Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium

ELSA-2022-7594 1 CVE

Moderate: poppler security and bug fix update (Oracle Linux 8)

[20.11.0-5] - Dont run out of file for Hints - Rebuild for #2096452 - Resolves: #2090969, #2096452

Nov 15, 2022
Medium

ELSA-2022-7583 2 CVEs

Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update (Oracle Linux 8)

xorg-x11-server [1.20.11-9] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2108156, rhbz#2108161 [1.20.11-8] - Rebuild again for ipv6 xtrans fix Related: #2075132 [1.20.11-6] - Rebuild for ipv6 xtrans fix Related: #2075…

Nov 15, 2022
Medium max 8.8

ELSA-2022-7704 11 CVEs

Moderate: webkit2gtk3 security and bug fix update (Oracle Linux 8)

glib2 [2.56.4-159.0.1] - Rebuild with python 36 [Orabug: 34701176] [2.56.4-159] - Add --interface-info-[body|header] modes to gdbus-codegen - Related: #2061994 webkit2gtk3

Nov 15, 2022
Medium

ELSA-2022-7745 3 CVEs

Moderate: freetype security update (Oracle Linux 8)

[2.9.1-9] - Guard face->size - Resolves: #2079279 [2.9.1-8] - Properly guard face_index - Resolves: #2079261 [2.9.1-7] - Do not search for windres - Resolves: #2079270 [2.9.1-6] - Avoid invalid face index - Resolves: #2079270 [2.9.1-5] - Test bitmap size earl…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7593 1 CVE

Moderate: python27:2.7 security update (Oracle Linux 8)

babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned …

Nov 15, 2022
Medium max 8.2

ELSA-2022-7628 3 CVEs

Moderate: php:7.4 security, bug fix, and enhancement update (Oracle Linux 8)

libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php [7.4.30-1] - rebase to 7.4.30 #2099615 [7.4.19-3] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 [7.4.19-2] - fix SSRF bypass in FILTER_VALIDATE_URL CVE-20…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7581 1 CVE

Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

Cython [0.29.14-4] - Exclude unsupported i686 arch [0.29.14-3] - Unversioned binaries renamed [0.29.14-2] - Adjusted for Python 3.8 module in RHEL 8 - without emacs plugin [0.29.14-1] - Update to 0.29.14 (#1768034) - Python 2 subpackage has been removed scipy…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7592 1 CVE

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

Cython [0.29.21-5] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [0.29.21-4] - Drop build dependency on coverage [0.29.21-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [0.29.21-2] - Re-enable tests. [0…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7340 3 CVEs 2 exploited

Moderate: php-pear security update (Oracle Linux 7)

[1:1.9.4-23] - update Archive_Tar to 1.4.14 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949

Nov 3, 2022
Medium max 9.8

ELSA-2022-7314 1 CVE

Moderate: zlib security update (Oracle Linux 9)

[1.2.11-32] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434

Nov 2, 2022
Medium max 6.2

ELSA-2022-7323 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.10-3] - Security fix for CVE-2020-10735 - Fix the test suite support for Expat >= 2.4.5 Resolves: rhbz#1834423

Nov 2, 2022
Medium

ELSA-2022-7329 1 CVE

Moderate: lua security update (Oracle Linux 9)

[5.4.2-4.3] - Fix up CVE-2022-33099 patch [5.4.2-4.2] - Enable gating [5.4.2-4.1] - apply upstream fix for CVE-2022-33099

Nov 2, 2022
Medium max 7.1

ELSA-2022-7119 112 CVEs

Moderate: mysql:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

mecab [0.996-2] - Rebuild to fix the issue described in #2000986 - Resolves: #2000986 mysql [8.0.30-1] - Update to MySQL 8.0.30 - Remove patches now upstream: chain certs, s390 and robin hood - Add a new plugin 'conflicting_variables.so' [8.0.29-1] - Update t…

Oct 27, 2022
Medium

ELSA-2022-7128 1 CVE

Moderate: postgresql:12 security update (Oracle Linux 8)

postgresql [12.12-1] - Resolves: #2131177 - Update to version 12.12

Oct 27, 2022
Medium max 6.5

ELSA-2022-7133 1 CVE

Moderate: 389-ds:1.4 security update (Oracle Linux 8)

[1.4.3.28-8] - Bump version to 1.4.3.28-8 - Resolves: Bug 2131743 - SIGSEGV in sync_repl

Oct 27, 2022
Medium max 4.3

ELSA-2022-7111 1 CVE

Moderate: samba security and bug fix update (Oracle Linux 8)

[4.15.5-10.0.1] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.15.5-10] - resolves: rhbz#2126041 - Do not require samba package in python3-samba [4.15.5-9] - Fix CVE-2022-32742 - resolves: rhbz#21255…

