Oracle Linux Security Advisories (ELSA)

5,092 results · Clear filters · Feed

• High max 8.7
  ELSA-2021-9451 6 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2102.205.7.2.el7] - btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276] [5.4.17-2102.205.7.1] - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518] [5.4.17-2102.205.7] - rds: i…

  Sep 16, 2021
• High max 8.7
  ELSA-2021-9450 6 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2102.205.7.2] - btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276] [5.4.17-2102.205.7.1] - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518] [5.4.17-2102.205.7] - rds: ib: S…

  Sep 16, 2021
• High max 5.3
  ELSA-2021-9449 1 CVE

  Important: libtirpc security update (Oracle Linux 8)

  [1.1.4-4.0.1] - Backport fix for CVE-2018-14621 in libtirpc [Orabug: 33017925]

  Sep 14, 2021
• High
  ELSA-2021-3494 1 CVE

  Important: thunderbird security update (Oracle Linux 7)

  [78.14.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.14.0-1] - Update to 78.14.0 build1 [78.13.0-2] - Use the right name for the appstream file

  Sep 13, 2021
• High
  ELSA-2021-3498 1 CVE

  Important: firefox security update (Oracle Linux 7)

  [78.14.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.14.0-1] - Update to 78.14.0 build1

  Sep 13, 2021
• High
  ELSA-2021-3499 1 CVE

  Important: thunderbird security update (Oracle Linux 8)

  [78.14.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.14.0-1] - Update to 78.14.0 build1 [78.13.0-2] - Use the right name for the appstream file

  Sep 13, 2021
• High
  ELSA-2021-3497 1 CVE

  Important: firefox security update (Oracle Linux 8)

  [78.14.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.14.0-1] - Update to 78.14.0 build1

  Sep 13, 2021
• High
  ELSA-2021-3492 1 CVE

  Important: cyrus-imapd security update (Oracle Linux 8)

  [3.0.7-20.1] - Fix for CVE-2021-33582

  Sep 13, 2021
• High max 7.8
  ELSA-2021-9444 1 CVE

  Important: oswatcher security update (Oracle Linux 7)

  [9.0.0-5] - Use static path configuration for oswatcher scripts {CVE-2021-2464} [Orabug: 33220951]

  Sep 10, 2021
• High
  ELSA-2021-9442 8 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.1.12-124.54.6] - xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang) [Orabug: 33282046] [4.1.12-124.54.5] - l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall() (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429} - l2tp:…

  Sep 8, 2021
• High
  ELSA-2021-3447 2 CVEs

  Important: kernel security and bug fix update (Oracle Linux 8)

  [4.18.0-305.17.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  Sep 8, 2021
• High
  ELSA-2021-3336 1 CVE

  Important: sssd security and bug fix update (Oracle Linux 7)

  [1.16.5-10.0.1] - Revert Redhat's change of disallowing duplicated incomplete gid when 'id_provider=ldap' is used, which caused regression in AD environment. [Orabug: 29286774] [Doc ID 2605732.1] [1.16.5-10.10] - Resolves: rhbz#1973796 - SSSD is NOT able to c…

  Sep 1, 2021
• High max 8.3
  ELSA-2021-3327 5 CVEs 1 exploited

  Important: kernel security and bug fix update (Oracle Linux 7)

  [3.10.0-1160.41.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

  Aug 31, 2021
• High
  ELSA-2021-3295 1 CVE

  Important: libsndfile security update (Oracle Linux 7)

  [1.0.25-12.1] - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)

  Aug 30, 2021
• High
  ELSA-2021-3296 1 CVE

  Important: libX11 security update (Oracle Linux 7)

  [1.6.7-4] - Fix CVE-2021-31535 (#1962438)

  Aug 30, 2021
• High
  ELSA-2021-3253 1 CVE

  Important: libsndfile security update (Oracle Linux 8)

  [1.0.28-10.1] - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985027)

  Aug 24, 2021
• High
  ELSA-2021-9428 2 CVEs

  Important: rh-postgresql10-postgresql security update (Oracle Linux 7)

  [10.17-1] - Update to 10.17 Resolves: CVE-2021-32027 Also fixes: CVE-2021-32028

  Aug 23, 2021
• High
  ELSA-2021-3233 1 CVE

  Important: compat-exiv2-026 security update (Oracle Linux 7)

  [0.26-3] - Fix heap-based buffer overflow vulnerability in jp2image.cpp Resolves: bz#1990394

  Aug 20, 2021
• High
  ELSA-2021-3234 1 CVE

  Important: compat-exiv2-023 security update (Oracle Linux 7)

  [0.23-3] - Fix heap-based buffer overflow vulnerability in jp2image.cpp Resolves: bz#1990393

  Aug 19, 2021
• High
  ELSA-2021-3160 6 CVEs

  Important: thunderbird security update (Oracle Linux 7)

  [78.13.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.13.0-1] - Update to 78.13.0 build1 [78.12.0-3] - Rebuild to pickup older nss

  Aug 17, 2021
• High
  ELSA-2021-3154 6 CVEs

  Important: firefox security update (Oracle Linux 7)

