Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

  • High max 9.8
    ELSA-2023-12595 3 CVEs

    Important: pcs security update (Oracle Linux 9)

    [0.11.4-7] - Fix displaying differences between configuration checkpoints in "pcs config checkpoint diff" command - Fix "pcs stonith update-scsi-devices" command which was broken since Pacemaker-2.1.5-rc1 - Fixed loading of cluster status in the web interface…

  • High max 8.8
    ELSA-2023-4201 2 CVEs 2 exploited

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.38.5-1.3] - Disable JIT (CVE-2023-32435, CVE-2023-32439)

  • High max 7.0
    ELSA-2023-12579 3 CVEs

    Important: aardvark-dns security update (Oracle Linux 8)

    runc [1:1.1.4-1.0.1] - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 …

  • High max 8.6
    ELSA-2023-4035 5 CVEs

    Important: nodejs:18 security update (Oracle Linux 8)

    nodejs [1:18.14.2-3] - Update bundled c-ares to 1.19.1 Resolves: CVE-2022-4904 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

  • High max 8.1
    ELSA-2023-4058 1 CVE

    Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [7.0.109-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.109-1] - Update to .NET SDK 7.0.109 and Runtime 7.0.9 - Resolves: RHBZ#2219632

  • High max 7.0
    ELSA-2023-12578 3 CVEs

    Important: buildah security update (Oracle Linux 8)

    runc [1:1.1.4-1.0.1] - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 …

  • High max 7.5
    ELSA-2023-4034 4 CVEs

    Important: nodejs:16 security update (Oracle Linux 8)

    nodejs [1:16.19.1-2] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

  • High max 7.5
    ELSA-2023-3811 1 CVE

    Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

    python39 [3.9.16-1.1] - Security fix for CVE-2023-24329

  • High max 8.1
    ELSA-2023-4057 1 CVE

    Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

    [7.0.109-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.109-1] - Update to .NET SDK 7.0.109 and Runtime 7.0.9 - Resolves: RHBZ#2219632

  • High max 7.5
    ELSA-2023-4099 1 CVE

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-11.1] - Improve RBT overmem cache cleaning (CVE-2023-2828)

  • High
    ELSA-2023-4063 5 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1

  • High max 8.1
    ELSA-2023-4059 1 CVE

    Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [6.0.120-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.120-1] - Update to .NET SDK 6.0.120 and Runtime 6.0.20 - Resolves: RHBZ#2219637

  • High
    ELSA-2023-4076 5 CVEs

    Important: firefox security update (Oracle Linux 8)

    [102.13.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1

  • High
    ELSA-2023-4064 5 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1

  • High
    ELSA-2023-4071 5 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.13.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1

  • High max 8.1
    ELSA-2023-4060 1 CVE

    Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

    [6.0.120-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.120-1] - Update to .NET SDK 6.0.120 and Runtime 6.0.20 - Resolves: RHBZ#2219637

  • High max 7.8
    ELSA-2023-12591 2 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.321.4.el8] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el8] - selinux: don't use ma…

  • High max 7.8
    ELSA-2023-12588 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.321.4] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3] - selinux: don't use make's gro…

  • High max 7.8
    ELSA-2023-12590 2 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.321.4.el7] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el7] - selinux: don't use ma…

  • High max 7.5
    ELSA-2023-3780 1 CVE

    Important: python27:2.7 security update (Oracle Linux 8)

    babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 numpy [1:1.14.2-16] - Fix include path - Related: rhbz#1907601 pytest python2 [2.7.18-13.0.1.1] - F…

  • High max 7.5
    ELSA-2023-3781 1 CVE

    Important: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

    babel [2.7.0-11] - Fix CVE-2021-20095 Resolves: rhbz#1955615 Cython [0.29.14-4] - Exclude unsupported i686 arch mod_wsgi [4.6.8-4] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125171 numpy [1.17.3-6] - Adjusted the postun scriptlets to enable upgradi…

  • High max 7.8
    ELSA-2023-12566 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.76.2] - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [Orabug: 35493606] {CVE-2023-3159} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [Orabug: 35448003] {CVE-2022-1679} - dm ioctl: fix nested l…

  • High max 6.5
    ELSA-2023-25545 2 CVEs

    Important: olcne security update (Oracle Linux 7)

    [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x

  • High max 6.5
    ELSA-2023-12562 2 CVEs

    Important: kubernetes security update (Oracle Linux 7)

    kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.13-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support up…

  • High max 6.5
    ELSA-2023-12563 2 CVEs

    Important: kubernetes security update (Oracle Linux 7)

    kubernetes [1.25.11-1] - Added Oracle specific build files for Kubernetes olcne [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x [1.6.1-9] - Updated the CVE ID's in Istio-1.1…

  • High max 6.5
    ELSA-2023-12564 2 CVEs

    Important: kubernetes security update (Oracle Linux 8)

    kubernetes [1.25.11-1] - Added Oracle specific build files for Kubernetes olcne [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x [1.6.1-9] - Updated the CVE ID's in Istio-1.1…

  • High max 6.5
    ELSA-2023-12561 2 CVEs

    Important: kubernetes security update (Oracle Linux 8)

    kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.13-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support up…

  • High max 6.5
    ELSA-2023-25546 2 CVEs

    Important: olcne security update (Oracle Linux 8)

    [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x

  • High max 7.5
    ELSA-2023-3741 1 CVE

    Important: c-ares security update (Oracle Linux 7)

    [1.10.0-3.1] - Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]

  • High max 8.8
    ELSA-2023-3661 1 CVE

    Important: texlive security update (Oracle Linux 8)

    [9:20200406-26] - Resolves: #2209872, CVE-2023-32700

  • High max 7.5
    ELSA-2023-3593 5 CVEs

    Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211876 [7.0.106-2] - Update to .NET SDK 7.0.106 and Runtime 7.0.6…

  • High
    ELSA-2023-3589 2 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.12.0-1] - Update to 102.12.0 build1

  • High
    ELSA-2023-3587 2 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1

  • High max 7.5
    ELSA-2023-3585 1 CVE

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

  • High max 7.5
    ELSA-2023-3592 5 CVEs

    Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

    [7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211877 [7.0.106-1] - Update to .NET SDK 7.0.106 and Runtime 7.0.6…

  • High max 7.5
    ELSA-2023-3582 4 CVEs

    Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

    [6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212378 [6.0.117-2] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190262

  • High max 7.8
    ELSA-2023-12394 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.320.7] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Z…

  • High max 7.5
    ELSA-2023-3594 1 CVE

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

  • High
    ELSA-2023-3588 2 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1

  • High max 7.5
    ELSA-2023-3584 1 CVE

    Important: c-ares security update (Oracle Linux 8)

    [1.13.0-6.1] - Resolves: rhbz#2209516 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.8.0.z]