Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 6.0

ELSA-2024-0135 1 CVE

Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-40.el8_9.2] - Resolves: RHEL-7309 (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_writ…

Jan 12, 2024
Medium max 7.5

ELSA-2024-0133 2 CVEs

Moderate: fence-agents security update (Oracle Linux 8)

[4.2.1-121.2] - bundled urllib3: fix CVE-2023-43804 Resolves: RHEL-11988 - bundled certifi: fix CVE-2023-37920 Resolves: RHEL-6972

Jan 11, 2024
Medium max 8.8

ELSA-2024-0131 1 CVE

Moderate: pixman security update (Oracle Linux 8)

[0.38.4-3] - Security fix for CVE-2022-44638

Jan 11, 2024
Medium max 5.9

ELSA-2024-0155 1 CVE

Moderate: gnutls security update (Oracle Linux 8)

[3.6.16-8] - timing side-channel in the RSA-PSK authentication (CVE-2023-5981)

Jan 11, 2024
Medium max 6.1

ELSA-2024-0125 4 CVEs

Moderate: tomcat security update (Oracle Linux 8)

[1:9.0.62-27.2] - Open Redirect vulnerability in FORM authentication (CVE-2023-41080) - FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794) - improper cleaning of recycled objects could lead to information leak (CVE-2023-42795) …

Jan 11, 2024
Medium max 7.5

ELSA-2024-0121 9 CVEs

Moderate: container-tools:4.0 security update (Oracle Linux 8)

buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 cockpit-podman [46-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46 - Related: #2061390 conmon [2:2.1.4-2] - update to https://github.com/containers/conmon/r…

Jan 11, 2024
Medium max 6.5

ELSA-2024-0141 1 CVE

Moderate: ipa security update (Oracle Linux 9)

[4.10.2-5.0.1] - Resolves: 2242828 Invalid CSRF protection (CVE-2023-5455)

Jan 11, 2024
Medium max 6.5

ELSA-2024-0145 1 CVE

Moderate: ipa security update (Oracle Linux 7)

[4.6.8-5.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7_9.16] - Resolves: RHEL-12570 ipa: Invalid CSRF protection

Jan 10, 2024
Medium max 5.9

ELSA-2024-0116 2 CVEs

Moderate: python-urllib3 security update (Oracle Linux 8)

[1.24.2-5.0.1.2] - set RECENT_DATE to 01/30/2019 to make checks happy [Orabug: 30228991] [1.24.2-5.2] - Security fix for CVE-2023-45803 Resolves: rhbz#2246840 - Security fix for CVE-2023-43804 Resolves: rhbz#2242493

Jan 10, 2024
Medium

ELSA-2024-0119 1 CVE

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-18] - Fix CVE-2023-39615 (RHEL-5179) [2.9.7-17] - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692)

Jan 10, 2024
Medium max 6.5

ELSA-2024-0105 1 CVE

Moderate: nss security update (Oracle Linux 8)

[3.90.0-4] - Fix expired certs in tests - Fix CVE-2023-5388

Jan 10, 2024
Medium

ELSA-2024-0114 2 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-56.0.1.2] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-56.2] - Security fix for CVE-2022-48560 Resolves: rhbz#2249755 - Security fix for CVE-2022-48564 Resolves: rhbz#2249750

Jan 10, 2024
Medium max 6.5

ELSA-2024-0108 1 CVE

Moderate: nss security update (Oracle Linux 9)

[3.90.0-4] - CVE-2023-5388 nss: timing attack against RSA decryption. Make the final blinding multmod constant time.

Jan 10, 2024
Medium max 6.6

ELSA-2023-7879 3 CVEs

Moderate: opensc security update (Oracle Linux 9)

[0.23.0-3] - Fix file caching with different offsets (RHEL-4079) - Fix CVE-2023-40660: Potential PIN bypass - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetr…

Dec 19, 2023
Medium max 6.6

ELSA-2023-7876 2 CVEs

Moderate: opensc security update (Oracle Linux 8)

[0.20.0-7] - Fix file caching with different offsets (RHEL-4077) - Fix CVE-2023-40660: Potential PIN bypass - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init - Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 paddi…

Dec 18, 2023
Medium max 7.5

ELSA-2023-7753 2 CVEs

Moderate: fence-agents security update (Oracle Linux 9)

[4.10.0-55.2] - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920) - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Dec 18, 2023
Medium max 6.2

ELSA-2023-7836 6 CVEs

Moderate: avahi security update (Oracle Linux 8)

[0.7-21.1] - Fix CVE-2021-3468 (#1939614) - Fix CVE-2023-38469 (#2191687) - Fix CVE-2023-38470 (#2191694) - Fix CVE-2023-38471 (#2191690) - Fix CVE-2023-38472 (#2191692) - Fix CVE-2023-38473 (#2191691)

Dec 15, 2023
Medium

ELSA-2023-7765 5 CVEs

Moderate: podman security update (Oracle Linux 9)

[2:4.6.1-7.0.1] - Rebuild for following CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 - Resolves: #2228743 - Resolves: #2237773 - Resolves: #2237776 - Resolves: #2237777 - Resolves: #2237778 [2:4.6.1-6.0.1] - Drop nmap-ncat …

Dec 14, 2023
Medium

ELSA-2023-7763 3 CVEs

Moderate: runc security update (Oracle Linux 9)

[4:1.1.9-2] - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 - Resolves: #2228743 - Resolves: #2237777 - Resolves: #2237778

