Oracle Linux Security Advisories (ELSA)

5,092 results · Clear filters · Feed

• High max 8.8
  ELSA-2023-1401 5 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.9.0-1] - Update to 102.9.0 build1

  Mar 22, 2023
• High max 8.8
  ELSA-2023-1403 5 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.9.0-1] - Update to 102.9.0 build1

  Mar 22, 2023
• High max 7.5
  ELSA-2023-1405 4 CVEs

  Important: openssl security update (Oracle Linux 8)

  [1:1.1.1k-9] - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion i…

  Mar 22, 2023
• High max 8.8
  ELSA-2023-1407 5 CVEs

  Important: thunderbird security update (Oracle Linux 9)

  [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.9.0-1] - Update to 102.9.0 build1

  Mar 22, 2023
• High max 7.8
  ELSA-2023-12207 12 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2136.317.5.3] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192150] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192150] - net: Fix unwanted sign ext…

  Mar 21, 2023
• High max 7.9
  ELSA-2023-12206 13 CVEs 1 exploited

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2136.317.5.3] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192150] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192150] - net: Fix unwanted sign ext…

  Mar 21, 2023
• High max 8.8
  ELSA-2023-1368 1 CVE

  Important: nss security and bug fix update (Oracle Linux 9)

  [3.79.0-17] - fix consistency return errors. We shouldn't lock the FIPS token if the application asked for invalid DH parameters on on keygen. [3.79.0-16] - Add check for RSA PSS Salt required by FIPS - Update fips_algorithms.sh according to the review. [3.79…

  Mar 21, 2023
• High max 8.8
  ELSA-2023-1333 5 CVEs

  Important: firefox security update (Oracle Linux 7)

  [102.9.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - remo…

  Mar 20, 2023
• High max 7.4
  ELSA-2023-1335 1 CVE

  Important: openssl security update (Oracle Linux 7)

  [1:1.0.2k-26] - Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName - Resolves: rhbz#2176790

  Mar 20, 2023
• High max 8.8
  ELSA-2023-1332 1 CVE

  Important: nss security update (Oracle Linux 7)

  [3.79.0-5] - fix CVE-2023-0767

  Mar 20, 2023
• High max 8.8
  ELSA-2023-1336 5 CVEs

  Important: firefox security update (Oracle Linux 8)

  [102.9.0-3.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - removed disable-openh264-dow…

  Mar 20, 2023
• High max 8.8
  ELSA-2023-1337 5 CVEs

  Important: firefox security update (Oracle Linux 9)

  [102.9.0-3.0.1] - Updated homepages to use https [Orabug: 34648274] [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - removed disable-openh264-download [102.9.0-1] - Update to 102.9.0 build1

  Mar 20, 2023
• High max 7.8
  ELSA-2023-12199 11 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.523.4.1] - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [Orabug: 35164196] [4.14.35-2047.523.4] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987235] - rd…

  Mar 17, 2023
• High max 7.8
  ELSA-2023-12200 11 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.523.4.1] - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [Orabug: 35164196] [4.14.35-2047.523.4] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987235] - rd…

  Mar 17, 2023
• High max 6.5
  ELSA-2023-12195 4 CVEs

  Important: virt:kvm_utils2 security update (Oracle Linux 8)

  qemu-kvm [6.1.1-5-el8] - hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/displa…

  Mar 17, 2023
• High max 7.9
  ELSA-2023-12196 8 CVEs 1 exploited

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

  [5.15.0-8.91.4.1] - uek-rpm: Add opbmc to core rpm (Somasundaram Krishnasamy) [Orabug: 35157130] [5.15.0-8.91.4] - selftests/vm: remove ARRAY_SIZE define from individual tests (Shuah Khan) [Orabug: 35088471] - selftests: Provide local define of __cpuid_count(…

  Mar 16, 2023
• High max 8.8
  ELSA-2023-1252 1 CVE

  Important: nss security update (Oracle Linux 8)

  [3.79.0-11] - Fix CVE-2023-0767

  Mar 15, 2023
• High max 7.8
  ELSA-2023-1091 2 CVEs

  Important: kernel security and bug fix update (Oracle Linux 7)

  [3.10.0-1160.88.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.88.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

  Mar 8, 2023
• High max 5.5
  ELSA-2023-1093 1 CVE

  Important: pesign security update (Oracle Linux 7)

  [0.109-11.0.1] - RPM macro fix (Petr Benes) - updates for Oracle Linux test certificate (Alexey Petrenko) - update Oracle Linux certificates (Alexey Petrenko) [0.109-11] - Backport newer, deprecated pesign-authorize - Resolves: CVE-2022-3560

