Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 5.9
    ELSA-2024-2463 1 CVE

    Moderate: systemd security update (Oracle Linux 9)

    [252-32.0.2] - Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to - previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved. - Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orab…

  • Medium max 4.3
    ELSA-2024-2290 2 CVEs

    Moderate: mutt security update (Oracle Linux 9)

    [5:2.2.6-2] - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2812

  • Medium
    ELSA-2024-2272 2 CVEs

    Moderate: containernetworking-plugins security update (Oracle Linux 9)

    [1:1.4.0-2] - rebuild - Related: RHEL-18372 [1:1.4.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0 - Related: RHEL-2112 [1:1.3.0-5] - fix path to dhcp service - Resolves: #RHEL-3140 [1:1.3.0-4] - add Epoch in Provides - Rel…

  • Medium max 7.6
    ELSA-2024-2303 1 CVE

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

    [1.22.1-2] - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC image tag handling - Resolves: RHEL-19471

  • Medium
    ELSA-2024-2239 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.14.3-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14 (https://github.com/containers/skopeo/commit/1c2ab99) - Related: RHEL-2112 [2:1.14.1-2] - Switch to the maint branch - Related: Jira:RHEL-2112 [2:1.14.1-1]…

  • Medium
    ELSA-2024-2377 1 CVE

    Moderate: zziplib security update (Oracle Linux 9)

    [0.13.71-11] - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 [0.13.71-10] - Fix CVE-2020-18770 Resolves: RHEL-14967

  • Medium max 6.5
    ELSA-2024-2135 5 CVEs

    Moderate: qemu-kvm security update (Oracle Linux 9)

    [8.2.0-11] - kvm-coroutine-cap-per-thread-local-pool-size.patch [RHEL-28947] - kvm-coroutine-reserve-5-000-mappings.patch [RHEL-28947] - Resolves: RHEL-28947 (Qemu crashing with 'failed to set up stack guard page: Cannot allocate memory') [8.2.0-10] - kvm-cha…

  • Medium max 9.1
    ELSA-2024-2156 8 CVEs

    Moderate: frr security update (Oracle Linux 9)

    [8.5.3-4] - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash [8.5.3-3] - Resolves: RHEL-14822 - mishandled malformed data leading to a crash [8.5.3-2] - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPD…

  • Medium
    ELSA-2024-2368 2 CVEs

    Moderate: mod_http2 security update (Oracle Linux 9)

    [2.0.26-1] - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26

  • Medium max 5.9
    ELSA-2024-2132 3 CVEs

    Moderate: fence-agents security and bug fix update (Oracle Linux 9)

    [4.10.0-62] - bundled urllib3: fix CVE-2023-45803 Resolves: RHEL-18139 - bundled pycryptodome: fix CVE-2023-52323 Resolves: RHEL-20917 - bundled jinja2: fix CVE-2024-22195 Resolves: RHEL-21345 [4.10.0-61] - fence_zvmip: document required user permissions in m…

  • Medium max 7.5
    ELSA-2024-2366 2 CVEs

    Moderate: freeglut security update (Oracle Linux 9)

    [3.2.1-10] - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178

  • Medium max 6.5
    ELSA-2024-2517 1 CVE

    Moderate: wpa_supplicant security update (Oracle Linux 9)

    [1:2.10-5] - Support macsec HW offload. Resolves: RHEL-22440 - Backport fix for PEAP client (CVE-2023-52160)

  • Medium max 7.5
    ELSA-2024-2410 1 CVE

    Moderate: harfbuzz security update (Oracle Linux 9)

    [2.7.4-10] - Resolves:RHEL-2268 Fix CI tests results [2.7.4-9] - Resolves:RHEL-2268 CVE-2023-25193

  • Medium max 8.8
    ELSA-2024-2287 4 CVEs

    Moderate: gstreamer1-plugins-bad-free security update (Oracle Linux 9)

    [1.22.1-4] - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF - CVE-2023-40476: Integer overflow in H.265 video parser - ZDI-CAN-22300: buffer overflow vulnerability - Resolv…

  • Medium max 5.9
    ELSA-2024-2159 1 CVE

    Moderate: python3.11-urllib3 security update (Oracle Linux 9)

    [1.26.12-2] - Security fix for CVE-2023-43804 Resolves: RHEL-12003

  • Medium max 7.5
    ELSA-2024-2387 2 CVEs

    Moderate: mod_jk and mod_proxy_cluster security update (Oracle Linux 9)

    mod_jk [1.2.49-1] - Related: RHEL-27511 - Rebase to upstream 1.2.49 release mod_proxy_cluster [1.3.20-1] - Rebase mod_cluster to upstream 1.3.20.Final tag - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release

  • Medium
    ELSA-2024-2184 1 CVE

    Moderate: libsndfile security update (Oracle Linux 9)

    [1.0.31-8] - fix integer overflows causing CVE-2022-33065 (#RHEL-3751)

  • Medium max 5.0
    ELSA-2024-2246 1 CVE

    Moderate: ansible-core bug fix, enhancement, and security update (Oracle Linux 9)

    [1:2.14.14-1] - ansible-core 2.14.14 release (RHEL-23783) - Fix CVE-2024-0690 (possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration) (RHEL-22124) [1:2.14.13-1] - ansible-core 2.14.13 release (RHEL-19298) [1:2.14.12-1] - ansible-core 2.1…

  • Medium max 7.5
    ELSA-2024-2180 4 CVEs

    Moderate: runc security update (Oracle Linux 9)

    [4:1.1.12-2] - Switch dependency on criu to Recommends - Resolves: RHEL-25116

  • Medium
    ELSA-2024-2437 1 CVE

    Moderate: exfatprogs security update (Oracle Linux 9)

