Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 8.6
    ELSA-2025-0922 1 CVE

    Important: podman security update (Oracle Linux 9)

    [5.2.2-13.0.1] - podman: do not set rlimits to the default value [Orabug: 37310981] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket tes…

  • High max 8.6
    ELSA-2025-0923 1 CVE

    Important: buildah security update (Oracle Linux 9)

    [1.37.6-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.37.6-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.37 (https://github.com/containers/buildah/commit/fd39521) - Res…

  • Medium max 9.8
    ELSA-2025-0925 1 CVE

    Moderate: bzip2 security update (Oracle Linux 9)

    [1.0.8-10] - Revert the previous commit (introduced a regression) Resolves: CVE-2019-12900 [1.0.8-9] - Fix out of bounds access in BZ2_decompress Resolves: RHEL-65198

  • Medium max 9.8
    ELSA-2025-0917 1 CVE

    Moderate: keepalived security update (Oracle Linux 9)

    [2.2.8-3] - Validate vrrp ipset names for CVE-2024-41184 Resolves: RHEL-49557

  • High max 8.6
    ELSA-2024-11344 7 CVEs

    Important: gstreamer1-plugins-base and gstreamer1-plugins-good security update (Oracle Linux 7)

    gstreamer1-plugins-base [1.10.4-2.0.1] - Fixed CVE-2024-47607,CVE-2024-47538 and CVE-2024-47615 [Orabug: 37407070] gstreamer1-plugins-good [1.10.4-2.0.1] - Fixes CVE-2024-47537, CVE-2024-47540, CVE-2024-47613 and - CVE-2024-47607 [Orabug: 37407070]

  • High max 8.0
    ELSA-2025-0837 2 CVEs

    Important: unbound security update (Oracle Linux 8)

    [1.16.2-5.8] - Prevent unbounded name compression (CVE-2024-8508) [1.16.2-5.7] - Rebuild to propagate to CentOS Stream (RHEL-25500)

  • High max 6.5
    ELSA-2025-0838 1 CVE

    Important: libsoup security update (Oracle Linux 8)

    [2.62.3-7] - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376

  • High max 8.5
    ELSA-2025-0845 1 CVE

    Important: git-lfs security update (Oracle Linux 8)

    [3.4.1-4] - Backport CVE-2024-53263 fixes - Resolves: RHEL-73931

  • Medium max 9.8
    ELSA-2025-0733 1 CVE

    Moderate: bzip2 security update (Oracle Linux 8)

    [1.0.6-28] - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140

  • Medium max 4.9
    ELSA-2025-0739 2 CVEs

    Moderate: mariadb:10.5 security update (Oracle Linux 8)

    galera Judy mariadb [3:10.5.27-1] - Rebase to 10.5.27 [3:10.5.26-1] - Rebase to 10.5.26 [3:10.5.25-1] - Rebase to 10.5.25

  • High max 6.5
    ELSA-2025-0791 1 CVE

    Important: libsoup security update (Oracle Linux 9)

    [2.72.0-8.3] - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76381

  • Medium max 9.8
    ELSA-2025-0743 1 CVE

    Moderate: keepalived security update (Oracle Linux 8)

    [2.1.5-10] - CVE-2024-41184 Resolves: RHEL-49561

  • High max 7.8
    ELSA-2025-0746 3 CVEs

    Important: gimp:2.8 security update (Oracle Linux 8)

    gimp [2:2.28.22-26] - bump spec pygobject2 [2.28.7-5] - bump spec to fix NVR pygtk2 [2.24.0-25] - Fix shebang mangling for _prefix=app (#1907579) - disable numpy for flatpak (#1907579) python2-pycairo [1.16.3-7] - bump spec for NVR fix

  • Medium max 4.9
    ELSA-2025-0737 1 CVE

    Moderate: mariadb:10.11 security update (Oracle Linux 8)

    galera [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] - Rebase to 26.4.18 Judy mariadb [3:10.11.10-1] - Rebase to 10.11.10 [3:10.11.9-1] - Rebase to 10.11.9

  • High max 5.4
    ELSA-2025-0711 1 CVE

    Important: python-jinja2 security update (Oracle Linux 8)

    [2.10.1-6] - Security fix for CVE-2024-56326 Resolves: RHEL-74677

  • High max 7.0
    ELSA-2025-0693 5 CVEs

    Important: redis security update (Oracle Linux 9)

    [6.2.17-1] -- rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-26627

  • High max 7.5
    ELSA-2024-11003 2 CVEs

    Important: unbound security update (Oracle Linux 7)

    [1.6.6-5.0.1] - Fix CVE-2023-50387 and CVE-2023-50868 [Orabug: 37387426]

  • High max 7.5
    ELSA-2025-0402 1 CVE

    Important: iperf3 security update (Oracle Linux 7)

    [3.1.7-3.0.1] - Fixes Improper JSON Handling CVE-2024-53580 [Orabug: 37495333]

  • High max 7.0
    ELSA-2025-0692 2 CVEs

    Important: redis:7 security update (Oracle Linux 9)

    [7.2.7-1] - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741

  • High max 7.8
    ELSA-2025-20066 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-304.171.4.3] - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974} - NFSD: Async COPY result needs to return a write verifier (Chuck Lever) [Orabug: 37516381] {CVE-2024-49974} - security/keys: f…

