Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,316 results · Feed

  • Medium max 5.4
    ELSA-2024-4231 1 CVE

    Moderate: python-jinja2 security update (Oracle Linux 8)

    [2.10.1-5] - Security fix for CVE-2024-34064 Resolves: RHEL-35651

  • Medium max 6.2
    ELSA-2024-4260 1 CVE

    Moderate: python-idna security update (Oracle Linux 8)

    [2.5-7] - Fix patch application for security fix for CVE-2024-3651 Resolves: RHEL-32703 [2.5-6] - Security fix for CVE-2024-3651 Resolves: RHEL-32703

  • Medium max 7.5
    ELSA-2024-4246 1 CVE

    Moderate: container-tools security update (Oracle Linux 8)

    aardvark-dns [2:1.10.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 [2:1.9.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related: Jira:RHEL-2110 [2:1.8.0-1] - upda…

  • Medium max 9.8
    ELSA-2024-4237 2 CVEs

    Moderate: go-toolset security update (Oracle Linux 8)

    delve [1.21.2-3.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.21.2-3] - Skip an additional test as it's breaking in the CI system. - Modify the name of the patch. - Resolves: RHEL-22820 [1.21.2-2] - Fix: Remove architectures from exclu…

  • High max 7.5
    ELSA-2024-4222 1 CVE

    Important: pki-core security update (Oracle Linux 7)

    [10.5.18-32] - ########################################################################## - # RHEL 7.9 (Async Security Update CY24Q2.4): - ########################################################################## - Updated nspr-devel and nss-devel build requ…

  • Medium max 6.3
    ELSA-2024-4244 1 CVE

    Moderate: python3.11-PyMySQL security update (Oracle Linux 8)

    [1.0.2-2] - Security fix for CVE-2024-36039 Resolves: RHEL-38365

  • Medium max 7.3
    ELSA-2024-4247 1 CVE

    Moderate: libuv security update (Oracle Linux 8)

    [1:1.41.1-2] - Backport fixes for CVE-2024-24806 Resolves: RHEL-24790

  • Medium max 6.7
    ELSA-2024-4227 1 CVE

    Moderate: python-pillow security update (Oracle Linux 8)

    [5.1.1-21] - Security fix for CVE-2024-28219 Resolves: RHEL-31071

  • Low max 7.5
    ELSA-2024-4264 1 CVE

    Low: openldap security update (Oracle Linux 8)

    [2.4.46-19] - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function

  • Low max 4.4
    ELSA-2024-4249 1 CVE

    Low: c-ares security update (Oracle Linux 8)

    [1.13.0-11] - Resolves: RHEL-26525 - c-ares: Out of bounds read in ares__read_line() [rhel-8]

  • Medium max 5.3
    ELSA-2024-4252 1 CVE

    Moderate: nghttp2 security update (Oracle Linux 8)

    [1.33.0-6.1] - fix CONTINUATION frames DoS (CVE-2024-27316) [1.33.0-6] - fix CONTINUATION frames DoS (CVE-2024-28182)

  • High max 8.6
    ELSA-2024-4256 2 CVEs

    Important: less security update (Oracle Linux 8)

    [530-3] - Fix CVE-2024-32487 - Resolves: RHEL-32738

  • Medium max 4.4
    ELSA-2024-4265 1 CVE

    Moderate: cups security update (Oracle Linux 8)

    [ - 1:2.2.6-60] - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks [1:2.2.6-59] - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.sock…

  • Medium max 7.5
    ELSA-2024-4259 1 CVE

    Moderate: xmlrpc-c security and bug fix update (Oracle Linux 8)

    [1.51.0-9] - Address segfault found in CVE-2023-52425 (RHEL-24226)

  • High max 9.8
    ELSA-2024-4211 61 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    - [4.18.0-553.8.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

  • High max 7.8
    ELSA-2024-4278 1 CVE

    Important: qemu-kvm security update (Oracle Linux 9)

    [8.2.0-11.el9_4.4] - Fixing CVE-2024-4467 - Resolves: RHEL-35610

  • Medium max 9.8
    ELSA-2024-4212 2 CVEs

    Moderate: golang security update (Oracle Linux 9)

    [1.21.11-1] - Update to Go 1.21.11 that fixes CVE-2024-24789 and CVE-2024-24790 - Resolves: RHEL-40275

  • Medium max 7.3
    ELSA-2024-4197 1 CVE

    Moderate: httpd:2.4/httpd security update (Oracle Linux 8)

    httpd [2.4.37-65.0.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-65] - Resolves: RHEL-31857 - httpd:2.4/httpd: HTTP response splitting (CVE-2023-38709) mod_http2 mod_md

  • High max 8.1
    ELSA-2024-12468 1 CVE

    Important: openssh security update (Oracle Linux 9)

