Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 8.2

ELSA-2023-6583 41 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

- [5.14.0-362.8.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Nov 12, 2023
High max 8.8

ELSA-2023-6535 18 CVEs

Important: webkit2gtk3 security and bug fix update (Oracle Linux 9)

[2.40.5-1] - Update to 2.40.5 Related: #2176270 [2.40.4-1] - Update to 2.40.4 Related: #2176270 [2.40.3-2] - Disable JIT Related: #2176270 [2.40.3-1] - Update to 2.40.3 Related: #2176270 [2.40.2-1] - Update to 2.40.2 Related: #2176270 [2.40.1-1] - Upgrade to …

Nov 11, 2023
High max 8.2

ELSA-2023-6595 6 CVEs

Important: linux-firmware security, bug fix, and enhancement update (Oracle Linux 9)

[20230516-999.27.git6c9e0ed5.el9] - Update firmware for qat_4xxx devices (Orabug: 35811008)

Nov 11, 2023
High max 7.0

ELSA-2023-12974 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.325.5] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508] - p…

Nov 10, 2023
High

ELSA-2023-6823 1 CVE

Important: python3 security update (Oracle Linux 7)

[3.6.8-21.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-21] - Test fixups for CVE-…

Nov 9, 2023
High max 7.8

ELSA-2023-6802 1 CVE

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-24] - CVE fix for: CVE-2023-5367 Resolves: https://issues.redhat.com/browse/RHEL-13424

Nov 8, 2023
High

ELSA-2023-12972 2 CVEs

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]

Nov 6, 2023
High

ELSA-2023-12971 2 CVEs

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]

Nov 6, 2023
High max 7.8

ELSA-2023-12970 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.80.1] - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [Orabug: 35814478] {CVE-2023-40283} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814297] {CVE-2023-4208} - RD…

Nov 3, 2023
High

ELSA-2023-6265 1 CVE

Important: ghostscript security update (Oracle Linux 9)

[9.54.0-11] - fix for CVE-2023-43115 - Resolves: rhbz#2241108

Nov 3, 2023
High max 7.5

ELSA-2023-6193 7 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.4.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.4.1-1] - Update to 115.4.1 build1 [115.4.0-3] - Update to 115.4.0 build3 [115.4.0-2] - Update to 115.4.0 build2 [115.4.0-1] - …

Oct 31, 2023
High max 7.5

ELSA-2023-6194 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488

Oct 31, 2023
High max 7.5

ELSA-2023-6188 7 CVEs

Important: firefox security update (Oracle Linux 9)

[115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL

Oct 31, 2023
High max 7.5

ELSA-2023-6191 7 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488

Oct 31, 2023
High max 7.5

ELSA-2023-6162 7 CVEs

Important: firefox security update (Oracle Linux 7)

[115.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.4.0-1] - Update to 115.4.0 build1 - Add fix for CVE-…

Oct 30, 2023
High max 7.5

ELSA-2023-6187 7 CVEs

Important: firefox security update (Oracle Linux 8)

[115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL

Oct 30, 2023
High max 8.1

ELSA-2023-12952 7 CVEs

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.26.el7_9.9] - Enable common subpackage for aarch64 - Do not sign aarch64 efi binaries [Orabug: 32670043] - Remove aarch64 deps on shim [Orabug: 32670043] - Restore versioned certificate provide for aarch64 package to satisfy shim [Orabug: 3267004…

Oct 27, 2023
High

ELSA-2023-5998 1 CVE

Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

Cython [0.29.21-5] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 mod_wsgi [4.7.1-5] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125172 numpy [1.19.4-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 -…

Oct 25, 2023
High max 7.5

ELSA-2023-12934 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12936 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12945 1 CVE

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167]

Oct 24, 2023
High max 7.5

ELSA-2023-12946 1 CVE

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167]

Oct 24, 2023
High max 7.5

ELSA-2023-12935 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12933 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12938 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 24, 2023
High max 7.5

ELSA-2023-5989 1 CVE 1 exploited

Important: varnish security update (Oracle Linux 8)

varnish [6.0.8-3.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 varnish-modules

Oct 24, 2023
High max 7.5

ELSA-2023-12937 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 24, 2023
High max 7.5

ELSA-2023-5928 1 CVE 1 exploited

Important: tomcat security update (Oracle Linux 8)

[1:9.0.62-5.2] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 24, 2023
High max 7.5

ELSA-2023-12940 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 24, 2023
High max 7.5

ELSA-2023-12939 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 24, 2023
High

ELSA-2023-5997 1 CVE

Important: python3 security update (Oracle Linux 8)

[3.6.8-51.0.1.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789

Oct 24, 2023
High

ELSA-2023-5994 1 CVE

Important: python27:2.7 security update (Oracle Linux 8)

babel Cython numpy pytest python2 [2.7.18-13.0.1.2] - Security fix for CVE-2023-40217 python2-pip python2-rpm-macros python2-setuptools python2-six python-attrs python-backports python-backports-ssl_match_hostname python-chardet python-coverage python-dns pyt…

Oct 24, 2023
High max 7.5

ELSA-2023-12941 5 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 24, 2023
High max 7.5

ELSA-2023-12944 5 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 24, 2023
High max 7.5

ELSA-2023-12942 5 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 24, 2023
High max 7.5

ELSA-2023-12943 5 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 24, 2023
High max 7.5

ELSA-2023-5924 1 CVE 1 exploited

Important: varnish security update (Oracle Linux 9)

[6.6.2-3.el9_2.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 - Resolves: RHEL-12818

Oct 24, 2023
High max 7.5

ELSA-2023-5869 4 CVEs 1 exploited

Important: nodejs:18 security update (Oracle Linux 8)

nodejs [1:18.18.2-1] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon nodejs-packaging

Oct 23, 2023
High max 9.4

ELSA-2023-5927 6 CVEs

Important: php:8.0 security update (Oracle Linux 8)

libzip php [8.0.30-1] - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip

Oct 23, 2023
High max 7.5

ELSA-2023-5929 1 CVE 1 exploited

Important: tomcat security update (Oracle Linux 9)

[1:9.0.62-11.3] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 23, 2023