Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • High max 7.5
    ELSA-2024-2562 7 CVEs

    Important: golang security update (Oracle Linux 9)

    [1.21.9-2] - Rebuilt for z-stream - Related: RHEL-24312 - Related: RHEL-28940 [1.21.9-1] - Fix CVE-2024-1394 - Fix CVE-2023-45288 - Resolves RHEL-24312 - Resolves RHEL-28940

  • High max 8.3
    ELSA-2024-2264 8 CVEs

    Important: edk2 security update (Oracle Linux 9)

    [20231122-6.0.1] - Replace upstream references [Orabug:36569119] [20231122-6] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] - edk2-NetworkPkg-Add-Unit-tests-to-…

  • Medium max 6.1
    ELSA-2024-2119 1 CVE

    Moderate: Image builder components bug fix, enhancement and security update (Oracle Linux 9)

    osbuild [110-1] - New upstream release [109-1] - New upstream release [106-1] - New upstream release [105-1] - New upstream release [104-2] - Fix unit tests in RHEL CI by backporting upstream fixes [104-1] - New upstream release [103-1] - New upstream release…

  • Medium max 6.0
    ELSA-2024-2213 1 CVE

    Moderate: pcp security update (Oracle Linux 9)

    [6.2.0-1.0.1] - Fixed libpcp derived metric issue for ol9 [Orabug: 36538820] [6.2.0-1] - Rebase to latest stable version of PCP (RHEL-2317) [6.1.1-4] - Fix pcp-ss(1) handling of UDP packet states (RHEL-17649) [6.1.1-2] - Fix pcp-ss(1) default handling of list…

  • Medium max 7.5
    ELSA-2024-2456 3 CVEs

    Moderate: grub2 security update (Oracle Linux 9)

    [2.06-77.0.1] - Support setting custom kernels as default kernels [Orabug: 36043978] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] - Fix CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back bt…

  • Low max 5.5
    ELSA-2024-2528 4 CVEs

    Low: mingw-glib2 security update (Oracle Linux 9)

    [2.78.0-1] - Bump glib2 version 2.78.0 - Drop DesktopQE gating - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS - Resolves: RHEL-5019 - Resolves: RHEL-5020 - Resolves: RHEL-5092 - Resolves: RHEL-5093 - Resolves: RHEL-5094

  • Medium max 8.8
    ELSA-2024-2525 1 CVE

    Moderate: ming2-puxman security update (Oracle Linux 9)

    [0.42.2-3] - Bump pixman version 0.42.2 - Drop DesktopQE gating - Fix CVEs: CVE-2022-44638 - Resolves: RHEL-5013

  • Medium
    ELSA-2024-2245 2 CVEs

    Moderate: buildah security update (Oracle Linux 9)

    [1.33.6-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.6-2] - update tags for systemd libsubid - Resolves: RHEL-26594 [2:1.33.6-1] - update to the latest content of https://github.com/containers/buildah/tree/re…

  • Medium
    ELSA-2024-2278 1 CVE

    Moderate: httpd security update (Oracle Linux 9)

    [2.4.57-8.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-8] - mod_xml2enc: fix media type handling Resolves: RHEL-17686 - mod_dav: add DavBasePath Resolves: RHEL-6600 [2.4.57-7] - Resolves: RHEL-14447 - httpd: mod_macro: out-of-…

  • Medium max 6.2
    ELSA-2024-2433 5 CVEs

    Moderate: avahi security update (Oracle Linux 9)

    [0.8-20] - Fix CVE-2023-38469 (RHEL-5637) [0.8-19] - Fix CVE-2023-38471 (RHEL-5642) [0.8-18] - Fix CVE-2023-38472 (RHEL-5645) [0.8-17] - Fix CVE-2023-38470 (RHEL-5641) [0.8-16] - Fix CVE-2023-38473 (RHEL-5729)

  • Medium max 5.5
    ELSA-2024-2438 1 CVE

    Moderate: pam security update (Oracle Linux 9)

    [1.3.1-19.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.3.1-19] - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 [1.3.1-18] - libpam: use getlogin() from…

  • Medium max 5.0
    ELSA-2024-2236 1 CVE

    Moderate: libvirt security update (Oracle Linux 9)

