Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 10.0

ELSA-2024-9449 1 CVE

Important: bubblewrap and flatpak security update (Oracle Linux 9)

bubblewrap [0.4.1-8] - Backport upstream fix to help address CVE-2024-42472 in flatpak flatpak [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backp…

Nov 18, 2024
High max 7.8

ELSA-2024-9555 1 CVE

Important: NetworkManager-libreswan security update (Oracle Linux 9)

[1.2.22-4] - Unbreak validation of unknown keys [1.2.22-2] - Fix improper escaping of Libreswan configuration (CVE-2024-9050)

Nov 18, 2024
High max 9.1

ELSA-2024-9548 1 CVE

Important: openexr security update (Oracle Linux 9)

[3.1.1-2.1] - fix CVE-2023-5481 (RHEL-64162)

Nov 18, 2024
High max 9.8

ELSA-2024-9552 11 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[128.4.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.4.0] - Add OpenELA debranding [128.4.0-1] - Update to 128.4.0 build1

Nov 18, 2024
High max 6.5

ELSA-2024-9553 5 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.46.3-1] - Update to 2.46.3 [2.46.2-1] - Update to 2.46.2 - Add patch to disable Evolution sandbox warning [2.46.1-2] - Add patch to keep GSocketMonitor callback alive Resolves: RHEL-59185 [2.46.1-1] - Update to 2.46.1 Resolves: RHEL-59185

Nov 18, 2024
High max 9.8

ELSA-2024-9554 11 CVEs 1 exploited

Important: firefox security update (Oracle Linux 9)

[128.4.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Nov 18, 2024
High max 7.5

ELSA-2024-9559 2 CVEs

Important: libsoup security update (Oracle Linux 9)

[2.72.0-8.el9_5.2] - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67068 [2.72.0-8.el9_5.1] - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends…

Nov 18, 2024
High max 7.5

ELSA-2024-9625 1 CVE

Important: squid security update (Oracle Linux 9)

[7:5.5-14.3] - Disable ESI support - Resolves: RHEL-65076 - CVE-2024-45802 squid: Denial of Service processing ESI response content [7:5.5-14.2] - Resolves: RHEL-64425 TCP_MISS_ABORTED/100 erros when uploading [7:5.5-14.1] - Resolves: RHEL-62332 - (Regression…

Nov 18, 2024
High max 9.8

ELSA-2024-9636 14 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.46.3-1] - Update to 2.46.3

Nov 16, 2024
High max 7.5

ELSA-2024-9644 2 CVEs

Important: squid security update (Oracle Linux 8)

libecap squid [7:4.15-10.3] - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to a Denial of Service attack against Cache Manager error responses [7:4.15-10.2] - Disable ESI support - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial…

Nov 15, 2024
High max 8.8

ELSA-2024-9144 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.44.3-2] - Add patch to fix WebAssembly Resolves: RHEL-32578 [2.44.3-1] - Update to 2.44.3 Resolves: RHEL-32578 [2.44.2-1] - Update to 2.44.2 Resolves: RHEL-32578 [2.44.1-1] - Update to 2.44.1 Resolves: RHEL-32578 Resolves: RHEL-29637 [2.42.5-1] - Update to…

Nov 14, 2024
High max 8.6

ELSA-2024-7553 4 CVEs

Important: cups-filters security update (Oracle Linux 7)

[1.0.35-29.0.3] - Unsupport cups-browsed service - CVE-2024-47076, CVE-2024-47175, CVE-2024-47176 [Orabug: 37217141]

Nov 13, 2024
High max 7.5

ELSA-2024-9573 2 CVEs

Important: libsoup security update (Oracle Linux 8)

[2.62.3-6] - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves…

Nov 13, 2024
High max 7.8

ELSA-2024-9540 1 CVE

Important: tigervnc security update (Oracle Linux 8)

[1.13.1-14] - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-61999

Nov 13, 2024
High max 9.8

ELSA-2024-12813 73 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.337.5] - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang) [Orabug: 37093177] [5.4.17-2136.337.4] - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna) [Orabug: 37199020] - Revert…

Nov 12, 2024
High max 9.8

ELSA-2024-12814 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.542.2] - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna) [Orabug: 37156524] - lib/math: move int_pow() from pwm_bl.c for wider use (Andy Shevchenko) [Orabug: 37156524] [4.14.35-2047.542.1] - genirq/cpuhotp…

Nov 11, 2024
High max 7.8

ELSA-2024-9051 3 CVEs

Important: podman security update (Oracle Linux 9)

[4.9.4-16.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for comp…

Nov 11, 2024
High max 9.8

ELSA-2024-12815 211 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-302.167.6] - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki) [Orabug: 36964088] {CVE-2024-42291} - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu) [Orabug: 36964437] {CVE-2024-43821} - power: reset: pwr-mlxbf: suppor…

Nov 11, 2024
High max 7.8

ELSA-2024-8357 1 CVE

Important: NetworkManager-libreswan security update (Oracle Linux 7)

