Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2023-6712 1 CVE

Moderate: python-wheel security update (Oracle Linux 9)

[1:0.36.2-8] - Security fix for CVE-2022-40898 - Resolves: rhbz#2178881

Nov 12, 2023
Medium max 7.5

ELSA-2023-6420 9 CVEs

Moderate: grafana security and enhancement update (Oracle Linux 9)

[9.2.10-7] - bump release number for rebuild with fixed gating.yaml file [9.2.10-6] - resolve RHEL-12665 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date m…

Nov 11, 2023
Medium max 5.9

ELSA-2023-6575 5 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-10] - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 [4.4.0-9] - Fix CVE-2023-2731 - Resolves: CVE-2023-2731

Nov 11, 2023
Medium max 6.5

ELSA-2023-6469 6 CVEs

Moderate: wireshark security update (Oracle Linux 9)

[1:3.4.10-6] - Resolves: #2211413 - XRA dissector infinite loop [1:3.4.10-5] - Resolves: #2210864 - Candump log file parser crash Resolves: #2210865 - VMS TCPIPtrace file parser crash Resolves: #2210868 - NetScaler file parser crash Resolves: #2210870 - RTPS …

Nov 11, 2023
Medium max 9.8

ELSA-2023-6363 11 CVEs

Moderate: skopeo security update (Oracle Linux 9)

[2:1.13.3-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.3 - Related: #2176063 [2:1.13.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.2 - Related: #2176063 [2:1.13.1-1] - update to https://github.com/container…

Nov 11, 2023
Medium

ELSA-2023-6643 2 CVEs

Moderate: libssh security update (Oracle Linux 9)

[0.10.4-11] - Fix loglevel regression - Related: rhbz#2182252, rhbz#2189740 [0.10.4.10] - Fix null dereference issues found by covscan - Related: rhbz#2182252, rhbz#2189740 [0.10.4-9] - Fix CVE-2023-1667 and CVE-2023-2283 - Fix issues found by cosvcan - Resol…

Nov 11, 2023
Medium max 7.8

ELSA-2023-6341 1 CVE

Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update (Oracle Linux 9)

[22.1.9-2] - Rebuild (#2158761) [22.1.9-1] - xwayland 22.1.9 (#2158761) [21.1.3-8] - Fix CVE-2023-1393 (#2180299)

Nov 11, 2023
Medium max 7.8

ELSA-2023-6343 1 CVE

Moderate: LibRaw security update (Oracle Linux 9)

[0.20.2-6] - Fix CVE-2021-32142 Resolves: #2172140

Nov 11, 2023
Medium max 5.5

ELSA-2023-6371 1 CVE

Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 9)

[23.1.1-11.0.2] - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168] [23.1.1-11.0.1] - Increase retry value and add timeout for OCI [Orabug: 35329883] - Fix log file permission [Orabug: 35302969] - Update detection logic for OL di…

Nov 11, 2023
Medium max 10.0

ELSA-2023-6518 2 CVEs

Moderate: flatpak security, bug fix, and enhancement update (Oracle Linux 9)

[1.12.8-1] - Update to 1.12.8 (CVE-2023-28100, CVE-2023-28101) Resolves: #2180312, #2221792

Nov 11, 2023
Medium max 6.5

ELSA-2023-6551 1 CVE

Moderate: yajl security update (Oracle Linux 9)

[2.1.0-22] - fix CVE-2023-33460 - Resolves: #2221253

Nov 11, 2023
Medium max 9.8

ELSA-2023-6679 4 CVEs

Moderate: curl security update (Oracle Linux 9)

[7.76.1-26] - unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321) [7.76.1-25] - adapt the fix of CVE-2023-27535 for RHEL 9 curl [7.76.1-24] - fix SSH connection too eager reuse still (CVE-2023-27538) - fix GSS …

Nov 11, 2023
Medium

ELSA-2023-6497 1 CVE

Moderate: libX11 security update (Oracle Linux 9)

