Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.8

ELSA-2021-4162 10 CVEs

Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

Nov 16, 2021
Medium

ELSA-2020-5453 1 CVE

Moderate: pacemaker security update (Oracle Linux 7)

[1.1.23-1.0.1] - Upstream reference in pacemaker crm_report binary [Orabug: 31611300] [1.1.23-1.1] - Prevent ACL bypass (CVE-2020-25654) - Resolves: rhbz#1892140

Nov 5, 2021
Medium

ELSA-2021-4033 1 CVE

Moderate: binutils security update (Oracle Linux 7)

[2.27-44.base.0.3.1] - Forward-port patches to 2.27-44.base.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.27-44.base.0.2.1] - Forward-port patches to 2.27-44.base.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.27-44.base.1] …

Nov 2, 2021
Medium max 8.8

ELSA-2021-4097 1 CVE 1 exploited

Moderate: webkit2gtk3 security and bug fix update (Oracle Linux 8)

[2.30.4-3] - Fix crashing on aarch64 - Resolves: #2010825 [2.30.4-2] - Fix CVE-2021-30858 - Resolves: #2006427

Nov 2, 2021
Medium

ELSA-2021-4060 4 CVEs

Moderate: libsolv security update (Oracle Linux 8)

[0.7.11-3] - Backport patch: testcase_read: error out if repos are added or the system is changed too late

Nov 2, 2021
Medium

ELSA-2021-4058 1 CVE

Moderate: samba security update (Oracle Linux 8)

[4.13.3-5] - resolves: #2003507 - Fix CVE-2021-20254

Nov 2, 2021
Medium

ELSA-2021-4057 1 CVE

Moderate: python3 security update (Oracle Linux 8)

[3.6.8-39.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-39] - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs Resolves: rhbz#1995234

Nov 2, 2021
Medium max 7.5

ELSA-2021-4059 2 CVEs

Moderate: curl security update (Oracle Linux 8)

[7.61.1-18.el8_4.2] - fix STARTTLS protocol injection via MITM (CVE-2021-22947) - fix protocol downgrade required TLS bypass (CVE-2021-22946)

Nov 2, 2021
Medium max 9.8

ELSA-2021-3810 1 CVE

Moderate: libxml2 security update (Oracle Linux 7)

[2.9.1-6.0.3] - Rebuild to include attribution logo [Orabug: 33024216] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.1-6.6] - Fix CVE-2016-4658 (#1966916)

Oct 13, 2021
Medium max 7.5

ELSA-2021-3798 2 CVEs

Moderate: openssl security update (Oracle Linux 7)

[1.0.2k-22] - fix CVE-2021-23841 openssl: NULL pointer dereference in X509_issuer_and_serial_hash() - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate - Resolves: rhbz#1932132, rhbz#1932126

Oct 13, 2021
Medium

ELSA-2021-3576 2 CVEs

Moderate: krb5 security update (Oracle Linux 8)

[1.18.2-8.3] - Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997600 [1.18.2-8.2] - Rebuild for rpminspect; no code changes - Resolves: #1983728 [1.18.2-8.1] - Fix KDC null deref on bad encrypted challenge (CVE-2021-36222) - R…

Sep 23, 2021
Medium max 7.2

ELSA-2021-3590 139 CVEs

Moderate: mysql:8.0 security, bug fix, and enhancement update (Oracle Linux 8)

mysql [8.0.26-1] - Update to MySQL 8.0.26 [8.0.25-1] - Update to MySQL 8.0.25 [8.0.24-1] - Update to MySQL 8.0.24 - Upstreamed patch: mysql-main-cast.patch [8.0.23-1] - Update to MySQL 8.0.23 - Created mysql-fix-includes-robin-hood.patch - Created mysql-main-…

Sep 23, 2021
Medium

ELSA-2021-3585 1 CVE

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

go-toolset [1.15.14-2] - Revert to Go 1.15.14 - Related: rhbz#1995126 - Reverts: rhbz#1994087 [1.15.15-1] - Rebase to Go 1.15.15 - Resolves: rhbz#1994087 - Add reject leading zeros patch - Resolves: rhbz#1994010

