Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

297 results · Clear filters · Feed

Low

ELSA-2020-1581 6 CVEs

Low: wavpack security update (Oracle Linux 8)

[5.1.0-15] - fix Out-of-bounds read in WavpackVerifySingleBlock function (#1663151) - CVE-2018-19841 [5.1.0-14] - fix uninitialized variable in ParseCaffHeaderConfig (#1741251) - CVE-2019-1010317 [5.1.0-13] - fortify parsing of .dff files (#1707428, #1733627)…

May 5, 2020
Low

ELSA-2020-1167 1 CVE

Low: nbdkit security and bug fix update (Oracle Linux 7)

[1.8.0-3] - Fix for CVE-2019-14850 denial of service due to premature opening of back-end connection resolves: rhbz#1757261 [1.8.0-2] - Explicitly disable nbdkit-ext2-plugin in configure resolves: rhbz#1724242

Apr 6, 2020
Low max 4.5

ELSA-2020-1101 1 CVE

Low: bluez security update (Oracle Linux 7)

[5.44-6] - fixing CVE-2018-10910. Resolves: #1609340

Apr 6, 2020
Low

ELSA-2020-1181 1 CVE

Low: unzip security update (Oracle Linux 7)

[6.0-21] - Fix CVE-2019-13232 - Resolves: CVE-2019-13232

Apr 6, 2020
Low

ELSA-2020-1022 1 CVE

Low: file security update (Oracle Linux 7)

[5.11-36] - fix out-of-bounds read via a crafted ELF file (CVE-2018-10360)

Apr 6, 2020
Low

ELSA-2020-1051 1 CVE

Low: libosinfo security and bug fix update (Oracle Linux 7)

[1.1.0-5] - Resolves: rhbz#1740212 - New defect found in libosinfo-1.1.0-4.el7 [1.1.0-4] - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script option leaks password via command line argument

Apr 6, 2020
Low

ELSA-2020-1175 1 CVE

Low: taglib security update (Oracle Linux 7)

[1.8-8.20130218git] - Fixed OOB read when loading invalid ogg flac file Resolves: bz#1585260

Apr 6, 2020
Low

ELSA-2020-1034 1 CVE

Low: doxygen security and bug fix update (Oracle Linux 7)

[1:1.8.5-4] - Resolves: #1483569, incorrect processing of code blocks - Resolves: #1724173 - CVE-2016-10245, cross-site scripting

Apr 6, 2020
Low max 7.8

ELSA-2020-1020 1 CVE

Low: curl security and bug fix update (Oracle Linux 7)

[7.29.0-57.0.1] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/C…

Apr 6, 2020
Low max 9.1

ELSA-2020-1176 1 CVE

Low: avahi security update (Oracle Linux 7)

[0.6.31-20] - multicast DNS no longer responds to unicast queries outside of local network (#1663410)

Apr 6, 2020
Low

ELSA-2020-1138 1 CVE

Low: gettext security and bug fix update (Oracle Linux 7)

[0.19.8.1-3] - fix CVE-2018-18751: double-free in xgettext (rhbz#1648433)

Apr 6, 2020
Low max 4.7

ELSA-2020-1135 1 CVE

Low: polkit security and bug fix update (Oracle Linux 7)

[0.112-26.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.112-26] - Refined upstream fix of CVE-2018-1116 to avoid ABI changes - Related: rhbz#1601411 [0.112-25] - fix of CVE-2018-1116 - Resolves: rhbz#1601411 [0.112-24] - pkttyagent:…

Apr 6, 2020
Low

ELSA-2019-3976 1 CVE

Low: tcpdump security update (Oracle Linux 7)

[14:4.9.2-4.1] - Resolves: #1761349 - CVE-2018-19519 tcpdump: Stack-based buffer over-read in print-hncp.c

Nov 27, 2019
Low

ELSA-2019-3553 2 CVEs

Low: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

accountsservice [0.6.50-7] - Dont send change updates for login history changes Resolves: #1713080 appstream-data [8-20190805] - Regenerate the RHEL metadata to include the latest cockpit changes - Resolves: #1673011 [8-20190719] - Regenerate the RHEL metadat…

Nov 14, 2019
Low

ELSA-2019-3575 5 CVEs

Low: elfutils security, bug fix, and enhancement update (Oracle Linux 8)

[0.176-5] - Add elfutils-0.176-strip-symbols-illformed.patch [0.176-4] - Add elfutils-0.176-elf-update.patch (#1717349) [0.176-3] - Rebuilt for annobin change. [0.176-2] - Add elfutils-0.176-xlate-note.patch (#1705138) [0.176-1] - New upstream release. - back…

