Oracle Linux Security Advisories (ELSA)

5,092 results · Clear filters · Feed

• High
  ELSA-2023-3590 2 CVEs

  Important: firefox security update (Oracle Linux 8)

  [102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1

  Jun 15, 2023
• High max 7.5
  ELSA-2023-3591 1 CVE

  Important: python3 security update (Oracle Linux 8)

  [3.6.8-51.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-51.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

  Jun 15, 2023
• High max 7.5
  ELSA-2023-3581 4 CVEs

  Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

  [6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212379 [6.0.117-1] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190264

  Jun 15, 2023
• High max 7.5
  ELSA-2023-3586 4 CVEs

  Important: nodejs security update (Oracle Linux 9)

  [1:16.19.1-2] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 [1:16.19.1-1] - Rebase to 16.19.1 - Resolves: rhbz#2153714 - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-2…

  Jun 15, 2023
• High max 7.5
  ELSA-2023-3577 4 CVEs

  Important: 18 security update (Oracle Linux 9)

  nodejs [1:18.14.2-3] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

  Jun 15, 2023
• High max 7.5
  ELSA-2023-3595 1 CVE

  Important: python3.9 security update (Oracle Linux 9)

  [3.9.16-1.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

  Jun 15, 2023
• High
  ELSA-2023-3579 2 CVEs

  Important: firefox security update (Oracle Linux 7)

  [102.12.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1

  Jun 14, 2023
• High max 7.8
  ELSA-2023-12412 2 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2136.320.7.el7] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Ma…

  Jun 13, 2023
• High max 7.8
  ELSA-2023-12413 2 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

  [5.4.17-2136.320.7.el8] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Ma…

  Jun 13, 2023
• High max 7.8
  ELSA-2023-12393 1 CVE

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

  [5.15.0-102.110.5] - RISC-V: Fix up a cherry-pick warning in setup_vm_final() (Alexandre Ghiti) - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) - riscv: mm: remove redundant parameter of create_fdt_early…

  Jun 13, 2023
• High max 7.5
  ELSA-2023-3559 1 CVE

  Important: c-ares security update (Oracle Linux 9)

  [1.17.1-5.1] - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]

  Jun 13, 2023
• High max 7.5
  ELSA-2023-3556 1 CVE

  Important: python3 security update (Oracle Linux 7)

  [3.6.8-19.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-19] - Security fix for CVE…

  Jun 12, 2023
• High max 7.5
  ELSA-2023-3555 1 CVE

  Important: python security update (Oracle Linux 7)

  [2.7.5-93.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-93] - Fix for CVE-2023-24329 Resolves: rhbz#2173917

  Jun 12, 2023
• High
  ELSA-2023-3563 2 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.12.0-1] - Update to 102.12.0 build1

  Jun 12, 2023
• High max 8.8
  ELSA-2023-3220 7 CVEs

  Important: firefox security update (Oracle Linux 8)

  [102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1

  Jun 8, 2023
• High max 7.8
  ELSA-2023-12375 7 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.75.3] - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [Orabug: 35354791] {CVE-2023-2248} [4.1.12-124.75.2] - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [Orabug: 35354303] {CVE-20…

  Jun 7, 2023
• High max 8.8
  ELSA-2023-3433 2 CVEs 2 exploited

  Important: webkit2gtk3 security update (Oracle Linux 8)

  [2.38.5-1.4] - Add patch for CVE-2023-28204 Resolves: #2209744 - Add patch for CVE-2023-32373 Resolves: #2209727

  Jun 6, 2023
• High max 8.8
  ELSA-2023-3425 1 CVE

  Important: cups-filters security update (Oracle Linux 8)

  [1.20.0-29.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.20.0-29.2] - CVE-2023-24805 cups-filters: remote cod…

  Jun 6, 2023
• High max 8.8
  ELSA-2023-3432 2 CVEs 2 exploited

  Important: webkit2gtk3 security update (Oracle Linux 9)

  [2.38.5-1.2] - Add patch for CVE-2023-28204 Resolves: #2209747 - Add patch for CVE-2023-32373 Resolves: #2209730

  Jun 6, 2023
• High max 8.8
  ELSA-2023-3423 1 CVE

  Important: cups-filters security update (Oracle Linux 9)

  [1.28.7-11.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.28.7-11.1] - CVE-2023-24805 cups-filters: remote cod…

  Jun 6, 2023
• High max 8.2
  ELSA-2023-23649 6 CVEs

  Important: olcne security update (Oracle Linux 7)

  [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry * [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x * [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url * [1.6.1-6] - Fixed helm installat…

  Jun 2, 2023
• High max 8.2
  ELSA-2023-12355 6 CVEs

  Important: istio security update (Oracle Linux 7)

  istio [1.16.4-1] - Added Oracle specific files for 1.16.4-1 kubernetes [1.25.7-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) olcne [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry [1.6.1-8] - Update Istio config to inc…

  Jun 2, 2023
• High max 8.2
  ELSA-2023-12357 6 CVEs

  Important: istio security update (Oracle Linux 7)

  istio [1.15.7-1] - Added Oracle specific files for 1.15.7-1 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.12-6] - Updated the CVE ID's in Isti…

