolves: RHEL-7681, RHEL-21050, RHEL-22423, RHEL-35407, RHEL-44347, RHEL-63186, RHEL-66607, RHEL-76176, RHEL-81938 - Rebased HA Cluster Management add-on to the latest sources Resolve…

  • High max 6.5
    ELSA-2025-10195 1 CVE

    Important: thunderbird security update (Oracle Linux 10)

    [128.12.0-1.0.1] - Add Oracle prefs [128.12.0-1] - Update to 128.12.0 build1

  • High max 9.4
    ELSA-2025-10140 5 CVEs

    Important: python3.12 security update (Oracle Linux 10)

    [3.12.9-2.0.1.2] - Remove upstream URL reference [3.12.9-2.2] - Enable PAC and BTI protections for aarch64 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-981…

  • High max 9.4
    ELSA-2025-10026 5 CVEs

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.13-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.13-1] - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98037, RHEL-98006, RHEL-98223, RHEL-98114, RHEL-9…

  • High max 7.8
    ELSA-2025-10027 1 CVE

    Important: pam security update (Oracle Linux 8)

    [1.3.1-37.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695] [1.3.1-37] - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724

  • High max 9.4
    ELSA-2025-10031 5 CVEs

    Important: python3.12 security update (Oracle Linux 8)

    [3.12.11-1] - Update to 3.12.11 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98040, RHEL-98010, RHEL-97808, RHEL-98070, RHEL-98213

  • High max 9.4
    ELSA-2025-10128 5 CVEs

    Important: python3 security update (Oracle Linux 8)

    [3.6.8-70.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-70] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030…

  • High max 2.8
    ELSA-2025-10110 1 CVE

    Important: sudo security update (Oracle Linux 8)

    [1.9.5p2-1.0.1] - Fixes sudo -s unclosed sessions when use_pty option used [Orabug: 36952911] [1.9.5p2-10.1] RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014

  • High max 8.8
    ELSA-2025-9318 2 CVEs

    Important: javapackages-tools:201801 security update (Oracle Linux 8)

    ant ant-contrib [1.0-0.32.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild antlr aopalliance apache-commons-beanutils [1.9.3-5] - Fix improper access control vulnerabilities - Resolves: CVE-2019-10086, CVE-2025-48734 apache-commons-cli …

  • High max 9.8
    ELSA-2025-10074 4 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.12.0-1] - Update to 128.12.0 build1

  • High max 9.4
    ELSA-2025-10136 5 CVEs

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.21-2.1] - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219

  • High max 9.8
    ELSA-2025-10072 4 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • Medium max 6.6
    ELSA-2025-7467 1 CVE

    Moderate: skopeo security update (Oracle Linux 10)

    [1:1.18.1-2] - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 [1:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/co…

  • High max 8.0
    ELSA-2025-7601 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 10)

    [9.0.107-1.0.1] - Add support for Oracle Linux [9.0.107-1] - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 [9.0.106-2] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 [9.0.105-2] - Update to .NET SDK 9.0.105 and Run…

  • Medium max 9.1
    ELSA-2025-9623 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 10)

    [134.1-2.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …

  • High max 7.5
    ELSA-2025-7503 1 CVE

    Important: osbuild-composer security update (Oracle Linux 10)

    [134.1-2.0.1] - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names [JIRA: OLDIS-35893] - Ensure build on latest golang: CVE-2024-34156 - Refactor patches to fix some naming …