Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 7.8

ELSA-2022-8493 1 CVE

Important: python3.9 security update (Oracle Linux 9)

[3.9.14-1.1] - Fix for CVE-2022-42919 Resolves: rhbz#2138705

Nov 24, 2022
High max 9.8

ELSA-2022-8580 13 CVEs

Important: firefox security update (Oracle Linux 9)

[102.5.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Nov 24, 2022
Medium max 5.1

ELSA-2022-8444 1 CVE

Moderate: keylime security update (Oracle Linux 9)

[6.5.1-1] - Update to 6.5.1 Resolves: CVE-2022-3500

Nov 24, 2022
High max 7.5

ELSA-2022-24267 16 CVEs

Important: ol8addon security update (Oracle Linux 8)

Nov 23, 2022
High max 8.0

ELSA-2022-8560 1 CVE

Important: hsqldb security update (Oracle Linux 7)

[1:1.8.1.3-15] - Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853

Nov 22, 2022
High max 9.8

ELSA-2022-8552 13 CVEs

Important: firefox security update (Oracle Linux 7)

[102.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.5.0-1] - Update to 102.5.0 build1

Nov 22, 2022
High max 9.8

ELSA-2022-8555 13 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1

Nov 22, 2022
Low max 7.1

ELSA-2022-7822 2 CVEs

Low: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

aardvark-dns [2:1.1.0-5] - fix 'Two aardvark-dns instances trying to use the same port on the same interface' - Resolves: #2130234 buildah [1:1.27.2-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.27 (https://github.c…

Nov 22, 2022
High max 7.8

ELSA-2022-8492 1 CVE

Important: python39:3.9 security update (Oracle Linux 8)

python39 [3.9.13-2] - Fix for CVE-2022-42919 Resolves: rhbz#2138705

Nov 22, 2022
High max 9.8

ELSA-2022-8547 13 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.5.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.5.0-2] - Update to 102.5.0 build2 [102.5.0-1] - Update to 102.5.0 build1

Nov 22, 2022
High max 9.8

ELSA-2022-8554 13 CVEs

Important: firefox security update (Oracle Linux 8)

[102.5.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.5.0-1] - Update to 102.5.0 build1 [102.4.0-1] - Update to 102.4.0 build1 [10…

Nov 22, 2022
Medium

ELSA-2022-8062 2 CVEs

Moderate: unbound security, bug fix, and enhancement update (Oracle Linux 9)

[1.16.2-2] - Require openssl tool for unbound-keygen (#2116802) [1.16.2-1] - Update to 1.16.2 (#2087120) [1.16.0-3] - Disable ED25519 and ED448 in FIPS mode (#2079548) [1.16.0-2] - Restart keygen service before every unbound start (#2094336) [1.16.0-1] - Upda…

Nov 22, 2022
Medium max 7.5

ELSA-2022-8070 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 9)

[2.85-5] - Prevent endless loop in forward_query (#2120711) [2.85-4] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934)

Nov 22, 2022
Medium

ELSA-2022-8151 1 CVE

Moderate: poppler security and bug fix update (Oracle Linux 9)

[21.01.0-13] - Dont run out of file for Hints - Rebuild for #2096451 - Resolves: #2090970, #2096451

Nov 22, 2022
Medium max 7.7

ELSA-2022-8194 10 CVEs

Moderate: libtiff security update (Oracle Linux 9)

[4.4.0-2] - Update to version 4.4.0 - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354 CVE-2022-1355

Nov 22, 2022
Medium max 4.3

ELSA-2022-8219 1 CVE

Moderate: mutt security update (Oracle Linux 9)

[5:2.2.6-1] - Rebase to upstream version 2.2.6 Resolves: CVE-2022-1328

Nov 22, 2022
Medium

ELSA-2022-8318 1 CVE

Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 9)

[2.5.2-1] - Rebase to version 2.5.2 - resolves: rhbz#2109017 - Fix CVE-2022-32746 [2.5.1-1] - related: rhbz#2077490 - Rebase to version 2.5.1 [2.5.0-1] - resolves: rhbz#2077490 - Rebase to version 2.5.0

Nov 22, 2022
Low

ELSA-2022-7979 1 CVE

Low: speex security update (Oracle Linux 9)

[1.2.0-11] - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file - Resolves: CVE-2020-23903

Nov 22, 2022
Medium max 7.8

ELSA-2022-8361 1 CVE

Moderate: e2fsprogs security update (Oracle Linux 9)

[1.46.5-3] - Add sanity check to extent manipulation (#2073549)

Nov 22, 2022
Low

ELSA-2022-8207 1 CVE

Low: openjpeg2 security update (Oracle Linux 9)

[2.4.0-7] - Fix CVE-2022-1122

Nov 22, 2022
Low

ELSA-2022-8415 1 CVE

Low: mingw-gcc security and bug fix update (Oracle Linux 9)

[12.0.1-11.2] - Bump release and rebuild resolves: rhbz#2096010 [12.0.1-11.1] - Rebase to Fedora Rawhide resolves: rhbz#2080170

Nov 22, 2022
Medium max 8.8

ELSA-2022-8054 11 CVEs

Moderate: webkit2gtk3 security and bug fix update (Oracle Linux 9)

Nov 22, 2022
Low max 3.9

ELSA-2022-8096 2 CVEs

Low: redis security and bug fix update (Oracle Linux 9)

[6.2.7-1] - rebase to 6.2.7 #2083151

Nov 22, 2022
Medium max 7.8

ELSA-2022-8353 2 CVEs

Moderate: python3.9 security, bug fix, and enhancement update (Oracle Linux 9)

