Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 8.3
    ELSA-2025-4461 1 CVE

    Moderate: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.19.1-1] - Update to version 20.19.1 Resolves: RHEL-78763 [1:20.18.2-4] - Update c-ares to 1.34.5 to address CVE-2025-31498

  • High max 8.3
    ELSA-2025-4459 2 CVEs

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [1:22.15.0-1] - Update to 22.15.0 - Drop upstream patches [1:22.13.1-4] - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300 [1:22.13.1-3] - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86581

  • High max 9.1
    ELSA-2025-4443 5 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.10.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.10.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis …

  • High max 9.1
    ELSA-2025-4460 5 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.10.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.10.0] - Add OpenELA debranding [128.10.0-1] - Update to 128.10.0 build1

  • High max 7.8
    ELSA-2025-4098 2 CVEs

    Important: libxslt security update (Oracle Linux 7)

    [1.1.28-6.0.3] - Fix CVE-2024-55549 issue due to memory leak [Orabug: 37795485] - Fix CVE-2025-24855 issue due to use after free.

  • Medium max 8.4
    ELSA-2025-4362 7 CVEs

    Moderate: ghostscript security update (Oracle Linux 8)

    [9.27-16] - RHEL-18396 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67046 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-15067 CVE-2020-27792 ghostscript: heap …

  • High max 9.8
    ELSA-2025-4341 5 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-503.40.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 6.3
    ELSA-2025-4263 8 CVEs

    Moderate: php:8.1 security update (Oracle Linux 9)

    php [8.1.32-1] - rebase to 8.1.32 php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip:

  • Medium max 6.2
    ELSA-2025-4244 1 CVE

    Moderate: glibc security update (Oracle Linux 9)

    [2.34-125.0.1.8] - Forward-port Oracle patches for ol9-u5 (glibc-2.34-125.0.1.8) Reviewed by: David Faust <david.faust@oracle.com> Oracle history:

  • High max 6.4
    ELSA-2025-4229 3 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.9.2-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.9.2] - Add OpenELA debranding [128.9.2-1] - Update to 128.9.2

  • High max 7.8
    ELSA-2025-3612 2 CVEs

    Important: libxslt security update (Oracle Linux 7)

    [1.1.28-6.0.3] - Fix CVE-2024-55549 issue due to memory leak [Orabug: 37795485] - Fix CVE-2025-24855 issue due to use after free.

  • High max 8.1
    ELSA-2025-4170 3 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.9.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.9.0] - Add OpenELA debranding [128.9.0-2] - Update to 128.9.0 build3 [128.9.0-1] - Update to 128.9.0 build1

  • Medium max 5.3
    ELSA-2025-20284 1 CVE

    Moderate: gnutls security update (Oracle Linux 8)

    [3.6.16-8.3_fips] - Allow RSA keygen with modulus sizes bigger than 3072 bits and validate the seed length as defined in FIPS 186-4 section B.3.2 [Orabug: 33200526] - Allow bigger known RSA modulus sizes when calling rsa_generate_fips186_4_keypair directly [O…

  • High max 8.1
    ELSA-2025-4169 3 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.9.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.9.0] - Add OpenELA debranding [128.9.0-2] - Update to 128.9.0 build3 [128.9.0-1] - Update to 128.9.0 build1

  • High max 8.1
    ELSA-2025-3628 3 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.9.0-2.0.1] - Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029] [CVE-2025-3030]

  • High max 8.2
    ELSA-2025-3997 1 CVE

    Important: mod_auth_openidc:2.3 security update (Oracle Linux 8)

    cjose mod_auth_openidc [2.4.9.4-7] - Resolves: RHEL-86218 - mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data (CVE-2025-31492)

  • Medium max 5.9
    ELSA-2025-4063 7 CVEs

    Moderate: ruby:3.1 security update (Oracle Linux 8)

    ruby [3.1.7-145] - Upgrade to Ruby 3.1.7. Resolves: RHEL-55408 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57051 - Fix DoS vulnerability in REXML. (CVE-2024-43398) Resolves: RHEL-56002 [3.1.5-144] - Fix REXML ReDoS vulnerability. (CVE-20…

  • Medium max 7.1
    ELSA-2025-4043 2 CVEs

    Moderate: bluez security update (Oracle Linux 8)

    [5.63-5] + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 [5.63-4] + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229

  • Medium max 7.5
    ELSA-2025-4048 1 CVE

    Moderate: xmlrpc-c security update (Oracle Linux 8)

    [1.51.0-11] - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176

  • Medium max 5.3
    ELSA-2025-4049 1 CVE

    Moderate: libtasn1 security update (Oracle Linux 8)

    [4.13.0-5] - Backport the fix for CVE-2024-12133

  • High max 7.6
    ELSA-2025-3367 1 CVE

    Important: grub2 security update (Oracle Linux 8)

    [2.02-164.0.2] - fs/ext2: Rework out-of-bounds read for inline and external extents [Orabug: 37829911] [2.02-164.0.1] - Update grub2 dependencies to match new Secure Boot certificate chain of trust [Orabug: 37766761] - Fix typo in SBAT metadata [Orabug: 37693…

