Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • High max 8.0
    ELSA-2024-0974 1 CVE

    Important: postgresql:12 security update (Oracle Linux 8)

    pgaudit [1.4.0-7] - Release bump to avoid regression in nvrs - Resolves: RHEL-24969 pg_repack postgres-decoderbufs postgresql [12.18-1.0.1] - Update to version 12.18 - Fixes CVE-2024-0985

  • High max 8.1
    ELSA-2024-0963 8 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.8.0-1.0.1] - Add Oracle modifications [115.8.0-1] - Update to 115.8.0 build1

  • High max 8.1
    ELSA-2024-0976 8 CVEs

    Important: firefox security update (Oracle Linux 7)

    [115.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.8.0-1] - Update to 115.8.0 build1

  • High max 8.1
    ELSA-2024-0957 8 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [115.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.8.0-1] - Update to 115.8.0 build1

  • High max 8.1
    ELSA-2024-0955 8 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.8.0-1.0.1] - Update to 115.8.0 build 1

  • High max 8.0
    ELSA-2024-0973 1 CVE

    Important: postgresql:15 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [15.6-1] - update to 15.6 - Fixes CVE-2024-0985

  • High max 8.0
    ELSA-2024-0975 1 CVE

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [13.14-1.0.1] - update to 13.14 - Fixes CVE-2024-0985

  • Medium max 5.6
    ELSA-2024-0967 1 CVE

    Moderate: opensc security update (Oracle Linux 8)

    [0.20.0-8] - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding

  • Medium max 5.6
    ELSA-2024-0966 1 CVE

    Moderate: opensc security update (Oracle Linux 9)

    [0.23.0-4] - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding

  • High max 8.0
    ELSA-2024-0950 1 CVE

    Important: postgresql:15 security update (Oracle Linux 9)

    pgaudit pg_repack postgres-decoderbufs postgresql [15.6-1] - update to 15.6 - Fixes CVE-2024-0985

  • High max 7.0
    ELSA-2024-0346 1 CVE

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.108.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.108.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

  • High max 8.0
    ELSA-2024-0951 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.14-1.0.1] - Update to 13.14 - Fixes CVE-2024-0985

  • High max 8.1
    ELSA-2024-0952 8 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.8.0-1.0.1] - Update to 115.8.0 build 1

  • High max 7.8
    ELSA-2024-12169 16 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-513.18.0.1_9.OL8] - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - HID: check empty report_list in hid_validate_values() {CVE-2023-1073} - Fix double fget() in vhost_…

  • Medium
    ELSA-2024-0887 2 CVEs

    Moderate: go-toolset:ol8 security update (Oracle Linux 8)

    delve [1.20.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.20.2-1] - Rebase to 1.20.2 - Resolves: rhbz#2186495 golang [1.20.12-1] - Update to Go 1.20.12 - Fix CVE-2023-39326 CVE-2023-45285 go-toolset [1.20.12-1] - Update to Go 1.20.…

  • Medium max 7.5
    ELSA-2024-0894 75 CVEs

    Moderate: mysql:8.0 security update (Oracle Linux 8)

    mecab mecab-ipadic mysql [8.0.36-1] - Update to MySQL 8.0.36 [8.0.35-2] - Fix int-conversion type error in memcached [8.0.35-1] - Update to MySQL 8.0.35 - Remove patches now upstream [8.0.34-1] - Update to MySQL 8.0.34 - Add patch from upstream bug#110569 - A…

  • High max 7.5
    ELSA-2024-0827 2 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.102-2.0.1] - Update to .NET SDK 8.0.102 and Runtime 8.0.2 - Add -dbg subpackages for symbol files - Resolves: RHEL-23070

  • High max 7.8
    ELSA-2024-0861 2 CVEs

    Important: gimp:2.8 security update (Oracle Linux 8)

    gimp [2:2.8.22-25] - fix CVE-2023-44442 - fix CVE-2023-44444 pygobject2 pygtk2 [2.24.0-25] - Fix shebang mangling for _prefix=app (#1907579) - disable numpy for flatpak (#1907579) python2-pycairo

  • High max 8.1
    ELSA-2024-0893 1 CVE

    Important: python-pillow security update (Oracle Linux 8)

    [5.1.1-18.1] - Security fix for CVE-2023-50447 Resolves: RHEL-22240

  • Low max 5.3
    ELSA-2024-0888 1 CVE

    Low: edk2 security update (Oracle Linux 8)

    [20220126gitbb1bba3d77-6.el8_9.3] - edk2-Bumped-openssl-submodule-version-to-cf317b2bb227.patch [RHEL-7560] - Resolves: RHEL-7560 (CVE-2023-3446 edk2: openssl: Excessive time spent checking DH keys and parameters [rhel-8])

  • High max 9.1
    ELSA-2024-0150 3 CVEs

    Important: .NET 8.0 security update (Oracle Linux 8)

    [8.0.101-1.0.1] - Add support for Oracle Linux - Update to .NET SDK 8.0.101 and Runtime 8.0.1

  • Medium
    ELSA-2024-0889 5 CVEs

    Moderate: oniguruma security update (Oracle Linux 8)

