ELBA-2024-12667 Oracle Linux 8 crash bug fix update
ELSA-2024-4560 Important: Oracle Linux 7 java-1.8.0-openjdk security update (aarch64)
ELSA-2024-4549 Important: Oracle Linux 7 ghostscript security update (aarch64)
ELSA-2024-4560 Important: Oracle Linux 7 java-1.8.0-openjdk security update
ELSA-2024-4549 Important: Oracle Linux 7 ghostscript security update
ELBA-2024-12667 Oracle Linux 8 crash bug fix update
Oracle Linux Bug Fix Advisory ELBA-2024-12667
http://linux.oracle.com/errata/ELBA-2024-12667.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
x86_64:
crash-8.0.5-1.0.2.el8.x86_64.rpm
crash-devel-8.0.5-1.0.2.el8.i686.rpm
crash-devel-8.0.5-1.0.2.el8.x86_64.rpm
aarch64:
crash-8.0.5-1.0.2.el8.aarch64.rpm
crash-devel-8.0.5-1.0.2.el8.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//crash-8.0.5-1.0.2.el8.src.rpm
Description of changes:
[8.0.5-1.0.2]
- Fix crash tool fails with vmcore/kcore of mainline/LUCI kernels [Orabug: 36934225]
ELSA-2024-4560 Important: Oracle Linux 7 java-1.8.0-openjdk security update (aarch64)
Oracle Linux Security Advisory ELSA-2024-4560
http://linux.oracle.com/errata/ELSA-2024-4560.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
aarch64:
java-1.8.0-openjdk-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
java-1.8.0-openjdk-devel-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
java-1.8.0-openjdk-headless-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
java-1.8.0-openjdk-demo-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.412.b08-1.0.1.el7_9.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-1.0.1.el7_9.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.412.b08-1.0.1.el7_9.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//java-1.8.0-openjdk-1.8.0.412.b08-1.0.1.el7_9.src.rpm
Related CVEs:
CVE-2024-21131
CVE-2024-21138
CVE-2024-21140
CVE-2024-21144
CVE-2024-21145
CVE-2024-21147
Description of changes:
[1:1.8.0.412.b08-1.0.1]
- Fixes openjdk below given CVE issues
- CVE-2024-21131 Improve-UTF8-String-supports
- CVE-2024-21138 Better-symbol-storage
- Fixes bad immediate dominator info openjdk bug8262017
- Fixes malformed control flow openjdk bug8303466
- CVE-2024-21140 Improved-loop-handling
- CVE-2024-21144 Enhance-Pack-200-loading
- CVE-2024-21145 Improve-2D-image-handling
- CVE-2024-21147 Improve-array-management
ELSA-2024-4549 Important: Oracle Linux 7 ghostscript security update (aarch64)
Oracle Linux Security Advisory ELSA-2024-4549
http://linux.oracle.com/errata/ELSA-2024-4549.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
aarch64:
ghostscript-9.25-5.0.1.el7.aarch64.rpm
ghostscript-cups-9.25-5.0.1.el7.aarch64.rpm
ghostscript-doc-9.25-5.0.1.el7.noarch.rpm
ghostscript-gtk-9.25-5.0.1.el7.aarch64.rpm
libgs-9.25-5.0.1.el7.aarch64.rpm
libgs-devel-9.25-5.0.1.el7.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//ghostscript-9.25-5.0.1.el7.src.rpm
Related CVEs:
CVE-2024-33871
Description of changes:
[9.25-5.0.1]
- Fixes CVE-2024-33871 OPVP device arbitrary code execution via custom Driver library
ELSA-2024-4560 Important: Oracle Linux 7 java-1.8.0-openjdk security update
Oracle Linux Security Advisory ELSA-2024-4560
http://linux.oracle.com/errata/ELSA-2024-4560.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
java-1.8.0-openjdk-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
java-1.8.0-openjdk-accessibility-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-accessibility-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-demo-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-devel-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-headless-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.412.b08-1.0.1.el7_9.noarch.rpm
java-1.8.0-openjdk-javadoc-zip-1.8.0.412.b08-1.0.1.el7_9.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.412.b08-1.0.1.el7_9.i686.rpm
java-1.8.0-openjdk-src-1.8.0.412.b08-1.0.1.el7_9.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//java-1.8.0-openjdk-1.8.0.412.b08-1.0.1.el7_9.src.rpm
Related CVEs:
CVE-2024-21131
CVE-2024-21138
CVE-2024-21140
CVE-2024-21144
CVE-2024-21145
CVE-2024-21147
Description of changes:
[1:1.8.0.412.b08-1.0.1]
- Fixes openjdk below given CVE issues
- CVE-2024-21131 Improve-UTF8-String-supports
- CVE-2024-21138 Better-symbol-storage
- Fixes bad immediate dominator info openjdk bug8262017
- Fixes malformed control flow openjdk bug8303466
- CVE-2024-21140 Improved-loop-handling
- CVE-2024-21144 Enhance-Pack-200-loading
- CVE-2024-21145 Improve-2D-image-handling
- CVE-2024-21147 Improve-array-management
ELSA-2024-4549 Important: Oracle Linux 7 ghostscript security update
Oracle Linux Security Advisory ELSA-2024-4549
http://linux.oracle.com/errata/ELSA-2024-4549.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
ghostscript-9.25-5.0.1.el7.i686.rpm
ghostscript-9.25-5.0.1.el7.x86_64.rpm
ghostscript-cups-9.25-5.0.1.el7.x86_64.rpm
ghostscript-doc-9.25-5.0.1.el7.noarch.rpm
ghostscript-gtk-9.25-5.0.1.el7.x86_64.rpm
libgs-9.25-5.0.1.el7.i686.rpm
libgs-9.25-5.0.1.el7.x86_64.rpm
libgs-devel-9.25-5.0.1.el7.i686.rpm
libgs-devel-9.25-5.0.1.el7.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//ghostscript-9.25-5.0.1.el7.src.rpm
Related CVEs:
CVE-2024-33871
Description of changes:
[9.25-5.0.1]
- Fixes CVE-2024-33871 OPVP device arbitrary code execution via custom Driver library