  • Medium max 5.3
    ELSA-2025-4051 1 CVE

    Moderate: gnutls security update (Oracle Linux 8)

    [3.6.16-8.3] - Backport the fix for CVE-2024-12243

  • High max 7.8
    ELSA-2025-4025 1 CVE

    Important: libxslt security update (Oracle Linux 9)

    [1.1.34-9.0.1.el9_5.2] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-9.2] - Fix CVE-2024-55549 (RHEL-83515) [1.1.34-9.1] - Fix CVE-2025-24855 (RHEL-83501)

  • High max 7.5
    ELSA-2025-3974 7 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.48.1-1] - Update to 2.48.1

  • Medium max 7.4
    ELSA-2025-3845 3 CVEs

    Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.452.b09-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.452.b09-1] - Update to 8u452-b09 (GA) - Update release notes for 8u452-b09. - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u - Require tzdata 2…

  • Medium max 7.4
    ELSA-2025-3852 3 CVEs

    Moderate: java-17-openjdk security update (Oracle Linux 8)

    [1:17.0.15.0.6-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.15.0.6-2] - Update to jdk-17.0.15+6 (GA) - Add to .gitignore openjdk-17.0.15+6.tar.xz - Set updatever to 15 - Set buildver to 6 - Set rpmrelease to 2 - Update sources to openjdk-17.0…

  • Medium max 7.4
    ELSA-2025-3855 3 CVEs

    Moderate: java-21-openjdk security update (Oracle Linux 8)

    [1:21.0.7.0.6-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.7.0.6-1] - Update to jdk-21.0.7+6 (GA) - Update release notes to 21.0.7+6 - Rebase FIPS support against 21.0.7+5 - Require tzdata 2025a due to upstream inclusion of JDK-8347965 - Sync…

  • Medium max 7.1
    ELSA-2025-3937 1 CVE 1 exploited

    Moderate: kernel security update (Oracle Linux 9)

    - [5.14.0-503.38.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 7.2
    ELSA-2025-3390 1 CVE

    Important: libreoffice security update (Oracle Linux 7)

    [5.3.6.1-26.0.3] - Fix CVE-2025-1080, do not process macros in exotic uri schemes [Orabug: 37770225]

  • Medium max 7.5
    ELSA-2025-3913 1 CVE

    Moderate: expat security update (Oracle Linux 8)

    [2.2.5-17.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-17] - Fix CVE-2024-8176 - Resolves: RHEL-57477

  • Medium max 7.1
    ELSA-2025-3893 2 CVEs 1 exploited

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.50.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.8
    ELSA-2025-20271 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.342.5] - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835558] {CVE-2024-39494} [5.4.17-2136.342.4] - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Hoiland-Jorgensen) - udf: Fix use of ch…

  • Medium max 6.2
    ELSA-2025-3828 1 CVE

    Moderate: glibc security update (Oracle Linux 8)

    [2.28-251.0.3.16] - Forward port of Oracle patches Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> Oracle history: March-26-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.3.14 - OraBug: 36625686 Add MTE support on string functions Re…

  • High max 7.5
    ELSA-2025-3833 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.8.5-1] - Fix CVE-2025-22869 by updating to 0.8.5 - Resolves: RHEL-81312

  • High max 8.1
    ELSA-2025-3395 1 CVE 1 exploited

    Important: freetype security update (Oracle Linux 7)

    [2.8-14.0.1.el7_9.1] - Fix CVE-2025-27363 Out-of-bounds Write [Orabug: 37770275][CVE-2025-27363]

  • High max 7.6
    ELSA-2025-3396 1 CVE

    Important: grub2 security update (Oracle Linux 7)

    [2.02-0.87.0.27.el7.14] - Fix OOB write in grub_net_search_config_file() CVE-2025-0624 [Orabug: 37770226] - Also adds implementation of grub_strlcpy() for clean backport

  • High max 10.0
    ELSA-2025-20270 12 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-307.178.5] - net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter) [Orabug: 37434242] {CVE-2024-56660} - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer) [Orabug: 37703179] - net: hsr: fix fill_frame…

  • Medium max 6.1
    ELSA-2025-3772 2 CVEs

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-1] - Rebase to 1.24.1 - Skip unsupported tests - Resolves: RHEL-83451 golang [1.23.6-1] - Update to Go 1.23.6 - Resolves: RHEL-83824 [1.22.11-1] - Rebase to Go1.22.11 t…

  • High max 7.5
    ELSA-2025-3773 1 CVE

    Important: delve and golang security update (Oracle Linux 9)

    delve [1.24.1-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.24.1-2] - Fix 3 test failures - Resolves: RHEL-83939 - Resolves: RHEL-83958 - Resolves: RHEL-7373 [1.24.1-1] - Rebase to Delve 1.24.1 - Resolves: RHEL-64445 golang [1.23.6-2…

  • Medium max 10.0
    ELSA-2025-3683 2 CVEs 1 exploited

    Moderate: tomcat security update (Oracle Linux 8)

    [1:9.0.87-1.el8_10.3] - Resolves: RHEL-82934 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71708 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)