Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • High max 9.8
    ELSA-2024-12606 43 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.89.4] - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma) [Orabug: 36940405] {CVE-2021-47284} - tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware)) [Orabug: 36940388] {CVE-2021-46939} - udf: Fix NULL pointer der…

  • High max 8.8
    ELSA-2024-12605 18 CVEs

    Important: virt:kvm_utils2 security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport [8.6-1] - Rebase to ntfs-3g 2021.8.22 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-3925…

  • High max 8.2
    ELSA-2024-12604 5 CVEs

    Important: virt:kvm_utils3 security update (Oracle Linux 8)

    hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX…

  • High max 8.8
    ELSA-2024-6000 1 CVE

    Important: postgresql:12 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [12.20-1] - Update to 12.20 - Fix CVE-2024-7348

  • High max 8.8
    ELSA-2024-6018 1 CVE

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [13.16-1] - Update to 13.16 - Fix CVE-2024-7348

  • High max 8.8
    ELSA-2024-6001 2 CVEs

    Important: postgresql:15 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [15.8-1] - Update to 15.8 - Fix CVE-2024-7348

  • High max 8.8
    ELSA-2024-6020 2 CVEs

    Important: postgresql:15 security update (Oracle Linux 9)

    pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack postgres-decoderbufs [1.9.7-1.Final] - Iitial import for postgresql 15 stream - Related: #2128410 postgresql [15.8-1] - Update …

  • Medium max 8.8
    ELSA-2024-5962 4 CVEs

    Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

    mod_wsgi numpy python39 [3.9.19-7] - Security fix for CVE-2024-8088 Resolves: RHEL-55954 [3.9.19-6] - Security fix for CVE-2024-6923 Resolves: RHEL-53102 [3.9.19-5] - Properly propagate the optimization flags to C extensions [3.9.19-4] - Build Python with -O3…

  • Medium max 5.9
    ELSA-2024-5941 2 CVEs

    Moderate: libvpx security update (Oracle Linux 8)

    [1.7.0-11] - Add patch to fix integer overflows. - Fix compilation by including limits.h - Resolves: RHEL-40650

  • High max 8.8
    ELSA-2024-5927 2 CVEs

    Important: postgresql:16 security update (Oracle Linux 8)

    pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql [16.4-1] - Update to 16.…

  • High max 8.8
    ELSA-2024-5929 2 CVEs

    Important: postgresql:16 security update (Oracle Linux 9)

    pgaudit pg_repack postgres-decoderbufs postgresql [16.4-1] - Update to 16.4

  • High max 9.8
    ELSA-2024-5928 41 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-427.33.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 6.5
    ELSA-2024-5814 4 CVEs

    Moderate: nodejs:20 security update (Oracle Linux 8)

    nodejs [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging

  • Medium max 6.5
    ELSA-2024-5815 3 CVEs

    Moderate: nodejs:20 security update (Oracle Linux 9)

    nodejs [1:20.16.0-1] - Update to 20.16.0 Fixes: CVE-2024-36137 CVE-2024-22018 CVE-2024-22020 nodejs-nodemon nodejs-packaging

  • High max 8.8
    ELSA-2024-5531 1 CVE

    Important: python3.12-setuptools security update (Oracle Linux 8)

    [68.2.2-4] - Security fix for CVE-2024-6345 Resolves: RHEL-50475

  • High max 7.5
    ELSA-2024-5694 1 CVE

    Important: tomcat security update (Oracle Linux 8)

    [1:9.0.87-1.el8_10.2] - Resolves: RHEL-46167 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

  • High max 7.5
    ELSA-2024-5693 1 CVE

    Important: tomcat security update (Oracle Linux 9)

    [1:9.0.87-1.el9_4.2] - Resolves: RHEL-46162 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)

  • Medium max 7.8
    ELSA-2024-5598 1 CVE

    Moderate: libreoffice security update (Oracle Linux 8)

    [6.4.7.2-18.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [6.4.7.2] - Remove Red Hat branding - Change vendor to RESF [1:6.4.7.2-18] - Fix CVE-202…

  • Medium max 8.6
    ELSA-2024-5654 1 CVE

    Moderate: curl security update (Oracle Linux 8)

    [7.61.1-34.el8_10.2] - provide common cleanup method for push headers (CVE-2024-2398) [7.61.1-34.el8_10.1] - fix incorrect backport of bz2229800 (RHEL-44684)

  • Medium max 7.8
    ELSA-2024-5583 1 CVE

    Moderate: libreoffice security update (Oracle Linux 9)

    [7.1.8.1-14.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [7.1.8.1] - Remove Red Hat branding - Change vendor to RESF [1:7.1.8.1-14] - Fix CVE-2024-6472 remove ability to trust not validated macro…

  • High max 7.5
    ELSA-2024-5524 2 CVEs

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-16.2] - Rebuild after CI change [32:9.11.36-16.1] - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name [32:9.11.36-16] - Ensure incompatible dhcp is not accepted [32:9.11.36-15] …

