Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 7.8
    ELSA-2024-5583 1 CVE

    Moderate: libreoffice security update (Oracle Linux 9)

    [7.1.8.1-14.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [7.1.8.1] - Remove Red Hat branding - Change vendor to RESF [1:7.1.8.1-14] - Fix CVE-2024-6472 remove ability to trust not validated macro…

  • Medium max 8.6
    ELSA-2024-5529 1 CVE

    Moderate: curl security update (Oracle Linux 9)

    [7.76.1-29.el9_4.1] - provide common cleanup method for push headers (CVE-2024-2398)

  • Medium max 7.5
    ELSA-2024-5305 1 CVE

    Moderate: poppler security update (Oracle Linux 8)

    [20.11.0-12] - Fix crash in broken documents when using -dests - Fix versions in changelog - Resolves: RHEL-44330

  • Medium max 7.5
    ELSA-2024-5289 1 CVE

    Moderate: mod_auth_openidc:2.3 security update (Oracle Linux 8)

    cjose mod_auth_openidc [2.4.9.4-6] - Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache - Resolves: RHEL-25421 mod_auth_openidc: DoS when using OIDCSessionType client-cookie and manipulating cookies (CVE-2024-24814)

  • Medium max 6.0
    ELSA-2024-5297 3 CVEs

    Moderate: edk2 security update (Oracle Linux 8)

    [20220126gitbb1bba3d77-13.el8_10.2] [20220126gitbb1bba3d77-13.el8_10.1] - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099] - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-4…

  • Medium max 6.5
    ELSA-2024-5298 1 CVE

    Moderate: gnome-shell security update (Oracle Linux 8)

    [3.32.2-56] - Only open portal login in response to user action Resolves: RHEL-39097

  • Medium max 4.4
    ELSA-2024-5309 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 8)

    [1.24.2-8] - Security fix for CVE-2024-37891 Resolves: RHEL-45334

  • Medium max 9.1
    ELSA-2024-5299 1 CVE

    Moderate: wget security update (Oracle Linux 8)

    [1.19.5-12.0.1] - SSLv3 support dropped from openssl, v3 test certificates need to be replaced [Orabug: 29613455] [1.19.5-12] - Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior

  • Medium max 7.0
    ELSA-2024-5306 1 CVE

    Moderate: orc security update (Oracle Linux 8)

    [0.4.28-4] - Add patch for CVE-2024-40897 - Resolves: RHEL-50710

  • Medium max 9.1
    ELSA-2024-5312 2 CVEs

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-29.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-29] - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386

  • Medium max 6.5
    ELSA-2024-5337 1 CVE

    Moderate: .NET 8.0 security update (Oracle Linux 8)

    [8.0.108-1.0.1] - Add support for Oracle Linux [8.0.108-1] - Update to .NET SDK 8.0.108 and Runtime 8.0.8 - Resolves: RHEL-52388

  • Medium max 7.5
    ELSA-2024-5294 2 CVEs

    Moderate: jose security update (Oracle Linux 8)

    [10-2.3] - Backport fix for CVE-2024-28176 Resolves: RHEL-28719 [10-2.2] - Fix tests on s390x Related: RHEL-29857 [10-2.1] - Fixes CVE-2023-50967

  • Medium max 9.8
    ELSA-2024-5291 3 CVEs

    Moderate: grafana security update (Oracle Linux 8)

    [9.2.10-17] - Allow for mssql datasource in selinux policy - Resolves RHEL-43435

  • Medium max 6.5
    ELSA-2024-5334 1 CVE

    Moderate: .NET 8.0 security update (Oracle Linux 9)

    [8.0.108-1.0.1] - Add support for Oracle Linux [8.0.108-1] - Update to .NET SDK 8.0.108 and Runtime 8.0.8 - Resolves: RHEL-52389 [8.0.107-2] - Fix ownership of some missed directories - Resolves: RHEL-47080

  • Medium max 6.5
    ELSA-2024-5192 2 CVEs

    Moderate: 389-ds-base security update (Oracle Linux 9)

    [2.4.5-9] - Bump version to 2.4.5-9 - Resolves: RHEL-44323 - unauthenticated user can trigger a DoS by sending a specific extended search request - Resolves: RHEL-40945 - Malformed userPassword hash may cause Denial of Service - Resolves: RHEL-49457 - perf se…

  • Medium max 7.5
    ELSA-2024-12579 1 CVE

    Moderate: linux-firmware security update (Oracle Linux 7)

    [20240715-999.34.git4c8fb21e.el7] - Rebase to latest upstream [Orabug: 36826157]

  • Medium max 7.5
    ELSA-2024-12580 1 CVE

    Moderate: linux-firmware security update (Oracle Linux 8)

    [20240715-999.34.git4c8fb21e.el8] - Rebase to latest upstream [Orabug: 36826157]

  • Medium max 7.5
    ELSA-2024-12578 1 CVE

    Moderate: linux-firmware security update (Oracle Linux 9)

    [20240715-999.34.git4c8fb21e.el9] - Rebase to latest upstream [Orabug: 36826157]

  • Medium max 7.5
    ELSA-2024-5079 4 CVEs

    Moderate: libtiff security update (Oracle Linux 8)

    [4.0.9-32] - Fix CVE-2023-6228 CVE-2023-52356 CVE-2023-25433 CVE-2018-15209 - Resolves: RHEL-30682 RHEL-30520 RHEL-30474 RHEL-5406

