Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 6.7

ELSA-2022-9870 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.518.4] - xfs: avoid race between writeback and data/cow fork changes (Wengang Wang) [Orabug: 34508036] [4.14.35-2047.518.3] - KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34617675] [4.14.35-2047.518.2] - af_key: Do not call xf…

Oct 10, 2022
High max 6.7

ELSA-2022-9871 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.518.4.el7] - xfs: avoid race between writeback and data/cow fork changes (Wengang Wang) [Orabug: 34508036] [4.14.35-2047.518.3.el7] - KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34617675] [4.14.35-2047.518.2.el7] - af_key: Do…

Oct 10, 2022
High

ELSA-2022-9869 4 CVEs

Important: qemu-kvm security update (Oracle Linux 9)

Oct 10, 2022
High max 8.6

ELSA-2022-6815 1 CVE

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

Oct 7, 2022
High max 8.1

ELSA-2022-6834 1 CVE

Important: expat security update (Oracle Linux 7)

[2.1.0-15.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910302] [2.1.0-15] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

Oct 6, 2022
High max 8.6

ELSA-2022-6839 1 CVE

Important: squid security update (Oracle Linux 9)

[7:5.2-1.2] - Resolves: #2130251 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB authentication

Oct 6, 2022
High max 8.1

ELSA-2022-6838 1 CVE

Important: expat security update (Oracle Linux 9)

[ 2.2.10-12.3] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

Oct 6, 2022
High max 5.1

ELSA-2022-9853 1 CVE

Important: kubernetes security update (Oracle Linux 7)

kubernetes [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.8-2] - Updated Kubernetes package release version to 1.21.6-2 [1.4.8-1] - Upgraded kubernetes-1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for vers…

Oct 5, 2022
High max 7.5

ELSA-2022-6778 2 CVEs

Important: bind security update (Oracle Linux 8)

[32:9.11.36-3.1] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Oct 5, 2022
High max 7.5

ELSA-2022-6781 3 CVEs

Important: bind9.16 security update (Oracle Linux 8)

[32:9.16.23-0.7.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Oct 5, 2022
High max 8.6

ELSA-2022-6775 1 CVE

Important: squid:4 security update (Oracle Linux 8)

libecap squid [7:4.15-3.1] - Resolves: #2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher server responses

Oct 5, 2022
High max 5.1

ELSA-2022-9854 1 CVE

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.8-2] - Updated Kubernetes package release version to 1.21.6-2 [1.4.8-1] - Upgraded kubernetes-1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for vers…

Oct 5, 2022
High max 6.9

ELSA-2022-9852 15 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.67.3] - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav) [Orabug: 31225377] {CVE-2017-16537} - fbcon: remove soft scrollback code (Linus Torvalds) [Orabug: 31914703] {CVE-2020-14390} - inet: use bigger hash table for IP ID generation (…

Oct 4, 2022
High max 7.5

ELSA-2022-6763 3 CVEs

Important: bind security update (Oracle Linux 9)

[32:9.16.23-1.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Oct 4, 2022
High max 7.5

ELSA-2022-6765 2 CVEs

Important: bind security update (Oracle Linux 7)

[32:9.11.4-26.P2.10] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Oct 3, 2022
High max 5.1

ELSA-2022-9855 1 CVE

Important: kubernetes security update (Oracle Linux 7)

kubernetes [1.22.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.23.11-1] - Added Oracle specific build files for Kubernetes olcne [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kube…

Oct 3, 2022
High

ELSA-2022-22254 3 CVEs

Important: squid security update (Oracle Linux 7)

[ - 7:4.11-3.0.1]

Oct 3, 2022
High max 5.1

ELSA-2022-9856 1 CVE

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.22.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.23.11-1] - Added Oracle specific build files for Kubernetes olcne [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kube…

Oct 3, 2022
High max 8.8

ELSA-2022-6702 6 CVEs

Important: firefox security update (Oracle Linux 8)

[102.3.0-6.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

Sep 28, 2022
High max 8.8

ELSA-2022-6708 10 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-3] - Update to 102.3.0 build1

