Oracle Linux Security Advisories (ELSA)

8,316 results · Feed

• Medium max 7.5
  ELSA-2024-9450 1 CVE

  Moderate: python3.11 security update (Oracle Linux 9)

  [3.11.9-7.1] - Security fix for CVE-2024-6232 Resolves: RHEL-57410

  Nov 18, 2024
• High max 9.8
  ELSA-2024-9636 14 CVEs

  Important: webkit2gtk3 security update (Oracle Linux 8)

  [2.46.3-1] - Update to 2.46.3

  Nov 16, 2024
• High max 7.5
  ELSA-2024-9644 2 CVEs

  Important: squid security update (Oracle Linux 8)

  libecap squid [7:4.15-10.3] - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to a Denial of Service attack against Cache Manager error responses [7:4.15-10.2] - Disable ESI support - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial…

  Nov 15, 2024
• Low
  ELSA-2024-9689 1 CVE

  Low: binutils security update (Oracle Linux 8)

  [2.30-125.0.1] - Forward port Oracle patches from 2.30-125 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history:

  Nov 15, 2024
• Medium
  ELSA-2024-12825 1 CVE

  Moderate: giflib security update (Oracle Linux 7)

  [4.1.6-9.0.1] - Fixes giflib CVE-2023-48161 issue [Orabug: 37178930]

  Nov 14, 2024
• Medium max 6.5
  ELSA-2024-9088 4 CVEs

  Moderate: edk2 security update (Oracle Linux 9)

  [20240524-6.0.1] - Replace upstream references [Orabug:36569119] [20240524-6] - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974] - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336] - Resolves: RHEL-56974 (qemu-kvm: warning: …

  Nov 14, 2024
• Medium max 9.8
  ELSA-2024-9092 12 CVEs

  Moderate: freerdp security update (Oracle Linux 9)

  [2:2.11.7-1] - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) [2:2.11.2-2] - CVE-2024-22211: Check codec resolut…

  Nov 14, 2024
• Medium max 7.8
  ELSA-2024-9093 3 CVEs

  Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

  [23.2.7-1] - xwayland 23.2.7 - (RHEL-29912) [21.1.9-7] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 [21.1.9-6] New build to add xorg-x11-server-Xwayland-devel (RHEL-25083) [21.1.9-5] Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2…

  Nov 14, 2024
• Medium max 6.5
  ELSA-2024-9114 1 CVE

  Moderate: gnome-shell and gnome-shell-extensions security update (Oracle Linux 9)

  gnome-shell [40.10-21] - Only open portal login in response to user action Resolves: RHEL-39098 [40.10-20] - Fix inhibit-shortcut permissions Resolves: #RHEL-2031 [40.10-19] - Use correct bus name for screencast service Related: RHEL-35775 gnome-shell-extensi…

  Nov 14, 2024
• Medium max 7.8
  ELSA-2024-9122 3 CVEs

  Moderate: xorg-x11-server security update (Oracle Linux 9)

  [1.20.11-26] - Fix regression caused by the fix for CVE-2024-31083 [1.20.11-25] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083 - Add util-linux as a dependency of Xvfb - Fix compilation error on i686

  Nov 14, 2024
• Medium max 6.2
  ELSA-2024-9128 1 CVE

  Moderate: libvirt security update (Oracle Linux 9)

  [10.5.0-7.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [10.5.0-7] - qemu: Refactor default panic model (RHEL-56451) - qemu: Sometimes the default panic model doesn't exist (RHEL-56451) - qemu: Use pvpanic by default on aarch64 (RHEL-56451) […

  Nov 14, 2024
• Medium max 8.2
  ELSA-2024-9136 3 CVEs

  Moderate: qemu-kvm security update (Oracle Linux 9)

  [9.0.0-10] - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617] - Resolves: RHEL-52617 (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5]) [9.0.0-9] - kvm-qemu-g…

  Nov 14, 2024
• High max 8.8
  ELSA-2024-9144 4 CVEs

  Important: webkit2gtk3 security update (Oracle Linux 9)

  [2.44.3-2] - Add patch to fix WebAssembly Resolves: RHEL-32578 [2.44.3-1] - Update to 2.44.3 Resolves: RHEL-32578 [2.44.2-1] - Update to 2.44.2 Resolves: RHEL-32578 [2.44.1-1] - Update to 2.44.1 Resolves: RHEL-32578 Resolves: RHEL-29637 [2.42.5-1] - Update to…

  Nov 14, 2024
• Medium max 5.4
  ELSA-2024-9150 1 CVE

  Moderate: python-jinja2 security update (Oracle Linux 9)

