Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

Low

ELSA-2022-2110 1 CVE

Low: grub2 security, bug fix, and enhancement update (Oracle Linux 8)

[2.02-123.0.1] - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462] - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462] - Backport some better script logic for BTRFS support [Orabug: 32448171] - Do not add sh…

May 17, 2022
Medium

ELSA-2022-2074 2 CVEs

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

[4.15.5-5] - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes' when a KDC has a single IP address. [4.15.5-4] - resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh [4.15.5-3] - related: rhbz#1979959 - Fix typo in testparm output [4.15.5-2] - reso…

May 17, 2022
Medium

ELSA-2022-1930 1 CVE

Moderate: keepalived security and bug fix update (Oracle Linux 8)

[2.1.5-8] - Fix DBus policy restrictions (#2028350, CVE-2021-44225) [2.1.5-7] - Fix log-facility option (#197716)

May 17, 2022
Medium

ELSA-2022-1961 1 CVE

Moderate: cairo and pixman security and bug fix update (Oracle Linux 8)

cairo [1.15.12-6] - Fix CVE reference test (#1908113) [1.15.12-5] - Add reference test to CVE fix (#1908113) [1.15.12-4] - Fix CVE-2020-35492 (#1908113) pixman [0.38.4-2] - Backport the pixman part of cairo CVE-2020-35492

May 17, 2022
Medium max 5.3

ELSA-2022-1861 1 CVE

Moderate: maven:3.5 security update (Oracle Linux 8)

May 17, 2022
Medium

ELSA-2022-2013 1 CVE

Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 8)

[8.0p1-13] - Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828) [8.0p1-12] - Add support for 'Include' directive in sshd_config file (#1926103) [8.0p1-11] - CVE-2021-41617 upstream fix (#2008885)

May 17, 2022
Medium

ELSA-2022-1830 1 CVE

Moderate: postgresql:10 security update (Oracle Linux 8)

[10.19-2] - Add missing files into file section of server package postgresql-setup v8.6 newly provides postgresql-upgrade

May 17, 2022
Medium max 3.7

ELSA-2022-1939 1 CVE

Moderate: squid:4 security and bug fix update (Oracle Linux 8)

libecap squid [7:4.15-3] - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP protocol data may lead to information disclosure [7:4.15-2] - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon and as a resul…

May 17, 2022
Medium

ELSA-2022-1917 4 CVEs

Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update (Oracle Linux 8)

xorg-x11-server [1.20.11-5] - Fix crash with NVIDIA proprietary driver with Present (#2046329) [1.20.11-4] - CVE fix for: CVE-2021-4008 (#2030162), CVE-2021-4009 (#2030172), CVE-2021-4010 (#2030175), CVE-2021-4011 (#2030181) [1.20.11-3] - xf86/logind Fix drm_…

May 17, 2022
Medium max 8.8

ELSA-2022-1777 30 CVEs 2 exploited

Moderate: webkit2gtk3 security, bug fix, and enhancement update (Oracle Linux 8)

[2.34.6-1] - Update to 2.34.6 Related: #1985042 [2.34.5-1] - Update to 2.34.5 - Related: #1985042 [2.34.4-1] - Update to 2.34.4 - Resolves: #1985042 [2.32.4-1] - Update to 2.32.4 - Related: #1985042 - Resolves: #2006429

May 17, 2022
Medium

ELSA-2022-1950 1 CVE

Moderate: dovecot security update (Oracle Linux 8)

[1:2.3.16-2] - do not disable xz/lzma for now despite being deprecated [1:2.3.16-1] - dovecot updated to 2.3.16, pigeonhole to 0.5.16 - fix CVE-2021-33515 plaintext commands injection (#1980014)

May 17, 2022
High max 6.5

ELSA-2022-1988 38 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-372.9.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey…

May 17, 2022
Medium max 5.2

ELSA-2022-1766 3 CVEs

Moderate: libreoffice security, bug fix, and enhancement update (Oracle Linux 8)

[1:6.4.7.2-10.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-10] - Related: rhbz#2029810 bump n-v-r [1:6.4.7.2-9] - Related: rhbz#202981…