Sep 28, 2022
High max 8.8

ELSA-2022-6700 6 CVEs

Important: firefox security update (Oracle Linux 9)

[102.3.0-6.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

Sep 28, 2022
High max 8.8

ELSA-2022-6717 10 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-3] - Update to 102.3.0 build1

Sep 28, 2022
High max 7.5

ELSA-2022-9828 5 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

Sep 22, 2022
High

ELSA-2022-6610 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-70.26.1.0.1_0.OL9] - lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.26.1_0.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RH…

Sep 22, 2022
High max 7.5

ELSA-2022-9830 6 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-2.52.3.el8] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: …

Sep 21, 2022
High max 7.5

ELSA-2022-9829 5 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

Sep 21, 2022
High max 7.5

ELSA-2022-9827 6 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-2.52.3] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: Add …

Sep 21, 2022
High max 7.5

ELSA-2022-9787 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.517.3] - KVM: x86: use raw clock values consistently (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti)…

Sep 16, 2022
High max 7.5

ELSA-2022-9788 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.517.3.el7] - KVM: x86: use raw clock values consistently (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosa…

Sep 16, 2022
High max 7.0

ELSA-2022-9772 1 CVE

Important: istio security update (Oracle Linux 7)

istio [1.13.7-1] - Added Oracle specific files for 1.13.7-1 olcne [1.5.5-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5…

Sep 8, 2022
High max 7.0

ELSA-2022-9774 1 CVE

Important: istio security update (Oracle Linux 7)

istio [1.13.7-1] - Added Oracle specific files for 1.13.7-1 olcne [1.4.7-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.4.6-2] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Up…

Sep 8, 2022
High max 7.0

ELSA-2022-9771 1 CVE

Important: istio security update (Oracle Linux 8)

istio [1.13.7-1] - Added Oracle specific files for 1.13.7-1 olcne [1.5.5-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5…

Sep 8, 2022
High max 7.0

ELSA-2022-9773 1 CVE

Important: istio security update (Oracle Linux 8)

istio [1.13.7-1] - Added Oracle specific files for 1.13.7-1 olcne [1.4.7-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.4.6-2] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Up…

Sep 8, 2022
High

ELSA-2022-20694 1 CVE

Important: golang security update (Oracle Linux 7)

[1.18.5-1.0.1] - golang-1.18.5 package initial release - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.18.4-1.0.1] - golang-1.18.4 package initial release - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.18.3-1.0.1] - golang-1.18.3-…

Sep 7, 2022
High

ELSA-2022-6381 1 CVE

Important: open-vm-tools security update (Oracle Linux 7)

[11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new fil…

Sep 7, 2022
High

ELSA-2022-6358 1 CVE

Important: open-vm-tools security update (Oracle Linux 9)

[11.3.5-1.0.1.el9_0.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21…

Sep 7, 2022
High max 7.5

ELSA-2022-9761 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.66.3] - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [Orabug: 33981149] {CVE-2022-1011} - vt: drop old FONT ioctls (Jiri Slaby) [Orabug: 34408794] {CVE-2021-33656} - video: of_display_timing.h: include errno.h (Hsin-Yi Wang) [Orab…

Sep 6, 2022
High

ELSA-2022-20693 1 CVE

Important: golang security update (Oracle Linux 7)

[1.17.13-1.0.1] - golang-1.17.13 release - Update tarball and version number in specfile - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.17.12-1.0.1] - golang-1.17.12-1 release - Update tarball and version number in specfile - Reviewed-by: Indu …

Sep 6, 2022
High

ELSA-2022-6357 1 CVE

Important: open-vm-tools security update (Oracle Linux 8)

[11.3.5-1.0.1.el8_6.1] - Fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. [Orabug: 21…

Sep 6, 2022
High

ELSA-2022-9754 1 CVE

Important: pcs security update (Oracle Linux 8)

[0.10.12-6.0.1.el8_6.2] - Replace HAM-logo.png with a generic one [0.10.12-6.el8_6.2] - Fixed ruby socket permissions - Resolves: rhbz#2116837

Sep 1, 2022