Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,321 results · Feed

High max 9.8

ELSA-2022-1725 8 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.9.0-3] - Update to 91.9.0 build3 [91.9.0-2] - Update to 91.9.0 build2 [91.9.0-1] - Update to 91.9.0

May 5, 2022
High max 9.8

ELSA-2022-1730 8 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.9.0-3] - Update to 91.9.0 build3 [91.9.0-2] - Update to 91.9.0 build2 [91.9.0-1] - Update to 91.9.0

May 5, 2022
High max 9.8

ELSA-2022-1703 6 CVEs

Important: firefox security update (Oracle Linux 7)

[91.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.9.0-1] - Update to 91.9.0

May 4, 2022
High max 9.8

ELSA-2022-1705 6 CVEs

Important: firefox security update (Oracle Linux 8)

[91.9.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.9.0-1] - Update to 91.9.0

May 4, 2022
High max 6.4

ELSA-2022-9348 10 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.62.3] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679806] {CVE-2021-0920} - fs: add fget_many() and fput_many() (Jens Axboe) [Orabug: 33679806] - af_unix: fix garbage collect vs MSG_PEEK (Miklos Sze…

May 3, 2022
Medium max 5.9

ELSA-2022-1557 10 CVEs

Moderate: mariadb:10.5 security, bug fix, and enhancement update (Oracle Linux 8)

galera [26.4.9-4] - Use downstream garbd-wrapper and garbd.service to ensure compatibility - Add upstream versions of garbd-wrapper (called garbd-systemd) and garbd.service in case user want's to use them [26.4.9-3] - Explicitly require the 'procps-ng' packag…

May 3, 2022
High max 9.8

ELSA-2022-1643 1 CVE

Important: xmlrpc-c security update (Oracle Linux 8)

[1.51.0-5.1] - Add missing validation of encoding (CVE-2022-25235) (#2058114)

May 2, 2022
Medium max 7.8

ELSA-2022-1552 1 CVE

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-16.0.1] - - Remove upstream references [Orabug: 31197557] [2:8.0.1763-16.13] - CVE-2022-1154 vim: use after free in utf_ptr2char

Apr 30, 2022
High max 9.8

ELSA-2022-1541 1 CVE

Important: maven-shared-utils security update (Oracle Linux 7)

[0.4-4] - Fix commandline injection vulnerability - Resolves: rhbz#2068651

Apr 29, 2022
High

ELSA-2022-9344 1 CVE

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-16.el7] - Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145} - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson) - migration: Introduce ram_transferred_add() (David Edmondson) - ACPI…

Apr 29, 2022
Medium max 7.5

ELSA-2022-1565 2 CVEs

Moderate: container-tools:3.0 security and bug fix update (Oracle Linux 8)

buildah [1.19.9-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/7c6701d) - fixes CVE-2022-27651 - Resolves: #2067539 podman [3.0.1-8] - update to the latest content of …

Apr 28, 2022
Medium max 5.9

ELSA-2022-1556 10 CVEs

Moderate: mariadb:10.3 security and bug fix update (Oracle Linux 8)

galera [25.3.34-4] - Explicitly require the 'procps-ng' package - Otherwise it will not require it in the lightweight systems (e.g. containers) - and Galera won't work properly [25.3.34-3] - Use downstream garbd-wrapper and garbd.service to ensure compatibili…

Apr 28, 2022
High max 7.5

ELSA-2022-1642 1 CVE

Important: zlib security update (Oracle Linux 8)

[1.2.11-18] - Resolves: CVE-2018-25032 [1.2.11-17] - Fixed DFLTCC compression level switching issues (#1875492) - Enabled HW compression for compression levels 1 through 6 (#1847438) - Fixed inflateSyncPoint() bad return value on z15 (#1888930)

Apr 28, 2022
Medium max 7.5

ELSA-2022-1566 2 CVEs

Moderate: container-tools:2.0 security update (Oracle Linux 8)

buildah [1.11.6-10.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] [1.11.6-10] - update to the latest content of https://github.com/containers/b…

Apr 28, 2022
High

ELSA-2022-1550 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-348.23.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Apr 27, 2022
Medium

ELSA-2022-1546 1 CVE

Moderate: polkit security update (Oracle Linux 8)

[0.115-13.0.1.el8_5.2] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.115-13.el8_5.2] - necessary version bump due to build versioning - Resolves: CVE-2021-4115

Apr 27, 2022
High max 9.8

ELSA-2022-9341 11 CVEs

Important: ol-automation-manager security update (Oracle Linux 8)

[1.0.2-1.el8] - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108, CVE-2021-33203, CVE-2021-33571, CVE-2021-44420, CVE-2021-31542, CVE-2021-28658, CVE-2021-28957, CVE-2021-43818, CVE-2020-27783 [Orabug: 34109801]

