Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 9.8
    ELSA-2025-10073 4 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.12.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.12.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.12.0-1] - Update to 128.12.0 build1

  • High max 7.0
    ELSA-2025-9878 1 CVE

    Important: libblockdev security update (Oracle Linux 8)

    [2.28-7.0.1] - enable btrfs support [Orabug: 30792917] [2.28-7] - Don't allow suid and dev set on fs resize (CVE-2025-6019) Resolves: RHEL-96034

  • Medium max 5.6
    ELSA-2025-9877 1 CVE

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-168.0.1.20] - Forward-port Oracle patches for ol9-u6 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history:

  • Medium
    ELSA-2025-9880 1 CVE

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.24.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 2.8
    ELSA-2025-9978 1 CVE

    Important: sudo security update (Oracle Linux 9)

    [1.9.5p2-10.1] RHEL 9.6.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100016

  • High max 5.3
    ELSA-2025-8636 1 CVE

    Important: perl-FCGI security update (Oracle Linux 10)

    [1:0.82-13.1] - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters)

  • Medium max 9.1
    ELSA-2025-8666 1 CVE

    Moderate: grafana security update (Oracle Linux 10)

    [10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

  • Medium max 8.4
    ELSA-2025-9486 1 CVE

    Moderate: qt6-qtbase security update (Oracle Linux 10)

    [6.8.1-9] - qt5: qt6: QtCore Assertion Failure Denial of Service (CVE-2025-5455)

  • Medium max 8.4
    ELSA-2025-7499 5 CVEs

    Moderate: ghostscript security update (Oracle Linux 10)

    [10.02.1-16] - RHEL-88964 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow [10.02.1-15] - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67050 CVE-2024-46952 ghostscript: B…

  • High max 7.6
    ELSA-2025-7892 1 CVE

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

  • High max 8.1
    ELSA-2025-8196 4 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • Medium max 8.3
    ELSA-2025-7502 1 CVE

    Moderate: nodejs22 security update (Oracle Linux 10)

    [1:22.16.0-1] - Update to version 22.16.0 [1:22.15.0-3] - Make grep Source stricter in nodejs-tarball [1:22.15.0-2] - Add unit-test during build for nodejs22 [1:22.15.0-1] - Update to version 22.15.0 [1:22.13.1-6] - Update c-ares with fix for CVE-2025-31498 […

  • High max 9.1
    ELSA-2025-7506 5 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 9.1
    ELSA-2025-7507 8 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.0
    ELSA-2025-7599 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 10)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 [8.0.116-2] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 [8.0.115-2] - Update to .NET SDK 8.0.115 and R…

  • High max 9.8
    ELSA-2025-8125 2 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 7.5
    ELSA-2025-8814 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 10)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 [8.0.116-2] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89447 [8.0.115-2] - Update to .NET SDK 8.0.115 and R…

  • High max 7.5
    ELSA-2025-7462 2 CVEs

    Important: podman security update (Oracle Linux 10)

    [6:5.4.0-10.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [6:5.4.0-10] - rebuild to resolve CVE-202…

  • High max 7.5
    ELSA-2025-7475 1 CVE

    Important: grafana security update (Oracle Linux 10)

    [10.2.6-18] - Resolves RHEL-89943: CVE-2025-4123 [10.2.6-16] - Resolves RHEL-85420: Move home directory of grafana to /var/lib/grafana [10.2.6-15] - Resolves RHEL-84627: CVE-2025-30204

  • High max 7.5
    ELSA-2025-7484 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 10)

    [6:0.8.5-2] - Rebuild on new golang to fix CVE-2025-22871 [6:0.8.5-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80817 [6:0.8.4-1] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8…

  • High max 8.1
    ELSA-2025-7491 3 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.1
    ELSA-2025-7493 3 CVEs

    Important: thunderbird security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Add Oracle prefs [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 7.5
    ELSA-2025-7505 6 CVEs

    Important: libsoup3 security update (Oracle Linux 10)

    [3.6.5-3.el10_0.6] - Fix CVE-2025-4035, CVE-2025-4948, CVE-2025-32049, CVE-2025-32907 [3.6.5-3] - Add patch to hopefully fix http2-body-size-test timeouts [3.6.5-2] - Add patch to hopefully fix server-test timeouts [3.6.5-1] - Update to 3.6.5 and add patches …

