Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 5.5

ELSA-2023-6593 1 CVE

Moderate: binutils security update (Oracle Linux 9)

[2.35.2-42.0.1] - Forward-port Oracle patches to 2.35.2-42.

Nov 11, 2023
Low

ELSA-2023-6661 1 CVE

Low: gmp security and enhancement update (Oracle Linux 9)

[1:6.2.0-13] - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 [1:6.2.0-12] - Add SIMD optimization patches for s390x (provided by the IBM) Resol…

Nov 11, 2023
Medium max 5.5

ELSA-2023-6621 1 CVE

Moderate: protobuf-c security update (Oracle Linux 9)

[1.3.3-13] - Applied patch for for CVE-2022-48468 (#2186677)

Nov 11, 2023
Medium max 9.8

ELSA-2023-6474 13 CVEs

Moderate: podman security, bug fix, and enhancement update (Oracle Linux 9)

[2:4.6.1-5.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.6.1-5] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/ea33dce) - Relate…

Nov 11, 2023
Medium max 8.8

ELSA-2023-6699 2 CVEs

Moderate: krb5 security and bug fix update (Oracle Linux 9)

[1.21.1-1.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-1] - New upstream version (1.21.1) - Fix double-free in KDC TGS processing (CVE-2023-39975) - Add support for 'pac_privsvr_enctype' KDB string attribute Resolves: rhbz#206…

Nov 11, 2023
Medium max 5.5

ELSA-2023-6707 3 CVEs

Moderate: avahi security update (Oracle Linux 9)

[0.8-15] - Fix CVE-2023-1981 (#2186689) [0.8-14] - Fix CVE-2021-3502 (#1949949) [0.8-13] - Fix CVE-2021-3468 (#1944092)

Nov 11, 2023
Medium max 5.3

ELSA-2023-6738 2 CVEs

Moderate: java-21-openjdk security and bug fix update (Oracle Linux 9)

[1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) -…

Nov 11, 2023
Low max 3.7

ELSA-2023-6429 1 CVE

Low: libpq security update (Oracle Linux 9)

[13.11-1] - Update to 13.11 Resolves: #2171370

Nov 11, 2023
Low

ELSA-2023-6372 1 CVE

Low: gdb security update (Oracle Linux 9)

[10.2.11.0.1] - Merge Oracle patches for ol9 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [10.2-11.el9] - Backport 'libiberty: prevent buffer overflow when decoding user input' (Luis Ferreira, RHBZ2132600) * Mon Mar 27 2023 Bruno Larsen <blarsen@r…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6402 10 CVEs

Moderate: containernetworking-plugins security and bug fix update (Oracle Linux 9)

[1:1.3.0-4] - add Epoch in Provides - Related: #2176063 [1:1.3.0-3] - remove no_openssl for FIPS compliance - Related: #2176063 [1:1.3.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723…

Nov 11, 2023
Low max 4.7

ELSA-2023-6632 1 CVE

Low: shadow-utils security and bug fix update (Oracle Linux 9)

[2:4.9-8] - gpasswd: fix password leak. Resolves: #2215948 [2:4.9-7] - useradd: check if subid range exists for user. Resolves: #2179987 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988

Nov 11, 2023
Medium max 9.8

ELSA-2023-6659 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.18-1] - Update to 3.9.18 - Security fix for CVE-2023-40217 Resolves: RHEL-3043 [3.9.17-2] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.9.17-1] - Update to 3.9.17 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 [3…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6473 11 CVEs

Moderate: buildah security update (Oracle Linux 9)

[1.31.3-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.31.3-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.3 - Related: #2176063 [1:1.31.2-1] - update to https://github.com/containers/buil…

Nov 11, 2023
Medium max 6.5

ELSA-2023-6330 2 CVEs

Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 9)

[20230524-3] - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244] - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060] - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196] - Resolves:…

Nov 11, 2023
Medium max 5.9

ELSA-2023-6566 1 CVE

Moderate: libmicrohttpd security update (Oracle Linux 9)