Apr 27, 2022
High max 8.8

ELSA-2022-1537 1 CVE

Important: gzip security update (Oracle Linux 8)

[1.9-13] - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271

Apr 26, 2022
High max 7.8

ELSA-2022-9313 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.512.6] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initialize re…

Apr 25, 2022
High max 7.8

ELSA-2022-9314 14 CVEs 2 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.512.6.el7] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34039271] - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33993774] [4.14.35-2047.512.5] - netfilter: nf_tables: initializ…

Apr 25, 2022
High max 7.5

ELSA-2022-1487 5 CVEs

Important: java-1.8.0-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:1.8.0.332.b09-1] - Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 [1:1.8.0.332.b06-0.1.ea] - Update to shen…

Apr 25, 2022
High max 7.5

ELSA-2022-1491 5 CVEs

Important: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.332.b09-1] - Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 [1:1.8.0.332.b06-0.1.ea] - Update to shen…

Apr 25, 2022
High max 7.5

ELSA-2022-1440 5 CVEs

Important: java-11-openjdk security, bug fix, and enhancement update (Oracle Linux 7)

[1:11.0.15.0.9-2.0.1] - link atomic for ix86 build [1:11.0.15.0.9-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 [1:11.0.15.0.9-2] - Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422 …

Apr 20, 2022
High max 7.5

ELSA-2022-1442 5 CVEs

Important: java-11-openjdk security update (Oracle Linux 8)

[1:11.0.15.0.9-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 [1:11.0.15.0.9-2] - Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422 [1:11.0.15.0.9-1] - Update to jdk-11.0.15.0+9 - Upd…

Apr 20, 2022
High max 7.5

ELSA-2022-1445 6 CVEs

Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

[1:17.0.3.0.6-2] - Add JDK-8284920 fix for XPath regression - Related: rhbz#2073575 [1:17.0.3.0.6-2] - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476 - Related: rhbz#2073575 [1:17.0.3.0.6-1] - JDK-8283911 patch no longer needed no…

Apr 20, 2022
High

ELSA-2022-9276 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

[2.4.37-43.0.3.3] - Resolves: CVE-2021-33193 a crafted method sent through HTTP/2 will bypass validation [Orabug: 33942809]

Apr 13, 2022
High max 8.8

ELSA-2022-1302 9 CVEs

Important: thunderbird security update (Oracle Linux 7)

[91.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.8.0-1] - Update to 91.8.0

Apr 12, 2022
High max 7.8

ELSA-2022-9273 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 8.8

ELSA-2022-1301 9 CVEs

Important: thunderbird security update (Oracle Linux 8)

[91.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.8.0-1] - Update to 91.8.0

Apr 11, 2022
High max 7.8

ELSA-2022-9274 11 CVEs 1 exploited

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.306.1.3] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34053807] {CVE-2022-1158} [5.4.17-2136.306.1.2] - Revert 'rds/ib: recover rds connection from stuck rx path' (Rohit Nair) [Orabug: 34045203] [5…

Apr 11, 2022
High max 8.8

ELSA-2022-1284 8 CVEs

Important: firefox security update (Oracle Linux 7)

[91.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.8.0-1] - Update to 91.8.0

Apr 8, 2022
High

ELSA-2022-9270 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.8.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34048826] {CVE-2022-1016}

Apr 8, 2022
High

ELSA-2022-9271 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.8.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34048826] {CVE-2022-1016}

Apr 8, 2022
High max 8.8

ELSA-2022-1287 8 CVEs

Important: firefox security update (Oracle Linux 8)

[91.8.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.8.0-1] - Update to 91.8.0

Apr 8, 2022
High

ELSA-2022-9265 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2136.305.5.5] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}

Apr 8, 2022
High

ELSA-2022-9264 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2136.305.5.5] - KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}

Apr 8, 2022
High

ELSA-2022-9266 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.511.5.5.1.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34018777] {CVE-2022-1016}

Apr 7, 2022
High

ELSA-2022-9267 1 CVE

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.511.5.5.1.el7uek] - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso) [Orabug: 34018777] {CVE-2022-1016}

Apr 7, 2022
High

ELSA-2022-1198 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

[3.10.0-1160.62.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Apr 6, 2022
Medium max 7.5

ELSA-2022-9263 1 CVE

Moderate: libgcrypt security update (Oracle Linux 8)

[1.8.5-6_fips] - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations [Orabug: 33081130] - Change Epoch from 1 to 10 [1.8.5-6] - Fix for CVE-2021-33560 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements fo…

Apr 6, 2022