Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 8.8

ELSA-2024-3088 1 CVE

Moderate: gstreamer1-plugins-base security update (Oracle Linux 8)

[1.16.1-3.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-3] - CVE-2023-37328 gstreamer1-plugins-base: heap overwrite in subtitle parsing - Resolves: RHEL-19472

May 23, 2024
Medium max 5.9

ELSA-2024-2986 1 CVE

Moderate: python3.11-urllib3 security update (Oracle Linux 8)

[1.26.12-2] - Security fix for CVE-2023-43804 Resolves: RHEL-11996

May 23, 2024
Medium max 5.8

ELSA-2024-2953 3 CVEs

Moderate: pcs security update (Oracle Linux 8)

[0.10.18-2.0.1] - Replace HAM-logo.png with a generic one [0.10.18-2] - Fixed CVE-2024-25126, CVE-2024-26141, CVE-2024-26146 in bundled dependency rack Resolves: RHEL-26445, RHEL-26447, RHEL-26449 [0.10.18-1] - Rebased to the latest sources (see CHANGELOG.md)…

May 23, 2024
Low max 4.8

ELSA-2024-3233 2 CVEs

Low: libssh security update (Oracle Linux 8)

[0.9.6-14] - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - …

May 23, 2024
Medium

ELSA-2024-3127 1 CVE

Moderate: zziplib security update (Oracle Linux 8)

[0.13.68-13] - Fix CVE-2020-18770 Previous patch contained segfault bug Resolves: RHEL-14966 [0.13.68-12] - Add the gating tests from the 8.8.0 branch Resolves: RHEL-24429 [0.13.68-11] - Use /usr/libexec/platform-python macro during the config phase (used for…

May 23, 2024
High

ELSA-2024-3008 1 CVE

Important: pmix security update (Oracle Linux 8)

[2.2.5-3] - Add gating test - Resolves: RHEL-3692 [2.2.5-2] - Fix CVE-2023-41915 - Resolves: RHEL-3692

May 23, 2024
Medium

ELSA-2024-3066 2 CVEs

Moderate: exempi security update (Oracle Linux 8)

[2.4.5-4] - Fix CVE-2020-18652 - Resolves: RHEL-5416 [2.4.5-3] - Fix CVE-2020-18651 - Resolves: RHEL-5415

May 23, 2024
Medium max 6.2

ELSA-2024-3056 2 CVEs

Moderate: qt5-qtbase security update (Oracle Linux 8)

[5.15.3-7] - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25725 [5.15.3-6] - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20238

May 23, 2024
Medium max 7.5

ELSA-2024-2980 1 CVE

Moderate: harfbuzz security update (Oracle Linux 8)

[1.7.5-4] - Resolves:RHEL-8400 allows attackers to trigger O(n^2) growth via consecutive marks

May 23, 2024
Medium max 5.5

ELSA-2024-3022 2 CVEs

Moderate: motif security update (Oracle Linux 8)

[2.3.4-20] - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap

May 23, 2024
Medium max 8.8

ELSA-2024-3060 3 CVEs

Moderate: gstreamer1-plugins-bad-free security update (Oracle Linux 8)

[1.16.1-4.0.1] - Update origin URL [Orabug: 36209826] [1.16.1-4] - Patch CVE-2023-40474: Integer overflow - Patch CVE-2023-40475: Integer overflow - Patch CVE-2023-40476: Integer overflow in H.265 video parser - Resolves: RHEL-19500, RHEL-19504, RHEL-19507 [1…

May 23, 2024
Medium max 5.3

ELSA-2024-3062 1 CVE

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.7-1.0.1] - Update rpm-macros description [Orabug: 36024572] [3.11.7-1] - Rebase to 3.11.7 Resolves: RHEL-21915 [3.11.5-2] - Security fix for CVE-2023-27043 Resolves: RHEL-7842

May 23, 2024
Medium

ELSA-2024-3139 2 CVEs

Moderate: squashfs-tools security update (Oracle Linux 8)

[4.3-21] - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination Resolves: rhbz#2007303 rhbz#2000637

May 23, 2024
Medium max 7.5

ELSA-2024-3120 2 CVEs

Moderate: freeglut security update (Oracle Linux 8)

