Oracle Linux Security Advisories (ELSA)

5,092 results · Clear filters · Feed

• High max 8.1
  ELSA-2022-9595 8 CVEs

  Important: grub2 security update (Oracle Linux 8)

  [2.02-123.0.7.el8_6.8] - Enable back btrfs module by default [Orabug: 34377188] [2.02-123.0.6.el8_6.8] - Backport upstream SNP protocol fixes [Orabug: 34195100] [2.02-123.0.5.el8_6.8] - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX c…

  Jul 14, 2022
• High max 8.1
  ELSA-2022-9596 8 CVEs

  Important: grub2 security update (Oracle Linux 9)

  [2.06-27.0.6.el9_0.7] - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986] [2.06-27.0.5.el9_0.7] - Replaced bugzilla.oracle.com references [Orabug: 34202300] - Update provided certificate version to 202204 [JIRA: OLDIS-16371] - Various c…

  Jul 14, 2022
• High max 10.0
  ELSA-2022-9589 6 CVEs

  Important: olcne security update (Oracle Linux 7)

  olcne [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes t…

  Jul 12, 2022
• High
  ELSA-2022-5542 1 CVE

  Important: squid security update (Oracle Linux 7)

  [7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

  Jul 12, 2022
• High max 7.8
  ELSA-2022-17957 4 CVEs

  Important: ol8addon security update (Oracle Linux 8)

  Jul 12, 2022
• High max 10.0
  ELSA-2022-9588 6 CVEs

  Important: olcne security update (Oracle Linux 8)

  olcne [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes t…

  Jul 12, 2022
• High max 7.8
  ELSA-2022-17956 8 CVEs

  Important: go-toolset:ol8addon security update (Oracle Linux 8)

  go-toolset [1.18.3-1] - Update to golang 1.18.3 golang [1.18.3-1.0.1] - Rebase to 1.18.3 by adding upstream patches to the 1.18.0 openssl-fips - Modify Patch51852 to remove portions already upstream - Use base_version to distinguish the version of the tarball…

  Jul 12, 2022
• High max 5.6
  ELSA-2022-9591 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

  [5.15.0-0.30.20] - floppy: use a statically allocated error counter (Willy Tarreau) [Orabug: 34218638] {CVE-2022-1652} - x86: Disable RET on kexec (Konrad Rzeszutek Wilk) [Orabug: 34335631] {CVE-2022-23816} {CVE-2022-29901} - x86/bugs: do not enable IBPB-on-e…

  Jul 12, 2022
• High max 5.6
  ELSA-2022-9590 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

  [5.15.0-0.30.20] - floppy: use a statically allocated error counter (Willy Tarreau) [Orabug: 34218638] {CVE-2022-1652} - x86: Disable RET on kexec (Konrad Rzeszutek Wilk) [Orabug: 34335631] {CVE-2022-29901} {CVE-2022-23816} - x86/bugs: do not enable IBPB-on-e…

  Jul 12, 2022
• High
  ELSA-2022-9582 1 CVE

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.515.3.el7] - uek-rpm: Enable Pensando EMMC reset controller (Thomas Tai) [Orabug: 34325721] - mfd: pensando_elbasr: Add Pensando Elba System Resource Chip (Brad Larson) [Orabug: 34325721] - dsc-drivers: update drivers for 1.15.9-C-65 (Shannon Ne…

  Jul 11, 2022
• High max 10.0
  ELSA-2022-9587 6 CVEs

  Important: olcne security update (Oracle Linux 7)

  olcne [1.4.6-2] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Update gen-certs-helper script to skip printing olcne_transfer_script execution - Cleanup grpc connection when node not found and use substr…

  Jul 11, 2022
• High
  ELSA-2022-9583 1 CVE

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.515.3] - uek-rpm: Enable Pensando EMMC reset controller (Thomas Tai) [Orabug: 34325721] - mfd: pensando_elbasr: Add Pensando Elba System Resource Chip (Brad Larson) [Orabug: 34325721] - dsc-drivers: update drivers for 1.15.9-C-65 (Shannon Nelson…

