Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium

ELSA-2023-5081 1 CVE

Moderate: librsvg2 security update (Oracle Linux 9)

[2.50.7-1.el9_2.1] - Fix CVE-2023-38633 (#2224947)

Sep 13, 2023
High max 7.5

ELSA-2023-5094 1 CVE

Important: qemu-kvm security and bug fix update (Oracle Linux 9)

[7.2.0-14.el9_2.5] - rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service - ho…

Sep 13, 2023
Medium max 7.1

ELSA-2023-5061 1 CVE

Moderate: dmidecode security update (Oracle Linux 9)

[1:3.3-7.1] - Resolves: CVE-2023-30630

Sep 13, 2023
Medium max 7.5

ELSA-2023-5080 2 CVEs

Moderate: keylime security update (Oracle Linux 9)

[6.5.2-6] - Fix registrar is subject to a DoS against SSL (CVE-2023-38200) Resolves: rhbz#2222694 - Fix challenge-protocol bypass during agent registration (CVE-2023-38201) Resolves: rhbz#2222695

Sep 13, 2023
Medium max 7.5

ELSA-2023-5050 1 CVE

Moderate: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-56.0.1.7] - Resolves: #2176723 - CVE-2023-27522 httpd:2.4/httpd: mod_proxy_uwsgi HTTP response splitting [2.4.37-56.0.1.6] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.htm…

Sep 12, 2023
Low max 4.8

ELSA-2023-28766 1 CVE

Low: cross-gcc security update (Oracle Linux 8)

[11.2.1-5.0.2] - CVE-2023-4039 mitigation. Orabug 35752004. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

Sep 12, 2023
Low max 6.5

ELSA-2023-12788 2 CVEs

Low: gcc security update (Oracle Linux 8)

gcc [el8] [8.5.0-18.0.5] - CVE-2023-4039 GCC mitigation. Orabug 35751743. Includes removal of aarch64-preserve-args.patch. - CVE-2022-40982 'Intel Downfall' mitigation. Orabug 35751810. Add two patches originally from GCC upstream releases/gcc-11 branch. with…

Sep 12, 2023
Low max 4.8

ELSA-2023-28765 1 CVE

Low: cross-gcc security update (Oracle Linux 8)

[12.1.1-2.0.4] - CVE-2023-4039 mitigation. Orabug 35752028. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

Sep 12, 2023
High max 6.5

ELSA-2023-12785 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.323.8.el7] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el7] - x86: change default to spec_store…

Sep 11, 2023
High max 8.6

ELSA-2023-12772 4 CVEs

Important: olcne security update (Oracle Linux 8)

istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-3] - Mofify kubevirt image tag to use virt-operator tag instead of kub…

Sep 11, 2023
High max 6.5

ELSA-2023-12786 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.323.8.el8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el8] - x86: change default to spec_store…

Sep 11, 2023
High max 6.5

ELSA-2023-12782 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.323.8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7] - x86: change default to spec_store_bypass_…

Sep 11, 2023
High max 8.6

ELSA-2023-12781 4 CVEs

Important: istio security update (Oracle Linux 7)

istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944

Sep 8, 2023
High max 8.6

ELSA-2023-12780 4 CVEs

Important: istio security update (Oracle Linux 8)

istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944

Sep 8, 2023
High max 8.8

ELSA-2023-5019 12 CVEs

Important: firefox security update (Oracle Linux 7)

[102.15.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.0-1] - Update to 102.15.0 build2 [102.14.0-3] - …

Sep 7, 2023
High max 8.8

ELSA-2023-4952 12 CVEs

Important: firefox security update (Oracle Linux 8)

[102.15.0-1.0.1] - Update to 102.15.0 build2

Sep 6, 2023
High max 8.8

ELSA-2023-4954 12 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.15.0-1.0.1] - Update to 102.15.0 build1

Sep 6, 2023
High max 8.8

ELSA-2023-4958 12 CVEs

Important: firefox security update (Oracle Linux 9)

