Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

High max 7.8

ELSA-2021-9140 8 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171} - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2…

Mar 31, 2021
High max 7.8

ELSA-2021-9141 8 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2102.200.13.el7] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171} - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {C…

Mar 31, 2021
High max 7.1

ELSA-2021-1002 1 CVE

Important: flatpak security update (Oracle Linux 7)

[1.0.9-11] - Fix CVE-2021-21381 (#1938059)

Mar 29, 2021
High max 7.4

ELSA-2021-1024 2 CVEs

Important: openssl security update (Oracle Linux 8)

[1.1.1g-15] - version bump [1.1.1g-14] - CVE-2021-3450 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT [1.1.1g-13] - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing

Mar 29, 2021
High

ELSA-2021-0996 4 CVEs

Important: thunderbird security update (Oracle Linux 7)

[78.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.0-3] - Update to 78.9.0 build2, updated langpacks [78.9.0-2] - Update to 78.9.0 build2 [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0993 4 CVEs

Important: thunderbird security update (Oracle Linux 8)

[78.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.0-3] - Update to 78.9.0 build2, updated langpacks [78.9.0-2] - Update to 78.9.0 build2 [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0990 4 CVEs

Important: firefox security update (Oracle Linux 8)

[78.9.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0992 4 CVEs

Important: firefox security update (Oracle Linux 7)

[78.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.9.0-1] - Update to 78.9.0 build1

Mar 25, 2021
High

ELSA-2021-9136 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.500.9.3.el7] - net/rds: Reject error code change (Ka-Cheong Poon) [Orabug: 32577425] - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran) [Orabug: 32577399] - net/rds: increase 1MB MR pool size for RDS (Manj…

Mar 24, 2021
High

ELSA-2021-9135 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.500.9.3.el7uek] - net/rds: Reject error code change (Ka-Cheong Poon) [Orabug: 32577425] - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran) [Orabug: 32577399] - net/rds: increase 1MB MR pool size for RDS (M…

Mar 24, 2021
High

ELSA-2021-0966 1 CVE

Important: pki-core:10.6 security update (Oracle Linux 8)

pki-core [10.9.4-3.0.1] - Remove redhat reference. [10.9.4-3] - Bug # 1933146 - PKI instance creation failed with new 389-ds-base build [10.9.4-2] - CVE-2021-20179: Fix unprivileged users can renew any certificate

Mar 24, 2021
High max 9.8

ELSA-2021-9130 1 CVE

Important: python38:3.8 security update (Oracle Linux 8)

python38 [3.8.3-3.0.1] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
High max 9.8

ELSA-2021-9129 1 CVE

Important: python36:3.6 security update (Oracle Linux 8)

python36 [3.6.8-2.0.1] - Rebuild with python containing fix for [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
High max 9.8

ELSA-2021-9128 1 CVE

Important: python27:2.7 security update (Oracle Linux 8)

python2 [2.7.17-2.0.2] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
High

ELSA-2021-9116 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.501.2.el7] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CV…

Mar 18, 2021
High max 4.7

ELSA-2021-0851 6 CVEs

Important: pki-core security and bug fix update (Oracle Linux 7)

[10.5.18-12] - Change variable 'TPS' to 'tps' - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport an…

Mar 17, 2021
High

ELSA-2021-9113 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.48.6] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603382] - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603382] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: is…

Mar 17, 2021
High

ELSA-2021-0856 11 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.21.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x…

Mar 17, 2021
High

ELSA-2021-9112 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.501.2] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CVE-20…

Mar 17, 2021
High

ELSA-2021-9115 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.104.5.el7] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603379] {CVE…

Mar 17, 2021
High

ELSA-2021-9114 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.104.5] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603379] {CVE-202…

Mar 17, 2021
High max 9.8

ELSA-2021-9107 1 CVE

Important: python security update (Oracle Linux 7)

[2.7.5-90.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 15, 2021
High

ELSA-2021-9109 5 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-5.el7] - qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva) - hostmem: fix default 'prealloc-threads' count (Mark Kanda) [Orabug: 32472127] - hostmem: introduce 'prealloc-threads' property (Igor Mammedov) - qom: introduce object_register…

Mar 15, 2021
High max 7.8

ELSA-2021-9084 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.501.1.el7uek] - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy) [Orabug: 32620381] [4.14.35-2047.501.0] - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531559] - …

