Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 7.5
    ELSA-2025-1750 1 CVE

    Moderate: python3 security update (Oracle Linux 7)

    [3.6.8-21.0.3] - Fix DoS parsing crafted tarfile headers [Orabug: 37626372][CVE-2024-6232] - Disable test_socket in the PGO profile task.

  • High max 7.8
    ELSA-2025-1281 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.6.el7.OL7] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) {CVE-2024-53104} [Orabug: 37584712]

  • Medium max 7.1
    ELSA-2025-2722 1 CVE

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-31.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-31] - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060

  • Medium max 6.9
    ELSA-2025-1601 1 CVE 1 exploited

    Moderate: gcc security update (Oracle Linux 7)

    [4.8.5-45.0.1] - [Orabug: 37603707] ELSA-2025-1601 Moderate: gcc security update CVE-2020-11023 rebuild for CVE-2020-11023 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [4.8.5-44.0.5] - fix arm cross building inline issue. gcc48-cfns-fix-protos.p…

  • High max 7.0
    ELSA-2025-2670 1 CVE

    Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [8.0.114-1.0.1] - Add support for Oracle Linux [8.0.114-1] - Update to .NET SDK 8.0.114 and Runtime 8.0.14 - Resolves: RHEL-81639

  • High max 7.8
    ELSA-2025-2686 2 CVEs

    Important: libxml2 security update (Oracle Linux 8)

    [2.9.7-19] - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) [2.9.7.18.2] - Fix CVE-2022-49043 (RHEL-76289) [2.9.7-18.1] - Fix CVE-2024-25062 (RHEL-31056)

  • High max 7.0
    ELSA-2025-2667 1 CVE

    Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [9.0.104-1.0.1] - Add support for Oracle Linux [9.0.104-1] - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves: RHEL-81645

  • High max 7.0
    ELSA-2025-2668 1 CVE

    Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 9)

    [9.0.104-1.0.1] - Add support for Oracle Linux [9.0.104-1] - Update to .NET SDK 9.0.104 and Runtime 9.0.3 - Resolves: RHEL-81649

  • High max 7.0
    ELSA-2025-2669 1 CVE

    Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 9)

    [8.0.114-1.0.1] - Add support for Oracle Linux [8.0.114-1] - Update to .NET SDK 8.0.114 and Runtime 8.0.14 - Resolves: RHEL-81640

  • High max 7.8
    ELSA-2025-2679 2 CVEs

    Important: libxml2 security update (Oracle Linux 9)

    [2.9.13-6.2] - Fix CVE-2024-56171 (RHEL-80128) - Fix CVE-2025-24928 (RHEL-80143)

  • High max 7.5
    ELSA-2025-2471 1 CVE

    Important: pcs security update (Oracle Linux 9)

    [0.11.8-1.el9_5.2] - Fixed CVE-2024-52804 by patching bundled Tornado Resolves: RHEL-81924

  • High max 7.8
    ELSA-2025-2627 6 CVEs 2 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-503.31.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • High max 7.5
    ELSA-2025-1718 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.11.4-26.0.3.P2.16] - Resolve CVE-2024-11187 [Orabug: 37616907]

  • High max 7.8
    ELSA-2025-2502 8 CVEs

    Important: tigervnc security update (Oracle Linux 8)

    [1.13.1-15] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79397 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-79401 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWri…

  • Medium max 6.5
    ELSA-2025-2600 3 CVEs

    Moderate: rsync security update (Oracle Linux 8)

    [3.1.3-21] - Resolves: RHEL-70207 - Path traversal vulnerability in rsync

  • High max 7.8
    ELSA-2025-2473 4 CVEs 2 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.44.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 8.1
    ELSA-2025-20153 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.341.3.1] - Revert 'NFSD: Limit the number of concurrent async COPY operations' (Sherry Yang) [Orabug: 37667080] [5.4.17-2136.341.3] - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 37565787] - io_uring/r…

  • High max 7.8
    ELSA-2025-2500 8 CVEs

    Important: tigervnc security update (Oracle Linux 9)

    [1.14.1-1.1] - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79406 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80018 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWr…

  • High max 7.8
    ELSA-2025-20152 9 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-306.177.4] - Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (Greg Kroah-Hartman) - drm/v3d: Assign job pointer to NULL before signaling the fence (Maira Canal) - scsi: mpi3mr: Fix corr…

  • Medium max 7.1
    ELSA-2025-1352 1 CVE

    Moderate: krb5 security update (Oracle Linux 7)

    [1.15.1-55.0.9] - Fixes CVE-2025-24528 , Prevent overflow when calculating ulog block size [Orabug: 37587301]

