Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 7.4

ELSA-2024-0232 6 CVEs

Important: java-11-openjdk security update (Oracle Linux 7)

[1:11.0.22.0.7-1.0.1] - link atomic for ix86 build [1:11.0.22.0.7-1] - Update to jdk-11.0.22+7 (GA) - Update release notes to 11.0.22+7 - Switch to GA mode for release - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. ** - Resolves: RHEL-20966 [1:11.0…

Jan 17, 2024
High max 7.4

ELSA-2024-0223 6 CVEs

Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

[1:1.8.0.402.b06-0.1.ea] - Update to shenandoah-jdk8u402-b06 (GA) - Update release notes for shenandoah-8u402-b06. - Drop local copy of JDK-8312489 which is now included upstream - Switch to GA mode. - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. *…

Jan 17, 2024
High max 9.1

ELSA-2024-0157 3 CVEs

Important: .NET 7.0 security update (Oracle Linux 8)

[7.0.115-1.0.1] - Add support for Oracle Linux - Update to .NET SDK 7.0.115 and Runtime 7.0.15

Jan 17, 2024
High max 9.1

ELSA-2024-0152 3 CVEs

Important: .NET 8.0 security update (Oracle Linux 9)

[8.0.101-1.0.1] - Update to .NET SDK 8.0.101 and Runtime 8.0.1

Jan 17, 2024
High max 9.1

ELSA-2024-0158 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 8)

[6.0.126-1.0.1] - Add support for Oracle Linux [6.0.126-1] - Update to .NET SDK 6.0.126 and Runtime 6.0.26

Jan 16, 2024
High max 9.1

ELSA-2024-0151 3 CVEs

Important: .NET 7.0 security update (Oracle Linux 9)

[7.0.115-1.0.1] - Update to .NET SDK 7.0.115 and Runtime 7.0.15 [7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14

Jan 16, 2024
High max 9.1

ELSA-2024-0156 3 CVEs

Important: .NET 6.0 security update (Oracle Linux 9)

[6.0.126-1.0.1] - Add support for Oracle Linux [6.0.126-1] - Update to .NET SDK 6.0.126 and Runtime 6.0.26 [6.0.125-1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25

Jan 12, 2024
High max 7.8

ELSA-2024-12069 3 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-513.11.1.0.1_9.OL8] - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-2162} - af_unix: Fix null-ptr-deref in unix_stream_sendpage() {CVE-2023-4622} - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for …

Jan 11, 2024
High max 8.6

ELSA-2024-0071 4 CVEs

Important: squid security update (Oracle Linux 9)

[7:5.5-6.0.1.el9_3.5] - squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) - squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) - squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285) - …

Jan 10, 2024
High max 8.6

ELSA-2024-0046 4 CVEs

Important: squid:4 security update (Oracle Linux 8)

libecap squid [7:4.15-7.5] - Fix squid: Denial of Service in SSL Certificate validation (CVE-2023-46724) - Fix squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728) - Fix squid: Buffer over-read in the HTTP Message processing feature (C…

Jan 4, 2024
High max 7.8

ELSA-2024-0018 2 CVEs

Important: tigervnc security update (Oracle Linux 8)

[1.13.1-2.4] - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) - xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380) - xorg-x11-server: out-of-bounds memory reads/writes in XKB button acti…

Jan 4, 2024
High max 8.8

ELSA-2024-0003 11 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.6.0-1] - Update to 115.6.0 build2

Jan 3, 2024
High max 8.8

ELSA-2024-0012 11 CVEs

Important: firefox security update (Oracle Linux 8)

[115.6.0-1.0.1] - Update to 115.6.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Jan 3, 2024
High max 7.8

ELSA-2024-0010 3 CVEs

Important: tigervnc security update (Oracle Linux 9)

[1.13.1-3.3] - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) - xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377) - xorg-x11-server: out-of-bounds memory read in RRC…

Jan 3, 2024
High max 8.8

ELSA-2024-0025 11 CVEs

Important: firefox security update (Oracle Linux 9)

[115.6.0-1.0.1] - Udate to 115.6.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Jan 3, 2024
High max 8.8

ELSA-2024-0001 11 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Update to 115.6.0 build2

Jan 3, 2024
High max 7.8

ELSA-2024-0006 2 CVEs

Important: tigervnc security update (Oracle Linux 7)

[1.8.0-28.0.1] - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6377.patch, and xorg-CVE-2023-6478.patch [1.8.0-28] - Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions Resolves: RHEL-18415 [1.8.0…

Jan 2, 2024
High max 8.8

ELSA-2024-0013 1 CVE

Important: gstreamer1-plugins-bad-free security update (Oracle Linux 7)