Mar 12, 2021
High

ELSA-2021-9104 5 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-5.el7] - qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva) - hostmem: fix default 'prealloc-threads' count (Mark Kanda) [Orabug: 32472127] - hostmem: introduce 'prealloc-threads' property (Igor Mammedov) - qom: introduce object_register…

Mar 12, 2021
High max 7.5

ELSA-2021-0808 1 CVE

Important: wpa_supplicant security update (Oracle Linux 7)

[1:2.6-12.1.0.2] - Added undefine-bitwise-in-common-header.patch [bug 27677154] [1:2.6-12.1] - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Mar 12, 2021
High max 7.5

ELSA-2021-0809 1 CVE

Important: wpa_supplicant security update (Oracle Linux 8)

[1:2.9-2.1] - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Mar 11, 2021
High max 8.1

ELSA-2021-0793 1 CVE

Important: .NET Core on OL 8 security and bugfix update (Oracle Linux 8)

[5.0.104-1.0.1] - Add support for new Oracle release [5.0.104-1] - Update to .NET SDK 5.0.104 and Runtime 5.0.4 - Resolves: RHBZ#1934247

Mar 11, 2021
High max 7.8

ELSA-2021-9085 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.104.4.el8uek] - KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas) [Orabug: 32545182] [5.4.17-2036.104.3.el8uek] - config: enable CONFIG_MLX5_MPFS (Brian Maly) [Orabug: 32249042] - net: Fix bridge enslavement failure (Ido Schimmel) […

Mar 11, 2021
High max 9.8

ELSA-2021-9101 1 CVE

Important: python3 security update (Oracle Linux 7)

[3.6.8-18.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 10, 2021
High max 8.1

ELSA-2021-0790 1 CVE

Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

[3.1.113-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.113-1] - Update to .NET Core SDK 3.1.113 and Runtime 3.1.13 - Resolves: RHBZ#1933845

Mar 10, 2021
High max 9.8

ELSA-2021-9100 1 CVE

Important: python3 security update (Oracle Linux 8)

[3.6.8-31.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 10, 2021
High max 8.1

ELSA-2021-0788 1 CVE

Important: dotnet security and bugfix update (Oracle Linux 8)

[2.1.522-1] - Update to .NET Core SDK 2.1.522 and Runtime 2.1.26 - Resolves: RHBZ#1933844

Mar 10, 2021
High

ELSA-2021-0742 1 CVE

Important: screen security update (Oracle Linux 7)

[4.1.0-0.27.2012314git3c2946] - fix CVE-2021-26937 (#1927063)

Mar 9, 2021
High max 7.8

ELSA-2021-9087 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.501.0.el7] - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531559] - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches (Dave Kleikamp) [Orabug: 32532588] - dts/pensando: Fix compat…

Mar 9, 2021
High

ELSA-2021-0744 2 CVEs

Important: nodejs:14 security and bug fix update (Oracle Linux 8)

nodejs [1:14.16.0-2] - Resolves: RHBZ#1932427 - remove --debug-nghttp2 option [1:14.16.0-1] - Resolves: RHBZ#1932317, RHBZ#1932425 - Rebase, remove ini patch [1:14.15.4-2] - Add patch for yarn crash - Resolves: RHBZ#1916465 [1:14.15.4-1] - Security rebase to …

Mar 9, 2021
High max 7.8

ELSA-2021-9086 7 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.104.4.el7] - KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas) [Orabug: 32545182] [5.4.17-2036.104.3.el7] - config: enable CONFIG_MLX5_MPFS (Brian Maly) [Orabug: 32249042] - net: Fix bridge enslavement failure (Ido Schimmel) [Orabug…

Mar 9, 2021
High

ELSA-2021-0734 2 CVEs

Important: nodejs:12 security update (Oracle Linux 8)

nodejs [1:12.21.0-1] - Resolves: RHBZ#1932315, RHBZ#1932424 - remove --debug-nghttp2 option - remove ini patch - Backport patch to use getauxval

Mar 5, 2021
High max 7.0

ELSA-2021-0705 1 CVE

Important: container-tools:1.0 security update (Oracle Linux 8)

buildah [1.5-8.gite94b4f9.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.5-8.gite94b4f9] - bump release to preserve upgrade path - Related: #1821193 [1.5-4.gite94b4f9] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to l…

Mar 5, 2021
High max 7.0

ELSA-2021-0706 1 CVE

Important: container-tools:2.0 security update (Oracle Linux 8)

buildah [1.11.6-8.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-8] - exclude i686 arch - Related: #1821193 [1.11.6-7] - fix 'CVE-2020-10696 buildah: craft…

Mar 5, 2021