Sep 22, 2021
Medium

ELSA-2021-3572 1 CVE

Moderate: nss and nspr security, bug fix, and enhancement update (Oracle Linux 8)

nspr [4.32.0-1] - Update to NSPR 4.32 [4.31.0-1] - Update to NSPR 4.31 [4.30.0-1] - Update to NSPR 4.30 nss [3.67.0-6] - Fix ssl alert issue [3.67.0-5] - Fix issue with reading databases that were updated using unpatched versions of nss [3.67.0-4] - Better fi…

Sep 21, 2021
Medium max 6.5

ELSA-2021-3582 3 CVEs

Moderate: curl security update (Oracle Linux 8)

[7.61.1-18.el8_4.1] - fix bad connection reuse due to flawed path name checks (CVE-2021-22924) - disable metalink support to fix the following vulnerabilities CVE-2021-22923 - metalink download sends credentials CVE-2021-22922 - wrong content via metalink not…

Sep 21, 2021
Medium

ELSA-2021-3548 1 CVE

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-305.19.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Sep 16, 2021
Medium

ELSA-2021-3438 1 CVE

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.42.2.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Sep 7, 2021
Medium max 6.5

ELSA-2021-3325 1 CVE

Moderate: bind security update (Oracle Linux 7)

[32:9.11.4-26.P2.7] - Apply again patch 172, got removed by mistake [32:9.11.4-26.P2.6] - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)

Sep 1, 2021
Medium max 7.5

ELSA-2021-3073 3 CVEs

Moderate: nodejs:12 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:12.22.3-2] - Resolves: RHBZ#1980031, RHBZ#1978201 - Fix typo, BR systemtap-sdt-level always, remove y18n patch [1:12.22.3-1] - Resolves: RHBZ#1980031, RHBZ#1978201 - Resolves #1952915 - Resolves CVE-2021-22918(libuv), use system cipher list nodejs-n…

Aug 12, 2021
Medium max 5.5

ELSA-2021-3081 1 CVE

Moderate: cloud-init security update (Oracle Linux 8)

[20.3-10.0.1] - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938] - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938] - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30…

Aug 12, 2021
Medium

ELSA-2021-3063 7 CVEs

Moderate: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

rust [1.52.1-1] - Update to 1.52.1. Includes security fixes for CVE-2020-36323, CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162. [1.51.0-1] - Update to 1.51.0. Update to 1.51.0. Includes security fixes for CVE-2021-28875 and CVE-2021-28877.…

Aug 12, 2021
Medium max 5.9

ELSA-2021-3076 4 CVEs

Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

golang [1.15.14-1] - Rebase to go-1.15.14-1-openssl-fips - Resolves: rhbz#1982287 - Addresses CVE-2021-34558 [1.15.13-4] - Related: rhbz#1978567 go-toolset [1.15.14-1] - Rebase to go-1.15.14-1-openssl-fips - Resolves: rhbz#1982287 - Addresses CVE-2021-34558 […

Aug 12, 2021
Medium max 7.5

ELSA-2021-3074 3 CVEs

Moderate: nodejs:14 security, bug fix, and enhancement update (Oracle Linux 8)

nodejs [1:14.17.3-2] - Resolves: RHBZ#1980032, RHBZ#1978203 - Resolves RHBZ#1842826 - Don't use patch3 [1:14.17.3-1] - Resolves: RHBZ#1980032, RHBZ#1978203 - Resolves RHBZ#1842826 - Resolves CVE-2021-22918(libuv), use system cipher list [1:14.16.0-3] - Resolv…

Aug 12, 2021
Medium

ELSA-2021-3058 1 CVE

Moderate: glib2 security update (Oracle Linux 8)

[2.56.4-10.1] - Fix CVE-2021-27218 Resolves: #1974888

Aug 11, 2021
Medium max 7.5

ELSA-2021-2588 9 CVEs

Moderate: ruby:2.6 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [2.6.7-107] - Upgrade to Ruby 2.6.7. Resolves: rhbz#1952627 - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address containing leading zero Resolves: rhbz#1954968 - Fix: Rubygem-bundler: Don't use insecure tmp directory as home allows …

Jul 7, 2021
Medium max 7.5

ELSA-2021-2584 2 CVEs

Moderate: ruby:2.7 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [2.7.3-136] - Upgrade to Ruby 2.7.3. Resolves: rhbz#1951999 - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address contains leading zero Resolves: rhbz#1952000 [2.7.2-135] - Upgrade to Ruby 2.7.2. - Avoid possible timeout errors in T…

