Oracle Linux Security Advisories (ELSA)

8,321 results · Feed

• Medium
  ELSA-2022-7730 1 CVE

  Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 8)

  [2.5.2-2] - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB [2.5.2-1] - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 [2.5.1-1] - related: rhbz#2077484 - Rebase to version 2.5.1 [2.5.0-1] - resolves: rhbz#2077484 -…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7457 6 CVEs

  Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  aardvark-dns [2:1.1.0-4] - remove windows binaries and regenerate vendor tarball - Related: #2061390 [2:1.1.0-3] - add gating.yaml - Related: #2061390 [2:1.1.0-2] - bump Epoch to preserve upgrade path - Related: #2061390 [1.1.0-1] - initial import - Related: …

  Nov 15, 2022
• Medium max 9.8
  ELSA-2022-7692 7 CVEs

  Moderate: xmlrpc-c security update (Oracle Linux 8)

  [1.51.0-8] - Address some Coverity issues in the patch set [1.51.0-7] - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (…

  Nov 15, 2022
• Medium max 7.7
  ELSA-2022-7585 9 CVEs

  Moderate: libtiff security update (Oracle Linux 8)

  [4.0.9-23] - Fix various CVEs - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355

  Nov 15, 2022
• Medium
  ELSA-2022-7639 1 CVE

  Moderate: openblas security update (Oracle Linux 8)

  [0.3.15-4] - Fix out-of-bounds read in *larrv - Resolves: CVE-2021-4048

  Nov 15, 2022
• Low
  ELSA-2022-7645 1 CVE

  Low: openjpeg2 security update (Oracle Linux 8)

  [2.4.0-5] - Fix CVE-2022-1122

  Nov 15, 2022
• Medium max 8.2
  ELSA-2022-7624 2 CVEs

  Moderate: php:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

  libzip [1.7.3-1] - update to 1.7.3 php-pecl-apcu [5.1.20-1] - update to 5.1.20 php-pecl-rrd [2.0.3-1] - update to 2.0.3 php-pecl-xdebug3 [3.1.2-1] - update to 3.1.2 rhbz#2030322

  Nov 15, 2022
• Medium
  ELSA-2022-7715 1 CVE

  Moderate: libxml2 security update (Oracle Linux 8)

  [2.9.7-15] - Fix CVE-2016-3709 (#2120781) [2.9.7-14] - Fix CVE-2022-29824 (#2082298)

  Nov 15, 2022
• Medium
  ELSA-2022-7618 1 CVE

  Moderate: gstreamer1-plugins-good security update (Oracle Linux 8)

  [1.16.1-3] - Add patches for matroskademux. CVE-2021-3497 - Resolves: rhbz#1948942

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7648 6 CVEs

  Moderate: grafana-pcp security update (Oracle Linux 8)

  [3.2.0-2] - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gz…

  Nov 15, 2022
• Medium
  ELSA-2022-7461 1 CVE

  Moderate: libreoffice security update (Oracle Linux 8)

  [6.4.7.2-11.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor=Oracle America, Inc. - Added the --with-hamcrest option to configure. [1:6.4.7.2-11] - Resolves: rhbz#2060559 CVE-2021-25636

  Nov 15, 2022
• Medium
  ELSA-2022-7700 2 CVEs

  Moderate: gdisk security update (Oracle Linux 8)

  [1.0.3-11] - Fix double byteswap on big-endian systems also while reading partition names resolves: #2065205 [1.0.3-10] - Fix CVE-2021-0308 resolves: #2052364

  Nov 15, 2022
• Medium max 5.9
  ELSA-2022-7524 1 CVE

  Moderate: yajl security update (Oracle Linux 8)

  [2.1.0-11] - fix CVE-2022-24795 - Related: #2061390

  Nov 15, 2022
• High max 9.1
  ELSA-2022-7821 2 CVEs

  Important: nodejs:18 security update (Oracle Linux 8)

  nodejs [1:18.8.0-1] - Rebase to version 18.8.0 - Include sources for WASM blobs nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild [2021.06-2] -…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7519 15 CVEs

  Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

  [7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverse…

  Nov 15, 2022
• Low max 3.9
  ELSA-2022-7541 2 CVEs

  Low: redis:6 security, bug fix, and enhancement update (Oracle Linux 8)

  [6.2.7-1] - rebase to 6.2.7 #1999873

  Nov 15, 2022
• Medium max 4.3
  ELSA-2022-7640 1 CVE

  Moderate: mutt security update (Oracle Linux 8)

  [5:2.0.7-2] - Fix CVE-2022-1328 (#2109247)

  Nov 15, 2022
• Medium max 7.7
  ELSA-2022-7458 1 CVE

  Moderate: flatpak-builder security and bug fix update (Oracle Linux 8)

  [1.0.14-2] - Fix CVE-2022-21682 (#2042007) [1.0.14-1] - Update to 1.0.14 (#2047312)

  Nov 15, 2022
• Low
  ELSA-2022-7548 1 CVE

  Low: Image Builder security, bug fix, and enhancement update (Oracle Linux 8)

  cockpit-composer [41-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095] [41-1] - New upstream release

  Nov 15, 2022
• Medium
  ELSA-2022-7482 1 CVE

  Moderate: qt5 security, bug fix, and enhancement update (Oracle Linux 8)

  [5.15.3-1] - 5.15.3 Resolves: bz#2061377

  Nov 15, 2022
• High
  ELSA-2022-9999 1 CVE

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2136.313.6] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac…