    [10.0.0-6.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.0.0-6] - qemu: virtiofs: do not crash if cgroups are missing (RHEL-7386) - qemu: virtiofs: set correct label when creating the socket (RHEL-7386) - qemu: virtiofs: error out if getti…

  • Medium max 5.3
    ELSA-2024-2147 1 CVE

    Moderate: ipa security update (Oracle Linux 9)

    [4.11.0-9.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.11.0-9] - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode - Resolves: RHEL-26154 i…

  • Medium
    ELSA-2024-2193 2 CVEs

    Moderate: podman security update (Oracle Linux 9)

    [2:4.9.4-0.1.0.1] - Add devices on container startup, not on creation - Backport fast gzip for compression [Orabug: 36420418] - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Or…

  • Low max 6.5
    ELSA-2024-2447 7 CVEs

    Low: openssl and openssl-fips-provider security update (Oracle Linux 9)

    openssl [1:3.0.7-27.0.3] - Enable openssl-fips-provider dependency [Orabug: 36504822] [1:3.0.7-27.0.2] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] [1:3.0.7-27.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.7-27] - Use…

  • Medium max 5.9
    ELSA-2024-2463 1 CVE

    Moderate: systemd security update (Oracle Linux 9)

    [252-32.0.2] - Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to - previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved. - Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orab…

  • Medium max 4.3
    ELSA-2024-2290 2 CVEs

    Moderate: mutt security update (Oracle Linux 9)

    [5:2.2.6-2] - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2812

  • Medium
    ELSA-2024-2272 2 CVEs

    Moderate: containernetworking-plugins security update (Oracle Linux 9)

    [1:1.4.0-2] - rebuild - Related: RHEL-18372 [1:1.4.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.0 - Related: RHEL-2112 [1:1.3.0-5] - fix path to dhcp service - Resolves: #RHEL-3140 [1:1.3.0-4] - add Epoch in Provides - Rel…

  • High max 7.0
    ELSA-2024-2298 2 CVEs

    Important: tigervnc security update (Oracle Linux 9)

    [1.13.1-8] - Fix copy/paste error in the DeviceStateNotify Resolves: RHEL-20533 [1.13.1-7] - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20389 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer o…

  • Medium max 7.6
    ELSA-2024-2303 1 CVE

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

    [1.22.1-2] - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC image tag handling - Resolves: RHEL-19471

  • Medium
    ELSA-2024-2239 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.14.3-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14 (https://github.com/containers/skopeo/commit/1c2ab99) - Related: RHEL-2112 [2:1.14.1-2] - Switch to the maint branch - Related: Jira:RHEL-2112 [2:1.14.1-1]…

  • Medium
    ELSA-2024-2377 1 CVE

    Moderate: zziplib security update (Oracle Linux 9)

    [0.13.71-11] - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 [0.13.71-10] - Fix CVE-2020-18770 Resolves: RHEL-14967

  • Medium max 6.5
    ELSA-2024-2135 5 CVEs

    Moderate: qemu-kvm security update (Oracle Linux 9)

    [8.2.0-11] - kvm-coroutine-cap-per-thread-local-pool-size.patch [RHEL-28947] - kvm-coroutine-reserve-5-000-mappings.patch [RHEL-28947] - Resolves: RHEL-28947 (Qemu crashing with 'failed to set up stack guard page: Cannot allocate memory') [8.2.0-10] - kvm-cha…

  • Medium max 9.1
    ELSA-2024-2156 8 CVEs

    Moderate: frr security update (Oracle Linux 9)

    [8.5.3-4] - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash [8.5.3-3] - Resolves: RHEL-14822 - mishandled malformed data leading to a crash [8.5.3-2] - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPD…

  • Medium
    ELSA-2024-2368 2 CVEs

    Moderate: mod_http2 security update (Oracle Linux 9)

    [2.0.26-1] - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26

  • Medium max 5.9
    ELSA-2024-2132 3 CVEs

    Moderate: fence-agents security and bug fix update (Oracle Linux 9)

    [4.10.0-62] - bundled urllib3: fix CVE-2023-45803 Resolves: RHEL-18139 - bundled pycryptodome: fix CVE-2023-52323 Resolves: RHEL-20917 - bundled jinja2: fix CVE-2024-22195 Resolves: RHEL-21345 [4.10.0-61] - fence_zvmip: document required user permissions in m…

