Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 9.8

ELSA-2023-7711 1 CVE

Moderate: apr security update (Oracle Linux 9)

[1.7.0-12] - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123

Dec 11, 2023
High max 7.5

ELSA-2023-13027 4 CVEs

Important: edk2 security update (Oracle Linux 7)

[20230821] - Create new 20230821 release for OL7 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 7, 2023
High max 7.5

ELSA-2023-13029 2 CVEs 1 exploited

Important: olcne security update (Oracle Linux 7)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …

Dec 7, 2023
High max 7.5

ELSA-2023-13028 2 CVEs 1 exploited

Important: olcne security update (Oracle Linux 8)

conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …

Dec 7, 2023
High max 7.5

ELSA-2023-32790 4 CVEs

Important: edk2 security update (Oracle Linux 9)

[20230821] - Create new 20230821 release for OL9 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 7, 2023
High max 7.8

ELSA-2023-13019 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.81.2] - rebuild bumping release [4.1.12-124.81.1] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923500] {CVE-2023-39193} - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [Orabug: 3592405…

Dec 6, 2023
High max 7.5

ELSA-2023-13026 4 CVEs

Important: edk2 security update (Oracle Linux 7)

[20230821] - Create new 20230821 release for OL7 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-13025 4 CVEs

Important: edk2 security update (Oracle Linux 8)

[20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-32791 4 CVEs

Important: edk2 security update (Oracle Linux 8)

[20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 7.5

ELSA-2023-13024 4 CVEs

Important: edk2 security update (Oracle Linux 9)

[20230821] - Create new 20230821 release for OL9 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CV…

Dec 6, 2023
High max 10.0

ELSA-2023-7549 7 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-513.9.1_9.OL8] - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Mauro Carvalho Chehab) {CVE-2022-45884} - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) {CVE-2023-1192} - nvmet-tcp: Fix a possible UAF in queue int…

Dec 1, 2023
High max 8.8

ELSA-2023-7581 4 CVEs

Important: postgresql:13 security update (Oracle Linux 8)

pgaudit pg_repack postgres-decoderbufs postgresql [13.13-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [13.13-1] - Update to 13.13 - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 - Resolves: RHEL-16085 RHEL-16…

Nov 30, 2023
High

ELSA-2023-7505 7 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
High

ELSA-2023-7500 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
High

ELSA-2023-7508 7 CVEs

Important: firefox security update (Oracle Linux 8)

[115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Nov 28, 2023
High

ELSA-2023-7501 7 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1

Nov 28, 2023
Medium max 7.6

ELSA-2023-7253 2 CVEs

Moderate: dotnet8.0 security update (Oracle Linux 9)

[8.0.100-2.0.1] - Update to .NET 8.0 [8.0.100~rc.2-0.1.0.1] - Add support for Oracle Linux [8.0.100~rc.2-0.1] - Update to .NET 8 RC 2 - Resolves: RHEL-13790 [8.0.100~rc.1-0.4] - Disable bootstrap - Related: RHEL-4074 [8.0.100~rc.1-0.3] - Add backported patche…

Nov 28, 2023
High

ELSA-2023-7507 7 CVEs

Important: firefox security update (Oracle Linux 9)

[115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

Nov 28, 2023
High max 9.3

ELSA-2023-7465 3 CVEs

Important: squid security update (Oracle Linux 9)

[- 7:5.5-6.2] - Fix: squid: DoS against HTTP and HTTPS (CVE-2023-5824)

Nov 28, 2023
High

ELSA-2023-7509 7 CVEs

Important: firefox security update (Oracle Linux 7)

[115.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.5.0-1] - Update to 115.5.0 build1

Nov 27, 2023
Medium max 7.6

ELSA-2023-7255 2 CVEs

Moderate: dotnet7.0 security update (Oracle Linux 9)

[7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14

Nov 27, 2023
Medium max 7.6

ELSA-2023-7257 2 CVEs

Moderate: dotnet6.0 security update (Oracle Linux 9)

[6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Add support for Oracle Linux

Nov 24, 2023
Medium max 9.1

ELSA-2023-7467 3 CVEs

Moderate: samba security update (Oracle Linux 8)

