Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 6.3
    ELSA-2024-9193 1 CVE

    Moderate: python3.12-PyMySQL security update (Oracle Linux 9)

    [1.1.0-3] - Security fix for CVE-2024-36039 Resolves: RHEL-38371 [1.1.0-2] - Rebuilt for timestamp .pyc invalidation mode [1.1.0-4] - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> D…

  • Medium max 6.3
    ELSA-2024-9194 1 CVE

    Moderate: python3.11-PyMySQL security update (Oracle Linux 9)

    [1.0.2-2] - Security fix for CVE-2024-36039 Resolves: RHEL-38370

  • Medium max 6.5
    ELSA-2024-9195 1 CVE

    Moderate: cyrus-imapd security update (Oracle Linux 9)

    [3.4.8-1] - Update to 3.4.8, fixing CVE-2024-34055

  • Medium max 5.9
    ELSA-2024-9200 1 CVE

    Moderate: runc security update (Oracle Linux 9)

    [4:1.1.13-4] - rebuild against new golang - Resolves: RHEL-46380 [4:1.1.13-3] - rebuild against golang-1.22.4 - Resolves: RHEL-46380 [4:1.1.13-2] - rebuild - Resolves: RHEL-46380 [4:1.1.13-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.…

  • Medium
    ELSA-2024-9243 1 CVE

    Moderate: postfix security update (Oracle Linux 9)

    [2:3.5.25-1] - New version Resolves: RHEL-20023 - Dropped upstreamed patches

  • Medium max 5.9
    ELSA-2024-9277 1 CVE

    Moderate: oci-seccomp-bpf-hook security update (Oracle Linux 9)

    [1.2.10-2] - rebuild - Resolves: RHEL-35939

  • Medium max 5.3
    ELSA-2024-9281 1 CVE

    Moderate: python-jwcrypto security update (Oracle Linux 9)

    [1.5.6-2] - Disable auto-generation of dependencies Related: RHEL-34809 [1.5.6-1] - Rebase to version 1.5.6 Resolve: RHEL-34809

  • Medium max 7.1
    ELSA-2024-9302 3 CVEs

    Moderate: emacs security update (Oracle Linux 9)

    [1:27.2-10] - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbr…

  • Medium max 7.3
    ELSA-2024-9306 2 CVEs

    Moderate: httpd security update (Oracle Linux 9)

    [2.4.62-1.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.62-1] - new version 2.4.62 - Resolves: RHEL-52724 - Regression introduced by CVE-2024-38474 fix [2.4.59-7] - Resolves: RHEL-49856: htcacheclean.service missing [Install] sect…

  • Medium max 7.5
    ELSA-2024-9331 3 CVEs

    Moderate: krb5 security update (Oracle Linux 9)

    [1.21.1-3.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-3] - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45402 RHEL-45392

  • Medium max 8.7
    ELSA-2024-9371 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.19-8] - Security fix for CVE-2024-8088 Resolves: RHEL-55967 [3.9.19-7] - Security fix for CVE-2024-6923 Resolves: RHEL-53045 [3.9.19-6] - Ensure 3rd party extension modules for the debug build use the -O0 flag [3.9.19-5] - Properly propagate the optimiza…

  • Medium max 6.5
    ELSA-2024-9401 7 CVEs

    Moderate: microcode_ctl security update (Oracle Linux 9)

    [20240910-1.0.1] - switch upstream to 9 Stream sources for simplicity - don't bother calling dracut if virtualized [Orabug: 35710094] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - r…

  • Medium max 5.9
    ELSA-2024-9404 1 CVE

    Moderate: libgcrypt security update (Oracle Linux 9)

    [1.10.0-11] - Fix CVE-2024-2236 (RHEL-34579)

  • Medium max 7.1
    ELSA-2024-9413 10 CVEs

    Moderate: bluez security update (Oracle Linux 9)

    [5.72-2] - Bump release to rebuild for RHEL-9.5 [5.72-1] - Update to 5.72

  • Medium max 7.0
    ELSA-2024-9423 1 CVE

    Moderate: python-dns security update (Oracle Linux 9)

    [2.6.1-3] - Ensure dns.rdtypes subpackages are available Related: RHEL-32663 [2.6.1-2] - Add missing files due to build change from hatchling to setuptools Related: RHEL-32663 [2.6.1-1] - Rebase to 2.6.1 Resolves: RHEL-32628, RHEL-32663

  • Medium max 6.5
    ELSA-2024-9439 2 CVEs

    Moderate: fontforge security update (Oracle Linux 9)

    [20201107-6] - Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws

  • Medium max 5.2
    ELSA-2024-9442 1 CVE

    Moderate: mingw-glib2 security update (Oracle Linux 9)

    [2.78.6-1] - Bump glib2 version 2.78.6 - Fix CVEs: CVE-2024-34397 - Resolves: RHEL-35776

  • Medium max 8.3
    ELSA-2024-9098 4 CVEs

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.16.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.16.1 - Related: RHEL-27608 [2:1.16.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.16.0 - Resolves: RHEL-47197 RHEL-44886 RHEL-40812 [2:1.15.2-1] - update to h…

  • Medium max 8.3
    ELSA-2024-9102 4 CVEs

    Moderate: podman security update (Oracle Linux 9)

    [5.2.2-1.0.2] - Bump epoch to ensure upgrade path [Orabug: 37240207] [5.2.2-1.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test…

  • Medium max 9.8
    ELSA-2024-9115 5 CVEs

    Moderate: grafana security update (Oracle Linux 9)

