Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 5.3

ELSA-2022-0161 15 CVEs

Moderate: java-17-openjdk security update (Oracle Linux 8)

[1:17.0.2.0.8-4] - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz#2039366 [1:17.0.2.0.8-3] - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@ - Up…

Jan 19, 2022
Medium max 7.4

ELSA-2022-9023 1 CVE

Moderate: openssl security update (Oracle Linux 7)

[1.0.2k-23.0.1] - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison [Orabug: 32467026] - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059] - Add TLS KDF self-test [Orabug: 32467193] - Add EC keys pairwise co…

Jan 14, 2022
Medium max 7.4

ELSA-2022-0064 1 CVE

Moderate: openssl security update (Oracle Linux 7)

[1.0.2k-23] - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#1996054

Jan 12, 2022
Medium max 8.8

ELSA-2022-0059 1 CVE 1 exploited

Moderate: webkitgtk4 security update (Oracle Linux 7)

[2.28.2-3] - Fix CVE-2021-30858 - Resolves: #2006421

Jan 12, 2022
Medium

ELSA-2022-0063 3 CVEs

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.53.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Jan 11, 2022
Medium

ELSA-2021-5236 2 CVEs

Moderate: postgresql:13 security update (Oracle Linux 8)

postgresql [13.5-1] - Update to 13.5 - Resolves: #2024608

Dec 22, 2021
Medium

ELSA-2021-5227 1 CVE

Moderate: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-348.7.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

Dec 22, 2021
Medium max 7.4

ELSA-2021-5226 1 CVE

Moderate: openssl security update (Oracle Linux 8)

[1:1.1.1k-5] - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005400

Dec 22, 2021
Medium

ELSA-2021-5235 2 CVEs

Moderate: postgresql:12 security update (Oracle Linux 8)

postgresql [12.9-1] - Update to 12.9 - Resolves: #2024677

Dec 22, 2021
Medium max 7.5

ELSA-2021-5206 1 CVE

Moderate: log4j security update (Oracle Linux 7)

[0:1.2.17-17] - Fix remote code execution vulnerability - Resolves: CVE-2021-4104

Dec 21, 2021
Medium

ELSA-2021-5195 1 CVE

Moderate: ipa security and bug fix update (Oracle Linux 7)

[4.6.8-5.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7_9.10] - Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for K…

Dec 17, 2021
Medium

ELSA-2021-5142 1 CVE

Moderate: idm:DL1 security update (Oracle Linux 8)

ipa [4.9.6-10.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.6-10] - Bump realease version due to build issue. Related: RHBZ#2021489 [4.9.6-9] - Hardening for CVE-2020-25717, part 3 Related: RHBZ#2021489 [4.9.6-8] - Hardening f…

Dec 16, 2021
Medium max 9.8

ELSA-2021-5171 7 CVEs

Moderate: nodejs:16 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [16.13.1-3.0.1] - Libraries must not be group-writeable. Change node-gyp permission to 0755 [Orabug: 28451433] [1:16.13.1-3] - Resolves: RHBZ#2027610 - Add corepack to spec [1:16.13.1-2] - Resolves: RHBZ#2027610 - Update npm version test [1:16.13.1-1] …

Dec 16, 2021
Medium

ELSA-2021-9575 1 CVE

Moderate: openssh security update (Oracle Linux 7)

[7.4p1-22.0.1_fips] - Change Epoch from 1 to 10 - Enable fips KDF POST [Orabug: 32461750] - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739] [7.4p1-22.0.1] - enlarge format buffer size for certificate serial number so the log me…

Dec 7, 2021
Medium

ELSA-2021-4785 1 CVE

Moderate: rpm security update (Oracle Linux 7)

[4.11.3-48] - Fix double-free in previously added patch (#2004228) [4.11.3-47] - Improve range checks on signature and main header tags (#2004228) - Fixes CVE-2021-20271

Nov 24, 2021
Medium

ELSA-2021-4782 1 CVE

Moderate: openssh security update (Oracle Linux 7)

[7.4p1-22.0.1] - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation (openssh bz#3012) [Orabug: 30448895] [7.4p1-22 + 0.10.3-2] - avoid segfault in Kerberos cache cleanup (#1999263) - fi…