[102.15.0-1.0.1] - Update to 102.15.0 build2

Sep 6, 2023
High max 8.8

ELSA-2023-4955 12 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.15.0-1.0.1] - Update to 102.15.0 build1

Sep 6, 2023
High max 8.6

ELSA-2023-12771 4 CVEs

Important: istio security update (Oracle Linux 9)

istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-2] - Update kubevirt image versions fixing selinux=enforce not being s…

Sep 6, 2023
High max 8.8

ELSA-2023-4945 12 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.15.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.0-1] - Update to 102.15.0 build1 [102.14.0-3] - Bump NVR to rebuild [102.14.0-2] - Rebuild due to rhbz#2228948

Sep 5, 2023
High max 7.1

ELSA-2023-12759 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.78.2] - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum) [Orabug: 35598955] {CVE-2023-3106} - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha) [Orabug: 34012909] {CVE-2022-1015} [4.1.12-124.78.1] -…

Sep 1, 2023
High max 7.8

ELSA-2023-4819 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.99.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.99.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Aug 31, 2023
High

ELSA-2023-4864 1 CVE

Important: cups security update (Oracle Linux 8)

[1:2.2.6-51.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 30, 2023
High

ELSA-2023-4766 1 CVE

Important: cups security update (Oracle Linux 7)

[1:1.6.3-52] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 29, 2023
High

ELSA-2023-4838 1 CVE

Important: cups security update (Oracle Linux 9)

[1:2.3.3op2-16.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation

Aug 29, 2023
High max 7.8

ELSA-2023-4635 1 CVE

Important: rust-toolset:ol8 security update (Oracle Linux 8)

[1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

Aug 28, 2023
High max 7.8

ELSA-2023-4634 1 CVE

Important: rust security update (Oracle Linux 9)

[1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497)

Aug 25, 2023
High max 7.8

ELSA-2023-4644 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 16, 2023
High max 7.8

ELSA-2023-4642 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 16, 2023
Medium max 6.5

ELSA-2023-12722 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.15.0.6] - also rebuild initramfs for kernel-ueknano [Orabug: 35698043] [2:2.1-73.15.0.5] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE…

Aug 15, 2023
High max 7.8

ELSA-2023-4645 2 CVEs 1 exploited

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567

Aug 15, 2023
High max 7.8

ELSA-2023-4643 2 CVEs 1 exploited

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

[7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571

Aug 15, 2023
Medium max 6.5

ELSA-2023-12723 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 8)

[4:20230214-2.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692741]

Aug 15, 2023
Medium max 6.5

ELSA-2023-12724 1 CVE

Moderate: microcode_ctl security update (Oracle Linux 9)

[4:20220809-2.20230214.1.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692740]

Aug 15, 2023
High

ELSA-2023-4570 1 CVE

Important: iperf3 security update (Oracle Linux 8)

[3.5-7] - Fixes CVE-2023-38403 Resolves: rhbz#2223729

Aug 11, 2023
Medium max 7.2

ELSA-2023-4539 2 CVEs

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.23-2.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [10.23-2] - Backport fixes for CVE-2023-2454 and CVE-2023-2455 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207931 […

Aug 11, 2023
Medium max 6.1

ELSA-2023-4520 1 CVE

Moderate: python-requests security update (Oracle Linux 8)

[2.20.0-3] - Fix Unintended leak of Proxy-Authorization header (CVE-2023-32681)

Aug 11, 2023
Critical max 9.8

ELSA-2023-12711 1 CVE

Critical: openssh security update (Oracle Linux 7)

[7.4p1-23.0.1_fips] - Change Epoch from 1 to 10 - Enable fips KDF POST [Orabug: 32461750] - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739] [7.4p1-23.0.1] - enlarge format buffer size for certificate serial number so the log me…

Aug 10, 2023
Medium max 6.5

ELSA-2023-4529 2 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-16.1] - Fix CVE-2023-28484 (#2185994) - Fix CVE-2023-29469 (#2185984)

Aug 10, 2023