Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Medium max 7.5
    ELSA-2023-4537 4 CVEs

    Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

    nodejs [1:16.20.1-1] - Rebase to 16.20.1 Resolves: rhbz#2188289 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222288 nodejs-nodemon nodejs-packaging

  • Medium max 7.2
    ELSA-2023-4527 2 CVEs

    Moderate: postgresql:13 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [13.11-1.0.1] - Update to 13.11 - Resolves: #2212815 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207933 - Update 1001-Fixed-postgresql-service-network…

  • Medium max 7.5
    ELSA-2023-4536 4 CVEs

    Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

    nodejs [1:18.16.1-1] - Rebase to 18.16.1 Resolves: rhbz#2188290 rhbz#2166926 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222287 nodejs-nodemon nodejs-packagi…

  • Medium max 5.9
    ELSA-2023-4523 2 CVEs

    Moderate: curl security update (Oracle Linux 8)

    [7.61.1-30.el8_8.3] - GSS delegation too eager connection re-use (CVE-2023-27536) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys

  • High max 8.0
    ELSA-2023-4517 6 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-477.21.1_8.OL8] - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Tamas Koczka) {CVE-2022-42896} - net/sched: tcindex: update imperfect hash filters respecting rcu (Jamal Hadi Salim) {CVE-2023-1281} - net/sched: tcindex: search ke…

  • Medium max 7.2
    ELSA-2023-4535 3 CVEs

    Moderate: postgresql:12 security update (Oracle Linux 8)

    pgaudit pg_repack postgres-decoderbufs postgresql [12.15-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [12.15-1] - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207932 - Up…

  • Medium max 6.5
    ELSA-2023-4569 1 CVE

    Moderate: dbus security update (Oracle Linux 9)

    [1:1.12.20-7.0.1.1] - Fix CVE-2023-34969 (#2213402) [1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) [1:1.12.20-6] - Override upstream sy…

  • High
    ELSA-2023-4571 1 CVE

    Important: iperf3 security update (Oracle Linux 9)

    [3.9-10] - Fixes CVE-2023-38403 Resolves: rhbz#2223676

  • High max 5.5
    ELSA-2023-4151 1 CVE

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.95.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.95.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

  • High
    ELSA-2023-4497 10 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [102.14.0-1.0.1] - Update to 102.14.0 build1

  • Medium max 7.8
    ELSA-2023-4524 2 CVEs

    Moderate: libcap security update (Oracle Linux 8)

    [2.48-5] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644

  • High
    ELSA-2023-12712 1 CVE

    Important: linux-firmware security update (Oracle Linux 7)

    [20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] -…

  • High
    ELSA-2023-4495 10 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [102.14.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.14.0-1] - Update to 102.14.0 build1

  • High
    ELSA-2023-12713 1 CVE

    Important: linux-firmware security update (Oracle Linux 7)

    [20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] -…

  • Medium max 6.5
    ELSA-2023-4498 1 CVE

    Moderate: dbus security update (Oracle Linux 8)

    [1:1.12.8-24.0.1.1] - Fix CVE-2023-34969 (#2213166)

  • High
    ELSA-2023-12714 1 CVE

    Important: linux-firmware security update (Oracle Linux 8)

    [20230516-999.25.git6c9e0ed5.el8] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0e…

  • High
    ELSA-2023-4499 10 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.14.0-1.0.1] - Update to 102.14.0 build1

  • High
    ELSA-2023-12715 1 CVE

    Important: linux-firmware security update (Oracle Linux 9)

    [20230516-999.25.git6c9e0ed5.el9] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0e…

  • High
    ELSA-2023-4461 9 CVEs

    Important: firefox security update (Oracle Linux 7)

    [102.14.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1

  • Low max 7.5
    ELSA-2023-12709 2 CVEs

    Low: python-werkzeug security update (Oracle Linux 8)

    [0.12.2-4.0.1] - Fix CVE-2023-23934 [Orabug: 35662419] - Fix CVE-2023-25577 [Orabug: 35662419] - enable tests [Orabug: 35662419]

  • High max 7.5
    ELSA-2023-12710 1 CVE

    Important: python-flask security update (Oracle Linux 8)

    [0.12.2-4.0.1] - Fix for CVE-2023-30861 [Orabug: 35662469] - Add test for CVE-2023-30861 [Orabug: 35662469]

  • High
    ELSA-2023-12662 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12663 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12666 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12668 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12667 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12664 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12665 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12678 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12672 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12676 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-4468 9 CVEs

    Important: firefox security update (Oracle Linux 8)

    [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1

  • High
    ELSA-2023-12673 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12674 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12671 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12670 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12675 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12677 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12685 0 CVEs

    Important: GraalVM Security update (Oracle Linux 9)

  • High
    ELSA-2023-4462 9 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.14.0-1] - Update to 102.14.0 build1