Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

High max 7.5

ELSA-2024-8038 4 CVEs

Important: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman pytho…

Oct 14, 2024
High max 9.8

ELSA-2024-12782 72 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.336.5.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37138988] [5.4.17-2136.336.5] - uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang) [Orabug: 37030127] - EDAC, i10nm: make skx_common.o a separa…

Oct 14, 2024
High max 9.8

ELSA-2024-8025 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

Oct 14, 2024
High max 7.5

ELSA-2024-8039 4 CVEs

Important: podman security update (Oracle Linux 9)

[4.9.4-13.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for comp…

Oct 14, 2024
High max 9.8

ELSA-2024-12779 58 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.541.4.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37137499] [4.14.35-2047.541.4] - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang) [Orabug: 37063821] - selftests: fix OOM i…

Oct 11, 2024
High max 9.8

ELSA-2024-7977 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 8)

[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.1-1] - Update to 128.3.1

Oct 11, 2024
High max 9.8

ELSA-2024-12780 72 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.336.5.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37138988] [5.4.17-2136.336.5] - uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang) [Orabug: 37030127] - EDAC, i10nm: make skx_common.o a separa…

Oct 11, 2024
High max 9.8

ELSA-2024-7958 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 9)

[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Oct 10, 2024
High max 7.5

ELSA-2024-7851 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 8)

[6.0.135-1.0.1] - Add support for Oracle Linux [6.0.135-1] - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60792

Oct 9, 2024
High max 8.1

ELSA-2024-7868 4 CVEs

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.110-1.0.1] - Add support for Oracle Linux [8.0.110-1] - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60794

Oct 9, 2024
High max 7.5

ELSA-2024-7867 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 9)

[6.0.135-1.0.1] - Add support for Oracle Linux [6.0.135-1] - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60798 [6.0.134-1] - Update to .NET SDK 6.0.134 and Runtime 6.0.34 - Resolves: RHEL-56683

Oct 9, 2024
High max 8.1

ELSA-2024-7869 4 CVEs

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.110-1.0.1] - Add support for Oracle Linux [8.0.110-1] - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60800 [8.0.109-1] - Update to .NET SDK 8.0.109 and Runtime 8.0.9 - Resolves: RHEL-56679

Oct 9, 2024
High max 8.8

ELSA-2024-6661 1 CVE

Important: python3-setuptools security update (Oracle Linux 7)

[39.2.0-10.0.3] - Back port fix for CVE-2024-6345 [Orabug: 37054771]

Oct 7, 2024
High max 9.8

ELSA-2024-7699 11 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.0] - Add OpenELA debranding [128.3.0-1] - Update to 127.3.0

Oct 7, 2024
High max 9.8

ELSA-2024-7700 11 CVEs

Important: firefox security update (Oracle Linux 8)

[128.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.0-1] - Update to 128.3.0

Oct 7, 2024
High

ELSA-2024-12713 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-300.163.18.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37132350]

Oct 4, 2024
High max 9.8

ELSA-2024-7552 11 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.0] - Add OpenELA debranding [128.3.0-1] - Update to 127.3.0

Oct 3, 2024
High max 9.8

ELSA-2024-7505 5 CVEs

Important: firefox security update (Oracle Linux 9)

[128.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Oct 2, 2024
High max 10.0

ELSA-2024-6417 1 CVE

Important: flatpak security update (Oracle Linux 7)

[1.0.9-13.0.1] - Fix CVE-2024-42472 [Orabug: 37027734]

Oct 1, 2024
High max 8.6

ELSA-2024-7463 3 CVEs

Important: cups-filters security update (Oracle Linux 8)

[1.20.0-35.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.20.0-35] - CVE-2024-47175 cups-filters: remote comma…

Oct 1, 2024
High

ELSA-2024-6994 1 CVE

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.5.el7.OL7] - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kees Cook) [Orabug: 37092983]

Sep 30, 2024
High max 8.6

ELSA-2024-7346 3 CVEs

Important: cups-filters security update (Oracle Linux 9)

[1.28.7-17.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.28.7-17] - fix rpmverify error [1.28.7-16] - CVE-202…

Sep 30, 2024
High max 9.0

ELSA-2024-4911 1 CVE

Important: freeradius security update (Oracle Linux 7)

[3.0.13-15.0.1] - Fixes CVE-2024-3596 security issue [Orabug: 36904288]

Sep 28, 2024
High max 8.8

ELSA-2024-12700 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.90.3] - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo) [Orabug: 37055439] [4.1.12-124.90.2] - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [Orabug: 36643241] {CVE-2024-35930} - …

