8,316 results · Feed
-
High max 7.5ELSA-2025-3713 7 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.48.1-1] - Update to 2.48.1 [2.48.0-1] - Update to 2.48.0
-
High max 7.8ELSA-2025-2879 8 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-29.0.1] - Fixed CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 - CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 - CVE-2025-26601 [Orabug: 37712847]
-
High max 7.8ELSA-2025-3615 2 CVEs
Important: libxslt security update (Oracle Linux 8)
[1.1.32-6.1.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-6.1] - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492)
-
High max 7.8ELSA-2025-3617 4 CVEs
Important: gimp security update (Oracle Linux 9)
[2:2.99.8-4] - Applying fixes for vulnerabilities that led to possible RCE conditions. - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444 - Resolves: RHEL-86048 RHEL-86045 RHEL-86042 RHEL-86039
-
Low max 7.5ELSA-2025-3631 1 CVE
Low: python3.12 security update (Oracle Linux 9)
[3.12.5-2.3] - Security fix for CVE-2024-7592 Resolves: RHEL-85300
-
Low max 7.5ELSA-2025-3634 1 CVE
Low: python3.11 security update (Oracle Linux 9)
[3.11.9-7.3] - Security fix for CVE-2024-7592 Resolves: RHEL-85299
-
Medium max 10.0
Moderate: tomcat security update (Oracle Linux 9)
[1:9.0.87-2.el9_5.1] - Resolves: RHEL-82946 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71719 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)
-
High max 8.1ELSA-2025-3582 3 CVEs
Important: firefox security update (Oracle Linux 8)
[128.9.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.9.0-2] - Update to 128.9.0 build2 [128.9.0-1] - Update to 128.9.0 build1
-
High max 8.1ELSA-2025-3556 3 CVEs
Important: firefox security update (Oracle Linux 9)
[128.9.0-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.9.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
Medium max 7.5ELSA-2025-3531 1 CVE
Moderate: expat security update (Oracle Linux 9)
[2.5.0-3.3] - Improve fix for CVE-2024-8176 - Resolves: RHEL-57488 [2.5.0-3.2] - Fix CVE-2024-8176 - Resolves: RHEL-57488
-
MediumELSA-2025-3506 1 CVE
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-503.35.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 7.8ELSA-2025-2861 8 CVEs
Important: tigervnc security update (Oracle Linux 7)
[1.8.0-33.0.5] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor [Orabug: 37712725] - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() - Fix CV…
-
High max 5.4ELSA-2025-3388 1 CVE
Important: python-jinja2 security update (Oracle Linux 8)
[2.10.1-7] - Security fix for CVE-2025-27516 Resolves: RHEL-85066
-
High max 8.1
Important: freetype security update (Oracle Linux 8)
[2.9.1-10] - Fix CVE-2025-27363 Out-of-bounds Write - Resolves: RHEL-83094
-
High max 5.4ELSA-2025-3406 1 CVE
Important: python-jinja2 security update (Oracle Linux 9)
[2.11.3-8] - Security fix for CVE-2025-27516 Resolves: RHEL-85064
-
High max 8.1
Important: freetype security update (Oracle Linux 9)
[2.10.4-10] - Fix for CVE-2025-27363 out-of-bound write vulnerability - Patch initially by Marc Deslauriers of Canonical - https://www.openwall.com/lists/oss-security/2025/03/14/3 - Adjusted for EL9 by Jonathan Wright of AlmaLinux - and a member of the Meta s…
-
High max 7.2ELSA-2025-3408 1 CVE
Important: libreoffice security update (Oracle Linux 9)
[1:7.1.8.1-15.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [1:7.1.8.1-15] - Fix CVE-2025-1080 Filter out more unwanted command URIs
-
High max 7.8
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.7] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Beno_t Sevens) {CVE-2024-53197} [Orabug: 37686305] - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) {CVE-2023-52922} [Orabug: 37686305] - HID: core:…
-
High max 7.5ELSA-2025-3336 1 CVE
Important: podman security update (Oracle Linux 9)
[5.2.2-15.0.1] - podman: do not set rlimits to the default value [Orabug: 37310981] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket tes…
-
Medium max 4.7ELSA-2025-3261 1 CVE
Moderate: nginx:1.22 security update (Oracle Linux 9)
[1.22.1-8.0.1.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.22.1-8.1] - Resolves: RHEL-84486 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1…
-
Medium max 4.7ELSA-2025-3262 1 CVE