  Mar 8, 2023
• High max 8.1
  ELSA-2023-1090 1 CVE

  Important: samba security update (Oracle Linux 7)

  [4.10.16-24.0.1] - Fix memory leak in _nss_winbind_initgroups_dyn [Orabug: 34228871] [4.10.16-24] - related: #2154364 - Add additional patches for CVE-2022-38023 [4.10.16-23] - resolves: #2154364 - Fix CVE-2022-38023

  Mar 8, 2023
• High max 7.8
  ELSA-2023-12160 4 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.72.2] - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983616] {CVE-2023-23455} - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880763] {CVE-2022-45934} [4.1.12-124.72.1] - target: Invoke t…

  Mar 7, 2023
• High max 7.5
  ELSA-2023-18908 8 CVEs

  Important: ol8addon security update (Oracle Linux 8)

  delve [1.9.1-1.0.1] - Bump version of delve from 1.8.3 to 1.9.1 [1.8.3-1.0.1] - Bump version of delve from 1.7.2 to 1.8.3 [1.7.2-1.0.1] - Bump version of delve from 1.6.0 to 1.7.2, enable aarch64 [1.6.0-1.0.1] - Bump upstream version of delve from 1.5.0 to 1.…

  Mar 7, 2023
• High max 5.5
  ELSA-2023-1067 1 CVE

  Important: pesign security update (Oracle Linux 9)

  [115-6.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] [115-6] - Fix chmod invocation - Resolves: CVE-2022-3560 [115-5] - Deprecate pesign-authorize and drop ACL use - Resolves: CVE-2022-3560

  Mar 6, 2023
• High max 7.8
  ELSA-2023-0951 5 CVEs

  Important: kernel security and bug fix update (Oracle Linux 9)

  - [5.14.0-162.18.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

  Mar 1, 2023
• High max 9.8
  ELSA-2023-0978 2 CVEs

  Important: git security update (Oracle Linux 7)

  [1.8.3.1-24] - Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067

  Feb 28, 2023
• High max 7.8
  ELSA-2023-12143 1 CVE

  Important: sudo security update (Oracle Linux 8)

  [1.8.6p3-29.0.4.el6_10.3] - Fixed Privilege escalation CVE-2023-22809 for sudoedit [Orabug: 35037922]

  Feb 28, 2023
• High max 8.8
  ELSA-2023-0902 1 CVE 1 exploited

  Important: webkit2gtk3 security update (Oracle Linux 8)

  [2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170007

  Feb 22, 2023
• High max 7.5
  ELSA-2023-0832 3 CVEs

  Important: kernel security and bug fix update (Oracle Linux 8)

  [4.18.0-425.13.1_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  Feb 22, 2023
• High max 8.1
  ELSA-2023-0838 1 CVE

  Important: samba security update (Oracle Linux 8)

  [4.16.4-4.0.1] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.16.4-4] - related: rhbz#2154369 - Add additional patch for CVE-2022-38023 [4.16.4-3] - resolves: rhbz#2154369 - Fix CVE-2022-38023 [4.16.…

  Feb 22, 2023
• High max 8.8
  ELSA-2023-0903 1 CVE 1 exploited

  Important: webkit2gtk3 security update (Oracle Linux 9)

  [2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170000

  Feb 22, 2023
• High max 8.8
  ELSA-2023-0817 13 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

  Feb 21, 2023
• High max 8.8
  ELSA-2023-0812 12 CVEs

  Important: firefox security update (Oracle Linux 7)

  [102.8.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Upda…

  Feb 21, 2023
• High max 8.8
  ELSA-2023-0821 13 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

  Feb 20, 2023
• High max 8.8
  ELSA-2023-0808 12 CVEs

  Important: firefox security update (Oracle Linux 8)

  [102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

  Feb 20, 2023
• High max 8.8
  ELSA-2023-0810 12 CVEs

  Important: firefox security update (Oracle Linux 9)

  [102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

  Feb 20, 2023
• High max 8.8
  ELSA-2023-0824 13 CVEs

  Important: thunderbird security update (Oracle Linux 9)

  [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

  Feb 20, 2023
• High max 8.0
  ELSA-2023-12118 5 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Or…

  Feb 14, 2023
• High max 8.0
  ELSA-2023-12121 2 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: i…

  Feb 14, 2023
• High max 8.0
  ELSA-2023-12119 2 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: i…

  Feb 14, 2023
• High max 8.0
  ELSA-2023-12117 5 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Or…

  Feb 13, 2023