Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 7.3
    ELSA-2024-4756 1 CVE

    Moderate: libuv security update (Oracle Linux 9)

    [1:1.42.0-2] - Backport fix for CVE-2024-24806 Resolves: RHEL-24791

  • Medium max 4.4
    ELSA-2024-4776 1 CVE

    Moderate: cups security update (Oracle Linux 9)

    [1:2.3.3op2-27] - Revert the cups-libs license identifier to the 'legacy' format [1:2.3.3op2-26] - RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks [1:2.3.…

  • High max 7.5
    ELSA-2024-4762 1 CVE

    Important: runc security update (Oracle Linux 9)

    [4:1.1.12-3] - rebuild for CVE-2024-1394 - Resolves: RHEL-24320

  • High max 8.8
    ELSA-2024-12546 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-208.159.3.2] - net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36660755]

  • High max 8.6
    ELSA-2024-4617 1 CVE

    Important: qt5-qtbase security update (Oracle Linux 8)

    [5.15.3-8] - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46340

  • High max 8.1
    ELSA-2024-4620 1 CVE

    Important: libndp security update (Oracle Linux 8)

    [1.7-7] - Validate route information option length

  • High max 7.5
    ELSA-2024-4635 3 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [115.13.0-3.0.1] - Add Oracle prefs file [115.13.0] - Add OpenELA debranding [115.13.0-3] - Update to 115.13.0 build5 [115.13.0-2] - Update to 115.13.0 build3 [115.13.0-1] - Update to 115.13.0 build1

  • High max 8.6
    ELSA-2024-4623 1 CVE

    Important: qt5-qtbase security update (Oracle Linux 9)

    [5.15.9-10] - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46348

  • High max 7.4
    ELSA-2024-4568 5 CVEs

    Important: java-17-openjdk security update (Oracle Linux 8)

    [1:17.0.12.0.7-2.0.1] - Add Oracle vendor bug URL [1:17.0.12.0.7-2] - Update to jdk-17.0.12+7 (GA) - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz - Sync java-17-openjdk-portable.specfile - Set buildver to 7 - Set portablerelease 1 - Set is_ga to 1 - U…

  • High max 7.5
    ELSA-2024-4624 3 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.13.0-3.0.1] - Add Oracle prefs [115.13.0] - Add OpenELA debranding [115.13.0-3] - Update to 115.13.0 build5 [115.13.0-2] - Update to 115.13.0 build3 [115.13.0-1] - Update to 115.13.0 build1

  • High max 7.4
    ELSA-2024-4573 5 CVEs

    Important: java-21-openjdk security update (Oracle Linux 8)

    [1:21.0.4.0.7-1.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.4.0.7-1] - Update to jdk-21.0.4+7 (GA) - Update release notes to 21.0.4+7 - Switch to GA mode. - Sync the copy of the portable specfile with the latest update - Add missing section he…

  • High max 9.8
    ELSA-2024-4583 17 CVEs

    Important: kernel security update (Oracle Linux 9)

    - [5.14.0-427.26.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 7.4
    ELSA-2024-4567 6 CVEs

    Important: java-11-openjdk security update (Oracle Linux 8)

    [11.0.24.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:11.0.24.0.8-1] - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release…

  • High max 8.1
    ELSA-2024-4636 1 CVE

    Important: libndp security update (Oracle Linux 9)

    [1.8-6] - Validate route information option length [1.8-5] - Convert the license tag to SPDX format Related: RHELMISC-1363

  • High max 7.4
    ELSA-2024-4563 6 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1.8.0.422.b05-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.422.b05-1.1] - Update to shenandoah-jdk8u422-b05 (GA) - Update release notes for shenandoah-8u422-b05. - Rebase PR2462 patch following patched hunk being removed by JDK-8322106 - Sw…

  • Medium max 6.0
    ELSA-2024-12536 2 CVEs

    Moderate: virt:kvm_utils3 bug fix update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [9.0.0-5.el8] - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441} libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [7…

  • Medium max 9.8
    ELSA-2024-4499 5 CVEs

    Moderate: ruby security update (Oracle Linux 8)

    ruby [2.5.9-112] - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755. (CVE-2023-36617) Resolves: RHEL-5614 - Fix Buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34125 - Fix RCE vulnerability with .rdoc_options i…

  • High max 7.8
    ELSA-2024-4420 1 CVE

    Important: virt:ol and virt-devel:ol security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-50] - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35616] - kvm-iotests-244-Don-t-store-data-file-wit…

  • High max 7.5
    ELSA-2024-4502 1 CVE

    Important: skopeo security update (Oracle Linux 9)

    [2:1.14.3-3] - golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

  • High max 7.5
    ELSA-2024-4517 3 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.13.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.13.0-3] - Update to 115.13.0 build3 [115.13.0-2] - Update …

  • High max 7.5
    ELSA-2024-4500 3 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.13.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.13.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.13.0-3] - Update to 115.13.0 build3 [115.13.0-2] - Update …