[3.9.14-1] - Update to 3.9.14 - Security fixes for CVE-2020-10735 and CVE-2021-28861 Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249 [3.9.13-3] - Fix test_get_ciphers in test_ssl.py for FIPS mode Resolves: rhbz#2058233 [3.9.13-2] - Security fix for CVE-201…

Nov 22, 2022
Low max 7.5

ELSA-2022-8299 1 CVE

Low: curl security update (Oracle Linux 9)

[7.76.1-19] - fix unpreserved file permissions (CVE-2022-32207) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208) [7.76.1-18] - fix too eager reuse of TLS and SSH connections (CVE-2022-27782) [7.…

Nov 22, 2022
Medium max 6.5

ELSA-2022-8126 1 CVE

Moderate: ignition security, bug fix, and enhancement update (Oracle Linux 9)

[2.14.0-1] - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service [2.13.0-2] - Rename -validate-nonlinux subpackage to -validate-redistributable - Add static Linux binaries to -redistributable - Fix macro in…

Nov 22, 2022
Low

ELSA-2022-7958 1 CVE

Low: libguestfs security, bug fix, and enhancement update (Oracle Linux 9)

[1.48.4-2.0.1] - Add btrfs-progs to the packages installed in the appliance [Orabug: 34137448] - Replace upstream references from a description tag - Fix build on Oracle Linux [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.48.4-2] - Re…

Nov 22, 2022
Low

ELSA-2022-7968 1 CVE

Low: virt-v2v security, bug fix, and enhancement update (Oracle Linux 9)

[2.0.7-6.0.1] - Replaced bugzilla.oracle.com references [Orabug: 34202300] - replaced upstream references [Orabug:34089586] [1:2.0.7-6] - Install qemu-ga package during conversion resolves: rhbz#2028764 [1:2.0.7-5] - Remove LVM2 devices file during conversion…

Nov 22, 2022
Low max 6.2

ELSA-2022-8100 1 CVE

Low: swtpm security and bug fix update (Oracle Linux 9)

[0.7.0-3.20211109gitb79fd91] - Disable OpenSSL FIPS mode to avoid libtpms failures Resolves: rhbz#2090219 [0.7.0-2.20211109gitb79fd91] - Add fix for CVE-2022-23645. Resolves: rhbz#2056518

Nov 22, 2022
Medium max 9.8

ELSA-2022-8291 1 CVE

Moderate: rsync security and bug fix update (Oracle Linux 9)

[3.2.3-18] - Resolves: #2111177 - remote arbitrary files write inside the directories of connecting peers [3.2.3-17] - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field [3.2…

Nov 22, 2022
High max 7.5

ELSA-2022-8420 1 CVE

Important: mingw-zlib security update (Oracle Linux 9)

[1.2.12-2] - Fix changelog Related: rhbz#2068371 [1.2.12-1] - Bump version to 1.2.12 to fix CVE-2018-25032 Related: rhbz#2068371

Nov 22, 2022
Medium max 6.8

ELSA-2022-8068 2 CVEs

Moderate: bind security update (Oracle Linux 9)

[32:9.16.23-5] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.16.23-4] - Export bind-doc package (#2104863) [32:9.16.23…

Nov 22, 2022
Medium

ELSA-2022-8221 2 CVEs

Moderate: xorg-x11-server security and bug fix update (Oracle Linux 9)

[1.20.11-11] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2108157, rhbz#2108162

Nov 22, 2022
Medium

ELSA-2022-8022 1 CVE

Moderate: qt5 security and bug fix update (Oracle Linux 9)

[5.15.3-1] - 5.15.3 Resolves: bz#2061352

Nov 22, 2022
Medium

ELSA-2022-8384 1 CVE

Moderate: harfbuzz security update (Oracle Linux 9)

[2.7.4-8] - Resolves:rh#2103849 - Update tests.yaml [2.7.4-7] - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml [2.7.4-6] - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the…

Nov 22, 2022
Medium max 6.5

ELSA-2022-7970 1 CVE

Moderate: protobuf security update (Oracle Linux 9)

[3.14.0-13] - Rebuilt for test fixes [3.14.0-12] - Rebuilt for test fixes [3.14.0-11] - Applied patch for for CVE-2021-22570 (#2055641)

Nov 22, 2022
High max 6.5

ELSA-2022-8263 3 CVEs

Important: dpdk security and bug fix update (Oracle Linux 9)

[21.11.2-1] - Rebase to 21.11.2 (#2126159) - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616) [21.11.1-1] - Rebase to 21.11.1 (#2106856) - Includes fix for CVE-2021-3839 (#2026642)

Nov 22, 2022
Medium max 7.8

ELSA-2022-8267 31 CVEs 1 exploited

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-162.6.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Nov 22, 2022
Medium max 8.2

ELSA-2022-8197 2 CVEs

Moderate: php security, bug fix, and enhancement update (Oracle Linux 9)

[8.0.20-3] - snmp3 calls using authPriv or authNoPriv immediately return false #2104630 [8.0.20-2] - fix patch41 not applied (use system nikic/php-parser when available) [8.0.20-1] - rebase to 8.0.20 #2095752 - clean unneeded dependency on useradd command #20…

Nov 22, 2022
Low

ELSA-2022-8418 1 CVE

Low: mingw-glib2 security and bug fix update (Oracle Linux 9)

[2.70.1-2] - Rebuild for mingw-zlib update resolves: rhbz#2116278

Nov 22, 2022