May 17, 2022
Medium

ELSA-2022-1934 1 CVE

Moderate: mod_auth_mellon security update (Oracle Linux 8)

[0.14.0-12.1] - Resolves: rhbz#1986805 - CVE-2021-3639 mod_auth_mellon: Open Redirect vulnerability in logout URLs [rhel-8]

May 17, 2022
Low

ELSA-2022-1820 1 CVE

Low: udisks2 security and bug fix update (Oracle Linux 8)

[2.9.0-9] - Fix LVM-VDO statistics tests (#2023880,#2025483) - Fix GError ownership (#1999149) [2.9.0-8] - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004422)

May 17, 2022
Low

ELSA-2022-2031 1 CVE

Low: libssh security, bug fix, and enhancement update (Oracle Linux 8)

[0.9.6-3] - Remove STI tests [0.9.6-2] - Remove bad patch causing errors - Adding BuildRequires for openssh (SSHD support) [0.9.6-1] - Fix CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with different key exchange mechanism - Rebase to version…

May 17, 2022
Medium

ELSA-2022-2120 1 CVE

Moderate: zsh security update (Oracle Linux 8)

[5.5.1-9] - do not perform PROMPT_SUBST evaluation on file.file/%K arguments (CVE-2021-45444) [5.5.1-8] - improve printing of error messages introduced by the fix of CVE-2019-20044 [5.5.1-7] - drop privileges securely when unsetting PRIVILEGED option (CVE-201…

May 17, 2022
Medium

ELSA-2022-1808 1 CVE

Moderate: aspell security update (Oracle Linux 8)

[12:0.60.6.1-22] - resolves: #1988497 fix CVE-2019-25051

May 17, 2022
Medium

ELSA-2022-1819 7 CVEs

Moderate: go-toolset:ol8 security and bug fix update (Oracle Linux 8)

delve [1.7.2-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.7.2-1] - Rebase to 1.7.2 - Related: rhbz#2014088 golang [1.17.7-1] - Rebase to Go 1.17.7 - Remove fips memory leak patch (fixed in tree) - Resolves: rhbz#2015930 go-toolset […

May 17, 2022
Medium max 7.3

ELSA-2022-1894 1 CVE

Moderate: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

rust [1.58.1-1] - Update to 1.58.1. [1.58.0-1] - Update to 1.58.0. [1.57.0-1] - Update to 1.57.0. [1.56.1-2] - Add rust-std-static-wasm32-wasi Resolves: rhbz#1980080 [1.56.0-1] - Update to 1.56.1. [1.55.0-1] - Update to 1.55.0. - Backport support for LLVM 13.…

May 17, 2022
Medium

ELSA-2022-1915 4 CVEs

Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)

mod_http2 [1.15.7-5] - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations [1.15.7-4] - Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd: Request splitting via HTTP/2 method inje…

May 17, 2022
Medium max 8.2

ELSA-2022-1821 5 CVEs

Moderate: python27:2.7 security update (Oracle Linux 8)

babel [9.0.3-19] - Remove bundled windows executables - Resolves: rhbz#2006792 python2 [2.7.18-10.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [2.7.18-10] - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing A…

May 17, 2022
Medium

ELSA-2022-1964 2 CVEs

Moderate: fetchmail security update (Oracle Linux 8)

[6.4.24-1] - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272) Resolves: #1999275, #2002698

May 17, 2022
Medium max 5.9

ELSA-2022-1823 4 CVEs

Moderate: mod_auth_openidc:2.3 security update (Oracle Linux 8)

cjose [0.6.1-2] - fix concatkdf big endian architecture problem. Upstream issue #77. [0.6.1-1] - upgrade to latest upstream 0.6.1 [0.5.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [0.5.1-2] - Rebuilt for https://fedoraproject.org/w…

May 17, 2022
High max 8.8

ELSA-2022-1762 5 CVEs

Important: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

buildah [1:1.24.2-4] - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 (https://github.com/containers/buildah/commit/7b559a3) - Related: #2059296 [1:1.24.2-3] - switch to RHEL maintenance branch which fixes CVE-2022-276…