  • High max 7.0
    ELSA-2025-0595 10 CVEs

    Important: redis:6 security update (Oracle Linux 8)

    [6.2.17-1.0.1] - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 [6.2.17-1] - rebase to 6.2.17 for CVE-2024-46981 [6.2.16-1] - rebase to 6.2.16 RHEL-66165

  • High max 8.5
    ELSA-2025-0673 1 CVE

    Important: git-lfs security update (Oracle Linux 9)

    [3.4.1-4] - Backport CVE-2024-53263 fixes - Resolves: RHEL-73936

  • Medium max 4.8
    ELSA-2025-0422 1 CVE

    Moderate: java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 (Oracle Linux 8)

    [1:17.0.14.0.7-3.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.14.0.7-3] - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and for build' [1:17.0.14.0.7-2] - Do not pass nil to _jvmdir macro in cjc logic - Related: RHEL-73867 …

  • Medium max 4.8
    ELSA-2025-0426 1 CVE

    Moderate: java-21-openjdk security update for RHEL 8.10, 9.4 and 9.5 (Oracle Linux 8)

    [1:21.0.6.0.7-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.6.0.7-1] - Update to jdk-21.0.6+7 (GA) - Update release notes to 21.0.6+7 - Sync the copy of the portable & devkit specfiles with the latest update - Include the latest devkit patches…

  • High max 5.4
    ELSA-2025-0667 1 CVE

    Important: python-jinja2 security update (Oracle Linux 9)

    [2.11.3-7] - Security fix for CVE-2024-56326 Resolves: RHEL-74690

  • Medium max 9.8
    ELSA-2025-0578 3 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    - [5.14.0-503.22.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 9.2
    ELSA-2025-0401 2 CVEs

    Important: grafana security update (Oracle Linux 8)

    [9.2.10-21] - Resolves RHEL-72881: CVE-2025-21614 - Resolves RHEL-72869: CVE-2025-21613

  • High max 8.8
    ELSA-2025-0382 4 CVEs

    Important: .NET 9.0 security update (Oracle Linux 8)

  • High max 7.7
    ELSA-2025-0132 7 CVEs

    Important: firefox security update (Oracle Linux 7)

    [128.6.0-1.0.1] - Update to 128.6.0 build1 [Orabug: 37460830][CVE-2025-0237][CVE-2025-0238] [CVE-2025-0239][CVE-2025-0240][CVE-2025-0241][CVE-2025-0242][CVE-2025-0243] - Enable PipeWire camera support for RHEL 10 + backport upstream fixes for PipeWire camera …

  • High max 8.8
    ELSA-2025-0381 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.112-1.0.1] - Add support for Oracle Linux [8.0.112-1] - Update to .NET SDK 8.0.112 and Runtime 8.0.12 - Resolves: RHEL-71554

  • Medium max 7.6
    ELSA-2025-0377 1 CVE

    Moderate: Security and bug fixes for NetworkManager (Oracle Linux 9)

    [1.48.10-5.0.1] - disable MPTCP handling by default [Orabug: 34801142] - add connectivity check via Oracle servers [Orabug: 32051972] [1:1.48.10-5] - vpn: Support routing rules in vpn conenctions (RHEL-73167) - vpn: Place gateway route to table defined in ipv…

  • High max 7.5
    ELSA-2025-0325 1 CVE

    Important: rsync security update (Oracle Linux 8)

    [3.1.3-20] - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents

  • High max 7.5
    ELSA-2025-0324 1 CVE

    Important: rsync security update (Oracle Linux 9)

    [3.2.3-20.1] - Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents

  • Medium max 5.5
    ELSA-2025-0334 1 CVE

    Moderate: ipa security update (Oracle Linux 9)

    [4.12.2-1.0.1.3] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-1.3] - Resolves: RHEL-69928 add support for python cryptography 44.0.0 - Resolves: RHEL-70258 Upgrade to …

  • High max 9.3
    ELSA-2025-0314 1 CVE

    Important: raptor2 security update (Oracle Linux 8)

    [2.0.15-17] - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser

  • High max 9.3
    ELSA-2025-0312 1 CVE

    Important: raptor2 security update (Oracle Linux 9)

    [2.0.15-32] - Bump NVR [2.0.15-31] - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser

  • High max 5.4
    ELSA-2025-0308 2 CVEs

    Important: fence-agents security update (Oracle Linux 9)

    [4.10.0-76.4] - bundled jinja2: fix CVE-2024-56201 and CVE-2024-56326 Resolves: RHEL-72070, RHEL-72063

  • High max 6.5
    ELSA-2025-0281 2 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [128.6.0-3.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.6.0] - Add OpenELA debranding [128.6.0-3] - Update to 128.6.0 build3 [128.6.0-1] - Update to 128.6.0 build1

  • Medium max 7.6
    ELSA-2025-0288 1 CVE

    Moderate: Bug fix of NetworkManager (Oracle Linux 8)

    [1:1.40.16-18.0.1] - disable MPTCP handling by default [Orabug: 35081472] - Fix ignore-carrier logic [Orabug: 34956744] - Disable regeneration of the documentation [Orabug: 34712048] - add connectivity check via Oracle servers [Orabug: 32051972] - Disable the…

  • High max 7.5
    ELSA-2025-20019 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.339.5] - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov) - vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393533] - vhost-scsi: protect vq->log_base with vq->mutex (Dong…