[1:0.9.72-5] - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371

Nov 11, 2023
Medium max 7.5

ELSA-2023-6368 1 CVE

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

[8.0.0-16.el9_3] - kvm-migration-Add-migration-prefix-to-functions-in-targe.patch [bz#2229868] - kvm-migration-Move-more-initializations-to-migrate_init.patch [bz#2229868] - kvm-migration-Add-.save_prepare-handler-to-struct-SaveVM.patch [bz#2229868] - kvm-vfi…

Nov 11, 2023
Low max 7.1

ELSA-2023-6587 1 CVE

Low: opensc security update (Oracle Linux 9)

[0.23.0-2] - Fix regression in handling OpenPGP cards - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos [0.23.0-1] - Rebase to latest 0.23.0 release (#2100409) - Use separate OpenSSL context to work better from inside of OpenSSL providers

Nov 11, 2023
Medium

ELSA-2023-6549 3 CVEs

Moderate: libreswan security update (Oracle Linux 9)

[4.12-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-1] - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz#2215956 [4.9-5] - Just bumping up the version to include bugs for CVE-2023-2295. There is …

Nov 11, 2023
Medium max 7.5

ELSA-2023-6524 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 9)

[2.85-14] - Backport Coverity fix to hide detected issue (#2156789) [2.85-13] - Rebuild with modified gating settings [2.85-12] - Make create logfile writeable by root (#2156789) [2.85-11] - Do not create and search --local and --address=/x/# domains (#220903…

Nov 11, 2023
Medium max 9.8

ELSA-2023-6324 1 CVE

Moderate: python3.11-pip security update (Oracle Linux 9)

[22.3.1-4] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 [22.3.1-3] - Fix changelog to contain Fedora contributors Resolves: RHEL-232

Nov 11, 2023
Medium

ELSA-2023-6698 1 CVE

Moderate: ncurses security and bug fix update (Oracle Linux 9)

[6.2-10.20210508] - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) [6.2-9.20210508] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#22116…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6365 2 CVEs

Moderate: mod_auth_openidc security and bug fix update (Oracle Linux 9)

[2.4.9.4-4] Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default [2.4.9.4-3] - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied [2.4.9.4-2] - Resolves: rhbz#215365…

Nov 11, 2023
Medium

ELSA-2023-6482 1 CVE

Moderate: librabbitmq security update (Oracle Linux 9)

[0.11.0-7] - add missing gating.yaml - fix rpminspect issue Related: #2215766 [0.11.0-6] - Resolves: #2215766, insecure credentials submission

Nov 11, 2023
Medium max 7.0

ELSA-2023-6380 5 CVEs

Moderate: runc security update (Oracle Linux 9)

[4:1.1.9-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.9 - Related: #2176063 [4:1.1.8-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.8 - Related: #2176063 [4:1.1.7-2] - rebuild for following CVEs: CVE-2021-43…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6403 1 CVE

Moderate: httpd and mod_http2 security, bug fix, and enhancement update (Oracle Linux 9)

httpd [2.4.57-5.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-5] - Fix issue found by covscan - Related: #2222001 [2.4.57-4] - Resolves: #2217726 - Make PROPFIND tolerant of deletion race [2.4.57-3] - Resolves: #2222001 - mod_s…

Nov 11, 2023
Medium max 8.6

ELSA-2023-6635 4 CVEs

Moderate: c-ares security, bug fix, and enhancement update (Oracle Linux 9)

[1.19.1-1] - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9] - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9] - Resolves: rhbz#22095…

Nov 11, 2023
Medium max 8.1

ELSA-2023-6542 1 CVE

Moderate: perl-HTTP-Tiny security update (Oracle Linux 9)

[0.076-461] - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228412

Nov 11, 2023
Medium

ELSA-2023-6578 1 CVE

Moderate: libqb security update (Oracle Linux 9)

