Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Critical max 8.8

ELSA-2022-4730 2 CVEs

Critical: thunderbird security update (Oracle Linux 7)

[91.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.9.1-1] - Update to 91.9.1 build1

May 24, 2022
High max 6.7

ELSA-2022-9427 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.2.el7] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152700] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9422 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.62.3.1] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152701] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9423 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2.2] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152700] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9425 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.4] - io_uring: always use original task when preparing req identity (Jens Axboe) [Orabug: 34186552] {CVE-2022-1786} [5.4.17-2136.307.3.3] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152699] {CVE-2022-21499}

May 24, 2022
High max 6.7

ELSA-2022-9426 2 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.4] - io_uring: always use original task when preparing req identity (Jens Axboe) [Orabug: 34186552] {CVE-2022-1786} [5.4.17-2136.307.3.3] - debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152699] {CVE-2022-21499}

May 24, 2022
High

ELSA-2022-9412 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.1.el7] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34175592] {CVE-2022-1729}

May 21, 2022
High

ELSA-2022-9410 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2.1] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34175592] {CVE-2022-1729}

May 20, 2022
High max 7.5

ELSA-2022-9416 1 CVE

Important: pcs security update (Oracle Linux 8)

[0.10.12-6.0.1.el8_6.1] - Replace HAM-logo.png with a generic one [0.10.12-6.el8_6.1] - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz#2081331

May 20, 2022
High

ELSA-2022-9413 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172709] {CVE-2022-1729}

May 20, 2022
High

ELSA-2022-9409 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.307.3.2] - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172709] {CVE-2022-1729}

May 20, 2022
High max 7.8

ELSA-2022-4642 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.66.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

May 19, 2022
High max 8.8

ELSA-2022-2143 1 CVE

Important: container-tools:3.0 security update (Oracle Linux 8)

podman [3.0.1-9] - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel (https://github.com/containers/podman/commit/801b7e8) - Resolves: #2074143

May 19, 2022
High max 7.5

ELSA-2022-2199 3 CVEs

Important: .NET 6.0 security, bug fix, and enhancement update (Oracle Linux 8)

[6.0.105-1.0.1] - Add missing Oracle RIDs [6.0.105-1] - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ#2082267 [6.0.104-2] - Update to .NET SDK 6.0.104 and Runtime 6.0.4 - Resolves: RHBZ#2074640

May 19, 2022
High

ELSA-2022-2234 1 CVE

Important: subversion:1.10 security update (Oracle Linux 8)

subversion [1.10.2-5] - add security fix for CVE-2022-24070

May 19, 2022
High max 7.5

ELSA-2022-2201 1 CVE

Important: rsync security update (Oracle Linux 8)

[3.1.3-14.2] - Related: #2074783 - Needed to bump this to rebuild correctly [3.1.3-14.1] - Resolves: #2074783 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs

May 19, 2022
High max 7.5

ELSA-2022-2200 3 CVEs

Important: .NET 5.0 security, bug fix, and enhancement update (Oracle Linux 8)

[5.0.214-1.0.1] - Support AArch64 on Oracle Linux [Orabug: 32738620] - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch [5.0.214-1] - Update to .NET SDK 5.0.214 and Runtime 5.0.17 - Resolves: RHBZ#2082258 [5.0.213-2] - Update to .NET SD…

May 19, 2022
High max 7.5

ELSA-2022-2202 3 CVEs

Important: .NET Core 3.1 security, bug fix, and enhancement update (Oracle Linux 8)

[3.1.419-1.0.1] - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ#2060566 [3.1.419-1] - Update to .NET SDK 3.1.419 and Runtime 3.1.25 - Resolves: RHBZ#2081443 [3.1.418-1] - Update to .NET SDK 3.1.418 and R…

May 19, 2022
High max 9.8

ELSA-2022-9358 2 CVEs

Important: glibc security update (Oracle Linux 7)

[2.17-325.0.6] - OraBug 33968985 Security Patches - This release fixes CVE-2022-23219, CVE-2022-23218, and CVE-2021-3999 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.17-325.0.3] - OraBug 33968985 Security Patches This release fixes CVE-2022-232…

May 18, 2022
Medium

ELSA-2022-2043 1 CVE

Moderate: c-ares security update (Oracle Linux 8)

[1.13.0-6] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]

May 17, 2022
Low

ELSA-2022-1814 1 CVE

Low: gnome-shell security and bug fix update (Oracle Linux 8)

[3.32.2-44] - Fix more JS warnings Resolves: #2025940 [3.32.2-43] - Backport fix for CVE-2020-17489 Resolves: #1874259 [3.32.2-42] - Backport WPA3 support Resolves: #1924593 [3.32.2-41] - Add bugs introduced in backport for #1651378 Related: #2000918 - Tidy u…

May 17, 2022
Medium

ELSA-2022-1851 1 CVE

Moderate: pki-core:10.6 security and bug fix update (Oracle Linux 8)

jss [4.9.3-1] - Rebase to JSS 4.9.3 - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM [rhel-8] [4.9.2-1] - Rebase to JSS 4.9.2 ldapjdk [4.23.0-1] - Rebase to LDAP SDK 4.23.0 [4.23.0-0.1] - Rebase to LDAP SDK 4.23.0-al…