  • High max 8.1
    ELSA-2024-4451 3 CVEs

    Important: dotnet8.0 security update (Oracle Linux 8)

    [8.0.107-1.0.1] - Add support for Oracle Linux [8.0.107-1] - Update to .NET SDK 8.0.107 and Runtime 8.0.7 - Resolves: RHEL-45322

  • High max 7.5
    ELSA-2024-4367 1 CVE

    Important: pki-core security update (Oracle Linux 8)

    jss ldapjdk pki-core [10.15.1-1.0.1] - Remove upstream reference [10.15.1-1] - Rebase to PKI 10.15.1 - Fix CVE 2023-4727 resteasy tomcatjss

  • Medium max 6.2
    ELSA-2024-4351 1 CVE

    Moderate: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [8.0.0-23.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-23.2] - util: Fix error return for virProce…

  • High max 8.1
    ELSA-2024-4450 3 CVEs

    Important: dotnet8.0 security update (Oracle Linux 9)

    [8.0.107-1.0.1] - Add support for Oracle Linux [8.0.107-1] - Update to .NET SDK 8.0.107 and Runtime 8.0.7 - Resolves: RHEL-45324

  • Medium max 7.0
    ELSA-2024-4457 1 CVE

    Moderate: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2.4] - Possible remote code execution due to a race condition (CVE-2024-6409) Resolves: RHEL-45741

  • Medium max 7.5
    ELSA-2024-4438 1 CVE

    Moderate: dotnet6.0 security update (Oracle Linux 8)

    [6.0.132-1.0.1] - Add support for Oracle Linux [6.0.132-1] - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45319

  • Medium max 4.4
    ELSA-2024-4422 1 CVE

    Moderate: fence-agents security update (Oracle Linux 9)

    [4.10.0-62.4] - bundled urllib3: fix CVE-2024-37891 Resolves: RHEL-43956

  • Medium max 7.5
    ELSA-2024-4439 1 CVE

    Moderate: dotnet6.0 security update (Oracle Linux 9)

    [6.0.132-1.0.1] - Add support for Oracle Linux [6.0.132-1] - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45321

  • Medium max 6.5
    ELSA-2024-4376 1 CVE

    Moderate: libreswan security update (Oracle Linux 8)

    [4.12-2.0.1.4] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2.4] - Fix CVE-2024-3652 (RHEL-32482)

  • High max 7.5
    ELSA-2024-4371 1 CVE

    Important: buildah security update (Oracle Linux 9)

    [1.33.7-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-3] - rebuild for CVE-2024-1394 - Resolves: RHEL-24307

  • High max 7.5
    ELSA-2024-4378 1 CVE

    Important: podman security update (Oracle Linux 9)

    [4.9.4-5.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for compr…

  • High max 7.5
    ELSA-2024-4379 1 CVE

    Important: gvisor-tap-vsock security update (Oracle Linux 9)

    [6:0.7.3-4] - rebuild for CVE-2024-1394 - Resolves: RHEL-24315

  • Medium max 9.8
    ELSA-2024-4349 8 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 9)

    - [5.14.0-427.24.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…

  • High max 8.1
    ELSA-2024-4312 1 CVE

    Important: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2.1] - Update upstream references [Orabug: 36564626] [8.7p1-38.1] - Possible remote code execution due to a race condition (CVE-2024-6387) Resolves: RHEL-45347

  • Medium max 6.2
    ELSA-2024-4243 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [3.12.3-2] - Enable importing of hash-based .pyc files under FIPS mode Resolves: RHEL-40776 [3.12.3-1] - Update to 3.12.3 Related: RHEL-33685 [3.12.2-3] - Move all test modules to the python3-test package, namely: - __phello__ - _xxsubinterpreters - xxlimited…

  • High max 7.5
    ELSA-2024-4235 2 CVEs

    Important: 389-ds security update (Oracle Linux 8)

    [1.4.3.39-7] - Bump version to 1.4.3.39-7 - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached. [rhel-8.10.0.z] [1.4.3.39-6] - Bump version to 1.4.3.39-6 - Resolves: RHEL-16277 - LDAP connections are closed …

  • Medium max 6.5
    ELSA-2024-4242 1 CVE

    Moderate: libreoffice security update (Oracle Linux 8)

    [6.4.7.2-17.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [6.4.7.2] - Remove Red Hat branding - Change vendor to RESF [1:6.4.7.2-17] - Fix CVE-202…

  • Medium max 6.3
    ELSA-2024-4245 1 CVE

    Moderate: python3 security update (Oracle Linux 8)

    [1.1.0-3] - Security fix for CVE-2024-36039 Resolves: RHEL-38366

  • Medium max 5.9
    ELSA-2024-4241 2 CVEs

    Moderate: iperf3 security update (Oracle Linux 8)

    [3.5-10] - Resolves: RHEL-29578 - vulnerable to marvin attack if the authentication option is used [3.5-9] - Resolves: RHEL-17069 - possible denial of service [3.5-8] - Related: #2222205 - bumping nvr for correct update path