Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Medium max 6.6
    ELSA-2023-2786 1 CVE

    Moderate: wayland security, bug fix, and enhancement update (Oracle Linux 8)

    [1.21.0-1] - wayland 1.21.0 (rhbz#2137625)

  • High max 8.8
    ELSA-2023-3108 1 CVE

    Important: webkit2gtk3 security update (Oracle Linux 8)

    [2.38.5-1.3] - Restore libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.2] - Disable libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185741 [2.38.5-1] - Upd…

  • Medium
    ELSA-2023-2810 1 CVE

    Moderate: poppler security update (Oracle Linux 8)

    [20.11.0-6] - Check for overflow when computing number of symbols - in JBIG2 text region - Resolves: #2126361

  • Medium max 8.8
    ELSA-2023-2830 6 CVEs

    Moderate: tigervnc security and bug fix update (Oracle Linux 8)

    [1.12.0-15] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180305 [1.12.0-14] - SELinux: allow vncsession create .vnc directory Resolves: bz#2164704 [1.12.0-13] - Add sanity check when clea…

  • High max 7.5
    ELSA-2023-3107 1 CVE

    Important: libreswan security update (Oracle Linux 8)

    [4.9-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-3] - Fix CVE-2023-30570: Malicious IKEv1 Aggressive Mode packets can crash libreswan - Resolves: rhbz#2187179

  • Medium max 9.8
    ELSA-2023-2903 5 CVEs

    Moderate: php:7.4 security update (Oracle Linux 8)

    libzip [1.6.1-1] - update to 1.6.1 - enable lzma support [1.5.2-1] - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available [1.5.1-1] - update to 1.5.1 - drop dependency on zlib-devel and…

  • Medium max 7.0
    ELSA-2023-2800 1 CVE

    Moderate: sysstat security and bug fix update (Oracle Linux 8)

    [11.7.3-9.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683071] [11.7.3-9] - add -f flag to force fdatasync() after sa file update (#2153192) [11.7.3-8] - arithmetic overflow in allocate_structures() on 32 bit systems (CVE…

  • Medium max 5.5
    ELSA-2023-2873 1 CVE

    Moderate: gcc-toolset-12-binutils security update (Oracle Linux 8)

    [2.38-17] - Fix an illegal memory access parsing a corrupt ELF file. (#2153220)

  • Medium max 7.5
    ELSA-2023-2893 1 CVE

    Moderate: python-mako security update (Oracle Linux 8)

    [1.0.6-14] - Fix CVE-2022-40023 (#2128977)

  • High max 8.8
    ELSA-2023-2834 22 CVEs

    Important: webkit2gtk3 security and bug fix update (Oracle Linux 8)

    [2.38.5-1] - Update to 2.38.5 Related: #2127468 [2.38.4-1] - Update to 2.38.4 Related: #2127468 [2.38.3-1] - Update to 2.38.3 Related: #2127468 [2.38.2-1] - Update to 2.38.2 Related: #2127468 [2.38.1-2] - Fix crashes on aarch64 Enable WPE renderer Related: #2…

  • Medium max 7.5
    ELSA-2023-2870 3 CVEs

    Moderate: freeradius:3.0 security update (Oracle Linux 8)

    [3.0.20-14] - Fix defect found by Covscan Resolves: #2151704 [3.0.20-13] - Fix multiple CVEs - Add rpminspect configuration Resolves: #2151702 Resolves: #2151704 Resolves: #2151706

  • Medium max 6.5
    ELSA-2023-2898 4 CVEs

    Moderate: libtar security update (Oracle Linux 8)

    [1.2.20-17] - fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640) [1.2.20-16] - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646) - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33…

  • Medium max 5.3
    ELSA-2023-3002 1 CVE

    Moderate: bind security and bug fix update (Oracle Linux 8)

    [32:9.11.36-8] - Correct regression preventing bind-dyndb-ldap build (#2133889) [32:9.11.36-7] - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) [32:9.11.36-6] - Prevent freeing zone during statistics rendering (#2101712)

  • Medium max 7.8
    ELSA-2023-2863 1 CVE

    Moderate: ctags security update (Oracle Linux 8)

    [5.8-23] - CVE-2022-4515, arbitrary code execution issue Resolves: rhbz#2153787

  • Medium max 6.5
    ELSA-2023-2969 2 CVEs

    Moderate: net-snmp security and bug fix update (Oracle Linux 8)

    [5.8-27.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 34905643] [1:5.8-27] - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable s…

  • Medium max 6.5
    ELSA-2023-3095 1 CVE

    Moderate: libreswan security and bug fix update (Oracle Linux 8)

    [4.9-2.0.1.2] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-2.2] - Update libreswan-4.9-2176248-authby-rsasig.patch [4.9-2.1] - Resolves: rhbz#2187647 authby=rsasig fails in FIPS policy [4.9-2] - Fix CVE-2023-23009: remote DoS via crafted TS…

  • Medium max 8.8
    ELSA-2023-2806 9 CVEs

    Moderate: xorg-x11-server security and bug fix update (Oracle Linux 8)

