Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2024-10951 6 CVEs

Moderate: php:8.2 security update (Oracle Linux 8)

libzip php [8.2.25-1] - rebase to 8.2.25 RHEL-66166 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

Dec 11, 2024
Medium max 9.8

ELSA-2024-10943 9 CVEs

Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.32.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Dec 11, 2024
Medium max 9.8

ELSA-2024-10939 7 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-503.16.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Dec 11, 2024
Medium max 7.5

ELSA-2024-10949 6 CVEs

Moderate: php:8.2 security update (Oracle Linux 9)

php [8.2.25-1] - rebase to 8.2.25 RHEL-65837 php-pecl-apcu [5.1.23-1] - update to 5.1.23 for PHP 8.2 RHEL-14699 php-pecl-rrd php-pecl-xdebug3 [3.2.2-2] - drop inet_ntoa usage using upstream patch [3.2.2-1] - update to 3.2.2 for PHP 8.2 RHEL-14699 php-pecl-zip…

Dec 11, 2024
Medium max 7.0

ELSA-2024-10869 5 CVEs

Moderate: redis:7 security update (Oracle Linux 9)

[7.2.6-1] - rebase to 7.2.6 RHEL-26628 [7.0.12-1] - rebase to 7.0.12 #2221899 [7.0.11-1] - rebase to 7.0.11 for new redis:7 stream #2129826 [7.0.11-1] - Upstream 7.0.11 release. [7.0.10-2] - fix modules directory ownership and permissions #2176173 - drop redi…

Dec 6, 2024
Medium max 6.3

ELSA-2024-10779 2 CVEs

Moderate: python3:3.6.8 security update (Oracle Linux 8)

[3.6.8-69.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-69] - Security fix for CVE-2024-11168 Resolves: RHEL-67252 [3.6.8-68] - Security fix for CVE-2024-9287 Resolves: RHEL-64…

Dec 4, 2024
Medium max 4.8

ELSA-2024-8116 5 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.432.b06-1.0.1] - Update to shenandoah8u432-b06 [Orabug: 37185223] - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - Removed patches - 1001-orabug36904359-CVE-2024-21131-fix.patch - 1002-orabug36904359-CVE-2024-21138-fix.patch - 10…

Nov 28, 2024
Medium max 4.8

ELSA-2024-8120 5 CVEs

Moderate: java-11-openjdk security update (Oracle Linux 7)

[1:11.0.25.0.9-1.0.1] - Update to jdk-11.0.25+9 (GA) [Orabug: 37178930] - Fixes CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 - Removed patches - 1001-orabug36904359-CVE-2024-21138-fix.patch - 1002-orabug36904359-CVE-2024-21138-fix.patch - 1003-…

Nov 28, 2024
Medium max 6.5

ELSA-2024-10289 3 CVEs

Moderate: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns buildah [2:1.33.11-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/fe85f0d) - Resolves: RHEL-61853 [2:1.33.10-1] - update to the latest content of https://…

Nov 27, 2024
Medium max 9.8

ELSA-2024-10219 1 CVE

Moderate: perl-App-cpanminus:1.7044 security update (Oracle Linux 8)

perl-App-cpanminus [1.7044-6] - Patch the code to use https instead of http (CVE-2024-45321) perl-CPAN-DistnameInfo perl-CPAN-Meta-Check perl-File-pushd perl-Module-CPANfile perl-Parse-PMFile perl-String-ShellQuote perl-App-cpanminus [1.7044-6] - Patch the co…

Nov 27, 2024
Medium max 8.1

ELSA-2024-10281 4 CVEs

Moderate: kernel:4.18.0 security update (Oracle Linux 8)

- [4.18.0-553.30.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…

Nov 26, 2024
Medium max 7.8

ELSA-2024-10274 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

- [5.14.0-503.15.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

Nov 26, 2024
Medium max 9.8

ELSA-2024-10218 1 CVE

Moderate: perl-App-cpanminus security update (Oracle Linux 9)

[1.7044-14.1] - Patch the code to use https instead of http (CVE-2024-45321) - Resolves: RHEL-56519

