Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium

ELSA-2023-5249 1 CVE

Moderate: ncurses security update (Oracle Linux 8)

[6.1-9.20180224.1] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)

Sep 20, 2023
Medium max 6.5

ELSA-2023-5145 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 8)

[7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2001

Sep 14, 2023
Medium max 6.5

ELSA-2023-5144 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 8)

[6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1996

Sep 14, 2023
Medium max 6.5

ELSA-2023-5143 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 9)

[6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1997

Sep 14, 2023
Medium max 6.5

ELSA-2023-5146 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 9)

[7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000

Sep 14, 2023
Medium max 7.8

ELSA-2023-5071 2 CVEs

Moderate: libcap security update (Oracle Linux 9)

[2.48-9] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210638 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2222198

Sep 13, 2023
Medium

ELSA-2023-5081 1 CVE

Moderate: librsvg2 security update (Oracle Linux 9)

[2.50.7-1.el9_2.1] - Fix CVE-2023-38633 (#2224947)

Sep 13, 2023
Medium max 7.1

ELSA-2023-5061 1 CVE

Moderate: dmidecode security update (Oracle Linux 9)

[1:3.3-7.1] - Resolves: CVE-2023-30630

Sep 13, 2023
Medium max 7.5

ELSA-2023-5080 2 CVEs

Moderate: keylime security update (Oracle Linux 9)

[6.5.2-6] - Fix registrar is subject to a DoS against SSL (CVE-2023-38200) Resolves: rhbz#2222694 - Fix challenge-protocol bypass during agent registration (CVE-2023-38201) Resolves: rhbz#2222695

Sep 13, 2023
Medium max 7.5

ELSA-2023-5050 1 CVE

Moderate: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-56.0.1.7] - Resolves: #2176723 - CVE-2023-27522 httpd:2.4/httpd: mod_proxy_uwsgi HTTP response splitting [2.4.37-56.0.1.6] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.htm…

Sep 12, 2023
Medium max 6.5

ELSA-2023-12722 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.15.0.6] - also rebuild initramfs for kernel-ueknano [Orabug: 35698043] [2:2.1-73.15.0.5] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE…

Aug 15, 2023
Medium max 6.5

ELSA-2023-12723 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 8)

[4:20230214-2.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692741]

Aug 15, 2023
Medium max 6.5

ELSA-2023-12724 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 9)

[4:20220809-2.20230214.1.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692740]

Aug 15, 2023
Medium max 7.2

ELSA-2023-4539 2 CVEs

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.23-2.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [10.23-2] - Backport fixes for CVE-2023-2454 and CVE-2023-2455 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207931 […

Aug 11, 2023
Medium max 6.1

ELSA-2023-4520 1 CVE

Moderate: python-requests security update (Oracle Linux 8)

[2.20.0-3] - Fix Unintended leak of Proxy-Authorization header (CVE-2023-32681)

Aug 11, 2023
Medium max 6.5

ELSA-2023-4529 2 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-16.1] - Fix CVE-2023-28484 (#2185994) - Fix CVE-2023-29469 (#2185984)

Aug 10, 2023
Medium max 7.5

ELSA-2023-4537 4 CVEs

Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:16.20.1-1] - Rebase to 16.20.1 Resolves: rhbz#2188289 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222288 nodejs-nodemon nodejs-packaging

Aug 10, 2023
Medium max 7.2

ELSA-2023-4527 2 CVEs

Moderate: postgresql:13 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [13.11-1.0.1] - Update to 13.11 - Resolves: #2212815 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207933 - Update 1001-Fixed-postgresql-service-network…

Aug 10, 2023
Medium max 7.5

ELSA-2023-4536 4 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.16.1-1] - Rebase to 18.16.1 Resolves: rhbz#2188290 rhbz#2166926 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222287 nodejs-nodemon nodejs-packagi…

Aug 10, 2023
Medium max 5.9

ELSA-2023-4523 2 CVEs

Moderate: curl security update (Oracle Linux 8)

[7.61.1-30.el8_8.3] - GSS delegation too eager connection re-use (CVE-2023-27536) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys

Aug 10, 2023
Medium max 7.2

ELSA-2023-4535 3 CVEs

Moderate: postgresql:12 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [12.15-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [12.15-1] - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207932 - Up…

Aug 10, 2023
Medium max 6.5

ELSA-2023-4569 1 CVE

Moderate: dbus security update (Oracle Linux 9)

