OpenJPEG2, Go, Libcgroup, Kernel updates for Oracle Linux

Published by

Oracle Linux has received significant security updates for multiple components, including OpenJPEG2, Go, Libcgroup, and the Unbreakable Enterprise Kernel. The updates address various vulnerabilities and improve system stability across different versions of Oracle Linux (8, 9, and 10).

Major Updates Include:

1. OpenJPEG2 Security Update (Oracle Linux 10):
- Advisory: ELSA-2025-13944
- Changes include a fix for an out-of-bounds heap memory write (CVE-2025-54874).
- Updated RPMs for x86_64 and aarch64 architectures are available through the Unbreakable Linux Network.

2. Go Security Update (Oracle Linux 10):
- Advisory: ELSA-2025-13941
- This update addresses vulnerabilities with CVE-2025-4674, enhancing security for Go applications.
- Similar to OpenJPEG2, updated RPMs for both architectures have been uploaded.

3. Libcgroup Bug Fix Update (Oracle Linux 10):
- Advisory: ELBA-2025-20531
- This update brings bug fixes and improvements to the libcgroup-original package.

4. Unbreakable Enterprise Kernel Security Update:
- Advisory: ELSA-2025-20530
- Important updates include multiple fixes for vulnerabilities across various CVEs affecting both Oracle Linux 9 and 10.
- The kernel updates contain numerous enhancements and fixes for memory management, scheduling, and I/O operations.

5. Kernel Security Update (Oracle Linux 8):
- Advisory: ELSA-2025-13960
- This update includes multiple critical fixes, addressing vulnerabilities (CVE-2025-22097, CVE-2025-37914, CVE-2025-38250, CVE-2025-38380) and ensuring improved performance and security.

Extended Implications:
The updates represent Oracle's ongoing commitment to security and reliability in its Linux distribution. It is crucial for users and administrators to apply these updates promptly to safeguard their systems against potential exploits. By addressing known vulnerabilities, these updates not only enhance the security posture of Oracle Linux but also improve functionality and performance across various applications.

Furthermore, the extensive list of CVEs addressed signifies the proactive approach taken by Oracle in maintaining the integrity of its software, which is vital for enterprises relying on Oracle Linux for critical operations. Regular updates and patch management should be a part of every organization's IT strategy to mitigate risks associated with software vulnerabilities.

Conclusion:
Oracle Linux users should ensure they are utilizing the latest versions of these packages and regularly monitor for any new advisories related to security updates. This practice is essential in maintaining a secure and efficient operating environment

OpenJPEG2, Go, Libcgroup, Kernel updates for Oracle Linux

Oracle Linux has received several security updates, including the latest version of openjpeg2, golang, libcgroup-original, unbreakable enterprise kernel:

ELSA-2025-13944 Important: Oracle Linux 10 openjpeg2 security update
ELSA-2025-13941 Important: Oracle Linux 10 golang security update
ELBA-2025-20531 Oracle Linux 10 libcgroup-original bug fix update
ELSA-2025-20530 Important: Unbreakable Enterprise kernel security update
ELSA-2025-20530 Important: Oracle Linux 9 Unbreakable Enterprise kernel security update
ELSA-2025-13960 Important: Oracle Linux 8 kernel security update

OpenJPEG2, Go, Libcgroup, Kernel updates for Oracle Linux @ Linux Compatible