Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 6.8
    ELSA-2024-3267 2 CVEs

    Moderate: idm:DL1 and idm:client security update (Oracle Linux 8)

    bind-dyndb-ldap custodia ipa [4.9.13-9.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [9.4.13-9] - dcerpc: invalidate forest trust intfo cache when filtering out realm domains Resolves: RHEL-28559 - Backport latests test fixes in py…

  • Medium max 7.8
    ELSA-2024-3258 3 CVEs

    Moderate: xorg-x11-server security update (Oracle Linux 8)

    [1.20.14-23] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083 - Add util-linux as a dependency of Xvfb - Fix compilation error on i686

  • Medium max 7.1
    ELSA-2024-3270 1 CVE

    Moderate: sssd security update (Oracle Linux 8)

    [2.9.4-3.0.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-3] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently

  • Medium max 7.0
    ELSA-2024-3275 1 CVE

    Moderate: python-dns security update (Oracle Linux 8)

    [1.15.0-12] - Security fix for CVE-2023-29483 Resolves: RHEL-32630

  • Medium max 7.8
    ELSA-2024-3341 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 8)

    [2.36.12-6] - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478

  • Medium max 7.8
    ELSA-2024-2994 1 CVE

    Moderate: LibRaw security update (Oracle Linux 8)

    [0.19.5-4] - Backport fix for CVE-2021-32142 from upstream Resolves: RHEL-9523

  • Medium max 5.5
    ELSA-2024-3047 1 CVE

    Moderate: 389-ds:1.4 security update (Oracle Linux 8)

    [1.4.3.39-3] - Bump version to 1.4.3.39-3 - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix [1.4.3.39-2] - Bump version to 1.4.3.39-2 - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base…

  • Medium max 7.0
    ELSA-2024-3128 1 CVE

    Moderate: perl:5.32 security update (Oracle Linux 8)

    perl-Algorithm-Diff perl-Archive-Tar perl-Archive-Zip perl-autodie perl-bignum perl-Carp perl-Compress-Bzip2 perl-Compress-Raw-Bzip2 perl-Compress-Raw-Lzma perl-Compress-Raw-Zlib [2.096-2] - Fix test broken by update in zlib on s390x - Related: RHEL-16371 per…

  • Medium max 5.9
    ELSA-2024-2987 5 CVEs

    Moderate: python27:2.7 security update (Oracle Linux 8)

    babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned …

  • Medium max 7.5
    ELSA-2024-3184 3 CVEs

    Moderate: grub2 security update (Oracle Linux 8)

    [2.02-156.0.1] - Restore correct SBAT entries - Replaced bugzilla.oracle.com references [Orabug: 35475894] - efinet: Close and reopen card on failure [Orabug: 35126950] - Fix CVE-2022-3775 [Orabug: 34867710] - Bump SBAT metadata for grub to 3 [Orabug: 3487175…

  • Medium max 5.3
    ELSA-2024-3044 1 CVE

    Moderate: idm:DL1 security update (Oracle Linux 8)

    bind-dyndb-ldap [11.6-4] - Modify empty zone conflicts under exclusive mode Resolves: rhbz#2126877 [11.6-3] - Rebuild against bind 9.11.36 - Resolves: rhbz#2022762 [11.6-2] - Rebuild against bind 9.11.26 - Resolves: rhbz#1904612 [11.6-1] - New upstream releas…

  • Medium max 6.1
    ELSA-2024-2961 1 CVE

    Moderate: Image builder components bug fix, enhancement and security update (Oracle Linux 8)

    osbuild [110-1] - New upstream release [109-1] - New upstream release [106-1] - New upstream release [105-1] - New upstream release [104-2] - Fix unit tests in RHEL CI by backporting upstream fixes [104-1] - New upstream release [101-1] - New upstream release…

