Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 9.8

ELSA-2023-7053 3 CVEs

Moderate: ghostscript security and bug fix update (Oracle Linux 8)

[9.27-11] - fix for CVE-2023-4042 - Resolves: rhbz#2228153 [9.27-10] - fix for CVE-2023-38559 - Resolves: rhbz#2224371 [9.27-9] - fix for CVE-2023-28879 - Resolves: rhbz#2188297 [9.27-8] - fix embedding of CIDFonts - Resolves: rhbz#2169890 [9.27-7] - fix bbox…

Nov 17, 2023
Medium max 7.8

ELSA-2023-6916 1 CVE

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 8)

[1.20.11-17] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192556 [1.20.11-16] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180296

Nov 17, 2023
Medium max 5.5

ELSA-2023-6944 1 CVE

Moderate: protobuf-c security update (Oracle Linux 8)

[1.3.0-8] - Rebuild for gating test [1.3.0-7] - Applied patch for for CVE-2022-48468 (#2186678)

Nov 17, 2023
Low max 7.1

ELSA-2023-7160 1 CVE

Low: opensc security and bug fix update (Oracle Linux 8)

[0.20.0-6] - Fix introduced issues tagged by coverity (RHEL-765) [0.20.0-5] - Avoid potential crash because of missing list terminator (#2196234) - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093) - Backport upstre…

Nov 17, 2023
Medium max 9.8

ELSA-2023-7151 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-56.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-56] - Security fix for CVE-2023-40217 Resolves: RHEL-3041 [3.6.8-55] - Fix symlink handling in the fix for CVE-2007-4559…

Nov 17, 2023
High max 7.8

ELSA-2023-7077 53 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-513.5.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Nov 17, 2023
High max 7.4

ELSA-2023-7279 2 CVEs

Important: open-vm-tools security update (Oracle Linux 7)

[11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

Nov 16, 2023
Critical max 9.3

ELSA-2023-6748 3 CVEs

Critical: squid security update (Oracle Linux 9)

[7:5.5-6.1] - Resolves: RHEL-14819 - squid: squid: denial of Servicein FTP - Resolves: RHEL-14807 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14780 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP [7:5.5-6] …

Nov 16, 2023
High

ELSA-2023-6732 1 CVE

Important: ghostscript security update (Oracle Linux 9)

[9.54.0-14] - fix for CVE-2023-43115 - Resolves: RHEL-10184 [9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810

Nov 16, 2023
Medium max 9.1

ELSA-2023-6744 3 CVEs

Moderate: samba security update (Oracle Linux 9)

[4.18.6-101] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server

Nov 16, 2023
High max 8.8

ELSA-2023-6745 2 CVEs

Important: curl security update (Oracle Linux 9)

[7.76.1-26.el9_3.2] - fix cookie injection with none file (CVE-2023-38546) [7.76.1-26.el9_3.1] - socks: return error if hostname too long for remote resolve (CVE-2023-38545)

Nov 16, 2023
High max 7.4

ELSA-2023-7277 2 CVEs

Important: open-vm-tools security update (Oracle Linux 9)

[12.2.5-3.0.1.2] - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass. - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper

Nov 16, 2023
High max 8.8

ELSA-2023-12991 1 CVE

Important: microcode_ctl security update (Oracle Linux 9)

[4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 16, 2023
High max 7.5

ELSA-2023-6746 1 CVE 1 exploited

Important: nghttp2 security update (Oracle Linux 9)

[1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487)

Nov 16, 2023
High max 8.8

ELSA-2023-12989 1 CVE

Important: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.19.0.3] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 13, 2023
High

ELSA-2023-6885 1 CVE

Important: python security update (Oracle Linux 7)

[2.7.5-94.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-94] - Security fix for CVE-2023-40217 Resolves: RHEL-9615

Nov 13, 2023
High max 8.1

ELSA-2023-6886 1 CVE

Important: plexus-archiver security update (Oracle Linux 7)

