Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 9.1

ELSA-2022-9949 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9950 14 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Oct 25, 2022
High max 9.1

ELSA-2022-9952 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9954 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9955 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
High max 9.1

ELSA-2022-9953 14 CVEs

Important: GraalVM Security update (Oracle Linux 9)

Oct 25, 2022
Medium

ELSA-2022-7086 1 CVE

Moderate: pki-core security update (Oracle Linux 7)

[10.5.18-23] - ########################################################################## - # RHEL 7.9 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to …

Oct 24, 2022
High max 9.8

ELSA-2022-7088 1 CVE

Important: libksba security update (Oracle Linux 7)

[1.3.0-6] - Fix for CVE-2022-3515 (#2135695)

Oct 24, 2022
High

ELSA-2022-9931 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-3.60.5.1.el8] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - fs: do not co…

Oct 24, 2022
High max 9.8

ELSA-2022-7089 1 CVE

Important: libksba security update (Oracle Linux 8)

[1.3.5-8] - Fix for CVE-2022-3515 (#2135702)

Oct 24, 2022
High max 9.8

ELSA-2022-7090 1 CVE

Important: libksba security update (Oracle Linux 9)

[1.5.1-5] - Fix for CVE-2022-3515 (#2135703)

Oct 24, 2022
High

ELSA-2022-9930 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-3.60.5.1] - fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34721465] - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34721465] - fs: do not compar…

Oct 24, 2022
Medium max 5.3

ELSA-2022-7002 4 CVEs

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

[1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u3…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7008 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 7)

[1:11.0.17.0.8-2.0.1] - link atomic for ix86 build [1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTrans…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7012 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

[1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNam…

Oct 21, 2022
High max 6.7

ELSA-2022-9926 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.312.3.4] - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi) [Orabug: 34666845] [5.4.17-2136.312.3.3] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34607590] - cgroup: Elide write-locking threadgroup_rwsem w…

Oct 21, 2022
High max 6.7

ELSA-2022-9927 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.312.3.4] - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Saeed Mirzamohammadi) [Orabug: 34666845] [5.4.17-2136.312.3.3] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34607590] - cgroup: Elide write-locking threadgroup_rwsem w…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7006 4 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u3…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7000 6 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.5.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneName…

Oct 21, 2022
Medium max 5.3

ELSA-2022-6999 6 CVEs

Moderate: java-17-openjdk security and bug fix update (Oracle Linux 9)

[1:17.0.5.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneName…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7007 4 CVEs

Moderate: java-1.8.0-openjdk security update (Oracle Linux 9)

[1.8.0.352.b08-2.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.352.b08-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695 [1:1.8.0.352.b08-1] - Update to…

Oct 21, 2022
Medium max 5.3

ELSA-2022-7013 6 CVEs

Moderate: java-11-openjdk security and bug fix update (Oracle Linux 9)

[11.0.17.0.8-2.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.17.0.8-2] - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary …

Oct 21, 2022
High max 8.8

ELSA-2022-7071 4 CVEs

Important: firefox security update (Oracle Linux 9)

[102.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.4.0-1] - Update to 102.4.0 build1

Oct 21, 2022
High max 8.1

ELSA-2022-7024 1 CVE

Important: firefox security update (Oracle Linux 8)

[102.3.0-7.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Oct 20, 2022
High max 8.1

ELSA-2022-7023 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 20, 2022
High max 8.1

ELSA-2022-7020 1 CVE

Important: firefox security update (Oracle Linux 9)

[102.3.0-7.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-7] - Fix for expat CVE-2022-40674 and non functional webrtc

Oct 19, 2022
High max 8.1

ELSA-2022-7026 1 CVE

Important: thunderbird security update (Oracle Linux 9)

[102.3.0-4.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-4] - Fix for expat CVE-2022-40674

Oct 19, 2022
High max 9.1

ELSA-2022-6964 2 CVEs

Important: nodejs:16 security update (Oracle Linux 8)

nodejs [1:16.17.1-1] - Rebase to version 16.17.1 - Resolves: CVE-2022-35255 CVE-2022-35256 - Resolves: #2132004, #2130552 - Resolves #2121095

Oct 18, 2022
High max 9.1

ELSA-2022-6963 2 CVEs

Important: nodejs security update (Oracle Linux 9)

[16.17.1-1] - Rebase to version 16.17.1 Resolves: CVE-2022-35255 CVE-2022-35256

Oct 17, 2022
Medium max 7.8

ELSA-2022-6911 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 8)

[6.0.110-1.0.1] - Add missing Oracle RIDs [6.0.110-1] - Update to .NET SDK 6.0.110 and Runtime 6.0.10 - Resolves: RHBZ#2131327

Oct 13, 2022
High

ELSA-2022-9862 4 CVEs

Important: kvm_utils2 security update (Oracle Linux 8)

Oct 13, 2022
Medium max 7.8

ELSA-2022-6913 1 CVE

Moderate: .NET 6.0 security and bugfix update (Oracle Linux 9)

[6.0.110-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.110-1] - Update to .NET SDK 6.0.110 and Runtime 6.0.10 - Resolves: RHBZ#2131328

Oct 13, 2022
Medium max 7.8

ELSA-2022-6912 1 CVE

Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.424-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.424-1] - Update to .NET SDK 3.1.424 and Runtime 3.1.30 - Resolves: RHBZ#2131728

Oct 12, 2022
High max 8.1

ELSA-2022-6878 1 CVE

Important: expat security update (Oracle Linux 8)

[2.2.5-8.0.1.3] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-8.3] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

Oct 11, 2022
Medium max 7.5

ELSA-2022-6854 1 CVE

Moderate: gnutls and nettle security, bug fix, and enhancement update (Oracle Linux 9)

gnutls [3.7.6-12] - fips: mark PBKDF2 with short key and output sizes non-approved - fips: only mark HMAC as approved in PBKDF2 - fips: mark gnutls_key_generate with short key sizes non-approved - fips: fix checking on hash algorithm used in ECDSA - fips: pre…

Oct 11, 2022
High max 6.7

ELSA-2022-9870 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.518.4] - xfs: avoid race between writeback and data/cow fork changes (Wengang Wang) [Orabug: 34508036] [4.14.35-2047.518.3] - KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34617675] [4.14.35-2047.518.2] - af_key: Do not call xf…

Oct 10, 2022
High max 6.7

ELSA-2022-9871 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.518.4.el7] - xfs: avoid race between writeback and data/cow fork changes (Wengang Wang) [Orabug: 34508036] [4.14.35-2047.518.3.el7] - KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34617675] [4.14.35-2047.518.2.el7] - af_key: Do…

Oct 10, 2022
High

ELSA-2022-9869 4 CVEs

Important: qemu-kvm security update (Oracle Linux 9)

Oct 10, 2022
High max 8.6

ELSA-2022-6815 1 CVE

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

Oct 7, 2022
High max 8.1

ELSA-2022-6834 1 CVE

Important: expat security update (Oracle Linux 7)

[2.1.0-15.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910302] [2.1.0-15] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

Oct 6, 2022