  Jun 2, 2023
• High max 8.2
  ELSA-2023-12354 6 CVEs

  Important: istio security update (Oracle Linux 8)

  istio [1.16.4-1] - Added Oracle specific files for 1.16.4-1 kubernetes [1.25.7-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) olcne [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry [1.6.1-8] - Update Istio config to inc…

  Jun 2, 2023
• High max 8.2
  ELSA-2023-23648 6 CVEs

  Important: olcne security update (Oracle Linux 8)

  [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry * [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x * [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url * [1.6.1-6] - Fixed helm installat…

  Jun 2, 2023
• High max 8.2
  ELSA-2023-12356 6 CVEs

  Important: istio security update (Oracle Linux 8)

  istio [1.15.7-1] - Added Oracle specific files for 1.15.7-1 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.12-6] - Updated the CVE ID's in Isti…

  Jun 2, 2023
• High max 6.0
  ELSA-2023-12358 1 CVE

  Important: virt:kvm_utils2 security update (Oracle Linux 8)

  hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.1.1-6-el8] - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544} - vir…

  Jun 2, 2023
• High max 7.8
  ELSA-2023-12368 2 CVEs

  Important: qemu security update (Oracle Linux 7)

  [15:4.2.1-26.el7] - migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 34735462] - io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 34735462] - migration: Move channel setup out of postcopy_try_r…

  Jun 1, 2023
• High max 7.8
  ELSA-2023-3349 1 CVE

  Important: kernel security and bug fix update (Oracle Linux 8)

  [4.18.0-477.13.1_8.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  Jun 1, 2023
• High max 9.8
  ELSA-2023-3319 1 CVE

  Important: go-toolset:ol8 security update (Oracle Linux 8)

  delve [1.9.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.9.1-1] - Rebase to 1.9.1 - Related: rhbz#2131026 golang [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz#2204473 go-toolset [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz…

  May 25, 2023
• High max 7.5
  ELSA-2023-3087 37 CVEs

  Important: mysql:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

  mecab [0.996-2.12] - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: #2180411 mecab-ipadic mysql [8.0.32-1] - Update to MySQL 8.0.32 [8.0.31-1] - Update to MySQL 8.0.31

  May 25, 2023
• High max 7.8
  ELSA-2023-3104 1 CVE

  Important: emacs security update (Oracle Linux 8)

  [1:26.1-10.2] - Bump release [1:26.1-10.1] - Bump release [1:26.1-10] - Fix ob-latex.el command injection vulnerability (#2180586) [1:26.1-9] - Fix MH-E mail composition with GNU Mailutils (#1991156) [1:26.1-8] - Fix ctags local command execute vulnerability …

  May 25, 2023
• High max 9.8
  ELSA-2023-3318 1 CVE

  Important: go-toolset and golang security update (Oracle Linux 9)

  golang [1.19.9-2] - Fix TestEncryptOAEP and TLS failures in FIPS mode - Resolves: rhbz#2204476 [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz#2204476 go-toolset [1.19.9-1] - Update to Go 1.19.9 - Related: rhbz#2204476

  May 25, 2023
• High
  ELSA-2023-3109 1 CVE

  Important: apr-util security update (Oracle Linux 8)

  [1.6.1-6.1] - Resolves: #2196572 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64

  May 24, 2023
• High max 7.5
  ELSA-2023-3246 5 CVEs

  Important: git security update (Oracle Linux 8)

  [2.39.3-1] - Update to 2.39.3 - Resolves: #2188364, #2188373, #2190157, #2190158

  May 24, 2023
• High max 7.5
  ELSA-2023-2932 4 CVEs

  Important: edk2 security update (Oracle Linux 8)

  [20220126gitbb1bba3d77-4] - edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581] - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581] - Resolves: bz#2164531 (CVE-2023-0286 edk2: open…

  May 24, 2023
• High max 8.8
  ELSA-2023-3221 7 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.11.0-1] - Update to 102.11.0 build1

  May 24, 2023
• High max 8.8
  ELSA-2023-3108 1 CVE

  Important: webkit2gtk3 security update (Oracle Linux 8)

  [2.38.5-1.3] - Restore libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.2] - Disable libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185741 [2.38.5-1] - Upd…

  May 24, 2023
• High max 7.5
  ELSA-2023-3107 1 CVE

  Important: libreswan security update (Oracle Linux 8)

  [4.9-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-3] - Fix CVE-2023-30570: Malicious IKEv1 Aggressive Mode packets can crash libreswan - Resolves: rhbz#2187179

  May 24, 2023
• High max 8.8
  ELSA-2023-2834 22 CVEs

  Important: webkit2gtk3 security and bug fix update (Oracle Linux 8)

  [2.38.5-1] - Update to 2.38.5 Related: #2127468 [2.38.4-1] - Update to 2.38.4 Related: #2127468 [2.38.3-1] - Update to 2.38.3 Related: #2127468 [2.38.2-1] - Update to 2.38.2 Related: #2127468 [2.38.1-2] - Fix crashes on aarch64 Enable WPE renderer Related: #2…

  May 24, 2023