  Jul 11, 2022
• High max 10.0
  ELSA-2022-9586 6 CVEs

  Important: olcne security update (Oracle Linux 8)

  olcne [1.4.6-2] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over - Update gen-certs-helper script to skip printing olcne_transfer_script execution - Cleanup grpc connection when node not found and use substr…

  Jul 11, 2022
• High
  ELSA-2022-5526 1 CVE

  Important: squid:4 security update (Oracle Linux 8)

  squid [7:4.15-3.1] - Resolves: #2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher server responses

  Jul 8, 2022
• High max 5.9
  ELSA-2022-9564 1 CVE

  Important: libgcrypt security update (Oracle Linux 8)

  [ 1.8.5-7_fips] - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations [Orabug: 33081130] - Change Epoch from 1 to 10 [1.8.5-7] - Fix CVE-2021-33560 (#2018525)

  Jul 7, 2022
• High
  ELSA-2022-5527 1 CVE

  Important: squid security update (Oracle Linux 9)

  [7:5.2-1.1] - Resolves: #2100784 - CVE-2021-46784 squid: DoS when processing gopher server responses

  Jul 7, 2022
• High max 6.7
  ELSA-2022-5232 3 CVEs

  Important: kernel security and bug fix update (Oracle Linux 7)

  [3.10.0-1160.71.1.0.1] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.71.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenk…

  Jul 6, 2022
• High max 5.5
  ELSA-2022-9557 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.64.1] - iscsi-target: Fix the issue with shutdown_session removal (Gulam Mohamed) [Orabug: 29661566] - scsi: target: fix hang when multiple threads try to destroy the same iscsi session (Gulam Mohamed) [Orabug: 29661566] - scsi: target: remove boi…

  Jul 5, 2022
• High max 7.5
  ELSA-2022-5467 1 CVE

  Important: php:7.4 security update (Oracle Linux 8)

  php [7.4.19-3] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626

  Jul 4, 2022
• High max 7.5
  ELSA-2022-5468 1 CVE

  Important: php:8.0 security update (Oracle Linux 8)

  php [8.0.13-3] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626

  Jul 4, 2022
• High max 8.1
  ELSA-2022-5095 8 CVEs

  Important: grub2, mokutil, shim, and shim-unsigned-x64 security update (Oracle Linux 8)

  [2.02-123.0.4.el8_6.8] - enable multiboot2 [Orabug: 34285558] - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462] - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462] - Backport some better script logic for B…

  Jul 4, 2022
• High
  ELSA-2022-5316 2 CVEs

  Important: kernel security and bug fix update (Oracle Linux 8)

  [4.18.0-372.13.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

  Jul 2, 2022
• High max 9.8
  ELSA-2022-5481 8 CVEs

  Important: firefox security update (Oracle Linux 9)

  [91.11.0-2.0.1] - Replaced upstream package with oracle-indexhtml [Orabug: 33802044] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Removed Upstream references [91.11.0-2] - Update to 91.11.0 build2

  Jul 2, 2022
• High max 9.8
  ELSA-2022-5482 9 CVEs

  Important: thunderbird security update (Oracle Linux 9)

  [91.11.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.11.0-2] - Update to 91.11.0 build2 [91.11.0-1] - Update to 91.11.0 build1

  Jul 2, 2022
• High max 9.8
  ELSA-2022-5480 9 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [91.11.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.11.0-2] - Update to 91.11.0 build2 [91.11.0-1] - Update to 91.11.0 build1

  Jul 1, 2022
• High max 9.8
  ELSA-2022-5479 8 CVEs

  Important: firefox security update (Oracle Linux 7)

  [91.11.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.11.0-2] - Update to 91.11.0 b…

