Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Low
    ELSA-2023-2519 1 CVE

    Low: samba security, bug fix, and enhancement update (Oracle Linux 9)

    evolution-mapi [3.40.1-5] - Related: #2131993 (Rebuild against samba 4.17) openchange [2.3-40] - Related: #2131993 (Rebuild against samba 4.17) samba [4.17.5-102.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.17.5-102] - resolves: rhb…

  • Medium max 6.5
    ELSA-2023-2444 2 CVEs

    Moderate: net-snmp security and bug fix update (Oracle Linux 9)

    [1:5.9.1-9.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.1-9] - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906) - fix memory leak when ipv6 disable set to 1 (#2151540) [1:5.9.1-8] - fix default snmpd.…

  • Medium max 5.3
    ELSA-2023-2283 2 CVEs

    Moderate: skopeo security and bug fix update (Oracle Linux 9)

    [2:1.11.2-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/3f98753) - Related: #2124478 [2:1.11.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.11.…

  • Medium max 5.3
    ELSA-2023-2253 2 CVEs

    Moderate: buildah security and bug fix update (Oracle Linux 9)

    [1.29.1-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.29.1-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/7fa17a8) - Rel…

  • Medium max 5.3
    ELSA-2023-2367 2 CVEs

    Moderate: containernetworking-plugins security and bug fix update (Oracle Linux 9)

    [1:1.2.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0 - Related: #2124478

  • Low
    ELSA-2023-2532 1 CVE

    Low: libarchive security update (Oracle Linux 9)

    [3.5.3-4] - Resolves: CVE-2022-36227

  • Medium max 7.7
    ELSA-2023-2340 10 CVEs

    Moderate: libtiff security update (Oracle Linux 9)

    [4.4.0-7] - Fix CVE-2022-3970 - Resolves: CVE-2022-3970 [4.4.0-6] - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627

  • Medium max 5.5
    ELSA-2023-2453 2 CVEs

    Moderate: libtpms security update (Oracle Linux 9)

    [0.9.1-3.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018) Resolves: rhbz#2173960 Resolves: rhbz#2173967

  • Medium max 6.5
    ELSA-2023-2487 4 CVEs

    Moderate: fwupd security and bug fix update (Oracle Linux 9)

    [1.8.10-2.0.1] - Drop pesign.service restart in postun [Orabug: 34760075] - Update signing certificate [JIRA: OLDIS-16371] - Rebuild for SecureBoot signatures [Orabug: 33801813] - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir …

  • Medium max 9.8
    ELSA-2023-2417 5 CVEs

    Moderate: 8.1 security update (Oracle Linux 9)

    php-pecl-apcu [5.1.21-1] - update to 5.1.21 for PHP 8.1 #2070040 php-pecl-rrd [2.0.3-4] - build for PHP 8.1 #2070040 php-pecl-xdebug3 [3.1.4-1] - update to 3.1.4 for PHP 8.1 #2070040 php-pecl-zip [1.20.1-1] - update to 1.20.1 for PHP 8.1 #2070040 php [8.1.14-…

  • Medium max 7.5
    ELSA-2023-2370 1 CVE

    Moderate: unbound security update (Oracle Linux 9)

    [1.16.2-3] - Fix NRDelegation attack leading to uncontrolled resource consumption (CVE-2022-3204)

  • Medium max 7.5
    ELSA-2023-2166 3 CVEs

    Moderate: freeradius security and bug fix update (Oracle Linux 9)

    [3.0.21-37] - Fix defect found by covscan Resolves: #2151705 [3.0.21-36] - Fix multiple CVEs Resolves: #2151705 Resolves: #2151703 Resolves: #2151707 [3.0.21-35] - Rebuild to add subpackages to CRB report Resolves: #2126380

  • Medium max 6.5
    ELSA-2023-2162 2 CVEs

    Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

    [7.2.0-14] - Rebuild for 9.2 release - Resolves: bz#2173590 (bugs in emulation of BMI instructions (for libguestfs without KVM)) - Resolves: bz#2156876 ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22)) [7.2.0…

  • Medium max 8.8
    ELSA-2023-2257 6 CVEs

    Moderate: tigervnc security and bug fix update (Oracle Linux 9)

    [1.12.0-13] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180309 [1.12.0-12] - SELinux: allow vncsession create .vnc directory Resolves: bz#2164703 [1.12.0-11] - Add sanity check when clea…

  • Medium
    ELSA-2023-2459 1 CVE

    Moderate: device-mapper-multipath security and bug fix update (Oracle Linux 9)

    [0.8.7-20] - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch - Change how the installation dir for kpartx_id is specified - Resolves: bz #1926147 [0.8.7-19] - Fix bugzil…

  • Medium max 5.3
    ELSA-2023-2222 1 CVE

    Moderate: conmon security and bug fix update (Oracle Linux 9)