[3.0.0-9] - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25175 Resolves: https://issues.redhat.com/browse/RHEL-25177

May 23, 2024
Medium max 5.5

ELSA-2024-2974 2 CVEs

Moderate: libXpm security update (Oracle Linux 8)

[3.5.12-11] - Drop hardening patches from previous version to keep ABI compatibility [3.5.12-10] - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap o…

May 23, 2024
Medium

ELSA-2024-3214 1 CVE

Moderate: gmp security update (Oracle Linux 8)

[1:6.1.2-11] - Fix: CVE-2021-43618 Resolves: RHEL-23055

May 23, 2024
Medium

ELSA-2024-3095 1 CVE

Moderate: vorbis-tools security update (Oracle Linux 8)

[1:1.4.0-29] - fix out-of-bounds read in oggenc (CVE-2023-43361)

May 23, 2024
Low

ELSA-2024-2966 1 CVE

Low: ghostscript security update (Oracle Linux 8)

[9.27-12] - fix to prevent divison by zero in devices - Resolves: rhbz#2235009

May 23, 2024
Medium max 5.4

ELSA-2024-3102 1 CVE

Moderate: python-jinja2 security update (Oracle Linux 8)

[2.10.1-4] - Security fix for CVE-2024-22195 Resolves: RHEL-21347 [2.10.1-3] - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern Resolves: rhbz#1928707 [2.10.1-2] - Rebuild of package to go through gating - Resolves: rhbz#1701301 [2.10.1-1] - Reb…

May 23, 2024
Medium max 7.5

ELSA-2024-3005 1 CVE

Moderate: python-pillow security update (Oracle Linux 8)

[5.1.1-20] - Security fix for CVE-2023-50447 Resolves: RHEL-22240 [5.1.1-19] - Security fix for CVE-2023-44271 Resolves: RHEL-15460

May 23, 2024
Medium max 5.9

ELSA-2024-2968 3 CVEs

Moderate: fence-agents security and bug fix update (Oracle Linux 8)

[4.2.1-129] - bundled urllib3: fix CVE-2023-45803 Resolves: RHEL-18132 - bundled pycryptodome: fix CVE-2023-52323 Resolves: RHEL-20915 - bundled jinja2: fix CVE-2024-22195 Resolves: RHEL-22174 [4.2.1-127] - fence_scsi: fix registration handling if ISID confli…

May 23, 2024
Medium max 9.8

ELSA-2024-2996 9 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 8)

[21.1.3-15] Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408, CVE-2024-0409 [21.1.3-14] - Fix for CVE-2023-6377, CVE-2023-6478 [21.1.3-13] - Fix for CVE-2023-5367

May 23, 2024
Medium max 7.6

ELSA-2024-3089 1 CVE

Moderate: gstreamer1-plugins-good security update (Oracle Linux 8)

[1.16.1-4] - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC image tag handling - Resolves: RHEL-19469

May 23, 2024
High max 8.3

ELSA-2024-3017 8 CVEs

Important: edk2 security update (Oracle Linux 8)

[20220126gitbb1bba3d77-13] - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158] - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-21158] - Resolves: RHEL-21158 (CVE-2022-36765 edk2: integer overflow in CreateHob() could l…

May 23, 2024
Medium max 5.9

ELSA-2024-3203 1 CVE

Moderate: systemd security update (Oracle Linux 8)

[239-82.0.1] - Fixed deletion issue for symlink when device is opened [Orabug: 36228608] - Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 35871376] - 1A) Add 'systemd-fstab-generator-reload-targets.service' file…

May 23, 2024
Medium max 7.8

ELSA-2024-3166 1 CVE

Moderate: openssh security update (Oracle Linux 8)

[8.0p1-24.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-24] - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 [8.0p1-23] - Fix Terrapin attack Resolves: RHEL-19308 [8.0p1-22] - Fix Terrapin attack Resolves: RHEL-…

May 23, 2024
Medium max 8.1

ELSA-2024-3138 48 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-553.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

May 23, 2024
Medium

ELSA-2024-3030 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

[1.0.28-14] - fix integer overflows causing CVE-2022-33065 (#RHEL-3750)

May 23, 2024
Medium

ELSA-2024-2979 1 CVE

Moderate: poppler security update (Oracle Linux 8)

