Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High

ELSA-2022-9478 7 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.514.3.el7] - uek-rpm: Update OL7 SecureBoot certificate files (Saeed Mirzamohammadi) [Orabug: 34219958] [4.14.35-2047.514.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34207044] {CVE-2022-1729} - debug: Lock do…

Jun 15, 2022
High max 5.5

ELSA-2022-9485 4 CVEs

Important: microcode_ctl security update (Oracle Linux 7)

[2:2.1-73.13.0.3] - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375 [2:2.1-73.13.0.2] - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset [Orabug: 34076312] [2:2.1-73.13.0.1] …

Jun 15, 2022
High max 5.5

ELSA-2022-9482 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.514.5.el7] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34275786] [4.14.35-2047.514.4.el7] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202260] {CVE-2022-21123} {CVE-2022-21125} {CVE-202…

Jun 15, 2022
Medium max 5.5

ELSA-2022-5061 1 CVE

Moderate: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.420-1.0.1] - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ#2060566 [3.1.420-1] - Update to .NET SDK 3.1.420 and Runtime 3.1.26 - Resolves: RHBZ#2096319 [3.1.419-1] - Update to .NET SDK 3.1.419 and R…

Jun 15, 2022
High

ELSA-2022-9477 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.514.3] - uek-rpm: Update OL7 SecureBoot certificate files (Saeed Mirzamohammadi) [Orabug: 34219958] [4.14.35-2047.514.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34207044] {CVE-2022-1729} - debug: Lock down k…

Jun 14, 2022
High max 5.5

ELSA-2022-9483 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.514.5] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34275786] [4.14.35-2047.514.4] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202260] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125}…

Jun 14, 2022
High

ELSA-2022-9479 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.308.7] - uek-rpm: Update OL7/8 Secureboot certificate and shim versions (Sherry Yang) [Orabug: 34248329] [5.4.17-2136.308.6] - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) - arm: remove CONFIG_ARCH_HAS_HOLES_…

Jun 14, 2022
High

ELSA-2022-9480 10 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

- 5.4.17-2136.308.7.el7 - uek-rpm: Update OL7/8 Secureboot certificate and shim versions (Sherry Yang) [Orabug: 34248329] [5.4.17-2136.308.6] - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg) - arm: remove CONFIG_ARCH_HAS_HO…

Jun 14, 2022
High max 5.5

ELSA-2022-9484 4 CVEs

Important: microcode_ctl security update (Oracle Linux 8)

[4:20220207-1.0.3] - update 06-55-04 to 0x2006d05 - update 06-55-07 to 0x5003302 - update 06-6a-04 to 0xb000280 - update 06-6a-06 to 0xd000375 [4:20220207-1.0.2] - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset [Orabug: 34076995] [4:20220207-1.0.…

Jun 14, 2022
High max 5.5

ELSA-2022-9481 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.308.9] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34276099] [5.4.17-2136.308.8] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202259] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {…

Jun 14, 2022
High max 5.5

ELSA-2022-9486 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.308.9] - x86/speculation/mmio: Fix late microcode loading (Patrick Colp) [Orabug: 34276099] [5.4.17-2136.308.8] - Add debugfs for controlling MMIO state data (Kanth Ghatraju) [Orabug: 34202259] {CVE-2022-21123} {CVE-2022-21125} {CVE-2022-21127} {…

Jun 14, 2022
High max 8.8

ELSA-2022-4991 1 CVE

Important: xz security update (Oracle Linux 8)

[5.2.4-4] - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271

Jun 13, 2022
High

ELSA-2022-4941 1 CVE

Important: subversion:1.14 security update (Oracle Linux 8)

subversion [1.14.1-2] - add fix for CVE-2022-24070

Jun 9, 2022
High max 8.1

ELSA-2022-4930 1 CVE

Important: python-twisted-web security update (Oracle Linux 7)

[12.1.0-8] - Security fix for CVE-2022-24801: Possible http request smuggling Resolves: rhbz#2073114

Jun 8, 2022
High max 5.3

ELSA-2022-14844 4 CVEs

Important: go-toolset:ol8addon security update (Oracle Linux 8)

go-toolset [1.17.10-1] - Set version to correspond to the matching build golang version - delve can be now added to aarch64 as well, remove ifarch. golang [1.17.10-1.0.1] - Add patches between Go 1.17.7 and Go 1.17.10 - Rename base_versn to base_version - Rem…

Jun 8, 2022
High

ELSA-2022-14857 4 CVEs

Important: go-toolset:ol8addon security update (Oracle Linux 8)

go-toolset [1.16.15-1] - Rebase to Go 1.16.15 golang [1.16.15-1.0.1] - Add patches from 1.16.12 to 1.16.15 - Add Sources for 3 binary files that changed between 1.16.12 and 1.16.15 - Rename base_vrsn to base_version - Reviewed-by: XXX XXX <xxx.xxx@oracle.com>

Jun 8, 2022
High max 6.5

ELSA-2022-9466 1 CVE

Important: shim-signed security update (Oracle Linux 7)

[15.6-1.0.7] - Update shimx64.efi and shimia32.efi signed by Microsoft [JIRA: OLDIS-16370] [15.6-1.0.5] - Update to shim-unsigned v15.6.rc2 [JIRA: OLDIS-16370] [15.6-1.0.3] - Add all algorithms using OPENSSL_add_all_algorithms [JIRA: OLDIS-16370] [15.6-1.0.1]…

