Oracle Linux has released a series of security and bug fix updates for multiple components, including critical software packages like Firefox, Node.js, and Varnish. These updates address various vulnerabilities and enhance system performance.

The updates include:

1. Security Fixes: The updates contain important security patches for numerous software packages. For example, Firefox received an important update (ELSA-2025-4751) addressing several CVEs, including CVE-2025-2817 and CVE-2025-4083. Node.js also received a significant security update (ELSA-2025-8506) that fixes CVE-2025-23166.

2. Bug Fixes: Various components have been updated to improve functionality and resolve known issues:
- libwebp: Updated to fix a buffer overflow vulnerability (CVE-2023-4863).
- CUPS Filters: Corrected an issue with the banner page printing.
- Gnome Shell: Fixed a reference count issue in stylesheet tracking.
- Varnish: Addressed vulnerabilities related to request smuggling attacks (CVE-2025-47905).

3. Package Enhancements: The updates also include enhancements for packages like Samba, Squid, and Go-toolset, offering improved performance and additional features.

4. Kernel Updates: Several important kernel updates (ELSA-2025-8333) have been issued for Oracle Linux 9, addressing potential vulnerabilities, including CVE-2022-3424 and CVE-2025-21764.

5. Comprehensive List of Updates: The updates cover a wide range of components, which include but are not limited to:
- Node.js (versions 20 and 22)
- Gnome Shell
- HTTPD
- Samba
- Python (various versions including 3.12)

These updates emphasize Oracle's commitment to security and stability within its Linux distribution, ensuring that users benefit from the latest fixes and enhancements.

Extension

In addition to the updates mentioned, administrators are encouraged to regularly monitor for new advisories and apply patches promptly to maintain system integrity. It’s also advisable to test updates in a staging environment before deployment in production to avoid potential disruptions. Furthermore, users should consider implementing automated update systems to manage these patches efficiently.

As software vulnerabilities continue to evolve, maintaining an updated system is crucial for protecting sensitive data and ensuring compliance with security standards. Regular audits of installed packages and their versions can help identify any outdated components that may be susceptible to known vulnerabilities.

Oracle Linux users should also engage with the community and support forums for insights on best practices related to system updates, security configurations, and overall system health monitoring

Firefox, NodeJS, Varnish, and more updates for Oracle Linux

Oracle Linux has issued multiple security updates, which include bug fixes for various packages and improvements. The recent updates encompass bug fixes for various components, including libwebp, cups-filters, firefox, nodejs:22, go-toolset:ol8, perl-CPAN, ghostscript, git, krb5, rsync, varnish:6, mingw-freetype, spice-client-win, gnome-shell, 389-ds:1.4, httpd:2.4, gnome-shell-extensions, ibus, fence-agents, python3.12, qatzip, squid:4, libsemanage, samba, unzip, adaptivemm, nodejs:20, e2fsprogs, golang, nodejs:22, varnish, kernel security, adaptivemm, oVirt 4.5, snmp4j, python-six, and oVirt 4.5 ovirt-engine-dwh.

ELBA-2025-8423 Oracle Linux 8 libwebp bug fix update
ELBA-2025-8424 Oracle Linux 8 cups-filters bug fix update
ELSA-2025-4751 Important: Oracle Linux 7 firefox security update
ELSA-2025-8506 Important: Oracle Linux 8 nodejs:22 security update
ELSA-2025-8478 Moderate: Oracle Linux 8 go-toolset:ol8 security update
ELSA-2025-8432 Moderate: Oracle Linux 8 perl-CPAN security update
ELSA-2025-8421 Moderate: Oracle Linux 8 ghostscript security update
ELSA-2025-8419 Low: Oracle Linux 8 python36:3.6 security update
ELSA-2025-8414 Moderate: Oracle Linux 8 git security update
ELSA-2025-8411 Moderate: Oracle Linux 8 krb5 security update
ELSA-2025-8395 Low: Oracle Linux 8 rsync security update
ELSA-2025-8336 Important: Oracle Linux 8 varnish:6 security update
ELSA-2025-8292 Important: Oracle Linux 8 mingw-freetype and spice-client-win security update
ELBA-2025-8426 Oracle Linux 8 gnome-shell bug fix update
ELBA-2025-8425 Oracle Linux 8 389-ds:1.4 bug fix and enhancement update
ELBA-2025-8417 Oracle Linux 8 httpd:2.4 bug fix and enhancement update
ELBA-2025-8422 Oracle Linux 8 gnome-shell-extensions bug fix update
ELBA-2025-8420 Oracle Linux 8 ibus bug fix and enhancement update
ELBA-2025-8418 Oracle Linux 8 fence-agents bug fix and enhancement update
ELBA-2025-8416 Oracle Linux 8 python3.12 bug fix update
ELBA-2025-8415 Oracle Linux 8 qatzip bug fix update
ELBA-2025-8413 Oracle Linux 8 squid:4 bug fix and enhancement update
ELBA-2025-8410 Oracle Linux 8 sssd bug fix update
ELBA-2025-8408 Oracle Linux 8 nfs-utils bug fix update
ELBA-2025-8407 Oracle Linux 8 libsemanage bug fix update
ELBA-2025-8406 Oracle Linux 8 samba bug fix update
ELBA-2025-8405 Oracle Linux 8 unzip bug fix update
ELBA-2025-35200 Oracle Linux 8 adaptivemm bug fix update
ELSA-2025-8468 Important: Oracle Linux 9 nodejs:20 security update
ELBA-2025-8404 Oracle Linux 8 e2fsprogs bug fix update
ELSA-2025-8476 Moderate: Oracle Linux 9 golang security update
ELSA-2025-8467 Important: Oracle Linux 9 nodejs:22 security update
ELSA-2025-8337 Important: Oracle Linux 9 varnish security update
ELSA-2025-8333 Moderate: Oracle Linux 9 kernel security update
ELBA-2025-35200 Oracle Linux 8 adaptivemm bug fix update
ELBA-2025-35200 Oracle Linux 9 adaptivemm bug fix update
ELBA-2025-35200 Oracle Linux 8 adaptivemm bug fix update
ELBA-2025-20346 Oracle Linux 8 oVirt 4.5 snmp4j bug fix update
ELBA-2025-20334 Oracle Linux 8 oVirt 4.5 python-six bug fix update
ELBA-2025-20355 Oracle Linux 8 oVirt 4.5 ovirt-engine-dwh bug fix update

Firefox, NodeJS, Varnish, and more updates for Oracle Linux @ Linux Compatible