Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 8.1

ELSA-2023-12075 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
High max 8.1

ELSA-2023-12077 4 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Jan 24, 2023
Medium max 7.8

ELSA-2023-0340 1 CVE

Moderate: bash security update (Oracle Linux 9)

[5.1.8-6] - Add a null check in parameter_brace_transform() function Resolves: CVE-2022-3715

Jan 24, 2023
Medium max 7.8

ELSA-2023-0338 2 CVEs

Moderate: libxml2 security update (Oracle Linux 9)

[2.9.13-3] - Fix CVE-2022-40303 (#2136564) - Fix CVE-2022-40304 (#2136569)

Jan 24, 2023
Medium max 7.1

ELSA-2023-0318 1 CVE

Moderate: postgresql-jdbc security update (Oracle Linux 9)

[42.2.18-6] - fix for CVE-2022-31197 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688

Jan 24, 2023
Medium max 7.5

ELSA-2023-0339 1 CVE

Moderate: sqlite security update (Oracle Linux 9)

[3.34.1-6] - Fixes CVE-2022-35737

Jan 24, 2023
Medium max 9.8

ELSA-2023-0333 1 CVE

Moderate: curl security update (Oracle Linux 9)

[7.76.1-19.el9_1.1] - fix POST following PUT confusion (CVE-2022-32221)

Jan 24, 2023
Medium max 6.5

ELSA-2023-0335 3 CVEs

Moderate: dbus security update (Oracle Linux 9)

[1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635)

Jan 24, 2023
High max 8.8

ELSA-2023-0377 1 CVE

Important: libXpm security update (Oracle Linux 7)

[3.5.12-2] - Fix CVE-2022-4883: compression commands depends on /usr/local/bin:/usr/bin (#2161715)

Jan 23, 2023
High max 6.5

ELSA-2023-12065 4 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-24.el7] - Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Mark Kanda) [Orabug: 34905939] [15:4.2.1-23.el7] - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabu…

Jan 23, 2023
High max 7.8

ELSA-2023-0284 1 CVE

Important: sudo security update (Oracle Linux 8)

[1.8.29.8.1] RHEL 8.7.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161220

Jan 23, 2023
High max 7.8

ELSA-2023-0282 1 CVE

Important: sudo security update (Oracle Linux 9)

[1.9.5p2-7.1] RHEL 9.1.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161224

Jan 23, 2023
Medium max 5.3

ELSA-2023-0194 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.6.0.10-3.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with …

Jan 23, 2023
High

ELSA-2023-12064 1 CVE

Important: ruby:2.5 security update (Oracle Linux 8)

ruby [2.5.9-110.0.1] - Fix for CVE-2022-28739 [Orabug: 34824177]

Jan 20, 2023
Medium max 5.3

ELSA-2023-0202 2 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[11.0.18.0.10-2.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.18.0.10-2] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Relate…

Jan 19, 2023
Medium max 5.3

ELSA-2023-0192 2 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with a SecurityManager in place - Related: rhbz#2147473 [1:17.0.6.0.10-3] - …

Jan 18, 2023
Medium

ELSA-2023-0089 4 CVEs

Moderate: libreoffice security update (Oracle Linux 8)

[6.4.7.2-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-12] - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros - Resolves: rhbz…

Jan 18, 2023
Medium max 5.3

ELSA-2023-0200 2 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2157797 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Upd…

Jan 18, 2023
High

ELSA-2023-0171 1 CVE

Important: dpdk security update (Oracle Linux 8)

[21.11-2] - Backport fixes for CVE-2022-2132 (#2107171)

Jan 16, 2023
Medium max 7.8

ELSA-2023-0173 2 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-15.1] - Fix CVE-2022-40303 (#2136562) - Fix CVE-2022-40304 (#2136567)

Jan 16, 2023
Medium max 5.5

ELSA-2023-0100 1 CVE

Moderate: systemd security and bug fix update (Oracle Linux 8)

[239-68.0.2.1] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport ups…

Jan 14, 2023
Medium

ELSA-2023-0113 1 CVE

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.23-1] - Fix CVE-2022-2625 - Resolves: #2143167 - Rebase to 10.23

Jan 14, 2023
High max 7.8

ELSA-2023-0101 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-425.10.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genke…

Jan 13, 2023
Medium max 9.1

ELSA-2023-0116 1 CVE

Moderate: libtasn1 security update (Oracle Linux 8)

[4.13-4] - Resolves: rhbz#2140600

Jan 12, 2023
Medium max 7.5

ELSA-2023-0110 1 CVE

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-17] - Fixed CVE-2022-35737

Jan 12, 2023
Medium max 7.5

ELSA-2023-0079 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154458

Jan 12, 2023
Medium max 7.5

ELSA-2023-0103 1 CVE

Moderate: expat security update (Oracle Linux 8)

[2.2.5-10.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-10.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680

Jan 12, 2023
High max 8.0

ELSA-2023-12018 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]…

Jan 12, 2023
Medium max 5.5

ELSA-2023-0095 10 CVEs

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-26] - Fix various CVEs - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953 [4.0.9-25] - Fix CVE-2022-2867 (#2118857) - Fix CVE-2022-2868 (#2118882) - Fix CVE-2022-2869 (#2118878) [4.0.9-24] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-205…

Jan 12, 2023
Medium max 6.5

ELSA-2023-0096 3 CVEs

Moderate: dbus security update (Oracle Linux 8)

[1.12.8-23.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.8-23.1] - Fix CVE-2022-42010 (#2133644) - Fix CVE-2022-42011 (#2133638) - Fix CVE-2022-42012 (#2133632)

Jan 12, 2023
Medium

ELSA-2023-0087 1 CVE

Moderate: usbguard security update (Oracle Linux 8)

[1.0.0-8.2] - Fix unauthorized access via D-bus - Fix memory leak on D-bus connection failure Resolves: rhbz#2127848

Jan 12, 2023
High max 8.0

ELSA-2023-12017 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]…

Jan 12, 2023
High max 8.6

ELSA-2023-12019 2 CVEs

Important: grub2 security update (Oracle Linux 9)

[2.06-46.0.4] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] [2.06-46.0.3] - Fix CVE-2022-2601 and CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI

Jan 12, 2023
Medium max 7.5

ELSA-2023-0077 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154459

Jan 12, 2023
High max 7.5

ELSA-2023-12013 1 CVE

Important: istio security update (Oracle Linux 7)

istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278

Jan 11, 2023
High max 7.5

ELSA-2023-12014 1 CVE

Important: istio security update (Oracle Linux 8)

istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278

Jan 11, 2023
High max 7.5

ELSA-2023-12011 1 CVE

Important: istio security update (Oracle Linux 8)

istio [1.15.3-1] - Added Oracle specific files for 1.15.3-1 olcne [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-39278

Jan 10, 2023
High max 7.8

ELSA-2023-12007 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.521.4] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 34918228] [4.14…

Jan 9, 2023
High max 8.8

ELSA-2023-0046 6 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-21] - Follow-up fix for CVE-2022-46340 (#2151775) [1.20.4-20] - CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775), CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787), CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)

Jan 9, 2023
High max 7.8

ELSA-2023-12006 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.521.4.el7] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3.el7] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 3491822…

Jan 9, 2023