  • Medium
    ELSA-2024-3121 2 CVEs

    Moderate: httpd:2.4 security update (Oracle Linux 8)

    httpd [2.4.37-64.0.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-64] - Resolves: RHEL-14448 - httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122) [2.4.37-63] - mod_xml2enc: fix media type handling Resolves: RHEL-14…

  • Medium max 6.1
    ELSA-2024-2988 16 CVEs

    Moderate: container-tools:ol8 security update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2024-3061 1 CVE

    Moderate: pki-core:10.6 and pki-deps:10.6 security update (Oracle Linux 8)

    apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent [49-1] - Rebase to upstream version 49 [26-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [26-5] - Fix license tag [26-4] - Rebuilt for htt…

  • Medium max 6.5
    ELSA-2024-2962 4 CVEs

    Moderate: virt:ol and virt-devel:rhel security and enhancement update (Oracle Linux 8)

    hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX…

  • Medium max 5.9
    ELSA-2024-2985 4 CVEs

    Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

    mod_wsgi [4.7.1-7] - Bump release for rebuild Resolves: rhbz#2213595 [4.7.1-6] - Remove rpath Resolves: rhbz#2213837 [4.7.1-5] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125172 [4.7.1-4] - Convert from Fedora to the python39 module in RHEL8 - Resol…

  • Medium max 8.8
    ELSA-2024-3088 1 CVE

    Moderate: gstreamer1-plugins-base security update (Oracle Linux 8)

    [1.16.1-3.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-3] - CVE-2023-37328 gstreamer1-plugins-base: heap overwrite in subtitle parsing - Resolves: RHEL-19472

  • Medium max 5.9
    ELSA-2024-2986 1 CVE

    Moderate: python3.11-urllib3 security update (Oracle Linux 8)

    [1.26.12-2] - Security fix for CVE-2023-43804 Resolves: RHEL-11996

  • Medium max 5.8
    ELSA-2024-2953 3 CVEs

    Moderate: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1] - Replace HAM-logo.png with a generic one [0.10.18-2] - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26445, RHEL-26447, RHEL-26449 [0.10.18-1] - Rebased to the latest sources (see CHANGELOG.md)…

  • Medium
    ELSA-2024-3127 1 CVE

    Moderate: zziplib security update (Oracle Linux 8)

    [0.13.68-13] - Fix CVE-2020-18770 Previous patch contained segfault bug Resolves: RHEL-14966 [0.13.68-12] - Add the gating tests from the 8.8.0 branch Resolves: RHEL-24429 [0.13.68-11] - Use /usr/libexec/platform-python macro during the config phase (used for…

  • Medium
    ELSA-2024-3066 2 CVEs

    Moderate: exempi security update (Oracle Linux 8)

    [2.4.5-4] - Fix CVE-2020-18652 - Resolves: RHEL-5416 [2.4.5-3] - Fix CVE-2020-18651 - Resolves: RHEL-5415

  • Medium max 6.2
    ELSA-2024-3056 2 CVEs

    Moderate: qt5-qtbase security update (Oracle Linux 8)

    [5.15.3-7] - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25725 [5.15.3-6] - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20238

  • Medium max 7.5
    ELSA-2024-2980 1 CVE

    Moderate: harfbuzz security update (Oracle Linux 8)

    [1.7.5-4] - Resolves:RHEL-8400 allows attackers to trigger O(n^2) growth via consecutive marks

  • Medium max 5.5
    ELSA-2024-3022 2 CVEs

    Moderate: motif security update (Oracle Linux 8)

    [2.3.4-20] - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap

  • Medium max 8.8
    ELSA-2024-3060 3 CVEs

    Moderate: gstreamer1-plugins-bad-free security update (Oracle Linux 8)

    [1.16.1-4.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-4] - Patch CVE-2023-40474: Integer overflow - Patch CVE-2023-40475: Integer overflow - Patch CVE-2023-40476: Integer overflow in H.265 video parser - Resolves: RHEL-19500, RHEL-19504, RHEL-19507 [1…

