Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 8.1
    ELSA-2025-8308 6 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.11.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.11.0-1] - Update to 128.11.0

  • High max 4.7
    ELSA-2025-20343 1 CVE

    Important: systemd security update (Oracle Linux 8)

    [239-82.0.4.5] - coredump: use %d in kernel core pattern - CVE-2025-4598

  • High max 7.5
    ELSA-2025-8256 1 CVE

    Important: pcs security update (Oracle Linux 9)

    [0.11.9-2.el9_6.1] - rubygem-rack: Unbounded-Parameter DoS in Rack::QueryParser (CVE-2025-46727)

  • High max 8.1
    ELSA-2025-8293 6 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.11.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.11.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 4.7
    ELSA-2025-20344 1 CVE

    Important: systemd security update (Oracle Linux 9)

    [252-51.0.2] - coredump: use %d in kernel core pattern - CVE-2025-4598

  • Medium
    ELSA-2025-8246 1 CVE

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.54.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.5
    ELSA-2025-8254 2 CVEs

    Important: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.el8_10.5] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.5] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-93167 - Fixed CVE-2025-46727 by updating bundled rubygem rack Resolves: RHEL-90147

  • High max 8.8
    ELSA-2025-8201 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 8)

    [1.16.1-5.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-5] - fix for CVE-2025-3887 Resolves: RHEL-93051

  • Medium max 5.3
    ELSA-2025-8197 1 CVE

    Moderate: unbound security update (Oracle Linux 9)

    [1.16.2-18] - Prevent unbounded name compression (CVE-2024-8508)

  • High max 8.8
    ELSA-2025-8183 1 CVE

    Important: gstreamer1-plugins-bad-free security update (Oracle Linux 9)

    [1.22.12-4] - fix for CVE-2025-3887 Resolves: RHEL-93063

  • High max 8.1
    ELSA-2025-8203 4 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.10.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.10.1] - Add OpenELA debranding [128.10.1-1] - Update to 128.10.1

  • Medium max 5.5
    ELSA-2025-8142 1 CVE

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-570.18.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 7.5
    ELSA-2025-8132 4 CVEs

    Important: libsoup security update (Oracle Linux 8)

    [2.62.3-9] - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032

  • High max 7.5
    ELSA-2025-8126 4 CVEs

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-10.2] - Backport patches for various CVEs Resolves: RHEL-85888 Resolves: RHEL-87081 Resolves: RHEL-88332 Resolves: RHEL-92285

  • High max 7.5
    ELSA-2025-8136 1 CVE

    Important: python-tornado security update (Oracle Linux 9)

    [6.4.2-2.2] - tests: add ci_test.fmf + update gating.yaml Related: RHEL-91999 [6.4.2-2.1] - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91999

  • High max 7.4
    ELSA-2025-7430 1 CVE

    Important: yelp security update (Oracle Linux 9)

    [2:40.3-2.1] - Fix CVE-2025-3155 (RHEL-85926)

  • High max 9.0
    ELSA-2025-7436 9 CVEs

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-10.1] - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85906 Resolves: RHEL-85912 Resolves: RHEL-85919 Resolves: RHEL-87061 Resolves: RHEL-87069 Resolves: RHEL-87102 Resolves: RHEL-87120 Resolves: RHEL-88364 Resolves: RHEL-88…

  • Low max 7.8
    ELSA-2025-7440 1 CVE

    Low: vim security update (Oracle Linux 9)

    [8.2.2637-22.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-22] - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim

  • Medium max 7.5
    ELSA-2025-7444 1 CVE

    Moderate: expat security update (Oracle Linux 9)

    [2.5.0-5] - Fix CVE-2024-8176 - Resolves: RHEL-57489 [2.5.0-4] - Fix CVE-2024-50602 - Resolves: RHEL-65066

  • High max 8.0
    ELSA-2025-7598 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.116-1.0.1] - Add support for Oracle Linux [8.0.116-1] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89448

  • High max 8.0
    ELSA-2025-7600 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 9)

    [9.0.106-1.0.1] - Add support for Oracle Linux [9.0.106-1] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89453

