Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 8.8

ELSA-2023-0045 6 CVEs

Important: tigervnc security update (Oracle Linux 7)

[1.8.0-23] - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 (bz#2154267) Resolves: CVE-2022-46340 (bz#2154261) Resolves: CVE-2022-46341 (bz#2154264) Resolves: CVE-2022-46342 (bz#2154262) Resolves: CVE-2022-46343 (bz#2154265) Resolves: CVE-2022-46344…

Jan 9, 2023
Medium max 9.8

ELSA-2023-0050 5 CVEs

Moderate: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:14.21.1-2] - Apply upstream fix for CVE-2022-24999 Resolves: CVE-2022-24999 - Record CVEs fixed by current or previous upstream releases Resolves: CVE-2021-44906 [1:14.21.1-1] - Rebase to version 14.21.1 Resolves: rhbz#2129805 CVE-2022-43548 CVE-202…

Jan 9, 2023
High max 7.8

ELSA-2023-12009 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.315.5] - Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang) [Orabug: 34917369] [5.4.17-2136.315.4] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888473] - uek-rpm: Add ptp_kvm.ko to nano rpm (Somas…

Jan 9, 2023
High max 7.8

ELSA-2023-12008 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.315.5] - Revert 'xfs: Lower CIL flush limit for large logs' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: Throttle commits on delayed background CIL push' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: fix use-after-free on CIL context on shut…

Jan 9, 2023
High max 8.8

ELSA-2023-0016 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 8)

[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153735

Jan 5, 2023
High max 8.8

ELSA-2023-0021 1 CVE 1 exploited

Important: webkit2gtk3 security update (Oracle Linux 9)

[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153738

Jan 4, 2023
High max 7.8

ELSA-2022-10108 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.70.2] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882781] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882781] {CVE-2022-4378} - netfilter: …

Jan 3, 2023
High max 9.8

ELSA-2023-0005 1 CVE

Important: bcel security update (Oracle Linux 9)

[6.4.1-9] - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920

Jan 3, 2023
High

ELSA-2022-10093 1 CVE

Important: virt:kvm_utils security update (Oracle Linux 8)

hivex libguestfs [1.40.2-28.0.4] - v2v: Cope with libvirt vpx/esx driver which does not set [Orabug: 34026544] [1.40.2-28.0.3] - virt-v2v: Specify backing file format to qemu-img command [Orabug: 33906330] - Require 'kernel-uek' RPM for installation instead o…

Dec 17, 2022
High max 9.8

ELSA-2022-8958 1 CVE

Important: bcel security update (Oracle Linux 7)

[0:5.2-19] - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920

Dec 14, 2022
High max 7.8

ELSA-2022-10073 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.520.3.1.el7] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - hu…

Dec 13, 2022
High max 7.8

ELSA-2022-10072 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.520.3.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - hugetl…

Dec 12, 2022
High max 7.8

ELSA-2022-10071 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.69.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378}

Dec 12, 2022
High max 7.8

ELSA-2022-10079 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.314.6.2] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} [5.4.17-2…

Dec 12, 2022
High max 7.8

ELSA-2022-10081 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.314.6.2.el7] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} [5.4.…

Dec 12, 2022
High max 7.8

ELSA-2022-10080 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-5.76.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} [5.15.0-5.76.…

Dec 12, 2022
High max 7.8

ELSA-2022-10078 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-5.76.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} [5.15.0-5.76.…

Dec 12, 2022
Medium max 8.1

ELSA-2022-8832 2 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 9)

nodejs [1:18.12.1-1] - Rebase + CVEs - Resolves: #2142809 - Resolves: #2142830, #2142856 nodejs-nodemon [2.0.20-1] - Rebase to 2.0.20 Resolves: CVE-2022-3517

Dec 9, 2022
Medium max 8.1

ELSA-2022-8833 2 CVEs

Moderate: nodejs:18 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:18.12.1-2] - Update version of bundled histogram [1:18.12.1-1] - Rebase to version 18.12.1 Resolves: rhbz#2125580 CVE-2022-43548 CVE-2022-3517 [1:18.9.1-1] - Rebase to version 18.9.1 Resolves: CVE-2022-35255 CVE-2022-35256 nodejs-nodemon [2.0.20-1] …

Dec 8, 2022
High

ELSA-2022-26385 0 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Dec 7, 2022
High max 4.6

ELSA-2022-10065 8 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.69.5] - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang) [Orabug: 34798594] [4.1.12-124.69.4] - btrfs: Remove BUG_ON() as it is causing kernel to panic (Rhythm Mahajan) [Orabug: 34840579] [4.1.12-124.69.…

Dec 6, 2022
High

ELSA-2022-10062 1 CVE

Important: libvirt security update (Oracle Linux 7)

libvirt [5.7.0-38.el7] - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758] - security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631} - spec: Requir…

Dec 6, 2022
High

ELSA-2022-8799 1 CVE

Important: pki-core security update (Oracle Linux 7)