  [2.11.3-6] - Security fix for CVE-2024-34064 Resolves: RHEL-35653

  Nov 14, 2024
• Medium max 7.5
  ELSA-2024-9158 3 CVEs

  Moderate: lldpd security update (Oracle Linux 9)

  [1.0.18-3] - Add lldpd-devel package [RHEL-22127] [1.0.18-2] - Remove networkd gating test [RHEL-25990]

  Nov 14, 2024
• Medium max 7.5
  ELSA-2024-9167 1 CVE

  Moderate: poppler security update (Oracle Linux 9)

  [21.01.0-21] - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 [21.01.0-20] - Fix a crash during signing - Resolves: RHEL-31934

  Nov 14, 2024
• Medium max 7.5
  ELSA-2024-9180 1 CVE

  Moderate: mod_auth_openidc security update (Oracle Linux 9)

  [2.4.10-1] Rebase to 2.4.10 version improves state cookies piling up problem Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache Resolves: RHEL-25422 mod_auth_openidc: DoS when using OIDCSessionType client-cookie and manipulating cookies (CVE-20…

  Nov 14, 2024
• Medium max 7.5
  ELSA-2024-9181 2 CVEs

  Moderate: jose security update (Oracle Linux 9)

  [14-1] - Rebase jose-14 upstream version Resolves: #RHEL-38079

  Nov 14, 2024
• Medium max 7.0
  ELSA-2024-9184 1 CVE

  Moderate: gtk3 security update (Oracle Linux 9)

  [3.24.31-5] - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 [3.24.31-4] - Actually reduce the height of window titlebars [3.24.31-3] - Reduce the height of window titlebars

  Nov 14, 2024
• Medium max 5.9
  ELSA-2024-9185 2 CVEs

  Moderate: iperf3 security update (Oracle Linux 9)

  [3.9-13] - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used [3.9-12] - Resolves: RHEL-39975 - possible denial of service [3.9-11] - Related: #2223676 - bumping version for correct update path

  Nov 14, 2024
• Low max 2.8
  ELSA-2024-9187 1 CVE

  Low: bcc security update (Oracle Linux 9)

  [0.30.0-6] - Rebuild with LLVM 18 (RHEL-28684) [0.30.0-5] - Drop python3-pyelftools dependency on s390x until it is available [0.30.0-4] - Exclude btrfs and f2fs libbpf tools (RHEL-36579) [0.30.0-3] - Really prevent the loading of compromised headers (RHEL-28…

  Nov 14, 2024
• Low max 2.8
  ELSA-2024-9188 1 CVE

  Low: bpftrace security update (Oracle Linux 9)

  [0.21.1-1] - Rebase on bpftrace 0.21.1 - Add LLVM 18 support (RHEL-28685) [0.20.4-3] - Fix latest build (not built in side tag) [0.20.4-2] - Rebuild for bcc 0.30.0-4 [0.20.4-1] - Rebase on bpftrace 0.20.4 - Fix CVE allowing unprivileged users loading of compr…

  Nov 14, 2024
• Medium max 8.7
  ELSA-2024-9190 3 CVEs

  Moderate: python3.12 security update (Oracle Linux 9)

  [3.12.5-2] - Security fix for CVE-2024-8088 Resolves: RHEL-55963 [3.12.5-1] - Update to 3.12.5 - Security fix for CVE-2024-6923 Resolves: RHEL-53041 [3.12.4-3] - Properly propagate the optimization flags to C extensions [3.12.4-2] - Build Python with -O3 - ht…

  Nov 14, 2024
• Medium max 8.7
  ELSA-2024-9192 2 CVEs

  Moderate: python3.11 security update (Oracle Linux 9)

  [3.11.9-7] - Security fix for CVE-2024-8088 Resolves: RHEL-55959 [3.11.9-6] - Security fix for CVE-2024-6923 Resolves: RHEL-53038 [3.11.9-5] - Properly propagate the optimization flags to C extensions [3.11.9-4] - Build Python with -O3 - https://fedoraproject…

  Nov 14, 2024
• Medium max 6.3
  ELSA-2024-9193 1 CVE

  Moderate: python3.12-PyMySQL security update (Oracle Linux 9)

  [1.1.0-3] - Security fix for CVE-2024-36039 Resolves: RHEL-38371 [1.1.0-2] - Rebuilt for timestamp .pyc invalidation mode [1.1.0-4] - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> D…

  Nov 14, 2024
• Medium max 6.3
  ELSA-2024-9194 1 CVE

  Moderate: python3.11-PyMySQL security update (Oracle Linux 9)

  [1.0.2-2] - Security fix for CVE-2024-36039 Resolves: RHEL-38370

  Nov 14, 2024
• Medium max 6.5
  ELSA-2024-9195 1 CVE

  Moderate: cyrus-imapd security update (Oracle Linux 9)