  • Medium max 7.4
    ELSA-2025-7672 1 CVE

    Moderate: xdg-utils security update (Oracle Linux 9)

    [1.1.3-13] - Update documentation for CVE-2022-4055 (RHEL-87487) [1.1.3-12] - Fix CVE-2022-4055 (RHEL-87487)

  • High max 7.4
    ELSA-2025-7937 1 CVE

    Important: compat-openssl11 security update (Oracle Linux 9)

    [1:1.1.1k-5.1] - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 [1:1.1.1k-5] - Update expired certificates used in the testsuite Resolves: RHEL-5297

  • Medium max 5.3
    ELSA-2025-7437 1 CVE

    Moderate: avahi security update (Oracle Linux 9)

    [0.8-22] - Fix CVE-2024-52616 (RHEL-67722)

  • High max 7.5
    ELSA-2025-7416 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 9)

    [0.8.5-1] - Fix CVE-2025-22869 by updating to 0.8.5 - Resolves: RHEL-81313

  • Medium max 9.8
    ELSA-2025-7586 1 CVE

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-19] - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow [9.54.0-18] - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Exe…

  • High max 6.5
    ELSA-2025-7995 2 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.48.2-1] - Update to 2.48.2 - Reenable JIT

  • Medium max 6.3
    ELSA-2025-7432 8 CVEs

    Moderate: php:8.2 security update (Oracle Linux 9)

    php [8.2.28-1] - rebase to 8.2.28 [8.2.25-1] - rebase to 8.2.25 RHEL-65837 [8.2.13-1] - rebase to 8.2.13 RHEL-14699 - add %__phpize and %__phpconfig macros - move httpd/nginx wants directives to config files in /etc - php-fpm.conf: move include directive afte…

  • Medium max 6.3
    ELSA-2025-7431 5 CVEs

    Moderate: php security update (Oracle Linux 9)

    [8.0.30-3] - Fix libxml streams use wrong content-type header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 by…

  • High max 7.5
    ELSA-2025-7438 1 CVE

    Important: redis security update (Oracle Linux 9)

    [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605

  • High max 9.8
    ELSA-2025-8049 2 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.10.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 9.2
    ELSA-2025-7418 6 CVEs

    Important: php:8.3 security update (Oracle Linux 9)

    php [8.3.19-1] - rebase to 8.3.19 [8.3.15-1] - rebase to 8.3.15 [8.3.12-1] - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser ver…

  • High max 8.3
    ELSA-2025-7433 2 CVEs

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches Resolves: RHEL-87319 RHEL-86586 [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87319 [1:22.13.1-3] - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHE…

  • High max 7.6
    ELSA-2025-7893 1 CVE

    Important: grafana security update (Oracle Linux 9)

    [10.2.6-13] - Resolves RHEL-89954: CVE-2025-4123 [10.2.6-12] - Resolves RHEL-88922: Move home directory of grafana to /var/lib/grafana [10.2.6-11] - Resolves RHEL-84636: CVE-2025-30204 [10.2.6-10] - Resolves RHEL-75919: grafana selinux issue with autofs_t

  • High max 6.4
    ELSA-2025-7435 3 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs

  • High max 8.2
    ELSA-2025-7903 3 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.17.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 9.8
    ELSA-2025-7423 6 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-570.16.1.0.1_6.OL9] - nvme-pci: remove two deallocate zeroes quirks [Orabug: 37756650] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Sig…

  • High max 9.8
    ELSA-2025-8060 2 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.10.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.10.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.10.1-1] - Update to 128.10.1

  • High max 9.8
    ELSA-2025-8056 3 CVEs

    Important: kernel security update (Oracle Linux 8)

    - [4.18.0-553.53.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…

  • Medium max 4.9
    ELSA-2025-7395 1 CVE

    Moderate: 389-ds-base security update (Oracle Linux 9)

    [2.6.1-8] - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.6] [2.6.1-7] - Bump version to 2.6.1-7 [2.6.1-6] - Resolves: RHEL-86065 - Backport lib389 fixes required for WebUI [rhel-9.6.z] - Resolve…