Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium

ELSA-2022-6585 2 CVEs

Moderate: ruby security, bug fix, and enhancement update (Oracle Linux 9)

[3.0.4-160] - Upgrade to Ruby 3.0.4. Resolves: rhbz#2109428 - OpenSSL test suite fixes due to disabled SHA1. Related: rbhz#2109428 - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 - Fix buffer overrun in String-to-Float conversion. Resolves: …

Sep 21, 2022
Medium max 8.8

ELSA-2022-6634 1 CVE 1 exploited

Moderate: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1] - Update to 2.36.7 Related: #2123430

Sep 21, 2022
Medium max 7.8

ELSA-2022-6542 3 CVEs 2 exploited

Moderate: php:7.4 security update (Oracle Linux 8)

php-pear [1:1.10.13-1] - update PEAR to 1.10.13 - update Archive_Tar to 1.4.14

Sep 16, 2022
Medium max 7.5

ELSA-2022-6523 1 CVE

Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.423-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.423-1] - Update to .NET SDK 3.1.423 and Runtime 3.1.29 - Resolves: RHBZ#2123785

Sep 15, 2022
Medium max 7.5

ELSA-2022-6443 35 CVEs

Moderate: mariadb:10.3 security and bug fix update (Oracle Linux 8)

galera [25.3.35-1] - Rebase to 25.3.35 mariadb [3:10.3.35-1] - Rebase to 10.3.35 [3:10.3.34-1] - Rebase to 10.3.34

Sep 15, 2022
Medium max 7.5

ELSA-2022-6447 3 CVEs

Moderate: ruby:2.7 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [2.7.6-138] - Upgrade to Ruby 2.7.6. Resolves: rhbz#2109424 - Fix FTBFS due to an incompatible load directive. Related: rhbz#2109424 - Fix a fiddle import test on an optimized glibc on Power 9. Related: rhbz#2109424 - Fix regular Expression Denial of Ser…

Sep 15, 2022
Medium max 9.1

ELSA-2022-6449 6 CVEs

Moderate: nodejs:16 security and bug fix update (Oracle Linux 8)

nodejs [1:16.16.0-3] - Fix build - Resolves: RHBZ#2111416 [1:16.16.0-2] - Refactor spec - Resolves: RHBZ#2111416 [1:16.16.0-1] - Rebase to latest version - Resolves: RHBZ#2106369 - CVE fixes for CVE-2022-32212/3/4/5 - Resolves: #2109578, #2109581, #2109584, #…

Sep 15, 2022
Medium max 7.5

ELSA-2022-6450 4 CVEs

Moderate: ruby:3.0 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [3.0.4-141] - Upgrade to Ruby 3.0.4. Resolves: rhbz#2109431 Resolves: rhbz#2110981 - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739

Sep 15, 2022
Medium max 7.5

ELSA-2022-6539 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 8)

[6.0.109-1.0.1] - Add missing Oracle RIDs [6.0.109-1] - Update to .NET SDK 6.0.109 and Runtime 6.0.9 - Resolves: RHBZ#2123789

Sep 15, 2022
Medium max 9.1

ELSA-2022-6448 5 CVEs

Moderate: nodejs:14 security and bug fix update (Oracle Linux 8)

nodejs [1:14.20.0-2] - Replace with_* macros with RPM confitionals - Unify configure calls into single command - Refactor bootstrap-related parts - Decouple dependency bundling from bootstrapping - Resolves: RHBZ#2111417 [1:14.20.0-1] - Rebase to latest versi…

Sep 15, 2022
Medium max 7.8

ELSA-2022-6457 2 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-47.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-47] - Security fix for CVE-2015-20107 Resolves: rhbz#2075390 [3.6.8-46] - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs…

Sep 14, 2022
Medium max 5.5

ELSA-2022-6460 3 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.26.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Sep 14, 2022
Medium

ELSA-2022-6463 1 CVE

Moderate: gnupg2 security update (Oracle Linux 8)

[2.2.20-3] - Fix CVE-2022-34903 (#2108447)

Sep 14, 2022
Medium max 7.5

ELSA-2022-6521 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 9)

[6.0.109-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.109-1] - Update to .NET SDK 6.0.109 and Runtime 6.0.9 - Resolves: RHBZ#2123791

Sep 14, 2022
Medium max 9.8

ELSA-2022-6224 5 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 9)

[3.0.1-41.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-41] - Zeroize public keys as required by FIPS 140-3 Resolves: rhbz#2115861 - Add FIPS indicator for HKDF Resolves: rhbz#2118388 [1:3.0.1-40] - Deal with DH keys in FIPS mode according FI…

Aug 30, 2022
Medium max 8.1

ELSA-2022-6158 1 CVE

Moderate: php:7.4 security update (Oracle Linux 8)

php [7.4.19-4] - fix uninitialized array in pg_query_params() leading to RCE CVE-2022-31625

Aug 25, 2022
Medium max 9.8

ELSA-2022-6157 3 CVEs

Moderate: curl security update (Oracle Linux 9)

[7.76.1-14.el9_0.5] - fix unpreserved file permissions (CVE-2022-32207) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)

Aug 25, 2022
Medium max 6.5

ELSA-2022-6159 2 CVEs

Moderate: curl security update (Oracle Linux 8)

[7.61.1-22.el8_6.4] - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208)

Aug 24, 2022
Medium

ELSA-2022-20240 2 CVEs

Moderate: podman security update (Oracle Linux 7)