Jun 7, 2022
High max 8.1

ELSA-2022-9469 7 CVEs

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.21.el7_9.9] - Add CVE-2022-28736 to the list [JIRA: OLDIS-16371] [2.02-0.87.0.19.el7_9.9] - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS…

Jun 7, 2022
High max 6.5

ELSA-2022-9465 1 CVE

Important: shim security update (Oracle Linux 8)

[15.6-1.0.3] - Update shimx64.efi and shimia32.efi signed by Microsoft [JIRA: OLDIS-16370] [15.6-1.0.2] - Update to shim-unsigned v15.6.rc2 [JIRA: OLDIS-16370] [15.6-1.0.1] - Update to shim-unsigned v15.6.rc1 [JIRA: OLDIS-16370] [15.5-1.0.3] - Update vendor c…

Jun 7, 2022
High max 8.1

ELSA-2022-9471 7 CVEs

Important: grub2 security update (Oracle Linux 8)

[2.02-123.0.3] - Add CVE-2022-28736 to the list [JIRA: OLDIS-16371] [2.02-123.0.2] - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS-16371] - bump SBAT …

Jun 7, 2022
High max 9.8

ELSA-2022-4887 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.10.0-1] - Update to 91.10.0 build1

Jun 6, 2022
High

ELSA-2022-9460 4 CVEs

Important: kvm_utils security update (Oracle Linux 8)

Jun 6, 2022
High max 9.8

ELSA-2022-4891 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.10.0-1] - Update to 91.10.0 build1

Jun 3, 2022
High max 9.8

ELSA-2022-4870 7 CVEs

Important: firefox security update (Oracle Linux 7)

[91.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.10.0-1] - Update to 91.10.0 b…

Jun 2, 2022
High max 9.8

ELSA-2022-4872 7 CVEs

Important: firefox security update (Oracle Linux 8)

[91.10.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.10.0-1] - Update to 91.10.0 build1

Jun 2, 2022
High

ELSA-2022-4855 1 CVE

Important: postgresql:13 security update (Oracle Linux 8)

postgresql [13.7-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [13.7-1] - Resolves: CVE-2022-1552 - Update to 13.7 - Release notes: https://www.postgresql.org/docs/release/13.7/

Jun 2, 2022
High

ELSA-2022-4805 1 CVE

Important: postgresql:10 security update (Oracle Linux 8)

[10.21-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [10.21-1] - Resolves: CVE-2022-1552 - Update to 10.21 - Release notes: https://www.postgresql.org/docs/release/10.21/ [10.19-…

Jun 1, 2022
High

ELSA-2022-4807 1 CVE

Important: postgresql:12 security update (Oracle Linux 8)

postgresql [12.11-2] - Resolves: CVE-2022-1552 - Release bump due to wrongly reported CVE of libpq Build after reverted changes in libpq package [12.11-1] - Resolves: CVE-2022-1552 - Update to 12.11 - Release notes: https://www.postgresql.org/docs/release/12.…

Jun 1, 2022
High max 9.8

ELSA-2022-4797 1 CVE

Important: maven:3.6 security update (Oracle Linux 8)

maven-shared-utils [3.2.1-0.4] - Build with OpenJDK 8

Jun 1, 2022
High max 9.8

ELSA-2022-4798 1 CVE

Important: maven:3.5 security update (Oracle Linux 8)

maven-shared-utils [3.2.1-0.2] - Fix commandline injection vulnerability - Resolves: CVE-2022-29599

Jun 1, 2022
High max 8.1

ELSA-2022-4803 1 CVE

Important: rsyslog security update (Oracle Linux 7)

[8.24.0-57.0.4.el7_9.3] - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler [8.24.0-57.3] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081395

May 31, 2022
Critical max 8.8

ELSA-2022-4776 2 CVEs

Critical: firefox security update (Oracle Linux 8)

[91.9.1-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.9.1-1] - Update to 91.9.1 build1

May 30, 2022
Critical max 8.8

ELSA-2022-4769 2 CVEs

Critical: thunderbird security update (Oracle Linux 8)

[91.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.9.1-1] - Update to 91.9.1 build1

May 30, 2022
High max 8.1

ELSA-2022-4799 1 CVE

Important: rsyslog security update (Oracle Linux 8)

[8.2102.0-7.1] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081400

May 30, 2022
High max 9.0

ELSA-2022-4796 1 CVE

Important: nodejs:16 security update (Oracle Linux 8)

nodejs [1:16.14.0-4] - Apply lock file validation fixes - Resolves CVE-2021-43616 - Resolves: RHBZ#2070012

May 30, 2022
High

ELSA-2022-9442 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.5] - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34211496] {CVE-2022-1852} {CVE-2022-1852}

May 28, 2022
High

ELSA-2022-9443 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.5] - KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34211496] {CVE-2022-1852}

May 28, 2022
High

ELSA-2022-9433 1 CVE

Important: libvirt libvirt-python security update (Oracle Linux 7)

libvirt [5.7.0-33.el7] - qemu: refresh vNUMA/SMT pinning. (Wim ten Have) [Orabug: 34083505] - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have) [Orabug: 34023508] - nwfilter: fix crash when counting number of network filt…

May 26, 2022
High

ELSA-2022-9432 3 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-17.el7] - arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin) - arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo) - arm/acpi: fix PCI _PRT definition (Heyi Guo) - docs: fix references to docs/devel/atomics.rst (S…

May 26, 2022
Critical max 8.8

ELSA-2022-4729 2 CVEs

Critical: firefox security update (Oracle Linux 7)

[91.9.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.9.1-1] - Update to 91.9.1 buil…

May 25, 2022