Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.5

ELSA-2023-0103 1 CVE

Moderate: expat security update (Oracle Linux 8)

[2.2.5-10.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-10.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680

Jan 12, 2023
Medium max 5.5

ELSA-2023-0095 10 CVEs

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-26] - Fix various CVEs - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953 [4.0.9-25] - Fix CVE-2022-2867 (#2118857) - Fix CVE-2022-2868 (#2118882) - Fix CVE-2022-2869 (#2118878) [4.0.9-24] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-205…

Jan 12, 2023
Medium max 6.5

ELSA-2023-0096 3 CVEs

Moderate: dbus security update (Oracle Linux 8)

[1.12.8-23.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.8-23.1] - Fix CVE-2022-42010 (#2133644) - Fix CVE-2022-42011 (#2133638) - Fix CVE-2022-42012 (#2133632)

Jan 12, 2023
Medium

ELSA-2023-0087 1 CVE

Moderate: usbguard security update (Oracle Linux 8)

[1.0.0-8.2] - Fix unauthorized access via D-bus - Fix memory leak on D-bus connection failure Resolves: rhbz#2127848

Jan 12, 2023
Medium max 7.5

ELSA-2023-0077 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154459

Jan 12, 2023
Medium max 9.8

ELSA-2023-0050 5 CVEs

Moderate: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:14.21.1-2] - Apply upstream fix for CVE-2022-24999 Resolves: CVE-2022-24999 - Record CVEs fixed by current or previous upstream releases Resolves: CVE-2021-44906 [1:14.21.1-1] - Rebase to version 14.21.1 Resolves: rhbz#2129805 CVE-2022-43548 CVE-202…

Jan 9, 2023
Medium max 8.1

ELSA-2022-8832 2 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 9)

nodejs [1:18.12.1-1] - Rebase + CVEs - Resolves: #2142809 - Resolves: #2142830, #2142856 nodejs-nodemon [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-3517

Dec 9, 2022
Medium max 8.1

ELSA-2022-8833 2 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.12.1-2] - Update version of bundled histogram [1:18.12.1-1] - Rebase to version 18.12.1 Resolves: rhbz#2125580 CVE-2022-43548 CVE-2022-3517 [1:18.9.1-1] - Rebase to version 18.9.1 Resolves: CVE-2022-35255 CVE-2022-35256 nodejs-nodemon [2.0.20-1] …

Dec 8, 2022
Medium

ELSA-2022-10031 1 CVE

Moderate: pcs security update (Oracle Linux 8)

[0.10.14-5.0.1] - Replace HAM-logo.png with a generic one [0.10.14-5] - Fixed ruby socket permissions - Resolves: rhbz#2116838 [0.10.14-4] - Fixed enable sbd from webui - Resolves: rhbz#2117650 [0.10.14-3] - Fixed pcs quorum device remove - Resolves: rhbz#211…

Nov 29, 2022
Medium max 7.8

ELSA-2022-8434 1 CVE

Moderate: dotnet7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.100-0.5.rc2.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.100-0.5.rc2] - Add lldb as a build dependency - Related: RHBZ#2134641 [7.0.100-0.4.rc2] - Enable ppc64le builds - Related: RHBZ#213…

Nov 29, 2022
Medium max 5.1

ELSA-2022-8444 1 CVE

Moderate: keylime security update (Oracle Linux 9)

[6.5.1-1] - Update to 6.5.1 Resolves: CVE-2022-3500

Nov 24, 2022
Medium

ELSA-2022-8062 2 CVEs

Moderate: unbound security, bug fix, and enhancement update (Oracle Linux 9)

[1.16.2-2] - Require openssl tool for unbound-keygen (#2116802) [1.16.2-1] - Update to 1.16.2 (#2087120) [1.16.0-3] - Disable ED25519 and ED448 in FIPS mode (#2079548) [1.16.0-2] - Restart keygen service before every unbound start (#2094336) [1.16.0-1] - Upda…

Nov 22, 2022
Medium max 7.5

ELSA-2022-8070 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 9)

[2.85-5] - Prevent endless loop in forward_query (#2120711) [2.85-4] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934)