Nov 24, 2021
Medium

ELSA-2021-4788 1 CVE

Moderate: krb5 security update (Oracle Linux 7)

[1.15.1-51.0.1] - Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360] [1.15.1-51] - Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599

Nov 24, 2021
Medium

ELSA-2021-4432 1 CVE

Moderate: bluez security update (Oracle Linux 8)

[5.56-1] + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56

Nov 24, 2021
Medium max 7.5

ELSA-2021-9553 2 CVEs

Moderate: resource-agents security update (Oracle Linux 8)

[4.1.1-98] - storage-mon: new resource agent Resolves: rhbz#1509319 [4.1.1-97] - podman: fix possible race during container creation Resolves: rhbz#1972743 [4.1.1-96] - LVM-activate: fix drop-in check to avoid re-creating drop-in Resolves: rhbz#1972035 [4.1.1…

Nov 19, 2021
Medium

ELSA-2021-4585 1 CVE

Moderate: gcc-toolset-10-gcc security update (Oracle Linux 8)

[10.3.1-1.2.0.1] - Fix Orabug 32423691- gcc10 SEGV for every test in sregress: ORA-7445_ksmplru_add_batchksm same bug as PR tree-optimization/100053: gcc11-pr100053.patch - Fix Orabug 31197798 (Profile data size way too big) same bug as PR gcov-profile/95348:…

Nov 19, 2021
Medium

ELSA-2021-4743 1 CVE

Moderate: llvm-toolset:ol8 security update (Oracle Linux 8)

clang [12.0.1-4.0.1] - Use all available CPU cores for build - Recognize Oracle Linux distros [OraBug: 29422714] [12.0.1-4] - Trojan source clang-tidy patchset fix [12.0.1-3] - Trojan source clang-tidy patchset

Nov 19, 2021
Medium

ELSA-2021-4595 1 CVE

Moderate: binutils security update (Oracle Linux 8)

[2.30-108.0.2.1] - Forward-port Oracle patches from 2.30-108.0.2 to 2.30-108.0.2.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.30-108.0.2] - Forward-port the following update: * Thu Oct 07 2021 Nick Alcock <nick.alcock@oracle.com> - 2.30-93.…

Nov 18, 2021
Medium

ELSA-2021-4590 1 CVE

Moderate: rust-toolset:ol8 security update (Oracle Linux 8)

rust [1.54.0-3] - Lint against Unicode control codepoints. rust-toolset [1.54.0-1] - Update to Rust and Cargo 1.54.0. [1.53.0-1] - Update to Rust and Cargo 1.53.0.

Nov 18, 2021
Medium

ELSA-2021-4649 1 CVE

Moderate: gcc-toolset-10-binutils security update (Oracle Linux 8)

[2.35-8.6] - Add ability to control the display of unicode characters. (#2009176)

Nov 18, 2021
Medium

ELSA-2021-4591 1 CVE

Moderate: gcc-toolset-11-annobin security update (Oracle Linux 8)

[9.85-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2017367)

Nov 18, 2021
Medium

ELSA-2021-4592 1 CVE

Moderate: gcc-toolset-10-annobin security update (Oracle Linux 8)

[9.29-1.2] - Bump and rebuild for new gcc. (#2017782) [9.29-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2009282)

Nov 18, 2021
Medium

ELSA-2021-4587 1 CVE

Moderate: gcc security update (Oracle Linux 8)

[8.5.0-4.0.1] - Merge oracle patches to security errata 8.5.0-4. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [8.5.0-4] - add -Wbidirectional patch (#2008391)

Nov 18, 2021
Medium

ELSA-2021-4594 1 CVE

Moderate: gcc-toolset-11-binutils security update (Oracle Linux 8)

[2.36.1-1.0.1.1] - Forward port Oracle patches from 2.36.1-1.0.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.36.1-1.1] - Add ability to control the display of unicode characters. (#2009172)

Nov 18, 2021
Medium

ELSA-2021-4593 1 CVE

Moderate: annobin security update (Oracle Linux 8)