    [2:2.1.7-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.7 - Resolves: #2173697 [2:2.1.6-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.6 - Related: #2124478 [2:2.1.5-1] - update to https://github.com/containers/co…

  • Medium
    ELSA-2023-2592 1 CVE

    Moderate: golang-github-cpuguy83-md2man security, bug fix, and enhancement update (Oracle Linux 9)

    [2.0.2-4] - fix RHEL9.2 build - thanks to Debarshi Ray - Related: #2124478 [2.0.2-3] - rebuild - Resolves: #2037812 [2.0.2-2] - limit to golang arches only - Related: #2061316 * Thu Aug 04 2022 Jindrich Novy <jnovy@redhat.com> - update to 2.0.2 - Related: #20…

  • Medium max 6.6
    ELSA-2023-2570 1 CVE

    Moderate: krb5 security, bug fix, and enhancement update (Oracle Linux 9)

    [1.20.1-8.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.20.1-8] - Fix datetime parsing in kadmin on s390x - Resolves: rhbz#2169985 [1.20.1-7] - Fix double free on kdb5_util key creation failure - Resolves: rhbz#2166603 [1.20.1-6] - …

  • High max 8.1
    ELSA-2023-2458 40 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

  • High max 6.5
    ELSA-2023-12339 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-101.103.2.1] - Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35346968] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35346963] [5.15.0-101.103.2] - uek-rpm: mod-extra: Remove mt7921e.ko from ex…

  • High
    ELSA-2023-12331 1 CVE

    Important: spacewalk-admin security update (Oracle Linux 7)

    [2.10.1-1.0.1] - Fix for CVE-2021-40348 [Orabug: 33531467] [2.10.1-1] - copy cert file instead of linking [2.8.4-1] - remove install/clean section initial cleanup - removed Group from specfile - removed BuildRoot from specfiles [2.8.3-1] - 1524221 - ship syst…

  • High max 7.5
    ELSA-2023-2122 1 CVE

    Important: libreswan security update (Oracle Linux 8)

    [4.5-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.5-1.1] - Resolves: rhbz#2187178 fix handling of IKEv1 aggressive mode packets

  • High max 7.5
    ELSA-2023-2120 1 CVE

    Important: libreswan security update (Oracle Linux 9)

    [4.6-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.6-3.1] - Resolves: rhbz#2187170 fix handling of IKEv1 aggressive mode packets

  • High max 8.1
    ELSA-2023-2127 1 CVE

    Important: samba security update (Oracle Linux 9)

    [4.16.4-103.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.16.4-103] - related: rhbz#2154372 - Add additional patches for CVE-2022-38023 [4.16.4-102] - Fix CVE-2022-38023 - resolves: rhbz#2154372

  • High max 7.8
    ELSA-2023-12323 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.74.2] - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [Orabug: 35250098] {CVE-2023-1513} - staging: rtl8712: fix use after free bugs (Dan Carpenter) [Orabug: 35212876] {CVE-2022-4095} - stag…

  • High max 5.3
    ELSA-2023-2077 1 CVE

    Important: libwebp security update (Oracle Linux 7)

    [0.3.0-11] - Added fix for mzbz#1819244

  • High max 5.3
    ELSA-2023-2076 1 CVE

    Important: libwebp security update (Oracle Linux 8)

    [1.0.0-8] - Added fix for mzbz#1819244

  • High max 7.8
    ELSA-2023-2074 1 CVE

    Important: emacs security update (Oracle Linux 9)

    [1:27.2-6.1] - Fix ob-latex.el command injection vulnerability (#2180589)

  • High max 5.3
    ELSA-2023-2078 1 CVE

    Important: libwebp security update (Oracle Linux 9)

    [1.2.0-6] - Fix tools subpackage dependency [1.2.0-4] - Added fix for mzbz#1819244

  • High max 5.5
    ELSA-2023-12298 1 CVE

    Important: cloud-init security update (Oracle Linux 8)

    [22.1-6.0.4.el8_7.2] - Fix log file permissions [Orabug: 35302985] [22.1-6.0.3.el8_7.2] - Fix CVE-2023-1786 [Orabug: 35302985]

  • High max 5.5
    ELSA-2023-12299 1 CVE

    Important: cloud-init security update (Oracle Linux 9)

    [22.1-7.0.3.el9_1] - Fix log file permission [Orabug: 35302969] [22.1-7.0.2.el9_1] - Fix CVE-2023-1786 [Orabug: 35302969]

  • Medium max 6.7
    ELSA-2023-1987 1 CVE

    Moderate: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.90.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.90.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

  • High
    ELSA-2023-12308 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12307 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12309 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High
    ELSA-2023-12306 0 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High max 7.4
    ELSA-2023-1904 7 CVEs

    Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

    [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configu…

  • High max 7.4
    ELSA-2023-1908 7 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configu…

  • High
    ELSA-2023-12313 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High
    ELSA-2023-12310 0 CVEs

    Important: GraalVM Security update (Oracle Linux 8)