  [78.13.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.13.0-2] - Update to 78.13.0 build2 [78.13.0-1] - Upda…

  Aug 17, 2021
• High
  ELSA-2021-3158 1 CVE

  Important: exiv2 security update (Oracle Linux 7)

  [0.27.0-4] - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352

  Aug 17, 2021
• High
  ELSA-2021-9425 8 CVEs

  Important: qemu security update (Oracle Linux 7)

  [15:4.2.1-11.el7] - pvrdma: Fix the ring init error flow (CVE-2021-3608) (Marcel Apfelbaum) [Orabug: 33120142] {CVE-2021-3608} - pvrdma: Ensure correct input on ring init (CVE-2021-3607) (Marcel Apfelbaum) [Orabug: 33120146] {CVE-2021-3607} - hw/rdma: Fix pos…

  Aug 17, 2021
• High
  ELSA-2021-3151 1 CVE

  Important: sssd security update (Oracle Linux 8)

  [2.4.0-9.0.1] - Restore default debug level for sss_cache [Orabug: 32810448] - Restore default debug level for shadow-utils tools [Orabug: 32810448] - Revert Redhat's change of disallowing duplicated incomplete gid when 'id_provider=ldap' is used, which cause…

  Aug 17, 2021
• High
  ELSA-2021-3152 1 CVE

  Important: exiv2 security update (Oracle Linux 8)

  [0.27.3-3] - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990355

  Aug 17, 2021
• High
  ELSA-2021-3155 6 CVEs

  Important: thunderbird security update (Oracle Linux 8)

  [78.13.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.13.0-1] - Update to 78.13.0 build1

  Aug 17, 2021
• High
  ELSA-2021-3157 6 CVEs

  Important: firefox security update (Oracle Linux 8)

  [78.13.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.13.0-2] - Update to 78.13.0 build2 [78.13.0-1] - Update to 78.13.0 build1

  Aug 17, 2021
• High
  ELSA-2021-3153 1 CVE

  Important: compat-exiv2-026 security update (Oracle Linux 8)

  [0.26-11] - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990397

  Aug 17, 2021
• High
  ELSA-2021-9422 2 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.506.10.el7] - Revert 'rds/ib: reap tx completions during connection shutdown' (Manjunath Patil) [Orabug: 33220435] - Revert 'rds/ib: handle posted ACK during connection shutdown' (Manjunath Patil) [Orabug: 33220435] - Revert 'rds/ib: recover rds…

  Aug 16, 2021
• High
  ELSA-2021-9419 2 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.506.10] - Revert 'rds/ib: reap tx completions during connection shutdown' (Manjunath Patil) [Orabug: 33220435] - Revert 'rds/ib: handle posted ACK during connection shutdown' (Manjunath Patil) [Orabug: 33220435] - Revert 'rds/ib: recover rds con…

  Aug 16, 2021
• High
  ELSA-2021-9420 2 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2102.204.4.3] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33205365] {CVE-2021-3656} {CVE-2021-3656} - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33205443] {CVE-2021-3…

  Aug 16, 2021
• High
  ELSA-2021-9421 2 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2102.204.4.3] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33205365] {CVE-2021-3656} - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33205443] {CVE-2021-3653}

  Aug 16, 2021
• High max 7.5
  ELSA-2021-3148 3 CVEs

  Important: .NET 5.0 security and bugfix update (Oracle Linux 8)

  [5.0.206-1.0.1] - Add support for new Oracle release [5.0.206-1] - Update to .NET SDK 5.0.206 and Runtime 5.0.9 - Resolves: RHBZ#1990965

  Aug 13, 2021
• High max 7.5
  ELSA-2021-3142 3 CVEs

  Important: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

  [3.1.118-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.118-1] - Update to .NET SDK 3.1.118 and Runtime 3.1.18 - Resolves: RHBZ#1990189

  Aug 13, 2021
• High max 4.4
  ELSA-2021-9407 5 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [4.14.35-2047.506.8] - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33187189] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33187192] - rds/ib: avoid dereg of mr in frwr_cle…

  Aug 11, 2021
• High max 8.7
  ELSA-2021-3057 3 CVEs 1 exploited

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

  [4.18.0-305.12.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

  Aug 11, 2021
• High
  ELSA-2021-3066 1 CVE

  Important: edk2 security update (Oracle Linux 8)

  [20200602gitca407c7246bf-4.el8_4.2] - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956676] - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956676] - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch…

  Aug 11, 2021
• High max 4.4
  ELSA-2021-9410 5 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [4.14.35-2047.506.8.el7] - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33187189] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33187192] - rds/ib: avoid dereg of mr in frwr…

  Aug 10, 2021
• High max 7.8
  ELSA-2021-9404 10 CVEs

  Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

  [5.4.17-2102.204.4.2] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] [5.4.17-2102.204.4.1] - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348] - rds/ib: avoid dereg of mr in frwr_clean (Ma…

  Aug 10, 2021
• High max 7.8
  ELSA-2021-9406 10 CVEs

  Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

  [5.4.17-2102.204.4.2] - rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447] - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348] - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug…

  Aug 10, 2021