Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 8.5

ELSA-2023-2319 4 CVEs

Moderate: git security and bug fix update (Oracle Linux 9)

May 15, 2023
Medium

ELSA-2023-2260 7 CVEs

Moderate: gstreamer1-plugins-good security update (Oracle Linux 9)

[1.18.4-6] - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923, CVE-2022-1924, CVE-2022-1925, CVE-2022-2122 Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049, rhbz#2131054, rhbz#2131060, rhbz#2131064

May 15, 2023
Medium max 7.5

ELSA-2023-2258 1 CVE

Moderate: python-mako security update (Oracle Linux 9)

[1.1.4-6] - Fix CVE-2022-40023 (#2133606)

May 15, 2023
Medium max 6.5

ELSA-2023-2444 2 CVEs

Moderate: net-snmp security and bug fix update (Oracle Linux 9)

[1:5.9.1-9.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.1-9] - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906) - fix memory leak when ipv6 disable set to 1 (#2151540) [1:5.9.1-8] - fix default snmpd.…

May 15, 2023
Medium max 5.3

ELSA-2023-2283 2 CVEs

Moderate: skopeo security and bug fix update (Oracle Linux 9)

[2:1.11.2-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/3f98753) - Related: #2124478 [2:1.11.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.11.…

May 15, 2023
Medium max 5.3

ELSA-2023-2253 2 CVEs

Moderate: buildah security and bug fix update (Oracle Linux 9)

[1.29.1-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.29.1-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/7fa17a8) - Rel…

May 15, 2023
Medium max 5.3

ELSA-2023-2367 2 CVEs

Moderate: containernetworking-plugins security and bug fix update (Oracle Linux 9)

[1:1.2.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0 - Related: #2124478

May 15, 2023
Medium max 7.7

ELSA-2023-2340 10 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-7] - Fix CVE-2022-3970 - Resolves: CVE-2022-3970 [4.4.0-6] - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627

May 15, 2023
Medium max 5.5

ELSA-2023-2453 2 CVEs

Moderate: libtpms security update (Oracle Linux 9)

[0.9.1-3.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018) Resolves: rhbz#2173960 Resolves: rhbz#2173967

May 15, 2023
Medium max 6.5

ELSA-2023-2487 4 CVEs

Moderate: fwupd security and bug fix update (Oracle Linux 9)

[1.8.10-2.0.1] - Drop pesign.service restart in postun [Orabug: 34760075] - Update signing certificate [JIRA: OLDIS-16371] - Rebuild for SecureBoot signatures [Orabug: 33801813] - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir …

May 15, 2023
Medium max 9.8

ELSA-2023-2417 5 CVEs

Moderate: 8.1 security update (Oracle Linux 9)

php-pecl-apcu [5.1.21-1] - update to 5.1.21 for PHP 8.1 #2070040 php-pecl-rrd [2.0.3-4] - build for PHP 8.1 #2070040 php-pecl-xdebug3 [3.1.4-1] - update to 3.1.4 for PHP 8.1 #2070040 php-pecl-zip [1.20.1-1] - update to 1.20.1 for PHP 8.1 #2070040 php [8.1.14-…

May 15, 2023
Medium max 7.5

ELSA-2023-2370 1 CVE

Moderate: unbound security update (Oracle Linux 9)

[1.16.2-3] - Fix NRDelegation attack leading to uncontrolled resource consumption (CVE-2022-3204)

May 15, 2023
Medium max 7.5

ELSA-2023-2166 3 CVEs

Moderate: freeradius security and bug fix update (Oracle Linux 9)

[3.0.21-37] - Fix defect found by covscan Resolves: #2151705 [3.0.21-36] - Fix multiple CVEs Resolves: #2151705 Resolves: #2151703 Resolves: #2151707 [3.0.21-35] - Rebuild to add subpackages to CRB report Resolves: #2126380

May 15, 2023
Medium max 6.5

ELSA-2023-2162 2 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

[7.2.0-14] - Rebuild for 9.2 release - Resolves: bz#2173590 (bugs in emulation of BMI instructions (for libguestfs without KVM)) - Resolves: bz#2156876 ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22)) [7.2.0…

May 15, 2023
Medium max 8.8

ELSA-2023-2257 6 CVEs

Moderate: tigervnc security and bug fix update (Oracle Linux 9)

[1.12.0-13] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180309 [1.12.0-12] - SELinux: allow vncsession create .vnc directory Resolves: bz#2164703 [1.12.0-11] - Add sanity check when clea…

May 15, 2023
Medium

ELSA-2023-2459 1 CVE

Moderate: device-mapper-multipath security and bug fix update (Oracle Linux 9)

[0.8.7-20] - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch - Change how the installation dir for kpartx_id is specified - Resolves: bz #1926147 [0.8.7-19] - Fix bugzil…

May 15, 2023
Medium max 5.3

ELSA-2023-2222 1 CVE

Moderate: conmon security and bug fix update (Oracle Linux 9)

[2:2.1.7-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.7 - Resolves: #2173697 [2:2.1.6-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.6 - Related: #2124478 [2:2.1.5-1] - update to https://github.com/containers/co…

May 15, 2023
Medium

ELSA-2023-2592 1 CVE

Moderate: golang-github-cpuguy83-md2man security, bug fix, and enhancement update (Oracle Linux 9)

[2.0.2-4] - fix RHEL9.2 build - thanks to Debarshi Ray - Related: #2124478 [2.0.2-3] - rebuild - Resolves: #2037812 [2.0.2-2] - limit to golang arches only - Related: #2061316 * Thu Aug 04 2022 Jindrich Novy <jnovy@redhat.com> - update to 2.0.2 - Related: #20…