  • High max 7.5
    ELSA-2025-8816 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 10)

    [9.0.107-1.0.1] - Add support for Oracle Linux [9.0.107-1] - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94423 [9.0.106-2] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89452 [9.0.105-2] - Update to .NET SDK 9.0.105 and Run…

  • Medium max 9.1
    ELSA-2025-9149 1 CVE

    Moderate: skopeo security update (Oracle Linux 10)

    [1:1.18.1-2] - Fix bats dep on tests subpackage - Resolves: RHEL-58990 - Rebuild on new golang to fix CVE-2025-22871 [1:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/co…

  • Medium max 7.7
    ELSA-2025-9940 1 CVE

    Moderate: python-setuptools security update (Oracle Linux 10)

    [69.0.3-12] - Security fix for CVE-2025-47273 [69.0.3-11] - Change the test source location

  • Medium max 9.1
    ELSA-2025-9844 1 CVE

    Moderate: osbuild-composer security update (Oracle Linux 8)

    [101-4.0.1] - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA…

  • High max 8.2
    ELSA-2025-7490 1 CVE

    Important: mod_auth_openidc security update (Oracle Linux 10)

    [2.4.15-4.el10_0.1] - Fix CVE-2025-31492

  • High max 8.8
    ELSA-2025-8184 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 10)

    [1.24.11-2] - fix for CVE-2025-3887 Resolves: RHEL-93045

  • High max 8.1
    ELSA-2025-8341 7 CVEs

    Important: firefox security update (Oracle Linux 10)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 5.4
    ELSA-2025-9120 1 CVE

    Important: libvpx security update (Oracle Linux 10)

    [1.14.1-3] - Add patch for double free Resolves: RHEL-93905

  • High max 8.8
    ELSA-2025-9166 1 CVE

    Important: apache-commons-beanutils security update (Oracle Linux 10)

    [1.9.4-21] - Fix improper access control vulnerability - Resolves: CVE-2025-48734

  • Medium max 5.3
    ELSA-2025-7457 1 CVE

    Moderate: exiv2 security update (Oracle Linux 10)

    [0.28.3-3.2] - Revert: remove rpath patch Resolves: RHEL-80106 - Fix CVE-2025-26623 exiv2: Use After Free Resolves: RHEL-80106

  • Medium max 6.1
    ELSA-2025-7466 3 CVEs

    Moderate: delve and golang security update (Oracle Linux 10)

    delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-1] - Update Delve to 1.24.1 [1.22.1-6] - plans/ci.fmf: Update repo golang [1.23.7-1] - Update to 1.23.7 - golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can b…

  • High max 5.4
    ELSA-2025-7476 1 CVE

    Important: python-jinja2 security update (Oracle Linux 10)

    [3.1.6-1] - Update to 3.1.6 - Security fix for CVE-2025-27516 Resolves: RHEL-85058

  • Medium max 7.5
    ELSA-2025-7482 1 CVE

    Moderate: git security update (Oracle Linux 10)

    [2.47.1-2] - add the option to sanitize sideband channel messages - Resolves: RHEL-74175

  • Medium max 7.4
    ELSA-2025-7508 3 CVEs

    Moderate: java-21-openjdk security update (Oracle Linux 10)

    [1:21.0.7.0.6-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.7.0.6-1] - Update to jdk-21.0.7+6 (GA) - Update release notes to 21.0.7+6 - Rebase FIPS support against 21.0.7+5 - Require tzdata 2025a due to upstream inclusion of JDK-8347965 - ** T…

  • High max 7.8
    ELSA-2025-7592 2 CVEs

    Important: yggdrasil security update (Oracle Linux 10)

    [0.4.5-3] - Fix CVE-2025-3931

  • Medium max 5.3
    ELSA-2025-8047 1 CVE

    Moderate: unbound security update (Oracle Linux 10)

    [1.20.0-10] - Prevent unbounded name compression (CVE-2024-8508)

  • High max 7.5
    ELSA-2025-8493 2 CVEs

    Important: nodejs22 security update (Oracle Linux 10)

    [1:22.16.0-1] - Update to version 22.16.0 [1:22.15.0-3] - Make grep Source stricter in nodejs-tarball [1:22.15.0-2] - Add unit-test during build for nodejs22 [1:22.15.0-1] - Update to version 22.15.0 [1:22.13.1-6] - Update c-ares with fix for CVE-2025-31498 […