Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

  • High max 9.4
    ELSA-2023-5926 6 CVEs

    Important: php security update (Oracle Linux 9)

    [8.0.30-1] - rebase to 8.0.30 - Resolves: RHEL-11946

  • High max 7.5
    ELSA-2023-5850 1 CVE 1 exploited

    Important: nodejs:16 security update (Oracle Linux 8)

    nodejs [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df

  • High max 7.5
    ELSA-2023-5765 1 CVE 1 exploited

    Important: nodejs security update (Oracle Linux 9)

    [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487

  • High max 7.5
    ELSA-2023-5849 4 CVEs 1 exploited

    Important: 18 security update (Oracle Linux 9)

    nodejs [1:18.18.2-2] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundl…

  • High max 9.8
    ELSA-2023-5790 1 CVE

    Important: python-reportlab security update (Oracle Linux 8)

    [3.4.0-8.1] - python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450)

  • High max 5.5
    ELSA-2023-12924 1 CVE

    Important: kvm_utils2 security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [7.10.0-3.el8] - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700} libvirt-dbus libvirt-python [7.10.0-3.el8] - Update version numb…

  • High max 7.5
    ELSA-2023-5709 1 CVE 1 exploited

    Important: dotnet7.0 security update (Oracle Linux 8)

    [7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698

  • High max 7.5
    ELSA-2023-5837 1 CVE 1 exploited

    Important: nghttp2 security update (Oracle Linux 8)

    [1.33.0-5] - fix HTTP/2 Rapid Reset (CVE-2023-44487) [1.33.0-4] - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080)

  • High max 7.5
    ELSA-2023-5838 1 CVE 1 exploited

    Important: nghttp2 security update (Oracle Linux 9)

    [1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487)

  • High max 7.5
    ELSA-2023-5721 2 CVEs 1 exploited

    Important: go-toolset:ol8 security update (Oracle Linux 8)

    delve golang [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487] go-toolset [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487]

  • High max 7.5
    ELSA-2023-5710 1 CVE 1 exploited

    Important: dotnet6.0 security update (Oracle Linux 8)

    [6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696

  • High max 7.5
    ELSA-2023-5684 8 CVEs

    Important: galera and mariadb security update (Oracle Linux 9)

    galera [26.4.14-1.0.1] - Rebase to 26.4.14 [26.4.13-1.0.1] - Rebase to 26.4.13 [26.4.12-1.0.1] - Rebase to 26.4.12 mariadb [3:10.5.22-1] - Rebase to 10.5.22 [3:10.5.21-1] - Rebase to version 10.5.21 [3:10.5.20-2] - Use _fortify_level to disable fortification …

  • High max 8.8
    ELSA-2023-5763 2 CVEs

    Important: curl security update (Oracle Linux 9)

    [7.76.1-23.el9_2.4] - curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) - curl: cookie injection with none file (CVE-2023-38546)

  • High max 7.5
    ELSA-2023-5749 1 CVE 1 exploited

    Important: .NET 7.0 security update (Oracle Linux 9)

    [7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698

  • High max 7.5
    ELSA-2023-5738 3 CVEs 1 exploited

    Important: go-toolset and golang security and bug fix update (Oracle Linux 9)

    golang [1.19.13-1] - Update to go 1.19.13 [CVE-2023-44487] [CVE-2023-39325] [CVE-2023-29409] go-toolset [1.19.13-1] - Update to Go version 1.19.13

  • High max 7.5
    ELSA-2023-5708 1 CVE 1 exploited

    Important: dotnet6.0 security update (Oracle Linux 9)

    [6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696

  • High max 7.0
    ELSA-2023-12914 1 CVE

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.323.8.2.el7] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander …

  • High max 7.0
    ELSA-2023-12915 1 CVE

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.323.8.2.el8] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander …

  • High max 7.0
    ELSA-2023-12874 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.324.5.3] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1] - x86: KVM: SVM…

