Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 8.7
    ELSA-2024-6961 3 CVEs

    Moderate: python3.12 security update (Oracle Linux 8)

    [3.12.5-2] - Security fix for CVE-2024-8088 Resolves: RHEL-55939 [3.12.5-1] - Update to 3.12.5 - Security fix for CVE-2024-6923 Resolves: RHEL-53075 [3.12.4-3] - Properly propagate the optimization flags to C extensions [3.12.4-2] - Build Python with -O3 - ht…

  • Medium max 8.7
    ELSA-2024-6962 3 CVEs

    Moderate: python3.11 security update (Oracle Linux 8)

    [3.11.9-7.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.9-7] - Security fix for CVE-2024-8088 Resolves: RHEL-55934 [3.11.9-6] - Security fix for CVE-2024-6923 Resolves: RHEL-53089 [3.11.9-5] - Properly propagate the optimization flags to C ext…

  • Medium max 7.5
    ELSA-2024-6969 5 CVEs

    Moderate: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman [4.9.4-13.0.1] - Fixes issue of container created in cgroupv2 not start in cgroup…

  • Medium max 8.2
    ELSA-2024-6964 3 CVEs

    Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd [1.6.0-6] - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52728 libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-53] - kvm-nbd-server-Fa…

  • Medium
    ELSA-2024-12684 1 CVE

    Moderate: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.4.el7.OL7] - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [3.10.0-1160.119.1.0.4.el7.OL7]

  • Medium max 5.9
    ELSA-2024-6784 4 CVEs

    Moderate: ruby:3.3 security update (Oracle Linux 8)

    ruby [3.3.5-3] - Upgrade to Ruby 3.3.5 Resolves: RHEL-55409 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57049 Resolves: RHEL-57054 Resolves: RHEL-57069 - Fix REXML DoS when parsing an XML having many spe…

  • Medium max 7.5
    ELSA-2024-12675 1 CVE

    Moderate: openssl security update (Oracle Linux 9)

    [3.0.7-28.0.1_fips] - Replace upstream references in fips man pages [Orabug: 35824276] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276] - Update FIPS module name and remove upstream references from fips_module_indic…

  • Medium max 7.5
    ELSA-2024-6783 1 CVE

    Moderate: openssl security update (Oracle Linux 9)

    [3.0.7-28.0.1] - Drop OpenELA branding, apply Oracle branding patches - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [1:3.0.…

  • Medium max 5.9
    ELSA-2024-6785 4 CVEs

    Moderate: ruby:3.3 security update (Oracle Linux 9)

    ruby [3.3.5-3] - Upgrade to Ruby 3.3.5 Resolves: RHEL-57576 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57573 Resolves: RHEL-57570 Resolves: RHEL-57578 - Fix REXML DoS when parsing an XML having many spe…

  • Medium max 7.4
    ELSA-2024-6757 1 CVE

    Moderate: libnbd security update (Oracle Linux 9)

    [1.18.1-4.0.1] - Add new content to nbd_connect_uri.pod [1.18.1-4] - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52730

  • Medium max 9.8
    ELSA-2024-6754 3 CVEs

    Moderate: expat security update (Oracle Linux 9)

    [2.5.0-2.1] - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57510 - Resolves: RHEL-57497 - Resolves: RHEL-56763

  • Medium max 5.9
    ELSA-2024-6670 3 CVEs

    Moderate: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.el8_10.2] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.2] - Updated rubygem rexml Resolves: RHEL-52409, RHEL-52788, RHEL-55997

  • Medium max 5.7
    ELSA-2024-6569 1 CVE

    Moderate: 389-ds:1.4 security update (Oracle Linux 8)

    [1.4.3.39-8] - Bump version to 1.4.3.39-8 - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z] - Resolves: RHEL-58069 - perf search result investigation for many large static grou…

  • Medium max 9.8
    ELSA-2024-6567 27 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-427.35.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 7.5
    ELSA-2024-6529 2 CVEs

    Moderate: dovecot security update (Oracle Linux 9)

    [1:2.3.16-11.1] - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55211) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55225)

  • Medium max 9.8
    ELSA-2024-6510 1 CVE

    Moderate: emacs security update (Oracle Linux 9)

    [1:27.2-10] - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Disable xwidgets (RHEL-33447)

  • Medium max 5.2
    ELSA-2024-6464 1 CVE

    Moderate: glib2 security update (Oracle Linux 9)

    [2.68.4-14.1] - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-56979

  • Medium max 8.8
    ELSA-2024-6311 2 CVEs

    Moderate: resource-agents security update (Oracle Linux 8)

    [4.9.0-54.4] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50360 [4.9.0-54.3] - gcp-pd-move: fix TLS_VERSION_1 issue Resolves: RHEL-50041 [4.9.0-54.2] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-44923 [4.9.0-54.1] - AWS agents: retry failed …

