Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 9.1
    ELSA-2025-8918 1 CVE

    Moderate: grafana-pcp security update (Oracle Linux 8)

    [5.1.1-10] - Resolves RHEL-89274: CVE-2025-22871

  • Medium max 5.6
    ELSA-2025-8958 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-20] - Fix CVE-2025-32414 (RHEL-88198)

  • High max 7.5
    ELSA-2025-8514 1 CVE

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.19.2-1] - Update to version 20.19.2 Fixes: CVE-2025-23166 Resolves: RHEL-91595 RHEL-89598 RHEL-92854 [1:20.19.1-1] - Update to version 20.19.1 Resolves: RHEL-78763 [1:20.18.2-4] - Update c-ares to 1.34.5 to address CVE-2025-31498 [1:20.18.2-3] - …

  • High max 7.5
    ELSA-2025-8812 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94415

  • High max 7.5
    ELSA-2025-8815 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 8)

    [9.0.107-1.0.1] - Add support for Oracle Linux [9.0.107-1] - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94422

  • High max 10.0
    ELSA-2025-20372 30 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.344.4.1] - certs: Reference revocation list for all keyrings (Eric Snowberg) [Orabug: 38052126] [5.4.17-2136.344.4] - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967555] [5.4.17-2136.344.3] - net/mlx5e:…

  • High max 7.5
    ELSA-2025-8837 1 CVE

    Important: mod_security security update (Oracle Linux 9)

    [2.9.6-2] - add fix for CVE-2025-47947 - Resolves: RHEL-93016

  • Medium max 9.1
    ELSA-2025-8916 1 CVE

    Moderate: grafana-pcp security update (Oracle Linux 9)

    [5.1.1-11] - Resolves RHEL-89314: CVE-2025-22871

  • High max 7.5
    ELSA-2025-8813 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.117-1.0.1] - Add support for Oracle Linux [8.0.117-1] - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94420

  • Medium max 7.1
    ELSA-2025-8743 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.56.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • Medium max 7.8
    ELSA-2025-8686 1 CVE

    Moderate: glibc security update (Oracle Linux 8)

    [2.28-251.0.3.22] - Forward port of Oracle patches Reviewed-by: David Faust <david.faust@oracle.com> Oracle history: April-14-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by: Elena Zannoni <…

  • High max 9.8
    ELSA-2025-8756 12 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.11.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.11.0] - Add OpenELA debranding [128.11.0-1] - Update to 128.11.0 [128.10.1-1] - Update to 128.10.1

  • High max 8.8
    ELSA-2025-8643 6 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.21.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • Medium max 9.1
    ELSA-2025-8667 1 CVE

    Moderate: grafana security update (Oracle Linux 8)

    [9.2.10-25] - Resolves RHEL-89269: CVE-2025-22871

  • Medium
    ELSA-2025-8676 1 CVE

    Moderate: libxslt security update (Oracle Linux 8)

    [1.1.32-6.2.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-6.2] - Fix CVE-2023-40403 (aka 2022-4909) (RHEL-89374)

  • Medium max 9.1
    ELSA-2025-8682 1 CVE

    Moderate: grafana security update (Oracle Linux 9)

    [10.2.6-14] - Resolves RHEL-89309: CVE-2025-22871

  • Medium max 7.8
    ELSA-2025-8655 1 CVE

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-168.0.1.19] - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust <david.faust@oracle.com> Oracle history:

  • High max 5.6
    ELSA-2025-20368 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

    [6.12.0-100.28.2] - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967533] - Revert 'block: sysfs option to change ioticks granulari…

  • High max 5.3
    ELSA-2025-8635 1 CVE

    Important: perl-FCGI security update (Oracle Linux 9)

    [1:0.79-8.1] - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters)

  • High
    ELSA-2025-8314 1 CVE

    Important: zlib security update (Oracle Linux 7)

    [1.2.7-21.0.1] - Resolves: CVE-2025-4638 [Orabug: 38010977]

