Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High max 9.8

ELSA-2022-4887 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.10.0-1] - Update to 91.10.0 build1

Jun 6, 2022
High

ELSA-2022-9460 4 CVEs

Important: kvm_utils security update (Oracle Linux 8)

Jun 6, 2022
High max 9.8

ELSA-2022-4891 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.10.0-1] - Update to 91.10.0 build1

Jun 3, 2022
High max 9.8

ELSA-2022-4870 7 CVEs

Important: firefox security update (Oracle Linux 7)

[91.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.10.0-1] - Update to 91.10.0 b…

Jun 2, 2022
High max 9.8

ELSA-2022-4872 7 CVEs

Important: firefox security update (Oracle Linux 8)

[91.10.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.10.0-1] - Update to 91.10.0 build1

Jun 2, 2022
High

ELSA-2022-4855 1 CVE

Important: postgresql:13 security update (Oracle Linux 8)

postgresql [13.7-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [13.7-1] - Resolves: CVE-2022-1552 - Update to 13.7 - Release notes: https://www.postgresql.org/docs/release/13.7/

Jun 2, 2022
High

ELSA-2022-4805 1 CVE

Important: postgresql:10 security update (Oracle Linux 8)

[10.21-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [10.21-1] - Resolves: CVE-2022-1552 - Update to 10.21 - Release notes: https://www.postgresql.org/docs/release/10.21/ [10.19-…

Jun 1, 2022
High

ELSA-2022-4807 1 CVE

Important: postgresql:12 security update (Oracle Linux 8)

postgresql [12.11-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [12.11-1] - Resolves: CVE-2022-1552 - Update to 12.11 - Release notes: https://www.postgresql.org/docs/release/12.…

Jun 1, 2022
High max 9.8

ELSA-2022-4797 1 CVE

Important: maven:3.6 security update (Oracle Linux 8)

maven-shared-utils [3.2.1-0.4] - Build with OpenJDK 8

Jun 1, 2022
High max 9.8

ELSA-2022-4798 1 CVE

Important: maven:3.5 security update (Oracle Linux 8)

maven-shared-utils [3.2.1-0.2] - Fix commandline injection vulnerability - Resolves: CVE-2022-29599

Jun 1, 2022
High max 8.1

ELSA-2022-4803 1 CVE

Important: rsyslog security update (Oracle Linux 7)

[8.24.0-57.0.4.el7_9.3] - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler [8.24.0-57.3] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081395

May 31, 2022
High max 8.1

ELSA-2022-4799 1 CVE

Important: rsyslog security update (Oracle Linux 8)

[8.2102.0-7.1] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081400

May 30, 2022
High max 9.0

ELSA-2022-4796 1 CVE

Important: nodejs:16 security update (Oracle Linux 8)

nodejs [1:16.14.0-4] - Apply lock file validation fixes - Resolves CVE-2021-43616 - Resolves: RHBZ#2070012

May 30, 2022
High

ELSA-2022-9442 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.5] - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34211496] {CVE-2022-1852} {CVE-2022-1852}

May 28, 2022
High

ELSA-2022-9443 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.5] - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34211496] {CVE-2022-1852}

May 28, 2022
High

ELSA-2022-9433 1 CVE

Important: libvirt libvirt-python security update (Oracle Linux 7)

libvirt [5.7.0-33.el7] - qemu: refresh vNUMA/SMT pinning. (Wim ten Have) [Orabug: 34083505] - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have) [Orabug: 34023508] - nwfilter: fix crash when counting number of network filt…

May 26, 2022
High

ELSA-2022-9432 3 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-17.el7] - arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin) - arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo) - arm/acpi: fix PCI _PRT definition (Heyi Guo) - docs: fix references to docs/devel/atomics.rst (S…

May 26, 2022
High max 6.7

ELSA-2022-9427 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.2.el7] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152700] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9422 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.62.3.1] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152701] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9423 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2.2] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152700] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9425 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.4] - io_uring: always use original task when preparing req identity (Jens Axboe) [Orabug: 34186552] {CVE-2022-1786} [5.4.17-2136.307.3.3] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152699] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9426 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.4] - io_uring: always use original task when preparing req identity (Jens Axboe) [Orabug: 34186552] {CVE-2022-1786} [5.4.17-2136.307.3.3] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152699] {CVE-2022-21499}

May 24, 2022
High

ELSA-2022-9412 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.1.el7] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34175592] {CVE-2022-1729}

May 21, 2022
High

ELSA-2022-9410 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2.1] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34175592] {CVE-2022-1729}

May 20, 2022
High max 7.5

ELSA-2022-9416 1 CVE

Important: pcs security update (Oracle Linux 8)

[0.10.12-6.0.1.el8_6.1] - Replace HAM-logo.png with a generic one [0.10.12-6.el8_6.1] - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz#2081331

May 20, 2022
High

ELSA-2022-9413 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172709] {CVE-2022-1729}

May 20, 2022
High

ELSA-2022-9409 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172709] {CVE-2022-1729}

May 20, 2022
High max 7.8

ELSA-2022-4642 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.66.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

May 19, 2022
High max 8.8

ELSA-2022-2143 1 CVE

Important: container-tools:3.0 security update (Oracle Linux 8)

podman [3.0.1-9] - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel (https://github.com/containers/podman/commit/801b7e8) - Resolves: #2074143

May 19, 2022
High max 7.5

ELSA-2022-2199 3 CVEs

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.105-1.0.1] - Add missing Oracle RIDs [6.0.105-1] - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ#2082267 [6.0.104-2] - Update to .NET SDK 6.0.104 and Runtime 6.0.4 - Resolves: RHBZ#2074640

May 19, 2022
High

ELSA-2022-2234 1 CVE

Important: subversion:1.10 security update (Oracle Linux 8)

subversion [1.10.2-5] - add security fix for CVE-2022-24070

May 19, 2022
High max 7.5

ELSA-2022-2201 1 CVE

Important: rsync security update (Oracle Linux 8)

[3.1.3-14.2] - Related: #2074783 - Needed to bump this to rebuild correctly [3.1.3-14.1] - Resolves: #2074783 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs

May 19, 2022
High max 7.5

ELSA-2022-2200 3 CVEs

Important: .NET 5.0 security, bug fix, and enhancement update (Oracle Linux 8)

[5.0.214-1.0.1] - Support AArch64 on Oracle Linux [Orabug: 32738620] - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch [5.0.214-1] - Update to .NET SDK 5.0.214 and Runtime 5.0.17 - Resolves: RHBZ#2082258 [5.0.213-2] - Update to .NET SD…

May 19, 2022
High max 7.5

ELSA-2022-2202 3 CVEs

Important: .NET Core 3.1 security, bug fix, and enhancement update (Oracle Linux 8)

[3.1.419-1.0.1] - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ#2060566 [3.1.419-1] - Update to .NET SDK 3.1.419 and Runtime 3.1.25 - Resolves: RHBZ#2081443 [3.1.418-1] - Update to .NET SDK 3.1.418 and R…

May 19, 2022
High max 9.8

ELSA-2022-9358 2 CVEs

Important: glibc security update (Oracle Linux 7)

[2.17-325.0.6] - OraBug 33968985 Security Patches - This release fixes CVE-2022-23219, CVE-2022-23218, and CVE-2021-3999 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.17-325.0.3] - OraBug 33968985 Security Patches This release fixes CVE-2022-232…

May 18, 2022
High max 6.5

ELSA-2022-1988 38 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.9.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey…

May 17, 2022
High max 8.8

ELSA-2022-1762 5 CVEs

Important: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

buildah [1:1.24.2-4] - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 (https://github.com/containers/buildah/commit/7b559a3) - Related: #2059296 [1:1.24.2-3] - switch to RHEL maintenance branch which fixes CVE-2022-276…

May 17, 2022
High max 7.5

ELSA-2022-2213 1 CVE

Important: zlib security update (Oracle Linux 7)

[1.2.7-20] - Resolves: CVE-2018-25032

May 12, 2022
High

ELSA-2022-14549 0 CVEs

Important: podman security update (Oracle Linux 7)

[1.6.4-32.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - handle redirect from the docker registry v2 [Orabug: 29874238] (nikita.gerasimov@oracle.com) - remove changes in NaiveDiffDriver [1.6.4-32] - update to the latest cont…

May 12, 2022
High max 8.8

ELSA-2022-2191 1 CVE

Important: gzip security update (Oracle Linux 7)

[1.5-11] - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271

May 11, 2022