Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 9.8

ELSA-2025-31356 1 CVE

Moderate: terraform-provider-oci-fips security update (Oracle Linux 8)

[6.25.0-2.el9] - Rebuild on golang-boringcrypto 1.22.11 to fix CVE-2024-24790 (Alex Burmashev) {CVE-2024-24790}

Feb 12, 2025
Medium max 6.9

ELSA-2025-1215 1 CVE 1 exploited

Moderate: tbb security update (Oracle Linux 8)

[2018.2-10.1] - Remove jQuery from Doxygen files (RHEL-77669) [2018.2-10] - Apply patches from (BZ #1907561) - Bump release

Feb 10, 2025
Medium max 6.9

ELSA-2025-1210 1 CVE 1 exploited

Moderate: tbb security update (Oracle Linux 9)

[2020.3-8.1] - Remove jQuery from Doxygen output (RHEL-77693)

Feb 10, 2025
Medium max 7.3

ELSA-2025-1068 2 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.37.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Feb 6, 2025
Medium max 4.9

ELSA-2025-0912 1 CVE

Moderate: mariadb:10.11 security update (Oracle Linux 9)

galera [26.4.20-1.0.1] - Drop nmap-ncat requirement. [Orabug: 34116228] - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. [Orabug: 34116228] [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] …

Feb 5, 2025
Medium max 4.9

ELSA-2025-0914 2 CVEs

Moderate: galera and mariadb security update (Oracle Linux 9)

galera [26.4.20-1.0.1] - Drop nmap-ncat requirement. [Orabug: 34116228] - Requirement to delete lp1184034 test case without using patches. [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] - Rebase to 26.4.18 mariadb [3:10.5.27-1] - …

Feb 5, 2025
Medium max 9.8

ELSA-2025-0925 1 CVE

Moderate: bzip2 security update (Oracle Linux 9)

[1.0.8-10] - Revert the previous commit (introduced a regression) Resolves: CVE-2019-12900 [1.0.8-9] - Fix out of bounds access in BZ2_decompress Resolves: RHEL-65198

Feb 3, 2025
Medium max 9.8

ELSA-2025-0917 1 CVE

Moderate: keepalived security update (Oracle Linux 9)

[2.2.8-3] - Validate vrrp ipset names for CVE-2024-41184 Resolves: RHEL-49557

Feb 3, 2025
Medium max 9.8

ELSA-2025-0733 1 CVE

Moderate: bzip2 security update (Oracle Linux 8)

[1.0.6-28] - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140

Jan 29, 2025
Medium max 4.9

ELSA-2025-0739 2 CVEs

Moderate: mariadb:10.5 security update (Oracle Linux 8)

galera Judy mariadb [3:10.5.27-1] - Rebase to 10.5.27 [3:10.5.26-1] - Rebase to 10.5.26 [3:10.5.25-1] - Rebase to 10.5.25

Jan 29, 2025
Medium max 9.8

ELSA-2025-0743 1 CVE

Moderate: keepalived security update (Oracle Linux 8)

[2.1.5-10] - CVE-2024-41184 Resolves: RHEL-49561

Jan 28, 2025
Medium max 4.9

ELSA-2025-0737 1 CVE

Moderate: mariadb:10.11 security update (Oracle Linux 8)

galera [26.4.20-1] - Rebase to 26.4.20 [26.4.19-1] - Rebase to 26.4.19 [26.4.18-1] - Rebase to 26.4.18 Judy mariadb [3:10.11.10-1] - Rebase to 10.11.10 [3:10.11.9-1] - Rebase to 10.11.9

Jan 28, 2025
Medium max 4.8

ELSA-2025-0422 1 CVE

Moderate: java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 (Oracle Linux 8)

[1:17.0.14.0.7-3.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.14.0.7-3] - Set rpmrelease to 3 - Revert 'Require tzdata-java 2024b at runtime and for build' [1:17.0.14.0.7-2] - Do not pass nil to _jvmdir macro in cjc logic - Related: RHEL-73867 …

