Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,089 results · Clear filters · Feed

  • High max 8.6
    ELSA-2024-3669 1 CVE

    Important: less security update (Oracle Linux 7)

    [458-10] - Fix CVE-2024-32487 - Resolves: RHEL-32802

  • High max 7.5
    ELSA-2024-3666 2 CVEs

    Important: tomcat security and bug fix update (Oracle Linux 8)

    [1:9.0.87-1.el8_10.1] - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29255 tomcat: Apache Tomcat: WebSocket DoS with incomplete cl…

  • High max 8.1
    ELSA-2024-3588 5 CVEs

    Important: glibc security update (Oracle Linux 7)

    [2.17-326.3] - Forward-port Oracle patches to 2.17-326.3 Reviewed-by: Jose E. Marchesi [2.17-326.3] - nscd: Fix timeout type in netgroup cache (RHEL-34263) [2.17-326.2] - nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cach…

  • High max 7.5
    ELSA-2024-3591 2 CVEs

    Important: 389-ds-base security update (Oracle Linux 7)

    [1.3.11.1-5] - Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at…

  • High max 8.3
    ELSA-2024-12408 10 CVEs

    Important: edk2 security update (Oracle Linux 7)

    * Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com> - Create new 1.7.0 release for OL7 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022…

  • High max 8.3
    ELSA-2024-23120 10 CVEs

    Important: edk2 security update (Oracle Linux 9)

    * Tue Feb 27 2024 Aaron Young - Create new 20240227 release for OL9 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-3676…

  • High max 8.3
    ELSA-2024-12409 10 CVEs

    Important: edk2 security update (Oracle Linux 9)

    * Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com> - Create new 20240227 release for OL9 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2…

  • High max 7.8
    ELSA-2024-3466 3 CVEs

    Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

    mod_wsgi numpy python39 [3.9.19-1] - Update to 3.9.19 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33676, RHEL-33688 python3x-pip python3x-setuptools python3x-six python-cffi pytho…

  • High max 8.6
    ELSA-2024-3513 1 CVE

    Important: less security update (Oracle Linux 9)

    [590-4] - Fix CVE-2024-32487 - Resolves: RHEL-33773

  • High max 8.6
    ELSA-2024-3254 5 CVEs

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah [2:1.33.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/b95e962) - Resolves: RHEL-28224 cockpit-podman conmon containernetworking-plugins contain…

  • High max 7.8
    ELSA-2024-3343 3 CVEs

    Important: xorg-x11-server-Xwayland security update (Oracle Linux 8)

    [21.1.3-16] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083

  • High max 7.8
    ELSA-2024-3347 2 CVEs

    Important: python3 security update (Oracle Linux 8)

    [3.6.8-62.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-62] - Security fix for CVE-2024-0450 Resolves: RHEL-33683 [3.6.8-61] - Security fix for CVE-2023-6597 Resolves: RHEL-33671 [3.6.8-60] - Fix build with expat with fixed CVE…

  • High max 7.8
    ELSA-2024-3261 3 CVEs

    Important: tigervnc security update (Oracle Linux 8)

    [1.13.1-10] - Drop patches that are already part of xorg-x11-server Resolves: RHEL-30755 Resolves: RHEL-30767 Resolves: RHEL-30761 [1.13.1-9] - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves…

  • High max 6.3
    ELSA-2024-3340 2 CVEs

    Important: .NET 7.0 security update (Oracle Linux 8)

    [7.0.119-1.0.1] - Add support for Oracle Linux [7.0.119-1] - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35313 [7.0.118-2] - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31199

  • High max 7.5
    ELSA-2024-3271 3 CVEs

    Important: bind and dhcp security update (Oracle Linux 8)

    bind [32:9.11.36-14] - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers dhcp [4.3.6] - Change bug …

  • High max 8.8
    ELSA-2024-3264 1 CVE

    Important: pcp security update (Oracle Linux 8)

    [5.3.7-20.0.1] - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733] - Backporting of python tool pcp-meminfo [Orabug: 35759707] - Backporting of python tool pcp-slabinfo [Orabug: 35560940] - Backporting of python tool pcp-buddyinfo [Orabug: 35660932] …

  • High max 6.3
    ELSA-2024-3345 2 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.105-1.0.1] - Add support for Oracle Linux [8.0.105-1] - Update to .NET SDK 8.0.105 and Runtime 8.0.5 - Resolves: RHEL-35316

  • High max 7.3
    ELSA-2024-3269 1 CVE

    Important: glibc security update (Oracle Linux 8)

    [2.28-251.0.2.1] - Forward port of Oracle patches over 2.28-251.1 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

  • High max 7.5
    ELSA-2024-3346 4 CVEs

    Important: git-lfs security update (Oracle Linux 8)

    [3.4.1-2] - Rebuild with new Golang - Resolves: RHEL-32543, RHEL-28377, RHEL-28399, RHEL-28423 [3.4.1-1] - Update to version 3.4.1 - Resolves: RHEL-17102

  • High max 8.1
    ELSA-2024-3344 4 CVEs

    Important: glibc security update (Oracle Linux 8)

    [2.28-251.0.2.2] - Forward port of Oracle patches over 2.28-251.2 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1 - Forward port of Oracle patches over 2.28…

