Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • High max 9.8
    ELSA-2023-0611 2 CVEs

    Important: git security update (Oracle Linux 9)

    [2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162069

  • High max 6.5
    ELSA-2023-0608 1 CVE

    Important: thunderbird security update (Oracle Linux 9)

    [102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2

  • High max 9.8
    ELSA-2023-0530 1 CVE

    Important: libksba security update (Oracle Linux 7)

    [1.3.0-7] - Fix for CVE-2022-47629 (#2161571)

  • Medium max 5.3
    ELSA-2023-0208 2 CVEs

    Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 8)

    [1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: rhbz#2163595 [1:1.8.0.362.b08-2] - Update to shenandoah-jdk8u352-b08 (GA…

  • High max 8.8
    ELSA-2023-0463 8 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

  • Medium
    ELSA-2023-0446 3 CVEs

    Moderate: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

    golang [1.18.9-1] - Update to Go 1.18.9 - Add big-endian.patch - Increase GO_TEST_TIMEOUT_SCALE due to a Brew issue - Add do-not-reuse-far-trampolines.patch - Resolves: rhbz#2149313 [1.18.7-2] - Fix version mismatch from previous rebase - Related: rhbz#213671…

  • Medium max 5.3
    ELSA-2023-0210 2 CVEs

    Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 9)

    [1.8.0.362.b09-2.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: r…

  • Medium max 5.5
    ELSA-2023-0336 1 CVE

    Moderate: systemd security update (Oracle Linux 9)

    [250-12.0.2.el9_1.1] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveI…

  • High max 8.8
    ELSA-2023-0476 8 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

  • High
    ELSA-2023-0399 2 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.83.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.83.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

  • High max 8.8
    ELSA-2023-0456 8 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1

  • Medium max 8.6
    ELSA-2023-0049 2 CVEs

    Moderate: grub2 security update (Oracle Linux 8)

    [2.02-142.0.3.el8_7.1] - Fix CVE-2022-3775, CVE-2022-2601 [Orabug: 34867710] - Bump SBAT metadata for grub to 3 [Orabug: 34871758] - Enable signing on aarch64 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas…

  • High max 7.8
    ELSA-2023-0334 6 CVEs

    Important: kernel security and bug fix update (Oracle Linux 9)

    [5.14.0-162.12.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  • Medium max 9.1
    ELSA-2023-0343 1 CVE

    Moderate: libtasn1 security update (Oracle Linux 9)

    [4.16.0-9] - Resolves: rhbz#2140602

  • High max 8.8
    ELSA-2023-0296 8 CVEs

    Important: firefox security update (Oracle Linux 7)

    [102.7.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add …

  • Medium max 5.3
    ELSA-2023-0203 2 CVEs

    Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

    [1:1.8.0.362.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obs…

  • High max 7.8
    ELSA-2023-0291 1 CVE

    Important: sudo security update (Oracle Linux 7)

    [1.8.23-10.3] RHEL 7.9.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161222 [1.8.23-10.2] - RHEL 7.9.Z ERRATUM - defaults use_pty plus SELinux ROLE in user specification breaks terminal Resolves: rhbz#…

  • High max 8.1
    ELSA-2023-12069 4 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High max 8.1
    ELSA-2023-12067 4 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High max 8.8
    ELSA-2023-0403 1 CVE

    Important: sssd security and bug fix update (Oracle Linux 7)

    [1.16.5-10.0.3] - Revert Redhat's change of disallowing duplicated incomplete gid when 'id_provider=ldap' is used, which caused regression in AD environment. [Orabug: 29286774] [Doc ID 2605732.1] [1.16.5-10.15] - Resolves: rhbz#2149703 - smartcards: special c…

  • Medium max 5.3
    ELSA-2023-0195 2 CVEs

    Moderate: java-11-openjdk security and bug fix update (Oracle Linux 7)

    [1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Upd…

  • High max 8.1
    ELSA-2023-12066 4 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • Medium max 6.8
    ELSA-2023-0402 2 CVEs

    Moderate: bind security update (Oracle Linux 7)

    [32:9.11.4-26.P2.13] - Tighten cache protection against record from forwarders (CVE-2021-25220) [32:9.11.4-26.P2.12] - Include test of forwarders (CVE-2021-25220) [32:9.11.4-26.P2.11] - Prevent excessive resource use while processing large delegations. (CVE-2…

  • High max 8.1
    ELSA-2023-12068 4 CVEs

    Important: GraalVM Security update (Oracle Linux 7)

  • High max 8.1
    ELSA-2023-12070 4 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High max 8.1
    ELSA-2023-12072 4 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High max 8.8
    ELSA-2023-0379 3 CVEs

    Important: libXpm security update (Oracle Linux 8)

    [3.5.12-9] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2161800) - Fix CVE-2022-44617: runaway loop with width of 0 (#2161808) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160238)

  • High max 8.8
    ELSA-2023-0288 8 CVEs

    Important: firefox security update (Oracle Linux 8)

    [102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage t…

  • High max 8.1
    ELSA-2023-12071 4 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • High max 8.1
    ELSA-2023-12073 4 CVEs

    Important: GraalVM Security update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2023-0337 1 CVE

    Moderate: expat security update (Oracle Linux 9)

    [2.4.9-1.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680

  • High max 8.8
    ELSA-2023-0285 8 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9

  • Medium max 5.5
    ELSA-2023-0302 7 CVEs

    Moderate: libtiff security update (Oracle Linux 9)

    [4.4.0-5] - Bump release - Resolves: CVE-2022-2953 [4.4.0-4] - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 [4.4.0-3] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 - Resolves: #2106768

  • High max 8.1
    ELSA-2023-12074 4 CVEs

    Important: GraalVM Security update (Oracle Linux 9)

  • Medium
    ELSA-2023-0304 4 CVEs

    Moderate: libreoffice security update (Oracle Linux 9)

    [7.1.8.1-8.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-8] - Resolves: rhbz#2134759 Untrusted Macros - Resolves: rhbz#2134757 Weak Mas…

  • Medium
    ELSA-2023-0328 3 CVEs

    Moderate: go-toolset and golang security and bug fix update (Oracle Linux 9)

    golang [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le linker issue - Resolves: rhbz#2144547 - Resolves: rhbz#2149311 go-toolset [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le …

  • High max 8.1
    ELSA-2023-12076 4 CVEs

    Important: GraalVM Security update (Oracle Linux 9)

  • High max 8.8
    ELSA-2023-0383 3 CVEs

    Important: libXpm security update (Oracle Linux 9)

    [3.5.13-8] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160242)

  • Medium
    ELSA-2023-0303 1 CVE

    Moderate: usbguard security update (Oracle Linux 9)

    [1.0.0-10.2] - Fix dbus memory leak on connection failure - Fix unauthorized access via D-bus Resolves: rhbz#2127877

  • Medium max 9.8
    ELSA-2023-0321 4 CVEs

    Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update (Oracle Linux 9)

    nodejs [1:16.18.1-3] - Update sources of undici WASM blobs Resolves: rhbz#2151617 [1:16.18.1-2] - Add back libs and v8-devel subpackages - Related: RHBZ#2121126 - Record previously fixed CVE - Resolves: CVE-2021-44906 [1:16.18.1-1] - Rebase + CVEs - Resolves:…