    [8.7p1-38.0.2] - Restore dropped earlier ifdef condition for safe _exit(1) call in sshsigdie() [Orabug: 36783468] Resolves CVE-2024-6387

  • High max 7.5
    ELSA-2024-4165 1 CVE

    Important: pki-core security update (Oracle Linux 9)

    [11.5.0-2.0.1] - Replaced upstream graphical references [Orabug: 33952704] [11.5.0-2] - RHEL-9916 CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability

  • High max 9.1
    ELSA-2024-4084 5 CVEs

    Important: git security update (Oracle Linux 8)

    [2.43.5-1] - Update to 2.43.5 - Related: RHEL-36399, RHEL-36411 [2.43.4-1] - Update to 2.43.4 - Resolves: RHEL-36399, RHEL-36411

  • High max 7.8
    ELSA-2024-4077 1 CVE

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.7-1.1] - Security fix for CVE-2023-6597 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33884

  • High max 9.1
    ELSA-2024-4083 5 CVEs

    Important: git security update (Oracle Linux 9)

    [2.43.5-1] - Update to 2.43.5 - Related: RHEL-36402, RHEL-36414 [2.43.4-1] - Update to 2.43.4 - Resolves: RHEL-36402, RHEL-36414

  • High max 7.8
    ELSA-2024-4078 2 CVEs

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.18-3.1] - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33887, RHEL-34287

  • High max 7.8
    ELSA-2024-4058 2 CVEs

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.9-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.9-1] - Rebase to 3.11.9 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix expat tests for the latest expat security release Resolves: RHEL-33672, RHEL-33684

  • Medium max 6.5
    ELSA-2024-4050 1 CVE

    Moderate: libreswan security update (Oracle Linux 9)

    [4.12-2.0.1.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2.1] - Fix CVE-2024-3652 (RHEL-40102)

  • High max 8.6
    ELSA-2024-4016 7 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [115.12.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.6
    ELSA-2024-4036 7 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [115.12.1-1.0.1] - Add Oracle prefs file [115.12.1] - Add OpenELA debranding [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.8
    ELSA-2024-4000 1 CVE

    Important: ghostscript security update (Oracle Linux 8)

    [9.27-13] - CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

  • Medium max 5.3
    ELSA-2024-3501 1 CVE

    Moderate: nghttp2 security update (Oracle Linux 9)

    [1.43.0-5.2] - fix CONTINUATION frames DoS (CVE-2024-28182, CVE-2024-27316)

  • High max 8.8
    ELSA-2024-3999 1 CVE

    Important: ghostscript security update (Oracle Linux 9)

    [9.54.0-16] - RHEL-39110 fix regression discovered in OPVP device [9.54.0-15] - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library

  • High max 8.6
    ELSA-2024-4002 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [115.12.1-1.0.1] - Add Oracle prefs [115.12.1] - Add OpenELA debranding [115.12.1-1] - Update to 115.12.1 build1 [115.12.0-2] - Update to 115.12.0 build2 [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3980 1 CVE

    Important: flatpak security update (Oracle Linux 7)

    [1.0.9-13] - Fix CVE-2024-32462

  • Medium max 4.9
    ELSA-2024-3968 2 CVEs

    Moderate: container-tools:ol8 bug fix and enhancement update (Oracle Linux 8)

    aardvark-dns [2:1.10.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.10.0 - Related: Jira:RHEL-2110 [2:1.9.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0 - Related: Jira:RHEL-2110 [2:1.8.0-1] - upda…

  • High max 8.6
    ELSA-2024-3951 7 CVEs

    Important: firefox security update (Oracle Linux 7)

    [115.12.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3961 1 CVE

    Important: flatpak security update (Oracle Linux 8)

    [1.12.9-1] - Update to 1.12.9 (CVE-2024-32462) [1.12.8-1] - Rebase to 1.12.8 (RHEL-4220) [1.10.8-3] - Let flatpak own %{_sysconfdir}/flatpak (RHEL-15822)

  • High max 8.6
    ELSA-2024-3954 7 CVEs

    Important: firefox security update (Oracle Linux 8)

    [115.12.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.6
    ELSA-2024-3955 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [115.12.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.12.0-1] - Update to 115.12.0 build1

  • High max 8.4
    ELSA-2024-3959 1 CVE

    Important: flatpak security update (Oracle Linux 9)

    [1.12.9-1] - Update to 1.12.9 (CVE-2024-32462)

  • Medium max 5.5
    ELSA-2024-12435 2 CVEs

    Moderate: virt:kvm_utils1 security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt [5.7.0-42] - Document CVEs as fixed (Karl Heubaum) {CVE-2023-2700} - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364474] {CVE-2024-1441} - libvirt-<module>: C…