Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

367 results · Clear filters · Feed

High max 8.8

ELSA-2023-0902 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170007

Feb 22, 2023
High max 8.8

ELSA-2023-0903 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170000

Feb 22, 2023
High max 8.8

ELSA-2023-0016 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153735

Jan 5, 2023
High max 8.8

ELSA-2023-0021 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153738

Jan 4, 2023
Medium max 7.8

ELSA-2022-8267 31 CVEs 1 exploited

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-162.6.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Nov 22, 2022
Medium max 8.6

ELSA-2022-7683 26 CVEs 1 exploited

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-425.3.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7340 3 CVEs 2 exploited

Moderate: php-pear security update (Oracle Linux 7)

[1:1.9.4-23] - update Archive_Tar to 1.4.14 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949

Nov 3, 2022
Medium max 8.8

ELSA-2022-6540 1 CVE 1 exploited

Moderate: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1] - Update to 2.36.7 Related: #2123429

Sep 22, 2022
High max 7.5

ELSA-2022-9828 5 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

Sep 22, 2022
High max 7.5

ELSA-2022-9830 6 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-2.52.3.el8] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: …

Sep 21, 2022
High max 7.5

ELSA-2022-9829 5 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

Sep 21, 2022
Medium max 8.8

ELSA-2022-6634 1 CVE 1 exploited

Moderate: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1] - Update to 2.36.7 Related: #2123430

Sep 21, 2022
High max 7.5

ELSA-2022-9827 6 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-2.52.3] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: Add …

Sep 21, 2022
Medium max 7.8

ELSA-2022-6542 3 CVEs 2 exploited

Moderate: php:7.4 security update (Oracle Linux 8)

php-pear [1:1.10.13-1] - update PEAR to 1.10.13 - update Archive_Tar to 1.4.14

Sep 16, 2022
High max 7.8

ELSA-2022-9667 3 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.65.1] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33825689] {CVE-2022-0492} - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi) [Orabug: 34091904] - ocfs2: dlmfs: fix error handling of user_dlm_destroy_l…

Aug 2, 2022
High max 7.8

ELSA-2022-4642 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.66.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

May 19, 2022
Medium max 8.8

ELSA-2022-1777 30 CVEs 2 exploited

Moderate: webkit2gtk3 security, bug fix, and enhancement update (Oracle Linux 8)

[2.34.6-1] - Update to 2.34.6 Related: #1985042 [2.34.5-1] - Update to 2.34.5 - Related: #1985042 [2.34.4-1] - Update to 2.34.4 - Resolves: #1985042 [2.32.4-1] - Update to 2.32.4 - Related: #1985042 - Resolves: #2006429

May 17, 2022
High max 6.4

ELSA-2022-9348 10 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.62.3] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679806] {CVE-2021-0920} - fs: add fget_many() and fput_many() (Jens Axboe) [Orabug: 33679806] - af_unix: fix garbage collect vs MSG_PEEK (Miklos Sze…

May 3, 2022
High max 7.8

ELSA-2022-9313 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.512.6] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initialize re…

Apr 25, 2022
High max 7.8

ELSA-2022-9314 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.512.6.el7] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initializ…

Apr 25, 2022
High max 7.8

ELSA-2022-9273 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 7.8

ELSA-2022-9274 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 7.8

ELSA-2022-9245 10 CVEs 2 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.305.5.3] - bpf: fix out-of-tree module build (Alan Maguire) [Orabug: 33973548] - ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal) [Orabug: 33973543] - Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()'…

Mar 23, 2022
High max 7.8

ELSA-2022-9244 10 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.305.5.3] - bpf: fix out-of-tree module build (Alan Maguire) [Orabug: 33973548] - ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal) [Orabug: 33973543] - Revert 'btrfs: inode: refactor the parameters of insert_reserved_file_extent()'…

Mar 23, 2022
High max 9.8

ELSA-2022-0850 11 CVEs 2 exploited

Important: thunderbird security update (Oracle Linux 7)

[91.7.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.7.0-2] - Update to 91.7.0 build2 [91.7.0-1] - Update to 91.7.0 build1

Mar 14, 2022
High max 9.8

ELSA-2022-0845 11 CVEs 2 exploited

Important: thunderbird security update (Oracle Linux 8)

[91.7.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.7.0-2] - Update to 91.7.0 build2 [91.7.0-1] - Update to 91.7.0 build1

Mar 14, 2022
High max 7.8

ELSA-2022-0825 8 CVEs 3 exploited

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-348.20.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Mar 11, 2022
High max 7.8

ELSA-2022-9213 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.6.el7] - lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann) [Orabug: 33942242] {CVE-2022-0847}

Mar 10, 2022
High max 7.8

ELSA-2022-9210 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.6] - lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann) [Orabug: 33942242] {CVE-2022-0847}

Mar 10, 2022
Critical max 9.8

ELSA-2022-0824 10 CVEs 2 exploited

Critical: firefox security and bug fix update (Oracle Linux 7)

[91.7.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.7.0-3] - Update to 91.7.0 buil…

Mar 10, 2022
High max 7.8

ELSA-2022-9211 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.304.4.5] - lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann) [Orabug: 33942329] {CVE-2022-0847} - bpf: Disallow unprivileged bpf by default (Pawan Gupta) [Orabug: 33942374]

Mar 10, 2022
High max 7.8

ELSA-2022-9212 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.304.4.5] - lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann) [Orabug: 33942329] {CVE-2022-0847} - bpf: Disallow unprivileged bpf by default (Pawan Gupta) [Orabug: 33942374]

Mar 10, 2022
Critical max 9.8

ELSA-2022-0818 10 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[91.7.0-3.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.7.0-3] - Update to 91.7.0 build3 [91.7.0-2] - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 [91.7.0-1…

Mar 10, 2022
High max 6.9

ELSA-2022-9177 2 CVEs 1 exploited

Important: jquery-ui security update (Oracle Linux 7)

[1.10.4.custom-4.0.1] - Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 [Orabug: 33869588] [1.10.4.custom-4] - removed %%defattr from specfile - removed Group from specfile - removed BuildRoot from specfiles * Tue May 10 2016…

Mar 1, 2022
High max 7.8

ELSA-2022-9179 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.2] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33876756] {CVE-2022-0492} - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed) [Orabug: 33876755] [4.14.35-2047.511.5.1] - …

Feb 28, 2022
High max 7.8

ELSA-2022-9180 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.2.el7] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33876756] {CVE-2022-0492} - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed) [Orabug: 33876755] [4.14.35-2047.511.5.1…

Feb 28, 2022
High max 7.8

ELSA-2022-0620 9 CVEs 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.59.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Feb 23, 2022
High max 8.4

ELSA-2022-9148 6 CVEs 2 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.304.4.1] - Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33832625] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492} [5.4.17-2136.304.4] …

Feb 14, 2022
High max 8.4

ELSA-2022-9147 6 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.304.4.1] - Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33832625] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492} [5.4.17-2136.304.4] …

Feb 14, 2022
High max 7.8

ELSA-2022-9142 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.302.7.2.3] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832574] {CVE-2022-0492}

Feb 9, 2022