Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 6.6

ELSA-2022-10034 2 CVEs

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.21.14-3] - Addresses CVE-2022-3294 & CVE-2022-3162 [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.9-2] - Fix 1.21 kubernetes version to align with last upstream release [1.4.9-1] - Resolve kubernetes…

Nov 29, 2022
High max 7.5

ELSA-2022-8643 1 CVE

Important: varnish security update (Oracle Linux 9)

[6.6.2-2.1] - Resolves: #2142095 - CVE-2022-45060 varnish: Request Forgery Vulnerability

Nov 29, 2022
High max 8.8

ELSA-2022-8637 1 CVE

Important: krb5 security update (Oracle Linux 9)

[1.19.1-24.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.19.1-24] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140970

Nov 29, 2022
High max 7.5

ELSA-2022-8649 1 CVE

Important: varnish:6 security update (Oracle Linux 8)

varnish [6.0.8-2.1] - Resolves: #2142092 - CVE-2022-45060 varnish:6/varnish: Request Forgery Vulnerability [6.0.8-2] - Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request Smuggling Vulnerability varnish-modules [0.15.0-6] - Related: …

Nov 28, 2022
High max 8.8

ELSA-2022-8638 1 CVE

Important: krb5 security update (Oracle Linux 8)

[1.18.2-22.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140967

Nov 28, 2022
High

ELSA-2022-10023 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-4.70.5.2] - Revert 'sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle' (Samasth Norway Ananda) [Orabug: 34783367] [5.15.0-4.70.5.1] - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176] [5.15.0…

Nov 26, 2022
High

ELSA-2022-10022 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-4.70.5.2] - Revert 'sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle' (Samasth Norway Ananda) [Orabug: 34783367] [5.15.0-4.70.5.1] - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176] [5.15.0…

Nov 26, 2022
High max 9.8

ELSA-2022-8561 13 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-4] - Fix for expat CVE-2022-4…

Nov 24, 2022
High max 7.8

ELSA-2022-8453 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 9)

[0.8.7-12.1] - Add 0062-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133998

Nov 24, 2022
High max 7.8

ELSA-2022-8493 1 CVE

Important: python3.9 security update (Oracle Linux 9)

[3.9.14-1.1] - Fix for CVE-2022-42919 Resolves: rhbz#2138705

Nov 24, 2022
High max 9.8

ELSA-2022-8580 13 CVEs

Important: firefox security update (Oracle Linux 9)

[102.5.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Nov 24, 2022
High max 7.5

ELSA-2022-24267 16 CVEs

Important: ol8addon security update (Oracle Linux 8)

Nov 23, 2022
High max 8.0

ELSA-2022-8560 1 CVE

Important: hsqldb security update (Oracle Linux 7)

[1:1.8.1.3-15] - Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853

Nov 22, 2022
High max 9.8

ELSA-2022-8552 13 CVEs

Important: firefox security update (Oracle Linux 7)

[102.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.5.0-1] - Update to 102.5.0 build1

Nov 22, 2022
High max 9.8

ELSA-2022-8555 13 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1

Nov 22, 2022
High max 7.8

ELSA-2022-8492 1 CVE

Important: python39:3.9 security update (Oracle Linux 8)

python39 [3.9.13-2] - Fix for CVE-2022-42919 Resolves: rhbz#2138705

Nov 22, 2022
High max 9.8

ELSA-2022-8547 13 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1

Nov 22, 2022
High max 9.8

ELSA-2022-8554 13 CVEs

Important: firefox security update (Oracle Linux 8)

[102.5.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [10…

Nov 22, 2022
High max 7.5

ELSA-2022-8420 1 CVE

Important: mingw-zlib security update (Oracle Linux 9)

[1.2.12-2] - Fix changelog Related: rhbz#2068371 [1.2.12-1] - Bump version to 1.2.12 to fix CVE-2018-25032 Related: rhbz#2068371

Nov 22, 2022
High max 6.5

ELSA-2022-8263 3 CVEs

Important: dpdk security and bug fix update (Oracle Linux 9)

[21.11.2-1] - Rebase to 21.11.2 (#2126159) - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616) [21.11.1-1] - Rebase to 21.11.1 (#2106856) - Includes fix for CVE-2021-3839 (#2026642)

