Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2023-6570 3 CVEs

Moderate: tomcat security and bug fix update (Oracle Linux 9)

[1:9.0.62-37] - Resolves: RHEL-12551 - Remove JDK subpackges which are unused [1:9.0.62-16] - Related: #2184133 Declare file conflicts [1:9.0.62-15] - Resolves: #2184133 Fix bug in Obsoletes [1:9.0.62-14] - Resolves: #2210632 CVE-2023-28709 tomcat [1:9.0.62-1…

Nov 11, 2023
Medium max 7.8

ELSA-2023-6508 4 CVEs

Moderate: libreoffice security update (Oracle Linux 9)

[7.1.8.1-11.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-11] - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Form…

Nov 11, 2023
Medium max 4.8

ELSA-2023-6615 1 CVE

Moderate: python-cryptography security update (Oracle Linux 9)

[36.0.1-4] - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves rhbz#2203840 [36.0.1-3] - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399 - Fix FTBFS due to failing test_load_invalid_ec_ke…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6667 4 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 9)

evolution-mapi [3.40.1-6] - Related: #2190415 (Rebuild against samba 4.18) openchange [2.3-41] - Related: #2190415 (Rebuild against samba 4.18) samba [4.18.6-100] - related: rhbz#2190415 - Update to version 4.18.6 - resolves: rhbz#2211617 - Fix the rpcclient …

Nov 11, 2023
Medium max 7.8

ELSA-2023-6340 1 CVE

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 9)

[1.20.11-19] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192550 [1.20.11-18] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180297

Nov 11, 2023
Medium max 7.8

ELSA-2023-6431 1 CVE

Moderate: libfastjson security update (Oracle Linux 9)

[0.99.9-5] - Rebuild Resolves: rhbz#2227786 [0.99.9-4] - Address CVE-2020-12762 Resolves: rhbz#2203172

Nov 11, 2023
Medium max 9.8

ELSA-2023-6694 1 CVE

Moderate: python-pip security update (Oracle Linux 9)

[21.2.3-7] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2207997

Nov 11, 2023
Medium max 7.5

ELSA-2023-6496 1 CVE

Moderate: haproxy security and bug fix update (Oracle Linux 9)

[2.4.22-1] - Update to 2.4.22 (#2196530) [2.4.17-7] - Fix uninitizalized resevered bytes (CVE-2023-0836, #2180861)

Nov 11, 2023
Medium max 9.8

ELSA-2023-6494 2 CVEs

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.5-1] - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3045, RHEL-3269 [3.11.4-3] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.11.4-2] - Security fix for CVE-2007-4559 Resolves: rhb…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6385 3 CVEs

Moderate: liblouis security update (Oracle Linux 9)

[3.16.1-5] - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149)

Nov 11, 2023
Medium max 7.5

ELSA-2023-6596 2 CVEs

Moderate: cups security and bug fix update (Oracle Linux 9)

[1:2.3.3op2-21] - bump the spec because the previous build was made with buildroot 9.2 [1:2.3.3op2-20] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation [1:2.3.3op2-19] - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in …

Nov 11, 2023
Medium max 5.3

ELSA-2023-6492 1 CVE

Moderate: tang security update (Oracle Linux 9)

[14-2] - Fix service start up [14-1] - New upstream release - v14. Resolves: rhbz#2182411 Resolves: CVE-2023-1672

Nov 11, 2023
Medium max 8.1

ELSA-2023-6539 1 CVE

Moderate: perl-CPAN security update (Oracle Linux 9)

[2.29-3] - Resolves: rhbz#2218907 - Fix CVE-2023-31484

Nov 11, 2023
Medium max 6.5

ELSA-2023-6245 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 8)

[6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14466

Nov 3, 2023
Medium max 5.3

ELSA-2023-5731 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.392.b08-4.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during clie…

Nov 2, 2023
Medium max 6.5

ELSA-2023-6247 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 8)

[7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14474

Nov 2, 2023
Medium max 5.3

ELSA-2023-5733 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 9)

[1:1.8.0.392.b08-3.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during clie…

Nov 2, 2023
Medium max 6.5

ELSA-2023-6242 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 9)

[6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14462

Nov 2, 2023
Medium max 6.5

ELSA-2023-6246 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 9)

[7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467

Nov 2, 2023
Medium max 5.5

ELSA-2023-6236 1 CVE

Moderate: binutils security update (Oracle Linux 8)

[2.30-119.0.2.2] - Fix for CVE-2022-4285. - Fix illegal memory address when parsing an ELF file contaiing corrupt symbol version information. Upstream commit 5c831a3c7f3ca98d6aba1200353311e1a1f84c70. - Partial backport of _bfd_mul_overflow support from upstre…

