Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 7.8

ELSA-2023-0958 1 CVE

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-20.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-20] - CVE-2022-47024 vim: no check if the return value of XChangeGC() is NULL [2:8.2.2637-19] - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vi…

Feb 28, 2023
Medium max 5.9

ELSA-2023-0952 1 CVE

Moderate: python-setuptools security update (Oracle Linux 9)

[53.0.0-10.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559

Feb 28, 2023
Medium max 9.0

ELSA-2023-0970 3 CVEs

Moderate: httpd security and bug fix update (Oracle Linux 9)

[2.4.53-7.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.1] - Resolves: #2165975 - prevent sscg creating /dhparams.pem - Resolves: #2165970 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #21…

Feb 28, 2023
Medium max 5.5

ELSA-2023-0959 1 CVE

Moderate: tar security update (Oracle Linux 9)

[2:1.34-6] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303

Feb 28, 2023
Medium max 7.5

ELSA-2023-0953 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.14-1.2] - Security fix for CVE-2022-45061 Resolves: rhbz#2144072

Feb 28, 2023
Medium max 9.8

ELSA-2023-0965 5 CVEs

Moderate: php security update (Oracle Linux 9)

[8.0.27-1] - rebase to 8.0.27

Feb 28, 2023
Medium

ELSA-2023-0957 2 CVEs

Moderate: lua security update (Oracle Linux 9)

[5.4.4-2] - Resolves CVE-2021-43519 [5.4.4-1] - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 [5.4.2-7] - Fix up CVE-2022-33099 patch [5.4.2-6] - Enable gating [5.4.2-5] - apply upstream fix for CVE-2022-33099

Feb 28, 2023
Medium max 5.9

ELSA-2023-0835 1 CVE

Moderate: python-setuptools security update (Oracle Linux 8)

[39.2.0-6.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559

Feb 22, 2023
Medium max 7.5

ELSA-2023-0833 3 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-48.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-48.1] - Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061 Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072

Feb 22, 2023
Medium max 9.8

ELSA-2023-0848 5 CVEs

Moderate: php:8.0 security update (Oracle Linux 8)

php [8.0.27-1] - rebase to 8.0.27

Feb 22, 2023
Medium max 5.5

ELSA-2023-0837 1 CVE

Moderate: systemd security and bug fix update (Oracle Linux 8)

[239-68.0.2] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport upstr…

Feb 22, 2023
Medium max 9.0

ELSA-2023-0852 3 CVEs

Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)

httpd [2.4.37-51.0.1.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.1] - Resolves: #2165967 - prevent sscg creating /dhparams.pem - Resolves: #2165976 - CVE-2006-20001 …

Feb 22, 2023
High max 8.8

ELSA-2023-0902 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170007

Feb 22, 2023
Medium max 8.8

ELSA-2023-12137 1 CVE

Moderate: pcs security update (Oracle Linux 8)

[0.10.14-5.0.1] - Replace HAM-logo.png with a generic one [0.10.14-5.el8_7.2] - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt - Added license for rubygem ruby2_keywords - Resolves: rhbz#2159424

Feb 22, 2023
High max 7.5

ELSA-2023-0832 3 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-425.13.1_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Feb 22, 2023
High max 8.1

ELSA-2023-0838 1 CVE

Important: samba security update (Oracle Linux 8)

[4.16.4-4.0.1] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.16.4-4] - related: rhbz#2154369 - Add additional patch for CVE-2022-38023 [4.16.4-3] - resolves: rhbz#2154369 - Fix CVE-2022-38023 [4.16.…

Feb 22, 2023
Medium max 5.5

ELSA-2023-0842 1 CVE

Moderate: tar security update (Oracle Linux 8)

[1.30-6.1] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303

Feb 22, 2023
High max 8.8

ELSA-2023-0903 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170000

Feb 22, 2023
High max 8.8

ELSA-2023-0817 13 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

Feb 21, 2023
High max 8.8

ELSA-2023-0812 12 CVEs

Important: firefox security update (Oracle Linux 7)

[102.8.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Upda…

Feb 21, 2023
High max 8.8

ELSA-2023-0821 13 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

Feb 20, 2023
High max 8.8

ELSA-2023-0808 12 CVEs

Important: firefox security update (Oracle Linux 8)

[102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

Feb 20, 2023
High max 8.8

ELSA-2023-0810 12 CVEs

Important: firefox security update (Oracle Linux 9)

[102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

Feb 20, 2023
High max 8.8

ELSA-2023-0824 13 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1

Feb 20, 2023
High max 8.0

ELSA-2023-12118 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Or…

Feb 14, 2023
High max 8.0

ELSA-2023-12121 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: i…

Feb 14, 2023
High max 8.0

ELSA-2023-12119 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: i…

Feb 14, 2023
High max 8.0

ELSA-2023-12117 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Or…

Feb 13, 2023
High max 7.8

ELSA-2023-12120 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure message…

Feb 13, 2023
High max 7.8

ELSA-2023-12116 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure message…

Feb 13, 2023
High max 7.8

ELSA-2023-0675 1 CVE

Important: tigervnc and xorg-x11-server security update (Oracle Linux 7)

tigervnc [1.8.0-24] - CVE fix for: CVE-2023-0494 Resolves: bz#2166532 xorg-x11-server [1.20.4-22] - CVE fix for: CVE-2023-0494 (#2166513)

Feb 9, 2023
High max 6.5

ELSA-2023-12108 5 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

libvirt [5.7.0-38.el8] - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758] - security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631} - qemu: Set de…

Feb 8, 2023
High max 7.8

ELSA-2023-0662 1 CVE

Important: tigervnc security update (Oracle Linux 8)

[1.12.0-9] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167057

Feb 8, 2023
High max 7.8

ELSA-2023-0622 1 CVE

Important: tigervnc security update (Oracle Linux 9)

[1.12.0-5] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167060

Feb 8, 2023
High max 9.8

ELSA-2023-0626 1 CVE

Important: libksba security update (Oracle Linux 9)

[1.5.1-6] - Fix for CVE-2022-47629 (#2161571)

Feb 8, 2023
High max 8.0

ELSA-2023-12109 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.71.3] - USB: core: Prevent nested device-reset calls (Alan Stern) [Orabug: 34951641] {CVE-2022-4662} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) [Orabug: 34833307] {CVE-2022-42896} {CVE-2022-42896…

Feb 7, 2023
High max 6.5

ELSA-2023-0600 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-2] - Update to 102.7.1 build2

Feb 7, 2023
High max 9.8

ELSA-2023-0610 2 CVEs

Important: git security update (Oracle Linux 8)

[2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162063

Feb 7, 2023
High max 6.5

ELSA-2023-0606 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2

Feb 7, 2023
High max 9.8

ELSA-2023-0625 1 CVE

Important: libksba security update (Oracle Linux 8)

[1.3.5-9] - Fix for CVE-2022-47629 (#2161571)

Feb 7, 2023