Oracle Linux Security Advisories (ELSA)

5,096 results · Clear filters · Feed

• High
  ELSA-2021-0735 2 CVEs

  Important: nodejs:10 security update (Oracle Linux 8)

  nodejs [1:10.24.0-1] - Resolves: RHBZ#1932373, RHBZ#1932426 - Resolves CVE-2021-22883 and CVE-2021-22884 - remove -debug-nghttp2 flag (1930775) - remove ini patch merged upstream

  Mar 5, 2021
• High
  ELSA-2021-9079 4 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  Mar 3, 2021
• High max 8.1
  ELSA-2021-0671 1 CVE

  Important: bind security update (Oracle Linux 7)

  [32:9.11.4-26.P2.4] - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) [32:9.11.4-26.P2.3] - Fix inline re-signing (#rh1889902) [32:9.11.4-26.P2.2] - Fix unsupported algorithms validation (#rh1769876) [32:9.11.4-26.P2.1] - Fix tsig-request veri…

  Mar 2, 2021
• High
  ELSA-2021-9076 7 CVEs

  Important: grub2 security update (Oracle Linux 7)

  [2.02-0.87.0.7] - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657] - Fix various coverity issues [Orabug: 32530657] - Add SBAT metadata to grubx64.efi [Orabug: 32530657] [2.02-0.87…

  Mar 2, 2021
• High
  ELSA-2021-9077 7 CVEs

  Important: grub2 security update (Oracle Linux 8)

  [2.02-90.0.2] - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657] - Fix various coverity issues [Orabug: 32530657] - Disable os-prober by default [Orabug: 32530657] - Add SBAT metad…

  Mar 2, 2021
• High max 8.1
  ELSA-2021-0670 1 CVE

  Important: bind security update (Oracle Linux 8)

  [32:9.11.20-5.1] - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)

  Mar 2, 2021
• High
  ELSA-2021-0661 4 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [78.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.8.0-1] - Update to 78.8.0 build1

  Feb 26, 2021
• High
  ELSA-2021-0657 4 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [78.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.8.0-1] - Update to 78.8.0 build1

  Feb 26, 2021
• High
  ELSA-2021-0617 1 CVE

  Important: xterm security update (Oracle Linux 7)

  [295-3.1] - Backport security fix for CVE-2021-27135 - Resolves: rhbz#1927564

  Feb 23, 2021
• High
  ELSA-2021-0618 1 CVE

  Important: stunnel security update (Oracle Linux 8)

  [5.56-5] - Fix CVE-2021-20230 stunnel: client certificate not correctly verified when redirect and verifyChain options are used.

  Feb 23, 2021
• High
  ELSA-2021-0507 1 CVE

  Important: subversion:1.10 security update (Oracle Linux 8)

  subversion [1.10.2-4] - add security fix for CVE-2020-17525

  Feb 20, 2021
• High
  ELSA-2021-9067 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.500.10.el7uek] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: don't handle error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: don't handle error…

  Feb 19, 2021
• High
  ELSA-2021-9068 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.500.10.el7] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: don't 'handle' erro…

  Feb 19, 2021
• High
  ELSA-2021-0611 1 CVE

  Important: xterm security update (Oracle Linux 8)

  [331-1.2] - Fix issue found by covcan - Related: rhbz#1927567 [331-1.1] - Backport security fix for CVE-2021-27135 - Resolves: rhbz#1927567

  Feb 18, 2021
• High
  ELSA-2021-9058 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  Feb 17, 2021
• High
  ELSA-2021-0558 3 CVEs

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-240.15.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

  Feb 17, 2021
• High
  ELSA-2021-9051 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.48.3.1] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492113] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492105] {CVE-2021-26931} - xen-netback: don't 'handle' error by B…

  Feb 16, 2021
• High
  ELSA-2021-9052 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.500.9.1] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: dont 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: dont 'handle' error by …

  Feb 16, 2021
• High
  ELSA-2021-9057 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2036.103.3.1.el7] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492109] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492101] {CVE-2021-26931} - xen-netback: don't 'handle' erro…

  Feb 16, 2021
• High
  ELSA-2021-9053 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2036.103.3.1uek] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492109] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492101] {CVE-2021-26931} - xen-netback: don't 'handle' error…

  Feb 16, 2021
• High max 6.5
  ELSA-2021-0474 1 CVE

  Important: dotnet security and bugfix update (Oracle Linux 8)

  [2.1.521-1] - Update to .NET Core SDK 2.1.521 and Runtime 2.1.25 - Resolves: RHBZ#1922272

  Feb 16, 2021
• High max 6.5
  ELSA-2021-0476 1 CVE

  Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

  [5.0.103-1.0.1] - Add support for new Oracle release [5.0.103-1] - Update to .NET SDK 5.0.103 and Runtime 5.0.3 - Resolves: RHBZ#1924765

