Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2023-7139 4 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

evolution-mapi [3.28.3-8] - Related: #2190417 - Rebuild for samba rebase to 4.18.x openchange [2.3-32.0.1] - Use ldconfig_scriptlets [2.3-32] - Related: #2190417 (Rebuild for samba rebase to 4.18.x) samba [4.18.6-1] - related: rhbz#2190417 - Update to version…

Nov 18, 2023
Medium max 5.6

ELSA-2023-6980 2 CVEs

Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)

hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX…

Nov 18, 2023
Medium max 9.8

ELSA-2023-7050 2 CVEs

Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

babel Cython mod_wsgi [4.6.8-5] - Remove rpath Resolves: rhbz#2213836 [4.6.8-4] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125171 [4.6.8-3] - Exclude unsupported i686 arch (rhbz#1779142) [4.6.8-2] - Adjusted for Python 3.8 module in RHEL 8 [4.6.8-1…

Nov 18, 2023
Medium max 9.8

ELSA-2023-7034 2 CVEs

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

mod_wsgi [4.7.1-7] - Bump release for rebuild Resolves: rhbz#2213595 [4.7.1-6] - Remove rpath Resolves: rhbz#2213837 numpy [1.19.4-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [1.19.4-2] - Convert from Fedora to t…

Nov 18, 2023
Medium max 8.1

ELSA-2023-7174 1 CVE

Moderate: perl-HTTP-Tiny security update (Oracle Linux 8)

[0.074-2] - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228409

Nov 17, 2023
Medium max 6.5

ELSA-2023-7057 1 CVE

Moderate: yajl security update (Oracle Linux 8)

[2.1.0-12] - fix CVE-2023-33460 - Resolves: #2221252

Nov 17, 2023
Medium max 9.8

ELSA-2023-6914 1 CVE

Moderate: python3.11-pip security update (Oracle Linux 8)

[22.3.1-4] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218249 [22.3.1-3] - Fix changelog to contain Fedora contributors Resolves: RHEL-232

Nov 17, 2023
Medium max 7.8

ELSA-2023-6917 1 CVE

Moderate: xorg-x11-server-Xwayland security and bug fix update (Oracle Linux 8)

[21.1.3-12] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2212831 [21.1.3-11] - Fix CVE-2023-1393 (#2180298)

Nov 17, 2023
Medium

ELSA-2023-7150 1 CVE

Moderate: librabbitmq security update (Oracle Linux 8)

[0.9.0-4] - Resolves: #2215765, insecure credentials submission

Nov 17, 2023
Medium max 9.4

ELSA-2023-6972 1 CVE

Moderate: grafana security and enhancement update (Oracle Linux 8)

[9.2.10-7] - resolve RHEL-12649 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch [9.2.10-6] - Add /usr/share/grafana to systemd-sysusers --replace…

Nov 17, 2023
Medium max 9.8

ELSA-2023-7083 2 CVEs

Moderate: emacs security update (Oracle Linux 8)

[1:26.1-11] - Bump version

Nov 17, 2023
Medium max 7.8

ELSA-2023-6976 1 CVE

Moderate: libfastjson security update (Oracle Linux 8)

[0.99.9-2] - Address CVE-2020-12762 Resolves: rhbz#2203171

Nov 17, 2023
Medium max 5.9

ELSA-2023-7090 1 CVE

Moderate: libmicrohttpd security update (Oracle Linux 8)

[1:0.9.59-3] - Add cve-2023-27371.patch Related: rhbz#2174639 CVE-2023-27371

Nov 17, 2023
Medium max 7.8

ELSA-2023-6933 4 CVEs

Moderate: libreoffice security update (Oracle Linux 8)

[6.4.7.2-15.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-15] - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Form…

Nov 17, 2023
Medium max 7.5

ELSA-2023-6967 4 CVEs

Moderate: qt5-qtbase security update (Oracle Linux 8)

[5.15.3-5] - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222770 [5.15.3-4] - Don't allow remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) (version #2) Resolves: bz#2212753 [5.1…

