Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

  • High max 9.1
    ELSA-2024-0150 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.101-1.0.1] - Add support for Oracle Linux - Update to .NET SDK 8.0.101 and Runtime 8.0.1

  • High max 8.1
    ELSA-2024-0857 1 CVE

    Important: python-pillow security update (Oracle Linux 7)

    [2.0.0-25gitd1c6db8] - Security fix for CVE-2023-50447 Resolves: RHEL-22239

  • High max 7.5
    ELSA-2024-0848 2 CVEs

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.102-2.0.1] - Update to .NET SDK 8.0.102 and Runtime 8.0.2 - Add -dbg subpackages for symbol files - Resolves: RHEL-23070

  • High max 7.5
    ELSA-2024-0808 2 CVEs

    Important: dotnet6.0 security update (Oracle Linux 8)

    [6.0.127-1.0.1] - Update to .NET SDK 6.0.127 and Runtime 6.0.27

  • High max 7.5
    ELSA-2024-0806 2 CVEs

    Important: dotnet7.0 security update (Oracle Linux 8)

    [7.0.116-1.0.1] - Update to .NET SDK 7.0.116 and Runtime 7.0.16

  • High max 7.5
    ELSA-2024-0807 2 CVEs

    Important: dotnet6.0 security update (Oracle Linux 9)

    [6.0.127-1.0.1] - Update to .NET SDK 6.0.127 and Runtime 6.0.27

  • High max 7.5
    ELSA-2024-0805 2 CVEs

    Important: dotnet7.0 security update (Oracle Linux 9)

    [7.0.116-1.0.1] - Update to .NET SDK 7.0.116 and Runtime 7.0.16

  • High max 8.6
    ELSA-2024-0752 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah [1:1.31.3-3.0.1] - Rebuild with newer dependencies cockpit-podman conmon containernetworking-plugins [1:1.3.0-8.0.1] - Rebuild with newer dependencies containers-common [2:1-70.0.2] - Rebuild with newer dependencies container-selinux criu…

  • High max 8.6
    ELSA-2024-0748 2 CVEs

    Important: container-tools:4.0 security update (Oracle Linux 8)

    buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman [2:4.0.2-25.0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel …

  • High max 7.8
    ELSA-2024-12159 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-203.146.5.1] - Revert 'selftests/bpf: Test tail call counting with bpf2bpf and data on stack' (Samasth Norway Ananda) [Orabug: 36277693] - Revert 'tcp: fix excessive TLP and RACK timeouts from HZ rounding' (Sherry Yang) [Orabug: 36277684] [5.15.0-203.…

  • High max 5.6
    ELSA-2024-12150 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.533.3] - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski) - sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185208] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36…

  • High max 7.8
    ELSA-2024-12153 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.328.3.el7] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143228] - KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36154654] - sched/fair: Fix tg->load when offlining a CPU (Vincen…

  • High max 7.8
    ELSA-2024-12154 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.328.3.el8] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143228] - KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36154654] - sched/fair: Fix tg->load when offlining a CPU (Vincen…

  • High max 7.8
    ELSA-2024-12151 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.328.3] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143228] - KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36154654] - sched/fair: Fix tg->load when offlining a CPU (Vincent Gu…

  • High max 8.6
    ELSA-2024-17931 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.1.12-1] - Update runc to 1.1.12 [JIRA: OLDIS-30530] [1.1.10-1] - Update runc to 1.1.10 [JIRA: OLDIS-30530]

  • High max 8.6
    ELSA-2024-12148 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.1.12-1] - Update runc to 1.1.12 [JIRA: OLDIS-30530] [1.1.10-1] - Update runc to 1.1.10 [JIRA: OLDIS-30530]

  • High max 7.8
    ELSA-2024-12149 2 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-362.18.0.2] - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623} - dpll: core: Add DPLL framework base functions {CVE-2023-6679} - dpll: sp…

  • High max 7.8
    ELSA-2024-0675 4 CVEs

    Important: gimp security update (Oracle Linux 9)

    [2:2.99.8-4] - fix CVE-2023-44441 - fix CVE-2023-44442 - fix CVE-2023-44443 - fix CVE-2023-44444

  • High max 8.6
    ELSA-2024-0670 1 CVE

    Important: runc security update (Oracle Linux 9)

    [4:1.1.12-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.12 - Related: RHEL-2112 [4:1.1.11-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.11 - Related: RHEL-2112 [4:1.1.10-3] - Rebuild for CVEs: CVE-2023-39321…