[0:2.4.2-6] - Avoid override target symlink by standard file in AbstractUnArchiver - Fixes: CVE-2023-37460

Nov 13, 2023
High max 8.8

ELSA-2023-12988 1 CVE

Important: microcode_ctl security update (Oracle Linux 8)

[4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583}

Nov 13, 2023
Medium max 6.5

ELSA-2023-6409 1 CVE

Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 9)

[9.5.0-7.0.1] - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744) - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [9.5.0-7] - util: use 'stubDriverType' instead of just 'stubDriver' (rhbz#2074209) - util: …

Nov 12, 2023
Medium max 7.5

ELSA-2023-6369 5 CVEs

Moderate: qt5 security and bug fix update (Oracle Linux 9)

adwaita-qt [1.4.2-1] - 1.4.2 Resolves: bz#2175754 python-pyqt5-sip [12.11.1-1] - 12.11.1 Resolves: bz#2188589 python-qt5 [5.15.9-1] - 5.15.9 Resolves: bz#2175758 qgnomeplatform [0.9.0-1] - 0.9.0 Resolves: bz#2175753 qt5 [5.15.9-1] - 5.15.9 Resolves: bz#217572…

Nov 12, 2023
Low max 7.5

ELSA-2023-6316 1 CVE

Low: pcs (Oracle Linux 9)

[0.11.6-3] - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz#2222788 [0.11.6-2] - Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm - Make use of fil…

Nov 12, 2023
High max 8.2

ELSA-2023-6583 41 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

- [5.14.0-362.8.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…

Nov 12, 2023
Medium max 7.5

ELSA-2023-6712 1 CVE

Moderate: python-wheel security update (Oracle Linux 9)

[1:0.36.2-8] - Security fix for CVE-2022-40898 - Resolves: rhbz#2178881

Nov 12, 2023
Medium max 7.5

ELSA-2023-6420 9 CVEs

Moderate: grafana security and enhancement update (Oracle Linux 9)

[9.2.10-7] - bump release number for rebuild with fixed gating.yaml file [9.2.10-6] - resolve RHEL-12665 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date m…

Nov 11, 2023
Medium max 5.9

ELSA-2023-6575 5 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-10] - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 [4.4.0-9] - Fix CVE-2023-2731 - Resolves: CVE-2023-2731

Nov 11, 2023
Medium max 6.5

ELSA-2023-6469 6 CVEs

Moderate: wireshark security update (Oracle Linux 9)

[1:3.4.10-6] - Resolves: #2211413 - XRA dissector infinite loop [1:3.4.10-5] - Resolves: #2210864 - Candump log file parser crash Resolves: #2210865 - VMS TCPIPtrace file parser crash Resolves: #2210868 - NetScaler file parser crash Resolves: #2210870 - RTPS …

Nov 11, 2023
Medium max 9.8

ELSA-2023-6363 11 CVEs

Moderate: skopeo security update (Oracle Linux 9)

[2:1.13.3-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.3 - Related: #2176063 [2:1.13.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.2 - Related: #2176063 [2:1.13.1-1] - update to https://github.com/container…

Nov 11, 2023
Medium

ELSA-2023-6643 2 CVEs

Moderate: libssh security update (Oracle Linux 9)

[0.10.4-11] - Fix loglevel regression - Related: rhbz#2182252, rhbz#2189740 [0.10.4.10] - Fix null dereference issues found by covscan - Related: rhbz#2182252, rhbz#2189740 [0.10.4-9] - Fix CVE-2023-1667 and CVE-2023-2283 - Fix issues found by cosvcan - Resol…

Nov 11, 2023
Medium max 7.8

ELSA-2023-6341 1 CVE

Moderate: xorg-x11-server-Xwayland security, bug fix, and enhancement update (Oracle Linux 9)

[22.1.9-2] - Rebuild (#2158761) [22.1.9-1] - xwayland 22.1.9 (#2158761) [21.1.3-8] - Fix CVE-2023-1393 (#2180299)