Oct 26, 2022
Medium

ELSA-2022-7108 2 CVEs

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-16] - Fixed CVE-2020-35527 - Fixed CVE-2020-35525

Oct 26, 2022
Medium max 7.5

ELSA-2022-7105 1 CVE

Moderate: gnutls security update (Oracle Linux 8)

[3.6.16-5] - Fix double-free in gnutls_pkcs7_verify (#2109787)

Oct 26, 2022
Medium max 9.8

ELSA-2022-7106 1 CVE

Moderate: zlib security update (Oracle Linux 8)

[1.2.11.19] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434

Oct 26, 2022
Medium max 7.5

ELSA-2022-7129 9 CVEs

Moderate: git-lfs security and bug fix update (Oracle Linux 8)

[2.13.3-3] - Rebuild with new Golang - Resolves: rhbz#2131795

Oct 26, 2022
Medium max 6.5

ELSA-2022-7087 1 CVE

Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

[1.3.10-2-17] - Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl

Oct 25, 2022
Medium

ELSA-2022-7086 1 CVE

Moderate: pki-core security update (Oracle Linux 7)

[10.5.18-23] - ########################################################################## - # RHEL 7.9 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to …

Oct 24, 2022
Medium max 5.3

ELSA-2022-7002 4 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

[1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u3…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7008 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 7)

[1:11.0.17.0.8-2.0.1] - link atomic for ix86 build [1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTrans…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7012 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNam…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7006 4 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u3…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7000 6 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.5.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneName…

Oct 21, 2022
Medium max 5.3

ELSA-2022-6999 6 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.5.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneName…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7007 4 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 9)

[1.8.0.352.b08-2.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7013 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[11.0.17.0.8-2.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary …

Oct 21, 2022
Medium max 7.8

ELSA-2022-6911 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 8)

[6.0.110-1.0.1] - Add missing Oracle RIDs [6.0.110-1] - Update to .NET SDK 6.0.110 and Runtime 6.0.10 - Resolves: RHBZ#2131327

Oct 13, 2022
Medium max 7.8

ELSA-2022-6913 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 9)

[6.0.110-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.110-1] - Update to .NET SDK 6.0.110 and Runtime 6.0.10 - Resolves: RHBZ#2131328

Oct 13, 2022
Medium max 7.8

ELSA-2022-6912 1 CVE

Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.424-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.424-1] - Update to .NET SDK 3.1.424 and Runtime 3.1.30 - Resolves: RHBZ#2131728

Oct 12, 2022
Medium max 7.5

ELSA-2022-6854 1 CVE

Moderate: gnutls and nettle security, bug fix, and enhancement update (Oracle Linux 9)

gnutls [3.7.6-12] - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutls_key_generate with short key sizes non-approved - fips: fix checking on hash algorithm used in ECDSA - fips: pre…

Oct 11, 2022
Medium max 7.5

ELSA-2022-6820 1 CVE

Moderate: prometheus-jmx-exporter security update (Oracle Linux 8)

[0.12.0-8] - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 (BZ 2128477)

Oct 6, 2022
Medium max 8.8

ELSA-2022-6540 1 CVE 1 exploited

Moderate: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1] - Update to 2.36.7 Related: #2123429

Sep 22, 2022
Medium max 6.5

ELSA-2022-6590 44 CVEs

Moderate: mysql security, bug fix, and enhancement update (Oracle Linux 9)

[8.0.30-3] - Release bump for rebuild [8.0.30-1] - Update to MySQL 8.0.30 - Remove patches now upstream: chain certs, OpenSSL 3, s390 and robin hood - Add a new plugin [8.0.29-1] - Update to MySQL 8.0.29

Sep 22, 2022
Medium max 9.1

ELSA-2022-6595 10 CVEs

Moderate: nodejs and nodejs-nodemon security and bug fix update (Oracle Linux 9)

nodejs [16.16.0-1] - Rebase to version 16.16.0 Resolves: RHBZ#2106290 Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215 [16.14.0-5] - Decouple dependency bundling from bootstrapping nodejs-nodemon

Sep 22, 2022
Medium

ELSA-2022-6608 2 CVEs

Moderate: dbus-broker security update (Oracle Linux 9)

[28-5.1] - Fix a stack buffer over-read in the c-shquote library - Fix null pointer reference when supplying a malformed XML config file - Add gating.yaml Resolves: CVE-2022-31212 Resolves: CVE-2022-31213

Sep 21, 2022
Medium

ELSA-2022-6602 1 CVE

Moderate: gnupg2 security update (Oracle Linux 9)

[2.3.3-2] - Fix CVE-2022-34903 (#2108449)

Sep 21, 2022