Nov 22, 2022
Medium

ELSA-2022-8151 1 CVE

Moderate: poppler security and bug fix update (Oracle Linux 9)

[21.01.0-13] - Dont run out of file for Hints - Rebuild for #2096451 - Resolves: #2090970, #2096451

Nov 22, 2022
Medium max 7.7

ELSA-2022-8194 10 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-2] - Update to version 4.4.0 - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354 CVE-2022-1355

Nov 22, 2022
Medium max 4.3

ELSA-2022-8219 1 CVE

Moderate: mutt security update (Oracle Linux 9)

[5:2.2.6-1] - Rebase to upstream version 2.2.6 Resolves: CVE-2022-1328

Nov 22, 2022
Medium

ELSA-2022-8318 1 CVE

Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 9)

[2.5.2-1] - Rebase to version 2.5.2 - resolves: rhbz#2109017 - Fix CVE-2022-32746 [2.5.1-1] - related: rhbz#2077490 - Rebase to version 2.5.1 [2.5.0-1] - resolves: rhbz#2077490 - Rebase to version 2.5.0

Nov 22, 2022
Medium max 7.8

ELSA-2022-8361 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 9)

[1.46.5-3] - Add sanity check to extent manipulation (#2073549)

Nov 22, 2022
Medium max 8.8

ELSA-2022-8054 11 CVEs

Moderate: webkit2gtk3 security and bug fix update (Oracle Linux 9)

Nov 22, 2022
Medium max 7.8

ELSA-2022-8353 2 CVEs

Moderate: python3.9 security, bug fix, and enhancement update (Oracle Linux 9)

[3.9.14-1] - Update to 3.9.14 - Security fixes for CVE-2020-10735 and CVE-2021-28861 Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249 [3.9.13-3] - Fix test_get_ciphers in test_ssl.py for FIPS mode Resolves: rhbz#2058233 [3.9.13-2] - Security fix for CVE-201…

Nov 22, 2022
Medium max 6.5

ELSA-2022-8126 1 CVE

Moderate: ignition security, bug fix, and enhancement update (Oracle Linux 9)

[2.14.0-1] - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service [2.13.0-2] - Rename -validate-nonlinux subpackage to -validate-redistributable - Add static Linux binaries to -redistributable - Fix macro in…

Nov 22, 2022
Medium max 9.8

ELSA-2022-8291 1 CVE

Moderate: rsync security and bug fix update (Oracle Linux 9)

[3.2.3-18] - Resolves: #2111177 - remote arbitrary files write inside the directories of connecting peers [3.2.3-17] - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field [3.2…

Nov 22, 2022
Medium max 6.8

ELSA-2022-8068 2 CVEs

Moderate: bind security update (Oracle Linux 9)

[32:9.16.23-5] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.16.23-4] - Export bind-doc package (#2104863) [32:9.16.23…

Nov 22, 2022
Medium

ELSA-2022-8221 2 CVEs

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 9)

[1.20.11-11] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2108157, rhbz#2108162

Nov 22, 2022
Medium

ELSA-2022-8022 1 CVE

Moderate: qt5 security and bug fix update (Oracle Linux 9)

[5.15.3-1] - 5.15.3 Resolves: bz#2061352

Nov 22, 2022
Medium

ELSA-2022-8384 1 CVE

Moderate: harfbuzz security update (Oracle Linux 9)

[2.7.4-8] - Resolves:rh#2103849 - Update tests.yaml [2.7.4-7] - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml [2.7.4-6] - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the…

Nov 22, 2022
Medium max 6.5

ELSA-2022-7970 1 CVE

Moderate: protobuf security update (Oracle Linux 9)

[3.14.0-13] - Rebuilt for test fixes [3.14.0-12] - Rebuilt for test fixes [3.14.0-11] - Applied patch for for CVE-2021-22570 (#2055641)

Nov 22, 2022
Medium max 7.8

ELSA-2022-8267 31 CVEs 1 exploited

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-162.6.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Nov 22, 2022
Medium max 8.2

ELSA-2022-8197 2 CVEs

Moderate: php security, bug fix, and enhancement update (Oracle Linux 9)

