Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

High max 9.8

ELSA-2025-20018 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-304.171.4] - Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds) - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno) - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwash…

Jan 11, 2025
High max 8.4

ELSA-2024-11048 1 CVE

Important: python-virtualenv security update (Oracle Linux 7)

[15.1.0-7.0.1] - Fixes CVE-2024-53899 Quote template strings in activation scripts [Orabug: 37396464]

Jan 10, 2025
High max 7.7

ELSA-2025-0144 7 CVEs

Important: firefox security update (Oracle Linux 8)

[128.6.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.6.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.6.0-1] - Update to 128.6.0 build1

Jan 10, 2025
High max 7.7

ELSA-2025-0080 7 CVEs

Important: firefox security update (Oracle Linux 9)

[128.6.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.6.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Jan 10, 2025
High max 7.8

ELSA-2025-0059 4 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-503.21.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Jan 10, 2025
High max 8.8

ELSA-2025-0145 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.46.5-1] - Update to 2.46.5

Jan 9, 2025
High max 7.4

ELSA-2025-0222 1 CVE

Important: dpdk security update (Oracle Linux 8)

[23.11-2] - Backport fixes for CVE-2024-11614 (RHEL-68600)

Jan 9, 2025
High max 7.8

ELSA-2025-0065 2 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-553.34.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Jan 9, 2025
Low max 8.6

ELSA-2025-0083 1 CVE

Low: cups security update (Oracle Linux 8)

[1:2.2.6-62] - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file

Jan 9, 2025
High max 7.5

ELSA-2025-0168 1 CVE

Important: iperf3 security update (Oracle Linux 8)

[3.5-11] - Resolves: RHEL-72924 - Denial of Service in iperf Due to Improper JSON Handling

Jan 9, 2025
High max 8.8

ELSA-2025-0146 4 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.46.5-1] - Update to 2.46.5

Jan 9, 2025
High max 7.5

ELSA-2025-0161 1 CVE

Important: iperf3 security update (Oracle Linux 9)

[3.9-13.1] - Resolves: RHEL-72929 - Denial of Service in iperf Due to Improper JSON Handling

Jan 9, 2025
High max 7.4

ELSA-2025-0210 1 CVE

Important: dpdk security update (Oracle Linux 9)

[23.11-2] - Backport fixes for CVE-2024-11614 (RHEL-68601)

Jan 9, 2025
High max 6.5

ELSA-2025-0147 2 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.6.0-3.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.6.0] - Add OpenELA debranding [128.6.0-3] - Update to 128.6.0 build3 [128.6.0-1] - Update to 128.6.0 build1

Jan 9, 2025
High

ELSA-2025-20007 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.93.1] - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li) [Orabug: 36544657] {CVE-2024-26840}

Jan 8, 2025
Medium max 9.8

ELSA-2024-11486 17 CVEs

Moderate: kernel security update (Oracle Linux 9)

[5.14.0-503.19.1_5.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

Jan 6, 2025
Medium max 5.6

ELSA-2025-0012 1 CVE

Moderate: python-requests security update (Oracle Linux 8)

[2.20.0-5] - Security fix for CVE-2024-35195 Resolves: RHEL-37605 [2.20.0-4] - Bump release to fix upgrade path from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8 Related: rhbz#2209469 [2.20.0-3] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 …

Jan 2, 2025
High max 8.8

ELSA-2024-10882 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-9.0.3] - Fixes CVE-2024-10979 where environment variable mutations [Orabug: 37370704] - are incorrectly allowed from trusted PL/Perl code

Dec 23, 2024
High max 8.6

ELSA-2024-11345 3 CVEs

Important: gstreamer1-plugins-base security update (Oracle Linux 8)

[1.16.1-5.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-5] - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615 Resolves: RHEL-70974, RHEL-71010, RHEL-70986

Dec 19, 2024
High max 7.5

ELSA-2024-11217 1 CVE

Important: skopeo security update (Oracle Linux 9)

[2:1.16.1-2] - rebuild to fix CVE-2024-34156

Dec 19, 2024
Medium max 5.9

ELSA-2024-11219 1 CVE

Moderate: edk2:20240524 security update (Oracle Linux 9)

[20240524-6.0.1.el9_5.3] - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH…

Dec 19, 2024
Medium max 5.3

ELSA-2024-11232 1 CVE

Moderate: unbound:1.16.2 security update (Oracle Linux 9)

[1.16.2-8.1] - Fix unbounded name compression could lead to Denial of Service (CVE-2024-8508) [1.16.2-8] - Ensure group access correction reaches also updated configs (CVE-2024-1488) [1.16.2-7] - Ensure only unbound group can change configuration (CVE-2024-14…

Dec 19, 2024
Medium max 4.2

ELSA-2024-11238 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 9)