  Feb 11, 2021
• High max 6.5
  ELSA-2021-0471 1 CVE

  Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

  [3.1.112-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.112-1] - Update to .NET Core SDK 3.1.112 and Runtime 3.1.12 - Resolves: RHBZ#1923377

  Feb 11, 2021
• High max 6.3
  ELSA-2021-9029 2 CVEs

  Important: olcne security update (Oracle Linux 7)

  kata-runtime [1.7.3-1.0.7] - Address CVE-2020-28914 kata [1.7.3-1.0.12] - UEKR6 guest kernel support [1.7.3-1.0.11] - Address CVE-2020-28914 kubernetes [1.17.9-1.0.6] - Kata CVE-2020-28914 olcne [1.1.10-1] - Address CVE-2020-28914: An improper file permission…

  Feb 10, 2021
• High max 6.3
  ELSA-2021-9028 2 CVEs

  Important: olcne security update (Oracle Linux 7)

  kubernetes [1.18.10-3] - Kata CVE-2020-28914 kata-proxy [1.11.5-1] - Added Oracle Specific Build Files for kata-proxy kata-shim [1.11.5-1] - Added Oracle Specific Build Files for kata-shim kata-ksm-throttler [1.11.5-1] - Added Oracle Specific Build Files for …

  Feb 10, 2021
• High max 8.8
  ELSA-2021-9041 1 CVE

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  kernel-uek [3.8.13-118.54.1] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349209] {CVE-2020-36158}

  Feb 9, 2021
• High max 8.8
  ELSA-2021-9040 1 CVE

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  kernel-uek [3.8.13-118.54.1] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349209] {CVE-2020-36158}

  Feb 9, 2021
• High max 8.8
  ELSA-2021-9039 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2025.405.3.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280] [4.14.35-2025.405.2.el7] - nfs: Fix security label length not being reset (Jeffrey Mitchell) [Orabug: 32350995] [4.14.35-2025.405.1.el7] - net/rds: …

  Feb 8, 2021
• High max 5.5
  ELSA-2021-9034 22 CVEs

  Important: qemu security update (Oracle Linux 7)

  [15:4.2.1-4.el7] - Document CVE-2020-25723 as fixed (Mark Kanda) [Orabug: 32222397] {CVE-2020-25084} {CVE-2020-25723} - hw/net/e1000e: advance desc_offset in case of null descriptor (Prasad J Pandit) [Orabug: 32217517] {CVE-2020-28916} - i386: Add 2nd Generat…

  Feb 8, 2021
• High max 7.3
  ELSA-2021-0411 1 CVE

  Important: flatpak security update (Oracle Linux 7)

  [1.0.9-10] - Fix CVE-2021-21261 (#1918771)

  Feb 8, 2021
• High max 8.8
  ELSA-2021-9035 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2025.405.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280] [4.14.35-2025.405.2] - nfs: Fix security label length not being reset (Jeffrey Mitchell) [Orabug: 32350995] [4.14.35-2025.405.1] - net/rds: Fix gfp_t pa…

  Feb 8, 2021
• High max 8.8
  ELSA-2021-9037 6 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2036.103.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2036.103.2] - A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380824] - netfilter: add and use nf_hook_slow_list() (Florian West…

  Feb 8, 2021
• High max 8.8
  ELSA-2021-9038 6 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2036.103.3.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2036.103.2.el7] - A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380824] - netfilter: add and use nf_hook_slow_list() (Flor…

  Feb 8, 2021
• High max 8.8
  ELSA-2021-9030 5 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.47.3] - sysctl: handle overflow in proc_get_long (Christian Brauner) [Orabug: 31588015] [4.1.12-124.47.2] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu) [Orabug: 31350932] {CVE-2020-12653} - lockd: don't use in…

  Feb 3, 2021
• High
  ELSA-2021-9025 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2025.404.1.2.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

  Feb 1, 2021
• High
  ELSA-2021-9024 3 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2025.404.1.2.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

  Feb 1, 2021
• High max 7.3
  ELSA-2021-0304 1 CVE

  Important: flatpak security update (Oracle Linux 8)

  [1.6.2-5] - Fix CVE-2021-21261 (#1918774)

  Feb 1, 2021
• High
  ELSA-2021-9023 3 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2025.404.1.2] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

  Jan 30, 2021
• High max 8.8
  ELSA-2021-0297 6 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [78.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.7.0-1] - Update to 78.7.0

  Jan 29, 2021
• High max 8.8
  ELSA-2021-0298 6 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [78.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.7.0-1] - Update to 78.7.0

  Jan 29, 2021