[4.18.6-2.0.1] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server

Nov 23, 2023
Medium max 7.6

ELSA-2023-7258 2 CVEs

Moderate: dotnet6.0 security update (Oracle Linux 8)

[6.0.125-1.0.2] - Add strict BuildRequires on 6.0.125-1.0.1 [6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25

Nov 23, 2023
High max 7.8

ELSA-2023-7428 2 CVEs

Important: tigervnc security update (Oracle Linux 7)

[1.8.0-26.0.1] - Dropped xorg-CVE-2023-5367.patch [1.8.0-26] - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow Resolves: RHEL-15235 - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/R…

Nov 22, 2023
High max 7.8

ELSA-2023-7423 7 CVEs

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.105.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.105.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

Nov 22, 2023
Critical max 9.3

ELSA-2023-7213 2 CVEs

Critical: squid:4 security update (Oracle Linux 8)

libecap squid [7:4.15-7.1] - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP

Nov 22, 2023
Medium max 7.6

ELSA-2023-7256 2 CVEs

Moderate: dotnet7.0 security update (Oracle Linux 8)

[7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14

Nov 22, 2023
Medium

ELSA-2023-7202 1 CVE

Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman [2:4.0.2-24] - rebuild for CVE-2023-29406…

Nov 22, 2023
Medium max 4.1

ELSA-2023-7207 2 CVEs

Moderate: c-ares security update (Oracle Linux 8)

[1.13.0-9.1] - Resolves: RHEL-11931 - Buffer Underwrite in ares_inet_net_pton() [rhel-8.9.0.z] [1.13.0-9] - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]

Nov 22, 2023
High max 7.7

ELSA-2023-7205 6 CVEs 1 exploited

Important: nodejs:20 security update (Oracle Linux 8)

nodejs [1:20.8.1-1] - Update node and nghttp - Add fips patch - Fixes CVE-2023-44487 (nghttp) - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333 nodejs-nodemon nodejs-packaging

Nov 22, 2023
High max 7.0

ELSA-2023-13001 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.325.5.el7] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508]…

Nov 21, 2023
High max 7.4

ELSA-2023-7265 2 CVEs

Important: open-vm-tools security update (Oracle Linux 8)

[12.2.5-3.0.1.1] - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass - Fix CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper

Nov 21, 2023
High max 7.0

ELSA-2023-13005 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.325.5.el8] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508]…

Nov 21, 2023
Medium max 7.5

ELSA-2023-6940 2 CVEs

Moderate: mod_auth_openidc:2.3 security and bug fix update (Oracle Linux 8)

cjose [0.6.1-4] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 mod_auth_openidc [2.4.9.4-5] Related: rhbz#2141850 - fix cjose version dependency [2.4.9.4-4] Resolves…

Nov 18, 2023
Medium

ELSA-2023-7109 1 CVE

Moderate: linux-firmware security, bug fix, and enhancement update (Oracle Linux 8)

[20230516-999.27.git6c9e0ed5.el8] - Update firmware for qat_4xxx devices (Orabug: 35811008)

Nov 18, 2023
Medium max 5.3

ELSA-2023-6887 2 CVEs

Moderate: java-21-openjdk security and bug fix update (Oracle Linux 8)

[1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) -…

Nov 18, 2023
Medium max 9.8

ELSA-2023-6938 16 CVEs

Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 [1:1.24.6-6] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves:…

Nov 18, 2023
Medium max 8.8

ELSA-2023-7025 4 CVEs

Moderate: ruby:2.5 security update (Oracle Linux 8)

rubygem-abrt [0.3.0-4] - Execute test suite unconditionally. - Upload correct sources. [0.3.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.3.0-1] - Upda…

Nov 18, 2023
Medium max 9.8

ELSA-2023-6939 17 CVEs

Moderate: container-tools:ol8 security and bug fix update (Oracle Linux 8)

aardvark-dns [2:1.7.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0 - Related: #2176055 [2:1.6.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0 - Related: #2176055 buildah [1:1.31.3-1] - update to…

Nov 18, 2023