  • High max 7.5
    ELSA-2024-3265 2 CVEs

    Important: grafana security update (Oracle Linux 8)

    [9.2.10-16] - Check OrdID is correct before deleting snapshot - fix CVE-2024-1313 - fix CVE-2024-1394

  • High max 7.5
    ELSA-2024-3259 6 CVEs

    Important: go-toolset:ol8 security update (Oracle Linux 8)

    delve golang [1.21.9-1] - Fix CVE-2023-45288 - Resolves: RHEL-31915 go-toolset [1.21.9-1] - Fix CVE-2023-45288 - Resolves: RHEL-31915

  • High max 8.1
    ELSA-2024-3339 5 CVEs

    Important: glibc security update (Oracle Linux 9)

    [2.34-100.0.1.2] - Forward-port Oracle patches for ol9-u4 Reviewed by: Jose E. Marchesi

  • High max 8.2
    ELSA-2024-3178 2 CVEs

    Important: linux-firmware security update (Oracle Linux 8)

    [20240415-999.32.git5da74b16.el8] - Rebase to latest upstream [Orabug: 36482906]

  • High max 8.3
    ELSA-2024-3304 1 CVE

    Important: libreoffice security fix update (Oracle Linux 7)

    [1:5.3.6.1-26.0.1] - adjust color palette to match Redwood style. - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.3.6.1-26] - Fix CVE-2022-38745 Empty …

  • High
    ELSA-2024-3008 1 CVE

    Important: pmix security update (Oracle Linux 8)

    [2.2.5-3] - Add gating test - Resolves: RHEL-3692 [2.2.5-2] - Fix CVE-2023-41915 - Resolves: RHEL-3692

  • High max 8.3
    ELSA-2024-3017 8 CVEs

    Important: edk2 security update (Oracle Linux 8)

    [20220126gitbb1bba3d77-13] - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158] - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158] - Resolves: RHEL-21158 (CVE-2022-36765 edk2: integer overflow in CreateHob() could l…

  • High max 9.8
    ELSA-2024-2982 10 CVEs

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.42.5-1] - Update to 2.42.5 Resolves: RHEL-3961 [2.42.4-1] - Update to 2.42.4 Resolves: RHEL-3961 Resolves: RHEL-19365 [2.42.3-1] - Update to 2.42.3 Resolves: RHEL-3961 [2.42.2-1] - Update to 2.42.2 Resolves: RHEL-3961 [2.42.1-1] - Update to 2.42.1 Resolves…

  • High max 7.5
    ELSA-2024-3307 2 CVEs

    Important: tomcat security and bug fix update (Oracle Linux 9)

    [1:9.0.87-1.el9_4.1] - Resolves: RHEL-34815 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-31048 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-31032 tomcat: : Apache Tomcat: HTTP/2 header handling…

  • High max 8.2
    ELSA-2024-2910 5 CVEs

    Important: nodejs security update (Oracle Linux 9)

    [1:16.20.2-8.0.1] - Fix CVE-2024-28182, CVE-2024-22025, CVE-2024-25629, CVE-2024-27982, CVE-2024-27983

  • High max 8.8
    ELSA-2024-2913 6 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [115.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.11.0-1] - Update to 115.11.0 build2

  • High max 8.8
    ELSA-2024-2881 6 CVEs

    Important: firefox security update (Oracle Linux 7)

    [115.11.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.11.0-1] - Update to 115.11.0 build1

  • High max 8.2
    ELSA-2024-2853 5 CVEs

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.12.2-2] - Backport nghttp2 patch for CVE-2024-28182 [1:20.12.2-1] - Rebase to version 20.12.0 Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node) Fixes: CVE-2024-25629 (c-ares) nodejs-nodemon nodejs-packaging

  • High max 8.8
    ELSA-2024-2888 6 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.11.0-1.0.1] - Add Oracle prefs [115.11.0-1] - Update to 115.11.0 build2

  • High max 8.8
    ELSA-2024-2883 6 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.11.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.11.0-1] - Update to 115.11.0 build1

  • High max 4.7
    ELSA-2024-12385 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-206.153.7] - mmc: core: Initialize mmc_blk_ioc_data (Mikko Rapeli) - ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki) - mmc: core: Fix switch on gp3 partition (Dominique Martinet) - Drivers: hv: vmbus: Calculate ring buffer size fo…

  • High max 6.3
    ELSA-2024-2842 2 CVEs

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.105-1.0.1] - Add support for Oracle Linux [8.0.105-1] - Update to .NET SDK 8.0.105 and Runtime 8.0.5 - Resolves: RHEL-35317

  • High max 8.2
    ELSA-2024-2779 5 CVEs

    Important: nodejs:18 security update (Oracle Linux 9)

    nodejs [1:18.20.2-2] - Removes .ps1 files - Rebase to 18.20.2 - Fixes: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 nodejs-nodemon nodejs-packaging

  • High max 6.3
    ELSA-2024-2843 2 CVEs

    Important: .NET 7.0 security update (Oracle Linux 9)

    [7.0.119-1.0.1] - Add OracleLinux support

  • High max 7.8
    ELSA-2024-12378 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.536.5] - mmc: core: Fix switch on gp3 partition (Dominique Martinet) - Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu) - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin) - Revert 'x86/mm/ident_map…