    [1.2.2-2] - Backport fixes for issues found by OpenScanHub - Related: RHEL-7945 [1.2.2-1] - Rebase to upstream v1.2.2 - Related: RHEL-15865 - Related: RHEL-14995

  • Medium max 5.3
    ELSA-2024-2292 1 CVE

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.7-1] - Rebase to 3.11.7 Resolves: RHEL-20233 [3.11.5-2] - Security fix for CVE-2023-27043 Resolves: RHEL-21325

  • Medium
    ELSA-2024-2295 1 CVE

    Moderate: libjpeg-turbo security update (Oracle Linux 9)

    [2.0.90.7] - Fix CVE-2021-29390 - Resolves: RHEL-5413

  • Medium max 5.5
    ELSA-2024-2217 2 CVEs

    Moderate: motif security update (Oracle Linux 9)

    [2.3.4-28] - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap

  • Medium max 6.5
    ELSA-2024-2208 12 CVEs

    Moderate: freerdp security update (Oracle Linux 9)

    [2:2.11.2-1] - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300, RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312, RHEL-10060)

  • Medium max 7.8
    ELSA-2024-2145 3 CVEs

    Moderate: libX11 security update (Oracle Linux 9)

    [1.7.0-9] - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms() - Fix CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage() - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to a heap overflow

  • Medium max 8.8
    ELSA-2024-2302 1 CVE

    Moderate: gstreamer1-plugins-base security update (Oracle Linux 9)

    [1.22.1-2] - CVE-2023-37328: heap overwrite in subtitle parsing - Resolves: RHEL-19475

  • Medium
    ELSA-2024-2396 2 CVEs

    Moderate: squashfs-tools security update (Oracle Linux 9)

    [4.4-10.git1] - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination rhbz#2007304 RHEL-7763 [4.4-9.git1] - CVE-2021-40153 squashfs-t…

  • Medium max 5.5
    ELSA-2024-2483 1 CVE

    Moderate: traceroute security update (Oracle Linux 9)

    [3:2.1.0-18] - add gating.yaml [3:2.1.0-17] - fix improper command line parsing (CVE-2023-46316)

  • Medium max 6.5
    ELSA-2024-2289 5 CVEs

    Moderate: libtiff security update (Oracle Linux 9)

    [4.4.0-12] - Fix CVE-2023-6228 - Resolves: RHEL-10084 [4.4.0-11] - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175 - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450

  • Medium max 5.5
    ELSA-2024-2146 2 CVEs

    Moderate: libXpm security update (Oracle Linux 9)

    [3.5.13-10] - Drop hardening patches from previous version to keep ABI compatibility [3.5.13-9] - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap ov…

  • Medium max 5.8
    ELSA-2024-2113 3 CVEs

    Moderate: pcs security update (Oracle Linux 9)

    [0.11.7-2] - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26446, RHEL-26448, RHEL-26450 [0.11.7-1] - Rebased to the latest sources (see CHANGELOG.md) Resolves: RHEL-7740 [0.11.6-6] - Rebased to the latest upst…

  • Medium max 5.3
    ELSA-2024-2204 2 CVEs

    Moderate: libnbd security update (Oracle Linux 9)

    [1.18.1-3] - Backport unit test of recent libnbd API addition resolves: RHEL-16292 [1.18.1-2] - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 [1.18.1-1] - Rebase to 1.18.1 resolves: RHEL-14476

  • Medium max 9.8
    ELSA-2024-2169 10 CVEs

    Moderate: xorg-x11-server security update (Oracle Linux 9)

    [1.20.4-24] - Fix use after free related to CVE-2024-21886 [1.20.11-23] - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and CVE-2024-0409 Resolves: https://issues.redhat.com/browse/RHEL-21203 Resolves: https://issues…

  • Medium
    ELSA-2024-2211 1 CVE

    Moderate: tcpdump security update (Oracle Linux 9)

    [14:4.99.0-9] - Resolves: RHEL-21558 - tcpslice: use-after-free in extract_slice() [14:4.99.0-8] - Resolves: RHEL-10714 - Fix PGM option printing

  • Medium max 7.8
    ELSA-2024-2353 1 CVE

    Moderate: mingw components security update (Oracle Linux 9)

    mingw-binutils [2.41-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild [2.41-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild [2.41-1] - Update to 2.41 [2.40-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_…

  • Medium max 9.8
    ELSA-2024-2170 9 CVEs

    Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

    [21.1.9-5] Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408, CVE-2024-0409 [21.1.9-4] - Fix for CVE-2023-6377, CVE-2023-6478 [22.1.9-3] - Fix for CVE-2023-5367

  • Medium max 5.4
    ELSA-2024-2348 1 CVE

    Moderate: python-jinja2 security update (Oracle Linux 9)

    [2.11.3-5] - Security fix for CVE-2024-22195 Resolves: RHEL-21349

  • Medium max 7.0
    ELSA-2024-2228 1 CVE

    Moderate: perl security update (Oracle Linux 9)

    [4:5.32.1-481] - Fixes: CVE-2023-47038

  • Medium max 6.2
    ELSA-2024-2276 2 CVEs

    Moderate: qt5-qtbase security update (Oracle Linux 9)

    [5.15.9-9] - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 [5.15.9-8] - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239

  • Medium max 5.9
    ELSA-2024-2337 1 CVE

    Moderate: python3.11-cryptography security update (Oracle Linux 9)

    [37.0.2-6] - Security fix for CVE-2023-49083 - Resolves: RHEL-19832