Sep 27, 2024
High max 7.5

ELSA-2024-7262 2 CVEs

Important: osbuild-composer security update (Oracle Linux 8)

[101-2.0.1] - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905

Sep 27, 2024
High max 7.5

ELSA-2024-7204 1 CVE

Important: osbuild-composer security update (Oracle Linux 9)

[101-2.0.1] - Rebuild on new golang to address CVE-2024-34156

Sep 26, 2024
High max 9.8

ELSA-2024-5324 11 CVEs

Important: firefox security update (Oracle Linux 7)

[115.12.0-1.0.3] - Security fixes [Orabug: 36904311][Orabug: 36948200][CVE-2024-6601] [CVE-2024-6603][CVE-2024-6604][CVE-2024-7519][CVE-2024-7520][CVE-2024-7521] [CVE-2024-7522][CVE-2024-7524][CVE-2024-7525][CVE-2024-7526][CVE-2024-7527] [CVE-2024-7529]

Sep 25, 2024
High max 7.5

ELSA-2024-7135 1 CVE

Important: git-lfs security update (Oracle Linux 8)

[3.4.1-3] - Rebuild with new Golang - Resolves: RHEL-57900

Sep 25, 2024
High max 7.5

ELSA-2024-7136 1 CVE

Important: git-lfs security update (Oracle Linux 9)

[3.4.1-4] - Rebuild with new Golang - Resolves: RHEL-57920

Sep 25, 2024
High max 10.0

ELSA-2024-7000 145 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.22.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Sep 24, 2024
High max 9.8

ELSA-2024-6997 21 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-427.37.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Sep 24, 2024
High max 7.5

ELSA-2024-6908 4 CVEs

Important: go-toolset:ol8 security update (Oracle Linux 8)

delve [1.21.2-4.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.21.2-4] - Skip tests in %check due to incompatible Go version in buildroot (temporary). - Resolves: RHEL-59518 golang [1.21.13-2] - Rebuild Go with CVE Fixes - Remove fix-me…

Sep 23, 2024
High max 7.5

ELSA-2024-6946 1 CVE

Important: grafana-pcp security update (Oracle Linux 9)

[5.1.1-3] - Resolves RHEL-57930: CVE-2024-34156

Sep 23, 2024
High max 7.5

ELSA-2024-6947 1 CVE

Important: grafana security update (Oracle Linux 9)

[9.2.10-17] - Resolves RHEL-57925: CVE-2024-34156

Sep 23, 2024
High max 7.5

ELSA-2024-6913 4 CVEs

Important: golang security update (Oracle Linux 9)

[1.21.13-3] - Related: RHEL-58226 [1.21.13-2] - Rebuild Go with CVE Fixes - Remove fix-memleak-setupRSA.patch (exists upstream) - Resolves: RHEL-58226 - Resolves: RHEL-57962 - Resolves: RHEL-57848 - Resolves: RHEL-57865 [1.21.13-1] - Rebase to Go1.21.13 to pi…

Sep 23, 2024
High max 8.8

ELSA-2024-12682 22 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-300.163.18] - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu) [Orabug: 37044631] [5.15.0-300.163.17] - KVM/x86: Do not clear SIPI while in SMM (Boris Ostrovsky) [Orabug: 36955051] - Revert 'Fix userfaultfd_api to return EINVAL as exp…

Sep 23, 2024
High max 9.8

ELSA-2024-6684 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.2.0-1.0.2] - Fix prefs for new nss [Orabug: 37079820] [128.2.0-1.0.1] - Add Oracle prefs file [128.2.0] - Add OpenELA debranding [128.2.0-1] - Update to 128.2.0 [128.1.1-2] - Update to 128.1.1 [128.0-1] - Update to 128.0 final [128.0b4-1] - Update to 128…

Sep 20, 2024
High max 9.8

ELSA-2024-6682 8 CVEs

Important: firefox security update (Oracle Linux 8)

[128.2.0-1.0.2] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.2.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [128.2.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default prefe…

Sep 20, 2024
High max 9.8

ELSA-2024-6683 8 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.2.0-1.0.2] - Fix prefs for new nss [Orabug: 37079813] [128.2.0-1.0.1] - Add Oracle prefs [128.2.0] - Add OpenELA debranding [128.2.0-1] - Update to 128.2.0 [128.1.1-2] - Update to 128.1.1 [128.0-1] - Update to 128.0 final [128.0b4-1] - Update to 128.0b4

Sep 20, 2024
High max 9.8

ELSA-2024-6681 8 CVEs

Important: firefox security update (Oracle Linux 9)

[128.2.0-1.0.2] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] [128.2.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.2.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default prefe…

Sep 20, 2024