Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.8

ELSA-2021-4151 8 CVEs

Moderate: python27:2.7 security update (Oracle Linux 8)

Nov 16, 2021
Medium

ELSA-2021-4396 5 CVEs

Moderate: sqlite security update (Oracle Linux 8)

[3.26.0-15] - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) [3.26.0-14] - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixe…

Nov 16, 2021
Medium

ELSA-2021-4326 1 CVE

Moderate: libX11 security update (Oracle Linux 8)

[1.6.8-5] - Fix CVE-2021-31535 (#1962439)

Nov 16, 2021
Medium max 8.8

ELSA-2021-4356 42 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-348.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

Nov 16, 2021
Medium max 8.2

ELSA-2021-4226 5 CVEs

Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

[7.5.9-4] - resolve CVE-2021-39226 [7.5.9-3] - rebuild to resolve CVE-2021-34558 [7.5.9-2] - remove unused dependency property-information - always include FIPS patch in SRPM [7.5.9-1] - update to 7.5.9 tagged upstream community sources, see CHANGELOG [7.5.8-…

Nov 16, 2021
Medium

ELSA-2021-4426 2 CVEs

Moderate: ncurses security update (Oracle Linux 8)

[6.1-9.20180224] - fix tput to accept -x option (#1916340) [6.1-8.20180224] - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595)

Nov 16, 2021
Medium max 7.8

ELSA-2021-4201 2 CVEs

Moderate: babel security and bug fix update (Oracle Linux 8)

[2.5.1-7] - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the python3-babel package Resolves: rhbz#1967173 [2.5.1-6] - Fix CVE-2021-20095 Resolves: rhbz#1955615

Nov 16, 2021
Medium

ELSA-2021-4235 4 CVEs

Moderate: jasper security update (Oracle Linux 8)

[2.0.14-5] - Fix CVE-2021-26927 (#1933860) - Fix CVE-2021-26926 (#1922316) - Fix CVE-2021-3272 (#1922283) - Fix CVE-2020-27828 (#1905692)

Nov 16, 2021
Medium

ELSA-2021-4231 8 CVEs

Moderate: libwebp security update (Oracle Linux 8)

[1.0.0-5] - Added fixes for rhbz#1956853, rhbz#1956856, rhbz#1956868, rhbz#1956917

Nov 16, 2021
Medium max 7.8

ELSA-2021-4382 1 CVE

Moderate: json-c security and bug fix update (Oracle Linux 8)

[0.13.1-2] - rebuild (#1954436) [0.13.1-1] - Fix CVE-2020-12762 out-of-bounds write via a large JSON file - Resolves: rhbz#1835626

Nov 16, 2021
Medium

ELSA-2021-4513 4 CVEs

Moderate: libsepol security update (Oracle Linux 8)

[2.9-3] - cil: Fix out-of-bound read of file context pattern ending with '\' - cil: Destroy classperms list when resetting classpermission (#1983517) - cil: Destroy classperm list when resetting map perms (#1983521) - cil: cil_reset_classperms_set() should no…

Nov 16, 2021
Medium

ELSA-2021-4321 1 CVE

Moderate: linuxptp security, bug fix, and enhancement update (Oracle Linux 8)

[3.1.1-1] - update to 3.1.1 (#1895005 CVE-2021-3571) - add read-only UDS port (#1929797) - add option to set clockClass threshold (#1980386) - dont repeat some log messages in multi-port configuration (#1980377) - increase default TX timestamp timeout to 10 m…

Nov 16, 2021
Medium

ELSA-2021-4385 2 CVEs

Moderate: glib2 security and bug fix update (Oracle Linux 8)

[2.56.4-15] - Fix test failure introduced in previous update - Related: #1971533 [2.56.4-14] - Refresh GHmac patchset - Resolves: #1971533 [2.56.4-13] - Rename and consolidate existing patches for better maintainability - Refresh CVE-2021-27219 patcheset, usi…

Nov 16, 2021
Medium

ELSA-2021-4374 1 CVE

Moderate: file security update (Oracle Linux 8)

[5.33-20] - rebuild (#1954434) [5.33-18] - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) [5.33-17] - improve magic for script recognition and other changes (#1903531)

