Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 6.5

ELSA-2023-12564 2 CVEs

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.25.11-1] - Added Oracle specific build files for Kubernetes olcne [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x [1.6.1-9] - Updated the CVE ID's in Istio-1.1…

Jul 3, 2023
High max 6.5

ELSA-2023-12561 2 CVEs

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.13-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support up…

Jul 3, 2023
High max 6.5

ELSA-2023-25546 2 CVEs

Important: olcne security update (Oracle Linux 8)

[1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x

Jul 3, 2023
Low max 3.9

ELSA-2023-3944 1 CVE 1 exploited

Low: open-vm-tools security and bug fix update (Oracle Linux 7)

[11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

Jun 30, 2023
Medium max 5.5

ELSA-2023-3840 1 CVE

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-18.0.1] - Bumped release to add correct changelog entry. Version 3.26.0-18 fixes CVE-2020-24736 [3.26.0-18] - Fixed CVE-2022-24736

Jun 30, 2023
Medium

ELSA-2023-3839 2 CVEs

Moderate: libssh security update (Oracle Linux 8)

[0.9.6-10] - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 [0.9.6-9] - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 [0.9.6-8] - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#21897…

Jun 29, 2023
Medium max 5.5

ELSA-2023-3827 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-28] - Fix CVE-2022-48281 - Resolves: CVE-2022-48281

Jun 29, 2023
High max 7.5

ELSA-2023-3741 1 CVE

Important: c-ares security update (Oracle Linux 7)

[1.10.0-3.1] - Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]

Jun 22, 2023
Medium max 5.5

ELSA-2023-3715 1 CVE

Moderate: libvirt security update (Oracle Linux 9)

[9.0.0-10.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [9.0.0-10.2.el9_2] - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700, rhbz#2208596)

Jun 22, 2023
Medium max 7.2

ELSA-2023-3714 2 CVEs

Moderate: postgresql security update (Oracle Linux 9)

[13.11-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35420628] [13.11-1] - Update to 13.11 - Resolves: #2207935

Jun 22, 2023
Medium max 7.5

ELSA-2023-3722 5 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 9)

[3.0.7-16.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.7-16] - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz#2211396 [1:3.0.7-15.1] - Re-enable DH…

Jun 22, 2023
High max 8.8

ELSA-2023-3661 1 CVE

Important: texlive security update (Oracle Linux 8)

[9:20200406-26] - Resolves: #2209872, CVE-2023-32700

Jun 21, 2023
Medium max 6.8

ELSA-2023-3711 11 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-8] - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2022-48281 - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 CVE-20…

Jun 21, 2023
Medium max 7.5

ELSA-2023-3725 1 CVE

Moderate: less security update (Oracle Linux 9)

[590-2] - Fix CVE-2022-46663 - Resolves: CVE-2022-46663

Jun 21, 2023
High max 7.5

ELSA-2023-3593 5 CVEs

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 8)

[7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211876 [7.0.106-2] - Update to .NET SDK 7.0.106 and Runtime 7.0.6…

Jun 17, 2023
High

ELSA-2023-3589 2 CVEs

Important: firefox security update (Oracle Linux 9)

[102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.12.0-1] - Update to 102.12.0 build1

Jun 17, 2023
High

ELSA-2023-3587 2 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1

Jun 17, 2023
High max 7.5

ELSA-2023-3585 1 CVE

Important: python3.11 security update (Oracle Linux 9)

[3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Jun 17, 2023
High max 7.5

ELSA-2023-3592 5 CVEs

Important: .NET 7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211877 [7.0.106-1] - Update to .NET SDK 7.0.106 and Runtime 7.0.6…

Jun 17, 2023
High max 7.5

ELSA-2023-3582 4 CVEs

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212378 [6.0.117-2] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190262

Jun 16, 2023
High max 7.8

ELSA-2023-12394 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.320.7] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Z…

Jun 15, 2023
High max 7.5

ELSA-2023-3594 1 CVE

Important: python3.11 security update (Oracle Linux 8)

[3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Jun 15, 2023
High

ELSA-2023-3588 2 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1

Jun 15, 2023
High max 7.5

ELSA-2023-3584 1 CVE

Important: c-ares security update (Oracle Linux 8)

[1.13.0-6.1] - Resolves: rhbz#2209516 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.8.0.z]

Jun 15, 2023
High

ELSA-2023-3590 2 CVEs

Important: firefox security update (Oracle Linux 8)

[102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1

Jun 15, 2023
High max 7.5

ELSA-2023-3591 1 CVE

Important: python3 security update (Oracle Linux 8)

[3.6.8-51.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-51.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Jun 15, 2023
High max 7.5

ELSA-2023-3581 4 CVEs

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212379 [6.0.117-1] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190264

Jun 15, 2023
High max 7.5

ELSA-2023-3586 4 CVEs

Important: nodejs security update (Oracle Linux 9)

[1:16.19.1-2] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 [1:16.19.1-1] - Rebase to 16.19.1 - Resolves: rhbz#2153714 - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-2…

Jun 15, 2023
High max 7.5

ELSA-2023-3577 4 CVEs

Important: 18 security update (Oracle Linux 9)

nodejs [1:18.14.2-3] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067

Jun 15, 2023
High max 7.5

ELSA-2023-3595 1 CVE

Important: python3.9 security update (Oracle Linux 9)

[3.9.16-1.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Jun 15, 2023
High

ELSA-2023-3579 2 CVEs

Important: firefox security update (Oracle Linux 7)

[102.12.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1

Jun 14, 2023
High max 7.8

ELSA-2023-12412 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.320.7.el7] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Ma…

Jun 13, 2023
High max 7.8

ELSA-2023-12413 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.4.17-2136.320.7.el8] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Ma…

Jun 13, 2023
Medium max 8.6

ELSA-2023-0752 2 CVEs

Moderate: grub2 security update (Oracle Linux 9)

[2.06-46.0.4.el9_1.3] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] - Fix CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986] - Re…

Jun 13, 2023
High max 7.8

ELSA-2023-12393 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-102.110.5] - RISC-V: Fix up a cherry-pick warning in setup_vm_final() (Alexandre Ghiti) - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) - riscv: mm: remove redundant parameter of create_fdt_early…

Jun 13, 2023
High max 7.5

ELSA-2023-3559 1 CVE

Important: c-ares security update (Oracle Linux 9)

[1.17.1-5.1] - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]

Jun 13, 2023
High max 7.5

ELSA-2023-3556 1 CVE

Important: python3 security update (Oracle Linux 7)

[3.6.8-19.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-19] - Security fix for CVE…

Jun 12, 2023
High max 7.5

ELSA-2023-3555 1 CVE

Important: python security update (Oracle Linux 7)

[2.7.5-93.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-93] - Fix for CVE-2023-24329 Resolves: rhbz#2173917

Jun 12, 2023
High

ELSA-2023-3563 2 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.12.0-1] - Update to 102.12.0 build1

Jun 12, 2023
High max 8.8

ELSA-2023-3220 7 CVEs

Important: firefox security update (Oracle Linux 8)

[102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1

Jun 8, 2023