  • High max 7.8
    ELSA-2024-12110 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.82.2] - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) [Orabug: 35959598] {CVE-2020-26555} - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello) [Orabug: 35181560] {CVE-2023-1077} - sched/debug: …

  • High max 9.8
    ELSA-2024-0629 4 CVEs

    Important: tigervnc security update (Oracle Linux 7)

    [1.8.0-31.0.1] - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch, xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch, xorg-CVE-2024-21886…

  • High max 8.8
    ELSA-2024-0609 9 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [115.7.0-1.0.1] - Update to 115.7.0 build1

  • High max 8.8
    ELSA-2024-0608 9 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.7.0.1.0.1] - Update to 115.7.0 build 1

  • High max 9.8
    ELSA-2024-0607 4 CVEs

    Important: tigervnc security update (Oracle Linux 8)

    [1.13.1-2.7] - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20388 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent Resolves: RHEL-20382 - Fix CVE-2024-0229…

  • High max 9.8
    ELSA-2024-0557 4 CVEs

    Important: tigervnc security update (Oracle Linux 9)

    [1.13.1-3.6] - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20389 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent Resolves: RHEL-20383 - Fix CVE-2024-0229…

  • High max 8.8
    ELSA-2024-0602 9 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.7.0-1.0.1] - Update to 115.7.0 build1

  • High max 8.8
    ELSA-2024-0600 9 CVEs

    Important: firefox security update (Oracle Linux 7)

    [115.7.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.7.0-1] - Update to 115.7.0 build1

  • High max 8.8
    ELSA-2024-0601 9 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [115.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.7.0-1] - Update to 115.7.0 build1 [115.6.0-1] - Update to 115.6.0 build2

  • High max 8.8
    ELSA-2024-0603 9 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.7.0.1.0.1] - Update to 115.7.0 build 1

  • High max 7.5
    ELSA-2024-0539 1 CVE

    Important: tomcat security update (Oracle Linux 8)

    [1:9.0.62-27.3] - tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

  • High max 8.8
    ELSA-2024-12094 13 CVEs

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-362.18.0.1_3.OL9] - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) {CVE-2022-3545} - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) {CVE-2022-41858} - can: af_can: fix NULL pointer dereference in can_rcv_filter (Olive…

  • High max 7.4
    ELSA-2024-0266 6 CVEs

    Important: java-11-openjdk security update (Oracle Linux 8)

    [1:11.0.22.0.7-2.0.1] - Update to openjdk-11.0.22+7

  • High max 7.4
    ELSA-2024-0265 6 CVEs

    Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 8)

    [1:1.8.0.402.b06-0.2.0.1] - Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Add Oracle vendor bug URL [Orabug: 34340155]

  • High max 9.8
    ELSA-2024-0320 6 CVEs

    Important: xorg-x11-server security update (Oracle Linux 7)

    [1.20.4-27] - Fix use after free related to CVE-2024-21886 [1.20.4-26] - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and CVE-2024-0409 Resolves: https://issues.redhat.com/browse/RHEL-21205 Resolves: https://issues.…

  • High max 7.5
    ELSA-2024-0267 6 CVEs

    Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

    [1:17.0.10.0.7-2.0.1] - Rebase to 17.0.10.0.7

  • High max 7.4
    ELSA-2024-0248 5 CVEs

    Important: java-21-openjdk security update (Oracle Linux 8)

    [1:21.0.2.0.13-1.0.1] - Add Oracle vendor bug URL [1:21.0.2.0.13-1] - Rebase to 21.0.2.0.13

  • High max 7.4
    ELSA-2024-0249 5 CVEs

    Important: java-21-openjdk security update (Oracle Linux 9)

    [1:21.0.2.0.13-1.0.1] - Add Oracle vendor bug URL [1:21.0.2.0.13-1] - Rebase to 21.0.2.0.13

  • High max 8.8
    ELSA-2024-0279 1 CVE

    Important: gstreamer-plugins-bad-free security update (Oracle Linux 7)

    [0.10.23-24] - Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix the build - Resolves: RHEL-16792

  • High max 5.9
    ELSA-2024-12078 1 CVE

    Important: python3.11-cryptography security update (Oracle Linux 8)

    [37.0.2-5.0.1] - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates [Orabug: 36143834]

  • High max 5.9
    ELSA-2024-12079 1 CVE

    Important: python-cryptography security update (Oracle Linux 8)

    [36.0.1-4.0.1] - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates [Orabug: 36119159] [36.0.1-4] - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves rhbz#2203840 [36.0.1-3] - Fix CVE-2023-23931: Don't allow update_i…