May 15, 2023
Medium max 6.6

ELSA-2023-2570 1 CVE

Moderate: krb5 security, bug fix, and enhancement update (Oracle Linux 9)

[1.20.1-8.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.20.1-8] - Fix datetime parsing in kadmin on s390x - Resolves: rhbz#2169985 [1.20.1-7] - Fix double free on kdb5_util key creation failure - Resolves: rhbz#2166603 [1.20.1-6] - …

May 15, 2023
Medium max 6.7

ELSA-2023-1987 1 CVE

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.90.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.90.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Apr 26, 2023
Medium max 9.1

ELSA-2023-1696 2 CVEs

Moderate: haproxy security update (Oracle Linux 9)

[2.4.17-3.2] - Reject empty http header field names (CVE-2023-25725, #2174174) [2.4.17-3.1] - Refuse interim responses with end-stream flag set (CVE-2023-0056, #2174172)

Apr 11, 2023
Medium max 6.5

ELSA-2023-1701 1 CVE

Moderate: curl security update (Oracle Linux 9)

[7.76.1-19.el9_1.2] - fix HTTP multi-header compression denial of service (CVE-2023-23916)

Apr 11, 2023
Medium max 3.7

ELSA-2023-1693 2 CVEs

Moderate: postgresql security update (Oracle Linux 9)

[13.10-1] - Update to 13.10 - Resolves: #2114734

Apr 11, 2023
Medium max 3.7

ELSA-2023-1576 2 CVEs

Moderate: postgresql:13 security update (Oracle Linux 8)

postgresql [13.10-1] - Resolves: #2173598 - Update to 13.10

Apr 5, 2023
Medium max 7.5

ELSA-2023-1583 6 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.14.2-2] - Provide simduft [1:18.14.2-1] - Rebase to 18.14.2 - Resolves: #2178087 - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920

Apr 5, 2023
Medium max 8.6

ELSA-2023-1582 8 CVEs

Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:16.19.1-1] - Rebase to 16.19.1 Resolves: rhbz#2153713 Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 Resolves: CVE-2022-25881 CVE-2022-4904 nodejs-nodemon [2.0.20-3] - Patch bundled glob-parent Resolves: CVE-202…

Apr 5, 2023
Medium max 7.4

ELSA-2023-1569 1 CVE

Moderate: gnutls security and bug fix update (Oracle Linux 8)

[3.6.16-6] - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598)

Apr 4, 2023
Medium max 9.8

ELSA-2023-1095 1 CVE

Moderate: zlib security update (Oracle Linux 7)

[1.2.7-21] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434

Mar 8, 2023
Medium max 7.4

ELSA-2023-1141 1 CVE

Moderate: gnutls security and bug fix update (Oracle Linux 9)

[3.7.6-18] - Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168610) [3.7.6-17] - Fix timing side-channel in TLS RSA key exchange (#2162600) [3.7.6-16] - fips: extend PCT to DH key generation (#2168610) [3.7.6-14] - fips: remove library path …

Mar 8, 2023
Medium max 6.5

ELSA-2023-1140 1 CVE

Moderate: curl security update (Oracle Linux 8)

[7.61.1-25.el8_7.3] - fix HTTP multi-header compression denial of service (CVE-2023-23916)

Mar 7, 2023
Medium

ELSA-2023-1068 1 CVE

Moderate: libjpeg-turbo security update (Oracle Linux 9)

[2.0.90-6] - Fix CVE-2021-46822 - Resolves: CVE-2021-46822

Mar 6, 2023
Medium max 8.8

ELSA-2023-12150 1 CVE

Moderate: pcs security update (Oracle Linux 9)

[0.11.3-4.el9_1.2] - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt - Added license for rubygem ruby2_keywords - Resolves: rhbz#2159426

Mar 1, 2023
Medium max 5.5

ELSA-2023-0954 2 CVEs

Moderate: systemd security update (Oracle Linux 9)

[250-12.0.2.3] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveIPC=no'…

Mar 1, 2023
Medium max 7.5

ELSA-2023-0946 8 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 9)

[3.0.1-47.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-47] - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read…

Feb 28, 2023
Medium max 7.8

ELSA-2023-0958 1 CVE

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-20.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-20] - CVE-2022-47024 vim: no check if the return value of XChangeGC() is NULL [2:8.2.2637-19] - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vi…

Feb 28, 2023
Medium max 5.9

ELSA-2023-0952 1 CVE

Moderate: python-setuptools security update (Oracle Linux 9)

[53.0.0-10.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559

Feb 28, 2023
Medium max 9.0

ELSA-2023-0970 3 CVEs

Moderate: httpd security and bug fix update (Oracle Linux 9)

[2.4.53-7.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.1] - Resolves: #2165975 - prevent sscg creating /dhparams.pem - Resolves: #2165970 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #21…

Feb 28, 2023
Medium max 5.5

ELSA-2023-0959 1 CVE

Moderate: tar security update (Oracle Linux 9)

[2:1.34-6] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303

Feb 28, 2023
Medium max 7.5

ELSA-2023-0953 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.14-1.2] - Security fix for CVE-2022-45061 Resolves: rhbz#2144072

Feb 28, 2023
Medium max 9.8

ELSA-2023-0965 5 CVEs

Moderate: php security update (Oracle Linux 9)

[8.0.27-1] - rebase to 8.0.27

Feb 28, 2023