Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

High

ELSA-2021-0290 5 CVEs

Important: firefox security update (Oracle Linux 7)

[78.7.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.7.0-2] - Update to 78.7.0 build2 [78.7.0-1] - Update t…

Jan 28, 2021
High

ELSA-2021-0288 5 CVEs

Important: firefox security update (Oracle Linux 8)

[78.7.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.7.0-2] - Update to 78.7.0 build2 [78.7.0-1] - Update to 78.7.0 build1

Jan 28, 2021
High max 7.8

ELSA-2021-0221 1 CVE 1 exploited

Important: sudo security update (Oracle Linux 7)

[1.8.23-10.1] - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz#1917729

Jan 27, 2021
High max 7.8

ELSA-2021-0218 1 CVE 1 exploited

Important: sudo security update (Oracle Linux 8)

[1.8.29-6.1] - RHEL 8.3.Z ERRATUM - CVE-2021-3156 Resolves: rhbz#1917732

Jan 27, 2021
High

ELSA-2021-0150 7 CVEs

Important: dnsmasq security update (Oracle Linux 8)

[2.79-13.1] - Fix various issues in dnssec validation (CVE-2020-25681) - Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685)

Jan 20, 2021
High max 8.0

ELSA-2021-0162 1 CVE

Important: xstream security update (Oracle Linux 7)

[1.3.1-12] - Rebuild with OpenJDK 7 [1.3.1-11] - Fix remote code execution vulnerability - Resolves: CVE-2020-26217

Jan 19, 2021
High max 7.5

ELSA-2021-0095 1 CVE

Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

[3.1.111-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.111-1] - Update to .NET Core SDK 3.1.111 and Runtime 3.1.11 - Resolves: RHBZ#1907633

Jan 15, 2021
High max 7.5

ELSA-2021-0094 1 CVE

Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

[5.0.102-2.0.1] - Add support for new Oracle release [5.0.102-2] - Rebuild with updated tests - Resolves: RHBZ#1912684 [5.0.102-1] - Update to .NET SDK 5.0.102 and Runtime 5.0.2 - Resolves: RHBZ#1912684

Jan 15, 2021
High

ELSA-2021-9008 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2025.404.1.1.el7] - target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248040] {CVE-2020-28374} [4.14.35-2025.404.1.el7] - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253412] {CVE-2020-29568} -…

Jan 12, 2021
High

ELSA-2021-9009 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.46.4.1] - target: fix XCOPY NAA identifier lookup (Mike Christie) [Orabug: 32248041] {CVE-2020-28374} [4.1.12-124.46.4] - xen/events: block rogue events for some time (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673} - xen/events: defer eoi in c…

Jan 12, 2021
High

ELSA-2021-9005 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.404.1.1] - target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248040] {CVE-2020-28374} [4.14.35-2025.404.1] - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253412] {CVE-2020-29568} - xen/xen…

Jan 12, 2021
High max 7.8

ELSA-2021-9007 6 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.102.0.2.el7] - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260252] {CVE-2020-29569} - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568} - x…

Jan 12, 2021
High max 7.8

ELSA-2021-9006 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.102.0.2uek] - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260252] {CVE-2020-29569} - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568} - xe…

Jan 12, 2021
High max 8.0

ELSA-2021-9002 14 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.46.3] - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat) [Orabug: 30781859] {CVE-2019-14895} {CVE-2019-14895} - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara) [Orabug: 31265320] {CVE-2019-19037…

Jan 7, 2021
High

ELSA-2021-9001 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.53.1] - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye) [Orabug: 32176267] - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye) [Orabug: 32176267] {CVE-2020-28915} - vt: Disable KD_FONT_…

Jan 7, 2021
High

ELSA-2021-0024 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-5] - Adding CTV-2020-29599 fix

Jan 5, 2021
High

ELSA-2021-0003 1 CVE

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-240.10.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

Jan 5, 2021
High max 6.5

ELSA-2020-5500 14 CVEs

Important: mariadb:10.3 security, bug fix, and enhancement update (Oracle Linux 8)

asio [1.10.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.10.8-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.10.8-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.10.8-…

Dec 18, 2020
High

ELSA-2020-5480 1 CVE

Important: net-snmp security and bug fix update (Oracle Linux 8)

[1:5.8-18.1] - revert permission of config files to 600 (#1902662) [1:5.8-18] - fix CVE-2020-15862 (#1886100) - fix bulk responses for invalid PID (#1896760)

Dec 17, 2020
High max 5.9

ELSA-2020-5476 1 CVE

Important: openssl security and bug fix update (Oracle Linux 8)

[1.1.1g-12] - Fix CVE-2020-1971 ediparty null pointer dereference [1.1.1g-11.1] - Implemented new FIPS requirements in regards to KDF and DH selftests - Disallow certificates with explicit EC parameters