    [10.2.6-4] - Resolves RHEL-44874 [10.2.6-3] - Resolves RHEL-35937 [10.2.6-2] - Fixes patch 1002 for update to golang-fips - Remove unused code under apsl-1.1 and apsl-1.2 licenses - Resolves RHEL-33655 [10.2.6-1] - Rebase to grafana 10.2.6 [9.2.10-15] - Resol…

  • Medium max 8.3
    ELSA-2024-9097 2 CVEs

    Moderate: buildah security update (Oracle Linux 9)

    [1.37.2-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.37.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.37.2 - Related: RHEL-27608 [2:1.37.1-1] - update to https://github.com/containers/bu…

  • Medium max 7.5
    ELSA-2024-9089 2 CVEs

    Moderate: containernetworking-plugins security update (Oracle Linux 9)

    [1:1.5.1-2] - rebuild for CVE-2024-24791 - Resolves: RHEL-47166 [1:1.5.1-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1 - Related: RHEL-27608 [1:1.5.0-1] - update to https://github.com/containernetworking/plugins/releases/ta…

  • Medium max 10.0
    ELSA-2024-9315 478 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-503.11.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 5.9
    ELSA-2024-9502 1 CVE

    Moderate: expat security update (Oracle Linux 8)

    [2.2.5-16.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-16] - Fix CVE-2024-50602 - Resolves: RHEL-65062

  • Medium max 7.8
    ELSA-2024-9056 1 CVE

    Moderate: gstreamer1-plugins-base security update (Oracle Linux 8)

    [1.16.1-4.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-4] - CVE-2024-4453 gstreamer1: EXIF Metadata Parsing Integer Overflow - Resolves: RHEL-38509

  • Medium max 9.8
    ELSA-2024-8727 10 CVEs

    Moderate: firefox security update (Oracle Linux 7)

    [128.4.0-1.0.1] - Update to 128.4.0 build1 [Orabug: 37236498][CVE-2024-10458][CVE-2024-10459] [CVE-2024-10460][CVE-2024-10461][CVE-2024-10462][CVE-2024-10463] [CVE-2024-10464][CVE-2024-10465][CVE-2024-10466][CVE-2024-10467]

  • Medium max 6.2
    ELSA-2024-8365 1 CVE

    Moderate: python-idna security update (Oracle Linux 7)

    [2.4-1.0.1] - Fixed CVE 2024-3651 [Orabug: 37206964]

  • Medium max 7.5
    ELSA-2024-8935 1 CVE

    Moderate: edk2 security update (Oracle Linux 9)

    [20231122-6.0.1.el9_4.4] - Replace upstream references [Orabug:36569119] [20231122-6.el9_4.4] - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55337] - Resolves: RHEL-55337 (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 na…

  • Medium max 7.5
    ELSA-2024-8833 1 CVE

    Moderate: libtiff security update (Oracle Linux 8)

    [4.0.9-33] - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52927)

  • Medium max 4.4
    ELSA-2024-8843 1 CVE

    Moderate: python3.11-urllib3 security update (Oracle Linux 8)

    [1.26.12-4] - Fix test_ssltransport for changes in ssl.SSLSocket in Python 3.11.3 Related: RHEL-59995 [1.26.12-3] - Security fix for CVE-2024-37891 Resolves: RHEL-59995

  • Medium max 8.2
    ELSA-2024-8849 1 CVE

    Moderate: haproxy security update (Oracle Linux 8)

    [1.8.27-5.1] - Reject '#' as part of URI path component (CVE-2023-45539, RHEL-18168)

  • Medium max 4.4
    ELSA-2024-8842 1 CVE

    Moderate: python3.12-urllib3 security update (Oracle Linux 8)

    [1.26.19-1] - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59989

  • Medium max 7.3
    ELSA-2024-8859 1 CVE

    Moderate: xmlrpc-c security update (Oracle Linux 8)

    [1.51.0-10] - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519)

  • Medium max 7.5
    ELSA-2024-8836 1 CVE

    Moderate: python3.12 security update (Oracle Linux 8)

    [3.12.6-1] - Update to 3.12.6 Resolves: RHEL-57405

  • Medium max 7.5
    ELSA-2024-8838 1 CVE

    Moderate: python3.11 security update (Oracle Linux 8)

    [3.11.10-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.10-1] - Update to 3.11.10 Resolves: RHEL-57400

  • Medium max 6.5
    ELSA-2024-8847 1 CVE

    Moderate: grafana-pcp security update (Oracle Linux 8)

    [5.1.1-9] - Resolves RHEL-61780: CVE-2024-9355

  • Medium max 9.8
    ELSA-2024-8876 1 CVE

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.22.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.22.1-1] - Rebase to 1.22.1 - Resolves: RHEL-54307 golang [1.22.7-1] - Update to Go 1.22.7 - Resolves: RHEL-58223 - Resolves: RHEL-57961 - Resolves: RHEL-57847 - Resolves: RH…

  • Medium max 9.8
    ELSA-2024-8856 42 CVEs

    Moderate: kernel security update (Oracle Linux 8)

    - [4.18.0-553.27.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…

  • Medium max 7.5
    ELSA-2024-8914 1 CVE

    Moderate: libtiff security update (Oracle Linux 9)

    [4.4.0-12.1] - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)

  • Medium max 9.8
    ELSA-2024-8790 10 CVEs

    Moderate: thunderbird security update (Oracle Linux 8)

    [128.4.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.4.0] - Add OpenELA debranding [128.4.0-1] - Update to 128.4.0 build1