[1.26.12-2.2] - Security fix for CVE-2023-45803 Resolves: RHEL-66551

Dec 19, 2024
Medium max 6.7

ELSA-2024-11242 1 CVE

Moderate: mpg123:1.32.9 security update (Oracle Linux 9)

[1.32.9-1] - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 [1.26.2-6] - Add patch for CVE-2024-10573 Resolves: RHEL-65445

Dec 19, 2024
Medium max 7.5

ELSA-2024-11216 1 CVE

Moderate: containernetworking-plugins security update (Oracle Linux 9)

[1:1.5.1-3] - rebuild to fix CVE-2024-34156

Dec 19, 2024
Medium max 5.3

ELSA-2024-11237 1 CVE

Moderate: libsndfile:1.0.31 security update (Oracle Linux 9)

[1.0.31-8.2] - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)

Dec 19, 2024
Medium max 4.7

ELSA-2024-11250 1 CVE

Moderate: pam security update (Oracle Linux 9)

[1.5.1-21.0.1] - pam_access: clean up the remote host matching code [Orabug: 36771903] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-21] - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-100…

Dec 19, 2024
High max 9.8

ELSA-2024-12887 225 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-303.171.5.2] - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37393454] - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37384237] - x86/pkeys: Change caller of update_pkru_…

Dec 18, 2024
Medium

ELSA-2024-11154 1 CVE

Moderate: bluez security update (Oracle Linux 8)

[5.63-3] + bluez-5.63-3 - Add back the tests for OSCI. [5.63-2] + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229

Dec 17, 2024
Medium max 5.9

ELSA-2024-11185 1 CVE

Moderate: edk2:20220126gitbb1bba3d77 security update (Oracle Linux 8)

[20220126gitbb1bba3d77-13.el8.4] - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60830] - Resolves: RHEL-60830 (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-8.10.z])

Dec 17, 2024
Medium max 4.2

ELSA-2024-11189 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 8)

[1.26.12-5] - Security fix for CVE-2023-45803 Resolves: RHEL-66562

Dec 17, 2024
Medium max 5.3

ELSA-2024-11192 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

[1.0.28-16] - fix prerequisit patch (#RHEL-65093) [1.0.28-15] - fix crash in ogg vorbis (#RHEL-65093) (CVE-2024-50612)

Dec 17, 2024
High max 8.6

ELSA-2024-11299 5 CVEs

Important: gstreamer1-plugins-good security update (Oracle Linux 8)

[1.16.1-5] - CVE-2024-47537, CVE-2024-47539, CVE-2024-47540, CVE-2024-47606, CVE-2024-47613 Resolves: RHEL-70949, RHEL-70962, RHEL-70936, RHEL-71022 Resolves: RHEL-70998

Dec 17, 2024
Medium max 5.5

ELSA-2024-11161 1 CVE

Moderate: tuned security update (Oracle Linux 8)

[2.22.1-5.0.1] - Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315] - Fix error in uninstalling tuned [Orabug: 351528377] - Updated patch with the more recent version [Orabug: 30730976] - Set AMD CPU freq governor to ondemand whe…

Dec 17, 2024
Medium max 6.7

ELSA-2024-11193 1 CVE

Moderate: mpg123 security update (Oracle Linux 8)

[1.25.10-2] - Rebase to 1.32.9, includes patch for CVE-2024-10573 - Resolves: RHEL-65443

Dec 17, 2024
High max 7.8

ELSA-2024-10666 2 CVEs

Important: gimp:2.8.22 security update (Oracle Linux 7)

[2:2.8.22-1.0.1] - Fix CVE-2023-44442 [Orabug: 37344570] - Fix CVE-2023-44444

Dec 16, 2024
High max 8.8

ELSA-2024-8495 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-9.0.1] - Backport fix for CVE-2023-7348 [Orabug: 37220738] - Adds restriction on non-system views

Dec 16, 2024
Medium max 5.5

ELSA-2024-10381 1 CVE

Moderate: tuned security update (Oracle Linux 7)

[2.11.0-12.0.3] - CVE-2024-52337 fixes [Orabug: 37327384]

Dec 16, 2024
High max 8.8

ELSA-2024-10881 6 CVEs

Important: firefox security update (Oracle Linux 7)

[128.5.1-1.0.1] - Update to 128.5.1 [Orabug: 37370369][CVE-2024-11692][CVE-2024-11694] [CVE-2024-11695][CVE-2024-11696][CVE-2024-11697][CVE-2024-11699]

Dec 16, 2024
High max 9.8

ELSA-2024-12884 122 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.338.4.1] - Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang) [Orabug: 37383196] [5.4.17-2136.338.4] - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev) [Orabug: 37284641] {…

Dec 16, 2024