Nov 17, 2023
Medium max 5.5

ELSA-2023-7190 1 CVE

Moderate: avahi security update (Oracle Linux 8)

[0.7-21] - Fix CVE-2023-1981 (#2186688)

Nov 17, 2023
Medium max 7.5

ELSA-2023-7065 3 CVEs

Moderate: tomcat security and bug fix update (Oracle Linux 8)

[1:9.0.62-27] - Related: RHEL-12543 - Bump release number [1:9.0.62-16] - Resolves: RHEL-12543 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) - Remove JDK subpackges which are unused [1:9.0.62-14] - Related: R…

Nov 17, 2023
Medium max 6.5

ELSA-2023-7015 4 CVEs

Moderate: wireshark security update (Oracle Linux 8)

[1:2.6.2-17] - Resolves: #2211412 - XRA dissector infinite loop [1:2.6.2-16] - Resolves: #2210866 - VMS TCPIPtrace file parser crash - Resolves: #2210867 - NetScaler file parser crash - Resolves: #2210869 - RTPS dissector crash

Nov 17, 2023
Medium

ELSA-2023-6919 1 CVE

Moderate: edk2 security and bug fix update (Oracle Linux 8)

[20220126gitbb1bba3d77-6] - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267] - Resolves: bz#2150267 (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8]) [20220126gitbb1bba3d77-5] - edk2-SecurityPkg-DxeImageVer…

Nov 17, 2023
Medium max 9.8

ELSA-2023-7176 1 CVE

Moderate: python-pip security update (Oracle Linux 8)

[9.0.3-23] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218241

Nov 17, 2023
Medium max 8.6

ELSA-2023-7116 1 CVE

Moderate: c-ares security update (Oracle Linux 8)

[1.13.0-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] [1.13.0-7] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]

Nov 17, 2023
Medium max 7.5

ELSA-2023-7046 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 8)

[2.79-31] - Do not create and search --local and --address=/x/# domains (#2233542) [2.79-30] - Make create logfile writeable by root (#2156789) [2.79-29] - Fix also dynamically set resolvers over dbus (#2186481) [2.79-28] - Correct possible crashes when serve…

Nov 17, 2023
Medium max 9.8

ELSA-2023-7024 2 CVEs

Moderate: python3.11 security update (Oracle Linux 8)

[3.11.5-1] - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3047, RHEL-3267 [3.11.4-4] - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage Resolves: rhbz#2207631 [3.11.4-3] - Fix symlink…

Nov 17, 2023
Medium max 6.5

ELSA-2023-7189 1 CVE

Moderate: fwupd security update (Oracle Linux 8)

[1.7.8-2.0.1] - Modify %prep to correctly apply downstream patches - Align sections to 512 bytes [Orabug: 35265981] - Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981] - Enabled signing for aarch64 [Orabug: 3526598…

Nov 17, 2023
Medium max 7.5

ELSA-2023-7177 1 CVE

Moderate: bind security update (Oracle Linux 8)

[32:9.11.36-11] - Prevent exahustion of memory from control channel (CVE-2023-3341) [32:9.11.36-10] - Prevent the cache going over the configured limit (CVE-2023-2828) [32:9.11.36-9] - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream t…

Nov 17, 2023
Medium max 4.8

ELSA-2023-7096 1 CVE

Moderate: python-cryptography security update (Oracle Linux 8)

[3.2.1-6] - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172404

Nov 17, 2023
Medium max 5.3

ELSA-2023-7022 1 CVE

Moderate: tang security and bug fix update (Oracle Linux 8)

[7-8] - Set correct user/group (tang/tang) in tangd-keygen Resolves: rhbz#2188743 [7-7] - Fix race condition when creating/rotating keys Resolves: rhbz#2182410 Resolves: CVE-2023-1672

Nov 17, 2023
Medium max 7.8

ELSA-2023-7010 1 CVE

Moderate: sysstat security and bug fix update (Oracle Linux 8)