Nov 16, 2021
Medium max 5.5

ELSA-2021-4221 1 CVE

Moderate: container-tools:2.0 security update (Oracle Linux 8)

buildah [1.11.6-9.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-9] - update to the latest content of https://github.com/containers/buildah/tree/release-1.…

Nov 16, 2021
Medium max 6.5

ELSA-2021-4384 1 CVE

Moderate: bind security and bug fix update (Oracle Linux 8)

[32:9.11.26-6] - Use random entropy to generate unique TKEY identifiers (#1980916) [32:9.11.26-5] - Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1953056)

Nov 16, 2021
Medium max 5.9

ELSA-2021-4368 1 CVE

Moderate: openssh security update (Oracle Linux 8)

[8.0p1-10] - sshd -T requires -C when 'Match' is used in sshd_config (#1836277) [8.0p1-9] - CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation (#1882252) - Hostbased ssh authentication fails if session I…

Nov 16, 2021
Medium

ELSA-2021-4270 1 CVE

Moderate: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

rust-toolset [1.54.0-1] - Update to Rust and Cargo 1.54.0. [1.53.0-1] - Update to Rust and Cargo 1.53.0. rust [1.54.0-2] - Make std-static-wasm* arch-specific to avoid s390x. [1.54.0-1] - Update to 1.54.0. [1.53.0-2] - Use llvm-ranlib to fix wasm archives. [1…

Nov 16, 2021
Medium

ELSA-2021-4325 1 CVE

Moderate: lasso security and enhancement update (Oracle Linux 8)

[2.6.0-12] - Fix a dead code issue in the signature wrapping patch - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses [rhel-8] [2.6.0-11] - Bump release to force the package through OSCI as the pr…

Nov 16, 2021
Medium max 7.5

ELSA-2021-4409 1 CVE

Moderate: libgcrypt security and bug fix update (Oracle Linux 8)

[1.8.5-6] - Fix for CVE-2021-33560 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements for ChaCha20 and Poly1305 (#1855231) [1.8.5-5] - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)

Nov 16, 2021
Medium max 5.4

ELSA-2021-4213 5 CVEs

Moderate: php:7.4 security, bug fix, and enhancement update (Oracle Linux 8)

libzip php [7.4.19-1] - rebase to 7.4.19 #1944110

Nov 16, 2021
Medium

ELSA-2021-4393 1 CVE

Moderate: cups security and bug fix update (Oracle Linux 8)

[1:2.2.6-40] - 1955964 - PreserveJobHistory doesnt work with seconds - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8] [1:2.2.6-39] - 1941437 - cupsd doesnt log job ids when logging into journal - 1782216 - Print queue is pause…

Nov 16, 2021
Medium max 7.5

ELSA-2021-4424 2 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 8)

[1:1.1.1k-4] - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fai…

Nov 16, 2021
Medium max 5.5

ELSA-2021-4222 1 CVE

Moderate: container-tools:3.0 security and bug fix update (Oracle Linux 8)

buildah [1.19.9-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/c1d6200) - fixes CVE-2021-3602 - Related: #1977943

Nov 16, 2021
Medium max 5.7

ELSA-2021-4399 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-41.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-41] - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs Resolves: rhbz#1995234 [3.6.8-40] - Adjusted the postun scriptlets to enable …

Nov 16, 2021
Medium

ELSA-2021-4288 1 CVE

Moderate: libjpeg-turbo security and bug fix update (Oracle Linux 8)

[1.5.3-12] - Add missing license file (#1982572) [1.5.3-11] - Fix CVE-2020-17541 (#1972289)

Nov 16, 2021
Medium max 7.5

ELSA-2021-4319 3 CVEs

Moderate: compat-exiv2-026 security update (Oracle Linux 8)

[0.26-6] - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993283 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993246

Nov 16, 2021
Medium

ELSA-2021-4241 4 CVEs

Moderate: libtiff security and bug fix update (Oracle Linux 8)

[4.0.9-20] - Rebuild for fixed binutils (#1954437) [4.0.9-19] - Fix CVE-2020-35521 (#1945539) - Fix CVE-2020-35522 (#1945555) - Fix CVE-2020-35523 (#1945542) - Fix CVE-2020-35524 (#1945546)

Nov 16, 2021
Medium max 6.1

ELSA-2021-4361 1 CVE

Moderate: NetworkManager security, bug fix, and enhancement update (Oracle Linux 8)