  • Medium max 6.5
    ELSA-2024-6148 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 8)

    nodejs [1:18.20.4-1] - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging

  • Medium max 8.8
    ELSA-2024-6309 2 CVEs

    Moderate: fence-agents security update (Oracle Linux 8)

    [4.2.1-129.4] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50223 [4.2.1-129.3] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-43568 [4.2.1-129.2] - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer Resolves: RHEL-7734 - bundled jinja2: …

  • Medium max 6.5
    ELSA-2024-6147 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 9)

    nodejs [1:18.20.4-1] - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging

  • Medium max 5.5
    ELSA-2024-6163 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.18-3.5] - Security fix for CVE-2024-8088 Resolves: RHEL-55968 [3.9.18-3.4] - Security fix for CVE-2024-6923 Resolves: RHEL-53044

  • Medium max 5.5
    ELSA-2024-6179 1 CVE

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.7-1.5] - Security fix for CVE-2024-8088 Resolves: RHEL-55960 [3.11.7-1.4] - Security fix for CVE-2024-6923 Resolves: RHEL-53037

  • Medium max 5.9
    ELSA-2024-6188 1 CVE

    Moderate: runc security update (Oracle Linux 9)

    [4:1.1.12-4] - rebuild for CVE-2024-24783 - Resolves: RHEL-28439

  • Medium max 6.3
    ELSA-2024-6197 3 CVEs

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-17] - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024…

  • Medium max 7.0
    ELSA-2024-6184 1 CVE

    Moderate: orc security update (Oracle Linux 9)

    [0.4.31-7] - Add patch for CVE-2024-40897 - Resolves: RHEL-50701

  • Medium max 5.9
    ELSA-2024-6186 1 CVE

    Moderate: containernetworking-plugins security update (Oracle Linux 9)

    [1:1.4.0-5] - rebuild for CVE-2024-24783 - Resolves: RHEL-28431

  • Medium max 5.9
    ELSA-2024-6187 1 CVE

    Moderate: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.7.3-5] - rebuild for CVE-2024-24783 - Resolves: RHEL-28435

  • Medium max 5.9
    ELSA-2024-6195 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.14.5-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14 (https://github.com/containers/skopeo/commit/072072b) - Resolves: RHEL-40805

  • Medium max 4.4
    ELSA-2024-6162 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 9)

    [1.26.5-5.1] - Security fix for CVE-2024-37891 - Backport upstream patch to fix TypeError for http connection if the PoolManager - is instantiated with server_hostname Resolves: RHEL-49853

  • Medium max 5.5
    ELSA-2024-6146 1 CVE

    Moderate: python3.12 security update (Oracle Linux 9)

    [3.12.1-4.3] - Security fix for CVE-2024-8088 Resolves: RHEL-55964 [3.12.1-4.2] - Security fix for CVE-2024-6923 Resolves: RHEL-53087

  • Medium max 5.9
    ELSA-2024-6189 1 CVE

    Moderate: buildah security update (Oracle Linux 9)

    [1.33.7-4.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-4] - rebuild for CVE-2024-24783 - Resolves: RHEL-28428

  • Medium max 9.1
    ELSA-2024-6192 1 CVE

    Moderate: wget security update (Oracle Linux 9)

    [1.21.1-8] - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior

  • Medium max 9.1
    ELSA-2024-6166 2 CVEs

    Moderate: krb5 security update (Oracle Linux 9)

    [1.21.1-2.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-2] - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45401 RHEL-45390

  • Medium max 8.8
    ELSA-2024-5962 4 CVEs

    Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

    mod_wsgi numpy python39 [3.9.19-7] - Security fix for CVE-2024-8088 Resolves: RHEL-55954 [3.9.19-6] - Security fix for CVE-2024-6923 Resolves: RHEL-53102 [3.9.19-5] - Properly propagate the optimization flags to C extensions [3.9.19-4] - Build Python with -O3…

  • Medium max 5.9
    ELSA-2024-5941 2 CVEs

    Moderate: libvpx security update (Oracle Linux 8)

    [1.7.0-11] - Add patch to fix integer overflows. - Fix compilation by including limits.h - Resolves: RHEL-40650

  • Medium max 6.5
    ELSA-2024-5814 4 CVEs

    Moderate: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging

  • Medium max 6.5
    ELSA-2024-5815 3 CVEs

    Moderate: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging

  • Medium max 7.8
    ELSA-2024-5598 1 CVE

    Moderate: libreoffice security update (Oracle Linux 8)

    [6.4.7.2-18.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [6.4.7.2] - Remove Red Hat branding - Change vendor to RESF [1:6.4.7.2-18] - Fix CVE-202…

  • Medium max 8.6
    ELSA-2024-5654 1 CVE

    Moderate: curl security update (Oracle Linux 8)

    [7.61.1-34.el8_10.2] - provide common cleanup method for push headers (CVE-2024-2398) [7.61.1-34.el8_10.1] - fix incorrect backport of bz2229800 (RHEL-44684)