Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High

ELSA-2023-12312 0 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Apr 25, 2023
High

ELSA-2023-12311 0 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Apr 25, 2023
High

ELSA-2023-12314 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12316 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12315 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12317 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High max 7.4

ELSA-2023-1909 7 CVEs

Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 9)

[1.8.0.372.b07-1.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Reintrod…

Apr 25, 2023
High max 7.8

ELSA-2023-1930 1 CVE

Important: emacs security update (Oracle Linux 8)

[1:26.1-7.1] - Fix ob-latex.el command injection vulnerability (#2180585)

Apr 24, 2023
High max 7.4

ELSA-2023-1875 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 7)

[1:11.0.19.0.7-1.0.1] - link atomic for ix86 build [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for p…

Apr 20, 2023
High max 7.4

ELSA-2023-1898 7 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-fri…

Apr 20, 2023
High max 8.8

ELSA-2023-1919 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185740

Apr 20, 2023
High max 7.4

ELSA-2023-1895 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 8)

[1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-…

Apr 20, 2023
High max 7.4

ELSA-2023-1880 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 9)

[11.0.19.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to…

Apr 20, 2023
High max 8.8

ELSA-2023-1918 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185744

Apr 20, 2023
High max 7.4

ELSA-2023-1879 7 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 9)

[17.0.7.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add…

Apr 20, 2023
High max 8.8

ELSA-2023-1806 11 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1802 11 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1809 11 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1791 8 CVEs

Important: firefox security update (Oracle Linux 7)

[102.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - U…

Apr 17, 2023
High max 7.8

ELSA-2023-12255 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.318.7.1] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pmu: O…

Apr 17, 2023
High max 7.8

ELSA-2023-12256 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.318.7.1.el7] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pm…

Apr 17, 2023
High max 8.8

ELSA-2023-1787 8 CVEs

Important: firefox security update (Oracle Linux 8)

[102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2

Apr 14, 2023
High max 8.8

ELSA-2023-1786 8 CVEs

Important: firefox security update (Oracle Linux 9)

[102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2

Apr 14, 2023
High max 8.6

ELSA-2023-1743 7 CVEs

Important: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:14.21.3-1] - Rebase to 14.21.3 Resolves: rhbz#2153712 Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900 Resolves: CVE-2022-4904

Apr 12, 2023
High max 7.8

ELSA-2023-1703 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 9)

- [5.14.0-162.23.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

Apr 12, 2023
High max 7.8

ELSA-2023-12242 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.524.5] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource watchdo…

Apr 10, 2023
High max 7.8

ELSA-2023-12243 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.524.5.el7] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4.el7] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource…

Apr 10, 2023
High max 9.8

ELSA-2023-1673 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-51.5.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.5] - Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite an…

Apr 7, 2023
High max 9.8

ELSA-2023-1670 1 CVE

Important: httpd and mod_http2 security update (Oracle Linux 9)

httpd [2.4.53-7.0.1.5] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.5] - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy mod_http2 [1.15.19-3.5] - Resolves: #2177751 - CVE-2023-256…

Apr 6, 2023
High max 9.8

ELSA-2023-1593 1 CVE

Important: httpd security update (Oracle Linux 7)

[2.4.6-98.0.3] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850] - mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690] [2.4.6-98.0.1] - replace index.html with Oracle's index pag…

Apr 5, 2023
High max 7.9

ELSA-2023-1566 4 CVEs 2 exploited

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-425.19.2_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Apr 5, 2023
High max 9.8

ELSA-2023-12235 1 CVE

Important: pcs security update (Oracle Linux 9)

[0.11.3-4.el9_1.3] - Fixed a vulnerability in pcs-web-ui-node-modules - Resolves: rhbz#2179900

Apr 5, 2023
High max 6.6

ELSA-2023-12232 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.73.2] - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095} - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074…

Apr 4, 2023
High max 7.8

ELSA-2023-1594 1 CVE

Important: tigervnc and xorg-x11-server security update (Oracle Linux 7)

tigervnc [1.8.0-25] - CVE fix for: CVE-2023-1393 Resolves: bz#2180291 xorg-x11-server [1.20.4-23] - CVE fix for: CVE-2023-1393 (#2180290)

Apr 4, 2023
High max 7.8

ELSA-2023-1551 1 CVE

Important: tigervnc security update (Oracle Linux 8)

[1.12.0-9.3] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180304 [1.12.0-9.2] - Add sanity check when cleaning up keymap changes Resolves: bz#2169962

Apr 4, 2023
High max 5.5

ELSA-2023-1572 1 CVE

Important: pesign security update (Oracle Linux 8)

[0.112-27.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] - Apply pesigcheck-Mark-the-imported-certificate-as-trusted.patch [Orabug: 31928433] - update Oracle Linux certificates (Alexey Petrenko) - remove obsoletes of pesign-rh-test-certs [Ora…

Apr 4, 2023
High max 7.8

ELSA-2023-1592 1 CVE

Important: tigervnc security update (Oracle Linux 9)

[1.12.0-5.2] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180308

Apr 4, 2023
High max 5.8

ELSA-2023-12226 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-100.96.32] - crypto: Report fips module name and version for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251] - uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251] [5.15.0-100.96.31] - uek-rpm: Update linux-firmware d…

Apr 4, 2023
High max 7.9

ELSA-2023-1470 3 CVEs 1 exploited

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

- [5.14.0-162.22.2_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

Mar 28, 2023
High max 7.4

ELSA-2023-12205 1 CVE

Important: openssl security update (Oracle Linux 7)

[1.0.2k-26_fips] - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison [Orabug: 32467026] - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059] - Add TLS KDF self-test [Orabug: 32467193] - Add EC keys pairwise c…

Mar 22, 2023