Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 7.5
    ELSA-2025-1676 1 CVE

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-0.22.2] - Fix application of patch for CVE-2024-11187 - Resolves: RHEL-77103 [32:9.16.23-0.22.1] - Limit additional section records CPU processing (CVE-2024-11187) - Fix test backport changes

  • High max 9.1
    ELSA-2025-1673 49 CVEs

    Important: mysql:8.0 security update (Oracle Linux 8)

    mecab [0.996-2.12] - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: #2180411 mecab-ipadic [2.7.0.20070801-17.0.1] - Rename the LICENSE.Fedora to LICENSE.oracle [2.7.0.2…

  • High max 7.5
    ELSA-2025-1681 1 CVE

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-24.0.1.el9_5.3] - Fix bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

  • High max 8.1
    ELSA-2025-1738 1 CVE

    Important: libpq security update (Oracle Linux 9)

    [13.20-1] - Update to 13.20

  • High max 8.1
    ELSA-2025-1742 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.18-1] - Update to 13.18

  • High max 7.7
    ELSA-2025-1613 3 CVEs

    Important: nodejs:22 security update (Oracle Linux 9)

    nodejs [1:22.13.1-1] - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 [1:22.11.0-1] - Update to version 22.11.0 [22.4.1-4] - Initial import of nodeJS 22 nodejs-nodemon nodejs-packaging

  • Medium max 6.8
    ELSA-2025-1582 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 8)

    nodejs [1:18.20.6-1] - Update to version 18.20.6 Resolves: RHEL-78326 Fixes: CVE-2025-23085 CVE-2025-22150 nodejs-nodemon nodejs-packaging

  • High max 7.7
    ELSA-2025-1611 3 CVEs

    Important: nodejs:22 security update (Oracle Linux 8)

    nodejs [22.13.1-1] - Upgrade to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76362 RHEL-76897 [22.11.0-1] - Upgrade to nodejs 22.11.0. Resolves: RHEL-35991 [22.4.1-4] - Exclude ix86 arches from building. Related: RHEL-3599…

  • Medium max 9.8
    ELSA-2025-0936 1 CVE

    Moderate: mingw-glib2 security update (Oracle Linux 9)

    [2.78.6-2] - Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()

  • Medium max 6.9
    ELSA-2025-1329 1 CVE 1 exploited

    Moderate: doxygen security update (Oracle Linux 9)

    [1:1.9.1-12] - Resolves: RHEL-78146, CVE-2020-11023, CVE-2020-11022

  • Medium max 8.1
    ELSA-2025-1517 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-18.2] - Fix CVE-2022-49043 (RHEL-76289) [2.9.7-18.1] - Fix CVE-2024-25062 (RHEL-31056)

  • High max 7.5
    ELSA-2025-0714 1 CVE

    Important: rsync security update (Oracle Linux 7)

    [3.1.2-12.0.1] * Back port fix for CVE-2024-12085 [Orabug: 37524229]

  • High max 7.7
    ELSA-2025-1443 3 CVEs

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.18.2] - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 [1:20.18.1-1] - Update to version 20.18.1 nodejs-nodemon nodejs-packaging

  • Medium max 6.8
    ELSA-2025-1446 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 9)

    nodejs [1:18.20.6-1] - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 [1:18.20.4-1] - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging

  • High max 7.7
    ELSA-2025-1351 3 CVEs

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.18.2-1] - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76001 RHEL-76146 [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 [1:20.12.2-2] - Backport nghttp2 patch f…

  • High max 8.6
    ELSA-2025-1372 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah [2:1.33.12-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/58af1cd) - Resolves: RHEL-67612 cockpit-podman conmon containernetworking-plugins contai…

  • Medium max 6.9
    ELSA-2025-1338 1 CVE 1 exploited

    Moderate: gcc-toolset-14-gcc security update (Oracle Linux 8)

    [14.2.1-7.1] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78284) [14.2.1-7] - update from releases/gcc-14 branch (RHEL-74062) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, …

  • High max 8.1
    ELSA-2025-1350 1 CVE

    Important: libxml2 security update (Oracle Linux 9)

    [2.9.13-6.1] - Fix CVE-2022-49043 (RHEL-76298)

  • Medium max 6.9
    ELSA-2025-1346 1 CVE 1 exploited

    Moderate: gcc security update (Oracle Linux 9)

    [11.5.0-5.0.1] - Merge Oracle patches to 11.5.0-5. Oracle history:

  • High max 9.8
    ELSA-2025-1132 8 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.7.0-1.0.1] - Update to 128.7.0 build1 [Orabug: 37564202][CVE-2025-1009][CVE-2025-1010] [CVE-2025-1011][CVE-2025-1012][CVE-2025-1013][CVE-2025-1014][CVE-2025-1016] [CVE-2025-1017]

  • Medium max 6.9
    ELSA-2025-1301 1 CVE 1 exploited

    Moderate: gcc security update (Oracle Linux 8)