Moderate: nginx:1.24 security update (Oracle Linux 9)
[1.24.0-4.0.1.1] - Reference oracle-indexhtml within Requires [Orabug: 33802044] - Remove Red Hat references [Orabug: 29498217] [1:1.24.0-4.1] - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) [1…
-
High max 7.5ELSA-2025-3344 1 CVE
Important: grafana security update (Oracle Linux 9)
[10.2.6-9] - Resolves RHEL-84634: CVE-2025-30204
-
High max 7.5ELSA-2025-3210 1 CVE
Important: container-tools:ol8 security update (Oracle Linux 8)
aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Ger…
-
High max 7.8ELSA-2025-3260 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.46.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 7.8ELSA-2025-3208 1 CVE
Important: kernel security update (Oracle Linux 9)
[5.14.0-503.34.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 5.4ELSA-2025-3113 1 CVE
Important: fence-agents security update (Oracle Linux 9)
[4.10.0-76.6] - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and avoid edge-case of writing empty token file Resolves: RHEL-83487 [4.10.0-76.5] - bundled jinja2: fix CVE-2025-27516 Resolves: RHEL-82712
-
High max 7.8ELSA-2025-3107 1 CVE
Important: libxslt security update (Oracle Linux 9)
[1.1.34-9.0.1.el9_5.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.34-9.1] - Fix CVE-2025-24855 (RHEL-83501)
-
High max 8.8ELSA-2025-2130 1 CVE
Important: emacs security update (Oracle Linux 7)
[1:24.3-23.0.1.1] - Fix CVE-2025-1244 man.el shell injection vulnerability [Orabug: 37658579]
-
High max 8.1ELSA-2025-3082 1 CVE
Important: postgresql:12 security update (Oracle Linux 8)
pgaudit postgres-decoderbufs postgresql [12.22-3] - Fix backport for CVE-2025-1094 [12.22-2] - Backport fix for CVE-2025-1094
-
High max 7.8ELSA-2025-2673 2 CVEs
Important: libxml2 security update (Oracle Linux 7)
[2.9.1-6.0.5] - Fix CVE-2024-56171 [Orabug: 37694105] - Fix CVE-2025-24928 [Orabug: 37694105] [2.9.1-6.0.3] - Rebuild to include attribution logo [Orabug: 33024216] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in t…
-
High max 7.8ELSA-2025-20190 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.341.3.3] - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 37727037] {CVE-2024-39494} [5.4.17-2136.341.3.2] - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37707634] {CVE-2024-5789…
-
High max 7.8ELSA-2025-3026 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.45.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 7.5ELSA-2025-2872 1 CVE
Important: pcs security update (Oracle Linux 8)
[0.10.18-2.0.1.el8_10.4] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.4] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924
-
High max 7.2ELSA-2025-2868 1 CVE
Important: libreoffice security update (Oracle Linux 8)
[1:6.4.7.2-19.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-19] - Fix CVE-2025-1080 Filter out more unwanted command URIs [6.4.7.2] - R…
-
High max 8.8ELSA-2025-2699 9 CVEs
Important: firefox security update (Oracle Linux 7)
[128.8.0-1.0.1] - Update to 128.8.0 build1 [Orabug: 37700882][CVE-2025-1930][CVE-2025-1931] [CVE-2025-1932][CVE-2025-1933][CVE-2025-1934][CVE-2025-1935][CVE-2025-1936] [CVE-2025-1937][CVE-2025-1938]
-
High max 10.0
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.46.6-2] - Add patch for CVE-2025-24201
-
High max 7.5ELSA-2025-2900 2 CVEs
Important: thunderbird security update (Oracle Linux 8)
[128.8.0-2.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.8.0] - Add OpenELA debranding [128.8.0-2] - Update to 128.8.0 build5 [128.8.0-1] - Update to 128.8.0 build1
-
High max 10.0
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.46.6-2] - Add patch for CVE-2025-24201
-
High max 7.6ELSA-2025-2867 1 CVE
Important: grub2 security update (Oracle Linux 9)
[2.06-94.0.1] - Rework the scripts to cover both in-place upgrade and update scenarios [Orabug: 36768566] - Restore correct order of processing config files [Orabug: 36758359] - Support setting custom kernels as default kernels [Orabug: 36043978] - Bump SBAT …
-
High max 7.5ELSA-2025-2899 2 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.8.0-2.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.8.0] - Add OpenELA debranding [128.8.0-2] - Update to 128.8.0 build5 [128.8.0-1] - Update to 128.8.0 build1