  • Medium max 6.0
    ELSA-2024-12574 1 CVE

    Moderate: qemu-kvm security update (Oracle Linux 9)

    [7.2.0-13.el9] - vfio/migration: Enhance VFIO migration state tracing (Avihai Horon) - vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon) - vfio/migration: Emit VFIO migration QAPI event (Avihai Horon) - qapi/vfio: Add VFIO mi…

  • Medium max 8.1
    ELSA-2024-4928 17 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    - [5.14.0-427.28.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • Medium max 6.5
    ELSA-2024-4861 2 CVEs

    Moderate: squid security update (Oracle Linux 9)

    [7:5.5-13] - Resolves: RHEL-45056 - squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894) - Resolves: RHEL-45643 - squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)

  • Medium max 7.0
    ELSA-2024-4749 3 CVEs

    Moderate: edk2 security update (Oracle Linux 9)

    [20231122-6.0.1.el9_4.2] - Replace upstream references [Orabug:36569119] [20231122-6.el9_4.2] - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-40270 RHEL-40272] - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-40270 RHEL-40272] - …

  • Medium max 6.5
    ELSA-2024-4755 1 CVE

    Moderate: libreoffice security update (Oracle Linux 9)

    [7.1.8.1-13.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [1:7.1.8.1-13] - Fix CVE-2024-3044 add notify for script use

  • Medium max 6.2
    ELSA-2024-4757 1 CVE

    Moderate: libvirt security update (Oracle Linux 9)

    [10.0.0-6.6.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.0.0-6.6.el9_4] - vmx: Do not require DVS Port ID (RHEL-45520) - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46595) [10.0.0-6.5.el9_4] - qemu: Fix migration …

  • Medium max 7.3
    ELSA-2024-4756 1 CVE

    Moderate: libuv security update (Oracle Linux 9)

    [1:1.42.0-2] - Backport fix for CVE-2024-24806 Resolves: RHEL-24791

  • Medium max 4.4
    ELSA-2024-4776 1 CVE

    Moderate: cups security update (Oracle Linux 9)

    [1:2.3.3op2-27] - Revert the cups-libs license identifier to the 'legacy' format [1:2.3.3op2-26] - RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks [1:2.3.…

  • Medium max 6.0
    ELSA-2024-12536 2 CVEs

    Moderate: virt:kvm_utils3 bug fix update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [9.0.0-5.el8] - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441} libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [7…

  • Medium max 9.8
    ELSA-2024-4499 5 CVEs

    Moderate: ruby security update (Oracle Linux 8)

    ruby [2.5.9-112] - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755. (CVE-2023-36617) Resolves: RHEL-5614 - Fix Buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34125 - Fix RCE vulnerability with .rdoc_options i…

  • Medium max 6.2
    ELSA-2024-4351 1 CVE

    Moderate: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [8.0.0-23.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-23.2] - util: Fix error return for virProce…

  • Medium max 7.0
    ELSA-2024-4457 1 CVE

    Moderate: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2.4] - Possible remote code execution due to a race condition (CVE-2024-6409) Resolves: RHEL-45741

  • Medium max 7.5
    ELSA-2024-4438 1 CVE

    Moderate: dotnet6.0 security update (Oracle Linux 8)

    [6.0.132-1.0.1] - Add support for Oracle Linux [6.0.132-1] - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45319

  • Medium max 4.4
    ELSA-2024-4422 1 CVE

    Moderate: fence-agents security update (Oracle Linux 9)

    [4.10.0-62.4] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-43956

  • Medium max 7.5
    ELSA-2024-4439 1 CVE

    Moderate: dotnet6.0 security update (Oracle Linux 9)

    [6.0.132-1.0.1] - Add support for Oracle Linux [6.0.132-1] - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45321

  • Medium max 6.5
    ELSA-2024-4376 1 CVE

    Moderate: libreswan security update (Oracle Linux 8)

    [4.12-2.0.1.4] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2.4] - Fix CVE-2024-3652 (RHEL-32482)

  • Medium max 9.8
    ELSA-2024-4349 8 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 9)

    - [5.14.0-427.24.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • Medium max 6.2
    ELSA-2024-4243 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [3.12.3-2] - Enable importing of hash-based .pyc files under FIPS mode Resolves: RHEL-40776 [3.12.3-1] - Update to 3.12.3 Related: RHEL-33685 [3.12.2-3] - Move all test modules to the python3-test package, namely: - __phello__ - _xxsubinterpreters - xxlimited…

  • Medium max 6.5
    ELSA-2024-4242 1 CVE

    Moderate: libreoffice security update (Oracle Linux 8)

    [6.4.7.2-17.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [6.4.7.2] - Remove Red Hat branding - Change vendor to RESF [1:6.4.7.2-17] - Fix CVE-202…

  • Medium max 6.3
    ELSA-2024-4245 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [1.1.0-3] - Security fix for CVE-2024-36039 Resolves: RHEL-38366

  • Medium max 5.9
    ELSA-2024-4241 2 CVEs

    Moderate: iperf3 security update (Oracle Linux 8)

    [3.5-10] - Resolves: RHEL-29578 - vulnerable to marvin attack if the authentication option is used [3.5-9] - Resolves: RHEL-17069 - possible denial of service [3.5-8] - Related: #2222205 - bumping nvr for correct update path