  Jul 1, 2022
• High max 9.8
  ELSA-2022-5469 8 CVEs

  Important: firefox security update (Oracle Linux 8)

  [91.11.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.11.0-2] - Update to 91.11.0 build2 [91.11.0-1] - Update to 91.11.0 build1

  Jul 1, 2022
• High max 9.8
  ELSA-2022-5470 9 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [91.11.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.11.0-2] - Update to 91.11.0 build2 [91.11.0-1] - Update to 91.11.0 build1

  Jul 1, 2022
• High
  ELSA-2022-4990 1 CVE

  Important: cups security update (Oracle Linux 9)

  [1:2.3.3op2-13.1] - CVE-2022-26691 cups: authorization bypass when using 'local' authorization

  Jul 1, 2022
• High max 5.5
  ELSA-2022-9533 6 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

  [5.15.0-0.30.19] - net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp) [Orabug: 34052160] [5.15.0-0.30.18] - Revert ocfs2: mount shared volume without ha stack (Junxiao Bi) [Orabug: 33701900] - KVM: x86/speculation: Disable Fill buffer clear within …

  Jun 30, 2022
• High max 5.5
  ELSA-2022-9534 6 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

  [5.15.0-0.30.19] - net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp) [Orabug: 34052160] [5.15.0-0.30.18] - Revert ocfs2: mount shared volume without ha stack (Junxiao Bi) [Orabug: 33701900] - KVM: x86/speculation: Disable Fill buffer clear within …

  Jun 30, 2022
• High max 9.8
  ELSA-2022-4892 8 CVEs

  Important: thunderbird security update (Oracle Linux 9)

  [91.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.10.0-1] - Update to 91.10.0 build1

  Jun 30, 2022
• High max 9.8
  ELSA-2022-4589 8 CVEs

  Important: thunderbird security update (Oracle Linux 9)

  [91.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.9.0-3] - Update to 91.9.0 build3 [91.9.0-2] - Update to 91.9.0 build2 [91.9.0-1] - Updat…

  Jun 30, 2022
• High max 7.5
  ELSA-2022-4584 1 CVE

  Important: zlib security update (Oracle Linux 9)

  [1.2.11-31.1] - Fix CVE-2018-25032 Resolves: CVE-2018-25032

  Jun 30, 2022
• High max 7.5
  ELSA-2022-4592 1 CVE

  Important: rsync security update (Oracle Linux 9)

  [3.2.3-9.1] - Resolves: #2074784 - A flaw found in zlib v1.2.2.2 through zlib v1.2.11 when compressing certain inputs

  Jun 30, 2022
• High max 8.1
  ELSA-2022-4795 1 CVE

  Important: rsyslog security update (Oracle Linux 9)

  [8.2102.0-101.1] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081402

  Jun 30, 2022
• High max 7.5
  ELSA-2022-1729 6 CVEs

  Important: java-17-openjdk security update (Oracle Linux 9)

  [1:17.0.3.0.7-1] - April 2022 security update to jdk 17.0.3+7 - Update to jdk-17.0.3.0+7 tarball - Update release notes to 17.0.3.0+7 - Add missing README.md and generate_source_tarball.sh - Resolves: rhbz#2073578

  Jun 30, 2022
• High max 7.5
  ELSA-2022-4588 3 CVEs

  Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

  [6.0.105-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.105-1] - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ#2082268 [6.0.104-1] - Update to .NET SDK 6.0.104 and Runtime 6.0.4 - Resolves: RH…

  Jun 30, 2022
• High
  ELSA-2022-4771 1 CVE

  Important: postgresql security update (Oracle Linux 9)

  [13.7-1] - Resolves: CVE-2022-1552 - Update to 13.7 - Release notes: https://www.postgresql.org/docs/release/13.7/

  Jun 30, 2022
• High max 8.8
  ELSA-2022-4582 1 CVE

  Important: gzip security update (Oracle Linux 9)

  [1.10-9] - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271

  Jun 30, 2022