Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,092 results · Clear filters · Feed

High

ELSA-2022-9367 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124234] [4.14.35-2047.513.1] - mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu) [Orabug: 34050050] - esp: F…

May 10, 2022
High

ELSA-2022-9366 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.el7] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124234] [4.14.35-2047.513.1.el7] - mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu) [Orabug: 34050050] …

May 10, 2022
High max 8.6

ELSA-2022-9365 8 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

May 10, 2022
High max 8.6

ELSA-2022-9368 8 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.1] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124233] [5.4.17-2136.307.3] - kvm: debugfs: fix memory leak in kvm_create_vm_debugfs (Pavel Skripkin) [Orabug: 33099019] - KVM: debug…

May 10, 2022
High

ELSA-2022-9364 1 CVE

Important: virt:kvm_utils security update (Oracle Linux 8)

qemu-kvm [4.2.1.16.el8] - Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145} - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson) - migration: Introduce ram_transferred_add() (David Edmondson) …

May 9, 2022
High max 7.5

ELSA-2022-9363 2 CVEs

Important: olcne istio istio security update (Oracle Linux 7)

olcne [1.3.5-1] - Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15) istio [1.12.6-1] - Addresses CVE-2022-24726, CVE-2022-24921 istio [1.11.4-1] - Added Oracle specific files for 1.11.4-1

May 9, 2022
High max 7.5

ELSA-2022-9362 2 CVEs

Important: olcne istio istio security update (Oracle Linux 7)

olcne [1.4.3-1] - Update Istio to 1.13.2 istio [1.12.6-1] - Addresses CVE-2022-24726, CVE-2022-24921 istio [1.13.2-1] - Added Oracle specific files for 1.13.2-1

May 9, 2022
High max 9.8

ELSA-2022-1725 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.9.0-3] - Update to 91.9.0 build3 [91.9.0-2] - Update to 91.9.0 build2 [91.9.0-1] - Update to 91.9.0

May 5, 2022
High max 9.8

ELSA-2022-1730 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.9.0-3] - Update to 91.9.0 build3 [91.9.0-2] - Update to 91.9.0 build2 [91.9.0-1] - Update to 91.9.0

May 5, 2022
High max 9.8

ELSA-2022-1703 6 CVEs

Important: firefox security update (Oracle Linux 7)

[91.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.9.0-1] - Update to 91.9.0

May 4, 2022
High max 9.8

ELSA-2022-1705 6 CVEs

Important: firefox security update (Oracle Linux 8)

[91.9.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.9.0-1] - Update to 91.9.0

May 4, 2022
High max 6.4

ELSA-2022-9348 10 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.62.3] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679806] {CVE-2021-0920} - fs: add fget_many() and fput_many() (Jens Axboe) [Orabug: 33679806] - af_unix: fix garbage collect vs MSG_PEEK (Miklos Sze…

May 3, 2022
High max 9.8

ELSA-2022-1643 1 CVE

Important: xmlrpc-c security update (Oracle Linux 8)

[1.51.0-5.1] - Add missing validation of encoding (CVE-2022-25235) (#2058114)

May 2, 2022
High max 9.8

ELSA-2022-1541 1 CVE

Important: maven-shared-utils security update (Oracle Linux 7)

[0.4-4] - Fix commandline injection vulnerability - Resolves: rhbz#2068651

Apr 29, 2022
High

ELSA-2022-9344 1 CVE

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-16.el7] - Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145} - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson) - migration: Introduce ram_transferred_add() (David Edmondson) - ACPI…

Apr 29, 2022
High max 7.5

ELSA-2022-1642 1 CVE

Important: zlib security update (Oracle Linux 8)

[1.2.11-18] - Resolves: CVE-2018-25032 [1.2.11-17] - Fixed DFLTCC compression level switching issues (#1875492) - Enabled HW compression for compression levels 1 through 6 (#1847438) - Fixed inflateSyncPoint() bad return value on z15 (#1888930)

Apr 28, 2022
High

ELSA-2022-1550 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-348.23.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Apr 27, 2022
High max 9.8

ELSA-2022-9341 11 CVEs

Important: ol-automation-manager security update (Oracle Linux 8)

[1.0.2-1.el8] - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108, CVE-2021-33203, CVE-2021-33571, CVE-2021-44420, CVE-2021-31542, CVE-2021-28658, CVE-2021-28957, CVE-2021-43818, CVE-2020-27783 [Orabug: 34109801]

Apr 27, 2022
High max 8.8

ELSA-2022-1537 1 CVE

Important: gzip security update (Oracle Linux 8)

[1.9-13] - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271

Apr 26, 2022
High max 7.8

ELSA-2022-9313 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.512.6] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initialize re…

Apr 25, 2022
High max 7.8

ELSA-2022-9314 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.512.6.el7] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initializ…

Apr 25, 2022
High max 7.5

ELSA-2022-1487 5 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:1.8.0.332.b09-1] - Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 [1:1.8.0.332.b06-0.1.ea] - Update to shen…

Apr 25, 2022
High max 7.5

ELSA-2022-1491 5 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.332.b09-1] - Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 [1:1.8.0.332.b06-0.1.ea] - Update to shen…

Apr 25, 2022
High max 7.5

ELSA-2022-1440 5 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:11.0.15.0.9-2.0.1] - link atomic for ix86 build [1:11.0.15.0.9-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 [1:11.0.15.0.9-2] - Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422 …

Apr 20, 2022
High max 7.5

ELSA-2022-1442 5 CVEs

Important: java-11-openjdk security update (Oracle Linux 8)

[1:11.0.15.0.9-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 [1:11.0.15.0.9-2] - Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422 [1:11.0.15.0.9-1] - Update to jdk-11.0.15.0+9 - Upd…

Apr 20, 2022
High max 7.5

ELSA-2022-1445 6 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.3.0.6-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073575 [1:17.0.3.0.6-2] - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476 - Related: rhbz#2073575 [1:17.0.3.0.6-1] - JDK-8283911 patch no longer needed no…

Apr 20, 2022
High

ELSA-2022-9276 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

[2.4.37-43.0.3.3] - Resolves: CVE-2021-33193 a crafted method sent through HTTP/2 will bypass validation [Orabug: 33942809]

Apr 13, 2022
High max 8.8

ELSA-2022-1302 9 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.8.0-1] - Update to 91.8.0

Apr 12, 2022
High max 7.8

ELSA-2022-9273 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 8.8

ELSA-2022-1301 9 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.8.0-1] - Update to 91.8.0

Apr 11, 2022
High max 7.8

ELSA-2022-9274 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 8.8

ELSA-2022-1284 8 CVEs

Important: firefox security update (Oracle Linux 7)

[91.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.8.0-1] - Update to 91.8.0

Apr 8, 2022
High

ELSA-2022-9270 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.8.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34048826] {CVE-2022-1016}

Apr 8, 2022
High

ELSA-2022-9271 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.8.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34048826] {CVE-2022-1016}

Apr 8, 2022
High max 8.8

ELSA-2022-1287 8 CVEs

Important: firefox security update (Oracle Linux 8)

[91.8.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.8.0-1] - Update to 91.8.0

Apr 8, 2022
High

ELSA-2022-9265 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.305.5.5] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}

Apr 8, 2022
High

ELSA-2022-9264 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.305.5.5] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}

Apr 8, 2022
High

ELSA-2022-9266 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.5.1.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34018777] {CVE-2022-1016}

Apr 7, 2022
High

ELSA-2022-9267 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.5.1.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34018777] {CVE-2022-1016}

Apr 7, 2022
High

ELSA-2022-1198 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

[3.10.0-1160.62.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Apr 6, 2022