[1.7.0-8] - CVE fix for: CVE-2023-3138 Resolve: rhbz#2213763

Nov 11, 2023
Medium max 9.8

ELSA-2023-6544 2 CVEs

Moderate: ghostscript security and bug fix update (Oracle Linux 9)

[9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810

Nov 11, 2023
Medium max 6.5

ELSA-2023-6434 4 CVEs

Moderate: frr security and bug fix update (Oracle Linux 9)

[8.3.1-11] - Resolves: RHEL-2263 - bgpd: Do not explicitly print MAXTTL value for ebgp-multihop vty output [8.3.1-10] - Related: #2216912 - adding sys_admin to capabilities [8.3.1-9] - Resolves: #2215346 - frr policy does not allow the execution of /usr/sbin/…

Nov 11, 2023
Medium max 5.5

ELSA-2023-6593 1 CVE

Moderate: binutils security update (Oracle Linux 9)

[2.35.2-42.0.1] - Forward-port Oracle patches to 2.35.2-42.

Nov 11, 2023
Medium max 5.5

ELSA-2023-6621 1 CVE

Moderate: protobuf-c security update (Oracle Linux 9)

[1.3.3-13] - Applied patch for for CVE-2022-48468 (#2186677)

Nov 11, 2023
Medium max 9.8

ELSA-2023-6474 13 CVEs

Moderate: podman security, bug fix, and enhancement update (Oracle Linux 9)

[2:4.6.1-5.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.6.1-5] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/ea33dce) - Relate…

Nov 11, 2023
Medium max 8.8

ELSA-2023-6699 2 CVEs

Moderate: krb5 security and bug fix update (Oracle Linux 9)

[1.21.1-1.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-1] - New upstream version (1.21.1) - Fix double-free in KDC TGS processing (CVE-2023-39975) - Add support for 'pac_privsvr_enctype' KDB string attribute Resolves: rhbz#206…

Nov 11, 2023
Medium max 5.5

ELSA-2023-6707 3 CVEs

Moderate: avahi security update (Oracle Linux 9)

[0.8-15] - Fix CVE-2023-1981 (#2186689) [0.8-14] - Fix CVE-2021-3502 (#1949949) [0.8-13] - Fix CVE-2021-3468 (#1944092)

Nov 11, 2023
Medium max 5.3

ELSA-2023-6738 2 CVEs

Moderate: java-21-openjdk security and bug fix update (Oracle Linux 9)

[1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) -…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6402 10 CVEs

Moderate: containernetworking-plugins security and bug fix update (Oracle Linux 9)

[1:1.3.0-4] - add Epoch in Provides - Related: #2176063 [1:1.3.0-3] - remove no_openssl for FIPS compliance - Related: #2176063 [1:1.3.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6659 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.18-1] - Update to 3.9.18 - Security fix for CVE-2023-40217 Resolves: RHEL-3043 [3.9.17-2] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.9.17-1] - Update to 3.9.17 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 [3…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6473 11 CVEs

Moderate: buildah security update (Oracle Linux 9)

[1.31.3-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.31.3-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.3 - Related: #2176063 [1:1.31.2-1] - update to https://github.com/containers/buil…

Nov 11, 2023
Medium max 6.5

ELSA-2023-6330 2 CVEs

Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 9)

[20230524-3] - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244] - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060] - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196] - Resolves:…

Nov 11, 2023
Medium max 5.9

ELSA-2023-6566 1 CVE

Moderate: libmicrohttpd security update (Oracle Linux 9)

[1:0.9.72-5] - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371

Nov 11, 2023
Medium max 7.5

ELSA-2023-6368 1 CVE

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

[8.0.0-16.el9_3] - kvm-migration-Add-migration-prefix-to-functions-in-targe.patch [bz#2229868] - kvm-migration-Move-more-initializations-to-migrate_init.patch [bz#2229868] - kvm-migration-Add-.save_prepare-handler-to-struct-SaveVM.patch [bz#2229868] - kvm-vfi…

