Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High

ELSA-2023-12312 0 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Apr 25, 2023
High

ELSA-2023-12311 0 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Apr 25, 2023
High

ELSA-2023-12314 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12316 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12315 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High

ELSA-2023-12317 0 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Apr 25, 2023
High max 7.4

ELSA-2023-1909 7 CVEs

Important: java-1.8.0-openjdk security and bug fix update (Oracle Linux 9)

[1.8.0.372.b07-1.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Reintrod…

Apr 25, 2023
High max 7.8

ELSA-2023-1930 1 CVE

Important: emacs security update (Oracle Linux 8)

[1:26.1-7.1] - Fix ob-latex.el command injection vulnerability (#2180585)

Apr 24, 2023
High max 7.4

ELSA-2023-1875 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 7)

[1:11.0.19.0.7-1.0.1] - link atomic for ix86 build [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for p…

Apr 20, 2023
High max 7.4

ELSA-2023-1898 7 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-fri…

Apr 20, 2023
High max 8.8

ELSA-2023-1919 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185740

Apr 20, 2023
High max 7.4

ELSA-2023-1895 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 8)

[1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-…

Apr 20, 2023
High max 7.4

ELSA-2023-1880 7 CVEs

Important: java-11-openjdk security update (Oracle Linux 9)

[11.0.19.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to…

Apr 20, 2023
High max 8.8

ELSA-2023-1918 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185744

Apr 20, 2023
High max 7.4

ELSA-2023-1879 7 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 9)

[17.0.7.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add…

Apr 20, 2023
High max 8.8

ELSA-2023-1806 11 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1802 11 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1809 11 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1

Apr 18, 2023
High max 8.8

ELSA-2023-1791 8 CVEs

Important: firefox security update (Oracle Linux 7)

[102.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - U…

Apr 17, 2023
High max 7.8

ELSA-2023-12255 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.318.7.1] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pmu: O…

Apr 17, 2023
High max 7.8

ELSA-2023-12256 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.318.7.1.el7] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pm…

Apr 17, 2023
High max 8.8

ELSA-2023-1787 8 CVEs

Important: firefox security update (Oracle Linux 8)

[102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2

Apr 14, 2023
High max 8.8

ELSA-2023-1786 8 CVEs

Important: firefox security update (Oracle Linux 9)

[102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2

Apr 14, 2023
High max 8.6

ELSA-2023-1743 7 CVEs

Important: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:14.21.3-1] - Rebase to 14.21.3 Resolves: rhbz#2153712 Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900 Resolves: CVE-2022-4904

Apr 12, 2023
High max 7.8

ELSA-2023-1703 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 9)

- [5.14.0-162.23.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.g…

Apr 12, 2023
Medium max 9.1

ELSA-2023-1696 2 CVEs

Moderate: haproxy security update (Oracle Linux 9)

[2.4.17-3.2] - Reject empty http header field names (CVE-2023-25725, #2174174) [2.4.17-3.1] - Refuse interim responses with end-stream flag set (CVE-2023-0056, #2174172)

Apr 11, 2023
Medium max 6.5

ELSA-2023-1701 1 CVE

Moderate: curl security update (Oracle Linux 9)

[7.76.1-19.el9_1.2] - fix HTTP multi-header compression denial of service (CVE-2023-23916)

Apr 11, 2023
Medium max 3.7

ELSA-2023-1693 2 CVEs

Moderate: postgresql security update (Oracle Linux 9)

[13.10-1] - Update to 13.10 - Resolves: #2114734

Apr 11, 2023
High max 7.8

ELSA-2023-12242 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.524.5] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource watchdo…

Apr 10, 2023
High max 7.8

ELSA-2023-12243 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.524.5.el7] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4.el7] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource…

Apr 10, 2023
High max 9.8

ELSA-2023-1673 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-51.5.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.5] - Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite an…

Apr 7, 2023
High max 9.8

ELSA-2023-1670 1 CVE

Important: httpd and mod_http2 security update (Oracle Linux 9)

httpd [2.4.53-7.0.1.5] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.5] - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy mod_http2 [1.15.19-3.5] - Resolves: #2177751 - CVE-2023-256…

Apr 6, 2023
High max 9.8

ELSA-2023-1593 1 CVE

Important: httpd security update (Oracle Linux 7)

[2.4.6-98.0.3] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850] - mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690] [2.4.6-98.0.1] - replace index.html with Oracle's index pag…

Apr 5, 2023
High max 7.9

ELSA-2023-1566 4 CVEs 2 exploited

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-425.19.2_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Apr 5, 2023
Medium max 3.7

ELSA-2023-1576 2 CVEs

Moderate: postgresql:13 security update (Oracle Linux 8)

postgresql [13.10-1] - Resolves: #2173598 - Update to 13.10

Apr 5, 2023
Medium max 7.5

ELSA-2023-1583 6 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.14.2-2] - Provide simduft [1:18.14.2-1] - Rebase to 18.14.2 - Resolves: #2178087 - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920

Apr 5, 2023
Medium max 8.6

ELSA-2023-1582 8 CVEs

Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:16.19.1-1] - Rebase to 16.19.1 Resolves: rhbz#2153713 Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 Resolves: CVE-2022-25881 CVE-2022-4904 nodejs-nodemon [2.0.20-3] - Patch bundled glob-parent Resolves: CVE-202…

Apr 5, 2023
High max 9.8

ELSA-2023-12235 1 CVE

Important: pcs security update (Oracle Linux 9)

[0.11.3-4.el9_1.3] - Fixed a vulnerability in pcs-web-ui-node-modules - Resolves: rhbz#2179900

Apr 5, 2023
High max 6.6

ELSA-2023-12232 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.73.2] - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095} - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074…

Apr 4, 2023
High max 7.8

ELSA-2023-1594 1 CVE

Important: tigervnc and xorg-x11-server security update (Oracle Linux 7)

tigervnc [1.8.0-25] - CVE fix for: CVE-2023-1393 Resolves: bz#2180291 xorg-x11-server [1.20.4-23] - CVE fix for: CVE-2023-1393 (#2180290)

Apr 4, 2023