Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

  • High max 7.5
    ELSA-2023-3263 2 CVEs

    Important: git security update (Oracle Linux 7)

    [1.8.3.1-25] - Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365

  • High max 5.9
    ELSA-2023-12348 1 CVE

    Important: python3-setuptools security update (Oracle Linux 7)

    [39.2.0-10.0.1] - Back port fix for CVE-2022-40897 [Orabug: 35034581]

  • High max 5.7
    ELSA-2023-12349 1 CVE

    Important: python-pip security update (Oracle Linux 7)

    [9.0.3-8.0.3] - CVE-2021-3572 [Orabug: 35240686]

  • High max 8.1
    ELSA-2023-2951 39 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  • High max 7.5
    ELSA-2023-3245 5 CVEs

    Important: git security update (Oracle Linux 9)

    [2.39.3-1] - Update to 2.39.3 - Resolves: #2188352, #2188361, #2189976, #2189977

  • High
    ELSA-2023-3145 1 CVE

    Important: apr-util security update (Oracle Linux 7)

    [1.5.2-6.0.1.1] - Rebuild bumping release [1.5.2-6.1] - Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64

  • High max 8.8
    ELSA-2023-3143 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1

  • High max 8.8
    ELSA-2023-3137 7 CVEs

    Important: firefox security update (Oracle Linux 7)

    [102.11.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - …

  • High max 8.8
    ELSA-2023-3151 7 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.11.0-1] - Update to 102.11.0 build1

  • High max 8.8
    ELSA-2023-2653 1 CVE

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185745 [2.38.5-1] - Update to 2.38.5 Related: #2127467 [2.38.4-1] - Update to 2.38.4 Related: #2127467 [2.38.3-1] - Update to 2.38.3 Related: #2127467 [2.38.2-1] - Update to 2.38.2 Related: #2127467 [2.3…

  • High max 9.8
    ELSA-2023-2626 4 CVEs

    Important: emacs security update (Oracle Linux 9)

    [1:27.2-8.1] - Fix etags local command injection vulnerability (#2184369) - Fix htmlfontify.el command injection vulnerability (#2184368) - Fix ruby-mode.el local command injection vulnerability (#2184367) - Fix ob-latex.el command injection vulnerability (#2…

  • High max 7.5
    ELSA-2023-3148 1 CVE

    Important: libreswan security update (Oracle Linux 9)

    [4.9-4.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-4] - Just bumping up the version as an incorrect 9.3 build was created. - Related: rhbz#2187171 [4.9-3] - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash libreswa…

  • High
    ELSA-2023-3147 1 CVE

    Important: apr-util security update (Oracle Linux 9)

    [1.6.1-20.1] - Resolves: #2196575 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64

  • High max 8.8
    ELSA-2023-3150 7 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.11.0-1] - Update to 102.11.0 build1

  • High max 7.5
    ELSA-2023-2621 37 CVEs

    Important: mysql security update (Oracle Linux 9)

    [8.0.32-1] - Update to MySQL 8.0.32 [8.0.31-1] - Update to MySQL 8.0.31

  • High max 6.0
    ELSA-2023-12328 1 CVE

    Important: qemu-kvm security update (Oracle Linux 9)

    [6.1.1-6.el9] - Update changelog (Karl Heubaum) [Orabug: 35343538] - ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538] - ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538] - CVE-2023-1544 is not…

  • High max 7.8
    ELSA-2023-12342 2 CVEs

    Important: virt:kvm_utils security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt [5.7.0-40] - build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777] - util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 350908…

  • High max 7.5
    ELSA-2023-2165 5 CVEs

    Important: edk2 security, bug fix, and enhancement update (Oracle Linux 9)

    [20221207gitfff6d81270b5-9] - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247] - Resolves: bz#2169247 ([edk2] Install a sev guest with enrolled secure boot failed) [20221207gitfff6d81270b5-8] - edk2-OvmfPkg-disable-dynamic-mmio-win…

  • High max 8.8
    ELSA-2023-2256 22 CVEs

    Important: webkit2gtk3 security and bug fix update (Oracle Linux 9)