Jan 23, 2025
Medium max 4.8

ELSA-2025-0426 1 CVE

Moderate: java-21-openjdk security update for RHEL 8.10, 9.4 and 9.5 (Oracle Linux 8)

[1:21.0.6.0.7-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.6.0.7-1] - Update to jdk-21.0.6+7 (GA) - Update release notes to 21.0.6+7 - Sync the copy of the portable & devkit specfiles with the latest update - Include the latest devkit patches…

Jan 23, 2025
Medium max 9.8

ELSA-2025-0578 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

- [5.14.0-503.22.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

Jan 22, 2025
Medium max 7.6

ELSA-2025-0377 1 CVE

Moderate: Security and bug fixes for NetworkManager (Oracle Linux 9)

[1.48.10-5.0.1] - disable MPTCP handling by default [Orabug: 34801142] - add connectivity check via Oracle servers [Orabug: 32051972] [1:1.48.10-5] - vpn: Support routing rules in vpn conenctions (RHEL-73167) - vpn: Place gateway route to table defined in ipv…

Jan 16, 2025
Medium max 5.5

ELSA-2025-0334 1 CVE

Moderate: ipa security update (Oracle Linux 9)

[4.12.2-1.0.1.3] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.12.2-1.3] - Resolves: RHEL-69928 add support for python cryptography 44.0.0 - Resolves: RHEL-70258 Upgrade to …

Jan 15, 2025
Medium max 7.6

ELSA-2025-0288 1 CVE

Moderate: Bug fix of NetworkManager (Oracle Linux 8)

[1:1.40.16-18.0.1] - disable MPTCP handling by default [Orabug: 35081472] - Fix ignore-carrier logic [Orabug: 34956744] - Disable regeneration of the documentation [Orabug: 34712048] - add connectivity check via Oracle servers [Orabug: 32051972] - Disable the…

Jan 13, 2025
Medium max 9.8

ELSA-2024-11486 17 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-503.19.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Jan 6, 2025
Medium max 5.6

ELSA-2025-0012 1 CVE

Moderate: python-requests security update (Oracle Linux 8)

[2.20.0-5] - Security fix for CVE-2024-35195 Resolves: RHEL-37605 [2.20.0-4] - Bump release to fix upgrade path from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8 Related: rhbz#2209469 [2.20.0-3] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 …

Jan 2, 2025
Medium max 5.9

ELSA-2024-11219 1 CVE

Moderate: edk2:20240524 security update (Oracle Linux 9)

[20240524-6.0.1.el9_5.3] - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH…

Dec 19, 2024
Medium max 5.3

ELSA-2024-11232 1 CVE

Moderate: unbound:1.16.2 security update (Oracle Linux 9)

[1.16.2-8.1] - Fix unbounded name compression could lead to Denial of Service (CVE-2024-8508) [1.16.2-8] - Ensure group access correction reaches also updated configs (CVE-2024-1488) [1.16.2-7] - Ensure only unbound group can change configuration (CVE-2024-14…

Dec 19, 2024
Medium max 4.2

ELSA-2024-11238 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 9)

[1.26.12-2.2] - Security fix for CVE-2023-45803 Resolves: RHEL-66551

Dec 19, 2024
Medium max 6.7

ELSA-2024-11242 1 CVE

Moderate: mpg123:1.32.9 security update (Oracle Linux 9)

[1.32.9-1] - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 [1.26.2-6] - Add patch for CVE-2024-10573 Resolves: RHEL-65445

Dec 19, 2024
Medium max 7.5

ELSA-2024-11216 1 CVE

Moderate: containernetworking-plugins security update (Oracle Linux 9)

[1:1.5.1-3] - rebuild to fix CVE-2024-34156

Dec 19, 2024
Medium max 5.3

ELSA-2024-11237 1 CVE

Moderate: libsndfile:1.0.31 security update (Oracle Linux 9)

[1.0.31-8.2] - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)

