Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 7.5
    ELSA-2025-7409 1 CVE

    Moderate: git security update (Oracle Linux 9)

    [2.47.1-2] - add the option to sanitize sideband channel messages - Resolves: RHEL-84513

  • High max 7.8
    ELSA-2025-7410 1 CVE

    Important: libxslt security update (Oracle Linux 9)

    [1.1.34-13.0.1] - Fix memory leak in exclPrefixPush [Orabug: 37871881] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-13] - Rebuild for z-stream/0day - Resolves: RHEL-83514 - Resolves: RHEL-85988 [1.1.34-12] - Include a…

  • Medium max 8.3
    ELSA-2025-7426 1 CVE

    Moderate: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.19.1-1] - Update to version 20.19.1 Resolves: RHEL-78764 [1:20.18.2-3] - Update c-ares to 1.34.5 to address CVE-2025-31498 nodejs-nodemon nodejs-packaging

  • High max 7.5
    ELSA-2025-7387 7 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0

  • High max 8.2
    ELSA-2025-7419 1 CVE

    Important: mod_auth_openidc security update (Oracle Linux 9)

    [2.4.10-1.el9_6.1] Resolves: RHEL-86224 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)

  • Medium max 8.4
    ELSA-2025-7422 6 CVEs

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-18] - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Dir…

  • Low
    ELSA-2025-7427 1 CVE

    Low: xterm security update (Oracle Linux 9)

    [366-10] - Fix CVE-2022-45063 - Resolves: RHEL-87485

  • High max 9.1
    ELSA-2025-7428 5 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • Medium max 7.1
    ELSA-2025-7402 3 CVEs

    Moderate: nginx security update (Oracle Linux 9)

    [1.20.1-22.0.1.2] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] - Update upstream references [Orabug: 36579090] [2:1.20.1-22.2] - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_…

  • High max 7.8
    ELSA-2025-7417 4 CVEs

    Important: gimp security update (Oracle Linux 9)

  • High max 7.5
    ELSA-2025-7429 1 CVE

    Important: redis:7 security update (Oracle Linux 9)

    [7.2.8-1] - rebase to 7.2.8 for CVE-2025-21605 [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 [7.2.6-1] - rebase to 7.2.6 RHEL-26628 [7.0.12-1] - rebase to 7.0.12 #2221899 [7.0.11-1] - rebase to 7.0.11 for new redis:7 stream #2129826

  • Medium max 6.6
    ELSA-2025-7389 1 CVE

    Moderate: buildah security update (Oracle Linux 9)

    [1.39.4-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.39.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.39.4 - Resolves: RHEL-85114 [2:1.39.3-1] - update to https://github.com/containers/b…

  • High max 7.5
    ELSA-2025-7391 2 CVEs

    Important: podman security update (Oracle Linux 9)

    [5.4.0-9.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [5:5.4.0-9] - update to the latest content o…

  • Medium max 6.6
    ELSA-2025-7397 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.18.1-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18 (https://github.com/containers/skopeo/commit/bfd0850) - fixes 'CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.6.z]' - Resol…

  • High max 7.5
    ELSA-2025-7404 1 CVE

    Important: grafana security update (Oracle Linux 9)

    [10.2.6-11] - Resolves RHEL-84636: CVE-2025-30204 [10.2.6-10] - Resolves RHEL-75919: grafana selinux issue with autofs_t

  • High max 7.5
    ELSA-2025-7425 1 CVE

    Important: osbuild-composer security update (Oracle Linux 9)

    [132.2-1.0.1] - Switch to UEKR8 repositories for OL9.6 [Orabug: 37962207] - Add support to create OpenScap images [JIRA: OLDIS-35301] - Simplify repository names [JIRA: OLDIS-35893] - Refactor patches to fix some naming and set a correct kernel for Oracle Lin…

  • High max 6.5
    ELSA-2025-8046 2 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.48.2-1] - Update to 2.48.2 - Reenable JavaScriptCore JIT

  • High max 7.5
    ELSA-2025-7967 1 CVE

    Important: osbuild-composer security update (Oracle Linux 8)

    [101-3.0.1] - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA…

  • High max 7.4
    ELSA-2025-7895 1 CVE

    Important: compat-openssl10 security update (Oracle Linux 8)

    [1.1.0.2o-4.1] - Fix CVE-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-9699

  • High max 7.6
    ELSA-2025-7894 1 CVE

    Important: grafana security update (Oracle Linux 8)

    [9.2.10-23] - Resolves RHEL-89949: CVE-2025-4123

  • High max 8.0
    ELSA-2025-7571 1 CVE

    Important: .NET 9.0 security update (Oracle Linux 8)

    [9.0.106-1.0.1] - Add support for Oracle Linux [9.0.106-1] - Update to .NET SDK 9.0.106 and Runtime 9.0.5 - Resolves: RHEL-89451 [9.0.105-2] - Update to .NET SDK 9.0.105 and Runtime 9.0.4 - Resolves: RHEL-85279

  • High max 8.0
    ELSA-2025-7589 1 CVE

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.116-1.0.1] - Add support for Oracle Linux [8.0.116-1] - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89446