    [2.38.5-1] - Update to 2.38.5 Related: #2127467 [2.38.4-1] - Update to 2.38.4 Related: #2127467 [2.38.3-1] - Update to 2.38.3 Related: #2127467 [2.38.2-1] - Update to 2.38.2 Related: #2127467 [2.38.1-2] - Fix use with aarch64 64 KiB page size Related: #212746…

  • High max 8.1
    ELSA-2023-2458 40 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

  • High max 6.5
    ELSA-2023-12339 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-101.103.2.1] - Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35346968] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35346963] [5.15.0-101.103.2] - uek-rpm: mod-extra: Remove mt7921e.ko from ex…

  • High
    ELSA-2023-12331 1 CVE

    Important: spacewalk-admin security update (Oracle Linux 7)

    [2.10.1-1.0.1] - Fix for CVE-2021-40348 [Orabug: 33531467] [2.10.1-1] - copy cert file instead of linking [2.8.4-1] - remove install/clean section initial cleanup - removed Group from specfile - removed BuildRoot from specfiles [2.8.3-1] - 1524221 - ship syst…

  • High max 7.5
    ELSA-2023-2122 1 CVE

    Important: libreswan security update (Oracle Linux 8)

    [4.5-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.5-1.1] - Resolves: rhbz#2187178 fix handling of IKEv1 aggressive mode packets

  • High max 7.5
    ELSA-2023-2120 1 CVE

    Important: libreswan security update (Oracle Linux 9)

    [4.6-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.6-3.1] - Resolves: rhbz#2187170 fix handling of IKEv1 aggressive mode packets

  • High max 8.1
    ELSA-2023-2127 1 CVE

    Important: samba security update (Oracle Linux 9)

    [4.16.4-103.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.16.4-103] - related: rhbz#2154372 - Add additional patches for CVE-2022-38023 [4.16.4-102] - Fix CVE-2022-38023 - resolves: rhbz#2154372

  • High max 7.8
    ELSA-2023-12323 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.74.2] - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [Orabug: 35250098] {CVE-2023-1513} - staging: rtl8712: fix use after free bugs (Dan Carpenter) [Orabug: 35212876] {CVE-2022-4095} - stag…

  • High max 5.3
    ELSA-2023-2077 1 CVE

    Important: libwebp security update (Oracle Linux 7)

    [0.3.0-11] - Added fix for mzbz#1819244

  • High max 5.3
    ELSA-2023-2076 1 CVE

    Important: libwebp security update (Oracle Linux 8)

    [1.0.0-8] - Added fix for mzbz#1819244

  • High max 7.8
    ELSA-2023-2074 1 CVE

    Important: emacs security update (Oracle Linux 9)

    [1:27.2-6.1] - Fix ob-latex.el command injection vulnerability (#2180589)

  • High max 5.3
    ELSA-2023-2078 1 CVE

    Important: libwebp security update (Oracle Linux 9)

    [1.2.0-6] - Fix tools subpackage dependency [1.2.0-4] - Added fix for mzbz#1819244

  • High max 5.5
    ELSA-2023-12298 1 CVE

    Important: cloud-init security update (Oracle Linux 8)

    [22.1-6.0.4.el8_7.2] - Fix log file permissions [Orabug: 35302985] [22.1-6.0.3.el8_7.2] - Fix CVE-2023-1786 [Orabug: 35302985]

  • High max 5.5
    ELSA-2023-12299 1 CVE

    Important: cloud-init security update (Oracle Linux 9)

    [22.1-7.0.3.el9_1] - Fix log file permission [Orabug: 35302969] [22.1-7.0.2.el9_1] - Fix CVE-2023-1786 [Orabug: 35302969]

  • High
    ELSA-2023-12308 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12307 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12309 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12306 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High max 7.4
    ELSA-2023-1904 7 CVEs

    Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

    [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configu…

  • High max 7.4
    ELSA-2023-1908 7 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configu…

  • High
    ELSA-2023-12313 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12310 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)