Dec 19, 2024
Medium max 4.7

ELSA-2024-11250 1 CVE

Moderate: pam security update (Oracle Linux 9)

[1.5.1-21.0.1] - pam_access: clean up the remote host matching code [Orabug: 36771903] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-21] - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-100…

Dec 19, 2024
Medium

ELSA-2024-11154 1 CVE

Moderate: bluez security update (Oracle Linux 8)

[5.63-3] + bluez-5.63-3 - Add back the tests for OSCI. [5.63-2] + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229

Dec 17, 2024
Medium max 5.9

ELSA-2024-11185 1 CVE

Moderate: edk2:20220126gitbb1bba3d77 security update (Oracle Linux 8)

[20220126gitbb1bba3d77-13.el8.4] - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830] - Resolves: RHEL-60830 (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])

Dec 17, 2024
Medium max 4.2

ELSA-2024-11189 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 8)

[1.26.12-5] - Security fix for CVE-2023-45803 Resolves: RHEL-66562

Dec 17, 2024
Medium max 5.3

ELSA-2024-11192 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

[1.0.28-16] - fix prerequisit patch (#RHEL-65093) [1.0.28-15] - fix crash in ogg vorbis (#RHEL-65093) (CVE-2024-50612)

Dec 17, 2024
Medium max 5.5

ELSA-2024-11161 1 CVE

Moderate: tuned security update (Oracle Linux 8)

[2.22.1-5.0.1] - Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315] - Fix error in uninstalling tuned [Orabug: 351528377] - Updated patch with the more recent version [Orabug: 30730976] - Set AMD CPU freq governor to ondemand whe…

Dec 17, 2024
Medium max 6.7

ELSA-2024-11193 1 CVE

Moderate: mpg123 security update (Oracle Linux 8)

[1.25.10-2] - Rebase to 1.32.9, includes patch for CVE-2024-10573 - Resolves: RHEL-65443

Dec 17, 2024
Medium max 5.5

ELSA-2024-10381 1 CVE

Moderate: tuned security update (Oracle Linux 7)

[2.11.0-12.0.3] - CVE-2024-52337 fixes [Orabug: 37327384]

Dec 16, 2024
Medium max 5.3

ELSA-2024-11111 1 CVE

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.9-7.2] - Security fix for CVE-2024-9287 Resolves: RHEL-64882

Dec 16, 2024
Medium max 5.4

ELSA-2024-10987 1 CVE

Moderate: pcs security update (Oracle Linux 8)

[0.10.18-2.0.1.el8_10.3] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.3] - Prevented any future HTTP header-based attacks on puma/sinatra by removing any headers not recognized by pcsd Resolves: RHEL-65595

Dec 13, 2024
Medium max 9.4

ELSA-2024-10952 11 CVEs

Moderate: php:7.4 security update (Oracle Linux 8)

libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php [7.4.33-2] - fix low/moderate CVEs RHEL-66589 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CV…

Dec 12, 2024
Medium max 5.3

ELSA-2024-10979 1 CVE

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.11-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.11-1] - Update to 3.11.11 Resolves: RHEL-64879

Dec 12, 2024
Medium max 7.5

ELSA-2024-10950 6 CVEs

Moderate: php:8.1 security update (Oracle Linux 9)

php [8.1.30-1] - rebase to 8.1.30 RHEL-64144 php-pecl-apcu [5.1.21-1] - update to 5.1.21 for PHP 8.1 #2070040 php-pecl-rrd php-pecl-xdebug3 [3.1.4-1] - update to 3.1.4 for PHP 8.1 #2070040 php-pecl-zip [1.20.1-1] - update to 1.20.1 for PHP 8.1 #2070040

Dec 12, 2024
Medium max 6.3

ELSA-2024-10983 2 CVEs

Moderate: python3.9:3.9.21 security update (Oracle Linux 9)

[3.9.21-1] - Update to 3.9.21 - Security fix for CVE-2024-11168 and CVE-2024-9287 Resolves: RHEL-64888 Resolves: RHEL-67259

Dec 12, 2024