Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 7.5

ELSA-2023-6385 3 CVEs

Moderate: liblouis security update (Oracle Linux 9)

[3.16.1-5] - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149)

Nov 11, 2023
Medium max 7.5

ELSA-2023-6596 2 CVEs

Moderate: cups security and bug fix update (Oracle Linux 9)

[1:2.3.3op2-21] - bump the spec because the previous build was made with buildroot 9.2 [1:2.3.3op2-20] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation [1:2.3.3op2-19] - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in …

Nov 11, 2023
Medium max 5.3

ELSA-2023-6492 1 CVE

Moderate: tang security update (Oracle Linux 9)

[14-2] - Fix service start up [14-1] - New upstream release - v14. Resolves: rhbz#2182411 Resolves: CVE-2023-1672

Nov 11, 2023
Low max 5.5

ELSA-2023-6631 3 CVEs

Low: glib2 security and bug fix update (Oracle Linux 9)

[2.68.4-11] - Really fix authentication failures when sd-bus clients connect to GDBus servers - Resolves: #2217771 [2.68.4-10] - Fix authentication failures when sd-bus clients connect to GDBus servers - Resolves: #2217771 [2.68.4-9] - Resolve s390x crashes i…

Nov 11, 2023
Medium max 8.1

ELSA-2023-6539 1 CVE

Moderate: perl-CPAN security update (Oracle Linux 9)

[2.29-3] - Resolves: rhbz#2218907 - Fix CVE-2023-31484

Nov 11, 2023
High max 7.0

ELSA-2023-12974 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.325.5] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508] - p…

Nov 10, 2023
High

ELSA-2023-6823 1 CVE

Important: python3 security update (Oracle Linux 7)

[3.6.8-21.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-21] - Test fixups for CVE-…

Nov 9, 2023
High max 7.8

ELSA-2023-6802 1 CVE

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-24] - CVE fix for: CVE-2023-5367 Resolves: https://issues.redhat.com/browse/RHEL-13424

Nov 8, 2023
Critical max 8.6

ELSA-2023-6805 1 CVE

Critical: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

Nov 8, 2023
Critical max 9.3

ELSA-2023-6267 2 CVEs

Critical: squid:4 security update (Oracle Linux 8)

libecap squid [4.15-6.0.1] - Improve HTTP chunked encoding compliance (CVE-2023-46846) - Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847)

Nov 7, 2023
High

ELSA-2023-12972 2 CVEs

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]

Nov 6, 2023
High

ELSA-2023-12971 2 CVEs

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921]

Nov 6, 2023
High max 7.8

ELSA-2023-12970 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.80.1] - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [Orabug: 35814478] {CVE-2023-40283} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814297] {CVE-2023-4208} - RD…

Nov 3, 2023
Medium max 6.5

ELSA-2023-6245 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 8)

[6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14466

Nov 3, 2023
Critical max 9.3

ELSA-2023-6266 3 CVEs

Critical: squid security update (Oracle Linux 9)

[7:5.5-5.el9_2.1] - Improve HTTP chunked encoding compliance (CVE-2023-46846) - Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847) - Fix userinfo percent-encoding (CVE-2023-46848)

Nov 3, 2023
High

ELSA-2023-6265 1 CVE

Important: ghostscript security update (Oracle Linux 9)

[9.54.0-11] - fix for CVE-2023-43115 - Resolves: rhbz#2241108

Nov 3, 2023
Medium max 5.3

ELSA-2023-5731 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.392.b08-4.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during clie…

Nov 2, 2023
Medium max 6.5

ELSA-2023-6247 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 8)

[7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14474

Nov 2, 2023
Medium max 5.3

ELSA-2023-5733 3 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 9)

[1:1.8.0.392.b08-3.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during clie…

Nov 2, 2023
Medium max 6.5

ELSA-2023-6242 1 CVE

Moderate: .NET 6.0 security update (Oracle Linux 9)

[6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14462

Nov 2, 2023
Medium max 6.5

ELSA-2023-6246 1 CVE

Moderate: .NET 7.0 security update (Oracle Linux 9)

[7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467

Nov 2, 2023
Medium max 5.5

ELSA-2023-6236 1 CVE

Moderate: binutils security update (Oracle Linux 8)

[2.30-119.0.2.2] - Fix for CVE-2022-4285. - Fix illegal memory address when parsing an ELF file contaiing corrupt symbol version information. Upstream commit 5c831a3c7f3ca98d6aba1200353311e1a1f84c70. - Partial backport of _bfd_mul_overflow support from upstre…

Nov 1, 2023
High max 7.5

ELSA-2023-6193 7 CVEs

Important: thunderbird security update (Oracle Linux 7)

[115.4.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.4.1-1] - Update to 115.4.1 build1 [115.4.0-3] - Update to 115.4.0 build3 [115.4.0-2] - Update to 115.4.0 build2 [115.4.0-1] - …

Oct 31, 2023
High max 7.5

ELSA-2023-6194 7 CVEs

Important: thunderbird security update (Oracle Linux 8)

[115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488

Oct 31, 2023
High max 7.5

ELSA-2023-6188 7 CVEs

Important: firefox security update (Oracle Linux 9)

[115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL

Oct 31, 2023
Medium max 5.3

ELSA-2023-5753 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-83099…

Oct 31, 2023
High max 7.5

ELSA-2023-6191 7 CVEs

Important: thunderbird security update (Oracle Linux 9)

[115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488

Oct 31, 2023
High max 7.5

ELSA-2023-6162 7 CVEs

Important: firefox security update (Oracle Linux 7)

[115.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.4.0-1] - Update to 115.4.0 build1 - Add fix for CVE-…

Oct 30, 2023
Medium max 5.3

ELSA-2023-5751 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-83099…

Oct 30, 2023
High max 7.5

ELSA-2023-6187 7 CVEs

Important: firefox security update (Oracle Linux 8)

[115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL

Oct 30, 2023
Low max 7.8

ELSA-2023-6167 1 CVE

Low: libguestfs-winsupport security update (Oracle Linux 9)

[9.2-2] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236130

Oct 30, 2023
High max 8.1

ELSA-2023-12952 7 CVEs

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.26.el7_9.9] - Enable common subpackage for aarch64 - Do not sign aarch64 efi binaries [Orabug: 32670043] - Remove aarch64 deps on shim [Orabug: 32670043] - Restore versioned certificate provide for aarch64 package to satisfy shim [Orabug: 3267004…

Oct 27, 2023
Medium max 5.3

ELSA-2023-5742 1 CVE

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.21.0.9-2.0.1] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170)…

Oct 27, 2023
Medium max 7.5

ELSA-2023-6120 1 CVE 1 exploited

Moderate: nginx:1.22 security update (Oracle Linux 9)

[1:1.22.1-3.0.1.1] - Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (CVE-2023-44487)

Oct 26, 2023
Medium max 5.3

ELSA-2023-5744 1 CVE

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[1:11.0.21.0.9-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional …

Oct 26, 2023
High

ELSA-2023-5998 1 CVE

Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

Cython [0.29.21-5] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 mod_wsgi [4.7.1-5] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125172 numpy [1.19.4-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 -…

Oct 25, 2023
High max 7.5

ELSA-2023-12934 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12936 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 24, 2023
High max 7.5

ELSA-2023-12945 1 CVE

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167]

Oct 24, 2023
High max 7.5

ELSA-2023-12946 1 CVE

Important: dnsmasq security update (Oracle Linux 7)

[2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167]

Oct 24, 2023