  [3.4.8-1] - Update to 3.4.8, fixing CVE-2024-34055

  Nov 14, 2024
• Medium max 5.9
  ELSA-2024-9200 1 CVE

  Moderate: runc security update (Oracle Linux 9)

  [4:1.1.13-4] - rebuild against new golang - Resolves: RHEL-46380 [4:1.1.13-3] - rebuild against golang-1.22.4 - Resolves: RHEL-46380 [4:1.1.13-2] - rebuild - Resolves: RHEL-46380 [4:1.1.13-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.…

  Nov 14, 2024
• Medium
  ELSA-2024-9243 1 CVE

  Moderate: postfix security update (Oracle Linux 9)

  [2:3.5.25-1] - New version Resolves: RHEL-20023 - Dropped upstreamed patches

  Nov 14, 2024
• Medium max 5.9
  ELSA-2024-9277 1 CVE

  Moderate: oci-seccomp-bpf-hook security update (Oracle Linux 9)

  [1.2.10-2] - rebuild - Resolves: RHEL-35939

  Nov 14, 2024
• Medium max 5.3
  ELSA-2024-9281 1 CVE

  Moderate: python-jwcrypto security update (Oracle Linux 9)

  [1.5.6-2] - Disable auto-generation of dependencies Related: RHEL-34809 [1.5.6-1] - Rebase to version 1.5.6 Resolve: RHEL-34809

  Nov 14, 2024
• Medium max 7.1
  ELSA-2024-9302 3 CVEs

  Moderate: emacs security update (Oracle Linux 9)

  [1:27.2-10] - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbr…

  Nov 14, 2024
• Medium max 7.3
  ELSA-2024-9306 2 CVEs

  Moderate: httpd security update (Oracle Linux 9)

  [2.4.62-1.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.62-1] - new version 2.4.62 - Resolves: RHEL-52724 - Regression introduced by CVE-2024-38474 fix [2.4.59-7] - Resolves: RHEL-49856: htcacheclean.service missing [Install] sect…

  Nov 14, 2024
• Low max 3.1
  ELSA-2024-9317 1 CVE

  Low: NetworkManager security update (Oracle Linux 9)

  [1.48.10-2.0.1] - disable MPTCP handling by default [Orabug: 34801142] - add connectivity check via Oracle servers [Orabug: 32051972] [1:1.48.10-2] - cloud-setup: Allow bigger restart bursts (RHEL-56740) - cloud-setup: Fix Azure swap of primary and secondary …

  Nov 14, 2024
• Low max 3.2
  ELSA-2024-9325 1 CVE

  Low: cockpit security update (Oracle Linux 9)

  [323.1-1.0.1] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation …

  Nov 14, 2024
• Medium max 7.5
  ELSA-2024-9331 3 CVEs

  Moderate: krb5 security update (Oracle Linux 9)

  [1.21.1-3.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-3] - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45402 RHEL-45392

  Nov 14, 2024
• Low max 9.8
  ELSA-2024-9333 4 CVEs

  Low: openssl and openssl-fips-provider security update (Oracle Linux 9)

  openssl [1:3.2.2-6.0.1] - Enable openssl-fips-provider dependency [Orabug: 36504822] - Temporary disable openssl-fips-provider dependency [Orabug: 36504822] - Replace upstream references [Orabug: 34340177] [1:3.2.2-6] - rebuilt Related: RHEL-55339 [1:3.2.2-5]…

  Nov 14, 2024
• Medium max 8.7
  ELSA-2024-9371 1 CVE

  Moderate: python3.9 security update (Oracle Linux 9)

  [3.9.19-8] - Security fix for CVE-2024-8088 Resolves: RHEL-55967 [3.9.19-7] - Security fix for CVE-2024-6923 Resolves: RHEL-53045 [3.9.19-6] - Ensure 3rd party extension modules for the debug build use the -O0 flag [3.9.19-5] - Properly propagate the optimiza…

  Nov 14, 2024
• Medium max 6.5
  ELSA-2024-9401 7 CVEs

  Moderate: microcode_ctl security update (Oracle Linux 9)

  [20240910-1.0.1] - switch upstream to 9 Stream sources for simplicity - don't bother calling dracut if virtualized [Orabug: 35710094] - ensure UEK also rebuilds initramfs [Orabug: 34280058] - add support for UEK7 kernels - enable early update for 06-4f-01 - r…

  Nov 14, 2024
• Medium max 5.9
  ELSA-2024-9404 1 CVE

  Moderate: libgcrypt security update (Oracle Linux 9)

  [1.10.0-11] - Fix CVE-2024-2236 (RHEL-34579)

  Nov 14, 2024