  Nov 15, 2022
• Medium max 8.6
  ELSA-2022-7683 26 CVEs 1 exploited

  Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-425.3.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey…

  Nov 15, 2022
• Medium max 9.8
  ELSA-2022-7793 1 CVE

  Moderate: rsync security and enhancement update (Oracle Linux 8)

  [3.1.3-19] - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field [3.1.3-18] - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers [3.1…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7633 1 CVE

  Moderate: dnsmasq security and bug fix update (Oracle Linux 8)

  [2.79-24] - Prevent endless loop in forward_query (#2120357) [2.79-23] - Add IPv6 ntp-server suboptions support (#2049691) [2.79-22] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934)

  Nov 15, 2022
• Medium max 9.1
  ELSA-2022-7647 10 CVEs

  Moderate: httpd:2.4 security update (Oracle Linux 8)

  httpd [2.4.37-51.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-51] - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via ap_rwrite() - Resolves: …

  Nov 15, 2022
• Medium max 6.5
  ELSA-2022-7830 5 CVEs

  Moderate: nodejs:14 security update (Oracle Linux 8)

  nodejs [1:14.20.1-2] - Record issues fixed in the current version Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 Resolves: CVE-2022-0235 [1:14.20.1-1] - Rebase to version 14.20.1 Resolves: CVE-2022-35256 nodejs-packaging [23-3] - Update…

  Nov 15, 2022
• Medium max 7.5
  ELSA-2022-7469 3 CVEs

  Moderate: container-tools:4.0 security and bug fix update (Oracle Linux 8)

  buildah [1:1.24.5-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 (https://github.com/containers/buildah/commit/8cc4586) - Related: #2061390 [1:1.24.5-1] - update to the latest content of https://github.com/contain…

  Nov 15, 2022
• Low
  ELSA-2022-7558 1 CVE

  Low: wavpack security update (Oracle Linux 8)

  [5.1.0-16] - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269

  Nov 15, 2022
• High
  ELSA-2022-9998 1 CVE

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2136.313.6] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac…

  Nov 15, 2022
• Medium
  ELSA-2022-7594 1 CVE

  Moderate: poppler security and bug fix update (Oracle Linux 8)

  [20.11.0-5] - Dont run out of file for Hints - Rebuild for #2096452 - Resolves: #2090969, #2096452

  Nov 15, 2022
• Medium
  ELSA-2022-7583 2 CVEs

  Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update (Oracle Linux 8)

  xorg-x11-server [1.20.11-9] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2108156, rhbz#2108161 [1.20.11-8] - Rebuild again for ipv6 xtrans fix Related: #2075132 [1.20.11-6] - Rebuild for ipv6 xtrans fix Related: #2075…

  Nov 15, 2022
• Medium max 8.8
  ELSA-2022-7704 11 CVEs

  Moderate: webkit2gtk3 security and bug fix update (Oracle Linux 8)

  glib2 [2.56.4-159.0.1] - Rebuild with python 36 [Orabug: 34701176] [2.56.4-159] - Add --interface-info-[body|header] modes to gdbus-codegen - Related: #2061994 webkit2gtk3

  Nov 15, 2022
• Medium
  ELSA-2022-7745 3 CVEs

  Moderate: freetype security update (Oracle Linux 8)

  [2.9.1-9] - Guard face->size - Resolves: #2079279 [2.9.1-8] - Properly guard face_index - Resolves: #2079261 [2.9.1-7] - Do not search for windres - Resolves: #2079270 [2.9.1-6] - Avoid invalid face index - Resolves: #2079270 [2.9.1-5] - Test bitmap size earl…

  Nov 15, 2022
• Medium max 7.8
  ELSA-2022-7593 1 CVE

  Moderate: python27:2.7 security update (Oracle Linux 8)

  babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned …

  Nov 15, 2022
• Medium max 8.2
  ELSA-2022-7628 3 CVEs

  Moderate: php:7.4 security, bug fix, and enhancement update (Oracle Linux 8)

  libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php [7.4.30-1] - rebase to 7.4.30 #2099615 [7.4.19-3] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 [7.4.19-2] - fix SSRF bypass in FILTER_VALIDATE_URL CVE-20…

  Nov 15, 2022
• Medium max 7.8
  ELSA-2022-7581 1 CVE

  Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

  Cython [0.29.14-4] - Exclude unsupported i686 arch [0.29.14-3] - Unversioned binaries renamed [0.29.14-2] - Adjusted for Python 3.8 module in RHEL 8 - without emacs plugin [0.29.14-1] - Update to 0.29.14 (#1768034) - Python 2 subpackage has been removed scipy…

  Nov 15, 2022
• Medium max 7.8
  ELSA-2022-7592 1 CVE

  Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

  Cython [0.29.21-5] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [0.29.21-4] - Drop build dependency on coverage [0.29.21-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [0.29.21-2] - Re-enable tests. [0…

  Nov 15, 2022
• Low max 6.2
  ELSA-2022-7472 4 CVEs

  Low: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

  libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key parameter …

  Nov 15, 2022
• High
  ELSA-2022-7470 1 CVE

  Important: pki-core:10.6 and pki-deps:10.6 security and bug fix update (Oracle Linux 8)

  apache-commons-collections apache-commons-net [3.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.6-1] - Update to upstream version 3.6 jss [4.9.4-1] - Reba…

  Nov 15, 2022
• High max 9.8
  ELSA-2022-9987 1 CVE

  Important: zlib security update (Oracle Linux 7)

  [1.2.7-20.0.1] - Resolves: CVE-2022-37434 [Orabug: 34752508]

  Nov 9, 2022