May 17, 2022
Medium

ELSA-2022-1801 1 CVE

Moderate: gfbgraph security update (Oracle Linux 8)

[0.2.4-1] - Update to 0.2.4 Resolves: #1997941

May 17, 2022
Low max 4.3

ELSA-2022-1781 1 CVE

Low: grafana security, bug fix, and enhancement update (Oracle Linux 8)

[7.5.11-2] - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files [7.5.11-1] - update to 7.5.11 tagged upstream community sources, see CHANGEL…

May 17, 2022
Medium

ELSA-2022-1898 1 CVE

Moderate: fapolicyd security, bug fix, and enhancement update (Oracle Linux 8)

[1.1-6.0.1] - Increase db_max_size to 100M [1.1-6] - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path Resolves: rhbz#2069120 [1.1-4] RHEL 8.6.0 ERRATUM - fapolicyd denies access to /usr/lib64/ld-2.28.so Resolves: rhbz#2066300 [1.1-1] RHEL 8.6.0 …

May 17, 2022
Medium max 7.8

ELSA-2022-1935 2 CVEs

Moderate: php:7.4 security update (Oracle Linux 8)

libzip [1.6.1-1] - update to 1.6.1 - enable lzma support php-pear [1:1.10.12-1] - update PEAR to 1.10.12 - update Archive_Tar to 1.4.9 - update Console_Getopt to 1.4.3 - update XML_Util to 1.4.5 php-pecl-apcu [5.1.18-1] - update to 5.1.18 php-pecl-rrd php-pec…

May 17, 2022
Medium max 8.2

ELSA-2022-1932 1 CVE

Moderate: python-lxml security update (Oracle Linux 8)

[4.2.3-4] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569

May 17, 2022
Medium max 5.3

ELSA-2022-2092 1 CVE

Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)

[32:9.11.36-2] - Reduce memory used per-view on machine with few processors (#2030239) [32:9.11.36-2] - Rebuilt on a new side-tag (#2013993) [32:9.11.36-1] - Update to 9.11.36 [32:9.11.26-9] - Correct tsig system test [32:9.11.26-8] - Propagate ephemeral port…

May 17, 2022
Low

ELSA-2022-1891 1 CVE

Low: libpq security update (Oracle Linux 8)

[13.5-1] - Rebase to 13.5 Resolves: #2023294

May 17, 2022
Medium

ELSA-2022-1796 1 CVE

Moderate: qt5-qtbase security update (Oracle Linux 8)

[5.15.2-4] - Fix out-of-bounds write in QOutlineMapper::convertPath Resolves: bz#1996877

May 17, 2022
Medium

ELSA-2022-1810 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-21] - Fix CVE-2020-19131 (#2006535)

May 17, 2022
Medium

ELSA-2022-1968 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

[1.0.28-12] - fix heap buffer overflow in flac (#2030507) [1.0.28-11] - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985028)

May 17, 2022
Medium max 5.3

ELSA-2022-1860 1 CVE

Moderate: maven:3.6 security and enhancement update (Oracle Linux 8)

httpcomponents-client [4.5.10-4] - Fix incorrect handling of malformed authority component in request URIs - Resolves: CVE-2020-13956 maven [1:3.6.2-7] - Add maven-openjdk17 - Resolves: rhbz#1991521

May 17, 2022
Medium max 8.2

ELSA-2022-1792 1 CVE

Moderate: flatpak security and bug fix update (Oracle Linux 8)

[1.8.7-1] - Rebase to 1.8.7 (#2041972) [1.8.6-1] - Rebase to 1.8.6 (#2010533) [1.8.5-6] - Fix CVE-2021-41133 (#2012869)

May 17, 2022
Medium max 7.5

ELSA-2022-1986 2 CVEs

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-45.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-45] - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz#2036020 [3.6.8-44] - Use the monotonic clock for theading.Condit…

May 17, 2022
Medium

ELSA-2022-2008 2 CVEs

Moderate: cockpit security, bug fix, and enhancement update (Oracle Linux 8)

[264.1-1.0.1] - Remove duplicate reference to server in cockpit [Orabug: 33862832] - Update documentation links [Orabug: 32795691] - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095] - Fix rendering of hwinfo pag…

May 17, 2022
Low max 4.3

ELSA-2022-2081 1 CVE

Low: bluez security update (Oracle Linux 8)

[5.56-3] + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 [5.56-2] + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests [5.56-1] + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in…

May 17, 2022
Medium

ELSA-2022-1842 1 CVE

Moderate: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)

[0.27.5-2] - Remove RPATH Resolves: bz#2018422 [0.27.5-1] - Exiv2 0.27.5 Resolves: bz#2018422 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003673

May 17, 2022
Medium

ELSA-2022-1920 1 CVE

Moderate: qt5-qtsvg security update (Oracle Linux 8)

[5.15.2-4] - Fix out-of-bound write that may lead to DoS Resolves: bz#2038487

May 17, 2022
Medium max 7.8

ELSA-2022-1991 1 CVE

Moderate: cpio security update (Oracle Linux 8)

[2.12-11] - Fixed CVE-2021-38185 (#1992511)

May 17, 2022