Dec 17, 2020
High max 5.5

ELSA-2020-5437 7 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.11.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x…

Dec 16, 2020
High

ELSA-2020-5996 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.101.2uek] - vt: Disable KD_FONT_OP_COPY (Daniel Vetter) [Orabug: 32187738] {CVE-2020-28974} - page_frag: Recover from memory pressure (Dongli Zhang) [Orabug: 32177966] - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye) [Orabu…

Dec 15, 2020
High

ELSA-2020-5398 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[78.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.1-1] - Update to 78.5.1 build1

Dec 15, 2020
High

ELSA-2020-5401 2 CVEs

Important: libpq security update (Oracle Linux 8)

[12.5-1] - Rebase to upstream release 12.5 Resolves: rhbz#1898228 Resolves: rhbz#1901558

Dec 15, 2020
High

ELSA-2020-5393 1 CVE

Important: libexif security update (Oracle Linux 8)

[0.6.22-5] - Fix CVE-2020-0452 - Resolves: #1902593

Dec 15, 2020
High

ELSA-2020-5402 1 CVE

Important: libexif security update (Oracle Linux 7)

[0.6.22-2] - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589

Dec 14, 2020
High max 5.5

ELSA-2020-5408 3 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-15] - CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934) [1.20.4-14] - CVE fix for: CVE-2020-14347 (#1862319)

Dec 14, 2020
High

ELSA-2020-5400 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[78.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.1-1] - Update to 78.5.1 build1

Dec 14, 2020
High

ELSA-2020-5995 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.403.3] - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb) [Orabug: 32005117] - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb) [Orabug: 32005117] - lib/scatterlist: Add SG_CHAIN and SG_END…

Dec 14, 2020
High

ELSA-2020-5350 1 CVE

Important: net-snmp security update (Oracle Linux 7)

[1:5.7.2-49.1] - fix CVE-2020-15862 (#1875496)

Dec 7, 2020
High

ELSA-2020-5968 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.52.1] - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers) [Orabug: 31535530] {CVE-2020-10769} - crypto: authenc - Export key parsing helper function (Mathias Krause) [Orabug: 31535530] {CVE-2020-10769}

Dec 7, 2020
High max 5.2

ELSA-2020-5966 1 CVE

Important: docker-cli docker-engine security update (Oracle Linux 7)

docker-cli [19.03.11-7] - Fix for CVE-2020-15257 [19.03.11-6] - Fix for CVE-2020-15157 [19.03.11-5] - Bugfix for 'docker images [name]' not working on docker 19.03.11-ol - Address CVE-2020-16845 [19.03.11-4] - added patch for registry list [19.03.11-3] - upda…

Dec 5, 2020
High max 5.2

ELSA-2020-5964 1 CVE

Important: containerd security update (Oracle Linux 7)

[1.3.9-2] - BUILDINFO: commit=4737bd3784f16c18474a60d8678371108f995d7c - Addresses CVE-2020-15257 [1.3.9-1] - Added Oracle specific build files

Dec 3, 2020
High

ELSA-2020-5956 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.51.2] - Revert 'kexec: Validate pe files against the system_lacklist_keyring' (John Donnelly) [Orabug: 32171714] {CVE-2020-26541} {CVE-2020-26541} [3.8.13-118.51.1] - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neuk…

Dec 2, 2020
High

ELSA-2020-5962 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.45.6] - qla2xxx: disable target reset during link reset and update version (Quinn Tran) [Orabug: 32095664] - scsi: qla2xxx: Fix early srb free on abort (Quinn Tran) [Orabug: 32095664] - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (Ma…

Dec 2, 2020
High

ELSA-2020-5961 1 CVE

Important: libvirt security update (Oracle Linux 7)

[5.7.0-21.el7] - exadata: Fix the validation when defining domain groups (Wim ten Have) [Orabug: 32085856] - Revert 'qemu: dont take agent and monitor job for shutdown' (Menno Lageman) [Orabug: 32080283] - Revert 'qemu: dont hold a monitor and agent job for r…

Dec 1, 2020
High

ELSA-2020-5235 10 CVEs

Important: thunderbird security update (Oracle Linux 7)

[78.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.0-1] - Update to 78.5.0 build3

Dec 1, 2020
High

ELSA-2020-5239 10 CVEs

Important: firefox security update (Oracle Linux 7)

[78.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.5.0-1] - Update to 78.5.0 build1

Dec 1, 2020
High

ELSA-2020-5236 10 CVEs

Important: thunderbird security update (Oracle Linux 8)

[78.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.0-1] - Update to 78.5.0 build3

Dec 1, 2020
High

ELSA-2020-5237 10 CVEs

Important: firefox security update (Oracle Linux 8)

[78.5.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.5.0-1] - Update to 78.5.0 build1

Dec 1, 2020