    [1.20.11-15] - Rebuild for the missing debuginfo Related: rhbz#2169522 [1.20.11-14] - Fix xvfb-run script with --listen-tcp Resolves: rhbz#2169522 [1.20.11-13] - Fix CVE-2023-0494 (#2166977) [1.20.11-12] - Follow-up fix for CVE-2022-46340 (#2151774) [1.20.11-…

  • Low
    ELSA-2023-3018 1 CVE

    Low: libarchive security update (Oracle Linux 8)

    [3.3.3-5] - Fix for CVE-2022-36227

  • Medium max 7.5
    ELSA-2023-2792 4 CVEs

    Moderate: bind9.16 security and bug fix update (Oracle Linux 8)

    [32:9.16.23-0.14] - Handle subtle difference between upstream and rhel (CVE-2022-3094) [32:9.16.23-0.13] - Prevent flooding with UPDATE requests (CVE-2022-3094) - Handle RRSIG queries when server-stale is active (CVE-2022-3736) - Fix crash when soft-quota is …

  • Medium
    ELSA-2023-2801 1 CVE

    Moderate: frr security and bug fix update (Oracle Linux 8)

    [7.5.1-7.0.1] - Fix POSTIN scriptlet [Orabug: 34712485] [7.5.1-7] - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service [7.5.1-6] - Resolves: #1939516 - frr service cannot reload itself, due to exe…

  • Medium max 7.8
    ELSA-2023-3042 1 CVE

    Moderate: emacs security and bug fix update (Oracle Linux 8)

    [1:26.1-9] - Fix MH-E mail composition with GNU Mailutils (#1991156) [1:26.1-8] - Fix ctags local command execute vulnerability (#2149386)

  • High max 7.5
    ELSA-2023-3263 2 CVEs

    Important: git security update (Oracle Linux 7)

    [1.8.3.1-25] - Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365

  • High max 5.9
    ELSA-2023-12348 1 CVE

    Important: python3-setuptools security update (Oracle Linux 7)

    [39.2.0-10.0.1] - Back port fix for CVE-2022-40897 [Orabug: 35034581]

  • High max 5.7
    ELSA-2023-12349 1 CVE

    Important: python-pip security update (Oracle Linux 7)

    [9.0.3-8.0.3] - CVE-2021-3572 [Orabug: 35240686]

  • Medium max 7.5
    ELSA-2023-2802 14 CVEs

    Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2023-2758 14 CVEs

    Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 8.5
    ELSA-2023-2859 4 CVEs

    Moderate: git security and bug fix update (Oracle Linux 8)

  • Low
    ELSA-2023-2987 1 CVE

    Low: samba security, bug fix, and enhancement update (Oracle Linux 8)

  • High max 8.1
    ELSA-2023-2951 39 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 6.7
    ELSA-2023-2757 7 CVEs

    Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)

    hivex libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key para…

  • Medium max 7.5
    ELSA-2023-2764 3 CVEs

    Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2023-2763 3 CVEs

    Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

  • High max 7.5
    ELSA-2023-3245 5 CVEs

    Important: git security update (Oracle Linux 9)

    [2.39.3-1] - Update to 2.39.3 - Resolves: #2188352, #2188361, #2189976, #2189977

  • High
    ELSA-2023-3145 1 CVE

    Important: apr-util security update (Oracle Linux 7)

    [1.5.2-6.0.1.1] - Rebuild bumping release [1.5.2-6.1] - Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64

  • High max 8.8
    ELSA-2023-3143 7 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1

  • High max 8.8
    ELSA-2023-3137 7 CVEs

    Important: firefox security update (Oracle Linux 7)

    [102.11.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - …

  • High max 8.8
    ELSA-2023-3151 7 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.11.0-1] - Update to 102.11.0 build1

  • Medium max 5.9
    ELSA-2023-2650 1 CVE

    Moderate: curl security update (Oracle Linux 9)

    [7.76.1-23.el9_2.1] - fix FTP too eager connection reuse (CVE-2023-27535) [7.76.1-23] - fix HTTP multi-header compression denial of service (CVE-2023-23916) [7.76.1-22] - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) [7.76.1-21…

  • High max 8.8
    ELSA-2023-2653 1 CVE

    Important: webkit2gtk3 security update (Oracle Linux 9)

    [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185745 [2.38.5-1] - Update to 2.38.5 Related: #2127467 [2.38.4-1] - Update to 2.38.4 Related: #2127467 [2.38.3-1] - Update to 2.38.3 Related: #2127467 [2.38.2-1] - Update to 2.38.2 Related: #2127467 [2.3…

  • High max 9.8
    ELSA-2023-2626 4 CVEs

    Important: emacs security update (Oracle Linux 9)

    [1:27.2-8.1] - Fix etags local command injection vulnerability (#2184369) - Fix htmlfontify.el command injection vulnerability (#2184368) - Fix ruby-mode.el local command injection vulnerability (#2184367) - Fix ob-latex.el command injection vulnerability (#2…