Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium
    ELSA-2024-3030 1 CVE

    Moderate: libsndfile security update (Oracle Linux 8)

    [1.0.28-14] - fix integer overflows causing CVE-2022-33065 (#RHEL-3750)

  • Medium
    ELSA-2024-2979 1 CVE

    Moderate: poppler security update (Oracle Linux 8)

    [21.01.0-11] - Fix crashes in FoFiType1C - Rebuild for inclusion of poppler-glib-doc in CRB - Resolves: RHEL-4255, RHEL-4273 [21.01.0-10] - Check XRef's Catalog for being a Dict - Resolves: #2189816 [20.11.0-9] - Check isDict before calling getDict 2 - Resolv…

  • Medium max 7.8
    ELSA-2024-2973 3 CVEs

    Moderate: libX11 security update (Oracle Linux 8)

    [1.6.8-8] - Backport fix for Xlib lockups due to recursive XError (RHEL-23452) [1.6.8-7] - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms() - Fix CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage() - Fix CVE-2023-4378…

  • Medium max 5.5
    ELSA-2024-3163 1 CVE

    Moderate: pam security update (Oracle Linux 8)

    [1.3.1-33] - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 [1.3.1-32] - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 [1.3.1-31] - pam_faillock: create tallydir before cr…

  • Medium max 4.3
    ELSA-2024-3058 2 CVEs

    Moderate: mutt security update (Oracle Linux 8)

    [5:2.0.7-3] - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2811

  • Medium
    ELSA-2024-3049 1 CVE

    Moderate: perl-Convert-ASN1 security update (Oracle Linux 8)

    [0.27-18] - Fix unsafe decoding in indef case (CVE-2013-7488)

  • Medium max 7.8
    ELSA-2024-2995 9 CVEs

    Moderate: xorg-x11-server security update (Oracle Linux 8)

    [1.20.4-24] - Fix use after free related to CVE-2024-21886 [1.20.11-21] - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and CVE-2024-0409 Resolves: https://issues.redhat.com/browse/RHEL-21207 Resolves: https://issues…

  • Medium max 6.8
    ELSA-2024-3059 1 CVE

    Moderate: libtiff security update (Oracle Linux 8)

    [4.0.9-31] - Fix CVE-2022-3599 CVE-2022-4645 - Resolves: RHEL-5399 [4.0.9-30] - Bump specfile to retrigger gating - Add tests folder for standard beakerlib - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688

  • Medium max 5.0
    ELSA-2024-3043 1 CVE

    Moderate: ansible-core bug fix, enhancement, and security update (Oracle Linux 8)

    [2.16.3-2] - rebuild with python 3.12 (RHEL-24141) [2.16.3-1] - ansible-core 2.16.3 release (RHEL-23782) - Fix CVE-2024-0690 (possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration) (RHEL-22123) [2.16.2-1] - ansible-core 2.16.2 release (R…

  • Medium
    ELSA-2024-2981 5 CVEs

    Moderate: frr security update (Oracle Linux 8)

    [7.5.1-22.0.1] - Fix POSTIN scriptlet [Orabug: 34712485] - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-co…

  • Medium max 5.5
    ELSA-2024-3211 1 CVE

    Moderate: traceroute security update (Oracle Linux 8)

    [3:2.1.0-8] - add gating.yaml [3:2.1.0-7] - fix improper command line parsing (CVE-2023-46316)

  • Medium max 4.7
    ELSA-2024-3067 1 CVE

    Moderate: tigervnc security update (Oracle Linux 8)

    [1.13.1-8] - Fix copy/paste error in the DeviceStateNotify Resolves: RHEL-20530 [1.13.1-7] - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20388 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer o…

  • Medium max 5.9
    ELSA-2024-3105 1 CVE

    Moderate: python3.11-cryptography security update (Oracle Linux 8)

    [37.0.2-6] - Security fix for CVE-2023-49083 - Resolves: RHEL-19831

  • Medium max 8.1
    ELSA-2024-3094 1 CVE

    Moderate: perl-CPAN security update (Oracle Linux 8)

