Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

High max 7.5

ELSA-2024-8110 1 CVE

Important: containernetworking-plugins security update (Oracle Linux 9)

[1:1.4.0-6] - rebuild for CVE-2024-34156 - Resolves: RHEL-57915

Oct 15, 2024
High max 7.5

ELSA-2024-8111 1 CVE

Important: skopeo security update (Oracle Linux 9)

[2:1.14.5-2] - rebuild for CVE-2024-34156 - Resolves: RHEL-57955

Oct 15, 2024
High max 7.5

ELSA-2024-8112 4 CVEs

Important: buildah security update (Oracle Linux 9)

[1.33.9-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.9-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/4dc26b9) - Res…

Oct 15, 2024
High max 7.5

ELSA-2024-5930 2 CVEs

Important: bind security update (Oracle Linux 7)

[32:9.11.4-26.0.1.P2.16] - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name

Oct 14, 2024
High max 9.8

ELSA-2024-8024 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

Oct 14, 2024
High max 7.5

ELSA-2024-8038 4 CVEs

Important: container-tools:ol8 security update (Oracle Linux 8)

aardvark-dns [2:1.10.1-2] - build off the RHEL maintenance branch - Resolves: RHEL-59129 buildah cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp netavark oci-seccomp-bpf-hook podman pytho…

Oct 14, 2024
High max 9.8

ELSA-2024-12782 72 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.336.5.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37138988] [5.4.17-2136.336.5] - uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang) [Orabug: 37030127] - EDAC, i10nm: make skx_common.o a separa…

Oct 14, 2024
High max 9.8

ELSA-2024-8025 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1

Oct 14, 2024
Medium max 5.0

ELSA-2024-8037 1 CVE

Moderate: OpenIPMI security update (Oracle Linux 9)

[2.0.32-5.0.1] - IPMI SMB kernel module name is ipmi_ssif in all modern kernels. openipmi-helper script fixed. [Orabug: 27093288] (alexey.petrenko@oracle.com) [2.0.32-5] - Update the patch for CVE-2024-42934 to add a missing upstream commit from 2.0.36: 663e3…

Oct 14, 2024
High max 7.5

ELSA-2024-8039 4 CVEs

Important: podman security update (Oracle Linux 9)

[4.9.4-13.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for comp…

Oct 14, 2024
High max 9.8

ELSA-2024-12779 58 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.541.4.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37137499] [4.14.35-2047.541.4] - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang) [Orabug: 37063821] - selftests: fix OOM i…

Oct 11, 2024
High max 9.8

ELSA-2024-7977 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 8)

[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.1-1] - Update to 128.3.1

Oct 11, 2024
High max 9.8

ELSA-2024-12780 72 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.336.5.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37138988] [5.4.17-2136.336.5] - uek-rpm: Add skx_edac_common.ko to nano_modules (Sherry Yang) [Orabug: 37030127] - EDAC, i10nm: make skx_common.o a separa…

Oct 11, 2024
Medium max 7.8

ELSA-2024-12730 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 7)

[1.45.4-3.0.7.el7] - libext2fs: add sanity check to extent manipulation (Srivathsa Dara) [Orabug: 37095032] {CVE-2022-1304} [1.45.4-3.0.5.el7] - e2fsprogs: bump version to 1.45.4-3.0.5 [1.45.4-3.0.5] - Fix missing changelog entries to match the latest RHEL8 p…

Oct 10, 2024
Medium max 7.8

ELSA-2024-12731 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 7)

[1.45.4-3.0.7.el7] - libext2fs: add sanity check to extent manipulation (Srivathsa Dara) [Orabug: 37095032] {CVE-2022-1304}

Oct 10, 2024
High max 9.8

ELSA-2024-7958 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 9)

[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Oct 10, 2024
Medium max 7.8

ELSA-2024-7705 1 CVE

Moderate: systemd security update (Oracle Linux 7)

[219-78.0.17] - Backport secure pager invocation for CVE-2023-26604 [Orabug: 37139943]

Oct 9, 2024
High max 7.5

ELSA-2024-7851 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 8)

[6.0.135-1.0.1] - Add support for Oracle Linux [6.0.135-1] - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60792

Oct 9, 2024
Low max 9.1

ELSA-2024-7848 1 CVE

Low: openssl security update (Oracle Linux 8)

[1:1.1.1k-14] - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654

Oct 9, 2024
High max 8.1

ELSA-2024-7868 4 CVEs

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.110-1.0.1] - Add support for Oracle Linux [8.0.110-1] - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60794

Oct 9, 2024
High max 7.5

ELSA-2024-7867 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 9)

[6.0.135-1.0.1] - Add support for Oracle Linux [6.0.135-1] - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60798 [6.0.134-1] - Update to .NET SDK 6.0.134 and Runtime 6.0.34 - Resolves: RHEL-56683

