Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 9.8

ELSA-2023-5433 5 CVEs 1 exploited

Important: firefox security update (Oracle Linux 8)

[115.3.1-1.0.1] - Update to 115.3.1

Oct 6, 2023
High max 9.8

ELSA-2023-5428 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[115.3.1-1.0.1] - Update to 115.3.1 build1

Oct 6, 2023
High

ELSA-2023-5459 1 CVE

Important: ghostscript security update (Oracle Linux 9)

[9.54.0-10] - fix for CVE-2023-36664 - Resolves: rhbz#2217798

Oct 6, 2023
High

ELSA-2023-5461 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-7] - Added fix for CVE-2021-40211

Oct 5, 2023
High max 7.8

ELSA-2023-12851 1 CVE 1 exploited

Important: glibc security update (Oracle Linux 8)

[2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

Oct 5, 2023
High max 9.8

ELSA-2023-5434 5 CVEs 1 exploited

Important: firefox security update (Oracle Linux 9)

[115.3.1-1.0.1] - Update to 115.3.1

Oct 5, 2023
High max 7.8

ELSA-2023-12850 1 CVE 1 exploited

Important: glibc security update (Oracle Linux 9)

[2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

Oct 5, 2023
High max 9.8

ELSA-2023-5363 4 CVEs

Important: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 9)

nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CV…

Oct 5, 2023
High max 9.8

ELSA-2023-5435 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[115.3.1-1.0.1] - Update to 115.3.1 build1

Oct 5, 2023
High max 7.8

ELSA-2023-12842 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.79.2] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814273] {CVE-2023-4206} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [Orabug: 35636291] {CVE-2023-3611} …

Oct 3, 2023
High max 7.8

ELSA-2023-12839 2 CVEs

Important: kernel security update (Oracle Linux 8)

[4.18.0-477.27.1.el8_8.OL8] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Deprecate MICROCODE_OLD_INTERFACE - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode…

Sep 29, 2023
High max 9.8

ELSA-2023-5362 4 CVEs

Important: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228939 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-pa…

Sep 28, 2023
High max 9.8

ELSA-2023-5360 4 CVEs

Important: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:16.20.2-2] - Rebase to 16.20.2 Resolves: rhbz#2231866 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 Resolves: CVE-2022-25883 nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependenc…

Sep 28, 2023
High max 7.8

ELSA-2023-12836 2 CVEs

Important: kernel security update (Oracle Linux 9)

[5.14.0-284.30.1.el9_2] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint a…

Sep 25, 2023
High max 7.0

ELSA-2023-12825 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.323.8.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander Lair…

Sep 23, 2023
High max 7.0

ELSA-2023-12824 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-105.125.6.2.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824297] - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35824297] - netfilter: xt_sctp: validate the flag_info count (Wan…

Sep 23, 2023
High max 7.0

ELSA-2023-12826 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.529.3.2] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824309] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824309] - netfilter: ipset: add the missing IP_SET_HASH_WITH_N…

Sep 22, 2023
High max 7.1

ELSA-2023-5312 1 CVE

Important: open-vm-tools security update (Oracle Linux 8)

[12.1.5-2.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass)

Sep 22, 2023
High max 7.8

ELSA-2023-5244 6 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-477.27.0.1_8.OL8] - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002} - ipvlan:Fix out-of-bounds caused by unclear skb->cb {CVE-2023-3090} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-20…

Sep 21, 2023
High max 7.1

ELSA-2023-5313 1 CVE

Important: open-vm-tools security update (Oracle Linux 9)

[12.1.5-1.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass

Sep 21, 2023
High max 8.8

ELSA-2023-5309 1 CVE 1 exploited

Important: libwebp security update (Oracle Linux 8)

[1.0.0-8.1] - Added fix for CVE-2023-4863

Sep 20, 2023
High

ELSA-2023-5219 1 CVE

Important: frr security and bug fix update (Oracle Linux 8)

[7.5.1-7.0.1.2] - Fix BFD crash in FRR running in MetalLB (BZ#2231829) - Fix for CVE-2023-38802

Sep 20, 2023
High max 7.1

ELSA-2023-5217 1 CVE

Important: open-vm-tools security update (Oracle Linux 7)

[11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

Sep 19, 2023
High max 8.8

ELSA-2023-5191 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 7)

[102.15.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.1-1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5197 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 7)

[102.15.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.1-1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5201 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[102.15.1-1.0.1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5184 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 8)

[102.15.1-1.0.1] - Update to 102.15.1 build2

Sep 19, 2023
High

ELSA-2023-5194 1 CVE

Important: frr security update (Oracle Linux 9)

[8.3.1-5.2] - Fix for CVE-2023-38802

Sep 19, 2023
High max 8.8

ELSA-2023-5224 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 9)

[102.15.1-1.0.1] - Update to 102.15.1

Sep 19, 2023
High max 8.8

ELSA-2023-5214 1 CVE 1 exploited

Important: libwebp security update (Oracle Linux 9)

[1.2.0-7] - Added fix for CVE-2023-4863

Sep 19, 2023
High max 8.8

ELSA-2023-5200 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 9)

[102.15.1-1.0.1] - Update to 102.15.1 build2

Sep 19, 2023
High max 5.5

ELSA-2023-12800 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.78.4.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35741584] {CVE-2023-22024}

Sep 16, 2023
High max 5.5

ELSA-2023-12799 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.529.3.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35708852] {CVE-2023-22024}

Sep 16, 2023
High max 5.5

ELSA-2023-12802 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.323.8.1.el7] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

Sep 16, 2023
High max 5.5

ELSA-2023-12803 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.323.8.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

Sep 16, 2023
High max 5.5

ELSA-2023-12801 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.323.8.1.el8] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

Sep 16, 2023
High max 5.5

ELSA-2023-12798 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-105.125.6.2.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713695] {CVE-2023-22024}

Sep 16, 2023
High max 7.8

ELSA-2023-5069 8 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

- [5.14.0-284.30.0.1_2.OL9] - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637} - x86/speculation: Restore speculation related MSRs {CVE-2023-1637} - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637} - x86/pm: Fix fals…

Sep 15, 2023
High max 7.1

ELSA-2023-12792 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.529.3] - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy) [Orabug: 35724203] - LTS version: v4.14.322 (Saeed Mirzamohammadi) - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Tor…

Sep 14, 2023
High

ELSA-2023-5046 1 CVE

Important: flac security update (Oracle Linux 8)

[1.3.2-9.el8_8.1] - don't free memory that is still used after realloc() error (CVE-2020-22219)

Sep 13, 2023