Oracle Linux Security Advisories (ELSA)

5,096 results · Clear filters · Feed

• High
  ELSA-2021-2170 1 CVE

  Important: glib2 security and bug fix update (Oracle Linux 8)

  [2.56.4-10] - Fix various problems in GMainContext Resolves: #1953553 - Fix CVE-2021-27219 Resolves: #1960600

  Jun 2, 2021
• High
  ELSA-2021-2168 2 CVEs

  Important: kernel security and bug fix update (Oracle Linux 8)

  [4.18.0-305.3.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

  Jun 2, 2021
• High
  ELSA-2021-2147 1 CVE

  Important: glib2 security update (Oracle Linux 7)

  [2.56.1-9] - Fix CVE-2021-27219 Resolves: #1960596

  Jun 1, 2021
• High
  ELSA-2021-9221 8 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2102.201.3.el8] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544] [5.4.17-2102.201.2.el8] - md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam) [Orabug: 32764237…

  Jun 1, 2021
• High
  ELSA-2021-9268 1 CVE

  Important: olcne security update (Oracle Linux 7)

  coredns [1.7.0-1] - Added Oracle specific build files cri-o [1.18.4-2] - Fix for CVE-2021-27918 [1.18.4-1] - Added Oracle Specifile Files for cri-o cri-tools [1.18.0-2] - Address CVE-2021-27918 etcd [3.4.3-1.0.5] - Address CVE-2021-27918 flannel [0.12.0-2] - …

  May 29, 2021
• High
  ELSA-2021-9267 1 CVE

  Important: olcne security update (Oracle Linux 8)

  helm [3.3.4-2] - Address CVE-2021-27918 coredns [1.7.0-1] - Added Oracle specific build files cri-o [1.18.4-2] - Fix for CVE-2021-27918 [1.18.4-1] - Added Oracle Specifile Files for cri-o cri-tools [1.18.0-2] - Address CVE-2021-27918 etcd [3.4.3-1.0.5] - Addr…

  May 29, 2021
• High max 7.3
  ELSA-2021-2036 1 CVE

  Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

  [5.0.203-1.0.1] - Add support for new Oracle release [5.0.203-1] - Update to .NET SDK 5.0.203 and Runtime 5.0.6 - Resolves: RHBZ#1954328 [5.0.202-1] - Update to .NET SDK 5.0.202 and Runtime 5.0.5 - Resolves: RHBZ#1947662

  May 29, 2021
• High max 7.3
  ELSA-2021-2037 1 CVE

  Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

  [3.1.115-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.115-1] - Update to .NET SDK 3.1.115 and Runtime 3.1.15 - Resolves: RHBZ#1954333 [3.1.114-2] - Rebuild to tag into …

  May 29, 2021
• High max 7.5
  ELSA-2021-2034 1 CVE

  Important: redis:6 security update (Oracle Linux 8)

  [6.0.9-3] - fix integer overflow via STRALGO LCS command CVE-2021-29477

  May 26, 2021
• High
  ELSA-2021-1979 1 CVE

  Important: squid:4 security update (Oracle Linux 8)

  squid [7:4.11-4.2] - Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling

  May 26, 2021
• High
  ELSA-2021-1983 1 CVE

  Important: idm:DL1 security update (Oracle Linux 8)

  slapi-nis [0.56.6-2] - CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN - Resolves: rhbz#1944713

  May 26, 2021
• High max 7.5
  ELSA-2021-1989 1 CVE

  Important: bind security update (Oracle Linux 8)

  [32:9.11.26-4] - Possible assertion failure on DNAME processing (CVE-2021-25215)

  May 26, 2021
• High max 5.5
  ELSA-2021-1578 23 CVEs

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-305.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

  May 25, 2021
• High
  ELSA-2021-2033 1 CVE

  Important: xorg-x11-server security update (Oracle Linux 7)

  [1.20.4-16] - CVE fix for: CVE-2021-3472 (#1944956)

  May 19, 2021
• High
  ELSA-2021-2032 1 CVE

  Important: slapi-nis security and bug fix update (Oracle Linux 7)

  [0.56.5-4] - CVE 2021-3480: slapi-nis: NULL dereference (DoS) with specially crafted Binding DN - Resolves: rhbz#1942937

  May 19, 2021
• High
  ELSA-2021-9222 8 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.503.1] - bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk) [Orabug: 32759961] {CVE-2021-29154} - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy) [Orabug: 32781585] - ext4…

  May 10, 2021
• High
  ELSA-2021-9223 8 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.503.1.el7] - bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk) [Orabug: 32759961] {CVE-2021-29154} - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy) [Orabug: 32781585] - …

  May 10, 2021
• High
  ELSA-2021-9220 8 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2102.201.3uek] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544] [5.4.17-2102.201.2uek] - md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam) [Orabug: 32764237] …

  May 10, 2021
• High
  ELSA-2021-9215 9 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.50.2] - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669454] {CVE-2021-28964} - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697855] {CVE-2021-28688} …

  May 6, 2021
• High max 7.5
  ELSA-2021-1512 3 CVEs

  Important: postgresql security update (Oracle Linux 7)