[1:1.12.20-7.0.1.1] - Fix CVE-2023-34969 (#2213402) [1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) [1:1.12.20-6] - Override upstream sy…

Aug 10, 2023
Medium max 7.8

ELSA-2023-4524 2 CVEs

Moderate: libcap security update (Oracle Linux 8)

[2.48-5] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644

Aug 9, 2023
Medium max 6.5

ELSA-2023-4498 1 CVE

Moderate: dbus security update (Oracle Linux 8)

[1:1.12.8-24.0.1.1] - Fix CVE-2023-34969 (#2213166)

Aug 8, 2023
Medium max 5.9

ELSA-2023-4328 1 CVE

Moderate: samba security and bug fix update (Oracle Linux 8)

[4.17.5-3.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.17.5-3] - resolves: rhbz#2223601 - Fix trust relationship between worksta…

Aug 2, 2023
Medium max 5.9

ELSA-2023-4325 1 CVE

Moderate: samba security and bug fix update (Oracle Linux 9)

[4.17.5-103.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.17.5-103] - resolves: rhbz#2223600 - Fix trust relationship between workstation and DC - resolves: rhbz#2222895 - Fix CVE-2023-3347

Aug 2, 2023
Medium max 6.5

ELSA-2023-4349 2 CVEs

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-3.1] - Fix CVE-2023-28484 (#2186694) - Fix CVE-2023-29469 (#2186694)

Aug 2, 2023
Medium max 7.5

ELSA-2023-4330 4 CVEs

Moderate: 18 security, bug fix, and enhancement update (Oracle Linux 9)

nodejs [1:18.16.1-1] - Rebase to 18.16.1 Resolves: rhbz#2188292 rhbz#2187683 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222285 nodejs-nodemon nodejs-packagi…

Aug 2, 2023
Medium max 6.1

ELSA-2023-4350 1 CVE

Moderate: python-requests security update (Oracle Linux 9)

[2.25.1-7] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469

Aug 2, 2023
Medium max 7.2

ELSA-2023-4327 2 CVEs

Moderate: 15 security update (Oracle Linux 9)

pgaudit pg_repack postgres-decoderbufs postgresql [15.3-1] - update to 15.3 - Fixes CVE-2023-2454 and CVE-2023-2455 Resolves: #2214875

Aug 2, 2023
Medium max 7.5

ELSA-2023-4331 4 CVEs

Moderate: nodejs security, bug fix, and enhancement update (Oracle Linux 9)

[1:16.20.1-1] - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781

Aug 2, 2023
Medium max 3.3

ELSA-2023-4347 1 CVE

Moderate: libeconf security update (Oracle Linux 9)

[0.4.1-3] - Fix stack-based buffer overflow in read_file(). Resolves: #2212467 (CVE-2023-22652)

Aug 2, 2023
Medium max 5.9

ELSA-2023-4354 2 CVEs

Moderate: curl security update (Oracle Linux 9)

[7.76.1-23.el9_2.2] - unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321)

Aug 2, 2023
Medium max 7.5

ELSA-2023-4175 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.20.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:11.0.20.0.8-2] - Bump release number so we are newer than 9.0 - Related: rhbz#2221106 [1:11.0.20.0.8-1] - Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Drop local…

Jul 28, 2023
Medium max 7.5

ELSA-2023-4177 7 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.8.0.7-2.0.1] - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049…

Jul 28, 2023
Medium max 3.7

ELSA-2023-4176 2 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 8)

[1:1.8.0.382.b05-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.382.b05-2] - CVE-2023-22045 and CVE-2023-22049 fixed - Release bump for Oracle rebuild [1:1.8.0.382.b05-1] - Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shen…

Jul 26, 2023
Medium max 7.5

ELSA-2023-4159 7 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.8.0.7-2.0.1] - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049…

Jul 26, 2023
Medium max 7.5

ELSA-2023-4158 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[1:11.0.20.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires [1:11.0.20.0.8-2] - Bump release number so we are newer than 9.0 - Related: rhbz#2221106 [1:11.0.2…

Jul 26, 2023
Medium max 3.7

ELSA-2023-4178 2 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 9)

[1:1.8.0.382.b05-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.382.b05-2] - CVE-2023-22045 and CVE-2023-22049 fixed - Release bump for Oracle rebuild [1:1.8.0.382.b05-1] - Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shen…

Jul 26, 2023
Medium max 7.0

ELSA-2023-3847 1 CVE

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-477.15.1_8.OL8] - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) {CVE-2023-28466}

Jul 25, 2023