Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Medium max 7.5
    ELSA-2023-5712 1 CVE 1 exploited

    Moderate: nginx:1.20 security update (Oracle Linux 8)

    [1:1.20.1-1.0.1.1] - Resolves: RHEL-12732 - nginx:1.20/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

  • Medium max 7.5
    ELSA-2023-5713 1 CVE 1 exploited

    Moderate: nginx:1.22 security update (Oracle Linux 8)

    [1:1.22.1-1.0.1.1] - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487)

  • High max 7.0
    ELSA-2023-12915 1 CVE

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.323.8.2.el8] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander …

  • High max 7.0
    ELSA-2023-12874 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.324.5.3] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1] - x86: KVM: SVM…

  • Medium max 7.5
    ELSA-2023-5711 1 CVE 1 exploited

    Moderate: nginx security update (Oracle Linux 9)

    [1:1.20.1-14.0.1.1] - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

  • High
    ELSA-2023-5462 1 CVE

    Important: python3.9 security update (Oracle Linux 9)

    [3.9.16-1.2] - Security fix for CVE-2023-40217

  • High max 7.5
    ELSA-2023-5691 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.11.4-26.P2.15] - Limit the amount of recursion possible in control channel (CVE-2023-3341)

  • High max 9.8
    ELSA-2023-5477 5 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [115.3.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.3.1-1] - Update to 115.3.1 [115.3.0-1] - Update to 1…

  • High max 9.8
    ELSA-2023-5475 5 CVEs 1 exploited

    Important: thunderbird security update (Oracle Linux 7)

    [115.3.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.3.1-1] - Update to 115.3.1 build1 [115.3.0-1] - Update to 115.3.0 [115.2.1-5] - Update to 115.2.1

  • High max 7.0
    ELSA-2023-12875 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.530.5.1] - Revert 'rtnetlink: Reject negative ifindexes in RTM_NEWLINK' (Saeed Mirzamohammadi) [Orabug: 35896831] [4.14.35-2047.530.5] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orab…

  • High max 7.0
    ELSA-2023-12910 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.324.5.3.el7] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el7] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el7] - x…

  • High max 7.5
    ELSA-2023-5683 8 CVEs

    Important: mariadb:10.5 security update (Oracle Linux 8)

    galera [26.4.14-1] - Rebase to 26.4.14 [26.4.13-1] - Rebase to 26.4.13 [26.4.12-1] - Rebase to 26.4.12 Judy mariadb [3:10.5.22-1] - Rebase to 10.5.22 [3:10.5.21-1] - Rebase to version 10.5.21 [3:10.5.20-2] - Use _fortify_level to disable fortification in debu…

  • High
    ELSA-2023-5463 1 CVE

    Important: python3.11 security update (Oracle Linux 8)

    [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789

  • High max 7.0
    ELSA-2023-12911 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.324.5.3.el8] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el8] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el8] - x…

  • High
    ELSA-2023-5456 1 CVE

    Important: python3.11 security update (Oracle Linux 9)

    [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789

  • High max 7.5
    ELSA-2023-5689 1 CVE

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-11.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

  • High max 7.8
    ELSA-2023-5622 3 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.102.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.102.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…

  • High max 9.8
    ELSA-2023-5616 1 CVE

    Important: python-reportlab security update (Oracle Linux 7)

    [2.5-11] - Do not evaluate unichar element - Resolves: RHEL-7011

  • High max 8.8
    ELSA-2023-5539 2 CVEs 1 exploited

    Important: libvpx security update (Oracle Linux 9)

    [1.9.0-7] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

  • Medium
    ELSA-2023-5615 1 CVE

    Moderate: libssh2 security update (Oracle Linux 7)

    [1.8.0-4.el7_9.1] - fix use-of-uninitialized-value (CVE-2020-22218)

  • High max 8.8
    ELSA-2023-5537 2 CVEs 1 exploited

    Important: libvpx security update (Oracle Linux 8)

    [1.7.0-10] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806

  • High max 9.8
    ELSA-2023-5532 3 CVEs

    Important: nodejs security and bug fix update (Oracle Linux 9)

    [1:16.20.2-1] - Update to 16.20.2-1 Resolves CVE-2023-32002 CVE-2023-32006 CVE-2023-32559

  • High max 7.8
    ELSA-2023-5453 4 CVEs 1 exploited

    Important: glibc security update (Oracle Linux 9)

    [2.34-60.0.3.7] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716). - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet. Reviewed by: Jose E. Marchesi <jose.marchesi@oracl…

  • High max 7.0
    ELSA-2023-12858 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-106.131.4] - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng) - jbd2: fix checkpoint cleanup performance regression (Zhang Yi) - scsi: qla2xxx: Fix TMF leak through (Quinn Tran) - scsi: qla2xxx: Fix command flush durin…

  • High max 7.5
    ELSA-2023-12855 7 CVEs

    Important: kvm_utils3 security update (Oracle Linux 8)

    hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [9.0.0-3.el8] - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750} - virpci: Resolve leak in virPCIVirtualFunctio…

  • High max 7.5
    ELSA-2023-5474 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-8.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

  • High max 7.5
    ELSA-2023-5460 1 CVE

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-14.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

  • High max 9.8
    ELSA-2023-5433 5 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 8)

    [115.3.1-1.0.1] - Update to 115.3.1

  • High max 9.8
    ELSA-2023-5428 5 CVEs 1 exploited

    Important: thunderbird security update (Oracle Linux 8)

    [115.3.1-1.0.1] - Update to 115.3.1 build1

  • High
    ELSA-2023-5459 1 CVE

    Important: ghostscript security update (Oracle Linux 9)

    [9.54.0-10] - fix for CVE-2023-36664 - Resolves: rhbz#2217798

  • High
    ELSA-2023-5461 1 CVE

    Important: ImageMagick security update (Oracle Linux 7)

    [6.9.10.68-7] - Added fix for CVE-2021-40211

  • High max 7.8
    ELSA-2023-12851 1 CVE 1 exploited

    Important: glibc security update (Oracle Linux 8)

    [2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

  • High max 9.8
    ELSA-2023-5434 5 CVEs 1 exploited

    Important: firefox security update (Oracle Linux 9)

    [115.3.1-1.0.1] - Update to 115.3.1

  • High max 7.8
    ELSA-2023-12850 1 CVE 1 exploited

    Important: glibc security update (Oracle Linux 9)

    [2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>

  • High max 9.8
    ELSA-2023-5363 4 CVEs

    Important: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 9)

    nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CV…

  • High max 9.8
    ELSA-2023-5435 5 CVEs 1 exploited

    Important: thunderbird security update (Oracle Linux 9)

    [115.3.1-1.0.1] - Update to 115.3.1 build1

  • High max 7.8
    ELSA-2023-12842 10 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.79.2] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814273] {CVE-2023-4206} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [Orabug: 35636291] {CVE-2023-3611} …

  • High max 7.8
    ELSA-2023-12839 2 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-477.27.1.el8_8.OL8] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Deprecate MICROCODE_OLD_INTERFACE - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode…

  • High max 9.8
    ELSA-2023-5362 4 CVEs

    Important: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

    nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228939 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-pa…

  • High max 9.8
    ELSA-2023-5360 4 CVEs

    Important: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

    nodejs [1:16.20.2-2] - Rebase to 16.20.2 Resolves: rhbz#2231866 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 Resolves: CVE-2022-25883 nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependenc…