Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 9.8

ELSA-2022-4590 6 CVEs

Important: firefox security update (Oracle Linux 9)

[91.9.0-1.0.1] - Replaced upstream package with oracle-indexhtml [Orabug: 33802044] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Removed Upstream references [91.9.0-1] - Update to 91.9.0

Jun 30, 2022
High max 7.5

ELSA-2022-9513 1 CVE

Important: pcs security update (Oracle Linux 9)

[0.11.1-10.el9_0.1] - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz#2081333 [0.11.1-10] - Fixed snmp client - Fixed translating resource roles in colocation constraint - Resolves: rhbz#2048640 [0.11.1-9] - Fixed cluster destroy in web ui…

Jun 30, 2022
High max 8.8

ELSA-2022-4940 1 CVE

Important: xz security update (Oracle Linux 9)

[5.2.5-8] - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271

Jun 30, 2022
High max 7.5

ELSA-2022-1728 5 CVEs

Important: java-11-openjdk security update (Oracle Linux 9)

[1:11.0.15.0.10-1] - Update to jdk-11.0.15.0+10 - Update release notes to 11.0.15.0+10 - Switch to GA mode for release - Rebase RH1996182 FIPS patch after JDK-8254410 - Resolves: rhbz#2073594

Jun 30, 2022
High max 9.8

ELSA-2022-4873 7 CVEs

Important: firefox security update (Oracle Linux 9)

[91.10.0-1.0.1] - Replaced upstream package with oracle-indexhtml [Orabug: 33802044] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Removed Upstream references [91.10.0-1] - Update to 91.10.0 build1

Jun 30, 2022
High

ELSA-2022-5249 4 CVEs

Important: kernel security and bug fix update (Oracle Linux 9)

[5.14.0-70.17.1.0.1_0.OL9] - lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.17.1_0.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RH…

Jun 30, 2022
High max 7.5

ELSA-2022-2137 5 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 9)

[1:1.8.0.332.b09-1] - Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Resolves: rhbz#2074649

Jun 30, 2022
High

ELSA-2022-4591 1 CVE

Important: subversion security update (Oracle Linux 9)

[1.14.1-5] - Fix for CVE-2022-24070 (#2076565)

Jun 30, 2022
High max 7.5

ELSA-2022-4899 1 CVE

Important: compat-openssl11 security and bug fix update (Oracle Linux 9)

[1:1.1.1k-4.0.1] - Backport upstream PRs 18446 and 18481 which update certificates used for the self-tests [Orabug: 34326055] [1:1.1.1k-4] - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Resolves: rhbz#2063147…

Jun 30, 2022
High max 8.1

ELSA-2022-5099 8 CVEs

Important: grub2 security update (Oracle Linux 9)

[2.06-27.0.5.el9_0.7] - Replaced bugzilla.oracle.com references [Orabug: 34202300] - Update provided certificate version to 202204 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS-16371] - bump SBAT generation - Update bug url [Orabug: 34202300] - Re…

Jun 30, 2022
High max 5.5

ELSA-2022-9507 4 CVEs

Important: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.13.0.5] - ensure UEK also rebuilds initramfs [Orabug: 34280052] [2:2.1-73.13.0.3] - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375 [2:2.1-73.13.0.2] - roll back 06-6a-06 to 0…

Jun 23, 2022
High max 5.5

ELSA-2022-9508 4 CVEs

Important: microcode_ctl security update (Oracle Linux 8)

[4:20220207-1.0.4] - ensure UEK also rebuilds initramfs [Orabug: 34280058]

Jun 23, 2022
High

ELSA-2022-5162 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-8] - Resolves: CVE-2022-1552 - Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b

Jun 22, 2022
High max 6.7

ELSA-2022-9496 1 CVE

Important: kernel security update (Oracle Linux 8)

[4.18.0-372.9.1.0.2.el8.OL8] - debug: lockdown kgdb [Orabug: 34270802] {CVE-2022-21499} [4.18.0-372.9.1.0.1.el8.OL8] - mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]

Jun 21, 2022
High

ELSA-2022-5056 1 CVE

Important: cups security and bug fix update (Oracle Linux 8)

[1:2.2.6-45.2] - CVE-2022-26691 cups: authorization bypass when using 'local' authorization [1:2.2.6-45.1] - 2073531 - 30-second delays printing to Windows 2016 server via HTTPS

Jun 20, 2022
High max 6.7

ELSA-2022-9495 1 CVE

Important: kernel security update (Oracle Linux 7)

[3.10.0-1160.66.1.0.2.el7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}

Jun 17, 2022
High

ELSA-2022-9494 2 CVEs

Important: olcne security update (Oracle Linux 8)

[1.4.5-1] - Address qemu CVE-2022-26353, CVE-2021-3748

Jun 17, 2022
High

ELSA-2022-9491 2 CVEs

Important: olcne security update (Oracle Linux 7)

[1.5.3-1] - Address qemu CVE-2022-26353, CVE-2021-3748

Jun 16, 2022
High

ELSA-2022-9492 2 CVEs

Important: olcne security update (Oracle Linux 7)

[1.4.5-1] - Address qemu CVE-2022-26353, CVE-2021-3748

Jun 16, 2022
High

ELSA-2022-9493 2 CVEs

Important: olcne security update (Oracle Linux 8)

[1.5.3-1] - Address qemu CVE-2022-26353, CVE-2021-3748

Jun 16, 2022
High max 8.8

ELSA-2022-5052 1 CVE

Important: xz security update (Oracle Linux 7)

[5.2.2-2] - Fix CVE-2022-1271 Resolves: CVE-2022-1271

Jun 15, 2022
High

ELSA-2022-9478 7 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.514.3.el7] - uek-rpm: Update OL7 SecureBoot certificate files (Saeed Mirzamohammadi) [Orabug: 34219958] [4.14.35-2047.514.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34207044] {CVE-2022-1729} - debug: Lock do…

Jun 15, 2022
High max 5.5

ELSA-2022-9485 4 CVEs

Important: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.13.0.3] - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375 [2:2.1-73.13.0.2] - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset [Orabug: 34076312] [2:2.1-73.13.0.1] …

Jun 15, 2022
High max 5.5

ELSA-2022-9482 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.514.5.el7] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34275786] [4.14.35-2047.514.4.el7] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202260] {CVE-2022-21123} {CVE-2022-21125} {CVE-202…

Jun 15, 2022
High

ELSA-2022-9477 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.514.3] - uek-rpm: Update OL7 SecureBoot certificate files (Saeed Mirzamohammadi) [Orabug: 34219958] [4.14.35-2047.514.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34207044] {CVE-2022-1729} - debug: Lock down k…

Jun 14, 2022
High max 5.5

ELSA-2022-9483 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.514.5] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34275786] [4.14.35-2047.514.4] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202260] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125}…

Jun 14, 2022
High

ELSA-2022-9479 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.308.7] - uek-rpm: Update OL7/8 Secureboot certificate and shim versions (Sherry Yang) [Orabug: 34248329] [5.4.17-2136.308.6] - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) - arm: remove CONFIG_ARCH_HAS_HOLES_…

Jun 14, 2022
High

ELSA-2022-9480 10 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

- 5.4.17-2136.308.7.el7 - uek-rpm: Update OL7/8 Secureboot certificate and shim versions (Sherry Yang) [Orabug: 34248329] [5.4.17-2136.308.6] - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) - arm: remove CONFIG_ARCH_HAS_HO…

Jun 14, 2022
High max 5.5

ELSA-2022-9484 4 CVEs

Important: microcode_ctl security update (Oracle Linux 8)

[4:20220207-1.0.3] - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375 [4:20220207-1.0.2] - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset [Orabug: 34076995] [4:20220207-1.0.…

Jun 14, 2022
High max 5.5

ELSA-2022-9481 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.308.9] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34276099] [5.4.17-2136.308.8] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202259] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {…

Jun 14, 2022
High max 5.5

ELSA-2022-9486 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.308.9] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34276099] [5.4.17-2136.308.8] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202259] {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {…

Jun 14, 2022
High max 8.8

ELSA-2022-4991 1 CVE

Important: xz security update (Oracle Linux 8)

[5.2.4-4] - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271

Jun 13, 2022
High

ELSA-2022-4941 1 CVE

Important: subversion:1.14 security update (Oracle Linux 8)

subversion [1.14.1-2] - add fix for CVE-2022-24070

Jun 9, 2022
High max 8.1

ELSA-2022-4930 1 CVE

Important: python-twisted-web security update (Oracle Linux 7)

[12.1.0-8] - Security fix for CVE-2022-24801: Possible http request smuggling Resolves: rhbz#2073114

Jun 8, 2022
High max 5.3

ELSA-2022-14844 4 CVEs

Important: go-toolset:ol8addon security update (Oracle Linux 8)

go-toolset [1.17.10-1] - Set version to correspond to the matching build golang version - delve can be now added to aarch64 as well, remove ifarch. golang [1.17.10-1.0.1] - Add patches between Go 1.17.7 and Go 1.17.10 - Rename base_versn to base_version - Rem…

Jun 8, 2022
High

ELSA-2022-14857 4 CVEs

Important: go-toolset:ol8addon security update (Oracle Linux 8)

go-toolset [1.16.15-1] - Rebase to Go 1.16.15 golang [1.16.15-1.0.1] - Add patches from 1.16.12 to 1.16.15 - Add Sources for 3 binary files that changed between 1.16.12 and 1.16.15 - Rename base_vrsn to base_version - Reviewed-by: XXX XXX <xxx.xxx@oracle.com>

Jun 8, 2022
High max 6.5

ELSA-2022-9466 1 CVE

Important: shim-signed security update (Oracle Linux 7)

[15.6-1.0.7] - Update shimx64.efi and shimia32.efi signed by Microsoft [JIRA: OLDIS-16370] [15.6-1.0.5] - Update to shim-unsigned v15.6.rc2 [JIRA: OLDIS-16370] [15.6-1.0.3] - Add all algorithms using OPENSSL_add_all_algorithms [JIRA: OLDIS-16370] [15.6-1.0.1]…

Jun 7, 2022
High max 8.1

ELSA-2022-9469 7 CVEs

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.21.el7_9.9] - Add CVE-2022-28736 to the list [JIRA: OLDIS-16371] [2.02-0.87.0.19.el7_9.9] - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS…

Jun 7, 2022
High max 6.5

ELSA-2022-9465 1 CVE

Important: shim security update (Oracle Linux 8)

[15.6-1.0.3] - Update shimx64.efi and shimia32.efi signed by Microsoft [JIRA: OLDIS-16370] [15.6-1.0.2] - Update to shim-unsigned v15.6.rc2 [JIRA: OLDIS-16370] [15.6-1.0.1] - Update to shim-unsigned v15.6.rc1 [JIRA: OLDIS-16370] [15.5-1.0.3] - Update vendor c…

Jun 7, 2022
High max 8.1

ELSA-2022-9471 7 CVEs

Important: grub2 security update (Oracle Linux 8)

[2.02-123.0.3] - Add CVE-2022-28736 to the list [JIRA: OLDIS-16371] [2.02-123.0.2] - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS-16371] - bump SBAT …

Jun 7, 2022