  • High max 8.8
    ELSA-2024-5533 1 CVE

    Important: python3.12-setuptools security update (Oracle Linux 9)

    [68.2.2-3.1] - Security fix for CVE-2024-6345 Resolves: RHEL-50481

  • Medium max 8.6
    ELSA-2024-5529 1 CVE

    Moderate: curl security update (Oracle Linux 9)

    [7.76.1-29.el9_4.1] - provide common cleanup method for push headers (CVE-2024-2398)

  • High max 8.8
    ELSA-2024-5534 1 CVE

    Important: python-setuptools security update (Oracle Linux 9)

    [53.0.0-12.1] - Security fix for CVE-2024-6345 Resolves: RHEL-50466

  • High max 8.8
    ELSA-2024-5530 1 CVE

    Important: python-setuptools security update (Oracle Linux 8)

    [39.2.0-8] - Security fix for CVE-2024-6345 Resolves: RHEL-50470

  • High max 8.8
    ELSA-2024-5532 1 CVE

    Important: python3.11-setuptools security update (Oracle Linux 8)

    [65.5.1-3] - Security fix for CVE-2024-6345 Resolves: RHEL-50484

  • Low max 5.3
    ELSA-2024-5338 1 CVE

    Low: pcs security update (Oracle Linux 8)

    [0.10.18-2.0.1] - Replace HAM-logo.png with a generic one [0.10.18-2] - Updated rubygem rexml Resolves: RHEL-37883

  • High max 9.8
    ELSA-2024-5402 10 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [115.14.0-1.0.1] - Add Oracle prefs file [115.14.0] - Add OpenELA debranding [115.14.0-1] - Update to 115.14.0 build1

  • High max 9.8
    ELSA-2024-5391 11 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.14.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.14.0-2] - Update to 115.14.0 build2 [115.14.0-1] - Update …

  • Medium max 7.5
    ELSA-2024-5305 1 CVE

    Moderate: poppler security update (Oracle Linux 8)

    [20.11.0-12] - Fix crash in broken documents when using -dests - Fix versions in changelog - Resolves: RHEL-44330

  • High max 7.5
    ELSA-2024-5390 3 CVEs

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-0.22] - Minor fix of reclimit test backport (CVE-2024-1737) [32:9.16.23-0.21] - Backport addition of max-records-per-type and max-records-per-type options (CVE-2024-1737) [32:9.16.23-0.20] - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Resolve …

  • Medium max 7.5
    ELSA-2024-5289 1 CVE

    Moderate: mod_auth_openidc:2.3 security update (Oracle Linux 8)

    cjose mod_auth_openidc [2.4.9.4-6] - Resolves: RHEL-36492 Race condition in mod_auth_openidc filecache - Resolves: RHEL-25421 mod_auth_openidc: DoS when using OIDCSessionType client-cookie and manipulating cookies (CVE-2024-24814)

  • High max 9.8
    ELSA-2024-5392 10 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.14.0-1.0.1] - Add Oracle prefs [115.14.0] - Add OpenELA debranding [115.14.0-1] - Update to 115.14.0 build1

  • High max 10.0
    ELSA-2024-5363 46 CVEs 1 exploited

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-427.31.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…

  • Medium max 6.0
    ELSA-2024-5297 3 CVEs

    Moderate: edk2 security update (Oracle Linux 8)

    [20220126gitbb1bba3d77-13.el8_10.2] [20220126gitbb1bba3d77-13.el8_10.1] - edk2-MdeModulePkg-Change-use-of-EFI_D_-to-DEBUG_.patch [RHEL-21854 RHEL-21856 RHEL-40099] - edk2-MdeModulePkg-Potential-UINT32-overflow-in-S3-ResumeC.patch [RHEL-21854 RHEL-21856 RHEL-4…

  • Medium max 6.5
    ELSA-2024-5298 1 CVE

    Moderate: gnome-shell security update (Oracle Linux 8)

    [3.32.2-56] - Only open portal login in response to user action Resolves: RHEL-39097

  • Medium max 4.4
    ELSA-2024-5309 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 8)

    [1.24.2-8] - Security fix for CVE-2024-37891 Resolves: RHEL-45334

  • Medium max 9.1
    ELSA-2024-5299 1 CVE

    Moderate: wget security update (Oracle Linux 8)

    [1.19.5-12.0.1] - SSLv3 support dropped from openssl, v3 test certificates need to be replaced [Orabug: 29613455] [1.19.5-12] - Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior

  • High max 9.8
    ELSA-2024-5193 1 CVE

    Important: httpd:2.4 security update (Oracle Linux 8)

    httpd [2.4.37-65.2.0.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-65.2] - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend applications whose response headers are malicious or exploitable (CVE-2024-38476) - Res…

  • Medium max 7.0
    ELSA-2024-5306 1 CVE

    Moderate: orc security update (Oracle Linux 8)

    [0.4.28-4] - Add patch for CVE-2024-40897 - Resolves: RHEL-50710