[1.32.10-4.0.1] - add connectivity check via Oracle servers [Orabug: 32051972] - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3 [1:1.32.10-4] - revert unapproved patches part of 'cloud-setup' change (rh #1977984) [1:1.32.10-3] - …

Nov 16, 2021
Medium max 6.3

ELSA-2021-4364 4 CVEs

Moderate: binutils security update (Oracle Linux 8)

[2.30-108.0.2] - Forward-port the following update: [2.30-93.0.4 - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps - Backport test result fixes for new GCC-based CTF generation [Orabug: 33344570] - Reviewed-by: David Faust <david.faust@o…

Nov 16, 2021
Medium max 9.1

ELSA-2021-4358 3 CVEs

Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 8)

[2.28-164.0.1] - Merge of RH patches for ol8-u5 beta release Review-exception: Routine merge - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao <qing.zhao@oracle.com> - add Ampere emag t…

Nov 16, 2021
Medium max 5.3

ELSA-2021-4511 3 CVEs

Moderate: curl security and bug fix update (Oracle Linux 8)

[7.61.1-22] - fix STARTTLS protocol injection via MITM (CVE-2021-22947) - fix protocol downgrade required TLS bypass (CVE-2021-22946) [7.61.1-21] - fix TELNET stack contents disclosure again (CVE-2021-22925) - fix TELNET stack contents disclosure (CVE-2021-22…

Nov 16, 2021
Medium max 8.2

ELSA-2021-4517 2 CVEs

Moderate: vim security update (Oracle Linux 8)

[8.0.1763-16.0.1] - - Remove upstream references [Orabug: 31197557] [2:8.0.1763-16] - 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0] - 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c […

Nov 16, 2021
Medium

ELSA-2021-4251 14 CVEs

Moderate: openjpeg2 security update (Oracle Linux 8)

[2.4.0-4] - Fix Covscan defect [2.4.0-3] - Fix CVE-2021-3575 (#1969279) - Fix resource leak identified by Covscan [2.4.0-2] - Fix CVE-2021-29338 (#1951332) [2.4.0-1] - Rebase to 2.4.0 - Resolves: CVE-2018-5727 (#1538467) - Resolves: CVE-2018-5785 (#1538556) -…

Nov 16, 2021
Medium max 7.5

ELSA-2021-4324 1 CVE

Moderate: python-psutil security update (Oracle Linux 8)

[5.4.3-11] - Security fix for CVE-2019-18874: double free because of refcount mishandling Resolves: rhbz#1772014

Nov 16, 2021
Medium

ELSA-2021-4256 1 CVE

Moderate: graphviz security update (Oracle Linux 8)

[2.40.1-43] - Fixed races during pdf documentation build which should build docs correctly Related: CVE-2020-18032 [2.40.1-42] - Rebuilt, because pdf documentation were built incorrectly Related: CVE-2020-18032 [2.40.1-41] - Fixed buffer overflow in lib/commo…

Nov 16, 2021
Medium max 4.0

ELSA-2021-4153 1 CVE

Moderate: dnsmasq security and bug fix update (Oracle Linux 8)

[2.79-19] - Correct typo in man page (#1947039) [2.79-18] - Properly randomize outgoing ports also with bound interface (CVE-2021-3448) [2.79-17] - Fix sporadic bind-dynamic failures (#1887649) [2.79-16] - Fix network errors on queries both from ipv4 and ipv6…

Nov 16, 2021
Medium max 6.5

ELSA-2021-4292 7 CVEs

Moderate: squid:4 security, bug fix, and enhancement update (Oracle Linux 8)

libecap squid [7:4.15-1] - new version 4.15 - Resolves: #1964384 - squid:4 rebase to 4.15 [7:4.11-5] - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling

Nov 16, 2021
Medium

ELSA-2021-4191 7 CVEs

Moderate: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

libguestfs-winsupport [8.2] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) libguestfs [1.40.2-28.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 293193…

Nov 16, 2021
Medium max 7.5

ELSA-2021-4160 7 CVEs

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

mod_wsgi [4.7.1-4] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [4.7.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [4.7.1-2] - Rebuilt for Python 3.9 [4.7.1-1] - update to 4.7.1 (#1721376) numpy [1.…

Nov 16, 2021