  • High max 8.8
    ELSA-2025-20365 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-309.180.4] - nvme: unblock ctrl state transition for firmware update (Daniel Wagner) - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki) - ice: Ch…

  • High max 9.8
    ELSA-2025-8465 2 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.10.1-1.0.1] - Update to 128.10.1 [Orabug: 38028280][CVE-2025-4918][CVE-2025-4919] [128.10.0-1.0.1] - Updated to 128.10.0 build [Orabug: 37924620] - Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and - CVE-2025-4093 [128.9.0-2.0.1] - Update…

  • High max 7.5
    ELSA-2025-20364 1 CVE

    Important: python3.12-cryptography security update (Oracle Linux 8)

    [41.0.7-1.0.1] - CVE-2024-26130 [Orabug: 37982815]

  • High max 9.8
    ELSA-2025-8607 8 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.11.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.11.0] - Add OpenELA debranding [128.11.0-1] - Update to 128.11.0

  • Medium max 9.1
    ELSA-2025-8478 1 CVE

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 go-toolset [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636

  • High max 7.5
    ELSA-2025-8506 1 CVE

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [1:22.15-1-1] - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300 [1:22.13.1-3] - Update c-ares t…

  • Medium max 9.1
    ELSA-2025-8476 1 CVE

    Moderate: golang security update (Oracle Linux 9)

    [1.23.9-1] - Update to Go 1.23.9 - Remove runtime-usleep-s390x.patch, already merged - Resolves: RHEL-93212

  • High max 7.5
    ELSA-2025-8467 1 CVE

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.16.0-1] - Update to 22.16.0 Resolves: RHEL-89600 RHEL-92872 RHEL-92420

  • High max 7.5
    ELSA-2025-8468 1 CVE

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.19.2-1] - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging

  • Medium max 9.8
    ELSA-2025-8421 1 CVE

    Moderate: ghostscript security update (Oracle Linux 8)

    [9.27-17] - RHEL-88965 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

  • Medium max 5.9
    ELSA-2025-8411 1 CVE

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-32.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-32] - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 fr…

  • Medium max 7.5
    ELSA-2025-8414 1 CVE

    Moderate: git security update (Oracle Linux 8)

    [2.43.5-3] - add the option to sanitize sideband channel messages - Resolves: RHEL-74177

  • Low max 4.7
    ELSA-2025-8419 1 CVE

    Low: python36:3.6 security update (Oracle Linux 8)

    python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo [3.7.0-2] - Backport CVE-2024-5629

  • Medium
    ELSA-2025-8432 1 CVE

    Moderate: perl-CPAN security update (Oracle Linux 8)

    [2.18-402] - Resolves: RHEL-9605 - Add 2022 PAUSE public key. - Change default value for urllist to https://www.cpan.org - Use gpg --verify --output ... to disentangle data and signature

  • High max 5.4
    ELSA-2025-8336 1 CVE

    Important: varnish:6 security update (Oracle Linux 8)

    varnish [6.0.13-1.1] - Resolves: RHEL-89695 - varnish: request smuggling attacks (CVE-2025-47905) varnish-modules

  • High max 9.0
    ELSA-2025-8292 10 CVEs 1 exploited

    Important: mingw-freetype and spice-client-win security update (Oracle Linux 8)

    [2.8-3.1] - Fix CVE-2025-27363 Resolves: RHEL-83101

  • Low
    ELSA-2025-8395 1 CVE

    Low: rsync security update (Oracle Linux 8)

    [3.1.3-23] - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps [3.1.3-22] - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl

  • High max 5.4
    ELSA-2025-8337 1 CVE

    Important: varnish security update (Oracle Linux 9)

    [6.6.2-6.1] - Resolves: RHEL-89700 - varnish: request smuggling attacks (CVE-2025-47905)

  • Medium max 7.8
    ELSA-2025-8333 2 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.19.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 9.1
    ELSA-2025-4751 5 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.10.0-1.0.1] - Updated to 128.10.0 build [Orabug: 37924620] - Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and - CVE-2025-4093 [128.9.0-2.0.1] - Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029] [CVE-2025-3030] [12…