Oracle Linux Security Advisories (ELSA)

5,092 results · Clear filters · Feed

• High
  ELSA-2023-12663 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12666 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12668 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12667 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12664 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12665 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12678 0 CVEs

  Important: GraalVM Security update (Oracle Linux 7)

  Aug 4, 2023
• High
  ELSA-2023-12672 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12676 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-4468 9 CVEs

  Important: firefox security update (Oracle Linux 8)

  [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1

  Aug 4, 2023
• High
  ELSA-2023-12673 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12674 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12671 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12670 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12675 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12677 0 CVEs

  Important: GraalVM Security update (Oracle Linux 8)

  Aug 4, 2023
• High
  ELSA-2023-12685 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-4462 9 CVEs

  Important: firefox security update (Oracle Linux 9)

  [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.14.0-1] - Update to 102.14.0 build1

  Aug 4, 2023
• High
  ELSA-2023-12681 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-12680 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-12682 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-12683 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-12686 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High max 7.8
  ELSA-2023-4377 5 CVEs

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

  [5.14.0-284.25.1.0.1_2] - Fix KVM: x86/mmu: Fix race condition in direct_page_fault [Orabug: 35673032] {CVE-2022-45869} [5.14.0-284.25.1_2] - KVM: x86/mmu: Fix race condition in direct_page_fault - prlimit: do_prlimit needs to have a speculation check {CVE-20…

  Aug 4, 2023
• High
  ELSA-2023-12684 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High
  ELSA-2023-12679 0 CVEs

  Important: GraalVM Security update (Oracle Linux 9)

  Aug 4, 2023
• High max 9.8
  ELSA-2023-4382 1 CVE

  Important: openssh security update (Oracle Linux 7)

  [7.4p1-23.0.1] - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation (openssh bz#3012) [Orabug: 30448895] [7.4p1-23 + 0.10.3-2] - Avoid remote code execution in ssh-agent PKCS#11 support…

  Aug 2, 2023
• High max 9.8
  ELSA-2023-4419 1 CVE

  Important: openssh security update (Oracle Linux 8)

  [8.0p1-19] - Release bump [8.0p1-18] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408

  Aug 2, 2023
• High max 8.6
  ELSA-2023-4418 1 CVE

  Important: mod_auth_openidc:2.3 security update (Oracle Linux 8)

  cjose [0.6.1-3] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 mod_auth_openidc [2.4.9.4-1] - Resolves: rhbz#2025368 - Rebase to new version

  Aug 2, 2023
• High max 9.8
  ELSA-2023-4412 1 CVE

  Important: openssh security update (Oracle Linux 9)

  [8.7p1-30] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408

  Aug 2, 2023
• High max 8.6
  ELSA-2023-4411 1 CVE

  Important: cjose security update (Oracle Linux 9)

  [0.6.1-13] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308

  Aug 2, 2023
• High
  ELSA-2023-4326 1 CVE

  Important: iperf3 security update (Oracle Linux 7)

  [3.1.7-3] - Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)

  Jul 31, 2023
• High max 7.8
  ELSA-2023-12688 7 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.77.2] - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [Orabug: 35514108] {CVE-2023-35824} - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) [Orabug: 35477742] {…

  Jul 31, 2023
• High max 7.8
  ELSA-2023-3723 6 CVEs

  Important: kernel security and bug fix update (Oracle Linux 9)

  - [5.14.0-284.18.1_2] - cifs: fix wrong unlock before return from cifs_tree_connect() - docs: Remove the unnecessary unicode character - perf vendor events intel: Refresh ivytown metrics and events - perf vendor events: Update Intel ivytown - perf vendor even…

  Jul 25, 2023
• High
  ELSA-2023-4062 5 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1

  Jul 21, 2023
• High
  ELSA-2023-4079 5 CVEs

  Important: firefox security update (Oracle Linux 7)

  [102.13.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - …

  Jul 21, 2023
• High max 7.5
  ELSA-2023-4152 1 CVE

  Important: bind security update (Oracle Linux 7)

  [2:9.11.4-26.P2.14] - Prevent the cache going over the configured limit (CVE-2023-2828)

  Jul 20, 2023
• High max 8.8
  ELSA-2023-4202 2 CVEs 2 exploited

  Important: webkit2gtk3 security update (Oracle Linux 8)

  [2.38.5-1.5] - Disable JIT (CVE-2023-32435, CVE-2023-32439)

  Jul 20, 2023
• High max 7.5
  ELSA-2023-4100 1 CVE

  Important: bind9.16 security update (Oracle Linux 8)

  [32:9.16.23-14.1] - Improve RBT overmem cache cleaning (CVE-2023-2828)

  Jul 20, 2023
• High max 7.5
  ELSA-2023-4102 1 CVE

  Important: bind security update (Oracle Linux 8)

  [32:9.11.36-8.1] - Improve RBT overmem cache cleaning (CVE-2023-2828)

  Jul 20, 2023