Jul 7, 2021
Medium max 8.8

ELSA-2021-2569 5 CVEs

Moderate: libxml2 security update (Oracle Linux 8)

[2.9.7-9.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-9.2] - Fix CVE-2021-3541 (#1958783) [2.9.7-9.1] - Fix CVE-2021-3516 (#1956975) - Fix CVE-2021-3517 (#1957000) - Fix CVE-2021-3518 (#19570…

Jul 3, 2021
Medium max 9.8

ELSA-2021-2583 1 CVE

Moderate: python38:3.8 and python38-devel:3.8 security update (Oracle Linux 8)

PyYAML [5.4.1-1] - Rebase to version 5.4.1 to fix CVE-2020-14343 - Resolves: rhbz#1860466

Jul 2, 2021
Medium max 7.5

ELSA-2021-2587 8 CVEs

Moderate: ruby:2.5 security, bug fix, and enhancement update (Oracle Linux 8)

ruby [2.5.9-107] - Update to Ruby 2.5.9. * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed Resolves: rhbz#1952626 - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address contains leading zero Resolves: rhbz#1955010

Jul 2, 2021
Medium

ELSA-2021-2595 1 CVE

Moderate: 389-ds:1.4 security and bug fix update (Oracle Linux 8)

[1.4.3.16-16] - Bump version to 1.4.3.16-16 - Resolves: Bug 1972738 - Changelog cache can upload updates from a wrong starting point (CSN) - Resolves: Bug 1972721 - Large updates can reset the CLcache to the beginning of the changelog [1.4.3.16-15] - Bump ver…

Jul 2, 2021
Medium

ELSA-2021-2591 1 CVE

Moderate: edk2 security update (Oracle Linux 8)

[20200602gitca407c7246bf-4.el8_4.1] - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1952953] - Resolves: bz#1952953 (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8] [rhel-8.4.0.z])

Jun 30, 2021
Medium

ELSA-2021-2575 1 CVE

Moderate: lz4 security update (Oracle Linux 8)

[1.8.3-3] - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520

Jun 30, 2021
Medium

ELSA-2021-2574 1 CVE

Moderate: rpm security update (Oracle Linux 8)

[4.14.3-14] - Be more careful about copying data from signature header (#1958477) - Fixes CVE-2021-20271

Jun 30, 2021
Medium

ELSA-2021-2318 1 CVE

Moderate: hivex security update (Oracle Linux 7)

[1.3.10-6.11] - Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500

Jun 10, 2021
Medium

ELSA-2021-2313 1 CVE

Moderate: samba security and bug fix update (Oracle Linux 7)

[4.10.16-15] - resolves: #1949444 - Fix CVE-2021-20254 [4.10.16-14] - resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services

Jun 9, 2021
Medium

ELSA-2021-2322 1 CVE

Moderate: qemu-kvm security update (Oracle Linux 7)

[1.5.3-175.el7_9.4] - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449] - Resolves: bz#1917449 (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])

Jun 9, 2021
Medium

ELSA-2021-2323 1 CVE

Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

[1.3.10.2-12] - Bump version to 1.3.10.2-12 [1.3.10.2-11] - Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the bi…

Jun 9, 2021
Medium max 6.9

ELSA-2021-1846 1 CVE 1 exploited

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8)

bind-dyndb-ldap [11.6-2] - Rebuild against bind 9.11.26 - Resolves: rhbz#1904612 [11.6-1] - New upstream release - Resolves: rhbz#1891735 ipa [4.9.2-3.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.2-3] - ipa-client-install dis…

May 25, 2021
Medium max 9.8

ELSA-2021-1879 3 CVEs

Moderate: python38:3.8 security update (Oracle Linux 8)

python38 [3.8.6-3] - Security fix for CVE-2021-3177 Resolves: rhbz#1919161 [3.8.6-2] - Add support for upstream architecture names https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names Resolves: rhbz#1868006 [3.8.6-1] - Update to 3.8.6 - S…

May 25, 2021
Medium max 7.5

ELSA-2021-1796 2 CVEs

Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

cockpit-podman [29-2] - fix gating test failure for cockpit-podman - Related: #1914884 [29-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/29 - Related: #1883490 conmon [2:2.0.26-1] - update to https://github.com/containers/conmo…

May 25, 2021