Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High

ELSA-2022-9669 3 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-18.el7] - block: introduce max_hw_iov for use in scsi-generic (Paolo Bonzini) [Orabug: 33785156] - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 (Paolo Bonzini) [Orabug: 33785156] - block: add max_hw_transfer to BlockLi…

Aug 1, 2022
High

ELSA-2022-9668 1 CVE

Important: libvirt libvirt-python security update (Oracle Linux 7)

libvirt [5.7.0-34.el7] - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019] - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019] - qemuDomainBl…

Aug 1, 2022
High max 8.8

ELSA-2022-5773 3 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.12.0-1] - Update to 91.12.0 build1

Aug 1, 2022
High max 7.5

ELSA-2022-5736 4 CVEs

Important: java-17-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1:17.0.4.0.8-0.2.ea] - Revert the following changes until copy-java-configs has adapted to relative symlinks: - * Move cacerts replacement to install section and retain original of this and tzdb.dat - * Run tests on the installed image, rather than the build…

Jul 28, 2022
High max 7.1

ELSA-2022-5717 1 CVE

Important: grafana security update (Oracle Linux 8)

[7.5.11-3] - resolve CVE-2022-31107 grafana: OAuth account takeover

Jul 27, 2022
High max 7.5

ELSA-2022-5726 4 CVEs

Important: java-17-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:17.0.4.0.8-0.2.ea] - Add rpminspect.yaml to turn off Java bytecode inspections - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode - Resolves: rhbz#2109106 [1:17.0.4.0.8-0.2.ea] - Revert the following changes until co…

Jul 27, 2022
High max 7.7

ELSA-2022-9642 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9644 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9641 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9648 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9646 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9643 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9645 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9647 5 CVEs

Important: GraalVM Security update (Oracle Linux 7)

Jul 26, 2022
High max 7.7

ELSA-2022-9650 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9654 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9652 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9656 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9649 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9651 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9655 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.7

ELSA-2022-9653 5 CVEs

Important: GraalVM Security update (Oracle Linux 8)

Jul 26, 2022
High max 7.5

ELSA-2022-5695 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1:11.0.16.0.8-1.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upst…

Jul 26, 2022
High max 7.5

ELSA-2022-5709 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 9)

[1.8.0.342.b07-1.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value …

Jul 26, 2022
High max 7.1

ELSA-2022-5716 1 CVE

Important: grafana security update (Oracle Linux 9)

[7.5.11-5] - resolve CVE-2022-31107 grafana: OAuth account takeover

Jul 26, 2022
High max 7.5

ELSA-2022-5698 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-…

Jul 25, 2022
High max 7.5

ELSA-2022-5696 3 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:1.8.0.342.b07-1] - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-…

Jul 25, 2022
High max 7.5

ELSA-2022-5687 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:11.0.16.0.8-1.0.1] - link atomic for ix86 build [1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print relea…

Jul 21, 2022
High max 7.5

ELSA-2022-5683 3 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 8)

[1:11.0.16.0.8-1] - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upstreamed - Print release file during build, which should now include a co…

Jul 21, 2022
High max 6.7

ELSA-2022-9609 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.309.5] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386637] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9602 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)

[5.15.0-0.30.20.1] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9612 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.309.5] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386637] {CVE-2022-21505}

Jul 19, 2022
High max 6.7

ELSA-2022-9601 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

[5.15.0-0.30.20.1] - lockdown: Fix kexec lockdown bypass with ima policy (Eric Snowberg) [Orabug: 34386636] {CVE-2022-21505}

Jul 19, 2022
High

ELSA-2022-5564 1 CVE

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.16.1.0.1_6.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…

Jul 15, 2022
High max 8.1

ELSA-2022-9595 8 CVEs

Important: grub2 security update (Oracle Linux 8)

[2.02-123.0.7.el8_6.8] - Enable back btrfs module by default [Orabug: 34377188] [2.02-123.0.6.el8_6.8] - Backport upstream SNP protocol fixes [Orabug: 34195100] [2.02-123.0.5.el8_6.8] - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX c…

Jul 14, 2022
High max 8.1

ELSA-2022-9596 8 CVEs

Important: grub2 security update (Oracle Linux 9)

[2.06-27.0.6.el9_0.7] - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986] [2.06-27.0.5.el9_0.7] - Replaced bugzilla.oracle.com references [Orabug: 34202300] - Update provided certificate version to 202204 [JIRA: OLDIS-16371] - Various c…

Jul 14, 2022
High max 10.0

ELSA-2022-9589 6 CVEs

Important: olcne security update (Oracle Linux 7)

olcne [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes t…

Jul 12, 2022
High

ELSA-2022-5542 1 CVE

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-…

Jul 12, 2022
High max 7.8

ELSA-2022-17957 4 CVEs

Important: ol8addon security update (Oracle Linux 8)

Jul 12, 2022
High max 10.0

ELSA-2022-9588 6 CVEs

Important: olcne security update (Oracle Linux 8)

olcne [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes t…

Jul 12, 2022