Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 7.8

ELSA-2023-12120 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure message…

Feb 13, 2023
High max 7.8

ELSA-2023-12116 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure message…

Feb 13, 2023
High max 7.8

ELSA-2023-0675 1 CVE

Important: tigervnc and xorg-x11-server security update (Oracle Linux 7)

tigervnc [1.8.0-24] - CVE fix for: CVE-2023-0494 Resolves: bz#2166532 xorg-x11-server [1.20.4-22] - CVE fix for: CVE-2023-0494 (#2166513)

Feb 9, 2023
High max 6.5

ELSA-2023-12108 5 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

libvirt [5.7.0-38.el8] - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758] - security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631} - qemu: Set de…

Feb 8, 2023
High max 7.8

ELSA-2023-0662 1 CVE

Important: tigervnc security update (Oracle Linux 8)

[1.12.0-9] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167057

Feb 8, 2023
High max 7.8

ELSA-2023-0622 1 CVE

Important: tigervnc security update (Oracle Linux 9)

[1.12.0-5] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167060

Feb 8, 2023
High max 9.8

ELSA-2023-0626 1 CVE

Important: libksba security update (Oracle Linux 9)

[1.5.1-6] - Fix for CVE-2022-47629 (#2161571)

Feb 8, 2023
High max 8.0

ELSA-2023-12109 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.71.3] - USB: core: Prevent nested device-reset calls (Alan Stern) [Orabug: 34951641] {CVE-2022-4662} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) [Orabug: 34833307] {CVE-2022-42896} {CVE-2022-42896…

Feb 7, 2023
High max 6.5

ELSA-2023-0600 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-2] - Update to 102.7.1 build2

Feb 7, 2023
High max 9.8

ELSA-2023-0610 2 CVEs

Important: git security update (Oracle Linux 8)

[2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162063

Feb 7, 2023
High max 6.5

ELSA-2023-0606 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2

Feb 7, 2023
High max 9.8

ELSA-2023-0625 1 CVE

Important: libksba security update (Oracle Linux 8)

[1.3.5-9] - Fix for CVE-2022-47629 (#2161571)

Feb 7, 2023
High max 9.8

ELSA-2023-0611 2 CVEs

Important: git security update (Oracle Linux 9)

[2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162069

Feb 7, 2023
High max 6.5

ELSA-2023-0608 1 CVE

Important: thunderbird security update (Oracle Linux 9)

[102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2

Feb 7, 2023
High max 9.8

ELSA-2023-0530 1 CVE

Important: libksba security update (Oracle Linux 7)

[1.3.0-7] - Fix for CVE-2022-47629 (#2161571)

Jan 30, 2023
High max 8.8

ELSA-2023-0463 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

Jan 26, 2023
High max 8.8

ELSA-2023-0476 8 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

Jan 26, 2023
High

ELSA-2023-0399 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.83.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.83.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Jan 25, 2023
High max 8.8

ELSA-2023-0456 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

Jan 25, 2023
High max 7.8

ELSA-2023-0334 6 CVEs

Important: kernel security and bug fix update (Oracle Linux 9)

[5.14.0-162.12.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Jan 25, 2023
High max 8.8

ELSA-2023-0296 8 CVEs

Important: firefox security update (Oracle Linux 7)

[102.7.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add …

Jan 24, 2023
High max 7.8

ELSA-2023-0291 1 CVE

Important: sudo security update (Oracle Linux 7)

[1.8.23-10.3] RHEL 7.9.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161222 [1.8.23-10.2] - RHEL 7.9.Z ERRATUM - defaults use_pty plus SELinux ROLE in user specification breaks terminal Resolves: rhbz#…

Jan 24, 2023
High max 8.1

ELSA-2023-12069 4 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jan 24, 2023
High max 8.1

ELSA-2023-12067 4 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jan 24, 2023
High max 8.8

ELSA-2023-0403 1 CVE

Important: sssd security and bug fix update (Oracle Linux 7)

[1.16.5-10.0.3] - Revert Redhat's change of disallowing duplicated incomplete gid when 'id_provider=ldap' is used, which caused regression in AD environment. [Orabug: 29286774] [Doc ID 2605732.1] [1.16.5-10.15] - Resolves: rhbz#2149703 - smartcards: special c…

Jan 24, 2023
High max 8.1

ELSA-2023-12066 4 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jan 24, 2023
High max 8.1

ELSA-2023-12068 4 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jan 24, 2023
High max 8.1

ELSA-2023-12070 4 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jan 24, 2023
High max 8.1

ELSA-2023-12072 4 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jan 24, 2023
High max 8.8

ELSA-2023-0379 3 CVEs

Important: libXpm security update (Oracle Linux 8)

[3.5.12-9] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2161800) - Fix CVE-2022-44617: runaway loop with width of 0 (#2161808) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160238)

Jan 24, 2023
High max 8.8

ELSA-2023-0288 8 CVEs

Important: firefox security update (Oracle Linux 8)

[102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage t…

Jan 24, 2023
High max 8.1

ELSA-2023-12071 4 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jan 24, 2023
High max 8.1

ELSA-2023-12073 4 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jan 24, 2023
High max 8.8

ELSA-2023-0285 8 CVEs

Important: firefox security update (Oracle Linux 9)

[102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9

Jan 24, 2023
High max 8.1

ELSA-2023-12074 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
High max 8.1

ELSA-2023-12076 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
High max 8.8

ELSA-2023-0383 3 CVEs

Important: libXpm security update (Oracle Linux 9)

[3.5.13-8] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160242)

Jan 24, 2023
High max 8.1

ELSA-2023-12075 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
High max 8.1

ELSA-2023-12077 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
High max 8.8

ELSA-2023-0377 1 CVE

Important: libXpm security update (Oracle Linux 7)

[3.5.12-2] - Fix CVE-2022-4883: compression commands depends on /usr/local/bin:/usr/bin (#2161715)

Jan 23, 2023