    [6.8.2-2.1] - Fix CVE-2019-13224 Resolves: RHEL-6970 - Fix CVE-2019-16163 Resolves: RHEL-9506 - Fix CVE-2019-19012 Resolves: RHEL-9511 - Fix CVE-2019-19203 Resolves: RHEL-9510 - Fix CVE-2019-19204 Resolves: RHEL-9509

  • High max 8.1
    ELSA-2024-0857 1 CVE

    Important: python-pillow security update (Oracle Linux 7)

    [2.0.0-25gitd1c6db8] - Security fix for CVE-2023-50447 Resolves: RHEL-22239

  • High max 7.5
    ELSA-2024-0848 2 CVEs

    Important: .NET 8.0 security update (Oracle Linux 9)

    [8.0.102-2.0.1] - Update to .NET SDK 8.0.102 and Runtime 8.0.2 - Add -dbg subpackages for symbol files - Resolves: RHEL-23070

  • High max 7.5
    ELSA-2024-0808 2 CVEs

    Important: dotnet6.0 security update (Oracle Linux 8)

    [6.0.127-1.0.1] - Update to .NET SDK 6.0.127 and Runtime 6.0.27

  • High max 7.5
    ELSA-2024-0806 2 CVEs

    Important: dotnet7.0 security update (Oracle Linux 8)

    [7.0.116-1.0.1] - Update to .NET SDK 7.0.116 and Runtime 7.0.16

  • High max 7.5
    ELSA-2024-0807 2 CVEs

    Important: dotnet6.0 security update (Oracle Linux 9)

    [6.0.127-1.0.1] - Update to .NET SDK 6.0.127 and Runtime 6.0.27

  • High max 7.5
    ELSA-2024-0805 2 CVEs

    Important: dotnet7.0 security update (Oracle Linux 9)

    [7.0.116-1.0.1] - Update to .NET SDK 7.0.116 and Runtime 7.0.16

  • Medium max 6.5
    ELSA-2024-12164 2 CVEs

    Moderate: openssh security update (Oracle Linux 8)

    [8.0p1-19.0.1.2] - Update patches for CVE-2023-51385, CVE-2023-48795 [Orabug: 36256632] [8.0p1-19.2] - Forbid shell metasymbols in username/hostname Resolves: CVE-2023-51385 - Fix Terrapin attack Resolves: CVE-2023-48795

  • High max 8.6
    ELSA-2024-0752 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    aardvark-dns buildah [1:1.31.3-3.0.1] - Rebuild with newer dependencies cockpit-podman conmon containernetworking-plugins [1:1.3.0-8.0.1] - Rebuild with newer dependencies containers-common [2:1-70.0.2] - Rebuild with newer dependencies container-selinux criu…

  • High max 8.6
    ELSA-2024-0748 2 CVEs

    Important: container-tools:4.0 security update (Oracle Linux 8)

    buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman [2:4.0.2-25.0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel …

  • Medium
    ELSA-2024-0811 3 CVEs

    Moderate: sudo security update (Oracle Linux 8)

    RHEL 9.3.0.Z ERRATUM [1.9.5p2-10] - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21828 - CVE-2023-42465 sud…

  • Medium max 5.9
    ELSA-2024-12157 1 CVE

    Moderate: openssh security update (Oracle Linux 7)

    [7.4p1-23.0.3] - add KEX_INITIAL flag [Orabug: 36160445] - implement 'strict key exchange' [CVE-2023-48795][Orabug: 36160445]

  • Medium max 5.9
    ELSA-2024-12158 1 CVE

    Moderate: openssh security update (Oracle Linux 7)

    [7.4p1-23.0.3] - add KEX_INITIAL flag [Orabug: 36160445] - implement 'strict key exchange' [CVE-2023-48795][Orabug: 36160445]

  • Medium
    ELSA-2024-0769 1 CVE

    Moderate: tcpdump security update (Oracle Linux 8)

    [14:4.9.3-3.1] - tcpslice: use-after-free in extract_slice() (CVE-2021-41043)

  • Medium
    ELSA-2024-0786 1 CVE

    Moderate: nss security update (Oracle Linux 8)

    [3.90.0-6] - Fix ecc DER wrapping. [3.90.0-5] - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes

  • Medium
    ELSA-2024-0790 1 CVE

    Moderate: nss security update (Oracle Linux 9)

    [3.90.0-6] - Fix ecc DER wrapping. [3.90.0-5] - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes

  • High max 7.8
    ELSA-2024-12159 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-203.146.5.1] - Revert 'selftests/bpf: Test tail call counting with bpf2bpf and data on stack' (Samasth Norway Ananda) [Orabug: 36277693] - Revert 'tcp: fix excessive TLP and RACK timeouts from HZ rounding' (Sherry Yang) [Orabug: 36277684] [5.15.0-203.…

  • High max 5.6
    ELSA-2024-12150 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.533.3] - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski) - sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185208] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36…

  • High max 7.8
    ELSA-2024-12153 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.328.3.el7] - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143228] - KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36154654] - sched/fair: Fix tg->load when offlining a CPU (Vincen…