[21.01.0-11] - Fix crashes in FoFiType1C - Rebuild for inclusion of poppler-glib-doc in CRB - Resolves: RHEL-4255, RHEL-4273 [21.01.0-10] - Check XRef's Catalog for being a Dict - Resolves: #2189816 [20.11.0-9] - Check isDict before calling getDict 2 - Resolv…

May 23, 2024
Medium max 7.8

ELSA-2024-2973 3 CVEs

Moderate: libX11 security update (Oracle Linux 8)

[1.6.8-8] - Backport fix for Xlib lockups due to recursive XError (RHEL-23452) [1.6.8-7] - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms() - Fix CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage() - Fix CVE-2023-4378…

May 23, 2024
Medium max 5.5

ELSA-2024-3163 1 CVE

Moderate: pam security update (Oracle Linux 8)

[1.3.1-33] - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 [1.3.1-32] - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 [1.3.1-31] - pam_faillock: create tallydir before cr…

May 23, 2024
High max 9.8

ELSA-2024-2982 10 CVEs

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.42.5-1] - Update to 2.42.5 Resolves: RHEL-3961 [2.42.4-1] - Update to 2.42.4 Resolves: RHEL-3961 Resolves: RHEL-19365 [2.42.3-1] - Update to 2.42.3 Resolves: RHEL-3961 [2.42.2-1] - Update to 2.42.2 Resolves: RHEL-3961 [2.42.1-1] - Update to 2.42.1 Resolves…

May 23, 2024
Medium max 4.3

ELSA-2024-3058 2 CVEs

Moderate: mutt security update (Oracle Linux 8)

[5:2.0.7-3] - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2811

May 23, 2024
Medium

ELSA-2024-3049 1 CVE

Moderate: perl-Convert-ASN1 security update (Oracle Linux 8)

[0.27-18] - Fix unsafe decoding in indef case (CVE-2013-7488)

May 23, 2024
Medium max 7.8

ELSA-2024-2995 9 CVEs

Moderate: xorg-x11-server security update (Oracle Linux 8)

[1.20.4-24] - Fix use after free related to CVE-2024-21886 [1.20.11-21] - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886, CVE-2024-0408 and CVE-2024-0409 Resolves: https://issues.redhat.com/browse/RHEL-21207 Resolves: https://issues…

May 23, 2024
Medium max 6.8

ELSA-2024-3059 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-31] - Fix CVE-2022-3599 CVE-2022-4645 - Resolves: RHEL-5399 [4.0.9-30] - Bump specfile to retrigger gating - Add tests folder for standard beakerlib - Related: RHEL-4683 RHEL-4685 RHEL-4686 RHEL-4687 RHEL-4688

May 23, 2024
Medium max 5.0

ELSA-2024-3043 1 CVE

Moderate: ansible-core bug fix, enhancement, and security update (Oracle Linux 8)

[2.16.3-2] - rebuild with python 3.12 (RHEL-24141) [2.16.3-1] - ansible-core 2.16.3 release (RHEL-23782) - Fix CVE-2024-0690 (possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration) (RHEL-22123) [2.16.2-1] - ansible-core 2.16.2 release (R…

May 23, 2024
Medium

ELSA-2024-2981 5 CVEs

Moderate: frr security update (Oracle Linux 8)

[7.5.1-22.0.1] - Fix POSTIN scriptlet [Orabug: 34712485] - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgp_flowspec.c - Resolves: RHEL-15919 - Out of bounds read in bgpd/bgp_label.c - Resolves: RHEL-15869 - crash from specially crafted MP_UNREACH_NLRI-co…

May 23, 2024
Medium max 5.5

ELSA-2024-3211 1 CVE

Moderate: traceroute security update (Oracle Linux 8)

[3:2.1.0-8] - add gating.yaml [3:2.1.0-7] - fix improper command line parsing (CVE-2023-46316)

May 23, 2024
Medium max 4.7

ELSA-2024-3067 1 CVE

Moderate: tigervnc security update (Oracle Linux 8)

[1.13.1-8] - Fix copy/paste error in the DeviceStateNotify Resolves: RHEL-20530 [1.13.1-7] - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20388 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer o…

May 23, 2024