[2.0.6-4] - bump rpm version for rhel-exception build Resolves: rhbz#2230712 [2.0.6-3] - blackbox: fix buffer overflow with long log lines Resolves: rhbz#2236171 [2.0.6-1] - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 [2…

Nov 11, 2023
Medium max 6.1

ELSA-2023-6523 1 CVE

Moderate: python-tornado security update (Oracle Linux 9)

[6.1.0-9] - Fix an open redirect in StaticFileHandler Resolves: CVE-2023-28370

Nov 11, 2023
Medium max 7.8

ELSA-2023-6569 1 CVE

Moderate: sysstat security and bug fix update (Oracle Linux 9)

[12.5.4-7.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683087] [12.5.4-7] - add description of UMASK to man/systat.in (rhbz#2216805) [12.5.4-6] - fix the arithmetic overflow in allocate_structures() that is still possible…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6570 3 CVEs

Moderate: tomcat security and bug fix update (Oracle Linux 9)

[1:9.0.62-37] - Resolves: RHEL-12551 - Remove JDK subpackges which are unused [1:9.0.62-16] - Related: #2184133 Declare file conflicts [1:9.0.62-15] - Resolves: #2184133 Fix bug in Obsoletes [1:9.0.62-14] - Resolves: #2210632 CVE-2023-28709 tomcat [1:9.0.62-1…

Nov 11, 2023
Medium max 7.8

ELSA-2023-6508 4 CVEs

Moderate: libreoffice security update (Oracle Linux 9)

[7.1.8.1-11.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-11] - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Form…

Nov 11, 2023
Medium max 4.8

ELSA-2023-6615 1 CVE

Moderate: python-cryptography security update (Oracle Linux 9)

[36.0.1-4] - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves rhbz#2203840 [36.0.1-3] - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399 - Fix FTBFS due to failing test_load_invalid_ec_ke…

Nov 11, 2023
Medium max 7.5

ELSA-2023-6667 4 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 9)

evolution-mapi [3.40.1-6] - Related: #2190415 (Rebuild against samba 4.18) openchange [2.3-41] - Related: #2190415 (Rebuild against samba 4.18) samba [4.18.6-100] - related: rhbz#2190415 - Update to version 4.18.6 - resolves: rhbz#2211617 - Fix the rpcclient …

Nov 11, 2023
Medium max 7.8

ELSA-2023-6340 1 CVE

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 9)

[1.20.11-19] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192550 [1.20.11-18] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180297

Nov 11, 2023
High max 8.2

ELSA-2023-6595 6 CVEs

Important: linux-firmware security, bug fix, and enhancement update (Oracle Linux 9)

[20230516-999.27.git6c9e0ed5.el9] - Update firmware for qat_4xxx devices (Orabug: 35811008)

Nov 11, 2023
Medium max 7.8

ELSA-2023-6431 1 CVE

Moderate: libfastjson security update (Oracle Linux 9)

[0.99.9-5] - Rebuild Resolves: rhbz#2227786 [0.99.9-4] - Address CVE-2020-12762 Resolves: rhbz#2203172

Nov 11, 2023
Medium max 9.8

ELSA-2023-6694 1 CVE

Moderate: python-pip security update (Oracle Linux 9)

[21.2.3-7] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2207997

Nov 11, 2023
Medium max 7.5

ELSA-2023-6496 1 CVE

Moderate: haproxy security and bug fix update (Oracle Linux 9)

[2.4.22-1] - Update to 2.4.22 (#2196530) [2.4.17-7] - Fix uninitizalized resevered bytes (CVE-2023-0836, #2180861)

Nov 11, 2023
Medium max 9.8

ELSA-2023-6494 2 CVEs

Moderate: python3.11 security update (Oracle Linux 9)

[3.11.5-1] - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3045, RHEL-3269 [3.11.4-3] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.11.4-2] - Security fix for CVE-2007-4559 Resolves: rhb…

Nov 11, 2023