    [2.18-399] - Fix tests to run in correct order [2.18-398] - Fix CVE-2023-31484 - Package tests [2.18-397] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.18-396] - Rebase patches to prevent from installing back-up files [2.18-395] - Reb…

  • Medium max 7.8
    ELSA-2024-3306 4 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 9)

    [5.14.0-427.18.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 4.7
    ELSA-2024-12380 1 CVE

    Moderate: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.331.7.el7] - Revert 'tracing/trigger: Fix to return error if failed to alloc snapshot' (Siddh Raman Pant) - Revert 'selftests: mm: fix map_hugetlb failure on 64K page size systems' (Harshit Mogalapalli) [Orabug: 36584568] - Revert 'net/mlx5: Enab…

  • Medium max 5.3
    ELSA-2024-12364 2 CVEs

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-4_fips] - Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35925409] - Update FIPS module name for Oracle Linux [Orabug: 35925409] [3.8.3-4] - Bump release to ensure el9 package is greater than el9_* packages [3.8.3-3] -…

  • Medium max 7.1
    ELSA-2024-2758 3 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 9)

    [5.14.0-427.16.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 7.5
    ELSA-2024-2564 1 CVE

    Moderate: mod_http2 security update (Oracle Linux 9)

    [2.0.26-2] - Resolves: RHEL-31855 - mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) [2.0.26-1] - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26

  • Medium max 7.5
    ELSA-2024-2550 1 CVE

    Moderate: buildah bug fix update (Oracle Linux 9)

    [1.33.7-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/b95e962) - Res…

  • Medium max 6.8
    ELSA-2024-2559 1 CVE

    Moderate: python-jwcrypto security update (Oracle Linux 9)

    [0.8-5] - Address potential DoS with high compression ratio Resolves: RHEL-28698

  • Medium max 5.3
    ELSA-2024-2570 2 CVEs

    Moderate: gnutls security update (Oracle Linux 9)

    [3.8.3-4] - Bump release to ensure el9 package is greater than el9_* packages [3.8.3-3] - Bump release to ensure el9 package is greater than el9_* packages [3.8.3-2] - Fix timing side-channel in deterministic ECDSA (RHEL-28959) - Fix potential crash during ch…

  • Medium max 8.6
    ELSA-2024-2548 2 CVEs

    Moderate: podman security and bug fix update (Oracle Linux 9)

    [4.9.4-3.0.1] - Add devices on container startup, not on creation - Backport fast gzip for compression [Orabug: 36420418] - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug…

  • Medium max 6.5
    ELSA-2024-2565 1 CVE

    Moderate: libreswan security update (Oracle Linux 9)

    [4.12-2.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2] - Fix CVE-2024-2357 (RHEL-32761) - x509: unpack IPv6 general names based on length (RHEL-32718)

  • Medium max 6.2
    ELSA-2024-2560 2 CVEs

    Moderate: libvirt security and bug fix update (Oracle Linux 9)

    [10.0.0-6.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.0.0-6.2.el9_4] - qemu: Fix migration with custom XML (RHEL-32654) [10.0.0-6.1.el9_4] - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441, RHEL-25081) - remote: chec…

  • Medium max 7.1
    ELSA-2024-2571 1 CVE

    Moderate: sssd security and bug fix update (Oracle Linux 9)

    [2.9.4-6.0.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-6] - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0] [2.9.4-5] - Resolves: RHEL-28161 - Passkey cannot…

  • Medium max 7.5
    ELSA-2024-2549 2 CVEs

    Moderate: skopeo security and bug fix update (Oracle Linux 9)

    [2:1.14.3-2] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14 (https://github.com/containers/skopeo/commit/5f2b9af) - Resolves: RHEL-28736 [2:1.14.3-1] - update to the latest content of https://github.com/containers/sko…

  • Medium max 7.5
    ELSA-2024-2679 1 CVE

    Moderate: libxml2 security update (Oracle Linux 9)

    [2.9.13-6] - Fix CVE-2024-25062 (RHEL-29196)