[1.6.4-36.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - handle redirect from the docker registry v2 [Orabug: 29874238] (nikita.gerasimov@oracle.com) - remove changes in NaiveDiffDriver [1.6.4-36] - update to the latest cont…

Aug 22, 2022
Medium max 5.9

ELSA-2022-6058 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.108-1.0.1] - Add missing Oracle RIDs [6.0.108-1] - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ#2112412

Aug 15, 2022
Medium max 5.9

ELSA-2022-6057 1 CVE

Moderate: .NET Core 3.1 security, bug fix, and enhancement update (Oracle Linux 8)

[3.1.422-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.422-1] - Update to .NET SDK 3.1.422 and Runtime 3.1.28 - Resolves: RHBZ#2115351

Aug 15, 2022
Medium max 5.5

ELSA-2022-5937 3 CVEs

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.76.1.0.1.OL7] [debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.76.1.OL7] [Update Oracle Linux certificates (Ilya Okomin) [Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petren…

Aug 11, 2022
Medium max 8.6

ELSA-2022-6003 2 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-70.22.1.0.1_0.OL9] [lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.22.1_0.OL9] [Update Oracle Linux certificates (Kevin Lyons) [Disable signing for aarch64 (Ilya Okomin) [Oracle Linux RHCK M…

Aug 10, 2022
Medium max 7.5

ELSA-2022-5948 36 CVEs

Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (Oracle Linux 9)

galera [26.4.11-1.0.1] - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. Patches from previous release have been deleted - Drop nmap-ncat requirement. [Orabug: 34116228] - Added galera-skip-lp1184034-testcase.patch - …

Aug 10, 2022
Medium max 5.9

ELSA-2022-6043 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.108-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.108-1] - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ#2112413

Aug 10, 2022
Medium max 7.8

ELSA-2022-5942 3 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-16.0.1.3] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-16.3] - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in…

Aug 10, 2022
Medium max 7.8

ELSA-2022-5813 3 CVEs

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-19.0.1.4] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-19.4] - fix issue reported by covscan [2:8.0.1763-19.3] - CVE-2022-1785 vim: Out-of-bounds Wr…

Aug 5, 2022
Medium

ELSA-2022-5821 4 CVEs

Moderate: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

libvirt [8.0.0-5.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-5.2.el8] - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#2084030) - cputest: Drop some old…

Aug 5, 2022
Medium

ELSA-2022-5823 2 CVEs

Moderate: 389-ds:1.4 security update (Oracle Linux 8)

[1.4.3.28-7] - Bump version to 1.4.3.28-7 - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database - Resolves: Bug 2081014 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could r…

Aug 3, 2022
Medium max 7.5

ELSA-2022-5779 2 CVEs

Moderate: ruby:2.5 security update (Oracle Linux 8)

ruby [2.5.9-110] - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9. - Fix by adding length limit option for methods that parses date strings. Resolves: CVE-2021-41817 - CGI::Cookie.parse no longer d…

Aug 3, 2022
Medium max 7.5

ELSA-2022-5826 36 CVEs

Moderate: mariadb:10.5 security, bug fix, and enhancement update (Oracle Linux 8)

galera [26.4.11-1] - Rebase to 26.4.11 mariadb [3:10.5.16-2] - Release bump for rebuild [3:10.5.16-1] - Rebase to 10.5.16 [3:10.5.15-1] - Rebase to 10.5.15

Aug 3, 2022
Medium

ELSA-2022-5809 1 CVE

Moderate: pcre2 security update (Oracle Linux 8)

[10.32-3] - Resolves: CVE-2022-1586

Aug 2, 2022
Medium max 9.8

ELSA-2022-5818 3 CVEs

Moderate: openssl security update (Oracle Linux 8)

[1:1.1.1k-7] - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resol…

Aug 2, 2022
Medium

ELSA-2022-5263 2 CVEs

Moderate: qemu-kvm security and bug fix update (Oracle Linux 9)

[6.2.0-11.el9_0.3] - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071102] - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075635] - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075640] - Resolv…

Jul 4, 2022
Medium max 9.8

ELSA-2022-5235 3 CVEs

Moderate: python security update (Oracle Linux 7)

[2.7.5-92.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-92] - Security fix for CVE-2021-3177 Resolves: rhbz#1918168 [2.7.5-91] - Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391 - Test fixes for the latest exp…

Jul 2, 2022
Medium max 5.9

ELSA-2022-5311 1 CVE

Moderate: libgcrypt security update (Oracle Linux 8)

[1.8.5-7] - Fix CVE-2021-33560 (#2018525)

Jul 1, 2022
Medium

ELSA-2022-5331 1 CVE

Moderate: libinput security update (Oracle Linux 8)

[1.16.3-3] - Fix a format string vulnerability in the device name logging (#2076815) CVE-2022-1215

Jul 1, 2022
Medium

ELSA-2022-5338 1 CVE

Moderate: ruby:2.6 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [2.6.10-109] - Upgrade to Ruby 2.6.10. Resolves: rhbz#2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9.

Jul 1, 2022
Medium max 7.3

ELSA-2022-5319 2 CVEs

Moderate: vim security update (Oracle Linux 8)

[2:8.0.1763-19.0.1.2] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-19.2] - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read [2:8.…

Jul 1, 2022
Medium

ELSA-2022-5317 1 CVE

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-13.1] - Fix CVE-2022-29824 (#2082297)

Jul 1, 2022