  • High
    ELSA-2023-5462 1 CVE

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.16-1.2] - Security fix for CVE-2023-40217

  • High max 7.5
    ELSA-2023-5691 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.11.4-26.P2.15] - Limit the amount of recursion possible in control channel (CVE-2023-3341)

  • High max 9.8
    ELSA-2023-5477 5 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [115.3.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.3.1-1] - Update to 115.3.1 [115.3.0-1] - Update to 1…

  • High max 9.8
    ELSA-2023-5475 5 CVEs 1 exploited

    Important: thunderbird security update (Oracle Linux 7)

    [115.3.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.3.1-1] - Update to 115.3.1 build1 [115.3.0-1] - Update to 115.3.0 [115.2.1-5] - Update to 115.2.1

  • High max 7.0
    ELSA-2023-12875 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.530.5.1] - Revert 'rtnetlink: Reject negative ifindexes in RTM_NEWLINK' (Saeed Mirzamohammadi) [Orabug: 35896831] [4.14.35-2047.530.5] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orab…

  • High max 7.0
    ELSA-2023-12910 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.324.5.3.el7] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el7] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el7] - x…

  • High max 7.5
    ELSA-2023-5683 8 CVEs

    Important: mariadb:10.5 security update (Oracle Linux 8)

    galera [26.4.14-1] - Rebase to 26.4.14 [26.4.13-1] - Rebase to 26.4.13 [26.4.12-1] - Rebase to 26.4.12 Judy mariadb [3:10.5.22-1] - Rebase to 10.5.22 [3:10.5.21-1] - Rebase to version 10.5.21 [3:10.5.20-2] - Use _fortify_level to disable fortification in debu…

  • High
    ELSA-2023-5463 1 CVE

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789

  • High max 7.0
    ELSA-2023-12911 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.324.5.3.el8] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el8] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el8] - x…

  • High
    ELSA-2023-5456 1 CVE

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789

  • High max 7.5
    ELSA-2023-5689 1 CVE

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-11.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

  • High max 7.8
    ELSA-2023-5622 3 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.102.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.102.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

  • High max 9.8
    ELSA-2023-5616 1 CVE

    Important: python-reportlab security update (Oracle Linux 7)

    [2.5-11] - Do not evaluate unichar element - Resolves: RHEL-7011

  • High max 8.8
    ELSA-2023-5539 2 CVEs 1 exploited

    Important: libvpx security update (Oracle Linux 9)

    [1.9.0-7] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

  • High max 8.8
    ELSA-2023-5537 2 CVEs 1 exploited

    Important: libvpx security update (Oracle Linux 8)

    [1.7.0-10] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

  • High max 9.8
    ELSA-2023-5532 3 CVEs

    Important: nodejs security and bug fix update (Oracle Linux 9)

    [1:16.20.2-1] - Update to 16.20.2-1 Resolves CVE-2023-32002 CVE-2023-32006 CVE-2023-32559

  • High max 7.8
    ELSA-2023-5453 4 CVEs 1 exploited

    Important: glibc security update (Oracle Linux 9)

    [2.34-60.0.3.7] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716). - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet. Reviewed by: Jose E. Marchesi <jose.marchesi@oracl…

  • High max 7.0
    ELSA-2023-12858 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-106.131.4] - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng) - jbd2: fix checkpoint cleanup performance regression (Zhang Yi) - scsi: qla2xxx: Fix TMF leak through (Quinn Tran) - scsi: qla2xxx: Fix command flush durin…

  • High max 7.5
    ELSA-2023-12855 7 CVEs

    Important: kvm_utils3 security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [9.0.0-3.el8] - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750} - virpci: Resolve leak in virPCIVirtualFunctio…

  • High max 7.5
    ELSA-2023-5474 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-8.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

  • High max 7.5
    ELSA-2023-5460 1 CVE

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-14.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)