  • Medium max 7.5
    ELSA-2024-2568 2 CVEs

    Moderate: grafana security update (Oracle Linux 9)

    [9.2.10-16] - Check OrdID is correct before deleting snapshot - fix CVE-2024-1313 - fix CVE-2024-1394

  • Medium max 6.1
    ELSA-2024-2119 1 CVE

    Moderate: Image builder components bug fix, enhancement and security update (Oracle Linux 9)

    osbuild [110-1] - New upstream release [109-1] - New upstream release [106-1] - New upstream release [105-1] - New upstream release [104-2] - Fix unit tests in RHEL CI by backporting upstream fixes [104-1] - New upstream release [103-1] - New upstream release…

  • Medium max 6.0
    ELSA-2024-2213 1 CVE

    Moderate: pcp security update (Oracle Linux 9)

    [6.2.0-1.0.1] - Fixed libpcp derived metric issue for ol9 [Orabug: 36538820] [6.2.0-1] - Rebase to latest stable version of PCP (RHEL-2317) [6.1.1-4] - Fix pcp-ss(1) handling of UDP packet states (RHEL-17649) [6.1.1-2] - Fix pcp-ss(1) default handling of list…

  • Medium max 7.5
    ELSA-2024-2456 3 CVEs

    Moderate: grub2 security update (Oracle Linux 9)

    [2.06-77.0.1] - Support setting custom kernels as default kernels [Orabug: 36043978] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] - Fix CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back bt…

  • Medium max 8.8
    ELSA-2024-2525 1 CVE

    Moderate: ming2-puxman security update (Oracle Linux 9)

    [0.42.2-3] - Bump pixman version 0.42.2 - Drop DesktopQE gating - Fix CVEs: CVE-2022-44638 - Resolves: RHEL-5013

  • Medium
    ELSA-2024-2245 2 CVEs

    Moderate: buildah security update (Oracle Linux 9)

    [1.33.6-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.6-2] - update tags for systemd libsubid - Resolves: RHEL-26594 [2:1.33.6-1] - update to the latest content of https://github.com/containers/buildah/tree/re…

  • Medium
    ELSA-2024-2278 1 CVE

    Moderate: httpd security update (Oracle Linux 9)

    [2.4.57-8.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-8] - mod_xml2enc: fix media type handling Resolves: RHEL-17686 - mod_dav: add DavBasePath Resolves: RHEL-6600 [2.4.57-7] - Resolves: RHEL-14447 - httpd: mod_macro: out-of-…

  • Medium max 6.2
    ELSA-2024-2433 5 CVEs

    Moderate: avahi security update (Oracle Linux 9)

    [0.8-20] - Fix CVE-2023-38469 (RHEL-5637) [0.8-19] - Fix CVE-2023-38471 (RHEL-5642) [0.8-18] - Fix CVE-2023-38472 (RHEL-5645) [0.8-17] - Fix CVE-2023-38470 (RHEL-5641) [0.8-16] - Fix CVE-2023-38473 (RHEL-5729)

  • Medium max 5.5
    ELSA-2024-2438 1 CVE

    Moderate: pam security update (Oracle Linux 9)

    [1.3.1-19.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.3.1-19] - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 [1.3.1-18] - libpam: use getlogin() from…

  • Medium max 5.0
    ELSA-2024-2236 1 CVE

    Moderate: libvirt security update (Oracle Linux 9)

    [10.0.0-6.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.0.0-6] - qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386) - qemu: virtiofs: set correct label when creating the socket (RHEL-7386) - qemu: virtiofs: error out if getti…

  • Medium max 5.3
    ELSA-2024-2147 1 CVE

    Moderate: ipa security update (Oracle Linux 9)

    [4.11.0-9.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.11.0-9] - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode - Resolves: RHEL-26154 i…

  • Medium
    ELSA-2024-2193 2 CVEs

    Moderate: podman security update (Oracle Linux 9)

    [2:4.9.4-0.1.0.1] - Add devices on container startup, not on creation - Backport fast gzip for compression [Orabug: 36420418] - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Or…