Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

  • High
    ELSA-2021-9346 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.52.4] - IB/core: Only update PKEY and GID caches on respective events (Hakon Bugge) [Orabug: 32816368] - Revert 'Allow mce to reset instead of panic on UE' (William Roche) [Orabug: 32820278] - Bluetooth: verify AMP hci_chan before amp_destroy (Arc…

  • High
    ELSA-2021-2308 4 CVEs

    Important: microcode_ctl security, bug fix and enhancement update (Oracle Linux 8)

    [4:20210216-1.20210525.0.1] - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 [4:20210216-1.20210525.1] - Update Intel CPU microcode to microcode-20210525 release, addresses CVE-2020-24489, CVE-2020-24511, CVE-202…

  • High max 6.5
    ELSA-2021-2570 2 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-305.7.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

  • High max 7.6
    ELSA-2021-15112 1 CVE

    Important: docker-engine docker-cli security update (Oracle Linux 7)

    docker-engine [19.03.11-11] - Addresses CVE-2021-30465 - updated runc minimum version to runc >= 3:1.0.0-1.rc95. [19.03.11-10] - Addresses runc CVE-2021-30465 - updated runc versions in cli/vendor.conf and docker-engine/vendor.conf to 1.0.0-rc95.

  • High max 7.6
    ELSA-2021-9329 1 CVE

    Important: docker-engine docker-cli security update (Oracle Linux 7)

    docker-engine [19.03.11-11] - Addresses CVE-2021-30465 - updated runc minimum version to runc >= 3:1.0.0-1.rc95. [19.03.11-10] - Addresses runc CVE-2021-30465 - updated runc versions in cli/vendor.conf and docker-engine/vendor.conf to 1.0.0-rc95.

  • High
    ELSA-2021-9335 2 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:4.2.1-10.el7] - e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257} - Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661} - block: Avoid stale pointer dereference in blk_get_aio_context() (G…

  • High
    ELSA-2021-2417 1 CVE

    Important: gupnp security update (Oracle Linux 7)

    [1.0.2-6] + gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706

  • High max 5.1
    ELSA-2021-9308 2 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [4.14.35-2047.504.2.el7] - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159] - video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879] - Drivers: hv: vmbus: Initialize unload…

  • High max 6.7
    ELSA-2021-9306 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2102.202.5] - sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133} {CVE-2021-23133} - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916} - …

  • High max 6.7
    ELSA-2021-9307 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2102.202.5] - sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133} - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916} - uek-rpm: update k…

  • High max 5.1
    ELSA-2021-9305 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.504.2] - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159] - video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879] - Drivers: hv: vmbus: Initialize unload_eve…

  • High
    ELSA-2021-2397 1 CVE

    Important: postgresql security update (Oracle Linux 7)

    [9.2.24-7] - Fix CVE-2021-32027 - Resolves: #1964507

  • High max 7.6
    ELSA-2021-2370 1 CVE

    Important: container-tools:3.0 security update (Oracle Linux 8)

    buildah [1.19.7-1.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) [1.19.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/a2854e…

  • High max 7.6
    ELSA-2021-2371 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    buildah [1.19.7-2.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.19.7-2] - revert changes to the state of 3.0-8.4.0 - Related: #1954702 conmon [2:2.0.26-3] - fix 'Permission on /dev/null are changing from 666 to 777 after running podma…

  • High max 7.6
    ELSA-2021-9298 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.0.0-1.rc95] - Addresses CVE-2021-30465

  • High max 7.6
    ELSA-2021-14902 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.0.0-1.rc95] - Addresses CVE-2021-30465

  • High
    ELSA-2021-2305 4 CVEs

    Important: microcode_ctl security, bug fix and enhancement update (Oracle Linux 7)

    [2:2.1-73.9.0.1] - for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727] - set early_microcode='no' in virtualized guests to avoid early load bugs [Orabug: 30618736] - ensure late loading fixes are present on 4.1.12-* and 4.1…

  • High max 7.5
    ELSA-2021-9294 1 CVE

    Important: krb5 security update (Oracle Linux 7)

    [1.15.1-50.0.1] - Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360]

  • High max 7.5
    ELSA-2021-9290 10 CVEs

    Important: rh-postgresql10-postgresql security update (Oracle Linux 7)

    [10.15-1] - Rebase to upstream release 10.15 Resolves: CVE-2020-25695 Resolves: CVE-2020-25694 Resolves: CVE-2020-25696 [10.14-1] - Rebase to upstream release 10.14 https://www.postgresql.org/docs/10/release-10-14.html [10.12-2] - Filter provides RHBZ#1719549…

  • High
    ELSA-2021-2372 4 CVEs

    Important: postgresql:12 security update (Oracle Linux 8)

    pgaudit [1.4.0-6] - Fix build requires [1.4.0-5] - Fix build requires postgresql [12.7-1] - Update to 12.7 Resolves: #1964510 Fix: CVE-2021-32027,CVE-2021-32028