Nov 1, 2023
Medium max 5.3

ELSA-2023-5753 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-83099…

Oct 31, 2023
Medium max 5.3

ELSA-2023-5751 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-83099…

Oct 30, 2023
Medium max 5.3

ELSA-2023-5742 1 CVE

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.21.0.9-2.0.1] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170)…

Oct 27, 2023
Medium max 7.5

ELSA-2023-6120 1 CVE 1 exploited

Moderate: nginx:1.22 security update (Oracle Linux 9)

[1:1.22.1-3.0.1.1] - Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (CVE-2023-44487)

Oct 26, 2023
Medium max 5.3

ELSA-2023-5744 1 CVE

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[1:11.0.21.0.9-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional …

Oct 26, 2023
Medium

ELSA-2023-5068 1 CVE

Moderate: linux-firmware security update (Oracle Linux 9)

[20230516-999.27.git6c9e0ed5.el9] - Update firmware for qat_4xxx devices (Orabug: 35811008) [20230516-999.26.git6c9e0ed5.el9] - Run dracut -f in %posttrans instead of %post (Orabug: 35661938) - Drop latest AMD microcode commits to family 19 file to include Mi…

Oct 24, 2023
Medium max 7.5

ELSA-2023-5863 2 CVEs 1 exploited

Moderate: grafana security update (Oracle Linux 8)

[7.5.15-5] - Resolve CVE-2023-44487 Rapid Reset Attack - Resolve CVE-2023-39325 rapid stream resets can cause excessive work

Oct 20, 2023
Medium max 7.5

ELSA-2023-5867 2 CVEs 1 exploited

Moderate: grafana security update (Oracle Linux 9)

[9.0.9-4] - Resolve CVE-2023-44487 Rapid Reset Attack - Resolve CVE-2023-39325 rapid stream resets can cause excessive work

Oct 20, 2023
Medium max 5.3

ELSA-2023-5736 1 CVE

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 7)

[1:11.0.21.0.9-1.0.1] - link atomic for ix86 build [1:11.0.21.0.9-1] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to …

Oct 19, 2023
Medium max 5.3

ELSA-2023-5761 2 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.392.b08-2] - Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577 [1:1.8.0.392.b08-1] - Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to …

Oct 19, 2023
Medium max 7.5

ELSA-2023-5712 1 CVE 1 exploited

Moderate: nginx:1.20 security update (Oracle Linux 8)

[1:1.20.1-1.0.1.1] - Resolves: RHEL-12732 - nginx:1.20/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 17, 2023
Medium max 7.5

ELSA-2023-5713 1 CVE 1 exploited

Moderate: nginx:1.22 security update (Oracle Linux 8)

[1:1.22.1-1.0.1.1] - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)

Oct 17, 2023
Medium max 7.5

ELSA-2023-5711 1 CVE 1 exploited

Moderate: nginx security update (Oracle Linux 9)

[1:1.20.1-14.0.1.1] - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Oct 17, 2023
Medium

ELSA-2023-5615 1 CVE

Moderate: libssh2 security update (Oracle Linux 7)

[1.8.0-4.el7_9.1] - fix use-of-uninitialized-value (CVE-2020-22218)

Oct 10, 2023
Medium max 6.8

ELSA-2023-5353 5 CVEs

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-29] - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 - Resolves: (BZ#2170167) (BZ#2170172) (BZ#2170178) (BZ#2170187) (BZ#2170192)

Sep 26, 2023
Medium max 6.0

ELSA-2023-12834 3 CVEs

Moderate: qemu security update (Oracle Linux 7)

[15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} …

Sep 22, 2023
Medium max 6.0

ELSA-2023-12835 3 CVEs

Moderate: qemu security update (Oracle Linux 7)

[15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} …

Sep 22, 2023
Medium max 6.5

ELSA-2023-5259 4 CVEs

Moderate: mariadb:10.3 security, bug fix, and enhancement update (Oracle Linux 8)

galera [25.3.37-1] - Rebase to 25.3.37 Judy [1.0.5-18.0.1] - Rebuild [Orabug: 31667911] mariadb [3:10.3.39-1] - [MariaDB 10.3.32] socat: E Failed to set SNI host '' (SST failure) - Rebase to 10.3.39 - CVEs fixed: CVE-2022-47015, CVE-2018-25032, CVE-2022-32091…

Sep 21, 2023
Medium max 7.2

ELSA-2023-5269 2 CVEs

Moderate: postgresql:15 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [15.3-1] - Update to upstream version 15.3 - Fixes: CVE-2023-2454 CVE-2023-2455 - Resolves: #2207934

Sep 20, 2023
Medium max 7.1

ELSA-2023-5252 1 CVE

Moderate: dmidecode security update (Oracle Linux 8)

[1:3.3-4.1] - Resolves: CVE-2023-30630

Sep 20, 2023