Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 7.5

ELSA-2022-9719 1 CVE

Important: cri-o security update (Oracle Linux 7)

[1.22.5-1] - Addresses CVE-2022-1708

Aug 17, 2022
High max 7.5

ELSA-2022-9718 1 CVE

Important: cri-o security update (Oracle Linux 8)

[1.21.7-2] - Addresses CVE-2022-1708 [1.21.7-1] - Added Oracle Specifile Files for cri-o

Aug 17, 2022
Medium max 5.9

ELSA-2022-6058 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.108-1.0.1] - Add missing Oracle RIDs [6.0.108-1] - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ#2112412

Aug 15, 2022
High max 6.7

ELSA-2022-9710 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

r[ 5.4.17-2136.310.7] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34480880] {CVE-2022-2588} - x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora) [Orabug: 34450896] - x86/bugs: display dynamic re…

Aug 15, 2022
Medium max 5.9

ELSA-2022-6057 1 CVE

Moderate: .NET Core 3.1 security, bug fix, and enhancement update (Oracle Linux 8)

[3.1.422-1.0.1] - Add missing Oracle Linux Runtime IDs [3.1.422-1] - Update to .NET SDK 3.1.422 and Runtime 3.1.28 - Resolves: RHBZ#2115351

Aug 15, 2022
High max 6.7

ELSA-2022-9709 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.310.7] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34480880] {CVE-2022-2588} - x86/spec_ctrl: limit IBRS_FW to retpoline only (Ankur Arora) [Orabug: 34450896] - x86/bugs: display dynamic retb…

Aug 15, 2022
Medium max 5.5

ELSA-2022-5937 3 CVEs

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.76.1.0.1.OL7] [debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.76.1.OL7] [Update Oracle Linux certificates (Ilya Okomin) [Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petren…

Aug 11, 2022
High

ELSA-2022-9682 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-47.0.2.2] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and

Aug 10, 2022
Medium max 8.6

ELSA-2022-6003 2 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 9)

[5.14.0-70.22.1.0.1_0.OL9] [lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499} [5.14.0-70.22.1_0.OL9] [Update Oracle Linux certificates (Kevin Lyons) [Disable signing for aarch64 (Ilya Okomin) [Oracle Linux RHCK M…

Aug 10, 2022
Medium max 7.5

ELSA-2022-5948 36 CVEs

Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (Oracle Linux 9)

galera [26.4.11-1.0.1] - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. Patches from previous release have been deleted - Drop nmap-ncat requirement. [Orabug: 34116228] - Added galera-skip-lp1184034-testcase.patch - …

Aug 10, 2022
Medium max 5.9

ELSA-2022-6043 1 CVE

Moderate: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 9)

[6.0.108-1.0.1] - Add missing Oracle RIDs - Build all packages on source-build even when in servicing [6.0.108-1] - Update to .NET SDK 6.0.108 and Runtime 6.0.8 - Resolves: RHBZ#2112413

Aug 10, 2022
Medium max 7.8

ELSA-2022-5942 3 CVEs

Moderate: vim security update (Oracle Linux 9)

[8.2.2637-16.0.1.3] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-16.3] - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in…

Aug 10, 2022
High max 5.3

ELSA-2022-9699 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.516.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460938] {CVE-2022-2588} [4.14.35-2047.516.1] - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() …

Aug 9, 2022
High max 5.3

ELSA-2022-9694 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.65.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460939] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9693 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.516.1.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460938] {CVE-2022-2588} [4.14.35-2047.516.1] - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() …

Aug 9, 2022
High max 5.3

ELSA-2022-9692 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.309.5.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460937] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9690 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-1.43.4.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588} [5.15.0-1.43.4] - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34399…

Aug 9, 2022
High max 5.3

ELSA-2022-9691 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.309.5.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460937] {CVE-2022-2588}

Aug 9, 2022
High max 5.3

ELSA-2022-9689 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-1.43.4.1] - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) [Orabug: 34460936] {CVE-2022-2588} [5.15.0-1.43.4] - Revert selftests/bpf: add tests verifying unprivileged bpf behaviour (Alan Maguire) [Orabug: 34399…

Aug 9, 2022
High

ELSA-2022-5819 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-372.19.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Aug 8, 2022
High

ELSA-2022-9700 4 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

libvirt [5.7.0-34.el8] - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019] - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019] - qemuDomainBl…