Nov 11, 2023
Medium max 7.8

ELSA-2023-6343 1 CVE

Moderate: LibRaw security update (Oracle Linux 9)

[0.20.2-6] - Fix CVE-2021-32142 Resolves: #2172140

Nov 11, 2023
Low max 6.4

ELSA-2023-6685 1 CVE

Low: tpm2-tss security and enhancement update (Oracle Linux 9)

[3.2.2-2] - Remove misapplied license Resolves: rhbz#2160307 [3.2.2-1] - Rebase to 3.2.2 - Use systemd-sysusers to create user Resolves: CVE-2023-22745 Resolves: rhbz#2095479 Resolves: rhbz#2160307 Resolves: rhbz#2162613

Nov 11, 2023
Low max 2.5

ELSA-2023-6705 1 CVE

Low: procps-ng security and bug fix update (Oracle Linux 9)

[3.3.17-13.0.1] - ps: remove uptime integer conversion [Orabug: 35909347] - ps: improved three elapsed 'jiffies/tics' calculations [Orabug: 35909347] [3.3.17-13] - ps: mitigation of possible buffer overflow - Resolves: rhbz#2228504 [3.3.17-12] - sysctl: '-N' …

Nov 11, 2023
Medium max 5.5

ELSA-2023-6371 1 CVE

Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 9)

[23.1.1-11.0.2] - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168] [23.1.1-11.0.1] - Increase retry value and add timeout for OCI [Orabug: 35329883] - Fix log file permission [Orabug: 35302969] - Update detection logic for OL di…

Nov 11, 2023
Medium max 10.0

ELSA-2023-6518 2 CVEs

Moderate: flatpak security, bug fix, and enhancement update (Oracle Linux 9)

[1.12.8-1] - Update to 1.12.8 (CVE-2023-28100, CVE-2023-28101) Resolves: #2180312, #2221792

Nov 11, 2023
Medium max 6.5

ELSA-2023-6551 1 CVE

Moderate: yajl security update (Oracle Linux 9)

[2.1.0-22] - fix CVE-2023-33460 - Resolves: #2221253

Nov 11, 2023
Medium max 9.8

ELSA-2023-6679 4 CVEs

Moderate: curl security update (Oracle Linux 9)

[7.76.1-26] - unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321) [7.76.1-25] - adapt the fix of CVE-2023-27535 for RHEL 9 curl [7.76.1-24] - fix SSH connection too eager reuse still (CVE-2023-27538) - fix GSS …

Nov 11, 2023
High max 8.8

ELSA-2023-6535 18 CVEs

Important: webkit2gtk3 security and bug fix update (Oracle Linux 9)

[2.40.5-1] - Update to 2.40.5 Related: #2176270 [2.40.4-1] - Update to 2.40.4 Related: #2176270 [2.40.3-2] - Disable JIT Related: #2176270 [2.40.3-1] - Update to 2.40.3 Related: #2176270 [2.40.2-1] - Update to 2.40.2 Related: #2176270 [2.40.1-1] - Upgrade to …

Nov 11, 2023
Medium

ELSA-2023-6497 1 CVE

Moderate: libX11 security update (Oracle Linux 9)

[1.7.0-8] - CVE fix for: CVE-2023-3138 Resolve: rhbz#2213763

Nov 11, 2023
Medium max 9.8

ELSA-2023-6544 2 CVEs

Moderate: ghostscript security and bug fix update (Oracle Linux 9)

[9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810

Nov 11, 2023
Medium max 6.5

ELSA-2023-6434 4 CVEs

Moderate: frr security and bug fix update (Oracle Linux 9)

[8.3.1-11] - Resolves: RHEL-2263 - bgpd: Do not explicitly print MAXTTL value for ebgp-multihop vty output [8.3.1-10] - Related: #2216912 - adding sys_admin to capabilities [8.3.1-9] - Resolves: #2215346 - frr policy does not allow the execution of /usr/sbin/…

Nov 11, 2023