  • High max 8.8
    ELSA-2025-2452 9 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.8.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.8.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.8.0-1] - Update to 128.8.0 build1

  • High max 9.3
    ELSA-2024-11049 1 CVE

    Important: squid security update (Oracle Linux 7)

    [7:3.5.20-17.0.5.13] - Fixed cve 2023-46846 for http and icap request/response smuggling [Orabug: 37326730]

  • High max 8.8
    ELSA-2025-2359 9 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.8.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.8.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

  • Medium max 5.4
    ELSA-2025-1250 1 CVE

    Moderate: python-jinja2 security update (Oracle Linux 7)

    [2.7.2-4.0.1] - Fix for CVE-2024-56326 [Orabug: 37576737]

  • High max 8.8
    ELSA-2025-2034 5 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.46.6-1] - Update to 2.46.6

  • High max 8.8
    ELSA-2025-2035 5 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.46.6-1] - Update to 2.46.6

  • Medium max 6.9
    ELSA-2025-1255 1 CVE 1 exploited

    Moderate: doxygen security update (Oracle Linux 7)

    [1:1.8.5-4.0.1] - Fix CVE-2020-11022 and CVE-2022-11023 in vendored jQuery [Orabug: 37577394]

  • Medium max 5.5
    ELSA-2025-1659 1 CVE

    Moderate: kernel security update (Oracle Linux 9)

    - [5.14.0-503.26.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 8.8
    ELSA-2025-1915 1 CVE

    Important: emacs security update (Oracle Linux 9)

    [1:27.2-11.1] - Eliminate use of obsolete patch syntax (RHEL-80443) [1:27.2-11] - Fix man.el shell injection vulnerability (RHEL-79025)

  • High max 8.8
    ELSA-2025-1917 1 CVE

    Important: emacs security update (Oracle Linux 8)

    [1:26.1-13] - Fix man.el shell injection vulnerability (RHEL-79016)

  • High max 8.1
    ELSA-2025-1736 1 CVE

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 pg_repack [1.4.6-3] - Release bump - enable gating postgres-decoderbufs [0.10.0-2] - Release bump for rebuild against libpq-12.1-3 postgresql [13.20-1] - Update to 13.20 - Fix CVE-2025-1094

  • High max 8.1
    ELSA-2025-1737 1 CVE

    Important: libpq security update (Oracle Linux 8)

    [13.20-1] - Update to 13.20

  • High max 8.1
    ELSA-2025-1739 1 CVE

    Important: postgresql:15 security update (Oracle Linux 8)

    pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 pg_repack [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128241 postgres-decoderbufs [1.9.7-1.Final] - Iitial import for postgresql 15 stream - Rela…

  • High max 8.1
    ELSA-2025-1740 1 CVE

    Important: postgresql:16 security update (Oracle Linux 8)

    pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…

  • High max 7.5
    ELSA-2025-1670 2 CVEs

    Important: bind9.18 security update (Oracle Linux 9)

    [32:9.18.29-1.el9_5.1] - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

  • High max 8.1
    ELSA-2025-1741 1 CVE

    Important: postgresql:15 security update (Oracle Linux 9)

    pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack [1.4.8-2] - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 [1.4.8-1] - Update to version 1.4.8 …

  • High max 8.1
    ELSA-2025-1743 1 CVE

    Important: postgresql:16 security update (Oracle Linux 9)

    pgaudit pg_repack [1.5.1-1] - Update to v1.5.1 pgvector [0.6.2-1] - Initial packaging postgres-decoderbufs postgresql [16.8-1] - Update to 16.8 - Fix CVE-2025-1094

  • High max 9.1
    ELSA-2025-1671 49 CVEs

    Important: mysql security update (Oracle Linux 9)

    [8.0.41-2] - Fix patching of logrotate [8.0.41-1] - Update to MySQL 8.0.41 [8.0.40-1] - Update to MySQL 8.0.40 [8.0.39-1] - Rebase to version 8.0.39 [8.0.37-2] - Use signal to flush logs when rotating [8.0.37-1] - Update to MySQL 8.0.37 - Remove some legacy c…

  • High max 6.5
    ELSA-2025-1047 1 CVE

    Important: libsoup security update (Oracle Linux 7)

    [2.62.2-2.0.3] - Fixed CVE-2024-52531 buffer overflow via UTF-8 conversion in - soup_header_parse_param_list_strict [Orabug: 37557504]

  • High max 7.5
    ELSA-2025-1675 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-16.4] - Change patches applying to use -P parameter [32:9.11.36-16.3] - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended