Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Medium max 7.5

ELSA-2022-8250 6 CVEs

Moderate: grafana-pcp security update (Oracle Linux 9)

[3.2.0-3] - bump NVR

Nov 22, 2022
Low

ELSA-2022-8003 1 CVE

Low: libvirt security, bug fix, and enhancement update (Oracle Linux 9)

[8.5.0-7.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [8.5.0-7] - security_selinux: Dont ignore NVMe disks when setting image label (rhbz#2121441) [8.5.0-6] - qemu_process: Destroy domains namespace after killing QEMU (rhbz#2121141) [8.5.0-5…

Nov 22, 2022
Medium

ELSA-2022-7967 4 CVEs

Moderate: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 9)

[7.0.0-13] - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546] - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546] - Resolves: bz#2117546 ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMUs system_reset …

Nov 22, 2022
Low

ELSA-2022-8139 1 CVE

Low: wavpack security update (Oracle Linux 9)

[5.4.0-5] - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269

Nov 22, 2022
Medium max 6.5

ELSA-2022-8162 3 CVEs

Moderate: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 9)

[2.1.3-4] - Bump version to 2.1.3-4 - Resolves: Bug 1872451 - Fix regression with dscreate template [2.1.3-3] - Bump version to 2.1.3-3 - Resolves: Bug 2118765 [2.1.3-2] - Bump version to 2.1.3-2 - Resolves: Bug 2118765 - SIGSEGV in sync_repl [2.1.3-1] - Bump…

Nov 22, 2022
Low

ELSA-2022-7950 1 CVE

Low: Image Builder security, bug fix, and enhancement update (Oracle Linux 9)

cockpit-composer [41-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922] [41-1] - New upstream release [40-1] - New upstream release [39-1] - New upstream release [38-1] - New upstream release [37-1] - New up…

Nov 22, 2022
Low max 5.9

ELSA-2022-8090 1 CVE

Low: runc security update (Oracle Linux 9)

[4:1.1.4-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.4 - Related: #2061316

Nov 22, 2022
Medium

ELSA-2022-7978 2 CVEs

Moderate: gimp security and enhancement update (Oracle Linux 9)

[2:2.99.8-3] - fix CVE-2022-30067 - fix CVE-2022-32990

Nov 22, 2022
Medium max 7.5

ELSA-2022-8112 1 CVE

Moderate: frr security, bug fix, and enhancement update (Oracle Linux 9)

* Tue Jun 14 2022 Michal Ruprich - 8.2.2-4 - Resolves: #2095404 - frr use systemd-sysusers [8.2.2-3] - Resolves: #2081304 - Enhanced TMT testing for centos-stream [8.2.2-2] - Resolves: #2069571 - the dynamic routing setup does not work any more [8.2.2-1] - Re…

Nov 22, 2022
Medium max 9.1

ELSA-2022-8067 10 CVEs

Moderate: httpd security, bug fix, and enhancement update (Oracle Linux 9)

[2.4.53-7.0.1] - Replace index.html with Oracles index page oracle_index.html. [2.4.53-7] - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match…

Nov 22, 2022
Medium max 6.8

ELSA-2022-8385 1 CVE

Moderate: dhcp security and enhancement update (Oracle Linux 9)

[12:4.4.2-17.b1] - omshell: add support for hmac-sha512 algorithm (#2083553) [12:4.4.2-16.b1] - Fix for CVE-2021-25220

Nov 22, 2022
Low

ELSA-2022-7959 1 CVE

Low: guestfs-tools security, bug fix, and enhancement update (Oracle Linux 9)

[1.48.2-5] - Rebase to guestfs-tools 1.48.2 resolves: rhbz#2059286 - Default to --selinux-relabel in various tools resolves: rhbz#2075718, rhbz#2089748 - Add lvm system.devices cleanup operation to virt-sysprep resolves: rhbz#2072493 - Refactor virt-customize…

Nov 22, 2022
Medium max 6.5

ELSA-2022-8393 1 CVE

Moderate: logrotate security update (Oracle Linux 9)

[3.18.0-7] - lockState: do not print error: when exit code is unaffected (#2090926) [3.18.0-6] - fix potential DoS from unprivileged users via the state file (CVE-2022-1348) * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - Rebuilt for IMA sigs, glibc 2.34,…

Nov 22, 2022
Medium max 4.3

ELSA-2022-8317 1 CVE

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 9)

[4.16.4-101] - resolves: rhbz#2121317 - Do not require samba package in python3-samba [4.16.4-100] - Rebase to version 4.16.4 - resolves: rhbz#2108332 - Fix CVE-2022-32742 [ 4.16.3-101] - related: rhbz#2077487 - Rebase Samba to 4.16.3 - resolves: rhbz#2097655…

Nov 22, 2022
Medium

ELSA-2022-8078 1 CVE

Moderate: flac security update (Oracle Linux 9)

[1.3.3-10] - handle end-of-stream when encoding with verification (CVE-2021-0561)

Nov 22, 2022
Medium max 7.5

ELSA-2022-7954 8 CVEs

Moderate: podman security and bug fix update (Oracle Linux 9)

[2:4.2.0-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.2.0-3] - fix dependency in test subpackage - Related: #2061316 [2:4.2.0-2] - readd catatonit - Related: #2061316 [2:4.2.0-1] - update to latest content of ht…

Nov 22, 2022
Medium

ELSA-2022-8011 3 CVEs

Moderate: fribidi security update (Oracle Linux 9)

[1.0.10-6.el9.2] - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063

Nov 22, 2022
Medium max 7.5

ELSA-2022-8008 7 CVEs

Moderate: buildah security and bug fix update (Oracle Linux 9)

[1.27.0-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.27.0-2] - fix CVE-2022-2990 - Related: #2061316 [1:1.27.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.27.0 - Related: #2061316 [1:1.2…

Nov 22, 2022
Medium max 8.8

ELSA-2022-8208 1 CVE

Moderate: dovecot security and enhancement update (Oracle Linux 9)

[1:2.3.16-7.0.1] - do not run systemd commands during leapp upgrade [Orabug: 34680501] [1:2.3.16-7] - fix possible privilege escalation when similar master and non-master passdbs are used (#2106232) [1:2.3.16-6] - fix possible nonzero return value of postinst…

Nov 22, 2022
Medium

ELSA-2022-8340 3 CVEs

Moderate: freetype security update (Oracle Linux 9)

[2.10.4-9] - Guard face->size - Resolves: #2079280 [2.10.4-8] - Properly guard face_index - Resolves: #2079262 [2.10.4-7] - Avoid invalid face index - Resolves: #2079271

Nov 22, 2022
Medium max 5.9

ELSA-2022-8252 1 CVE

Moderate: yajl security update (Oracle Linux 9)

Nov 22, 2022
Medium max 5.3

ELSA-2022-8226 1 CVE

Moderate: python-lxml security update (Oracle Linux 9)

[4.6.5-3] - Security fix for CVE-2022-2309 - Resolves: rhbz#2107571

Nov 22, 2022
High max 7.5

ELSA-2022-8057 15 CVEs

Important: grafana security, bug fix, and enhancement update (Oracle Linux 9)

[7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverse…

Nov 22, 2022
Medium

ELSA-2022-8222 2 CVEs

Moderate: xorg-x11-server-Xwayland security update (Oracle Linux 9)

[21.1.3-3] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2110440, rhbz#2110433

Nov 22, 2022
Medium max 7.5

ELSA-2022-8400 1 CVE

Moderate: libtirpc security update (Oracle Linux 9)

[1.3.3] - Rebased to libtirpc-1.3.3 (bz 2118157)

Nov 22, 2022
Medium max 6.5

ELSA-2022-7955 2 CVEs

Moderate: skopeo security and bug fix update (Oracle Linux 9)

[2:1.9.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: #2061316 [2:1.9.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: #2061316 [2:1.9.0-1] - update to https://github.com/containers/sko…

Nov 22, 2022
Medium

ELSA-2022-10007 1 CVE

Moderate: pcs security update (Oracle Linux 9)

[0.11.3-4] - Fixed ruby socket permissions - Resolves: rhbz#2116841 [0.11.3-3] - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether /etc/booth exists - Resolves: rhbz#2026725 rhbz#2058243 [0.11.3-2] - Fixed 'pcs resource restart' …

Nov 22, 2022
Medium max 7.8

ELSA-2022-7826 1 CVE

Moderate: dotnet7.0 security, bug fix, and enhancement update (Oracle Linux 8)

[7.0.100-0.4.rc2.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.100-0.4.rc2] - Enable ppc64le builds - Related: RHBZ#2134642 [7.0.100-0.3.rc2] - Update to .NET 7 RC 2 - Resolves: RHBZ#2134642

Nov 17, 2022
High max 7.8

ELSA-2022-7928 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 8)

[0.8.4-28.1] - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133995

Nov 17, 2022
High max 5.5

ELSA-2022-8491 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-19] - CVE fix for: CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140765, rhbz#2140770

Nov 16, 2022
High

ELSA-2022-9996 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.519.2.1] - xfs: trim IO to found COW extent limit (Eric Sandeen) [Orabug: 34765284] - xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34765284] [4.14.35-2047.519.2] - Revert 'xfs: don't use delall…

Nov 15, 2022
High

ELSA-2022-9997 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.519.2.1.el7] - xfs: trim IO to found COW extent limit (Eric Sandeen) [Orabug: 34765284] - xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34765284] [4.14.35-2047.519.2] - Revert 'xfs: don't use de…

Nov 15, 2022
Medium max 6.8

ELSA-2022-7790 1 CVE

Moderate: bind security update (Oracle Linux 8)

[32:9.11.36-5] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.11.36-4] - Tighten cache protection against record from forwarders (CVE-2021-25220) - Include test of forwarders […

Nov 15, 2022
Medium

ELSA-2022-7622 2 CVEs

Moderate: unbound security, bug fix, and enhancement update (Oracle Linux 8)

[1.16.2-2] - Require openssl tool for unbound-keygen (#2018806) [1.16.2-1] - Update to 1.16.2 (#2027735) [1.16.0-2] - Restart keygen service before every unbound start (#1959468) [1.16.0-1] - Upgrade to 9.16.0 (#2027735) - Update to recent version with compat…

Nov 15, 2022
Medium max 6.5

ELSA-2022-7464 1 CVE

Moderate: protobuf security update (Oracle Linux 8)

[3.5.0-15] - Applied patch for for CVE-2021-22570 (#2050494)

Nov 15, 2022
Medium max 8.8

ELSA-2022-7623 1 CVE

Moderate: dovecot security update (Oracle Linux 8)

[1:2.3.16-3] - fix possible privilege escalation when similar master and non-master passdbs are used (#2106231)

Nov 15, 2022
Medium max 7.5

ELSA-2022-7529 10 CVEs

Moderate: container-tools:3.0 security update (Oracle Linux 8)

buildah [1.19.9-6] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/6d7f496) - Related: #2061390 [1.19.9-5] - update to the latest content of https://github.com/containers/…

Nov 15, 2022
Medium max 7.8

ELSA-2022-7720 1 CVE

Moderate: e2fsprogs security and bug fix update (Oracle Linux 8)

[1.45.6-5] - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548)

Nov 15, 2022
Medium

ELSA-2022-7514 3 CVEs

Moderate: fribidi security update (Oracle Linux 8)

[1.0.4-9] - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310. Resolves: rhbz#2050085, rhbz#2050068, rhbz#2050062 - Drop --disable-docs from %configure. no such options available.

Nov 15, 2022
High max 6.8

ELSA-2022-7643 2 CVEs

Important: bind9.16 security update (Oracle Linux 8)

[32:9.16.23-0.9.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.16.23-0.9] - Tighten cache protection against record …

Nov 15, 2022