Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 6.7
    ELSA-2021-1611 2 CVEs

    Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)

    [239-45.0.1] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orab…

  • Medium
    ELSA-2021-1783 1 CVE

    Moderate: tigervnc security, bug fix, and enhancement update (Oracle Linux 8)

    [1.11.0-6] - Use GNOME as default session Resolves: bz#1853608 [1.11.0-5] - Make sure we log properly output to journal (actually log to syslog) Resolves: bz#1841537 [1.11.0-4] - Make sure we log properly output to journal Resolves: bz#1841537 [1.11.0-3] - vn…

  • Medium max 6.5
    ELSA-2021-1631 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 8)

    [1.24.2-5.0.1] - set RECENT_DATE to 01/30/2019 to make checks happy [Orabug: 30228991] [1.24.2-5] - Security fix for CVE-2020-26137 Resolves: rhbz#1883889

  • Medium
    ELSA-2021-1791 4 CVEs

    Moderate: spice-vdagent security and bug fix update (Oracle Linux 8)

    [0.20.0-3] - Fix mouse problems in multi-monitor environments under Wayland Resolves: rhbz#1790904 rhbz#1824610 [0.20.0-2] - Resolves: CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653

  • Medium max 5.5
    ELSA-2021-1647 3 CVEs 1 exploited

    Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

    openchange [2.3-27.0.1] - Use ldconfig_scriptlets [2.3-27] - Rebuild for newer samba samba [4.13.3-3] - resolves: #1924615 - Fix a memcache bug when cache is full - resolves: #1924571 - Ensure that libwbclient has been updated before restarting services [4.13…

  • Medium max 9.8
    ELSA-2021-1859 2 CVEs

    Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

    [7.3.6-2] - change working dir to in grafana-cli wrapper (fixes Red Hat BZ #1916083) - add pcp-redis-datasource to allow_loading_unsigned_plugins config option [7.3.6-1] - update to 7.3.6 tagged upstream community sources, see CHANGELOG - remove dependency on…

  • Medium
    ELSA-2021-1881 1 CVE

    Moderate: poppler and evince security, bug fix, and enhancement update (Oracle Linux 8)

    evince [3.28.4-11] - Add remaining translations of string 'Reset form' - Resolves: #1896006 [3.28.4-10] - Add available translations of string 'Reset form' - Resolves: #1896006 [3.28.4-9] - Ship evince-devel - Resolves: #1919423 [3.28.4-8] - Handle ResetForm …

  • Medium
    ELSA-2021-1887 2 CVEs

    Moderate: dovecot security and bug fix update (Oracle Linux 8)

    [1:2.3.8-9] - fix CVE-2020-24386 IMAP hibernation function allows mail access (#1913534) [1:2.3.8-8] - fix CVE-2020-25275 denial of service via mail MIME parsing (#1914019) [1:2.3.8-7] - change run directory from /var/run to /run (#1805947) [1:2.3.8-6] - fix …

  • Medium max 6.1
    ELSA-2021-1898 1 CVE

    Moderate: python-lxml security update (Oracle Linux 8)

    [4.2.3-2] - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz#1901633

  • Medium
    ELSA-2021-1811 5 CVEs

    Moderate: libvncserver security update (Oracle Linux 8)

    [0.9.11-17] - Fix CVE-2020-25708 Resolves: #1898078 [0.9.11-16] - Fix CVE-2019-20839 Resolves: #1851032 - Fix CVE-2018-21247 Resolves: #1852516 - Fix CVE-2020-14405 Resolves: #1860527 - Fix CVE-2020-14397 Resolves: #1861152

  • Medium
    ELSA-2021-1751 2 CVEs

    Moderate: mailman:2.1 security update (Oracle Linux 8)

    [3:2.1.29-11] - Fixes for CVE-2020-12108 and CVE-2020-15011

  • Medium max 9.8
    ELSA-2021-1761 4 CVEs

    Moderate: python27:2.7 security and bug fix update (Oracle Linux 8)

    python2 [2.7.18-4.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [2.7.18-4] - Security fix for CVE-2021-3177 Resolves: rhbz#1919163 [2.7.18-3] - Fixes for bundling prefix=/app build in gimp/inkscape containers Resolves: rhbz#1907592 [2…

  • Medium
    ELSA-2021-1744 1 CVE

    Moderate: sane-backends security update (Oracle Linux 8)

    [1.0.27-22] - related 1852663 - needed to rebuild due infrastructure error [1.0.27-21] - 1852663, 1848097 - NULL pointer dereference in sanei_epson_net_read function [1.0.27-20] - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img - 185…

