Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

296 results · Clear filters · Feed

High max 7.5

ELSA-2023-5928 1 CVE 1 exploited

Important: tomcat security update (Oracle Linux 8)

[1:9.0.62-5.2] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 24, 2023
High max 7.5

ELSA-2023-5924 1 CVE 1 exploited

Important: varnish security update (Oracle Linux 9)

[6.6.2-3.el9_2.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 - Resolves: RHEL-12818

Oct 24, 2023
High max 7.5

ELSA-2023-5869 4 CVEs 1 exploited

Important: nodejs:18 security update (Oracle Linux 8)

nodejs [1:18.18.2-1] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon nodejs-packaging

Oct 23, 2023
High max 7.5

ELSA-2023-5929 1 CVE 1 exploited

Important: tomcat security update (Oracle Linux 9)

[1:9.0.62-11.3] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 23, 2023
High max 7.5

ELSA-2023-5850 1 CVE 1 exploited

Important: nodejs:16 security update (Oracle Linux 8)

nodejs [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df

Oct 20, 2023
High max 7.5

ELSA-2023-5765 1 CVE 1 exploited

Important: nodejs security update (Oracle Linux 9)

[1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487

Oct 20, 2023
High max 7.5

ELSA-2023-5849 4 CVEs 1 exploited

Important: 18 security update (Oracle Linux 9)

nodejs [1:18.18.2-2] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundl…

Oct 20, 2023
High max 7.5

ELSA-2023-5709 1 CVE 1 exploited

Important: dotnet7.0 security update (Oracle Linux 8)

[7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698

Oct 19, 2023
High max 7.5

ELSA-2023-5837 1 CVE 1 exploited

Important: nghttp2 security update (Oracle Linux 8)

[1.33.0-5] - fix HTTP/2 Rapid Reset (CVE-2023-44487) [1.33.0-4] - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080)

Oct 19, 2023
High max 7.5

ELSA-2023-5838 1 CVE 1 exploited

Important: nghttp2 security update (Oracle Linux 9)

[1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487)

Oct 19, 2023
High max 7.5

ELSA-2023-5721 2 CVEs 1 exploited

Important: go-toolset:ol8 security update (Oracle Linux 8)

delve golang [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487] go-toolset [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487]

Oct 18, 2023
High max 7.5

ELSA-2023-5710 1 CVE 1 exploited

Important: dotnet6.0 security update (Oracle Linux 8)

[6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696

Oct 18, 2023
High max 7.5

ELSA-2023-5749 1 CVE 1 exploited

Important: .NET 7.0 security update (Oracle Linux 9)

[7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698

Oct 18, 2023
High max 7.5

ELSA-2023-5738 3 CVEs 1 exploited

Important: go-toolset and golang security and bug fix update (Oracle Linux 9)

golang [1.19.13-1] - Update to go 1.19.13 [CVE-2023-44487] [CVE-2023-39325] [CVE-2023-29409] go-toolset [1.19.13-1] - Update to Go version 1.19.13

Oct 18, 2023
High max 7.5

ELSA-2023-5708 1 CVE 1 exploited

Important: dotnet6.0 security update (Oracle Linux 9)

[6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696

Oct 18, 2023
High max 9.8

ELSA-2023-5477 5 CVEs 1 exploited

Important: firefox security update (Oracle Linux 7)

[115.3.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.3.1-1] - Update to 115.3.1 [115.3.0-1] - Update to 1…

Oct 13, 2023
High max 9.8

ELSA-2023-5475 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 7)

[115.3.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.3.1-1] - Update to 115.3.1 build1 [115.3.0-1] - Update to 115.3.0 [115.2.1-5] - Update to 115.2.1

Oct 13, 2023
High max 8.8

ELSA-2023-5539 2 CVEs 1 exploited

Important: libvpx security update (Oracle Linux 9)

[1.9.0-7] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

Oct 11, 2023
High max 8.8

ELSA-2023-5537 2 CVEs 1 exploited

Important: libvpx security update (Oracle Linux 8)

[1.7.0-10] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

Oct 10, 2023
High max 7.8

ELSA-2023-5453 4 CVEs 1 exploited

Important: glibc security update (Oracle Linux 9)

[2.34-60.0.3.7] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716). - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet. Reviewed by: Jose E. Marchesi <jose.marchesi@oracl…

Oct 10, 2023
High max 9.8

ELSA-2023-5433 5 CVEs 1 exploited

Important: firefox security update (Oracle Linux 8)

[115.3.1-1.0.1] - Update to 115.3.1

Oct 6, 2023
High max 9.8

ELSA-2023-5428 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[115.3.1-1.0.1] - Update to 115.3.1 build1

Oct 6, 2023
High max 7.8

ELSA-2023-12851 1 CVE 1 exploited

Important: glibc security update (Oracle Linux 8)

[2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

Oct 5, 2023
High max 9.8

ELSA-2023-5434 5 CVEs 1 exploited

Important: firefox security update (Oracle Linux 9)

[115.3.1-1.0.1] - Update to 115.3.1

Oct 5, 2023
High max 7.8

ELSA-2023-12850 1 CVE 1 exploited

Important: glibc security update (Oracle Linux 9)

[2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

Oct 5, 2023
High max 9.8

ELSA-2023-5435 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[115.3.1-1.0.1] - Update to 115.3.1 build1

Oct 5, 2023
High max 8.8

ELSA-2023-5309 1 CVE 1 exploited

Important: libwebp security update (Oracle Linux 8)

[1.0.0-8.1] - Added fix for CVE-2023-4863

Sep 20, 2023
High max 8.8

ELSA-2023-5191 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 7)

[102.15.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.1-1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5197 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 7)

[102.15.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.1-1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5201 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[102.15.1-1.0.1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5184 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 8)

[102.15.1-1.0.1] - Update to 102.15.1 build2

Sep 19, 2023
High max 8.8

ELSA-2023-5224 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[102.15.1-1.0.1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5214 1 CVE 1 exploited

Important: libwebp security update (Oracle Linux 9)

[1.2.0-7] - Added fix for CVE-2023-4863

Sep 19, 2023
High max 8.8

ELSA-2023-5200 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 9)

[102.15.1-1.0.1] - Update to 102.15.1 build2

Sep 19, 2023
High max 7.8

ELSA-2023-4644 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 16, 2023
High max 7.8

ELSA-2023-4642 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 16, 2023
High max 7.8

ELSA-2023-4645 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 15, 2023
High max 7.8

ELSA-2023-4643 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 15, 2023
High max 8.8

ELSA-2023-4202 2 CVEs 2 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.38.5-1.5] - Disable JIT (CVE-2023-32435, CVE-2023-32439)

Jul 20, 2023
High max 8.8

ELSA-2023-4201 2 CVEs 2 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.38.5-1.3] - Disable JIT (CVE-2023-32435, CVE-2023-32439)

Jul 20, 2023