Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High

ELSA-2023-5048 1 CVE

Important: flac security update (Oracle Linux 9)

[1.3.3-10.el9_2.1] - don't free memory that is still used after realloc() error (CVE-2020-22219)

Sep 13, 2023
High max 7.5

ELSA-2023-5094 1 CVE

Important: qemu-kvm security and bug fix update (Oracle Linux 9)

[7.2.0-14.el9_2.5] - rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service - ho…

Sep 13, 2023
High max 6.5

ELSA-2023-12785 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.323.8.el7] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el7] - x86: change default to spec_store…

Sep 11, 2023
High max 8.6

ELSA-2023-12772 4 CVEs

Important: olcne security update (Oracle Linux 8)

istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-3] - Mofify kubevirt image tag to use virt-operator tag instead of kub…

Sep 11, 2023
High max 6.5

ELSA-2023-12786 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.323.8.el8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el8] - x86: change default to spec_store…

Sep 11, 2023
High max 6.5

ELSA-2023-12782 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.323.8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7] - x86: change default to spec_store_bypass_…

Sep 11, 2023
High max 8.6

ELSA-2023-12781 4 CVEs

Important: istio security update (Oracle Linux 7)

istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944

Sep 8, 2023
High max 8.6

ELSA-2023-12780 4 CVEs

Important: istio security update (Oracle Linux 8)

istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944

Sep 8, 2023
High max 8.8

ELSA-2023-5019 12 CVEs

Important: firefox security update (Oracle Linux 7)

[102.15.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.0-1] - Update to 102.15.0 build2 [102.14.0-3] - …

Sep 7, 2023
High max 8.8

ELSA-2023-4952 12 CVEs

Important: firefox security update (Oracle Linux 8)

[102.15.0-1.0.1] - Update to 102.15.0 build2

Sep 6, 2023
High max 8.8

ELSA-2023-4954 12 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.15.0-1.0.1] - Update to 102.15.0 build1

Sep 6, 2023
High max 8.8

ELSA-2023-4958 12 CVEs

Important: firefox security update (Oracle Linux 9)

[102.15.0-1.0.1] - Update to 102.15.0 build2

Sep 6, 2023
High max 8.8

ELSA-2023-4955 12 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.15.0-1.0.1] - Update to 102.15.0 build1

Sep 6, 2023
High max 8.6

ELSA-2023-12771 4 CVEs

Important: istio security update (Oracle Linux 9)

istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-2] - Update kubevirt image versions fixing selinux=enforce not being s…

Sep 6, 2023
High max 8.8

ELSA-2023-4945 12 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.15.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.0-1] - Update to 102.15.0 build1 [102.14.0-3] - Bump NVR to rebuild [102.14.0-2] - Rebuild due to rhbz#2228948

Sep 5, 2023
High max 7.1

ELSA-2023-12759 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.78.2] - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum) [Orabug: 35598955] {CVE-2023-3106} - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha) [Orabug: 34012909] {CVE-2022-1015} [4.1.12-124.78.1] -…

Sep 1, 2023
High max 7.8

ELSA-2023-4819 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.99.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.99.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Aug 31, 2023
High

ELSA-2023-4864 1 CVE

Important: cups security update (Oracle Linux 8)

[1:2.2.6-51.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 30, 2023
High

ELSA-2023-4766 1 CVE

Important: cups security update (Oracle Linux 7)

[1:1.6.3-52] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 29, 2023
High

ELSA-2023-4838 1 CVE

Important: cups security update (Oracle Linux 9)

[1:2.3.3op2-16.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 29, 2023
High max 7.8

ELSA-2023-4635 1 CVE

Important: rust-toolset:ol8 security update (Oracle Linux 8)

[1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

Aug 28, 2023
High max 7.8

ELSA-2023-4634 1 CVE

Important: rust security update (Oracle Linux 9)

[1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

Aug 25, 2023
High max 7.8

ELSA-2023-4644 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 16, 2023
High max 7.8

ELSA-2023-4642 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 16, 2023
High max 7.8

ELSA-2023-4645 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 15, 2023
High max 7.8

ELSA-2023-4643 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 15, 2023
High

ELSA-2023-4570 1 CVE

Important: iperf3 security update (Oracle Linux 8)

[3.5-7] - Fixes CVE-2023-38403 Resolves: rhbz#2223729

Aug 11, 2023
High max 8.0

ELSA-2023-4517 6 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-477.21.1_8.OL8] - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Tamas Koczka) {CVE-2022-42896} - net/sched: tcindex: update imperfect hash filters respecting rcu (Jamal Hadi Salim) {CVE-2023-1281} - net/sched: tcindex: search ke…

Aug 10, 2023
High

ELSA-2023-4571 1 CVE

Important: iperf3 security update (Oracle Linux 9)

[3.9-10] - Fixes CVE-2023-38403 Resolves: rhbz#2223676

Aug 10, 2023
High max 5.5

ELSA-2023-4151 1 CVE

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.95.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.95.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Aug 9, 2023
High

ELSA-2023-4497 10 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.14.0-1.0.1] - Update to 102.14.0 build1

Aug 9, 2023
High

ELSA-2023-12712 1 CVE

Important: linux-firmware security update (Oracle Linux 7)

[20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] -…

Aug 8, 2023
High

ELSA-2023-4495 10 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.14.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.14.0-1] - Update to 102.14.0 build1

Aug 8, 2023
High

ELSA-2023-12713 1 CVE

Important: linux-firmware security update (Oracle Linux 7)

[20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] -…

Aug 8, 2023
High

ELSA-2023-12714 1 CVE

Important: linux-firmware security update (Oracle Linux 8)

[20230516-999.25.git6c9e0ed5.el8] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0e…

Aug 8, 2023
High

ELSA-2023-4499 10 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.14.0-1.0.1] - Update to 102.14.0 build1

Aug 8, 2023
High

ELSA-2023-12715 1 CVE

Important: linux-firmware security update (Oracle Linux 9)

[20230516-999.25.git6c9e0ed5.el9] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0e…

Aug 8, 2023
High

ELSA-2023-4461 9 CVEs

Important: firefox security update (Oracle Linux 7)

[102.14.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1

Aug 6, 2023
High max 7.5

ELSA-2023-12710 1 CVE

Important: python-flask security update (Oracle Linux 8)

[0.12.2-4.0.1] - Fix for CVE-2023-30861 [Orabug: 35662469] - Add test for CVE-2023-30861 [Orabug: 35662469]

Aug 6, 2023
High

ELSA-2023-12662 0 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Aug 4, 2023