Nov 11, 2023
Medium

ELSA-2023-6549 3 CVEs

Moderate: libreswan security update (Oracle Linux 9)

[4.12-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-1] - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz#2215956 [4.9-5] - Just bumping up the version to include bugs for CVE-2023-2295. There is …

Nov 11, 2023
Medium max 7.5

ELSA-2023-6524 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 9)

[2.85-14] - Backport Coverity fix to hide detected issue (#2156789) [2.85-13] - Rebuild with modified gating settings [2.85-12] - Make create logfile writeable by root (#2156789) [2.85-11] - Do not create and search --local and --address=/x/# domains (#220903…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6324 1 CVE

Moderate: python3.11-pip security update (Oracle Linux 9)

[22.3.1-4] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 [22.3.1-3] - Fix changelog to contain Fedora contributors Resolves: RHEL-232

Nov 11, 2023
Medium

ELSA-2023-6698 1 CVE

Moderate: ncurses security and bug fix update (Oracle Linux 9)

[6.2-10.20210508] - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) [6.2-9.20210508] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#22116…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6365 2 CVEs

Moderate: mod_auth_openidc security and bug fix update (Oracle Linux 9)

[2.4.9.4-4] Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default [2.4.9.4-3] - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied [2.4.9.4-2] - Resolves: rhbz#215365…

Nov 11, 2023
Medium

ELSA-2023-6482 1 CVE

Moderate: librabbitmq security update (Oracle Linux 9)

[0.11.0-7] - add missing gating.yaml - fix rpminspect issue Related: #2215766 [0.11.0-6] - Resolves: #2215766, insecure credentials submission

Nov 11, 2023
Medium max 7.0

ELSA-2023-6380 5 CVEs

Moderate: runc security update (Oracle Linux 9)

[4:1.1.9-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.9 - Related: #2176063 [4:1.1.8-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.8 - Related: #2176063 [4:1.1.7-2] - rebuild for following CVEs: CVE-2021-43…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6403 1 CVE

Moderate: httpd and mod_http2 security, bug fix, and enhancement update (Oracle Linux 9)

httpd [2.4.57-5.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-5] - Fix issue found by covscan - Related: #2222001 [2.4.57-4] - Resolves: #2217726 - Make PROPFIND tolerant of deletion race [2.4.57-3] - Resolves: #2222001 - mod_s…

Nov 11, 2023
Medium max 8.6

ELSA-2023-6635 4 CVEs

Moderate: c-ares security, bug fix, and enhancement update (Oracle Linux 9)

[1.19.1-1] - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9] - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9] - Resolves: rhbz#22095…

Nov 11, 2023
Medium max 8.1

ELSA-2023-6542 1 CVE

Moderate: perl-HTTP-Tiny security update (Oracle Linux 9)

[0.076-461] - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228412

Nov 11, 2023
Medium

ELSA-2023-6578 1 CVE

Moderate: libqb security update (Oracle Linux 9)

[2.0.6-4] - bump rpm version for rhel-exception build Resolves: rhbz#2230712 [2.0.6-3] - blackbox: fix buffer overflow with long log lines Resolves: rhbz#2236171 [2.0.6-1] - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 [2…

Nov 11, 2023
Medium max 6.1

ELSA-2023-6523 1 CVE

Moderate: python-tornado security update (Oracle Linux 9)

[6.1.0-9] - Fix an open redirect in StaticFileHandler Resolves: CVE-2023-28370

Nov 11, 2023
Medium max 7.8

ELSA-2023-6569 1 CVE

Moderate: sysstat security and bug fix update (Oracle Linux 9)

[12.5.4-7.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683087] [12.5.4-7] - add description of UMASK to man/systat.in (rhbz#2216805) [12.5.4-6] - fix the arithmetic overflow in allocate_structures() that is still possible…

Nov 11, 2023