Nov 14, 2019
Low max 4.3

ELSA-2019-3673 1 CVE

Low: lldpad security and bug fix update (Oracle Linux 8)

[1.0.1-13.git036e314] - After gating yml updates [1.0.1-12.git036e314] - Add support for DSCP selectors in APP TLVs (#1704660) [1.0.1-11.git036e314] - Fix memleak on TLV reception (#1727326) [1.0.1-10.git036e314] - Fix the OID display (#1614933)

Nov 14, 2019
Low max 5.3

ELSA-2019-3552 2 CVEs

Low: bind security and bug fix update (Oracle Linux 8)

[32:9.11.4-26.P2] - Permit explicit disabling of RSAMD5 in FIPS mode (#1737407) [32:9.11.4-25.P2] - Fix CVE-2018-5745 - Fix CVE-2019-6465 [32:9.11.4-24.P2] - Do not override random numbers provider in DHCP (#1668682) [32:9.11.4-23.P2] - Report errors on inval…

Nov 14, 2019
Low

ELSA-2019-3703 2 CVEs

Low: libvorbis security update (Oracle Linux 8)

[1.3.6-2] - Sync with git for CVE-2017-14160, CVE-2018-10392, CVE-2018-10393

Nov 14, 2019
Low

ELSA-2019-3700 3 CVEs

Low: openssl security, bug fix, and enhancement update (Oracle Linux 8)

[1.1.1c-2] - do not try to use EC groups disallowed in FIPS mode in TLS - fix Valgrind regression with constant-time code [1.1.1c-1] - update to the 1.1.1c release [1.1.1b-6] - adjust the default cert pbe algorithm for pkcs12 -export in the FIPS mode [1.1.1b-…

Nov 14, 2019
Low max 3.2

ELSA-2019-3464 1 CVE

Low: virt-manager security, bug fix, and enhancement update (Oracle Linux 8)

[2.2.1-2.0.1] - Add OL release support to virt-install for OL KVM guest creation [Orabug: 26135782] [2.2.1-2] - man: virt-install: Fix a couple of launchSecurity related typos (rhbz#1741846) [2.2.1-1] - Rebased to virt-manager-2.2.1 (rhbz#1726535) - The rebas…

Nov 14, 2019
Low

ELSA-2019-3387 1 CVE

Low: osinfo-db and libosinfo security and bug fix update (Oracle Linux 8)

gnome-boxes [3.28.5-7] - Bump the release to 3.28.5-7 - Related: #1739897 [3.28.5-7] - Filter off unsupported architectures - Related: #1739897 [3.28.5-6] - Revert 'Add 3D acceleration option (powered by virgl)' - Related: #1647004 [3.28.5-5] - Add 3D acceler…

Nov 14, 2019
Low

ELSA-2019-3643 1 CVE

Low: gettext security update (Oracle Linux 8)

[0.19.8.1-17] - Ported CI gating tests to Python 3.6 [0.19.8.1-16] - add CI gating tests [0.19.8.1-15] - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049)

Nov 14, 2019
Low max 3.1

ELSA-2019-3391 1 CVE

Low: libreswan security and bug fix update (Oracle Linux 8)

[3.29-6.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [3.29-6] - Resolves: rhbz#1714331 support NSS based IKE KDFs [require updated nss for rhbz 1738689, memleak fix] [3.29-5] - Resolves: rhbz#1714331 support NSS based IKE KDFs so libreswan …

Nov 14, 2019
Low

ELSA-2019-3352 1 CVE

Low: gdb security, bug fix, and enhancement update (Oracle Linux 8)

[8.2-6.el8] - Fix yum vs dnf messaging for RHEL8 (RH BZ 1666249): Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch Do not define DNF_DEBUGINFO_INSTALL for RHEL. - Backport 'Remove support for old mangling schemes' (Simon Marchi, RH BZ 1668635) - Backport…

Nov 14, 2019
Low max 5.4

ELSA-2019-3651 1 CVE

Low: sssd security, bug fix, and enhancement update (Oracle Linux 8)

[2.2.0-19] - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm) [2.2.0-18] - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master [2.2.0-17] - Resolves: rhbz#1676385 …

Nov 14, 2019
Low

ELSA-2019-3345 3 CVEs

Low: virt:ol security, bug fix, and enhancement update (Oracle Linux 8)

Nov 14, 2019
Low

ELSA-2019-2722 1 CVE

Low: libwmf security update (Oracle Linux 8)