Nov 25, 2024
Medium max 6.5

ELSA-2024-12842 4 CVEs

Moderate: edk2 security update (Oracle Linux 9)

* Mon Sep 09 2024 Aaron Young <aaron.young@oracle.com> - Create new 20240909 release for OL9 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT…

Nov 22, 2024
Medium max 4.4

ELSA-2024-9458 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 9)

[1.26.12-2.1] - Security fix for CVE-2024-37891 Resolves: RHEL-59990

Nov 20, 2024
Medium max 7.5

ELSA-2024-9468 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.19-8.1] - Security fix for CVE-2024-6232 Resolves: RHEL-57420

Nov 20, 2024
Medium max 4.4

ELSA-2024-9457 1 CVE

Moderate: python3.12-urllib3 security update (Oracle Linux 9)

[1.26.18-2.1] - Security fix for CVE-2024-37891 Resolves: RHEL-59997

Nov 20, 2024
Medium max 5.5

ELSA-2024-9452 2 CVEs

Moderate: pcp security update (Oracle Linux 9)

[6.2.2-7] - Fix buffer sizing checks in pmstore PDU handling (RHEL-57809) - Guard against symlink attacks in pmpost program (RHEL-57814) - Fix libpcp_web webgroup slow request refcounting (RHEL-58307) - Updated pmdahacluster for newer crm_mon versions (RHEL-5…

Nov 19, 2024
Medium max 8.1

ELSA-2024-9605 3 CVEs

Moderate: kernel security update (Oracle Linux 9)

- [5.14.0-503.14.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

Nov 19, 2024
Medium max 7.5

ELSA-2024-9451 1 CVE

Moderate: python3.12 security update (Oracle Linux 9)

[3.12.5-2.1] - Security fix for CVE-2024-6232 Resolves: RHEL-57415

Nov 18, 2024
Medium max 5.9

ELSA-2024-9541 1 CVE

Moderate: expat security update (Oracle Linux 9)

[2.5.0-3.1] - Fix CVE-2024-50602 - Resolves: RHEL-65064 [2.5.0-3] - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511

Nov 18, 2024
Medium max 5.9

ELSA-2024-9827 1 CVE

Moderate: libvpx security update (Oracle Linux 9)

[1.9.0-8] - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-58144

Nov 18, 2024
Medium max 7.5

ELSA-2024-9450 1 CVE

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.9-7.1] - Security fix for CVE-2024-6232 Resolves: RHEL-57410

Nov 18, 2024
Medium

ELSA-2024-12825 1 CVE

Moderate: giflib security update (Oracle Linux 7)

[4.1.6-9.0.1] - Fixes giflib CVE-2023-48161 issue [Orabug: 37178930]

Nov 14, 2024
Medium max 6.5

ELSA-2024-9088 4 CVEs

Moderate: edk2 security update (Oracle Linux 9)

[20240524-6.0.1] - Replace upstream references [Orabug:36569119] [20240524-6] - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974] - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336] - Resolves: RHEL-56974 (qemu-kvm: warning: …

Nov 14, 2024
Medium max 9.8

ELSA-2024-9092 12 CVEs

Moderate: freerdp security update (Oracle Linux 9)

[2:2.11.7-1] - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) [2:2.11.2-2] - CVE-2024-22211: Check codec resolut…

Nov 14, 2024
Medium max 7.8

ELSA-2024-9093 3 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

[23.2.7-1] - xwayland 23.2.7 - (RHEL-29912) [21.1.9-7] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 [21.1.9-6] New build to add xorg-x11-server-Xwayland-devel (RHEL-25083) [21.1.9-5] Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2…

Nov 14, 2024
Medium max 6.5

ELSA-2024-9114 1 CVE

Moderate: gnome-shell and gnome-shell-extensions security update (Oracle Linux 9)

gnome-shell [40.10-21] - Only open portal login in response to user action Resolves: RHEL-39098 [40.10-20] - Fix inhibit-shortcut permissions Resolves: #RHEL-2031 [40.10-19] - Use correct bus name for screencast service Related: RHEL-35775 gnome-shell-extensi…

