Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 7.5

ELSA-2024-1462 1 CVE

Important: golang security update (Oracle Linux 9)

[1.20.12-2] - Fix CVE-2024-1394 - Resolves: RHEL-27189

Mar 21, 2024
High max 8.0

ELSA-2024-1249 6 CVEs 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.114.2.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.114.2.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

Mar 20, 2024
High max 10.0

ELSA-2024-1435 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 8)

[42.2.14-3] - Fix CVE-2024-1597

Mar 20, 2024
High max 8.6

ELSA-2024-1376 3 CVEs

Important: squid security update (Oracle Linux 9)

[7:5.5-6.0.1.8] - Rebuild with release bump [7:5.5-6.8] - Resolves: RHEL-19555 - squid: denial of service in HTTP request parsing (CVE-2023-50269) [7:5.5-6.7] - Resolves: RHEL-28614 - squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) [7:5.5-6…

Mar 20, 2024
High max 8.3

ELSA-2024-1427 2 CVEs

Important: libreoffice security update (Oracle Linux 9)

[1:7.1.8.1-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [1:7.1.8.1-12] - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols

Mar 20, 2024
High max 10.0

ELSA-2024-1436 1 CVE

Important: postgresql-jdbc security update (Oracle Linux 9)

[42.2.28-1] - rebase to 42.2.28 - fix for CVE-2024-1597

Mar 20, 2024
High

ELSA-2024-12226 1 CVE

Important: conmon security update (Oracle Linux 8)

conmon [2.1.3-8] - address CVE-2023-39326 cri-o [1.26.4-1] - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org…

Mar 19, 2024
High

ELSA-2024-12225 1 CVE

Important: conmon security update (Oracle Linux 9)

conmon [2.1.3-8] - address CVE-2023-39326 cri-o [1.26.4-1] - Added Oracle Specific Files for cri-o - Cherry-picked upstream commits for OCPBUGS-17150: oci: simplify stopping code https://github.com/cri-o/cri-o/pull/7185 - Fixed CVE-2023-39325: bump golang.org…

Mar 18, 2024
High max 7.5

ELSA-2024-1335 2 CVEs

Important: dnsmasq security update (Oracle Linux 8)

[2.79-31.2] - Fix CVE 2023-50387 and CVE 2023-50868 - Resolves: RHEL-25628 - Resolves: RHEL-25666 [2.79-31.1] - Do not crash on invalid domain in --synth-domain option (RHEL-22741) [2.79-31] - Do not create and search --local and --address=/x/# domains (#2233…

Mar 15, 2024
High max 7.8

ELSA-2024-1248 11 CVEs

Important: kernel security update (Oracle Linux 9)

- [5.14.0-362.24.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

Mar 15, 2024
High max 7.5

ELSA-2024-1334 2 CVEs

Important: dnsmasq security update (Oracle Linux 9)

[2.85-14.1] - Fix CVE 2023-50387 and CVE 2023-50868 - Resolves: RHEL-25674 - Resolves: RHEL-25638

Mar 15, 2024
High max 7.8

ELSA-2024-12208 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-204.147.6.2] - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Kees Cook) [Orabug: 36353543] - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta) [Orabug: 36358874] - hv_netvsc: Fix race condition between net…

Mar 11, 2024
High max 8.3

ELSA-2024-1075 2 CVEs

Important: edk2 security update (Oracle Linux 9)

[20230524-4.el9_3.2] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853] - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL…

Mar 8, 2024
High max 8.8

ELSA-2024-0461 17 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-362.18.1.el9_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Mar 7, 2024
High max 7.5

ELSA-2024-1134 1 CVE

Important: tomcat security update (Oracle Linux 9)

[1:9.0.62-37.el9_3.2] - Resolves: #2252050 HTTP request smuggling via malformed trailer headers (CVE-2023-46589)

Mar 7, 2024
High max 7.8

ELSA-2024-0897 19 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-513.18.1.el8_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Mar 6, 2024
High max 8.3

ELSA-2024-1063 2 CVEs

Important: edk2 security update (Oracle Linux 8)

[20220126gitbb1bba3d77-6.el8_9.6] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21840 RHEL-21842] - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21840 RHEL-21842] - Resolves: RHEL-21842 (CVE-2023-45230 edk2: …

Mar 5, 2024
High

ELSA-2024-12189 1 CVE

Important: conmon security update (Oracle Linux 7)

conmon [2.1.3-8] - address CVE-2023-39326 [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 supp…

Mar 1, 2024
High max 7.5

ELSA-2024-12193 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.83.2] - Input: add bounds checking to input_set_capability() (Jeff LaBundy) [Orabug: 36192120] {CVE-2022-48619} - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) [Orabug: 36155598] {CVE-2023-7192} [4.1…

