Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 7.8
    ELSA-2024-5259 2 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-1160.119.1.0.3.el7.OL7] - net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36947298] [3.10.0-1160.119.1.0.2.el7.OL7] - md/raid5: fix oops during stripe resizing (Ritika Srivastava) [Orabug: 34048726] - blk-mq: Remove generation seqeunce (…

  • Medium max 9.8
    ELSA-2024-6754 3 CVEs

    Moderate: expat security update (Oracle Linux 9)

    [2.5.0-2.1] - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57510 - Resolves: RHEL-57497 - Resolves: RHEL-56763

  • High max 7.4
    ELSA-2024-4560 6 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.412.b08-1.0.1] - Fixes openjdk below given CVE issues - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes bad immediate dominator info openjdk bug8262017 - Fixes malformed control flow openjdk bug8303466 - CVE…

  • High max 8.8
    ELSA-2024-4549 1 CVE

    Important: ghostscript security update (Oracle Linux 7)

    [9.25-5.0.1] - Fixes CVE-2024-33871 OPVP device arbitrary code execution via custom Driver library

  • High max 8.8
    ELSA-2024-6726 1 CVE

    Important: fence-agents security update (Oracle Linux 9)

    [4.10.0-62.5] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-49657

  • Medium max 5.9
    ELSA-2024-6670 3 CVEs

    Moderate: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1.el8_10.2] - Replace HAM-logo.png with a generic one [0.10.18-2.el8_10.2] - Updated rubygem rexml Resolves: RHEL-52409, RHEL-52788, RHEL-55997

  • High max 9.1
    ELSA-2024-4943 3 CVEs 1 exploited

    Important: httpd security update (Oracle Linux 7)

    [2.4.6-99.0.3.1] - Opt-ins for unsafe prefix_stat and %3f [Orabug: 36904263][CVE-2024-38474][CVE-2024-38475] - mod_proxy: validate hostname [Orabug: 36904263][CVE-2024-38477]

  • Medium max 5.7
    ELSA-2024-6569 1 CVE

    Moderate: 389-ds:1.4 security update (Oracle Linux 8)

    [1.4.3.39-8] - Bump version to 1.4.3.39-8 - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause Denial of Service [rhel-8.10.z] - Resolves: RHEL-58069 - perf search result investigation for many large static grou…

  • High max 9.8
    ELSA-2024-12618 143 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-210.163.7] - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu) [Orabug: 37030280] [5.15.0-210.163.6] - Revert 'Fix userfaultfd_api to return EINVAL as expected' (Vijayendra Suman) [Orabug: 37004422] [5.15.0-210.163.5] - Revert 'bpf: Al…

  • High max 10.0
    ELSA-2024-12611 40 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.540.4.1] - Revert 'selftests/kcmp: Make the test output consistent and clear' (Samasth Norway Ananda) [Orabug: 37029311] [4.14.35-2047.540.4] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson) - ipvs: Avoid unnecessary call…

  • High max 9.8
    ELSA-2024-12612 88 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.335.4.el8] - mm: memcg/slab: enable kmalloc-cg-<n> caches for x86_64. (Imran Khan) [Orabug: 36951041] - printk: add kthread for long-running print (Stephen Brennan) [Orabug: 36456582] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas…

  • Medium max 9.8
    ELSA-2024-6567 27 CVEs

    Moderate: kernel security update (Oracle Linux 9)

    [5.14.0-427.35.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • High max 9.8
    ELSA-2024-12610 88 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.335.4] caches for x86_64. (Imran Khan) [Orabug: 36951041] - printk: add kthread for long-running print (Stephen Brennan) [Orabug: 36456582] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson) - driver core: Fix uevent_show() …

  • Medium max 7.5
    ELSA-2024-6529 2 CVEs

    Moderate: dovecot security update (Oracle Linux 9)

    [1:2.3.16-11.1] - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55211) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55225)

  • High max 7.4
    ELSA-2024-4564 6 CVEs

    Important: java-11-openjdk security update (Oracle Linux 7)

    [1:11.0.23.0.9-2.0.3] - Fixes below CVE's - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes malformed control flow openjdk bug8303466 - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144 Enhance-Pack-200-loading …

  • High max 8.6
    ELSA-2024-4647 1 CVE

    Important: qt5-qtbase security update (Oracle Linux 7)

    [5.9.7-5.0.1] - Backport fix for CVE-2024-39936 [Orabug: 36904373]

  • Medium max 9.8
    ELSA-2024-6510 1 CVE

    Moderate: emacs security update (Oracle Linux 9)

    [1:27.2-10] - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Disable xwidgets (RHEL-33447)

  • Medium max 5.2
    ELSA-2024-6464 1 CVE

    Moderate: glib2 security update (Oracle Linux 9)

    [2.68.4-14.1] - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-56979

  • Medium max 8.8
    ELSA-2024-6311 2 CVEs

    Moderate: resource-agents security update (Oracle Linux 8)

    [4.9.0-54.4] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50360 [4.9.0-54.3] - gcp-pd-move: fix TLS_VERSION_1 issue Resolves: RHEL-50041 [4.9.0-54.2] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-44923 [4.9.0-54.1] - AWS agents: retry failed …