[9.72-1.2] - Bump NVR and rebuild to use the new gcc. (#2017362) [9.72-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2017362) [9.72-1] - Rebase to 9.72. (#1960299) - annocheck: Accept 0 as a valid number for gcc minor versions and rel…

Nov 18, 2021
Medium

ELSA-2021-4586 1 CVE

Moderate: gcc-toolset-11-gcc security update (Oracle Linux 8)

[11.2.1-1.2.0.1] - Add -ftrivial-auto-var-init support from GCC12 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> - Add CTF/BTF support Reviewed-by: Qing Zhao <qing.zhao@oracle.com> [11.2.1-1.2] - add -Wbidirectional patch (#2017819)

Nov 18, 2021
Medium

ELSA-2021-4181 2 CVEs

Moderate: mutt security, bug fix, and enhancement update (Oracle Linux 8)

[5:2.0.7-1] - Upgrade to v2.0.7 - New bug fix release - Resolves: #1912614 [5:2.0.6-1] - Upgrade to v2.0.6 - Resolves: #1912614

Nov 16, 2021
Medium

ELSA-2021-4339 1 CVE

Moderate: grilo security update (Oracle Linux 8)

[0.3.6-3] + grilo-0.3.6-3 - Fix TLS not being validated correctly - Resolves: rhbz#1997234

Nov 16, 2021
Medium

ELSA-2021-4257 2 CVEs

Moderate: httpd:2.4 security, bug fix, and enhancement update (Oracle Linux 8)

httpd [2.4.37-41.0.1] - Add checks on the configured UDS path [Orabug: 33412270][CVE-2021-40438] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-41] - Resolves: #1680111 - http…

Nov 16, 2021
Medium

ELSA-2021-4413 1 CVE

Moderate: tpm2-tools security and enhancement update (Oracle Linux 8)

[4.1.1-5] - Bump nvr to trigger osci. resolves: rhbz#1965981 [4.1.1-4] - Fix CVE-2021-3565 resolves: rhbz#1965981 [4.1.1-3] - Fix resource leak. - Fix to restrict policy digest size. - Fix incompatible pointer cast. - Fix error message in files_load_##name - …

Nov 16, 2021
Medium max 7.5

ELSA-2021-4150 2 CVEs

Moderate: python36:3.6 security and bug fix update (Oracle Linux 8)

python-docs [3.6.7-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.6.7-1] - Modify for RHEL8 - Update to new Python version - Resolves: rhbz#1656044 python-wheel [1:0.31.1-3] - Adjusted the postun scriptlets to enable up…

Nov 16, 2021
Medium max 6.5

ELSA-2021-4154 2 CVEs

Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

Nov 16, 2021
Medium

ELSA-2021-4315 1 CVE

Moderate: spamassassin security update (Oracle Linux 8)

[3.4.4-4.el4] - Fix header parsing

Nov 16, 2021
Medium

ELSA-2021-4464 1 CVE

Moderate: dnf security and bug fix update (Oracle Linux 8)

dnf [4.7.0-4.0.1] -Fixed python stack trace with updateinfo list cves command [Orabug: 32749660] - Replaced upstream bugzilla reporting reference. [Orabug: 32829849] [4.7.0-4] - Update translations (RhBug:1961632) [4.7.0-3] - Improve signature checking using …

Nov 16, 2021
Medium max 9.8

ELSA-2021-4381 29 CVEs 5 exploited

Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

accountsservice [0.6.55-2] - Add support for user templates so user can specify default session Resolves: #1812788 gdm [40.0-14] - Fix XDMCP Resolves: #2004170 - Fix crash at shutdown Related: #2004170 [40.0-13] - Disable Wayland on HyperV - Fix Xorg fallback…

Nov 16, 2021
Medium max 9.8

ELSA-2021-4451 3 CVEs

Moderate: gnutls and nettle security, bug fix, and enhancement update (Oracle Linux 8)

gnutls [3.6.16-4] - p11tool: Document ID reuse behavior when importing certs (#1776250) [3.6.16-3] - Treat SHA-1 signed CA in the trusted set differently (#1965445) [3.6.16-2] - Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216) […

Nov 16, 2021