Oct 9, 2024
High max 8.1

ELSA-2024-7869 4 CVEs

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.110-1.0.1] - Add support for Oracle Linux [8.0.110-1] - Update to .NET SDK 8.0.110 and Runtime 8.0.10 - Resolves: RHEL-60800 [8.0.109-1] - Update to .NET SDK 8.0.109 and Runtime 8.0.9 - Resolves: RHEL-56679

Oct 9, 2024
High max 8.8

ELSA-2024-6661 1 CVE

Important: python3-setuptools security update (Oracle Linux 7)

[39.2.0-10.0.3] - Back port fix for CVE-2024-6345 [Orabug: 37054771]

Oct 7, 2024
High max 9.8

ELSA-2024-7699 11 CVEs

Important: thunderbird security update (Oracle Linux 8)

[128.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.0] - Add OpenELA debranding [128.3.0-1] - Update to 127.3.0

Oct 7, 2024
High max 9.8

ELSA-2024-7700 11 CVEs

Important: firefox security update (Oracle Linux 8)

[128.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.0-1] - Update to 128.3.0

Oct 7, 2024
Medium max 7.8

ELSA-2024-12704 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 7)

[1.45.4-3.0.7] - libext2fs: add sanity check to extent manipulation (Srivathsa Dara) [Orabug: 37095032] {CVE-2022-1304}

Oct 4, 2024
High

ELSA-2024-12713 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-300.163.18.1] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37132350]

Oct 4, 2024
High max 9.8

ELSA-2024-7552 11 CVEs

Important: thunderbird security update (Oracle Linux 9)

[128.3.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.0] - Add OpenELA debranding [128.3.0-1] - Update to 127.3.0

Oct 3, 2024
Medium max 6.5

ELSA-2024-7502 1 CVE

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

delve golang [1.21.13-3] - Add evp-digest-sign-final.patch - Resolves: RHEL-61109 go-toolset

Oct 2, 2024
High max 9.8

ELSA-2024-7505 5 CVEs

Important: firefox security update (Oracle Linux 9)

[128.3.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…

Oct 2, 2024
Medium max 6.5

ELSA-2024-7550 1 CVE

Moderate: golang security update (Oracle Linux 9)

[1.21.13-4] - Fix CVE-2024-9355 - Resolves: RHEL-61046

Oct 2, 2024
Medium max 4.4

ELSA-2024-12709 1 CVE

Moderate: python-urllib3 security update (Oracle Linux 7)

[1.10.2-7.0.1] - CVE-2024-37891 fix [Orabug: 37085188]

Oct 1, 2024
High max 10.0

ELSA-2024-6417 1 CVE

Important: flatpak security update (Oracle Linux 7)

[1.0.9-13.0.1] - Fix CVE-2024-42472 [Orabug: 37027734]

Oct 1, 2024
High max 8.6

ELSA-2024-7463 3 CVEs

Important: cups-filters security update (Oracle Linux 8)

[1.20.0-35.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.20.0-35] - CVE-2024-47175 cups-filters: remote comma…

Oct 1, 2024
High

ELSA-2024-6994 1 CVE

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.119.1.0.5.el7.OL7] - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kees Cook) [Orabug: 37092983]

Sep 30, 2024
Medium max 9.1

ELSA-2024-5076 2 CVEs

Moderate: krb5 security update (Oracle Linux 7)

[1.15.1-55.0.3] - Length check when parsing GSS token encapsulation [Orabug: 36927256] - Add a simple DER support header [Orabug: 36927256] - Fix vulnerabilities in GSS message token handling [Orabug: 36927256] [1.15.1-55.0.1] - Add recursion limit for ASN.1 …

Sep 30, 2024
Medium max 4.9

ELSA-2024-12701 1 CVE

Moderate: ovirt-engine security update (Oracle Linux 8)

[4.4.10.7-1.0.33] - Fix external providers properties observability [4.4.10.7-1.0.32] - Upgrade bundled frontend dependency of jquery-ui [4.4.10.7-1.0.31] - Allow enrolling certificates in non-responsive state and Extend the lifetime of non-web certificates […

Sep 30, 2024
Medium max 7.5

ELSA-2024-7349 1 CVE

Moderate: grafana security update (Oracle Linux 8)

[9.2.10-18] - Resolves RHEL-47191

Sep 30, 2024
High max 8.6

ELSA-2024-7346 3 CVEs

Important: cups-filters security update (Oracle Linux 9)

[1.28.7-17.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.28.7-17] - fix rpmverify error [1.28.7-16] - CVE-202…

Sep 30, 2024
High max 9.0

ELSA-2024-4911 1 CVE

Important: freeradius security update (Oracle Linux 7)

[3.0.13-15.0.1] - Fixes CVE-2024-3596 security issue [Orabug: 36904288]

Sep 28, 2024