[11.7.3-11.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683071] [11.7.3-11] - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204) [11.7.3-10] - Fix incorrect…

Nov 17, 2023
Medium

ELSA-2023-7029 1 CVE

Moderate: libX11 security update (Oracle Linux 8)

[1.6.8-6] - CVE fix for: CVE-2023-3138 Resolve: rhbz#2213762

Nov 17, 2023
Medium max 10.0

ELSA-2023-7038 2 CVEs

Moderate: flatpak security, bug fix, and enhancement update (Oracle Linux 8)

[1.10.8-1] - Rebase to 1.10.8 (#2222103) - Fix CVE-2023-28100 and CVE-2023-28101 (#2180311)

Nov 17, 2023
Medium max 5.5

ELSA-2023-6943 1 CVE

Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 8)

[23.1.1-10.0.1] - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938] - Add IPv6 IMDS and dhcp6 support for Oracle Datasource [Orabug: 35470783] - Increase retry value and add timeout for OCI [Orabug: 35329883] - Fix log file permissi…

Nov 17, 2023
Medium

ELSA-2023-7052 3 CVEs

Moderate: libreswan security update (Oracle Linux 8)

[4.12-2.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2] - Resolves: rhbz#2234731 authby=rsasig fails in FIPS policy [4.12-1] - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz#2215955

Nov 17, 2023
Medium max 7.5

ELSA-2023-7165 2 CVEs

Moderate: cups security and bug fix update (Oracle Linux 8)

[1:2.2.6-54] - RHEL-2612 - cups pulls an unneeded dependency on python3 [1:2.2.6-53] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation [1:2.2.6-52] - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The …

Nov 17, 2023
Medium max 9.8

ELSA-2023-7053 3 CVEs

Moderate: ghostscript security and bug fix update (Oracle Linux 8)

[9.27-11] - fix for CVE-2023-4042 - Resolves: rhbz#2228153 [9.27-10] - fix for CVE-2023-38559 - Resolves: rhbz#2224371 [9.27-9] - fix for CVE-2023-28879 - Resolves: rhbz#2188297 [9.27-8] - fix embedding of CIDFonts - Resolves: rhbz#2169890 [9.27-7] - fix bbox…

Nov 17, 2023
Medium max 7.8

ELSA-2023-6916 1 CVE

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 8)

[1.20.11-17] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192556 [1.20.11-16] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180296

Nov 17, 2023
Medium max 5.5

ELSA-2023-6944 1 CVE

Moderate: protobuf-c security update (Oracle Linux 8)

[1.3.0-8] - Rebuild for gating test [1.3.0-7] - Applied patch for for CVE-2022-48468 (#2186678)

Nov 17, 2023
Medium max 9.8

ELSA-2023-7151 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-56.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-56] - Security fix for CVE-2023-40217 Resolves: RHEL-3041 [3.6.8-55] - Fix symlink handling in the fix for CVE-2007-4559…

Nov 17, 2023
Medium max 9.1

ELSA-2023-6744 3 CVEs

Moderate: samba security update (Oracle Linux 9)

[4.18.6-101] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server

Nov 16, 2023
Medium max 6.5

ELSA-2023-6409 1 CVE

Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 9)

[9.5.0-7.0.1] - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744) - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [9.5.0-7] - util: use 'stubDriverType' instead of just 'stubDriver' (rhbz#2074209) - util: …

Nov 12, 2023
Medium max 7.5

ELSA-2023-6369 5 CVEs

Moderate: qt5 security and bug fix update (Oracle Linux 9)

adwaita-qt [1.4.2-1] - 1.4.2 Resolves: bz#2175754 python-pyqt5-sip [12.11.1-1] - 12.11.1 Resolves: bz#2188589 python-qt5 [5.15.9-1] - 5.15.9 Resolves: bz#2175758 qgnomeplatform [0.9.0-1] - 0.9.0 Resolves: bz#2175753 qt5 [5.15.9-1] - 5.15.9 Resolves: bz#217572…

Nov 12, 2023