Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High

ELSA-2022-9986 1 CVE

Important: kvm_utils security update (Oracle Linux 8)

hivex [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950501 [1.3.18] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.3.18] - Resolves: bz#1810193 (Upgrade components in…

Nov 8, 2022
High max 7.5

ELSA-2022-23681 10 CVEs

Important: ol8addon security update (Oracle Linux 8)

golang [1.17.13-1.0.1] - Update tarball to 1.17.12 - Add patches between Go 1.17.12 and Go 1.17.13 - Reviewed-by: David Faust <david.faust@oracle.com> [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109182 go-toolset [1.17.13-1] - Set version to …

Nov 7, 2022
High

ELSA-2022-9978 1 CVE

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-21.el7] - qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062] - qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256] - iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug…

Nov 4, 2022
High max 5.3

ELSA-2022-7318 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-70.30.1.0.1_0.OL9] - lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.30.1_0.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RH…

Nov 4, 2022
High max 10.0

ELSA-2022-7343 2 CVEs

Important: pcs security update (Oracle Linux 7)

[0.9.169-3.0.1] - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png [0.9.169-3.el7_3.2] - Update rubygem rack - Upgrade jquery in web-ui - Resolves: rhbz#2099578 rhbz#2093232 [0.9.169-3.el7_3.1] - Explicitly close libcurl connectio…

Nov 3, 2022
High max 5.6

ELSA-2022-7337 6 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.80.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.80.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.pet…

Nov 3, 2022
Medium max 7.8

ELSA-2022-7340 3 CVEs 2 exploited

Moderate: php-pear security update (Oracle Linux 7)

[1:1.9.4-23] - update Archive_Tar to 1.4.14 CVE-2020-36193 CVE-2020-28948 CVE-2020-28949

Nov 3, 2022
High

ELSA-2022-7326 1 CVE

Important: pki-core security update (Oracle Linux 9)

[11.0.6-1.0.1] - Replaced upstream graphical references [Orabug: 33952704] [11.0.6-1] - Bug #2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.0.0.z]

Nov 3, 2022
Medium max 9.8

ELSA-2022-7314 1 CVE

Moderate: zlib security update (Oracle Linux 9)

[1.2.11-32] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434

Nov 2, 2022
Medium max 6.2

ELSA-2022-7323 1 CVE

Moderate: python3.9 security update (Oracle Linux 9)

[3.9.10-3] - Security fix for CVE-2020-10735 - Fix the test suite support for Expat >= 2.4.5 Resolves: rhbz#1834423

Nov 2, 2022
Medium

ELSA-2022-7329 1 CVE

Moderate: lua security update (Oracle Linux 9)

[5.4.2-4.3] - Fix up CVE-2022-33099 patch [5.4.2-4.2] - Enable gating [5.4.2-4.1] - apply upstream fix for CVE-2022-33099

Nov 2, 2022
High max 7.5

ELSA-2022-7288 2 CVEs

Important: openssl security update (Oracle Linux 9)

[3.0.1-43.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-43] - CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests Resolves: CVE-2022-3602 [1:3.0.1-42] - CVE-2022-3602: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602

Nov 1, 2022
High max 8.1

ELSA-2022-6997 1 CVE

Important: firefox security update (Oracle Linux 7)

[102.3.0-7.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functi…

Oct 27, 2022
High max 8.8

ELSA-2022-7069 4 CVEs

Important: firefox security update (Oracle Linux 7)

[102.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-7] - Fix …

Oct 27, 2022
High max 8.8

ELSA-2022-6711 6 CVEs

Important: firefox security update (Oracle Linux 7)

[102.3.0-6.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

Oct 27, 2022
High max 8.8

ELSA-2022-7184 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.4.0-1] - Update to 102.4.0 build1 [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 27, 2022
Medium max 7.1

ELSA-2022-7119 112 CVEs

Moderate: mysql:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

mecab [0.996-2] - Rebuild to fix the issue described in #2000986 - Resolves: #2000986 mysql [8.0.30-1] - Update to MySQL 8.0.30 - Remove patches now upstream: chain certs, s390 and robin hood - Add a new plugin 'conflicting_variables.so' [8.0.29-1] - Update t…

Oct 27, 2022
Medium

ELSA-2022-7128 1 CVE

Moderate: postgresql:12 security update (Oracle Linux 8)

postgresql [12.12-1] - Resolves: #2131177 - Update to version 12.12

Oct 27, 2022
Medium max 6.5

ELSA-2022-7133 1 CVE

Moderate: 389-ds:1.4 security update (Oracle Linux 8)

[1.4.3.28-8] - Bump version to 1.4.3.28-8 - Resolves: Bug 2131743 - SIGSEGV in sync_repl

Oct 27, 2022
High max 8.8

ELSA-2022-7190 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[102.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.4.0-1] - Update to 102.4.0 build1

Oct 27, 2022
High max 8.8

ELSA-2022-7178 8 CVEs

Important: thunderbird security update (Oracle Linux 9)

[102.4.0-1] - Update to 102.4.0 build1

Oct 27, 2022
High

ELSA-2022-7186 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 7)

[0.4.9-136.0.1] - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195] - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195] - Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch * fix se…

Oct 26, 2022
High max 8.8

ELSA-2022-6710 10 CVEs

Important: thunderbird security update (Oracle Linux 7)

[102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.3.0-3] - Update to 102.3.0 build1

Oct 26, 2022
High max 8.1

ELSA-2022-6998 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.3.0-4] - Fix for expat CVE-2022-40674 [102.3.0-3] - Update to 102.3.0 build1

Oct 26, 2022
High max 5.6

ELSA-2022-7110 7 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.32.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Oct 26, 2022
Medium max 4.3

ELSA-2022-7111 1 CVE

Moderate: samba security and bug fix update (Oracle Linux 8)

[4.15.5-10.0.1] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.15.5-10] - resolves: rhbz#2126041 - Do not require samba package in python3-samba [4.15.5-9] - Fix CVE-2022-32742 - resolves: rhbz#21255…

Oct 26, 2022
Medium

ELSA-2022-7108 2 CVEs

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-16] - Fixed CVE-2020-35527 - Fixed CVE-2020-35525

Oct 26, 2022
Medium max 7.5

ELSA-2022-7105 1 CVE

Moderate: gnutls security update (Oracle Linux 8)

[3.6.16-5] - Fix double-free in gnutls_pkcs7_verify (#2109787)

Oct 26, 2022
High

ELSA-2022-7192 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 8)

[0.8.4-22.2] - Add 0092-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133994

Oct 26, 2022
Medium max 9.8

ELSA-2022-7106 1 CVE

Moderate: zlib security update (Oracle Linux 8)

[1.2.11.19] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434

Oct 26, 2022
Medium max 7.5

ELSA-2022-7129 9 CVEs

Moderate: git-lfs security and bug fix update (Oracle Linux 8)

[2.13.3-3] - Rebuild with new Golang - Resolves: rhbz#2131795

Oct 26, 2022
High max 8.8

ELSA-2022-7070 4 CVEs

Important: firefox security update (Oracle Linux 8)

[102.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1

Oct 26, 2022
High

ELSA-2022-7185 1 CVE

Important: device-mapper-multipath security update (Oracle Linux 9)

[0.8.7-7.1] - Add 0044-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133997

Oct 26, 2022
Medium max 6.5

ELSA-2022-7087 1 CVE

Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

[1.3.10-2-17] - Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl

Oct 25, 2022
High max 9.1

ELSA-2022-9945 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9944 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9947 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9946 14 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Oct 25, 2022
High max 9.1

ELSA-2022-9951 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9948 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022