Back Linuxsecurity

Oracle9 ELSA-2026

Linuxsecurity •LinuxSecurity Advisories • April 28, 2026

[3.9.25-3.0.1.el9_7.3] - Remove upstream URL reference [3.9.25-3.3] - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-168157, RHEL-167915 [3.9.25-3.2] - Security fix for CVE-2026-4519 Resolves: RHEL-158052 [3.9.25-3.1] - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143108 RHEL-143169 RHEL-144893

python-unversioned-command-3.9.25-3.0.1.el9_7.3.noarch.rpm python3-3.9.25-3.0.1.el9_7.3.i686.rpm python3-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-debug-3.9.25-3.0.1.el9_7.3.i686.rpm python3-debug-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-devel-3.9.25-3.0.1.el9_7.3.i686.rpm python3-devel-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-idle-3.9.25-3.0.1.el9_7.3.i686.rpm python3-idle-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-libs-3.9.25-3.0.1.el9_7.3.i686.rpm python3-libs-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-test-3.9.25-3.0.1.el9_7.3.i686.rpm python3-test-3.9.25-3.0.1.el9_7.3.x86_64.rpm python3-tkinter-3.9.25-3.0.1.el9_7.3.i686.rpm python3-tkinter-3.9.25-3.0.1.el9_7.3.x86_64.rpm

python-unversioned-command-3.9.25-3.0.1.el9_7.3.noarch.rpm python3-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-debug-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-devel-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-idle-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-libs-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-test-3.9.25-3.0.1.el9_7.3.aarch64.rpm python3-tkinter-3.9.25-3.0.1.el9_7.3.aarch64.rpm

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in Recent Oracle9 Security Updates Oracle9 has released security updates addressing several vulnerabilities, including CVE-2026-4786 and CVE-2026-6100, which were published on April 13, 2026. The updates also include fixes for CVE-2026-4519, published on March 20, 2026, and CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, and CVE-2026-1299, which were published earlier in 2026. Additionally, a backport fix for CVE-2026-41651 was released on April 22, 2026, with a proof of concept made public shortly after on April 24, 2026. The vulnerabilities affect various components of Oracle9, including Python packages and PackageKit, which are used in Red Hat Enterprise Linux environments. Organizations using Oracle9 should prioritize applying these updates to mitigate potential exploitation. The scope of impact includes both individual users and enterprise systems relying on these packages. Current status indicates that patches are available, but the urgency remains high due to the recent PoC release for CVE-2026-41651. 2 sources 71

Extracted Entities

CVEs (7)

CVE-2025-15366 CVE-2025-15367 CVE-2026-0865 CVE-2026-1299 CVE-2026-4519 CVE-2026-4786 CVE-2026-6100