Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

  • High max 8.6
    ELSA-2024-1787 6 CVEs

    Important: squid security update (Oracle Linux 7)

    [7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

  • High max 8.0
    ELSA-2024-1751 1 CVE

    Important: unbound security update (Oracle Linux 8)

    [1.16.2-5.6] - Rebuilt again with z-stream target [1.16.2-5.5] - Correct typo in new config file [1.16.2-5.4] - Ensure group access correction reaches also updated configs (CVE-2024-1488) [1.16.2-5.3] - Ensure only unbound group can change configuration (CVE-…

  • High max 7.5
    ELSA-2024-1781 6 CVEs

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-0.16.2] - Prevent crashing at masterformat system test (CVE-2023-6516) [32:9.16.23-0.16.1] - Prevent increased CPU load on large DNS messages (CVE-2023-4408) - Prevent assertion failure when nxdomain-redirect is used with RFC 1918 reverse zones (C…

  • High max 7.5
    ELSA-2024-1782 3 CVEs

    Important: bind and dhcp security update (Oracle Linux 8)

    bind [32:9.11.36-11.1] - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers dhcp [4.3.6] - Change bu…

  • High max 7.5
    ELSA-2024-1786 1 CVE

    Important: httpd:2.4/mod_http2 security update (Oracle Linux 8)

    httpd mod_http2 [1.15.7-8.5] - Resolves: RHEL-29816 - httpd:2.4/mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) mod_md

  • High max 7.5
    ELSA-2024-1789 6 CVEs

    Important: bind security update (Oracle Linux 9)

    bind [32:9.16.23-14.4] - Rebuild with correct z-stream tag again [32:9.16.23-14.3] - Rebuild together with bind-dyndb-ldap to adjust ABI changes [32:9.16.23-14.2] - Import tests for large DNS messages fix - Add downstream change complementing CVE-2023-50387 […

  • High max 7.8
    ELSA-2024-1607 7 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-513.24.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  • High max 8.0
    ELSA-2024-1750 1 CVE

    Important: unbound security update (Oracle Linux 9)

    [1.16.2-3.5] - Rebuilt again with z-stream target [1.16.2-3.4] - Correct typo in new config file [1.16.2-3.3] - Ensure group access correction reaches also updated configs (CVE-2024-1488) [1.16.2-3.2] - Ensure only unbound group can change configuration (CVE-…

  • High max 7.5
    ELSA-2024-1690 1 CVE

    Important: varnish security update (Oracle Linux 8)

    varnish [6.0.13-1] - new version 6.0.13 - Resolves: RHEL-30378 - varnish:6/varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) varnish-modules

  • High max 7.5
    ELSA-2024-1691 1 CVE

    Important: varnish security update (Oracle Linux 9)

    [6.6.2-4.1] - Resolves: RHEL-30387 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) [6.6.2-4] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 - Resolves: RHEL-12817

  • High max 7.8
    ELSA-2024-12270 2 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.535.2.1] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36467681] {CVE-2024-1086} [4.14.35-2047.535.2] - Fix null ptr in rds_tcp_recv_path (Allison Henderson) [Orabug: 33499812] - LTS version: v4.14.338 …

  • High max 7.8
    ELSA-2024-12274 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.330.7.1.el7] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2…

  • High max 7.8
    ELSA-2024-12271 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.330.7.1] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2024-…

  • High max 7.8
    ELSA-2024-12275 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.330.7.1.el8] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2…

  • High max 7.9
    ELSA-2024-1687 7 CVEs

    Important: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.11.1-1] - Rebase to version 20.11.1 - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium) nodejs-nodemon nodejs-packaging

  • High max 7.9
    ELSA-2024-1688 7 CVEs

    Important: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.11.1-1] - Rebase to version 20.11.1 - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium) nodejs-nodemon nodejs-packaging

  • High max 4.7
    ELSA-2024-12272 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-205.149.5.1] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384802] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384802] {CVE-2024-2…

  • High max 7.8
    ELSA-2024-12266 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-513.18.1.0.1_9.OL8] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461932] {CVE-2024-1086} [4.18.0-513.18.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHC…

  • High max 7.5
    ELSA-2024-1644 1 CVE

    Important: grafana-pcp security and bug fix update (Oracle Linux 8)

    [5.1.1-2] - Rebuild with latest version of golang - resolves CVE-2024-1394

  • High max 7.5
    ELSA-2024-1646 1 CVE

    Important: grafana security and bug fix update (Oracle Linux 8)