[10.5.18-24] - ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to …

Dec 6, 2022
High max 4.3

ELSA-2022-10024 1 CVE

Important: spacewalk-backend spacewalk-java security update (Oracle Linux 7)

spacewalk-backend [2.10.28-1.0.13] - Fix HTTP 500 and ORA-01830 on client scap report [Orabug: 34823889] [2.10.28-1.0.12] - Handle remote commands that return no output. [Orabug: 32530545] [2.10.28-1.0.11] - Make spacewalk-debug copy symlink target instead of…

Dec 5, 2022
High max 8.8

ELSA-2022-8640 1 CVE

Important: krb5 security update (Oracle Linux 7)

[1.15.1-55.0.1] - Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360] [1.15.1-55] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961

Nov 29, 2022
High max 6.6

ELSA-2022-10033 2 CVEs

Important: kubernetes security update (Oracle Linux 7)

kubernetes [1.21.14-3] - Addresses CVE-2022-3294 & CVE-2022-3162 [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.9-2] - Fix 1.21 kubernetes version to align with last upstream release [1.4.9-1] - Resolve kubernetes…

Nov 29, 2022
High max 6.6

ELSA-2022-10035 2 CVEs

Important: kubernetes security update (Oracle Linux 7)

kubernetes [1.22.16-1] - Added Oracle specific build files for Kubernetes - Add preBuildOL8Commands to Jenkinsfile kubernetes [1.23.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.24.8-1] - Added Oracle specific build files for Kubernet…

Nov 29, 2022
High max 6.6

ELSA-2022-10036 2 CVEs

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.22.16-1] - Added Oracle specific build files for Kubernetes - Add preBuildOL8Commands to Jenkinsfile kubernetes [1.23.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.24.8-1] - Added Oracle specific build files for Kubernet…

Nov 29, 2022
Medium

ELSA-2022-10031 1 CVE

Moderate: pcs security update (Oracle Linux 8)

[0.10.14-5.0.1] - Replace HAM-logo.png with a generic one [0.10.14-5] - Fixed ruby socket permissions - Resolves: rhbz#2116838 [0.10.14-4] - Fixed enable sbd from webui - Resolves: rhbz#2117650 [0.10.14-3] - Fixed pcs quorum device remove - Resolves: rhbz#211…

Nov 29, 2022
High max 6.6

ELSA-2022-10034 2 CVEs

Important: kubernetes security update (Oracle Linux 8)

kubernetes [1.21.14-3] - Addresses CVE-2022-3294 & CVE-2022-3162 [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.9-2] - Fix 1.21 kubernetes version to align with last upstream release [1.4.9-1] - Resolve kubernetes…

Nov 29, 2022
Medium max 7.8

ELSA-2022-8434 1 CVE

Moderate: dotnet7.0 security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.100-0.5.rc2.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.100-0.5.rc2] - Add lldb as a build dependency - Related: RHBZ#2134641 [7.0.100-0.4.rc2] - Enable ppc64le builds - Related: RHBZ#213…

Nov 29, 2022
High max 7.5

ELSA-2022-8643 1 CVE

Important: varnish security update (Oracle Linux 9)

[6.6.2-2.1] - Resolves: #2142095 - CVE-2022-45060 varnish: Request Forgery Vulnerability

Nov 29, 2022
High max 8.8

ELSA-2022-8637 1 CVE

Important: krb5 security update (Oracle Linux 9)

[1.19.1-24.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.19.1-24] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140970

Nov 29, 2022
High max 7.5

ELSA-2022-8649 1 CVE

Important: varnish:6 security update (Oracle Linux 8)

varnish [6.0.8-2.1] - Resolves: #2142092 - CVE-2022-45060 varnish:6/varnish: Request Forgery Vulnerability [6.0.8-2] - Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request Smuggling Vulnerability varnish-modules [0.15.0-6] - Related: …

Nov 28, 2022
High max 8.8

ELSA-2022-8638 1 CVE

Important: krb5 security update (Oracle Linux 8)

[1.18.2-22.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140967

Nov 28, 2022
High

ELSA-2022-10023 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-4.70.5.2] - Revert 'sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle' (Samasth Norway Ananda) [Orabug: 34783367] [5.15.0-4.70.5.1] - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176] [5.15.0…

Nov 26, 2022
High

ELSA-2022-10022 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-4.70.5.2] - Revert 'sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle' (Samasth Norway Ananda) [Orabug: 34783367] [5.15.0-4.70.5.1] - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176] [5.15.0…

Nov 26, 2022
Low max 7.1

ELSA-2022-8431 2 CVEs

Low: podman security, bug fix, and enhancement update (Oracle Linux 9)

[4.2.0-7.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.2.0-7] - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel (https://github.com/containers/podman/commit/35c0df3) - Resolves…

Nov 24, 2022
High max 9.8

ELSA-2022-8561 13 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-4] - Fix for expat CVE-2022-4…

Nov 24, 2022
High max 7.8

ELSA-2022-8453 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 9)

[0.8.7-12.1] - Add 0062-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133998

Nov 24, 2022