Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium

ELSA-2023-0957 2 CVEs

Moderate: lua security update (Oracle Linux 9)

[5.4.4-2] - Resolves CVE-2021-43519 [5.4.4-1] - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 [5.4.2-7] - Fix up CVE-2022-33099 patch [5.4.2-6] - Enable gating [5.4.2-5] - apply upstream fix for CVE-2022-33099

Feb 28, 2023
Medium max 5.9

ELSA-2023-0835 1 CVE

Moderate: python-setuptools security update (Oracle Linux 8)

[39.2.0-6.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559

Feb 22, 2023
Medium max 7.5

ELSA-2023-0833 3 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-48.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-48.1] - Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061 Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072

Feb 22, 2023
Medium max 9.8

ELSA-2023-0848 5 CVEs

Moderate: php:8.0 security update (Oracle Linux 8)

php [8.0.27-1] - rebase to 8.0.27

Feb 22, 2023
Medium max 5.5

ELSA-2023-0837 1 CVE

Moderate: systemd security and bug fix update (Oracle Linux 8)

[239-68.0.2] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport upstr…

Feb 22, 2023
Medium max 9.0

ELSA-2023-0852 3 CVEs

Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)

httpd [2.4.37-51.0.1.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.1] - Resolves: #2165967 - prevent sscg creating /dhparams.pem - Resolves: #2165976 - CVE-2006-20001 …

Feb 22, 2023
Medium max 8.8

ELSA-2023-12137 1 CVE

Moderate: pcs security update (Oracle Linux 8)

[0.10.14-5.0.1] - Replace HAM-logo.png with a generic one [0.10.14-5.el8_7.2] - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt - Added license for rubygem ruby2_keywords - Resolves: rhbz#2159424

Feb 22, 2023
Medium max 5.5

ELSA-2023-0842 1 CVE

Moderate: tar security update (Oracle Linux 8)

[1.30-6.1] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303

Feb 22, 2023
Medium max 5.3

ELSA-2023-0208 2 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 8)

[1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: rhbz#2163595 [1:1.8.0.362.b08-2] - Update to shenandoah-jdk8u352-b08 (GA…

Jan 27, 2023
Medium

ELSA-2023-0446 3 CVEs

Moderate: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

golang [1.18.9-1] - Update to Go 1.18.9 - Add big-endian.patch - Increase GO_TEST_TIMEOUT_SCALE due to a Brew issue - Add do-not-reuse-far-trampolines.patch - Resolves: rhbz#2149313 [1.18.7-2] - Fix version mismatch from previous rebase - Related: rhbz#213671…

Jan 26, 2023
Medium max 5.3

ELSA-2023-0210 2 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 9)

[1.8.0.362.b09-2.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: r…

Jan 26, 2023
Medium max 5.5

ELSA-2023-0336 1 CVE

Moderate: systemd security update (Oracle Linux 9)

[250-12.0.2.el9_1.1] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveI…

Jan 26, 2023
Medium max 8.6

ELSA-2023-0049 2 CVEs

Moderate: grub2 security update (Oracle Linux 8)

[2.02-142.0.3.el8_7.1] - Fix CVE-2022-3775, CVE-2022-2601 [Orabug: 34867710] - Bump SBAT metadata for grub to 3 [Orabug: 34871758] - Enable signing on aarch64 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas…

Jan 25, 2023
Medium max 9.1

ELSA-2023-0343 1 CVE

Moderate: libtasn1 security update (Oracle Linux 9)

[4.16.0-9] - Resolves: rhbz#2140602

Jan 25, 2023
Medium max 5.3

ELSA-2023-0203 2 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

[1:1.8.0.362.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obs…

Jan 24, 2023
Medium max 5.3

ELSA-2023-0195 2 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 7)

[1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Upd…

Jan 24, 2023
Medium max 6.8

ELSA-2023-0402 2 CVEs

Moderate: bind security update (Oracle Linux 7)

[32:9.11.4-26.P2.13] - Tighten cache protection against record from forwarders (CVE-2021-25220) [32:9.11.4-26.P2.12] - Include test of forwarders (CVE-2021-25220) [32:9.11.4-26.P2.11] - Prevent excessive resource use while processing large delegations. (CVE-2…

Jan 24, 2023
Medium max 7.5

ELSA-2023-0337 1 CVE

Moderate: expat security update (Oracle Linux 9)

[2.4.9-1.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680

Jan 24, 2023
Medium max 5.5

ELSA-2023-0302 7 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-5] - Bump release - Resolves: CVE-2022-2953 [4.4.0-4] - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 [4.4.0-3] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 - Resolves: #2106768