    [8.5.0-23.0.1] - Merge Oracle patches to 8.5.0-23. Oracle history: May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1 - Merge Oracle patches to 8.5.0-22. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> March-27-2024 Qing Zhao <qing.zhao@oracle…

  • Medium max 6.9
    ELSA-2025-1306 1 CVE 1 exploited

    Moderate: gcc-toolset-13-gcc security update (Oracle Linux 8)

    [13.3.1-2.2.0.1] - Merge Oracle patches to 13.3.1-2.2. gfortran needs install-info at installation time. Orabug: 36472775 [13.3.1-2.2] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78279)

  • High max 9.8
    ELSA-2025-20100 108 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.340.4.1] - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju) [Orabug: 37566743] [5.4.17-2136.340.4] - ftrace: use preempt_enable/disable notrace macros to avoid double fault (Koichiro Den) - nfsd: restore callback functi…

  • Medium max 6.9
    ELSA-2025-1300 1 CVE 1 exploited

    Moderate: gcc-toolset-14-gcc security update (Oracle Linux 9)

    [14.2.1-1.3] - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78383)

  • High max 7.4
    ELSA-2025-1330 1 CVE

    Important: openssl security update (Oracle Linux 9)

    [3.2.2-6.0.1.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [1:3.2.2-6.1] - RFC7250 handshakes with unauthenticated serve…

  • Medium max 6.9
    ELSA-2025-1309 1 CVE 1 exploited

    Moderate: gcc-toolset-13-gcc security update (Oracle Linux 9)

    [13.3.1-2.2.0.1] - Merge Oracle patches to 13.3.1-2.2. Oracle history: November-20-2024 Qing Zhao <qing.zhao@oracle.com> 13.3.1-2.1.0.1 - gfortran needs install-info at installation time. Orabug: 36472775 [13.3.1-2.2] - disable jQuery use, don't ship jquery.j…

  • Medium max 9.8
    ELSA-2025-31356 1 CVE

    Moderate: terraform-provider-oci-fips security update (Oracle Linux 8)

    [6.25.0-2.el9] - Rebuild on golang-boringcrypto 1.22.11 to fix CVE-2024-24790 (Alex Burmashev) {CVE-2024-24790}

  • High max 9.8
    ELSA-2025-1283 8 CVEs

    Important: firefox security update (Oracle Linux 8)

    [128.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.7.0-1] - Update to 128.7.0 build1

  • High max 9.8
    ELSA-2025-1292 10 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.7.0] - Add OpenELA debranding [128.7.0-1] - Update to 128.2.0 build1

  • High max 7.8
    ELSA-2025-1266 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-553.40.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 7.8
    ELSA-2025-1262 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-503.23.2_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • Medium max 6.9
    ELSA-2025-1215 1 CVE 1 exploited

    Moderate: tbb security update (Oracle Linux 8)

    [2018.2-10.1] - Remove jQuery from Doxygen files (RHEL-77669) [2018.2-10] - Apply patches from (BZ #1907561) - Bump release

  • High max 9.8
    ELSA-2025-1184 10 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [128.7.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.7.0] - Add OpenELA debranding [128.7.0-1] - Update to 128.2.0 build1

  • Medium max 6.9
    ELSA-2025-1210 1 CVE 1 exploited

    Moderate: tbb security update (Oracle Linux 9)

    [2020.3-8.1] - Remove jQuery from Doxygen output (RHEL-77693)

  • High max 9.8
    ELSA-2025-20095 192 CVEs 4 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-305.176.4] - x86/asm: Make serialize() always_inline (Juergen Gross) - hwmon: (tmp513) Fix division of negative numbers (David Lechner) - Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (Pratyush Yadav) - Revert 'regmap: detach r…

  • Medium max 7.3
    ELSA-2025-1068 2 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    [4.18.0-553.37.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

  • High max 9.3
    ELSA-2025-0319 1 CVE

    Important: raptor2 security update (Oracle Linux 7)

    [2.0.9-3.0.1] - CVE-2024-57823: memcpy integer underflow and heap read overflow [Orabug: 37476410]

  • Medium max 4.9
    ELSA-2025-0912 1 CVE

    Moderate: mariadb:10.11 security update (Oracle Linux 9)

    galera [26.4.20-1.0.1] - Drop nmap-ncat requirement. [Orabug: 34116228] - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. [Orabug: 34116228] [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] …

  • Medium max 4.9
    ELSA-2025-0914 2 CVEs

    Moderate: galera and mariadb security update (Oracle Linux 9)

    galera [26.4.20-1.0.1] - Drop nmap-ncat requirement. [Orabug: 34116228] - Requirement to delete lp1184034 test case without using patches. [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] - Rebase to 26.4.18 mariadb [3:10.5.27-1] - …

  • High max 9.8
    ELSA-2025-1066 8 CVEs

    Important: firefox security update (Oracle Linux 9)

    [128.7.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.7.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…