Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

297 results · Clear filters · Feed

  • Low
    ELSA-2022-8139 1 CVE

    Low: wavpack security update (Oracle Linux 9)

    [5.4.0-5] - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269

  • Low
    ELSA-2022-7950 1 CVE

    Low: Image Builder security, bug fix, and enhancement update (Oracle Linux 9)

    cockpit-composer [41-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922] [41-1] - New upstream release [40-1] - New upstream release [39-1] - New upstream release [38-1] - New upstream release [37-1] - New up…

  • Low max 5.9
    ELSA-2022-8090 1 CVE

    Low: runc security update (Oracle Linux 9)

    [4:1.1.4-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.4 - Related: #2061316

  • Low
    ELSA-2022-7959 1 CVE

    Low: guestfs-tools security, bug fix, and enhancement update (Oracle Linux 9)

    [1.48.2-5] - Rebase to guestfs-tools 1.48.2 resolves: rhbz#2059286 - Default to --selinux-relabel in various tools resolves: rhbz#2075718, rhbz#2089748 - Add lvm system.devices cleanup operation to virt-sysprep resolves: rhbz#2072493 - Refactor virt-customize…

  • Low
    ELSA-2022-7645 1 CVE

    Low: openjpeg2 security update (Oracle Linux 8)

    [2.4.0-5] - Fix CVE-2022-1122

  • Low max 3.9
    ELSA-2022-7541 2 CVEs

    Low: redis:6 security, bug fix, and enhancement update (Oracle Linux 8)

    [6.2.7-1] - rebase to 6.2.7 #1999873

  • Low
    ELSA-2022-7548 1 CVE

    Low: Image Builder security, bug fix, and enhancement update (Oracle Linux 8)

    cockpit-composer [41-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095] [41-1] - New upstream release

  • Low
    ELSA-2022-7558 1 CVE

    Low: wavpack security update (Oracle Linux 8)

    [5.1.0-16] - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269

  • Low max 6.2
    ELSA-2022-7472 4 CVEs

    Low: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

    libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key parameter …

  • Low max 7.5
    ELSA-2022-5326 1 CVE

    Low: compat-openssl10 security update (Oracle Linux 8)

    [1:1.0.2o-4] - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates Resolves: rhbz#2077417

  • Low
    ELSA-2022-5163 1 CVE

    Low: httpd:2.4 security update (Oracle Linux 8)

    httpd [2.4.37-47.0.1.2] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-47.2] - Resolves: #2097247 - CVE-2020-13950 httpd:2.4/httpd: mod_proxy NULL pointer dereference

  • Low
    ELSA-2022-1814 1 CVE

    Low: gnome-shell security and bug fix update (Oracle Linux 8)

    [3.32.2-44] - Fix more JS warnings Resolves: #2025940 [3.32.2-43] - Backport fix for CVE-2020-17489 Resolves: #1874259 [3.32.2-42] - Backport WPA3 support Resolves: #1924593 [3.32.2-41] - Add bugs introduced in backport for #1651378 Related: #2000918 - Tidy u…

  • Low max 4.3
    ELSA-2022-1781 1 CVE

    Low: grafana security, bug fix, and enhancement update (Oracle Linux 8)

    [7.5.11-2] - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files [7.5.11-1] - update to 7.5.11 tagged upstream community sources, see CHANGEL…

  • Low
    ELSA-2022-1891 1 CVE

    Low: libpq security update (Oracle Linux 8)

    [13.5-1] - Rebase to 13.5 Resolves: #2023294

  • Low max 4.3
    ELSA-2022-2081 1 CVE

    Low: bluez security update (Oracle Linux 8)

    [5.56-3] + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 [5.56-2] + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests [5.56-1] + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in…

  • Low
    ELSA-2022-2110 1 CVE

    Low: grub2 security, bug fix, and enhancement update (Oracle Linux 8)

    [2.02-123.0.1] - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462] - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462] - Backport some better script logic for BTRFS support [Orabug: 32448171] - Do not add sh…

  • Low
    ELSA-2022-1820 1 CVE

    Low: udisks2 security and bug fix update (Oracle Linux 8)

    [2.9.0-9] - Fix LVM-VDO statistics tests (#2023880,#2025483) - Fix GError ownership (#1999149) [2.9.0-8] - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004422)

  • Low
    ELSA-2022-2031 1 CVE

    Low: libssh security, bug fix, and enhancement update (Oracle Linux 8)

    [0.9.6-3] - Remove STI tests [0.9.6-2] - Remove bad patch causing errors - Adding BuildRequires for openssh (SSHD support) [0.9.6-1] - Fix CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with different key exchange mechanism - Rebase to version…

  • Low
    ELSA-2022-0889 1 CVE

    Low: 389-ds:1.4 security and bug fix update (Oracle Linux 8)

    [1.4.3.23-14] - Bump version to 1.4.3.23-14 - Resolves: Bug 2059893 - Paged search lookthroughlimit counter doesnt take read ahead into account - Resolves: Bug 2060106 - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing - Resolves: Bu…

  • Low
    ELSA-2022-0628 1 CVE

    Low: 389-ds-base security and bug fix update (Oracle Linux 7)

    [1.3.10.2-15] - Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search

  • Low max 6.9
    ELSA-2021-9552 2 CVEs 1 exploited

    Low: pcs security update (Oracle Linux 8)