[8.0.20-3] - snmp3 calls using authPriv or authNoPriv immediately return false #2104630 [8.0.20-2] - fix patch41 not applied (use system nikic/php-parser when available) [8.0.20-1] - rebase to 8.0.20 #2095752 - clean unneeded dependency on useradd command #20…

Nov 22, 2022
Medium max 7.5

ELSA-2022-8250 6 CVEs

Moderate: grafana-pcp security update (Oracle Linux 9)

[3.2.0-3] - bump NVR

Nov 22, 2022
Medium

ELSA-2022-7967 4 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.0-13] - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546] - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546] - Resolves: bz#2117546 ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMUs system_reset …

Nov 22, 2022
Medium max 6.5

ELSA-2022-8162 3 CVEs

Moderate: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 9)

[2.1.3-4] - Bump version to 2.1.3-4 - Resolves: Bug 1872451 - Fix regression with dscreate template [2.1.3-3] - Bump version to 2.1.3-3 - Resolves: Bug 2118765 [2.1.3-2] - Bump version to 2.1.3-2 - Resolves: Bug 2118765 - SIGSEGV in sync_repl [2.1.3-1] - Bump…

Nov 22, 2022
Medium

ELSA-2022-7978 2 CVEs

Moderate: gimp security and enhancement update (Oracle Linux 9)

[2:2.99.8-3] - fix CVE-2022-30067 - fix CVE-2022-32990

Nov 22, 2022
Medium max 7.5

ELSA-2022-8112 1 CVE

Moderate: frr security, bug fix, and enhancement update (Oracle Linux 9)

* Tue Jun 14 2022 Michal Ruprich - 8.2.2-4 - Resolves: #2095404 - frr use systemd-sysusers [8.2.2-3] - Resolves: #2081304 - Enhanced TMT testing for centos-stream [8.2.2-2] - Resolves: #2069571 - the dynamic routing setup does not work any more [8.2.2-1] - Re…

Nov 22, 2022
Medium max 9.1

ELSA-2022-8067 10 CVEs

Moderate: httpd security, bug fix, and enhancement update (Oracle Linux 9)

[2.4.53-7.0.1] - Replace index.html with Oracles index page oracle_index.html. [2.4.53-7] - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match…

Nov 22, 2022
Medium max 6.8

ELSA-2022-8385 1 CVE

Moderate: dhcp security and enhancement update (Oracle Linux 9)

[12:4.4.2-17.b1] - omshell: add support for hmac-sha512 algorithm (#2083553) [12:4.4.2-16.b1] - Fix for CVE-2021-25220

Nov 22, 2022
Medium max 6.5

ELSA-2022-8393 1 CVE

Moderate: logrotate security update (Oracle Linux 9)

[3.18.0-7] - lockState: do not print error: when exit code is unaffected (#2090926) [3.18.0-6] - fix potential DoS from unprivileged users via the state file (CVE-2022-1348) * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - Rebuilt for IMA sigs, glibc 2.34,…

Nov 22, 2022
Medium max 4.3

ELSA-2022-8317 1 CVE

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 9)

[4.16.4-101] - resolves: rhbz#2121317 - Do not require samba package in python3-samba [4.16.4-100] - Rebase to version 4.16.4 - resolves: rhbz#2108332 - Fix CVE-2022-32742 [ 4.16.3-101] - related: rhbz#2077487 - Rebase Samba to 4.16.3 - resolves: rhbz#2097655…

Nov 22, 2022
Medium

ELSA-2022-8078 1 CVE

Moderate: flac security update (Oracle Linux 9)

[1.3.3-10] - handle end-of-stream when encoding with verification (CVE-2021-0561)

Nov 22, 2022
Medium max 7.5

ELSA-2022-7954 8 CVEs

Moderate: podman security and bug fix update (Oracle Linux 9)

[2:4.2.0-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.2.0-3] - fix dependency in test subpackage - Related: #2061316 [2:4.2.0-2] - readd catatonit - Related: #2061316 [2:4.2.0-1] - update to latest content of ht…

Nov 22, 2022