  • High max 10.0
    ELSA-2024-6422 1 CVE

    Important: bubblewrap and flatpak security update (Oracle Linux 8)

    bubblewrap [0.4.0-2] - Backport upstream fix to help address CVE-2024-42472 in flatpak flatpak [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backp…

  • High max 8.1
    ELSA-2024-4622 1 CVE

    Important: libndp security update (Oracle Linux 7)

    [1.2-10.0.1] - Increasing release number as per Oracle package release policy

  • Medium max 6.5
    ELSA-2024-6148 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 8)

    nodejs [1:18.20.4-1] - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging

  • Medium max 8.8
    ELSA-2024-6309 2 CVEs

    Moderate: fence-agents security update (Oracle Linux 8)

    [4.2.1-129.4] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-50223 [4.2.1-129.3] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-43568 [4.2.1-129.2] - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer Resolves: RHEL-7734 - bundled jinja2: …

  • Medium max 6.5
    ELSA-2024-6147 2 CVEs

    Moderate: nodejs:18 security update (Oracle Linux 9)

    nodejs [1:18.20.4-1] - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging

  • High max 10.0
    ELSA-2024-6356 1 CVE

    Important: bubblewrap and flatpak security update (Oracle Linux 9)

    bubblewrap [0.4.1-7] - Add support for --bind-fd and --ro-bind-fd (CVE-2024-42472) flatpak [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backporte…

  • Medium max 5.5
    ELSA-2024-6163 1 CVE

    Moderate: python3.9 security update (Oracle Linux 9)

    [3.9.18-3.5] - Security fix for CVE-2024-8088 Resolves: RHEL-55968 [3.9.18-3.4] - Security fix for CVE-2024-6923 Resolves: RHEL-53044

  • Medium max 5.5
    ELSA-2024-6179 1 CVE

    Moderate: python3.11 security update (Oracle Linux 9)

    [3.11.7-1.5] - Security fix for CVE-2024-8088 Resolves: RHEL-55960 [3.11.7-1.4] - Security fix for CVE-2024-6923 Resolves: RHEL-53037

  • Medium max 5.9
    ELSA-2024-6188 1 CVE

    Moderate: runc security update (Oracle Linux 9)

    [4:1.1.12-4] - rebuild for CVE-2024-24783 - Resolves: RHEL-28439

  • Medium max 6.3
    ELSA-2024-6197 3 CVEs

    Moderate: ghostscript security update (Oracle Linux 9)

    [9.54.0-17] - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024…

  • Medium max 7.0
    ELSA-2024-6184 1 CVE

    Moderate: orc security update (Oracle Linux 9)

    [0.4.31-7] - Add patch for CVE-2024-40897 - Resolves: RHEL-50701

  • Medium max 5.9
    ELSA-2024-6186 1 CVE

    Moderate: containernetworking-plugins security update (Oracle Linux 9)

    [1:1.4.0-5] - rebuild for CVE-2024-24783 - Resolves: RHEL-28431

  • High max 7.5
    ELSA-2024-6194 3 CVEs

    Important: podman security update (Oracle Linux 9)

    [4.9.4-10.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for comp…

  • Medium max 5.9
    ELSA-2024-6187 1 CVE

    Moderate: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.7.3-5] - rebuild for CVE-2024-24783 - Resolves: RHEL-28435

  • Medium max 5.9
    ELSA-2024-6195 1 CVE

    Moderate: skopeo security update (Oracle Linux 9)

    [2:1.14.5-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14 (https://github.com/containers/skopeo/commit/072072b) - Resolves: RHEL-40805

  • Medium max 4.4
    ELSA-2024-6162 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 9)

    [1.26.5-5.1] - Security fix for CVE-2024-37891 - Backport upstream patch to fix TypeError for http connection if the PoolManager - is instantiated with server_hostname Resolves: RHEL-49853

  • High max 8.8
    ELSA-2024-5999 1 CVE

    Important: postgresql security update (Oracle Linux 9)

    [13.16-1.0.1] - Remove non ASCII character from changelog date [13.16-1] - Update to 13.16 [13.14-2] - Remove /var/run/postgresql - Related: RHEL-25756 [13.14-1] - Update to 13.14 - Fix CVE-2024-0985 [13.13-1] - Update to 13.13 - Fixes CVE-2023-5868, CVE-2023…

  • Medium max 5.5
    ELSA-2024-6146 1 CVE

    Moderate: python3.12 security update (Oracle Linux 9)

    [3.12.1-4.3] - Security fix for CVE-2024-8088 Resolves: RHEL-55964 [3.12.1-4.2] - Security fix for CVE-2024-6923 Resolves: RHEL-53087

  • Medium max 5.9
    ELSA-2024-6189 1 CVE

    Moderate: buildah security update (Oracle Linux 9)

    [1.33.7-4.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-4] - rebuild for CVE-2024-24783 - Resolves: RHEL-28428

  • Medium max 9.1
    ELSA-2024-6192 1 CVE

    Moderate: wget security update (Oracle Linux 9)

    [1.21.1-8] - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior

  • Medium max 9.1
    ELSA-2024-6166 2 CVEs

    Moderate: krb5 security update (Oracle Linux 9)

    [1.21.1-2.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-2] - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45401 RHEL-45390