Aug 8, 2022
Medium max 7.8

ELSA-2022-5813 3 CVEs

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-19.0.1.4] - Remove upstream references [Orabug: 31197557] - Added glibc-gconv-extra to common requires to provide ISO-8859-2 [Orabug: 34114984] [2:8.0.1763-19.4] - fix issue reported by covscan [2:8.0.1763-19.3] - CVE-2022-1785 vim: Out-of-bounds Wr…

Aug 5, 2022
Medium

ELSA-2022-5821 4 CVEs

Moderate: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

libvirt [8.0.0-5.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-5.2.el8] - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#2084030) - cputest: Drop some old…

Aug 5, 2022
High

ELSA-2022-9675 1 CVE

Important: httpd security update (Oracle Linux 7)

[2.4.6-97.0.7.5] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850]

Aug 4, 2022
High

ELSA-2022-5905 2 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-18] - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz#2109031, rhbz#2109033

Aug 4, 2022
High

ELSA-2022-9680 1 CVE

Important: httpd security update (Oracle Linux 9)

[2.4.51-7.0.2] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381949]

Aug 4, 2022
High max 7.5

ELSA-2022-5904 1 CVE

Important: php security update (Oracle Linux 9)

[8.0.13-2] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626

Aug 4, 2022
High max 7.5

ELSA-2022-5775 9 CVEs

Important: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

delve [1.7.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.7.2-1] - Rebase to 1.7.2 - Related: rhbz#2014088 golang [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109182 [1.17.10-2] - Clean up dist-git patches - Resolves…

Aug 3, 2022
Medium

ELSA-2022-5823 2 CVEs

Moderate: 389-ds:1.4 security update (Oracle Linux 8)

[1.4.3.28-7] - Bump version to 1.4.3.28-7 - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database - Resolves: Bug 2081014 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could r…

Aug 3, 2022
Medium max 7.5

ELSA-2022-5779 2 CVEs

Moderate: ruby:2.5 security update (Oracle Linux 8)

ruby [2.5.9-110] - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9. - Fix by adding length limit option for methods that parses date strings. Resolves: CVE-2021-41817 - CGI::Cookie.parse no longer d…

Aug 3, 2022
Medium max 7.5

ELSA-2022-5826 36 CVEs

Moderate: mariadb:10.5 security, bug fix, and enhancement update (Oracle Linux 8)

galera [26.4.11-1] - Rebase to 26.4.11 mariadb [3:10.5.16-2] - Release bump for rebuild [3:10.5.16-1] - Rebase to 10.5.16 [3:10.5.15-1] - Rebase to 10.5.15

Aug 3, 2022
High max 7.8

ELSA-2022-9667 3 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.65.1] - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33825689] {CVE-2022-0492} - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi) [Orabug: 34091904] - ocfs2: dlmfs: fix error handling of user_dlm_destroy_l…

Aug 2, 2022
High max 8.8

ELSA-2022-5776 3 CVEs

Important: firefox security update (Oracle Linux 7)

[91.12.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.12.0-1] - Update to 91.12.0 b…

Aug 2, 2022
High max 8.8

ELSA-2022-5777 3 CVEs

Important: firefox security update (Oracle Linux 8)

[91.12.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
Medium

ELSA-2022-5809 1 CVE

Moderate: pcre2 security update (Oracle Linux 8)

[10.32-3] - Resolves: CVE-2022-1586

Aug 2, 2022
High max 8.8

ELSA-2022-5774 3 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
Medium max 9.8

ELSA-2022-5818 3 CVEs

Moderate: openssl security update (Oracle Linux 8)

[1:1.1.1k-7] - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resol…

Aug 2, 2022
High max 7.5

ELSA-2022-5799 9 CVEs

Important: go-toolset and golang security and bug fix update (Oracle Linux 9)

golang [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109183 [1.17.7-2] - Clean up dist-git patches - Resolves: rhbz#2109174 go-toolset [1.17.12-1] - Update Go to version 1.17.12 - Resolves: rhbz#2109183

Aug 2, 2022
High max 8.8

ELSA-2022-5778 3 CVEs

Important: thunderbird security update (Oracle Linux 9)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Reference oracle-indexhtml within Requires [Orabug: 33802044] [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022
High max 8.8

ELSA-2022-5767 3 CVEs

Important: firefox security update (Oracle Linux 9)

[91.12.0-2.0.1] - Removed Upstream references [91.12.0-1] - Update to 91.12.0 build1

Aug 2, 2022