  [9.2.24-6] - Patch fixing BZ#1741488 CVE-2019-10208 [9.2.24-5] - Patch fixing CVE-2020-25694 BZ#1907894 - Patch fixing CVE-2020-25695 BZ#1907895

  May 6, 2021
• High max 7.5
  ELSA-2021-1469 1 CVE

  Important: bind security update (Oracle Linux 7)

  [32:9.11.4-26.P2.5] - Possible assertion failure on DNAME processing (CVE-2021-25215)

  Apr 30, 2021
• High
  ELSA-2021-9203 1 CVE

  Important: runc bug fix update (Oracle Linux 7)

  [1.0.0-92.rc92] - Add epoch value of 2 to allow upgrade to 1.0.0-92.rc92 from 1.0.0-93.rc93. [1.0.0-92.rc92] - Build for https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92

  Apr 28, 2021
• High max 6.1
  ELSA-2021-1354 5 CVEs

  Important: xstream security update (Oracle Linux 7)

  [1.3.1-13] - Fix remote code execution vulnerability - Resolves: CVE-2021-21344 - Resolves: CVE-2021-21345 - Resolves: CVE-2021-21346 - Resolves: CVE-2021-21347 - Resolves: CVE-2021-21350

  Apr 27, 2021
• High
  ELSA-2021-1363 8 CVEs

  Important: firefox security update (Oracle Linux 7)

  [78.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.10.0-1] - Update to 78.10.0

  Apr 27, 2021
• High
  ELSA-2021-1350 9 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [78.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.10.0-1] - Update to 78.10.0

  Apr 27, 2021
• High
  ELSA-2021-1360 8 CVEs

  Important: firefox security update (Oracle Linux 8)

  [78.10.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.10.0-1] - Update to 78.10.0

  Apr 27, 2021
• High
  ELSA-2021-1353 9 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [78.10.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.10.0-1] - Update to 78.10.0

  Apr 27, 2021
• High
  ELSA-2021-1242 1 CVE

  Important: mariadb:10.3 and mariadb-devel:10.3 security update (Oracle Linux 8)

  galera [25.3.32-1] - Rebase to 25.3.32 mariadb [3:10.3.28-1] - Rebase to 10.3.28

  Apr 27, 2021
• High
  ELSA-2021-1206 1 CVE

  Important: gnutls and nettle security update (Oracle Linux 8)

  gnutls [3.6.14-8] - Port fixes for potential miscalculation in ecdsa_verify (#1942929) nettle [3.4.1-4] - Fix patch application [3.4.1-3] - Port fixes for potential miscalculation in ecdsa_verify (#1942924)

  Apr 16, 2021
• High
  ELSA-2021-1197 1 CVE

  Important: libldb security update (Oracle Linux 8)

  [2.1.3-3] - resolves: rhbz#1941514 - Fix CVE-2021-20277

  Apr 14, 2021
• High
  ELSA-2021-9175 4 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.502.4.el7] - Revert 'rds: ib: Remove two ib_modify_qp() calls' (Sharath Srinivasan) [Orabug: 32715567] - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy) [Orabug: 32532514] [4.14.35-2047.502.3.el7] - video: hyperv…

  Apr 13, 2021
• High
  ELSA-2021-9176 0 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  Apr 13, 2021
• High
  ELSA-2021-9172 4 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.502.4] - Revert 'rds: ib: Remove two ib_modify_qp() calls' (Sharath Srinivasan) [Orabug: 32715567] - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy) [Orabug: 32532514] [4.14.35-2047.502.3] - video: hyperv_fb: Fix…

  Apr 12, 2021
• High
  ELSA-2021-1145 1 CVE

  Important: nettle security update (Oracle Linux 7)

  [2.7.1-9] - Port fixes for potential miscalculation in ecdsa_verify (#1943156)

  Apr 9, 2021
• High
  ELSA-2021-1135 1 CVE

  Important: squid security update (Oracle Linux 7)

  [7:3.5.20-17.6] - Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling

  Apr 9, 2021
• High
  ELSA-2021-9164 4 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.49.3.1] - SecureBoot Digicert 2021 certificates update (Brian Maly) [Orabug: 32532671] [4.1.12-124.49.3] - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross) [Orabug: 32485156] - audit: fix error handling in audit_data_to_…

  Apr 8, 2021
• High
  ELSA-2021-1072 1 CVE

  Important: libldb security update (Oracle Linux 7)

  [1.5.4-2] - resolves: #1941511 - Fix CVE-2021-20277

  Apr 8, 2021
• High
  ELSA-2021-1071 3 CVEs

  Important: kernel security and bug fix update (Oracle Linux 7)

  [3.10.0-1160.24.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

  Apr 7, 2021
• High max 7.1
  ELSA-2021-1068 1 CVE

  Important: flatpak security update (Oracle Linux 8)

  [1.6.2-6] - Fix CVE-2021-21381 (#1938062)

  Apr 7, 2021
• High max 7.8
  ELSA-2021-1093 8 CVEs

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-240.22.1_3.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  Apr 7, 2021