Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Medium max 6.8
    ELSA-2023-5353 5 CVEs

    Moderate: libtiff security update (Oracle Linux 8)

    [4.0.9-29] - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 - Resolves: (BZ#2170167) (BZ#2170172) (BZ#2170178) (BZ#2170187) (BZ#2170192)

  • High max 7.8
    ELSA-2023-12836 2 CVEs

    Important: kernel security update (Oracle Linux 9)

    [5.14.0-284.30.1.el9_2] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint a…

  • High max 7.0
    ELSA-2023-12825 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.323.8.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander Lair…

  • High max 7.0
    ELSA-2023-12824 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-105.125.6.2.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824297] - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35824297] - netfilter: xt_sctp: validate the flag_info count (Wan…

  • Medium max 6.0
    ELSA-2023-12834 3 CVEs

    Moderate: qemu security update (Oracle Linux 7)

    [15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} …

  • Medium max 6.0
    ELSA-2023-12835 3 CVEs

    Moderate: qemu security update (Oracle Linux 7)

    [15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} …

  • High max 7.0
    ELSA-2023-12826 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.529.3.2] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824309] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824309] - netfilter: ipset: add the missing IP_SET_HASH_WITH_N…

  • High max 7.1
    ELSA-2023-5312 1 CVE

    Important: open-vm-tools security update (Oracle Linux 8)

    [12.1.5-2.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass)

  • High max 7.8
    ELSA-2023-5244 6 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-477.27.0.1_8.OL8] - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002} - ipvlan:Fix out-of-bounds caused by unclear skb->cb {CVE-2023-3090} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-20…

  • Medium max 6.5
    ELSA-2023-5259 4 CVEs

    Moderate: mariadb:10.3 security, bug fix, and enhancement update (Oracle Linux 8)

    galera [25.3.37-1] - Rebase to 25.3.37 Judy [1.0.5-18.0.1] - Rebuild [Orabug: 31667911] mariadb [3:10.3.39-1] - [MariaDB 10.3.32] socat: E Failed to set SNI host '' (SST failure) - Rebase to 10.3.39 - CVEs fixed: CVE-2022-47015, CVE-2018-25032, CVE-2022-32091…

  • High max 7.1
    ELSA-2023-5313 1 CVE

    Important: open-vm-tools security update (Oracle Linux 9)

    [12.1.5-1.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass

  • High max 8.8
    ELSA-2023-5309 1 CVE 1 exploited

    Important: libwebp security update (Oracle Linux 8)

    [1.0.0-8.1] - Added fix for CVE-2023-4863

  • Medium max 7.2
    ELSA-2023-5269 2 CVEs

    Moderate: postgresql:15 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [15.3-1] - Update to upstream version 15.3 - Fixes: CVE-2023-2454 CVE-2023-2455 - Resolves: #2207934

  • Medium max 7.1
    ELSA-2023-5252 1 CVE

    Moderate: dmidecode security update (Oracle Linux 8)

    [1:3.3-4.1] - Resolves: CVE-2023-30630

  • Medium
    ELSA-2023-5249 1 CVE

    Moderate: ncurses security update (Oracle Linux 8)

    [6.1-9.20180224.1] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)

  • High
    ELSA-2023-5219 1 CVE

    Important: frr security and bug fix update (Oracle Linux 8)

    [7.5.1-7.0.1.2] - Fix BFD crash in FRR running in MetalLB (BZ#2231829) - Fix for CVE-2023-38802

  • High max 7.1
    ELSA-2023-5217 1 CVE

    Important: open-vm-tools security update (Oracle Linux 7)

    [11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

  • High max 8.8
    ELSA-2023-5191 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 7)

    [102.15.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.1-1] - Update to 102.15.1

  • High max 8.8
    ELSA-2023-5197 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [102.15.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.1-1] - Update to 102.15.1

  • High max 8.8
    ELSA-2023-5201 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 8)

    [102.15.1-1.0.1] - Update to 102.15.1

  • High max 8.8
    ELSA-2023-5184 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 8)

    [102.15.1-1.0.1] - Update to 102.15.1 build2

  • High
    ELSA-2023-5194 1 CVE

    Important: frr security update (Oracle Linux 9)

    [8.3.1-5.2] - Fix for CVE-2023-38802

  • High max 8.8
    ELSA-2023-5224 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 9)

    [102.15.1-1.0.1] - Update to 102.15.1

  • High max 8.8
    ELSA-2023-5214 1 CVE 1 exploited

    Important: libwebp security update (Oracle Linux 9)

    [1.2.0-7] - Added fix for CVE-2023-4863

  • High max 8.8
    ELSA-2023-5200 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 9)

    [102.15.1-1.0.1] - Update to 102.15.1 build2

  • High max 5.5
    ELSA-2023-12800 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.78.4.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35741584] {CVE-2023-22024}

  • High max 5.5
    ELSA-2023-12799 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.529.3.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35708852] {CVE-2023-22024}

  • High max 5.5
    ELSA-2023-12802 1 CVE

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.323.8.1.el7] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

  • High max 5.5
    ELSA-2023-12803 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.323.8.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

  • High max 5.5
    ELSA-2023-12801 1 CVE

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.4.17-2136.323.8.1.el8] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024}

  • High max 5.5
    ELSA-2023-12798 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-105.125.6.2.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713695] {CVE-2023-22024}

  • High max 7.8
    ELSA-2023-5069 8 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

    - [5.14.0-284.30.0.1_2.OL9] - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637} - x86/speculation: Restore speculation related MSRs {CVE-2023-1637} - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637} - x86/pm: Fix fals…

  • High max 7.1
    ELSA-2023-12792 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.529.3] - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy) [Orabug: 35724203] - LTS version: v4.14.322 (Saeed Mirzamohammadi) - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Tor…

  • Medium max 6.5
    ELSA-2023-5145 1 CVE

    Moderate: .NET 7.0 security update (Oracle Linux 8)

    [7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2001

  • Medium max 6.5
    ELSA-2023-5144 1 CVE

    Moderate: .NET 6.0 security update (Oracle Linux 8)

    [6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1996

  • Medium max 6.5
    ELSA-2023-5143 1 CVE

    Moderate: .NET 6.0 security update (Oracle Linux 9)

    [6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1997

  • Medium max 6.5
    ELSA-2023-5146 1 CVE

    Moderate: .NET 7.0 security update (Oracle Linux 9)

    [7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000

  • High
    ELSA-2023-5046 1 CVE

    Important: flac security update (Oracle Linux 8)

    [1.3.2-9.el8_8.1] - don't free memory that is still used after realloc() error (CVE-2020-22219)

  • Medium max 7.8
    ELSA-2023-5071 2 CVEs

    Moderate: libcap security update (Oracle Linux 9)

    [2.48-9] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210638 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2222198

  • High
    ELSA-2023-5048 1 CVE

    Important: flac security update (Oracle Linux 9)

    [1.3.3-10.el9_2.1] - don't free memory that is still used after realloc() error (CVE-2020-22219)