Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 7.5
    ELSA-2024-4502 1 CVE

    Important: skopeo security update (Oracle Linux 9)

    [2:1.14.3-3] - golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

  • High max 7.5
    ELSA-2024-4517 3 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.13.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.13.0-3] - Update to 115.13.0 build3 [115.13.0-2] - Update …

  • High max 7.5
    ELSA-2024-4500 3 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.13.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.13.0-3] - Update to 115.13.0 build3 [115.13.0-2] - Update …

  • High max 8.1
    ELSA-2024-4451 3 CVEs

    Important: dotnet8.0 security update (Oracle Linux 8)

    [8.0.107-1.0.1] - Add support for Oracle Linux [8.0.107-1] - Update to .NET SDK 8.0.107 and Runtime 8.0.7 - Resolves: RHEL-45322

  • High max 7.5
    ELSA-2024-4367 1 CVE

    Important: pki-core security update (Oracle Linux 8)

    jss ldapjdk pki-core [10.15.1-1.0.1] - Remove upstream reference [10.15.1-1] - Rebase to PKI 10.15.1 - Fix CVE 2023-4727 resteasy tomcatjss

  • High max 8.1
    ELSA-2024-4450 3 CVEs

    Important: dotnet8.0 security update (Oracle Linux 9)

    [8.0.107-1.0.1] - Add support for Oracle Linux [8.0.107-1] - Update to .NET SDK 8.0.107 and Runtime 8.0.7 - Resolves: RHEL-45324

  • High max 7.5
    ELSA-2024-4371 1 CVE

    Important: buildah security update (Oracle Linux 9)

    [1.33.7-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-3] - rebuild for CVE-2024-1394 - Resolves: RHEL-24307

  • High max 7.5
    ELSA-2024-4378 1 CVE

    Important: podman security update (Oracle Linux 9)

    [4.9.4-5.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for compr…

  • High max 7.5
    ELSA-2024-4379 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.7.3-4] - rebuild for CVE-2024-1394 - Resolves: RHEL-24315

  • High max 8.1
    ELSA-2024-4312 1 CVE

    Important: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2.1] - Update upstream references [Orabug: 36564626] [8.7p1-38.1] - Possible remote code execution due to a race condition (CVE-2024-6387) Resolves: RHEL-45347

  • High max 7.5
    ELSA-2024-4235 2 CVEs

    Important: 389-ds security update (Oracle Linux 8)

    [1.4.3.39-7] - Bump version to 1.4.3.39-7 - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z] [1.4.3.39-6] - Bump version to 1.4.3.39-6 - Resolves: RHEL-16277 - LDAP connections are closed …

  • High max 7.5
    ELSA-2024-4222 1 CVE

    Important: pki-core security update (Oracle Linux 7)

    [10.5.18-32] - ########################################################################## - # RHEL 7.9 (Async Security Update CY24Q2.4): - ########################################################################## - Updated nspr-devel and nss-devel build requ…

  • High max 8.6
    ELSA-2024-4256 2 CVEs

    Important: less security update (Oracle Linux 8)

    [530-3] - Fix CVE-2024-32487 - Resolves: RHEL-32738

  • High max 9.8
    ELSA-2024-4211 61 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    - [4.18.0-553.8.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

  • High max 7.8
    ELSA-2024-4278 1 CVE

    Important: qemu-kvm security update (Oracle Linux 9)

    [8.2.0-11.el9_4.4] - Fixing CVE-2024-4467 - Resolves: RHEL-35610

  • High max 8.1
    ELSA-2024-12468 1 CVE

    Important: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2] - Restore dropped earlier ifdef condition for safe _exit(1) call in sshsigdie() [Orabug: 36783468] Resolves CVE-2024-6387

  • High max 7.5
    ELSA-2024-4165 1 CVE

    Important: pki-core security update (Oracle Linux 9)

    [11.5.0-2.0.1] - Replaced upstream graphical references [Orabug: 33952704] [11.5.0-2] - RHEL-9916 CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability

  • High max 9.1
    ELSA-2024-4084 5 CVEs

    Important: git security update (Oracle Linux 8)

    [2.43.5-1] - Update to 2.43.5 - Related: RHEL-36399, RHEL-36411 [2.43.4-1] - Update to 2.43.4 - Resolves: RHEL-36399, RHEL-36411