  • Medium max 5.3
    ELSA-2024-3062 1 CVE

    Moderate: python3.11 security update (Oracle Linux 8)

    [3.11.7-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.7-1] - Rebase to 3.11.7 Resolves: RHEL-21915 [3.11.5-2] - Security fix for CVE-2023-27043 Resolves: RHEL-7842

  • Medium
    ELSA-2024-3139 2 CVEs

    Moderate: squashfs-tools security update (Oracle Linux 8)

    [4.3-21] - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination Resolves: rhbz#2007303 rhbz#2000637

  • Medium max 7.5
    ELSA-2024-3120 2 CVEs

    Moderate: freeglut security update (Oracle Linux 8)

    [3.0.0-9] - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25175 Resolves: https://issues.redhat.com/browse/RHEL-25177

  • Medium max 5.5
    ELSA-2024-2974 2 CVEs

    Moderate: libXpm security update (Oracle Linux 8)

    [3.5.12-11] - Drop hardening patches from previous version to keep ABI compatibility [3.5.12-10] - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap o…

  • Medium
    ELSA-2024-3214 1 CVE

    Moderate: gmp security update (Oracle Linux 8)

    [1:6.1.2-11] - Fix: CVE-2021-43618 Resolves: RHEL-23055

  • Medium
    ELSA-2024-3095 1 CVE

    Moderate: vorbis-tools security update (Oracle Linux 8)

    [1:1.4.0-29] - fix out-of-bounds read in oggenc (CVE-2023-43361)

  • Medium max 5.4
    ELSA-2024-3102 1 CVE

    Moderate: python-jinja2 security update (Oracle Linux 8)

    [2.10.1-4] - Security fix for CVE-2024-22195 Resolves: RHEL-21347 [2.10.1-3] - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern Resolves: rhbz#1928707 [2.10.1-2] - Rebuild of package to go through gating - Resolves: rhbz#1701301 [2.10.1-1] - Reb…

  • Medium max 7.5
    ELSA-2024-3005 1 CVE

    Moderate: python-pillow security update (Oracle Linux 8)

    [5.1.1-20] - Security fix for CVE-2023-50447 Resolves: RHEL-22240 [5.1.1-19] - Security fix for CVE-2023-44271 Resolves: RHEL-15460

  • Medium max 5.9
    ELSA-2024-2968 3 CVEs

    Moderate: fence-agents security and bug fix update (Oracle Linux 8)

    [4.2.1-129] - bundled urllib3: fix CVE-2023-45803 Resolves: RHEL-18132 - bundled pycryptodome: fix CVE-2023-52323 Resolves: RHEL-20915 - bundled jinja2: fix CVE-2024-22195 Resolves: RHEL-22174 [4.2.1-127] - fence_scsi: fix registration handling if ISID confli…

  • Medium max 9.8
    ELSA-2024-2996 9 CVEs

    Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 8)

    [21.1.3-15] Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408, CVE-2024-0409 [21.1.3-14] - Fix for CVE-2023-6377, CVE-2023-6478 [21.1.3-13] - Fix for CVE-2023-5367

  • Medium max 7.6
    ELSA-2024-3089 1 CVE

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 8)

    [1.16.1-4] - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC image tag handling - Resolves: RHEL-19469

  • Medium max 5.9
    ELSA-2024-3203 1 CVE

    Moderate: systemd security update (Oracle Linux 8)

    [239-82.0.1] - Fixed deletion issue for symlink when device is opened [Orabug: 36228608] - Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 35871376] - 1A) Add 'systemd-fstab-generator-reload-targets.service' file…

  • Medium max 7.8
    ELSA-2024-3166 1 CVE

    Moderate: openssh security update (Oracle Linux 8)

    [8.0p1-24.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-24] - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 [8.0p1-23] - Fix Terrapin attack Resolves: RHEL-19308 [8.0p1-22] - Fix Terrapin attack Resolves: RHEL-…

  • Medium max 8.1
    ELSA-2024-3138 48 CVEs

    Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-553.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…