  • Medium max 7.5
    ELSA-2024-2366 2 CVEs

    Moderate: freeglut security update (Oracle Linux 9)

    [3.2.1-10] - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178

  • Low max 4.8
    ELSA-2024-2504 2 CVEs

    Low: libssh security update (Oracle Linux 9)

    [0.10.4-13] - Bump up the version so that the version in 9.3 is lower. - Resolves: RHEL-19310, RHEL-19691, RHEL-17245

  • Medium max 6.5
    ELSA-2024-2517 1 CVE

    Moderate: wpa_supplicant security update (Oracle Linux 9)

    [1:2.10-5] - Support macsec HW offload. Resolves: RHEL-22440 - Backport fix for PEAP client (CVE-2023-52160)

  • Medium max 7.5
    ELSA-2024-2410 1 CVE

    Moderate: harfbuzz security update (Oracle Linux 9)

    [2.7.4-10] - Resolves:RHEL-2268 Fix CI tests results [2.7.4-9] - Resolves:RHEL-2268 CVE-2023-25193

  • Medium max 8.8
    ELSA-2024-2287 4 CVEs

    Moderate: gstreamer1-plugins-bad-free security update (Oracle Linux 9)

    [1.22.1-4] - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF - CVE-2023-40476: Integer overflow in H.265 video parser - ZDI-CAN-22300: buffer overflow vulnerability - Resolv…

  • Medium max 5.9
    ELSA-2024-2159 1 CVE

    Moderate: python3.11-urllib3 security update (Oracle Linux 9)

    [1.26.12-2] - Security fix for CVE-2023-43804 Resolves: RHEL-12003

  • Medium max 7.5
    ELSA-2024-2387 2 CVEs

    Moderate: mod_jk and mod_proxy_cluster security update (Oracle Linux 9)

    mod_jk [1.2.49-1] - Related: RHEL-27511 - Rebase to upstream 1.2.49 release mod_proxy_cluster [1.3.20-1] - Rebase mod_cluster to upstream 1.3.20.Final tag - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release

  • Medium
    ELSA-2024-2184 1 CVE

    Moderate: libsndfile security update (Oracle Linux 9)

    [1.0.31-8] - fix integer overflows causing CVE-2022-33065 (#RHEL-3751)

  • Medium max 5.0
    ELSA-2024-2246 1 CVE

    Moderate: ansible-core bug fix, enhancement, and security update (Oracle Linux 9)

    [1:2.14.14-1] - ansible-core 2.14.14 release (RHEL-23783) - Fix CVE-2024-0690 (possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration) (RHEL-22124) [1:2.14.13-1] - ansible-core 2.14.13 release (RHEL-19298) [1:2.14.12-1] - ansible-core 2.1…

  • Medium max 7.5
    ELSA-2024-2180 4 CVEs

    Moderate: runc security update (Oracle Linux 9)

    [4:1.1.12-2] - Switch dependency on criu to Recommends - Resolves: RHEL-25116

  • High
    ELSA-2024-2199 1 CVE

    Important: pmix security update (Oracle Linux 9)

    [3.2.3-5] - Add pmix_test - Resolves: RHEL-3693 [3.2.3-4] - Fix CVE-2023-41915 - Resolves: RHEL-3693

  • Medium
    ELSA-2024-2437 1 CVE

    Moderate: exfatprogs security update (Oracle Linux 9)

    [1.2.2-2] - Backport fixes for issues found by OpenScanHub - Related: RHEL-7945 [1.2.2-1] - Rebase to upstream v1.2.2 - Related: RHEL-15865 - Related: RHEL-14995

  • Medium max 5.3
    ELSA-2024-2292 1 CVE

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.7-1] - Rebase to 3.11.7 Resolves: RHEL-20233 [3.11.5-2] - Security fix for CVE-2023-27043 Resolves: RHEL-21325

  • Medium
    ELSA-2024-2295 1 CVE

    Moderate: libjpeg-turbo security update (Oracle Linux 9)

    [2.0.90.7] - Fix CVE-2021-29390 - Resolves: RHEL-5413