  • High max 7.8
    ELSA-2024-4077 1 CVE

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.7-1.1] - Security fix for CVE-2023-6597 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33884

  • High max 9.1
    ELSA-2024-4083 5 CVEs

    Important: git security update (Oracle Linux 9)

    [2.43.5-1] - Update to 2.43.5 - Related: RHEL-36402, RHEL-36414 [2.43.4-1] - Update to 2.43.4 - Resolves: RHEL-36402, RHEL-36414

  • High max 7.8
    ELSA-2024-4078 2 CVEs

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.18-3.1] - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33887, RHEL-34287

  • High max 7.8
    ELSA-2024-4058 2 CVEs

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.9-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.9-1] - Rebase to 3.11.9 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix expat tests for the latest expat security release Resolves: RHEL-33672, RHEL-33684

  • High max 8.6
    ELSA-2024-4016 7 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [115.12.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.6
    ELSA-2024-4036 7 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [115.12.1-1.0.1] - Add Oracle prefs file [115.12.1] - Add OpenELA debranding [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.8
    ELSA-2024-4000 1 CVE

    Important: ghostscript security update (Oracle Linux 8)

    [9.27-13] - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

  • High max 8.8
    ELSA-2024-3999 1 CVE

    Important: ghostscript security update (Oracle Linux 9)

    [9.54.0-16] - RHEL-39110 fix regression discovered in OPVP device [9.54.0-15] - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

  • High max 8.6
    ELSA-2024-4002 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.12.1-1.0.1] - Add Oracle prefs [115.12.1] - Add OpenELA debranding [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3980 1 CVE

    Important: flatpak security update (Oracle Linux 7)

    [1.0.9-13] - Fix CVE-2024-32462

  • High max 8.6
    ELSA-2024-3951 7 CVEs

    Important: firefox security update (Oracle Linux 7)

    [115.12.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3961 1 CVE

    Important: flatpak security update (Oracle Linux 8)

    [1.12.9-1] - Update to 1.12.9 (CVE-2024-32462) [1.12.8-1] - Rebase to 1.12.8 (RHEL-4220) [1.10.8-3] - Let flatpak own %{_sysconfdir}/flatpak (RHEL-15822)

  • High max 8.6
    ELSA-2024-3954 7 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.12.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.6
    ELSA-2024-3955 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.12.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3959 1 CVE

    Important: flatpak security update (Oracle Linux 9)

    [1.12.9-1] - Update to 1.12.9 (CVE-2024-32462)

  • High max 8.3
    ELSA-2024-3835 2 CVEs

    Important: libreoffice security update (Oracle Linux 9)

    [7.1.8.1-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [7.1.8.1] - Remove Red Hat branding - Change vendor to RESF [1:7.1.8.1-12] - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-20…

  • High max 7.5
    ELSA-2024-3837 2 CVEs

    Important: 389-ds-base security update (Oracle Linux 9)

    [2.4.5-8] - Bump version to 2.4.5-8 - Fix License tag [2.4.5-7] - Bump version to 2.4.5-7 - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c - Resolves: RHEL-34825 - redhat-ds:11/389-ds-bas…

  • High max 5.6
    ELSA-2024-12433 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-207.156.6] - uek-container: Add advanced routing options (Boris Ostrovsky) [Orabug: 36691279] - slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655468] - slub: introduce count_partial_free_approx() (Jianfeng Wa…

  • High max 8.8
    ELSA-2024-3755 2 CVEs

    Important: idm:DL1 security update (Oracle Linux 8)

    bind-dyndb-ldap custodia ipa [4.9.13-10.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.13-10] - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183) Resolves: RHEL-29927 - kdb: fix vulnerability in GCD rules handling…

  • High max 8.1
    ELSA-2024-3760 1 CVE

    Important: ipa security update (Oracle Linux 7)

    [4.6.8-5.0.1.el7_9.17] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7_9.17] - Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

  • High max 7.5
    ELSA-2024-3741 3 CVEs

    Important: bind, bind-dyndb-ldap, and dhcp security update (Oracle Linux 7)

    bind [32:9.11.4-26.P2.16] - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use hea…

  • High max 8.8
    ELSA-2024-3754 2 CVEs

    Important: ipa security update (Oracle Linux 9)

    [4.11.0-15.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.11.0-15] - Resolves: RHEL-32231 CVE-2024-3183 ipa: freeipa: user can obtain a hash of the passwords of all doma…