Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High

ELSA-2022-9753 1 CVE

Important: pcs security update (Oracle Linux 9)

[0.11.1-10.el9_0.2] - Fixed ruby socket permissions - Resolves: rhbz#2116839

Sep 1, 2022
High

ELSA-2022-6206 1 CVE

Important: systemd security update (Oracle Linux 8)

[239-58.0.1.4] - Disable unprivileged BPF by default [Orabug: 32870980] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - jou…

Aug 29, 2022
High

ELSA-2022-6170 1 CVE

Important: rsync security update (Oracle Linux 7)

[3.1.2-11] - Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers

Aug 25, 2022
High

ELSA-2022-6160 1 CVE

Important: systemd security update (Oracle Linux 7)

[219-78.0.9.el7_9.7] - Core: explicitly trigger changing udev systemd_wants property [Orabug: 31858125] - Disable unprivileged BPF by default [Orabug: 32871008] - Resolve missing installation files for systemd-pstore [Orabug 32497787] - Change to have file tm…

Aug 25, 2022
High max 8.8

ELSA-2022-6179 5 CVEs

Important: firefox security update (Oracle Linux 7)

[91.13.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.13.0-1] - Update to 91.13.0 b…

Aug 25, 2022
High max 8.8

ELSA-2022-6169 5 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.13.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.13.0-1] - Update to 91.13.0 build1

Aug 25, 2022
High max 8.8

ELSA-2022-6164 5 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.13.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.13.0-1] - Update to 91.13.0 build1

Aug 25, 2022
High

ELSA-2022-6180 1 CVE

Important: rsync security update (Oracle Linux 8)

[3.1.3-14.3] - Resolves: #2111174 - remote arbitrary files write inside the directories of connecting peers

Aug 25, 2022
High max 8.8

ELSA-2022-6175 5 CVEs

Important: firefox security update (Oracle Linux 8)

[91.13.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.13.0-1] - Update to 91.13.0 build1

Aug 25, 2022
High max 8.8

ELSA-2022-6165 5 CVEs

Important: thunderbird security update (Oracle Linux 9)

[91.13.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.13.0-1] - Update to 91.13.0 build1

Aug 25, 2022
High max 8.8

ELSA-2022-6174 5 CVEs

Important: firefox security update (Oracle Linux 9)

[91.13.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.13.0-1] - Update to 91.13.0 build1

Aug 25, 2022
High

ELSA-2022-6181 1 CVE

Important: rsync security update (Oracle Linux 9)

[3.2.3-9.2] - Resolves: #2111176 - remote arbitrary files write inside the directories of connecting peers

Aug 25, 2022
High max 6.2

ELSA-2022-9728 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.516.2.1] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981856] {CVE-2022-21385}

Aug 19, 2022
High max 6.2

ELSA-2022-9731 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.516.2.1] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981856] {CVE-2022-21385}

Aug 19, 2022
High max 6.2

ELSA-2022-9729 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-1.43.4.2] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981854] {CVE-2022-21385}

Aug 19, 2022
High max 6.2

ELSA-2022-9727 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.310.7.1] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981855] {CVE-2022-21385}

Aug 19, 2022
High max 6.2

ELSA-2022-9730 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.310.7.1] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981855] {CVE-2022-21385}

Aug 19, 2022
High max 6.2

ELSA-2022-9726 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-1.43.4.2] - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 33981854] {CVE-2022-21385}

Aug 19, 2022
High max 7.5

ELSA-2022-9720 1 CVE

Important: cri-o security update (Oracle Linux 8)

[1.22.5-1] - Addresses CVE-2022-1708

Aug 18, 2022
High max 7.5

ELSA-2022-9717 1 CVE

Important: cri-o security update (Oracle Linux 7)

[1.21.7-2] - Addresses CVE-2022-1708 [1.21.7-1] - Added Oracle Specifile Files for cri-o

Aug 17, 2022
High max 7.5

ELSA-2022-9719 1 CVE

Important: cri-o security update (Oracle Linux 7)

[1.22.5-1] - Addresses CVE-2022-1708

Aug 17, 2022
High max 7.5

ELSA-2022-9718 1 CVE

Important: cri-o security update (Oracle Linux 8)

[1.21.7-2] - Addresses CVE-2022-1708 [1.21.7-1] - Added Oracle Specifile Files for cri-o

Aug 17, 2022
High max 6.7

ELSA-2022-9710 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

r[ 5.4.17-2136.310.7] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34480880] {CVE-2022-2588} - x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora) [Orabug: 34450896] - x86/bugs: display dynamic re…

Aug 15, 2022
High max 6.7

ELSA-2022-9709 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.310.7] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34480880] {CVE-2022-2588} - x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora) [Orabug: 34450896] - x86/bugs: display dynamic retb…

Aug 15, 2022
High

ELSA-2022-9682 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-47.0.2.2] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and

Aug 10, 2022
High max 5.3

ELSA-2022-9699 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.516.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460938] {CVE-2022-2588} [4.14.35-2047.516.1] - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() …

Aug 9, 2022
High max 5.3

ELSA-2022-9694 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.65.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460939] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9693 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.516.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460938] {CVE-2022-2588} [4.14.35-2047.516.1] - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() …

Aug 9, 2022
High max 5.3

ELSA-2022-9692 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.309.5.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460937] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9690 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-1.43.4.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588} [5.15.0-1.43.4] - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34399…

Aug 9, 2022
High max 5.3

ELSA-2022-9691 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.309.5.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460937] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9689 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-1.43.4.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588} [5.15.0-1.43.4] - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34399…

Aug 9, 2022
High

ELSA-2022-5819 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-372.19.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Aug 8, 2022
High

ELSA-2022-9700 4 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

libvirt [5.7.0-34.el8] - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019] - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019] - qemuDomainBl…

Aug 8, 2022
High

ELSA-2022-9675 1 CVE

Important: httpd security update (Oracle Linux 7)

[2.4.6-97.0.7.5] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850]

Aug 4, 2022
High

ELSA-2022-5905 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-18] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2109031, rhbz#2109033

Aug 4, 2022
High

ELSA-2022-9680 1 CVE

Important: httpd security update (Oracle Linux 9)

[2.4.51-7.0.2] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381949]

Aug 4, 2022
High max 7.5

ELSA-2022-5904 1 CVE

Important: php security update (Oracle Linux 9)

[8.0.13-2] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626

Aug 4, 2022
High max 7.5

ELSA-2022-5775 9 CVEs

Important: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

delve [1.7.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.7.2-1] - Rebase to 1.7.2 - Related: rhbz#2014088 golang [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109182 [1.17.10-2] - Clean up dist-git patches - Resolves…

Aug 3, 2022
High max 7.8

ELSA-2022-9667 3 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.65.1] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33825689] {CVE-2022-0492} - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi) [Orabug: 34091904] - ocfs2: dlmfs: fix error handling of user_dlm_destroy_l…

Aug 2, 2022