Oracle Linux Security Advisories (ELSA)

2,729 results · Clear filters · Feed

• Medium
  ELSA-2022-8011 3 CVEs

  Moderate: fribidi security update (Oracle Linux 9)

  [1.0.10-6.el9.2] - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063

  Nov 22, 2022
• Medium max 7.5
  ELSA-2022-8008 7 CVEs

  Moderate: buildah security and bug fix update (Oracle Linux 9)

  [1.27.0-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.27.0-2] - fix CVE-2022-2990 - Related: #2061316 [1:1.27.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.27.0 - Related: #2061316 [1:1.2…

  Nov 22, 2022
• Medium max 8.8
  ELSA-2022-8208 1 CVE

  Moderate: dovecot security and enhancement update (Oracle Linux 9)

  [1:2.3.16-7.0.1] - do not run systemd commands during leapp upgrade [Orabug: 34680501] [1:2.3.16-7] - fix possible privilege escalation when similar master and non-master passdbs are used (#2106232) [1:2.3.16-6] - fix possible nonzero return value of postinst…

  Nov 22, 2022
• Medium
  ELSA-2022-8340 3 CVEs

  Moderate: freetype security update (Oracle Linux 9)

  [2.10.4-9] - Guard face->size - Resolves: #2079280 [2.10.4-8] - Properly guard face_index - Resolves: #2079262 [2.10.4-7] - Avoid invalid face index - Resolves: #2079271

  Nov 22, 2022
• Medium max 5.9
  ELSA-2022-8252 1 CVE

  Moderate: yajl security update (Oracle Linux 9)

  Nov 22, 2022
• Medium max 5.3
  ELSA-2022-8226 1 CVE

  Moderate: python-lxml security update (Oracle Linux 9)

  [4.6.5-3] - Security fix for CVE-2022-2309 - Resolves: rhbz#2107571

  Nov 22, 2022
• Medium
  ELSA-2022-8222 2 CVEs

  Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

  [21.1.3-3] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2110440, rhbz#2110433

  Nov 22, 2022
• Medium max 7.5
  ELSA-2022-8400 1 CVE

  Moderate: libtirpc security update (Oracle Linux 9)

  [1.3.3] - Rebased to libtirpc-1.3.3 (bz 2118157)

  Nov 22, 2022
• Medium max 6.5
  ELSA-2022-7955 2 CVEs

  Moderate: skopeo security and bug fix update (Oracle Linux 9)

  [2:1.9.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: #2061316 [2:1.9.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: #2061316 [2:1.9.0-1] - update to https://github.com/containers/sko…

  Nov 22, 2022
• Medium
  ELSA-2022-10007 1 CVE

  Moderate: pcs security update (Oracle Linux 9)

  [0.11.3-4] - Fixed ruby socket permissions - Resolves: rhbz#2116841 [0.11.3-3] - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether /etc/booth exists - Resolves: rhbz#2026725 rhbz#2058243 [0.11.3-2] - Fixed 'pcs resource restart' …

  Nov 22, 2022
• Medium max 7.8
  ELSA-2022-7826 1 CVE

  Moderate: dotnet7.0 security, bug fix, and enhancement update (Oracle Linux 8)

  [7.0.100-0.4.rc2.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.100-0.4.rc2] - Enable ppc64le builds - Related: RHBZ#2134642 [7.0.100-0.3.rc2] - Update to .NET 7 RC 2 - Resolves: RHBZ#2134642

  Nov 17, 2022
• Medium max 6.8
  ELSA-2022-7790 1 CVE

  Moderate: bind security update (Oracle Linux 8)

  [32:9.11.36-5] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.11.36-4] - Tighten cache protection against record from forwarders (CVE-2021-25220) - Include test of forwarders […

  Nov 15, 2022
• Medium
  ELSA-2022-7622 2 CVEs

  Moderate: unbound security, bug fix, and enhancement update (Oracle Linux 8)

  [1.16.2-2] - Require openssl tool for unbound-keygen (#2018806) [1.16.2-1] - Update to 1.16.2 (#2027735) [1.16.0-2] - Restart keygen service before every unbound start (#1959468) [1.16.0-1] - Upgrade to 9.16.0 (#2027735) - Update to recent version with compat…

  Nov 15, 2022
• Medium max 6.5
  ELSA-2022-7464 1 CVE

  Moderate: protobuf security update (Oracle Linux 8)

  [3.5.0-15] - Applied patch for for CVE-2021-22570 (#2050494)

  Nov 15, 2022
• Medium max 8.8
  ELSA-2022-7623 1 CVE

  Moderate: dovecot security update (Oracle Linux 8)

  [1:2.3.16-3] - fix possible privilege escalation when similar master and non-master passdbs are used (#2106231)

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7529 10 CVEs

  Moderate: container-tools:3.0 security update (Oracle Linux 8)

  buildah [1.19.9-6] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/6d7f496) - Related: #2061390 [1.19.9-5] - update to the latest content of https://github.com/containers/…

  Nov 15, 2022
• Medium max 7.8
  ELSA-2022-7720 1 CVE

  Moderate: e2fsprogs security and bug fix update (Oracle Linux 8)

  [1.45.6-5] - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548)

  Nov 15, 2022
• Medium
  ELSA-2022-7514 3 CVEs

  Moderate: fribidi security update (Oracle Linux 8)

  [1.0.4-9] - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310. Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062 - Drop --disable-docs from %configure. no such options available.