[0.2.9-8] - Related: rhbz1717799 fix clang warning [0.2.9-7] - Related: rhbz1717799 bump n-v-r [0.2.9-6] - Related: rhbz1679006 bump n-v-r [0.2.9-5] - Resolves: rhbz1679006 libgd CVE-2019-6978

Sep 12, 2019
Low

ELSA-2019-2607 1 CVE

Low: qemu-kvm security update (Oracle Linux 7)

[1.5.3-167.el7_7.1] - kvm-qxl-check-release-info-object.patch [bz#1732337] - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748] - Resolves: bz#1732337 (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice re…

Sep 4, 2019
Low

ELSA-2019-2281 1 CVE

Low: ghostscript security, bug fix, and enhancement update (Oracle Linux 7)

[9.25-2] - obsoleted old ghostscript-devel to allow clean upgrade to libgs-devel [9.25-1] - Rebase to latest upstream version (bug #1636115) - Resolves: #1673399 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: #167…

Aug 13, 2019
Low

ELSA-2019-2033 2 CVEs

Low: patch security and bug fix update (Oracle Linux 7)

[2.7.1-11] - Fixed CVE-2016-10713 - Out-of-bounds access in pch_write_line function - Fixed CVE-2018-6952 - Double free of memory - Resolves: #1626473, honor new file mode 100755 when applying patches - Resolves: #1653294, Added virtual provides for bundled g…

Aug 13, 2019
Low

ELSA-2019-2196 2 CVEs

Low: zziplib security update (Oracle Linux 7)

[0.13.62-11] - Fix CVE-2018-6541 - Part of the original patch has already been applied in the past (CVE-2018-7726), so the bug should not be reproducible in a way described in the github issue, even without this commit. Applying the rest of the original patch…

Aug 13, 2019
Low

ELSA-2019-2283 1 CVE

Low: sox security update (Oracle Linux 7)

[14.4.1-7] - Fix CVE-2017-18189 Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/ Resolves: #1553590

Aug 13, 2019
Low max 5.9

ELSA-2019-2143 1 CVE

Low: openssh security, bug fix, and enhancement update (Oracle Linux 7)

[7.4p1-21 + 0.10.3-2] - Avoid double comma in the default cipher list in FIPS mode (#1722446) [7.4p1-20 + 0.10.3-2] - Revert the updating of cached passwd structure (#1712053) [7.4p1-19 + 0.10.3-2] - Update cached passwd structure after PAM authentication (#1…

Aug 13, 2019
Low

ELSA-2019-2077 1 CVE

Low: ntp security, bug fix, and enhancement update (Oracle Linux 7)

[4.2.6p5-29.0.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-29] - fix CVE-2016-7429 patch to restore default ttl configuration (#1550637) - fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327) - fix cras…

Aug 13, 2019
Low

ELSA-2019-2126 1 CVE

Low: libwpd security update (Oracle Linux 7)

[0.10.0-2] - Resolves: rhbz#1650535 CVE-2018-19208

Aug 13, 2019
Low max 4.4

ELSA-2019-2181 1 CVE

Low: curl security and bug fix update (Oracle Linux 7)

[7.29.0-54.0.1] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html) - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html) - CVE-201…

Aug 13, 2019
Low max 6.5

ELSA-2019-2101 22 CVEs

Low: exiv2 security, bug fix, and enhancement update (Oracle Linux 7)

[0.27.0-2] - Minor improvements Resolves: bz#1652637 [0.27.0-1] - Exiv2 0.27.0 Resolves: bz#1652637

Aug 13, 2019
Low max 7.5

ELSA-2019-2035 1 CVE

Low: python-requests security update (Oracle Linux 7)

[2.6.0-5] - Fix CVE-2018-18074 Resolves: rhbz#1647368

Aug 13, 2019
Low

ELSA-2019-2141 1 CVE

Low: kde-workspace security and bug fix update (Oracle Linux 7)

kdelibs [6:4.14.8-10] - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz#1710362 [6:4.14.8-9] - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz#1710362 [6:4.14.8-8] - Disab…

Aug 13, 2019
Low

ELSA-2019-2048 5 CVEs

Low: exempi security update (Oracle Linux 7)

[2.2.0-9] - Fix CVE-2017-18233 resolves: #1574865 - Fix CVE-2017-18234 resolves: #1656011 - Fix CVE-2017-18236 resolves: #1574905 - Fix CVE-2017-18238 resolves: #1572270 - Fix CVE-2018-7730 resolves: #1572631

Aug 13, 2019