  • High
    ELSA-2021-2375 3 CVEs

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 postgresql [13.3-1] - Update to 13.3 Resolves: #1966338 Fix: CVE-2021-32027,CVE-2021-32028,CVE-2021-32029

  • High max 5.9
    ELSA-2021-2352 1 CVE

    Important: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

    [3.1.116-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.116-1] - Update to .NET SDK 3.1.116 and Runtime 3.1.16 - Resolves: RHBZ#1965505 [3.1.115-1] - Update to .NET SDK 3…

  • High max 7.4
    ELSA-2021-2357 1 CVE

    Important: dhcp security update (Oracle Linux 7)

    [12:4.2.5-83.0.1] - Direct users to Oracle Linux support site. [12:4.2.5-83.1] - Fix for CVE-2021-25217 [12:4.2.5-83] - Revert fix for 1668696

  • High max 7.8
    ELSA-2021-2314 6 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.31.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

  • High
    ELSA-2021-2354 3 CVEs

    Important: libwebp security update (Oracle Linux 8)

    [1.0.0-3] - Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919

  • High max 7.4
    ELSA-2021-2359 1 CVE

    Important: dhcp security update (Oracle Linux 8)

    [12:4.3.6-44.1] - Fix for CVE-2021-25217

  • High max 5.9
    ELSA-2021-2353 1 CVE

    Important: .NET 5.0 security and bugfix update (Oracle Linux 8)

    [5.0.204-1.0.1] - Add support for new Oracle release [5.0.204-1] - Update to .NET SDK 5.0.204 and Runtime 5.0.7 - Resolves: RHBZ#1966166

  • High
    ELSA-2021-2363 1 CVE

    Important: gupnp security update (Oracle Linux 8)

    [1.0.6-2] + gupnp-1.0.6-2 - Fix DNS rebind issue - Resolves: #1964710

  • High max 7.6
    ELSA-2021-2291 1 CVE

    Important: container-tools:2.0 security update (Oracle Linux 8)

    runc [1.0.0-65.rc10] - fix CVE-2021-30465 - Resolves: #1955650

  • High
    ELSA-2021-2360 2 CVEs

    Important: postgresql:9.6 security update (Oracle Linux 8)

    [9.6.22-1] - Rebase to 9.6.22 Resolves: #1964516 Fix: CVE-2021-32027, CVE-2021-32028

  • High
    ELSA-2021-2361 2 CVEs

    Important: postgresql:10 security update (Oracle Linux 8)

    [10.17-1] - Update to 10.17 Resolves: #1964520 Fix: CVE-2021-32027, CVE-2021-32028

  • High
    ELSA-2021-2290 1 CVE

    Important: nginx:1.16 security update (Oracle Linux 8)

    [1.16.1-2.0.1.1] - Remove Red Hat references [Orabug: 29498217] [1:1.16.1-2.1] - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

  • High
    ELSA-2021-2328 4 CVEs

    Important: qt5-qtimageformats security update (Oracle Linux 7)

    [5.9.7-2] - libwebp security fixes: Resolves: bz#1961742 Resolves: bz#1961743 Resolves: bz#1961744 Resolves: bz#1961745

  • High
    ELSA-2021-2263 3 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [78.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.11.0-1] - Update to 78.11.0 build1

  • High
    ELSA-2021-2260 3 CVEs

    Important: libwebp security update (Oracle Linux 7)

    [0.3.0-10] - Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919

  • High
    ELSA-2021-2264 3 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [78.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.11.0-1] - Update to 78.11.0 build1

  • High
    ELSA-2021-2259 1 CVE

    Important: nginx:1.18 security update (Oracle Linux 8)

    [1.18.0-3.1.0.1] - Remove Red Hat references [Orabug: 29498217] [1:1.18.0-3.1] - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

  • High
    ELSA-2021-9285 4 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:4.2.1-9.el7] - Revert 'oslib-posix: refactor memory prealloc threads' (Mark Kanda) [Orabug: 32903662] - Revert 'oslib-posix: initialize backend memory objects in parallel' (Mark Kanda) [Orabug: 32903662] [15:4.2.1-8.el7] - i386/pc: let iterator handle reg…

  • High max 7.8
    ELSA-2021-2238 1 CVE 1 exploited

    Important: polkit security update (Oracle Linux 8)

    [0.115-11.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.115-11.1] - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560

  • High
    ELSA-2021-2235 1 CVE

    Important: pki-core:10.6 security update (Oracle Linux 8)

    pki-core [10.10.5-3.0.1] - Remove upstream reference. [10.10.5-3] - Bug 1960146 - CVE-2021-3551 Dogtag installer 'pkispawn' logs admin credentials into a world-readable log file