  • Medium max 6.7
    ELSA-2025-7539 2 CVEs

    Moderate: ruby:2.5 security update (Oracle Linux 8)

    ruby [2.5.9-114] - Fix integer overflow in search_in_range function in regexec.c (CVE-2019-19012). Resolves: RHEL-87505 rubygem-abrt rubygem-bson rubygem-bundler [1.16.1-5] - Fix unexpected code execution in Gemfiles (CVE-2021-43809) Resolves: RHEL-87017 ruby…

  • High max 7.5
    ELSA-2025-7686 1 CVE

    Important: redis:6 security update (Oracle Linux 8)

    [6.2.18-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.18-1] - rebase to 6.2.18 for CVE-2025-21605

  • Medium max 6.3
    ELSA-2025-6977 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.21-2] - Security fix for CVE-2025-0938 Resolves: RHEL-77263

  • Medium max 6.7
    ELSA-2025-6990 8 CVEs

    Moderate: grub2 security update (Oracle Linux 9)

    [2.06-104.0.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693946] - Allow installation of grub2 only with shim-aa64 that allows booting it [Orabug: 37693946] - net/…

  • Medium max 6.8
    ELSA-2025-6993 1 CVE

    Moderate: openssh security update (Oracle Linux 9)

    [8.7p1-45.0.2] - Upstream references found with /usr/bin/ssh [Orabug: 37814929] [8.7p1-45.0.1] - upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand [Orabug: 37647064] - Update upstream references [Orabug: 36564626] [8.7p1-45] - Fix missing e…

  • Medium max 6.5
    ELSA-2025-7043 3 CVEs

    Moderate: microcode_ctl security update (Oracle Linux 9)

    [4:20250211-1.0.1] - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized [Orabug: 35710094] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no…

  • Medium max 5.6
    ELSA-2025-7049 1 CVE

    Moderate: python-requests security update (Oracle Linux 9)

    [2.25.1-9] - Security fix for CVE-2024-35195 Resolves: RHEL-37609

  • Medium max 6.5
    ELSA-2025-7050 3 CVEs

    Moderate: rsync security update (Oracle Linux 9)

    [3.2.5-3] - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 [3.2.5-2] - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to …

  • Medium max 7.5
    ELSA-2025-7064 1 CVE

    Moderate: iptraf-ng security update (Oracle Linux 9)

    [1.2.2-1.el9] - New version 1.2.2 (Andrea Claudi) [RHEL-77280] - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]

  • Medium max 7.1
    ELSA-2025-7067 1 CVE

    Moderate: krb5 security update (Oracle Linux 9)

    [1.21.1-6.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-6] - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-76759 [1.21.1-5] - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74374 - k…

  • Medium max 5.3
    ELSA-2025-7076 1 CVE

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-6] - Bump nettle dependency to 3.10.1 (RHEL-52740) [3.8.3-5] - Backport the fix for CVE-2024-12243 (RHEL-78580)

  • Medium max 5.3
    ELSA-2025-7077 1 CVE

    Moderate: libtasn1 security update (Oracle Linux 9)

    [4.16.0-9] - Backport the fix for CVE-2024-12133 (RHEL-78580)

  • Medium max 5.7
    ELSA-2025-7085 1 CVE

    Moderate: pcs security update (Oracle Linux 9)

    [0.11.9-2] - Fixed restarting bundles Resolves: RHEL-79055 - Fixed deletion of misconfigured bundles Resolves: RHEL-79160 - Fixed filtering of resource clones in web console Resolves: RHEL-78653 - Updated bundled rubygem rack Resolves: RHEL-79500 [0.11.9-1] -…

  • Medium max 7.5
    ELSA-2025-7094 1 CVE

    Moderate: aardvark-dns security update (Oracle Linux 9)

    [2:1.14.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 [2:1.13.1-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277

  • Medium max 6.3
    ELSA-2025-7107 1 CVE

    Moderate: python3.12 security update (Oracle Linux 9)

    [3.12.9-1] - Update to 3.12.9 - Security fix for CVE-2025-0938 Resolves: RHEL-77261 [3.12.8-1] - Update to 3.12.8 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64886, RHEL-70320 [3.12.6-1] - Update to 3.12.6 Resolves: RHEL-57417

  • Medium max 6.3
    ELSA-2025-7109 1 CVE

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.11-2] - Security fix for CVE-2025-0938 Resolves: RHEL-77262 [3.11.11-1] - Update to 3.11.11 Resolves: RHEL-64883 [3.11.10-1] - Update to 3.11.10 Resolves: RHEL-57412

  • High max 7.5
    ELSA-2025-7118 3 CVEs

    Important: osbuild and osbuild-composer security update (Oracle Linux 9)

    osbuild [141-1.0.1] - Add runner for ol8 and ol9 [Orabug: 36400619] [141-1] - New upstream release [140-1] - New upstream release [139-1] - New upstream release [138-1] - New upstream release [137-1] - New upstream release [136-1] - New upstream release [135-…

  • Medium max 7.5
    ELSA-2025-7138 1 CVE

    Moderate: protobuf security update (Oracle Linux 9)

    [3.14.0-16] - Rebuild [3.14.0-15] - Rebuild [3.14.0-14] - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572)