    [0.10.10-4.0.1] - Replace HAM-logo.png with a generic one [0.10.10-4] - Fixed unfencing in - Resolves: rhbz#bz1991654 [0.10.10-3] - Added add/remove syntax for command - Resolves: rhbz#1992668 [0.10.10-2] - Fixed create resources with depth operation attribut…

  • Low
    ELSA-2021-4408 1 CVE

    Low: libsolv security and bug fix update (Oracle Linux 8)

    [0.7.19-1] - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks [0.7.17-2] - Fix rpm dependency [0.7.1…

  • Low
    ELSA-2021-4316 1 CVE

    Low: zziplib security update (Oracle Linux 8)

    [0.13.68-9] - Fix CVE-2020-18442 - Resolves: CVE-2020-18442

  • Low
    ELSA-2021-4510 1 CVE

    Low: lua security update (Oracle Linux 8)

    [5.3.4-12] - Fix segfault in getlocal and setlocal (#1880445)

  • Low max 5.7
    ELSA-2021-4455 1 CVE

    Low: python-pip security update (Oracle Linux 8)

    [9.0.3-20] - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856

  • Low
    ELSA-2021-4404 1 CVE

    Low: kexec-tools security, bug fix, and enhancement update (Oracle Linux 8)

    [2.0.20-57.0.3] - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440] [2.0.20-57.0.2] - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981] [2.0.20-57.0.1] - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 3325…

  • Low
    ELSA-2021-4489 1 CVE

    Low: rpm security, bug fix, and enhancement update (Oracle Linux 8)

    [4.14.3-19] - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) [4.14.3-18] - Address important covscan issues (#1996665), vol. 2 [4.14.3-17] - Address important covscan issues (#1996665) [4.14.3-16] - Add support for read-only sqlite rpmdb (#1…

  • Low
    ELSA-2021-4236 1 CVE

    Low: tcpdump security and bug fix update (Oracle Linux 8)

    [14:4.9.3-2] - Resolves: #1860216 - tcpdump can not parse mptcp options - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory - Adding tedude test to gating

  • Low
    ELSA-2021-4373 2 CVEs

    Low: pcre security update (Oracle Linux 8)

    [8.42-6] - Rebuild for BZ#1954441 [8.42-5] - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after '(?C…

  • Low
    ELSA-2021-4386 1 CVE

    Low: gcc security and bug fix update (Oracle Linux 8)

    [8.5.0-3.0.2] - Fix Orabug 33451471 and backport CTF/BTF enhancements ctfc: Free CTF container elements in ctfc_delete_container () ctf: Do not warn for CTF not supported for GNU GIMPLE ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug 33…

  • Low
    ELSA-2021-4387 1 CVE

    Low: libssh security update (Oracle Linux 8)

    [0.9.4-3] - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL (#1862646)

  • Low max 6.8
    ELSA-2020-5004 1 CVE

    Low: resource-agents security and bug fix update (Oracle Linux 7)

    [4.1.1-61.4] - Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850992 [4.1.1-61.2] - azure-lb: fix redirect issue Resolves: rhbz#1850779 [4.1.1-61.1] - gcp-vpc-move-vip: add support for multiple alias IPs - sybaseASE: run verify action d…

  • Low
    ELSA-2021-3807 1 CVE

    Low: 389-ds-base security and bug fix update (Oracle Linux 7)

    [1.3.10.2-13] - Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug …

  • Low
    ELSA-2021-3338 1 CVE

    Low: hivex security update (Oracle Linux 7)

    [1.3.10-6.12] - Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193

  • Low max 5.0
    ELSA-2021-3145 1 CVE

    Low: .NET Core 2.1 security and bugfix update (Oracle Linux 8)

    [2.1.525-1] - Update to .NET SDK 2.1.525 and Runtime 2.1.29 - Resolves: RHBZ#1988581 [2.1.524-1] - Update to .NET SDK 2.1.524 and Runtime 2.1.28 - Resolves: RHBZ#1953766

  • Low
    ELSA-2021-3079 1 CVE

    Low: 389-ds:1.4 security and bug fix update (Oracle Linux 8)

    [1.4.3.16-19] - Bump version to 1.4.3.16-19 - Resolve: Bug 1984091 - persistent search returns entries even when an error is returned by content-sync-plugin [1.4.3.16-18] - Bump version to 1.4.3.16-18 - Resolve: Bug 1983121 - CRYPT password hash with asterisk…

  • Low
    ELSA-2021-3075 1 CVE

    Low: libuv security update (Oracle Linux 8)

    [1:1.41.1-1] - Rebase to 1.41.1 - Change description to reflect upstream - Resolves: RHBZ1980033

  • Low max 7.8
    ELSA-2021-1679 1 CVE

    Low: bash security and bug fix update (Oracle Linux 8)

    [4.4.19-14] - Fix hang when limit for nproc is very high Resolves: #1890888 [4.4.19-13] - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943

  • Low
    ELSA-2021-1675 1 CVE

    Low: libdb security update (Oracle Linux 8)

    [5.3.28-40] - Resolves: CVE-2019-2708 - Resolves: #1856237

  • Low
    ELSA-2021-1723 2 CVEs

    Low: sudo security and bug fix update (Oracle Linux 8)

    [1.8.29-7] - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Reso…