Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 8.8

ELSA-2022-7069 4 CVEs

Important: firefox security update (Oracle Linux 7)

[102.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-7] - Fix …

Oct 27, 2022
High max 8.8

ELSA-2022-6711 6 CVEs

Important: firefox security update (Oracle Linux 7)

[102.3.0-6.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

Oct 27, 2022
High max 8.8

ELSA-2022-7184 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 27, 2022
High max 8.8

ELSA-2022-7190 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.4.0-1] - Update to 102.4.0 build1

Oct 27, 2022
High max 8.8

ELSA-2022-7178 8 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.4.0-1] - Update to 102.4.0 build1

Oct 27, 2022
High

ELSA-2022-7186 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 7)

[0.4.9-136.0.1] - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195] - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195] - Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch * fix se…

Oct 26, 2022
High max 8.8

ELSA-2022-6710 10 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.3.0-3] - Update to 102.3.0 build1

Oct 26, 2022
High max 8.1

ELSA-2022-6998 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.3.0-4] - Fix for expat CVE-2022-40674 [102.3.0-3] - Update to 102.3.0 build1

Oct 26, 2022
High max 5.6

ELSA-2022-7110 7 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.32.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Oct 26, 2022
High

ELSA-2022-7192 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 8)

[0.8.4-22.2] - Add 0092-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133994

Oct 26, 2022
High max 8.8

ELSA-2022-7070 4 CVEs

Important: firefox security update (Oracle Linux 8)

[102.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1

Oct 26, 2022
High

ELSA-2022-7185 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 9)

[0.8.7-7.1] - Add 0044-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133997

Oct 26, 2022
High max 9.1

ELSA-2022-9945 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9944 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9947 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9946 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9951 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9948 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9949 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9950 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9952 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9954 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9955 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9953 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.8

ELSA-2022-7088 1 CVE

Important: libksba security update (Oracle Linux 7)

[1.3.0-6] - Fix for CVE-2022-3515 (#2135695)

Oct 24, 2022
High

ELSA-2022-9931 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-3.60.5.1.el8] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - fs: do not co…

Oct 24, 2022
High max 9.8

ELSA-2022-7089 1 CVE

Important: libksba security update (Oracle Linux 8)

[1.3.5-8] - Fix for CVE-2022-3515 (#2135702)

Oct 24, 2022
High max 9.8

ELSA-2022-7090 1 CVE

Important: libksba security update (Oracle Linux 9)

[1.5.1-5] - Fix for CVE-2022-3515 (#2135703)

Oct 24, 2022
High

ELSA-2022-9930 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-3.60.5.1] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - fs: do not compar…

Oct 24, 2022
High max 6.7

ELSA-2022-9926 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.312.3.4] - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi) [Orabug: 34666845] [5.4.17-2136.312.3.3] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34607590] - cgroup: Elide write-locking threadgroup_rwsem w…

Oct 21, 2022
High max 6.7

ELSA-2022-9927 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.312.3.4] - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi) [Orabug: 34666845] [5.4.17-2136.312.3.3] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34607590] - cgroup: Elide write-locking threadgroup_rwsem w…

Oct 21, 2022
High max 8.8

ELSA-2022-7071 4 CVEs

Important: firefox security update (Oracle Linux 9)

[102.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1

Oct 21, 2022
High max 8.1

ELSA-2022-7024 1 CVE

Important: firefox security update (Oracle Linux 8)

[102.3.0-7.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Oct 20, 2022
High max 8.1

ELSA-2022-7023 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 20, 2022
High max 8.1

ELSA-2022-7020 1 CVE

Important: firefox security update (Oracle Linux 9)

[102.3.0-7.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Oct 19, 2022
High max 8.1

ELSA-2022-7026 1 CVE

Important: thunderbird security update (Oracle Linux 9)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 19, 2022
High max 9.1

ELSA-2022-6964 2 CVEs

Important: nodejs:16 security update (Oracle Linux 8)

nodejs [1:16.17.1-1] - Rebase to version 16.17.1 - Resolves: CVE-2022-35255 CVE-2022-35256 - Resolves: #2132004, #2130552 - Resolves #2121095

Oct 18, 2022
High max 9.1

ELSA-2022-6963 2 CVEs

Important: nodejs security update (Oracle Linux 9)

[16.17.1-1] - Rebase to version 16.17.1 Resolves: CVE-2022-35255 CVE-2022-35256

Oct 17, 2022
High

ELSA-2022-9862 4 CVEs

Important: kvm_utils2 security update (Oracle Linux 8)

Oct 13, 2022
High max 8.1

ELSA-2022-6878 1 CVE

Important: expat security update (Oracle Linux 8)

[2.2.5-8.0.1.3] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-8.3] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

Oct 11, 2022