Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

  • Medium max 7.5
    ELSA-2022-6820 1 CVE

    Moderate: prometheus-jmx-exporter security update (Oracle Linux 8)

    [0.12.0-8] - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 (BZ 2128477)

  • High max 8.6
    ELSA-2022-6839 1 CVE

    Important: squid security update (Oracle Linux 9)

    [7:5.2-1.2] - Resolves: #2130251 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB authentication

  • High max 8.1
    ELSA-2022-6838 1 CVE

    Important: expat security update (Oracle Linux 9)

    [ 2.2.10-12.3] - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674

  • High max 5.1
    ELSA-2022-9853 1 CVE

    Important: kubernetes security update (Oracle Linux 7)

    kubernetes [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.8-2] - Updated Kubernetes package release version to 1.21.6-2 [1.4.8-1] - Upgraded kubernetes-1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for vers…

  • High max 7.5
    ELSA-2022-6778 2 CVEs

    Important: bind security update (Oracle Linux 8)

    [32:9.11.36-3.1] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

  • High max 7.5
    ELSA-2022-6781 3 CVEs

    Important: bind9.16 security update (Oracle Linux 8)

    [32:9.16.23-0.7.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

  • High max 8.6
    ELSA-2022-6775 1 CVE

    Important: squid:4 security update (Oracle Linux 8)

    libecap squid [7:4.15-3.1] - Resolves: #2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher server responses

  • High max 5.1
    ELSA-2022-9854 1 CVE

    Important: kubernetes security update (Oracle Linux 8)

    kubernetes [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.8-2] - Updated Kubernetes package release version to 1.21.6-2 [1.4.8-1] - Upgraded kubernetes-1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for vers…

  • High max 6.9
    ELSA-2022-9852 15 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.67.3] - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav) [Orabug: 31225377] {CVE-2017-16537} - fbcon: remove soft scrollback code (Linus Torvalds) [Orabug: 31914703] {CVE-2020-14390} - inet: use bigger hash table for IP ID generation (…

  • High max 7.5
    ELSA-2022-6763 3 CVEs

    Important: bind security update (Oracle Linux 9)

    [32:9.16.23-1.1] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

  • High max 7.5
    ELSA-2022-6765 2 CVEs

    Important: bind security update (Oracle Linux 7)

    [32:9.11.4-26.P2.10] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

  • High max 5.1
    ELSA-2022-9855 1 CVE

    Important: kubernetes security update (Oracle Linux 7)

    kubernetes [1.22.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.23.11-1] - Added Oracle specific build files for Kubernetes olcne [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kube…

  • High
    ELSA-2022-22254 3 CVEs

    Important: squid security update (Oracle Linux 7)

    [ - 7:4.11-3.0.1]

  • High max 5.1
    ELSA-2022-9856 1 CVE

    Important: kubernetes security update (Oracle Linux 8)

    kubernetes [1.22.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.23.11-1] - Added Oracle specific build files for Kubernetes olcne [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kube…

  • High max 8.8
    ELSA-2022-6702 6 CVEs

    Important: firefox security update (Oracle Linux 8)

    [102.3.0-6.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

  • High max 8.8
    ELSA-2022-6708 10 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-3] - Update to 102.3.0 build1

  • High max 8.8
    ELSA-2022-6700 6 CVEs

    Important: firefox security update (Oracle Linux 9)

    [102.3.0-6.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.3.0-6] - Update to 102.3.0 build1

  • High max 8.8
    ELSA-2022-6717 10 CVEs

    Important: thunderbird security update (Oracle Linux 9)

    [102.3.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.3.0-3] - Update to 102.3.0 build1

  • Medium max 8.8
    ELSA-2022-6540 1 CVE 1 exploited

    Moderate: webkit2gtk3 security update (Oracle Linux 8)

    [2.36.7-1] - Update to 2.36.7 Related: #2123429

  • High max 7.5
    ELSA-2022-9828 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

  • High
    ELSA-2022-6610 2 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

    [5.14.0-70.26.1.0.1_0.OL9] - lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.26.1_0.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RH…

  • Medium max 6.5
    ELSA-2022-6590 44 CVEs

    Moderate: mysql security, bug fix, and enhancement update (Oracle Linux 9)

    [8.0.30-3] - Release bump for rebuild [8.0.30-1] - Update to MySQL 8.0.30 - Remove patches now upstream: chain certs, OpenSSL 3, s390 and robin hood - Add a new plugin [8.0.29-1] - Update to MySQL 8.0.29

  • Medium max 9.1
    ELSA-2022-6595 10 CVEs

    Moderate: nodejs and nodejs-nodemon security and bug fix update (Oracle Linux 9)

    nodejs [16.16.0-1] - Rebase to version 16.16.0 Resolves: RHBZ#2106290 Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215 [16.14.0-5] - Decouple dependency bundling from bootstrapping nodejs-nodemon

  • High max 7.5
    ELSA-2022-9830 6 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

    [5.15.0-2.52.3.el8] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: …

  • High max 7.5
    ELSA-2022-9829 5 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2136.311.6] - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' (Sherry Yang) [Orabug: 34535896] [5.4.17-2136.311.5] - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) […

  • Medium
    ELSA-2022-6608 2 CVEs

    Moderate: dbus-broker security update (Oracle Linux 9)

    [28-5.1] - Fix a stack buffer over-read in the c-shquote library - Fix null pointer reference when supplying a malformed XML config file - Add gating.yaml Resolves: CVE-2022-31212 Resolves: CVE-2022-31213

  • Medium
    ELSA-2022-6602 1 CVE

    Moderate: gnupg2 security update (Oracle Linux 9)

    [2.3.3-2] - Fix CVE-2022-34903 (#2108449)

  • Medium
    ELSA-2022-6585 2 CVEs

    Moderate: ruby security, bug fix, and enhancement update (Oracle Linux 9)

    [3.0.4-160] - Upgrade to Ruby 3.0.4. Resolves: rhbz#2109428 - OpenSSL test suite fixes due to disabled SHA1. Related: rbhz#2109428 - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 - Fix buffer overrun in String-to-Float conversion. Resolves: …

  • Medium max 8.8
    ELSA-2022-6634 1 CVE 1 exploited

    Moderate: webkit2gtk3 security update (Oracle Linux 9)

    [2.36.7-1] - Update to 2.36.7 Related: #2123430

  • High max 7.5
    ELSA-2022-9827 6 CVEs 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

    [5.15.0-2.52.3] - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo) [Orabug: 34495548] {CVE-2022-2585} - fix race between exit_itimers() and /proc/pid/timers (Oleg Nesterov) [Orabug: 34495548] - rds: ib: Add …

  • High max 7.5
    ELSA-2022-9787 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.517.3] - KVM: x86: use raw clock values consistently (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti)…

  • High max 7.5
    ELSA-2022-9788 3 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [4.14.35-2047.517.3.el7] - KVM: x86: use raw clock values consistently (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini) [Orabug: 34575637] - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosa…

  • Medium max 7.8
    ELSA-2022-6542 3 CVEs 2 exploited

    Moderate: php:7.4 security update (Oracle Linux 8)

    php-pear [1:1.10.13-1] - update PEAR to 1.10.13 - update Archive_Tar to 1.4.14

  • Medium max 7.5
    ELSA-2022-6523 1 CVE

    Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

    [3.1.423-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.423-1] - Update to .NET SDK 3.1.423 and Runtime 3.1.29 - Resolves: RHBZ#2123785

  • Medium max 7.5
    ELSA-2022-6443 35 CVEs

    Moderate: mariadb:10.3 security and bug fix update (Oracle Linux 8)

    galera [25.3.35-1] - Rebase to 25.3.35 mariadb [3:10.3.35-1] - Rebase to 10.3.35 [3:10.3.34-1] - Rebase to 10.3.34

  • Medium max 7.5
    ELSA-2022-6447 3 CVEs

    Moderate: ruby:2.7 security, bug fix, and enhancement update (Oracle Linux 8)

    ruby [2.7.6-138] - Upgrade to Ruby 2.7.6. Resolves: rhbz#2109424 - Fix FTBFS due to an incompatible load directive. Related: rhbz#2109424 - Fix a fiddle import test on an optimized glibc on Power 9. Related: rhbz#2109424 - Fix regular Expression Denial of Ser…

  • Medium max 9.1
    ELSA-2022-6449 6 CVEs

    Moderate: nodejs:16 security and bug fix update (Oracle Linux 8)

    nodejs [1:16.16.0-3] - Fix build - Resolves: RHBZ#2111416 [1:16.16.0-2] - Refactor spec - Resolves: RHBZ#2111416 [1:16.16.0-1] - Rebase to latest version - Resolves: RHBZ#2106369 - CVE fixes for CVE-2022-32212/3/4/5 - Resolves: #2109578, #2109581, #2109584, #…

  • Medium max 7.5
    ELSA-2022-6450 4 CVEs

    Moderate: ruby:3.0 security, bug fix, and enhancement update (Oracle Linux 8)

    ruby [3.0.4-141] - Upgrade to Ruby 3.0.4. Resolves: rhbz#2109431 Resolves: rhbz#2110981 - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739

  • Medium max 7.5
    ELSA-2022-6539 1 CVE

    Moderate: .NET 6.0 security and bugfix update (Oracle Linux 8)

    [6.0.109-1.0.1] - Add missing Oracle RIDs [6.0.109-1] - Update to .NET SDK 6.0.109 and Runtime 6.0.9 - Resolves: RHBZ#2123789

  • Medium max 9.1
    ELSA-2022-6448 5 CVEs

    Moderate: nodejs:14 security and bug fix update (Oracle Linux 8)

    nodejs [1:14.20.0-2] - Replace with_* macros with RPM confitionals - Unify configure calls into single command - Refactor bootstrap-related parts - Decouple dependency bundling from bootstrapping - Resolves: RHBZ#2111417 [1:14.20.0-1] - Rebase to latest versi…