  Nov 15, 2022
• Medium
  ELSA-2022-7730 1 CVE

  Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 8)

  [2.5.2-2] - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB [2.5.2-1] - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 [2.5.1-1] - related: rhbz#2077484 - Rebase to version 2.5.1 [2.5.0-1] - resolves: rhbz#2077484 -…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7457 6 CVEs

  Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  aardvark-dns [2:1.1.0-4] - remove windows binaries and regenerate vendor tarball - Related: #2061390 [2:1.1.0-3] - add gating.yaml - Related: #2061390 [2:1.1.0-2] - bump Epoch to preserve upgrade path - Related: #2061390 [1.1.0-1] - initial import - Related: …

  Nov 15, 2022
• Medium max 9.8
  ELSA-2022-7692 7 CVEs

  Moderate: xmlrpc-c security update (Oracle Linux 8)

  [1.51.0-8] - Address some Coverity issues in the patch set [1.51.0-7] - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (…

  Nov 15, 2022
• Medium max 7.7
  ELSA-2022-7585 9 CVEs

  Moderate: libtiff security update (Oracle Linux 8)

  [4.0.9-23] - Fix various CVEs - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355

  Nov 15, 2022
• Medium
  ELSA-2022-7639 1 CVE

  Moderate: openblas security update (Oracle Linux 8)

  [0.3.15-4] - Fix out-of-bounds read in *larrv - Resolves: CVE-2021-4048

  Nov 15, 2022
• Medium max 8.2
  ELSA-2022-7624 2 CVEs

  Moderate: php:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

  libzip [1.7.3-1] - update to 1.7.3 php-pecl-apcu [5.1.20-1] - update to 5.1.20 php-pecl-rrd [2.0.3-1] - update to 2.0.3 php-pecl-xdebug3 [3.1.2-1] - update to 3.1.2 rhbz#2030322

  Nov 15, 2022
• Medium
  ELSA-2022-7715 1 CVE

  Moderate: libxml2 security update (Oracle Linux 8)

  [2.9.7-15] - Fix CVE-2016-3709 (#2120781) [2.9.7-14] - Fix CVE-2022-29824 (#2082298)

  Nov 15, 2022
• Medium
  ELSA-2022-7618 1 CVE

  Moderate: gstreamer1-plugins-good security update (Oracle Linux 8)

  [1.16.1-3] - Add patches for matroskademux. CVE-2021-3497 - Resolves: rhbz#1948942

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7648 6 CVEs

  Moderate: grafana-pcp security update (Oracle Linux 8)

  [3.2.0-2] - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gz…

  Nov 15, 2022
• Medium
  ELSA-2022-7461 1 CVE

  Moderate: libreoffice security update (Oracle Linux 8)

  [6.4.7.2-11.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor=Oracle America, Inc. - Added the --with-hamcrest option to configure. [1:6.4.7.2-11] - Resolves: rhbz#2060559 CVE-2021-25636

  Nov 15, 2022
• Medium
  ELSA-2022-7700 2 CVEs

  Moderate: gdisk security update (Oracle Linux 8)

  [1.0.3-11] - Fix double byteswap on big-endian systems also while reading partition names resolves: #2065205 [1.0.3-10] - Fix CVE-2021-0308 resolves: #2052364

  Nov 15, 2022
• Medium max 5.9
  ELSA-2022-7524 1 CVE

  Moderate: yajl security update (Oracle Linux 8)

  [2.1.0-11] - fix CVE-2022-24795 - Related: #2061390

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7519 15 CVEs

  Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

  [7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverse…

  Nov 15, 2022
• Medium max 4.3
  ELSA-2022-7640 1 CVE

  Moderate: mutt security update (Oracle Linux 8)

  [5:2.0.7-2] - Fix CVE-2022-1328 (#2109247)

  Nov 15, 2022
• Medium max 7.7
  ELSA-2022-7458 1 CVE

  Moderate: flatpak-builder security and bug fix update (Oracle Linux 8)

  [1.0.14-2] - Fix CVE-2022-21682 (#2042007) [1.0.14-1] - Update to 1.0.14 (#2047312)

  Nov 15, 2022
• Medium
  ELSA-2022-7482 1 CVE

  Moderate: qt5 security, bug fix, and enhancement update (Oracle Linux 8)

  [5.15.3-1] - 5.15.3 Resolves: bz#2061377

  Nov 15, 2022
• Medium max 8.6
  ELSA-2022-7683 26 CVEs 1 exploited

  Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-425.3.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey…

  Nov 15, 2022
• Medium max 9.8
  ELSA-2022-7793 1 CVE

  Moderate: rsync security and enhancement update (Oracle Linux 8)

  [3.1.3-19] - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field [3.1.3-18] - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers [3.1…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7633 1 CVE

  Moderate: dnsmasq security and bug fix update (Oracle Linux 8)

  [2.79-24] - Prevent endless loop in forward_query (#2120357) [2.79-23] - Add IPv6 ntp-server suboptions support (#2049691) [2.79-22] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934)

  Nov 15, 2022
• Medium max 9.1
  ELSA-2022-7647 10 CVEs

  Moderate: httpd:2.4 security update (Oracle Linux 8)

  httpd [2.4.37-51.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-51] - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via ap_rwrite() - Resolves: …

  Nov 15, 2022
• Medium max 6.5
  ELSA-2022-7830 5 CVEs

  Moderate: nodejs:14 security update (Oracle Linux 8)

  nodejs [1:14.20.1-2] - Record issues fixed in the current version Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 Resolves: CVE-2022-0235 [1:14.20.1-1] - Rebase to version 14.20.1 Resolves: CVE-2022-35256 nodejs-packaging [23-3] - Update…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7469 3 CVEs

  Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

  buildah [1:1.24.5-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 (https://github.com/containers/buildah/commit/8cc4586) - Related: #2061390 [1:1.24.5-1] - update to the latest content of https://github.com/contain…

  Nov 15, 2022