Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 5.3

ELSA-2022-5337 3 CVEs

Moderate: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

delve [1.7.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.7.2-1] - Rebase to 1.7.2 - Related: rhbz#2014088 golang [1.17.10-1] - Rebase to Go 1.17.10 - Resolves: rhbz#2091077 go-toolset [1.17.10-1] - Rebase to Go 1.17.10 - Resolves: …

Jul 1, 2022
Medium max 7.5

ELSA-2022-5314 2 CVEs

Moderate: expat security update (Oracle Linux 8)

[2.2.5-8.0.1.2] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-8.2] - Improve fix for CVE-2022-25313 - Related: CVE-2022-25313 [2.2.5-8.1] - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313

Jun 30, 2022
Medium max 8.1

ELSA-2022-5313 4 CVEs

Moderate: curl security update (Oracle Linux 8)

[7.61.1-22.el8_6.3] - fix too eager reuse of TLS and SSH connections (CVE-2022-27782) [7.61.1-22.el8_6.2] - fix invalid type in printf() argument detected by Coverity [7.61.1-22.el8_6.1] - fix credential leak on redirect (CVE-2022-27774) - fix auth/cookie lea…

Jun 30, 2022
Medium max 5.5

ELSA-2022-5050 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 9)

[6.0.106-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.106-1] - Update to .NET SDK 6.0.106 and Runtime 6.0.6 - Resolves: RHBZ#2093433

Jun 30, 2022
Medium

ELSA-2022-5250 1 CVE

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-1.1] - Fix CVE-2022-29824 (#2082299)

Jun 30, 2022
Medium

ELSA-2022-5252 1 CVE

Moderate: libarchive security update (Oracle Linux 9)

[3.5.3-2] - Resolves: CVE-2022-26280

Jun 30, 2022
Medium max 8.1

ELSA-2022-5245 4 CVEs

Moderate: curl security update (Oracle Linux 9)

[7.76.1-14.el9_0.4] - fix too eager reuse of TLS and SSH connections (CVE-2022-27782) [7.76.1-14.el9_0.3] - fix leak of SRP credentials in redirects (CVE-2022-27774) [7.76.1-14.el9_0.2] - add missing tests to Makefile [7.76.1-14.el9_0.1] - fix credential leak…

Jun 30, 2022
Medium

ELSA-2022-5251 2 CVEs

Moderate: pcre2 security update (Oracle Linux 9)

[10.37-5] - Explicitly require uft subpackages in tools subpackage [10.37-4] - Resolves: CVE-2022-1586 CVE-2022-1587

Jun 30, 2022
Medium max 7.5

ELSA-2022-5244 2 CVEs

Moderate: expat security update (Oracle Linux 9)

[ 2.2.10-12.2] - Improve fix for CVE-2022-25313 - Related: CVE-2022-25313 [ 2.2.10-12.1] - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313

Jun 30, 2022
Medium max 8.4

ELSA-2022-5242 6 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-16.0.1] - - Remove upstream references [Orabug: 31197557] [2:8.2.2637-16.2] - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read [2:8.2.2637-16.1] - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior - CVE-…

Jun 30, 2022
Medium

ELSA-2022-5257 1 CVE

Moderate: libinput security update (Oracle Linux 9)

[1.19.3-2] - CVE-2022-1215: fix a format string vulnerability (#2076816)

Jun 30, 2022
Medium

ELSA-2022-5239 2 CVEs

Moderate: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 7)

[1.3.10.2-16] - Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 20…

Jun 29, 2022
Medium max 7.5

ELSA-2022-5234 1 CVE

Moderate: python-virtualenv security update (Oracle Linux 7)

[15.1.0-7] - Security fix for CVE-2019-20916 for the bundled pip wheel Resolves: rhbz#1868135

Jun 29, 2022
Medium max 5.5

ELSA-2022-5046 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 8)

