Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 8.8

ELSA-2023-13043 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-201.135.6] - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - netfilter: nf_tables: split async and sync catchall in two functions (Pablo Neira Ayuso) - netfilter: nf_tables: remove catchall element in GC syn…

Dec 13, 2023
High max 7.5

ELSA-2023-7712 1 CVE

Important: tracker-miners security update (Oracle Linux 9)

[3.1.2-4] - Backport stricter seccomp jail Resolves: RHEL-12469

Dec 12, 2023
High max 7.8

ELSA-2023-13039 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.532.3] - Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - perf/core: Fix potential NULL deref (Peter Zijlstra) [4.14.35-2047.532.2] - x86: change …

Dec 11, 2023
High max 7.5

ELSA-2023-7668 1 CVE

Important: squid:4 security update (Oracle Linux 8)

libecap squid [7:4.15-7.3] - Fix squid: DoS against HTTP and HTTPS (CVE-2023-5824) [7:4.15-7.1] - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.…

Dec 11, 2023
High max 7.5

ELSA-2023-13027 4 CVEs

Important: edk2 security update (Oracle Linux 7)

[20230821] - Create new 20230821 release for OL7 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 7, 2023
High max 7.5

ELSA-2023-13029 2 CVEs 1 exploited

Important: olcne security update (Oracle Linux 7)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …

Dec 7, 2023
High max 7.5

ELSA-2023-13028 2 CVEs 1 exploited

Important: olcne security update (Oracle Linux 8)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …

Dec 7, 2023
High max 7.5

ELSA-2023-32790 4 CVEs

Important: edk2 security update (Oracle Linux 9)

[20230821] - Create new 20230821 release for OL9 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 7, 2023
High max 7.8

ELSA-2023-13019 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.81.2] - rebuild bumping release [4.1.12-124.81.1] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923500] {CVE-2023-39193} - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [Orabug: 3592405…

Dec 6, 2023
High max 7.5

ELSA-2023-13026 4 CVEs

Important: edk2 security update (Oracle Linux 7)

[20230821] - Create new 20230821 release for OL7 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-13025 4 CVEs

Important: edk2 security update (Oracle Linux 8)

[20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-32791 4 CVEs

Important: edk2 security update (Oracle Linux 8)

[20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-13024 4 CVEs

Important: edk2 security update (Oracle Linux 9)

[20230821] - Create new 20230821 release for OL9 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 10.0

ELSA-2023-7549 7 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-513.9.1_9.OL8] - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Mauro Carvalho Chehab) {CVE-2022-45884} - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) {CVE-2023-1192} - nvmet-tcp: Fix a possible UAF in queue int…

Dec 1, 2023
High max 8.8

ELSA-2023-7581 4 CVEs

Important: postgresql:13 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [13.13-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [13.13-1] - Update to 13.13 - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 - Resolves: RHEL-16085 RHEL-16…

Nov 30, 2023
High

ELSA-2023-7505 7 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
High

ELSA-2023-7500 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
High

ELSA-2023-7508 7 CVEs

Important: firefox security update (Oracle Linux 8)

[115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Nov 28, 2023
High

ELSA-2023-7501 7 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
High

ELSA-2023-7507 7 CVEs

Important: firefox security update (Oracle Linux 9)

[115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Nov 28, 2023
High max 9.3

ELSA-2023-7465 3 CVEs

Important: squid security update (Oracle Linux 9)

[- 7:5.5-6.2] - Fix: squid: DoS against HTTP and HTTPS (CVE-2023-5824)

Nov 28, 2023
High

ELSA-2023-7509 7 CVEs

Important: firefox security update (Oracle Linux 7)

[115.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.5.0-1] - Update to 115.5.0 build1

Nov 27, 2023
High max 7.8

ELSA-2023-7428 2 CVEs

Important: tigervnc security update (Oracle Linux 7)

[1.8.0-26.0.1] - Dropped xorg-CVE-2023-5367.patch [1.8.0-26] - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow Resolves: RHEL-15235 - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/R…

Nov 22, 2023
High max 7.8

ELSA-2023-7423 7 CVEs

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.105.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.105.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

Nov 22, 2023
High max 7.7

ELSA-2023-7205 6 CVEs 1 exploited

Important: nodejs:20 security update (Oracle Linux 8)

nodejs [1:20.8.1-1] - Update node and nghttp - Add fips patch - Fixes CVE-2023-44487 (nghttp) - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333 nodejs-nodemon nodejs-packaging

Nov 22, 2023
High max 7.0

ELSA-2023-13001 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.325.5.el7] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508]…

Nov 21, 2023
High max 7.4

ELSA-2023-7265 2 CVEs

Important: open-vm-tools security update (Oracle Linux 8)

[12.2.5-3.0.1.1] - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass - Fix CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

Nov 21, 2023
High max 7.0

ELSA-2023-13005 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.325.5.el8] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508]…

Nov 21, 2023
High max 8.8

ELSA-2023-7055 18 CVEs

Important: webkit2gtk3 security and bug fix update (Oracle Linux 8)

[2.40.5-1] - Upgrade to 2.40.5. Also, disable JIT Resolves: #2176269 Resolves: #2185742 Resolves: #2209728 Resolves: #2209745 Resolves: #2218649 Resolves: #2218651 Resolves: #2224611 [2.38.5-1.4] - Add patch for CVE-2023-28204 Resolves: #2209744 - Add patch f…

Nov 17, 2023
High max 7.8

ELSA-2023-7077 53 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-513.5.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Nov 17, 2023
High max 7.4

ELSA-2023-7279 2 CVEs

Important: open-vm-tools security update (Oracle Linux 7)

[11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

Nov 16, 2023
High

ELSA-2023-6732 1 CVE

Important: ghostscript security update (Oracle Linux 9)

[9.54.0-14] - fix for CVE-2023-43115 - Resolves: RHEL-10184 [9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810

Nov 16, 2023
High max 8.8

ELSA-2023-6745 2 CVEs

Important: curl security update (Oracle Linux 9)

[7.76.1-26.el9_3.2] - fix cookie injection with none file (CVE-2023-38546) [7.76.1-26.el9_3.1] - socks: return error if hostname too long for remote resolve (CVE-2023-38545)

Nov 16, 2023
High max 7.4

ELSA-2023-7277 2 CVEs

Important: open-vm-tools security update (Oracle Linux 9)

[12.2.5-3.0.1.2] - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass. - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper

Nov 16, 2023
High max 8.8

ELSA-2023-12991 1 CVE

Important: microcode_ctl security update (Oracle Linux 9)

[4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 16, 2023
High max 7.5

ELSA-2023-6746 1 CVE 1 exploited

Important: nghttp2 security update (Oracle Linux 9)

[1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487)

Nov 16, 2023
High max 8.8

ELSA-2023-12989 1 CVE

Important: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.19.0.3] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 13, 2023
High

ELSA-2023-6885 1 CVE

Important: python security update (Oracle Linux 7)

[2.7.5-94.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-94] - Security fix for CVE-2023-40217 Resolves: RHEL-9615

Nov 13, 2023
High max 8.1

ELSA-2023-6886 1 CVE

Important: plexus-archiver security update (Oracle Linux 7)

[0:2.4.2-6] - Avoid override target symlink by standard file in AbstractUnArchiver - Fixes: CVE-2023-37460

Nov 13, 2023
High max 8.8

ELSA-2023-12988 1 CVE

Important: microcode_ctl security update (Oracle Linux 8)

[4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 13, 2023