Mar 1, 2024
High

ELSA-2024-12190 1 CVE

Important: conmon security update (Oracle Linux 8)

conmon [2.1.3-8] - address CVE-2023-39326 cri-o [1.25.5-1] - Added Oracle Specifile Files for cri-o cri-tools [1.25.0-3] - Resolve CVE-2023-39326 flannel-cni-plugin [1.0.1-4] - Resolve CVE-2023-39326 helm [3.11.1-3] - address CVE-2023-39326 istio [1.16.7-3] -…

Mar 1, 2024
High max 7.8

ELSA-2024-12187 3 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-513.18.0.2.el8_9] - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623} - x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2…

Feb 29, 2024
High max 8.0

ELSA-2024-0956 1 CVE

Important: postgresql:10 security update (Oracle Linux 8)

[10.23-4.0.1] - Resolves: CVE-2024-0985

Feb 28, 2024
High max 7.5

ELSA-2024-0965 2 CVEs

Important: unbound security update (Oracle Linux 8)

[1.16.2-5.2] - bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387) - bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

Feb 28, 2024
High max 7.5

ELSA-2024-0977 2 CVEs

Important: unbound security update (Oracle Linux 9)

[1.16.2-3.1] - Fix DNSSEC validation vulnerabilities which can lead to DoS in trivially orchestrated attacks (CVE-2023-50387 and CVE-2023-50868)

Feb 28, 2024
High max 8.1

ELSA-2024-0964 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.8.0-1.0.1] - Add Oracle modifications [115.8.0-1] - Update to 115.8.0 build1

Feb 27, 2024
High max 8.0

ELSA-2024-0974 1 CVE

Important: postgresql:12 security update (Oracle Linux 8)

pgaudit [1.4.0-7] - Release bump to avoid regression in nvrs - Resolves: RHEL-24969 pg_repack postgres-decoderbufs postgresql [12.18-1.0.1] - Update to version 12.18 - Fixes CVE-2024-0985

Feb 27, 2024
High max 8.1

ELSA-2024-0963 8 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.8.0-1.0.1] - Add Oracle modifications [115.8.0-1] - Update to 115.8.0 build1

Feb 27, 2024
High max 8.1

ELSA-2024-0976 8 CVEs

Important: firefox security update (Oracle Linux 7)

[115.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.8.0-1] - Update to 115.8.0 build1

Feb 26, 2024
High max 8.1

ELSA-2024-0957 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.8.0-1] - Update to 115.8.0 build1

Feb 26, 2024
High max 8.1

ELSA-2024-0955 8 CVEs

Important: firefox security update (Oracle Linux 8)

[115.8.0-1.0.1] - Update to 115.8.0 build 1

Feb 26, 2024
High max 8.0

ELSA-2024-0973 1 CVE

Important: postgresql:15 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [15.6-1] - update to 15.6 - Fixes CVE-2024-0985

Feb 26, 2024
High max 8.0

ELSA-2024-0975 1 CVE

Important: postgresql:13 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [13.14-1.0.1] - update to 13.14 - Fixes CVE-2024-0985

Feb 26, 2024
High max 8.0

ELSA-2024-0950 1 CVE

Important: postgresql:15 security update (Oracle Linux 9)

pgaudit pg_repack postgres-decoderbufs postgresql [15.6-1] - update to 15.6 - Fixes CVE-2024-0985

Feb 26, 2024
High max 7.0

ELSA-2024-0346 1 CVE

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.108.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.108.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

Feb 23, 2024
High max 8.0

ELSA-2024-0951 1 CVE

Important: postgresql security update (Oracle Linux 9)

[13.14-1.0.1] - Update to 13.14 - Fixes CVE-2024-0985

Feb 23, 2024
High max 8.1

ELSA-2024-0952 8 CVEs

Important: firefox security update (Oracle Linux 9)

[115.8.0-1.0.1] - Update to 115.8.0 build 1

Feb 23, 2024
High max 7.8

ELSA-2024-12169 16 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-513.18.0.1_9.OL8] - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - HID: check empty report_list in hid_validate_values() {CVE-2023-1073} - Fix double fget() in vhost_…

Feb 22, 2024
High max 7.5

ELSA-2024-0827 2 CVEs

Important: .NET 8.0 security update (Oracle Linux 8)

[8.0.102-2.0.1] - Update to .NET SDK 8.0.102 and Runtime 8.0.2 - Add -dbg subpackages for symbol files - Resolves: RHEL-23070

Feb 21, 2024
High max 7.8

ELSA-2024-0861 2 CVEs

Important: gimp:2.8 security update (Oracle Linux 8)

gimp [2:2.8.22-25] - fix CVE-2023-44442 - fix CVE-2023-44444 pygobject2 pygtk2 [2.24.0-25] - Fix shebang mangling for _prefix=app (#1907579) - disable numpy for flatpak (#1907579) python2-pycairo

Feb 21, 2024
High max 8.1

ELSA-2024-0893 1 CVE

Important: python-pillow security update (Oracle Linux 8)

[5.1.1-18.1] - Security fix for CVE-2023-50447 Resolves: RHEL-22240

Feb 20, 2024