[6.0.106-1.0.1] - Add missing Oracle RIDs [6.0.106-1] - Update to .NET SDK 6.0.106 and Runtime 6.0.6 - Resolves: RHBZ#2093432 [6.0.105-1] - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ#2082267

Jun 16, 2022
Medium max 5.5

ELSA-2022-5061 1 CVE

Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.420-1.0.1] - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ#2060566 [3.1.420-1] - Update to .NET SDK 3.1.420 and Runtime 3.1.26 - Resolves: RHBZ#2096319 [3.1.419-1] - Update to .NET SDK 3.1.419 and R…

Jun 15, 2022
Medium

ELSA-2022-2043 1 CVE

Moderate: c-ares security update (Oracle Linux 8)

[1.13.0-6] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]

May 17, 2022
Medium

ELSA-2022-1851 1 CVE

Moderate: pki-core:10.6 security and bug fix update (Oracle Linux 8)

jss [4.9.3-1] - Rebase to JSS 4.9.3 - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8] [4.9.2-1] - Rebase to JSS 4.9.2 ldapjdk [4.23.0-1] - Rebase to LDAP SDK 4.23.0 [4.23.0-0.1] - Rebase to LDAP SDK 4.23.0-al…

May 17, 2022
Medium

ELSA-2022-1801 1 CVE

Moderate: gfbgraph security update (Oracle Linux 8)

[0.2.4-1] - Update to 0.2.4 Resolves: #1997941

May 17, 2022
Medium

ELSA-2022-1898 1 CVE

Moderate: fapolicyd security, bug fix, and enhancement update (Oracle Linux 8)

[1.1-6.0.1] - Increase db_max_size to 100M [1.1-6] - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path Resolves: rhbz#2069120 [1.1-4] RHEL 8.6.0 ERRATUM - fapolicyd denies access to /usr/lib64/ld-2.28.so Resolves: rhbz#2066300 [1.1-1] RHEL 8.6.0 …

May 17, 2022
Medium max 7.8

ELSA-2022-1935 2 CVEs

Moderate: php:7.4 security update (Oracle Linux 8)

libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php-pear [1:1.10.12-1] - update PEAR to 1.10.12 - update Archive_Tar to 1.4.9 - update Console_Getopt to 1.4.3 - update XML_Util to 1.4.5 php-pecl-apcu [5.1.18-1] - update to 5.1.18 php-pecl-rrd php-pec…

May 17, 2022
Medium max 8.2

ELSA-2022-1932 1 CVE

Moderate: python-lxml security update (Oracle Linux 8)

[4.2.3-4] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569

May 17, 2022
Medium max 5.3

ELSA-2022-2092 1 CVE

Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)

[32:9.11.36-2] - Reduce memory used per-view on machine with few processors (#2030239) [32:9.11.36-2] - Rebuilt on a new side-tag (#2013993) [32:9.11.36-1] - Update to 9.11.36 [32:9.11.26-9] - Correct tsig system test [32:9.11.26-8] - Propagate ephemeral port…

May 17, 2022
Medium

ELSA-2022-1796 1 CVE

Moderate: qt5-qtbase security update (Oracle Linux 8)

[5.15.2-4] - Fix out-of-bounds write in QOutlineMapper::convertPath Resolves: bz#1996877

May 17, 2022
Medium

ELSA-2022-1810 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-21] - Fix CVE-2020-19131 (#2006535)

May 17, 2022
Medium

ELSA-2022-1968 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

[1.0.28-12] - fix heap buffer overflow in flac (#2030507) [1.0.28-11] - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)

May 17, 2022
Medium max 5.3

ELSA-2022-1860 1 CVE

Moderate: maven:3.6 security and enhancement update (Oracle Linux 8)

httpcomponents-client [4.5.10-4] - Fix incorrect handling of malformed authority component in request URIs - Resolves: CVE-2020-13956 maven [1:3.6.2-7] - Add maven-openjdk17 - Resolves: rhbz#1991521