Nov 14, 2024
Medium max 7.8

ELSA-2024-9122 3 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 9)

[1.20.11-26] - Fix regression caused by the fix for CVE-2024-31083 [1.20.11-25] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083 - Add util-linux as a dependency of Xvfb - Fix compilation error on i686

Nov 14, 2024
Medium max 6.2

ELSA-2024-9128 1 CVE

Moderate: libvirt security update (Oracle Linux 9)

[10.5.0-7.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.5.0-7] - qemu: Refactor default panic model (RHEL-56451) - qemu: Sometimes the default panic model doesn't exist (RHEL-56451) - qemu: Use pvpanic by default on aarch64 (RHEL-56451) […

Nov 14, 2024
Medium max 8.2

ELSA-2024-9136 3 CVEs

Moderate: qemu-kvm security update (Oracle Linux 9)

[9.0.0-10] - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617] - Resolves: RHEL-52617 (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5]) [9.0.0-9] - kvm-qemu-g…

Nov 14, 2024
Medium max 5.4

ELSA-2024-9150 1 CVE

Moderate: python-jinja2 security update (Oracle Linux 9)

[2.11.3-6] - Security fix for CVE-2024-34064 Resolves: RHEL-35653

Nov 14, 2024
Medium max 7.5

ELSA-2024-9158 3 CVEs

Moderate: lldpd security update (Oracle Linux 9)

[1.0.18-3] - Add lldpd-devel package [RHEL-22127] [1.0.18-2] - Remove networkd gating test [RHEL-25990]

Nov 14, 2024
Medium max 7.5

ELSA-2024-9167 1 CVE

Moderate: poppler security update (Oracle Linux 9)

[21.01.0-21] - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 [21.01.0-20] - Fix a crash during signing - Resolves: RHEL-31934

Nov 14, 2024
Medium max 7.5

ELSA-2024-9180 1 CVE

Moderate: mod_auth_openidc security update (Oracle Linux 9)

[2.4.10-1] Rebase to 2.4.10 version improves state cookies piling up problem Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache Resolves: RHEL-25422 mod_auth_openidc: DoS when using OIDCSessionType client-cookie and manipulating cookies (CVE-20…

Nov 14, 2024
Medium max 7.5

ELSA-2024-9181 2 CVEs

Moderate: jose security update (Oracle Linux 9)

[14-1] - Rebase jose-14 upstream version Resolves: #RHEL-38079

Nov 14, 2024
Medium max 7.0

ELSA-2024-9184 1 CVE

Moderate: gtk3 security update (Oracle Linux 9)

[3.24.31-5] - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 [3.24.31-4] - Actually reduce the height of window titlebars [3.24.31-3] - Reduce the height of window titlebars

Nov 14, 2024
Medium max 5.9

ELSA-2024-9185 2 CVEs

Moderate: iperf3 security update (Oracle Linux 9)

[3.9-13] - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used [3.9-12] - Resolves: RHEL-39975 - possible denial of service [3.9-11] - Related: #2223676 - bumping version for correct update path

Nov 14, 2024
Medium max 8.7

ELSA-2024-9190 3 CVEs

Moderate: python3.12 security update (Oracle Linux 9)

[3.12.5-2] - Security fix for CVE-2024-8088 Resolves: RHEL-55963 [3.12.5-1] - Update to 3.12.5 - Security fix for CVE-2024-6923 Resolves: RHEL-53041 [3.12.4-3] - Properly propagate the optimization flags to C extensions [3.12.4-2] - Build Python with -O3 - ht…

Nov 14, 2024
Medium max 8.7

ELSA-2024-9192 2 CVEs

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.9-7] - Security fix for CVE-2024-8088 Resolves: RHEL-55959 [3.11.9-6] - Security fix for CVE-2024-6923 Resolves: RHEL-53038 [3.11.9-5] - Properly propagate the optimization flags to C extensions [3.11.9-4] - Build Python with -O3 - https://fedoraproject…

Nov 14, 2024