[1.10.4-4] - Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793

Jan 2, 2024
High max 8.8

ELSA-2024-0026 11 CVEs

Important: firefox security update (Oracle Linux 7)

[115.6.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.6.0-1] - Update to 115.6.0 build1

Jan 2, 2024
High max 7.8

ELSA-2024-0009 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-25] - CVE fix for: CVE-2023-6377, CVE-2023-6478 Resolves: https://issues.redhat.com/browse/RHEL-18416 Resolves: https://issues.redhat.com/browse/RHEL-18428

Jan 2, 2024
High max 8.8

ELSA-2024-0027 11 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.6.0-1] - Update to 115.6.0 build2

Jan 2, 2024
High max 7.8

ELSA-2023-7749 4 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-362.13.1.el9_3.OL9] - x86/retpoline: Document some thunk handling aspects (Borislav Petkov) {CVE-2023-20569} - objtool: Fix return thunk patching in retpolines (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Remove unnecessary semicolon (Yang Li) {CVE-2…

Dec 22, 2023
High max 8.8

ELSA-2023-7884 5 CVEs

Important: postgresql:15 security update (Oracle Linux 8)

pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 [1.5.0-1] - Update to version 1.5.0 Related: #1855776 pg_repack [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128241 [1.4.6-4] - Rebuilt for IMA si…

Dec 20, 2023
High max 8.8

ELSA-2023-7790 1 CVE

Important: postgresql:10 security update (Oracle Linux 8)

[10.23-3.0.1] - Resolves: CVE-2023-5869

Dec 19, 2023
High max 7.8

ELSA-2023-5455 4 CVEs 1 exploited

Important: glibc security update (Oracle Linux 8)

[2.28-225.0.4.6] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2023-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435). - CVE-2023-4813: work around RHEL-8 limitation i…

Dec 19, 2023
High max 8.8

ELSA-2023-7841 1 CVE

Important: gstreamer1-plugins-bad-free security update (Oracle Linux 8)

[1.16.1-2] - Resolves MXF demuxer use-after-free vulnerability (CVE-2023-44446)

Dec 19, 2023
High max 7.5

ELSA-2023-13054 2 CVEs 1 exploited

Important: conmon security update (Oracle Linux 8)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add …

Dec 19, 2023
High max 7.5

ELSA-2023-13053 2 CVEs 1 exploited

Important: conmon security update (Oracle Linux 9)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add …

Dec 19, 2023
High max 8.8

ELSA-2023-7714 4 CVEs

Important: postgresql:12 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql

Dec 18, 2023
High max 8.8

ELSA-2023-7784 4 CVEs

Important: postgresql security update (Oracle Linux 9)

[13.13-1.0.1] - Update to 13.13 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417

Dec 15, 2023
High max 8.8

ELSA-2023-7791 2 CVEs

Important: gstreamer1-plugins-bad-free security update (Oracle Linux 9)

[1.22.1-2] - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow - Patch CVE-2023-44446: MXF demuxer use-after-free - Resolves: RHEL-17030, RHEL-17039

Dec 15, 2023
High max 8.8

ELSA-2023-13048 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.326.6.el7] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5.el7] - Revert 'tracing: Increase trace ar…

Dec 14, 2023
High max 8.8

ELSA-2023-13049 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.326.6.el8] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5.el8] - Revert 'tracing: Increase trace ar…

Dec 14, 2023
High max 7.8

ELSA-2023-13047 3 CVEs

Important: kernel security update (Oracle Linux 9)

- [5.14.0-362.13.0.1_3.OL9] - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192} - fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345} - igb: set max size RX buffer when store bad packe…

Dec 14, 2023
High max 8.8

ELSA-2023-7783 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-9] - Backport fix for CVE-2023-5869

Dec 13, 2023
High max 8.8

ELSA-2023-7716 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058

Dec 13, 2023
High max 8.8

ELSA-2023-13044 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.326.6] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5] - Revert 'tracing: Increase trace array ref …

Dec 13, 2023
High max 7.5

ELSA-2023-7732 1 CVE

Important: tracker-miners security update (Oracle Linux 8)

[2.1.5-2.1] - Bump dist [2.1.5-2] - Backport stricter seccomp jail Resolves: RHEL-12466

Dec 13, 2023
High max 8.8

ELSA-2023-7785 5 CVEs

Important: postgresql:15 security update (Oracle Linux 9)

pgaudit pg_repack postgres-decoderbufs postgresql [15.5-1] - update to 15.5 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418 Resolves: RHEL-16100, RHEL-16124, RHEL-16139

Dec 13, 2023
High max 8.8

ELSA-2023-7715 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058

Dec 13, 2023