May 17, 2022
Medium max 8.2

ELSA-2022-1792 1 CVE

Moderate: flatpak security and bug fix update (Oracle Linux 8)

[1.8.7-1] - Rebase to 1.8.7 (#2041972) [1.8.6-1] - Rebase to 1.8.6 (#2010533) [1.8.5-6] - Fix CVE-2021-41133 (#2012869)

May 17, 2022
Medium max 7.5

ELSA-2022-1986 2 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-45.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-45] - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz#2036020 [3.6.8-44] - Use the monotonic clock for theading.Condit…

May 17, 2022
Medium

ELSA-2022-2008 2 CVEs

Moderate: cockpit security, bug fix, and enhancement update (Oracle Linux 8)

[264.1-1.0.1] - Remove duplicate reference to server in cockpit [Orabug: 33862832] - Update documentation links [Orabug: 32795691] - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095] - Fix rendering of hwinfo pag…

May 17, 2022
Medium

ELSA-2022-1842 1 CVE

Moderate: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)

[0.27.5-2] - Remove RPATH Resolves: bz#2018422 [0.27.5-1] - Exiv2 0.27.5 Resolves: bz#2018422 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003673

May 17, 2022
Medium

ELSA-2022-1920 1 CVE

Moderate: qt5-qtsvg security update (Oracle Linux 8)

[5.15.2-4] - Fix out-of-bound write that may lead to DoS Resolves: bz#2038487

May 17, 2022
Medium max 7.8

ELSA-2022-1991 1 CVE

Moderate: cpio security update (Oracle Linux 8)

[2.12-11] - Fixed CVE-2021-38185 (#1992511)

May 17, 2022
Medium

ELSA-2022-2074 2 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

[4.15.5-5] - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes' when a KDC has a single IP address. [4.15.5-4] - resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh [4.15.5-3] - related: rhbz#1979959 - Fix typo in testparm output [4.15.5-2] - reso…

May 17, 2022
Medium

ELSA-2022-1930 1 CVE

Moderate: keepalived security and bug fix update (Oracle Linux 8)

[2.1.5-8] - Fix DBus policy restrictions (#2028350, CVE-2021-44225) [2.1.5-7] - Fix log-facility option (#197716)

May 17, 2022
Medium

ELSA-2022-1961 1 CVE

Moderate: cairo and pixman security and bug fix update (Oracle Linux 8)

cairo [1.15.12-6] - Fix CVE reference test (#1908113) [1.15.12-5] - Add reference test to CVE fix (#1908113) [1.15.12-4] - Fix CVE-2020-35492 (#1908113) pixman [0.38.4-2] - Backport the pixman part of cairo CVE-2020-35492

May 17, 2022
Medium max 5.3

ELSA-2022-1861 1 CVE

Moderate: maven:3.5 security update (Oracle Linux 8)

May 17, 2022
Medium

ELSA-2022-2013 1 CVE

Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 8)

[8.0p1-13] - Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828) [8.0p1-12] - Add support for 'Include' directive in sshd_config file (#1926103) [8.0p1-11] - CVE-2021-41617 upstream fix (#2008885)

May 17, 2022
Medium

ELSA-2022-1830 1 CVE

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.19-2] - Add missing files into file section of server package postgresql-setup v8.6 newly provides postgresql-upgrade

May 17, 2022
Medium max 3.7

ELSA-2022-1939 1 CVE

Moderate: squid:4 security and bug fix update (Oracle Linux 8)

libecap squid [7:4.15-3] - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP protocol data may lead to information disclosure [7:4.15-2] - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon and as a resul…

May 17, 2022
Medium

ELSA-2022-1917 4 CVEs

Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update (Oracle Linux 8)

xorg-x11-server [1.20.11-5] - Fix crash with NVIDIA proprietary driver with Present (#2046329) [1.20.11-4] - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172), CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181) [1.20.11-3] - xf86/logind Fix drm_…

May 17, 2022