Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 8.8

ELSA-2022-5776 3 CVEs

Important: firefox security update (Oracle Linux 7)

[91.12.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.12.0-1] - Update to 91.12.0 b…

Aug 2, 2022
High max 8.8

ELSA-2022-5777 3 CVEs

Important: firefox security update (Oracle Linux 8)

[91.12.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
High max 8.8

ELSA-2022-5774 3 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
High max 7.5

ELSA-2022-5799 9 CVEs

Important: go-toolset and golang security and bug fix update (Oracle Linux 9)

golang [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109183 [1.17.7-2] - Clean up dist-git patches - Resolves: rhbz#2109174 go-toolset [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109183

Aug 2, 2022
High max 8.8

ELSA-2022-5778 3 CVEs

Important: thunderbird security update (Oracle Linux 9)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
High max 8.8

ELSA-2022-5767 3 CVEs

Important: firefox security update (Oracle Linux 9)

[91.12.0-2.0.1] - Removed Upstream references [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
High

ELSA-2022-9669 3 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-18.el7] - block: introduce max_hw_iov for use in scsi-generic (Paolo Bonzini) [Orabug: 33785156] - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 (Paolo Bonzini) [Orabug: 33785156] - block: add max_hw_transfer to BlockLi…

Aug 1, 2022
High

ELSA-2022-9668 1 CVE

Important: libvirt libvirt-python security update (Oracle Linux 7)

libvirt [5.7.0-34.el7] - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019] - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019] - qemuDomainBl…

Aug 1, 2022
High max 8.8

ELSA-2022-5773 3 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.12.0-1] - Update to 91.12.0 build1

Aug 1, 2022
High max 7.5

ELSA-2022-5736 4 CVEs

Important: java-17-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1:17.0.4.0.8-0.2.ea] - Revert the following changes until copy-java-configs has adapted to relative symlinks: - * Move cacerts replacement to install section and retain original of this and tzdb.dat - * Run tests on the installed image, rather than the build…

Jul 28, 2022
High max 7.1

ELSA-2022-5717 1 CVE

Important: grafana security update (Oracle Linux 8)

[7.5.11-3] - resolve CVE-2022-31107 grafana: OAuth account takeover

Jul 27, 2022
High max 7.5

ELSA-2022-5726 4 CVEs

Important: java-17-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:17.0.4.0.8-0.2.ea] - Add rpminspect.yaml to turn off Java bytecode inspections - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode - Resolves: rhbz#2109106 [1:17.0.4.0.8-0.2.ea] - Revert the following changes until co…

Jul 27, 2022
High max 7.7

ELSA-2022-9642 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9644 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9641 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9648 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9646 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9643 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9645 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9647 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9650 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9654 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9652 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9656 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9649 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9651 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9655 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9653 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.5

ELSA-2022-5695 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1:11.0.16.0.8-1.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upst…

Jul 26, 2022
High max 7.5

ELSA-2022-5709 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1.8.0.342.b07-1.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value …

Jul 26, 2022
High max 7.1

ELSA-2022-5716 1 CVE

Important: grafana security update (Oracle Linux 9)

[7.5.11-5] - resolve CVE-2022-31107 grafana: OAuth account takeover

Jul 26, 2022
High max 7.5

ELSA-2022-5698 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-…

Jul 25, 2022
High max 7.5

ELSA-2022-5696 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-…

Jul 25, 2022
High max 7.5

ELSA-2022-5687 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:11.0.16.0.8-1.0.1] - link atomic for ix86 build [1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print relea…

Jul 21, 2022
High max 7.5

ELSA-2022-5683 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upstreamed - Print release file during build, which should now include a co…

Jul 21, 2022
High max 6.7

ELSA-2022-9609 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.309.5] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386637] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9602 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-0.30.20.1] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9612 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.309.5] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386637] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9601 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-0.30.20.1] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] {CVE-2022-21505}

Jul 19, 2022
High

ELSA-2022-5564 1 CVE

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.16.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Jul 15, 2022