Nov 22, 2022
High max 7.5

ELSA-2022-8057 15 CVEs

Important: grafana security, bug fix, and enhancement update (Oracle Linux 9)

[7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverse…

Nov 22, 2022
High max 7.8

ELSA-2022-7928 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 8)

[0.8.4-28.1] - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133995

Nov 17, 2022
High max 5.5

ELSA-2022-8491 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-19] - CVE fix for: CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140765, rhbz#2140770

Nov 16, 2022
High

ELSA-2022-9996 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.519.2.1] - xfs: trim IO to found COW extent limit (Eric Sandeen) [Orabug: 34765284] - xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34765284] [4.14.35-2047.519.2] - Revert 'xfs: don't use delall…

Nov 15, 2022
High

ELSA-2022-9997 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.519.2.1.el7] - xfs: trim IO to found COW extent limit (Eric Sandeen) [Orabug: 34765284] - xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34765284] [4.14.35-2047.519.2] - Revert 'xfs: don't use de…

Nov 15, 2022
High max 6.8

ELSA-2022-7643 2 CVEs

Important: bind9.16 security update (Oracle Linux 8)

[32:9.16.23-0.9.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.16.23-0.9] - Tighten cache protection against record …

Nov 15, 2022
High max 9.1

ELSA-2022-7821 2 CVEs

Important: nodejs:18 security update (Oracle Linux 8)

nodejs [1:18.8.0-1] - Rebase to version 18.8.0 - Include sources for WASM blobs nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild [2021.06-2] -…

Nov 15, 2022
High

ELSA-2022-9999 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.313.6] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac…

Nov 15, 2022
High

ELSA-2022-9998 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.313.6] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac…

Nov 15, 2022
High

ELSA-2022-7470 1 CVE

Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update (Oracle Linux 8)

apache-commons-collections apache-commons-net [3.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.6-1] - Update to upstream version 3.6 jss [4.9.4-1] - Reba…

Nov 15, 2022
High max 9.8

ELSA-2022-9987 1 CVE

Important: zlib security update (Oracle Linux 7)

[1.2.7-20.0.1] - Resolves: CVE-2022-37434 [Orabug: 34752508]

Nov 9, 2022
High

ELSA-2022-9986 1 CVE

Important: kvm_utils security update (Oracle Linux 8)

hivex [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950501 [1.3.18] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.3.18] - Resolves: bz#1810193 (Upgrade components in…

Nov 8, 2022
High max 7.5

ELSA-2022-23681 10 CVEs

Important: ol8addon security update (Oracle Linux 8)

golang [1.17.13-1.0.1] - Update tarball to 1.17.12 - Add patches between Go 1.17.12 and Go 1.17.13 - Reviewed-by: David Faust <david.faust@oracle.com> [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109182 go-toolset [1.17.13-1] - Set version to …

Nov 7, 2022
High

ELSA-2022-9978 1 CVE

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-21.el7] - qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062] - qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256] - iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug…

Nov 4, 2022
High max 5.3

ELSA-2022-7318 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-70.30.1.0.1_0.OL9] - lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.30.1_0.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RH…

Nov 4, 2022
High max 10.0

ELSA-2022-7343 2 CVEs

Important: pcs security update (Oracle Linux 7)

[0.9.169-3.0.1] - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png [0.9.169-3.el7_3.2] - Update rubygem rack - Upgrade jquery in web-ui - Resolves: rhbz#2099578 rhbz#2093232 [0.9.169-3.el7_3.1] - Explicitly close libcurl connectio…

Nov 3, 2022
High max 5.6

ELSA-2022-7337 6 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.80.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.80.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Nov 3, 2022
High

ELSA-2022-7326 1 CVE

Important: pki-core security update (Oracle Linux 9)

[11.0.6-1.0.1] - Replaced upstream graphical references [Orabug: 33952704] [11.0.6-1] - Bug #2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.0.0.z]

Nov 3, 2022
High max 7.5

ELSA-2022-7288 2 CVEs

Important: openssl security update (Oracle Linux 9)

[3.0.1-43.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-43] - CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests Resolves: CVE-2022-3602 [1:3.0.1-42] - CVE-2022-3602: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602

Nov 1, 2022
High max 8.1

ELSA-2022-6997 1 CVE

Important: firefox security update (Oracle Linux 7)

[102.3.0-7.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functi…

Oct 27, 2022