Jan 24, 2023
Medium

ELSA-2023-0304 4 CVEs

Moderate: libreoffice security update (Oracle Linux 9)

[7.1.8.1-8.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-8] - Resolves: rhbz#2134759 Untrusted Macros - Resolves: rhbz#2134757 Weak Mas…

Jan 24, 2023
Medium

ELSA-2023-0328 3 CVEs

Moderate: go-toolset and golang security and bug fix update (Oracle Linux 9)

golang [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le linker issue - Resolves: rhbz#2144547 - Resolves: rhbz#2149311 go-toolset [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le …

Jan 24, 2023
Medium

ELSA-2023-0303 1 CVE

Moderate: usbguard security update (Oracle Linux 9)

[1.0.0-10.2] - Fix dbus memory leak on connection failure - Fix unauthorized access via D-bus Resolves: rhbz#2127877

Jan 24, 2023
Medium max 9.8

ELSA-2023-0321 4 CVEs

Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update (Oracle Linux 9)

nodejs [1:16.18.1-3] - Update sources of undici WASM blobs Resolves: rhbz#2151617 [1:16.18.1-2] - Add back libs and v8-devel subpackages - Related: RHBZ#2121126 - Record previously fixed CVE - Resolves: CVE-2021-44906 [1:16.18.1-1] - Rebase + CVEs - Resolves:…

Jan 24, 2023
Medium max 7.8

ELSA-2023-0340 1 CVE

Moderate: bash security update (Oracle Linux 9)

[5.1.8-6] - Add a null check in parameter_brace_transform() function Resolves: CVE-2022-3715

Jan 24, 2023
Medium max 7.8

ELSA-2023-0338 2 CVEs

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-3] - Fix CVE-2022-40303 (#2136564) - Fix CVE-2022-40304 (#2136569)

Jan 24, 2023
Medium max 7.1

ELSA-2023-0318 1 CVE

Moderate: postgresql-jdbc security update (Oracle Linux 9)

[42.2.18-6] - fix for CVE-2022-31197 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688

Jan 24, 2023
Medium max 7.5

ELSA-2023-0339 1 CVE

Moderate: sqlite security update (Oracle Linux 9)

[3.34.1-6] - Fixes CVE-2022-35737

Jan 24, 2023
Medium max 9.8

ELSA-2023-0333 1 CVE

Moderate: curl security update (Oracle Linux 9)

[7.76.1-19.el9_1.1] - fix POST following PUT confusion (CVE-2022-32221)

Jan 24, 2023
Medium max 6.5

ELSA-2023-0335 3 CVEs

Moderate: dbus security update (Oracle Linux 9)

[1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635)

Jan 24, 2023
Medium max 5.3

ELSA-2023-0194 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.6.0.10-3.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with …

Jan 23, 2023
Medium max 5.3

ELSA-2023-0202 2 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[11.0.18.0.10-2.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.18.0.10-2] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Relate…

Jan 19, 2023
Medium max 5.3

ELSA-2023-0192 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with a SecurityManager in place - Related: rhbz#2147473 [1:17.0.6.0.10-3] - …

Jan 18, 2023
Medium

ELSA-2023-0089 4 CVEs

Moderate: libreoffice security update (Oracle Linux 8)

[6.4.7.2-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-12] - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros - Resolves: rhbz…

Jan 18, 2023
Medium max 5.3

ELSA-2023-0200 2 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2157797 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Upd…

Jan 18, 2023
Medium max 7.8

ELSA-2023-0173 2 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-15.1] - Fix CVE-2022-40303 (#2136562) - Fix CVE-2022-40304 (#2136567)

Jan 16, 2023
Medium max 5.5

ELSA-2023-0100 1 CVE

Moderate: systemd security and bug fix update (Oracle Linux 8)

[239-68.0.2.1] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport ups…

Jan 14, 2023
Medium

ELSA-2023-0113 1 CVE

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.23-1] - Fix CVE-2022-2625 - Resolves: #2143167 - Rebase to 10.23

Jan 14, 2023
Medium max 9.1

ELSA-2023-0116 1 CVE

Moderate: libtasn1 security update (Oracle Linux 8)

[4.13-4] - Resolves: rhbz#2140600

Jan 12, 2023
Medium max 7.5

ELSA-2023-0110 1 CVE

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-17] - Fixed CVE-2022-35737

Jan 12, 2023
Medium max 7.5

ELSA-2023-0079 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154458

Jan 12, 2023