    [9.2.10-8] - Rebuild with latest version of golang - resolves CVE-2024-1394

  • High max 7.8
    ELSA-2024-12265 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-362.24.1.0.1_3.OL9] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461940 ] {CVE-2024-1086} - [5.14.0-362.24.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linu…

  • High max 7.8
    ELSA-2024-12257 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.534.3.1] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251145] {CVE-2024-1086}

  • High max 7.8
    ELSA-2024-12259 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.329.3.2.el7] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}

  • High
    ELSA-2024-12263 1 CVE

    Important: olcne security update (Oracle Linux 8)

    [1.8.1-2] - Cleanup spec file [1.8.1-1] - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.1…

  • High
    ELSA-2024-12264 1 CVE

    Important: olcne security update (Oracle Linux 8)

    [1.8.1-2] - Cleanup spec file [1.8.1-1] - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.1…

  • High max 7.8
    ELSA-2024-12260 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.329.3.2.el8] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}

  • High
    ELSA-2024-12261 1 CVE

    Important: olcne security update (Oracle Linux 9)

    [1.8.1-2] - Cleanup spec file [1.8.1-1] - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.1…

  • High
    ELSA-2024-12262 1 CVE

    Important: olcne security update (Oracle Linux 9)

    [1.8.1-2] - Cleanup spec file [1.8.1-1] - Fix OLM upgrade failure - upgrade from 0.17.0 to 0.23.1 failed due to a couple of crds missing - Add hostpathRequiresPrivilged value to rook template cr to be passed to module operator - Fixed Istio-1.18 and Istio-1.1…

  • High max 7.8
    ELSA-2024-12258 3 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.84.2] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251327] {CVE-2024-1086} [4.1.12-124.84.1] - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga) [Orabug: 36334311] - ko…

  • High max 7.8
    ELSA-2024-12256 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.329.3.2] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}

  • High max 7.8
    ELSA-2024-12255 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-204.147.6.3] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36464807] {CVE-2024-1086}

  • High max 8.3
    ELSA-2024-1514 2 CVEs

    Important: libreoffice security fix update (Oracle Linux 8)

    [6.4.7.2-16.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-16] - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 ch…

  • High max 7.5
    ELSA-2024-1510 3 CVEs

    Important: nodejs:18 security update (Oracle Linux 8)

    nodejs [1:18.19.1-1] - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) nodejs-nodemon nodejs-packaging

  • High max 7.5
    ELSA-2024-1503 3 CVEs

    Important: nodejs:18 security update (Oracle Linux 9)

    nodejs [1:18.19.1-1] - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) nodejs-nodemon nodejs-packaging

  • High max 7.5
    ELSA-2024-1501 1 CVE

    Important: grafana security update (Oracle Linux 9)

    [9.2.10-8] - Rebuild with latest version of golang - resolve RHEL-24313

  • High max 7.5
    ELSA-2024-1502 1 CVE

    Important: grafana-pcp security update (Oracle Linux 9)

    [5.1.1-2] - Rebuild with latest version of golang - resolves CVE-CVE-2024-1394

  • High max 7.5
    ELSA-2024-1472 1 CVE

    Important: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.20.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.20.2-1] - Rebase to 1.20.2 - Resolves: rhbz#2186495 golang [1.20.12-3] - Fix CVE-2024-1394 - Resolves: RHEL-27928 [1.20.12-2] - Fix sources file - Related: RHEL-19231 go-too…

  • High max 7.5
    ELSA-2024-1444 2 CVEs 1 exploited

    Important: nodejs:16 security update (Oracle Linux 8)

    nodejs [1:16.20.2-4.0.1] - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks Resolves: CVE-2024-22019 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject…

  • High max 8.6
    ELSA-2024-1375 3 CVEs

    Important: squid:4 security update (Oracle Linux 8)

    libecap squid [7:4.15-7.10] - Resolves: RHEL-19551 - squid:4/squid: denial of service in HTTP request parsing (CVE-2023-50269) [7:4.15-7.9] - Resolves: RHEL-28611 - squid:4/squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) [7:4.15-7.6] - Reso…

  • High max 7.5
    ELSA-2024-1438 1 CVE

    Important: nodejs security update (Oracle Linux 9)

    [1:16.20.2-4.0.1] - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks Resolves: CVE-2024-22019