[1.2.4-2.0.1] - Fix improper escaping of Libreswan configuration [CVE-2024-9050][Orabug: 37206712]

Nov 8, 2024
High max 9.8

ELSA-2024-8834 1 CVE

Important: python-gevent security update (Oracle Linux 8)

[1.2.2-5] - Avoid printing TypeError traceback - gevent.pywsgi: Much improved handling of chunk trailers Backport fix for CVE-2023-41419 Resolves: RHEL-17078

Nov 5, 2024
High max 9.0

ELSA-2024-8860 1 CVE

Important: krb5 security update (Oracle Linux 8)

[1.18.2-30.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-30] - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616

Nov 5, 2024
High max 7.8

ELSA-2024-8846 3 CVEs

Important: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common [1-82.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Ger…

Nov 5, 2024
High max 9.1

ELSA-2024-8800 1 CVE

Important: openexr security update (Oracle Linux 9)

[3.1.1-2.1] - fix CVE-2023-5481 (RHEL-64162)

Nov 4, 2024
High max 7.1

ELSA-2024-12806 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.91.3] - nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro) [Orabug: 37006239] [4.1.12-124.91.2] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37035560] [4.1.12-124.91.1] - vt_ioctl:…

Nov 1, 2024
High max 10.0

ELSA-2024-8678 2 CVEs

Important: grafana security update (Oracle Linux 9)

[9.2.10-19] - Resolves RHEL-62309: CVE-2024-47875 [9.2.10-18] - Resolves RHEL-61049: CVE-2024-9355

Oct 30, 2024
High max 7.8

ELSA-2024-8563 1 CVE

Important: buildah security update (Oracle Linux 9)

[1.33.10-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.10-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/bd85c17) - R…

Oct 29, 2024
High max 9.8

ELSA-2024-6838 8 CVEs

Important: firefox update (Oracle Linux 7)

[128.2.0-1.0.1] - Remove nomerge annotation from abort calls [Orabug: 37079143] - Update to 128.2.0 [Orabug: 37079143]

Oct 24, 2024
High max 9.8

ELSA-2024-7702 12 CVEs

Important: firefox security update (Oracle Linux 7)

[128.3.0-1.0.1] - Update to 128.3.0 [Orabug: 37139909]

Oct 24, 2024
High max 9.8

ELSA-2024-8034 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 7)

[128.3.1-2.0.1] - Update to 128.3.1 [Orabug: 37168934]

Oct 24, 2024
High max 7.8

ELSA-2024-8353 1 CVE

Important: NetworkManager-libreswan security update (Oracle Linux 8)

[1.2.10-7] - Unbreak validation of unknown keys [1.2.10-6] - Fix improper escaping of Libreswan configuration (CVE-2024-9050)

Oct 23, 2024
High max 10.0

ELSA-2024-8327 2 CVEs

Important: grafana security update (Oracle Linux 8)

[9.2.10-20] - Resolves RHEL-62307: CVE-2024-47875 [9.2.10-19] - Resolves RHEL-61779: CVE-2024-9355

Oct 22, 2024
High max 7.8

ELSA-2024-12796 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-301.163.5.2] - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37174198] {CVE-2024-47674} - Revert 'Documentation/admin-guide/acpi: Move information out of shell script comments' (Dave Kleikamp) [Orabug: 37144820]…

Oct 20, 2024
High max 8.8

ELSA-2024-6662 1 CVE

Important: python-setuptools security update (Oracle Linux 7)

[0.9.8-7.0.1] - Fixes CVE-2024-6345 security issue [Orabug: 37054994]

Oct 16, 2024
High max 9.8

ELSA-2024-7101 1 CVE

Important: httpd security update (Oracle Linux 7)

[2.4.6-99.0.5.1] - Differentiate trusted sources [Orabug: 37100272][CVE-2024-38476]

Oct 16, 2024
High max 9.8

ELSA-2024-8180 11 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.46.1-1] - Update to 2.46.1

Oct 16, 2024
High max 7.5

ELSA-2024-8110 1 CVE

Important: containernetworking-plugins security update (Oracle Linux 9)

[1:1.4.0-6] - rebuild for CVE-2024-34156 - Resolves: RHEL-57915

Oct 15, 2024
High max 7.5

ELSA-2024-8111 1 CVE

Important: skopeo security update (Oracle Linux 9)

[2:1.14.5-2] - rebuild for CVE-2024-34156 - Resolves: RHEL-57955

Oct 15, 2024
High max 7.5

ELSA-2024-8112 4 CVEs

Important: buildah security update (Oracle Linux 9)

[1.33.9-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.9-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/4dc26b9) - Res…

Oct 15, 2024
High max 7.5

ELSA-2024-5930 2 CVEs

Important: bind security update (Oracle Linux 7)

[32:9.11.4-26.0.1.P2.16] - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name

Oct 14, 2024
High max 9.8

ELSA-2024-8024 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

Oct 14, 2024