Dec 14, 2023
Medium

ELSA-2023-7764 5 CVEs

Moderate: buildah security update (Oracle Linux 9)

[1.31.3-2.0.1] - Rebuild for CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409

Dec 14, 2023
Medium

ELSA-2023-7747 1 CVE

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-5] - Fix CVE-2023-39615 (RHEL-5180)

Dec 13, 2023
Medium max 8.8

ELSA-2023-7754 1 CVE

Moderate: pixman security update (Oracle Linux 9)

[0.40.0-6] - Backport fix for CVE-2022-44638

Dec 13, 2023
Medium

ELSA-2023-7766 5 CVEs

Moderate: containernetworking-plugins security update (Oracle Linux 9)

[1:1.3.0-6] - rebuild for following CVEs: CVE-2023-29409 CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 - Resolves: #2228743 - Resolves: #2237773 - Resolves: #2237776 - Resolves: #2237777 - Resolves: #2237778 [1:1.3.0-5] - fix path to dhcp servic…

Dec 13, 2023
Medium

ELSA-2023-7762 5 CVEs

Moderate: skopeo security update (Oracle Linux 9)

[2:1.13.3-3] - Rebuild with golang 1.20.10 - Related: Jira:RHEL-2786 [2:1.13.3-2] - Rebuild with golang 1.21.3 - Related: Jira:RHEL-2786

Dec 13, 2023
Medium max 9.8

ELSA-2023-7711 1 CVE

Moderate: apr security update (Oracle Linux 9)

[1.7.0-12] - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123

Dec 11, 2023
Medium max 7.6

ELSA-2023-7253 2 CVEs

Moderate: dotnet8.0 security update (Oracle Linux 9)

[8.0.100-2.0.1] - Update to .NET 8.0 [8.0.100~rc.2-0.1.0.1] - Add support for Oracle Linux [8.0.100~rc.2-0.1] - Update to .NET 8 RC 2 - Resolves: RHEL-13790 [8.0.100~rc.1-0.4] - Disable bootstrap - Related: RHEL-4074 [8.0.100~rc.1-0.3] - Add backported patche…

Nov 28, 2023
Medium max 7.6

ELSA-2023-7255 2 CVEs

Moderate: dotnet7.0 security update (Oracle Linux 9)

[7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14

Nov 27, 2023
Medium max 7.6

ELSA-2023-7257 2 CVEs

Moderate: dotnet6.0 security update (Oracle Linux 9)

[6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Add support for Oracle Linux

Nov 24, 2023
Medium max 9.1

ELSA-2023-7467 3 CVEs

Moderate: samba security update (Oracle Linux 8)

[4.18.6-2.0.1] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server

Nov 23, 2023
Medium max 7.6

ELSA-2023-7258 2 CVEs

Moderate: dotnet6.0 security update (Oracle Linux 8)

[6.0.125-1.0.2] - Add strict BuildRequires on 6.0.125-1.0.1 [6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25

Nov 23, 2023
Medium max 7.6

ELSA-2023-7256 2 CVEs

Moderate: dotnet7.0 security update (Oracle Linux 8)

[7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14

Nov 22, 2023
Medium

ELSA-2023-7202 1 CVE

Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman [2:4.0.2-24] - rebuild for CVE-2023-29406…

Nov 22, 2023
Medium max 4.1

ELSA-2023-7207 2 CVEs

Moderate: c-ares security update (Oracle Linux 8)

[1.13.0-9.1] - Resolves: RHEL-11931 - Buffer Underwrite in ares_inet_net_pton() [rhel-8.9.0.z] [1.13.0-9] - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]

Nov 22, 2023
Medium max 7.5

ELSA-2023-6940 2 CVEs

Moderate: mod_auth_openidc:2.3 security and bug fix update (Oracle Linux 8)

cjose [0.6.1-4] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 mod_auth_openidc [2.4.9.4-5] Related: rhbz#2141850 - fix cjose version dependency [2.4.9.4-4] Resolves…

Nov 18, 2023
Medium

ELSA-2023-7109 1 CVE

Moderate: linux-firmware security, bug fix, and enhancement update (Oracle Linux 8)

[20230516-999.27.git6c9e0ed5.el8] - Update firmware for qat_4xxx devices (Orabug: 35811008)

Nov 18, 2023
Medium max 5.3

ELSA-2023-6887 2 CVEs

Moderate: java-21-openjdk security and bug fix update (Oracle Linux 8)

[1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) -…

Nov 18, 2023
Medium max 9.8

ELSA-2023-6938 16 CVEs

Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 [1:1.24.6-6] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves:…

Nov 18, 2023
Medium max 8.8

ELSA-2023-7025 4 CVEs

Moderate: ruby:2.5 security update (Oracle Linux 8)

rubygem-abrt [0.3.0-4] - Execute test suite unconditionally. - Upload correct sources. [0.3.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.3.0-1] - Upda…

Nov 18, 2023
Medium max 9.8

ELSA-2023-6939 17 CVEs

Moderate: container-tools:ol8 security and bug fix update (Oracle Linux 8)

aardvark-dns [2:1.7.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0 - Related: #2176055 [2:1.6.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0 - Related: #2176055 buildah [1:1.31.3-1] - update to…

Nov 18, 2023
Medium max 6.1

ELSA-2023-7042 1 CVE

Moderate: python27:2.7 security and bug fix update (Oracle Linux 8)

babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned …

Nov 18, 2023