May 17, 2022
Medium

ELSA-2022-1797 1 CVE

Moderate: compat-exiv2-026 security update (Oracle Linux 8)

[0.26-7] - Fix stack exhaustion issue in the printIFDStructure function Resolves: bz#2003669

May 17, 2022
Medium

ELSA-2022-1793 1 CVE

Moderate: container-tools:3.0 security and bug fix update (Oracle Linux 8)

buildah [1.19.9-3] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/3808e27) - Resolves: #2067540 container-selinux [2:2.178.0-2] - remove conflict on udica - we still ship…

May 17, 2022
Medium max 8.2

ELSA-2022-1764 4 CVEs

Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

numpy [1.17.3-6] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 python38 [3.8.12-1] - Update to 3.8.12 Resolves: rhbz#2004587 [3.8.11-1] - Update to 3.8.11 - Fix for CVE-2021-3733 and CVE-2021-3737 Resolves: rhbz#19952…

May 17, 2022
Medium max 8.2

ELSA-2022-1763 1 CVE

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

mod_wsgi [4.7.1-4] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [4.7.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [4.7.1-2] - Rebuilt for Python 3.9 [4.7.1-1] - update to 4.7.1 (#1721376) python39 …

May 17, 2022
Medium max 6.7

ELSA-2022-1759 29 CVEs

Moderate: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

hivex [1.3.18-23] - Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976194 [1.3.18-22.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) libguestfs [1.44.0-5.0.1] - Replace upstream references from description tag - Con…

May 17, 2022
High max 7.5

ELSA-2022-2213 1 CVE

Important: zlib security update (Oracle Linux 7)

[1.2.7-20] - Resolves: CVE-2018-25032

May 12, 2022
High

ELSA-2022-14549 0 CVEs

Important: podman security update (Oracle Linux 7)

[1.6.4-32.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - handle redirect from the docker registry v2 [Orabug: 29874238] (nikita.gerasimov@oracle.com) - remove changes in NaiveDiffDriver [1.6.4-32] - update to the latest cont…

May 12, 2022
High max 8.8

ELSA-2022-2191 1 CVE

Important: gzip security update (Oracle Linux 7)

[1.5-11] - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271

May 11, 2022
High

ELSA-2022-9367 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.513.2] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124234] [4.14.35-2047.513.1] - mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu) [Orabug: 34050050] - esp: F…

May 10, 2022
High

ELSA-2022-9366 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.513.2.el7] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124234] [4.14.35-2047.513.1.el7] - mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu) [Orabug: 34050050] …

May 10, 2022
High max 8.6

ELSA-2022-9365 8 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

May 10, 2022
High max 8.6

ELSA-2022-9368 8 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.307.3.1] - Revert 'rds/ib: recover rds connection from stuck tx path' (Nagappan Ramasamy Palaniappan) [Orabug: 34124233] [5.4.17-2136.307.3] - kvm: debugfs: fix memory leak in kvm_create_vm_debugfs (Pavel Skripkin) [Orabug: 33099019] - KVM: debug…

May 10, 2022
High

ELSA-2022-9364 1 CVE

Important: virt:kvm_utils security update (Oracle Linux 8)

qemu-kvm [4.2.1.16.el8] - Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145} - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson) - migration: Introduce ram_transferred_add() (David Edmondson) …

May 9, 2022
High max 7.5

ELSA-2022-9363 2 CVEs

Important: olcne istio istio security update (Oracle Linux 7)

olcne [1.3.5-1] - Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15) istio [1.12.6-1] - Addresses CVE-2022-24726, CVE-2022-24921 istio [1.11.4-1] - Added Oracle specific files for 1.11.4-1

May 9, 2022
High max 7.5

ELSA-2022-9362 2 CVEs

Important: olcne istio istio security update (Oracle Linux 7)

olcne [1.4.3-1] - Update Istio to 1.13.2 istio [1.12.6-1] - Addresses CVE-2022-24726, CVE-2022-24921 istio [1.13.2-1] - Added Oracle specific files for 1.13.2-1

May 9, 2022