  • Medium max 7.5
    ELSA-2021-1593 1 CVE

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-8] - Add recursion limit for ASN.1 indefinite lengths (CVE-2020-28196) - Resolves: #1906492 [1.18.2-7] - Document -k option in kvno(1) synopsis - Resolves: #1869055 [1.18.2-6] - Enable MD5 override for FIPS RADIUS - Resolves: #1872689 [1.18.2-5.2] - U…

  • Medium
    ELSA-2021-1756 1 CVE

    Moderate: qt5-qtbase security and bug fix update (Oracle Linux 8)

    [5.12.5-8] - Build against system xkb and openssl 1.1 Resolves: bz#1882375 [5.12.5-7] - Fix buffer overflow in XBM parser Resolves: bz#1870364

  • Medium
    ELSA-2021-1842 2 CVEs

    Moderate: raptor2 security and bug fix update (Oracle Linux 8)

    [2.0.15-16] - Resolves: rhbz#1900904 CVE-2020-25713 raptor2: malformed input file can lead to a segfault [2.0.15-15] - Resolves: rhbz#1896534 CVE-2017-18926 raptor: heap-based buffer overflow [2.0.15-14] - Resolves: rhbz#1896340 Suppress documentation in Flat…

  • Medium
    ELSA-2021-1789 1 CVE

    Moderate: gssdp and gupnp security update (Oracle Linux 8)

    gssdp [1.0.5-1] + gssdp-1.0.5-1 - Update to 1.0.5 - Fix SUBSCRIBE misbehaviour - Resolves: #1861928 gupnp [1.0.6-1] + gupnp-1.0.6-1 - Update to 1.0.6 - Fix SUBSCRIBE misbehaviour - Resolves: #1846589

  • Medium max 5.3
    ELSA-2021-1702 1 CVE

    Moderate: brotli security update (Oracle Linux 8)

    [1.0.6-3] - Resolves: CVE-2020-8927

  • Medium
    ELSA-2021-1678 2 CVEs

    Moderate: perl:5.26 security and bug fix update (Oracle Linux 8)

    [4:5.26.3-419] - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) [4:5.26.3-418] - Fix CVE-2020-12723 (bug #1839279)

  • Medium max 6.7
    ELSA-2021-1582 1 CVE

    Moderate: cpio security update (Oracle Linux 8)

    [2.12-10] - Fixed improper input validation when writing tar header fields (#1766223) [2.12-9] - Extract: retain times for symlinks (#1487673)

  • Medium
    ELSA-2021-1597 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-9.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-9] - Fix CVE-2020-24977 (#1878252)

  • Medium
    ELSA-2021-1627 3 CVEs

    Moderate: trousers security, bug fix, and enhancement update (Oracle Linux 8)

    [0.3.15-1] - Rebase to 0.3.15 - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414

  • Medium max 8.6
    ELSA-2021-1598 1 CVE

    Moderate: bluez security update (Oracle Linux 8)

    [5.52-4] + bluez-5.52-4 - Fixing (#1885378) [5.52-3] + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. [5.52-2] + bluez-5.52-2 - Fixing (#1885378) [5.52-1] + bluez-5.52-1 - Fixing (#1830397)

  • Medium max 8.8
    ELSA-2021-1586 6 CVEs

    Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

    accountsservice [0.6.55-1] - Rebase to 0.6.55 Resolves: #1846376 atkmm [2.24.2-7] - Rebuild for annobin fixes - Resolves: rhbz#1703969 cairomm [1.12.0-8] - Rebuild for the annobin fixes - Resolves: rhbz#1703971 chrome-gnome-shell [10.1-7] - Disable updates su…

  • Medium
    ELSA-2021-1600 3 CVEs

    Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)

    [0.20.0-4] - Use file cache by default (#1892810) - Avoid calloc with 0 argument (#1895401) [0.20.0-3] - Support PIN change for HID Alt tokens (#1830901) - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572 - Fix right padding of token labels of some cards…

  • Medium max 7.8
    ELSA-2021-1804 9 CVEs

    Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update (Oracle Linux 8)

    egl-wayland [1.1.5-3] - Add upstream patch to address rhbz#1842473 [1.1.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.1.5-1] - Update to 1.1.5 libdrm [2.4.103-1] - Update to 2.4.103 libglvnd [1.3.2-1] - Update to 1.3.2 release li…

  • Medium
    ELSA-2021-1686 1 CVE

    Moderate: wpa_supplicant security, bug fix, and enhancement update (Oracle Linux 8)

    [1:2.9-5] - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803) - Fix buffer overflow when processing P2P group information (CVE-2021-0326) [1:2.9-4] - enable WPA-EAP-SUITE-B-192 (rh #1916394) [1:2.9-3] - fix p2p_listen unexpectedly s…

  • Medium
    ELSA-2021-1609 3 CVEs

    Moderate: p11-kit security, bug fix, and enhancement update (Oracle Linux 8)

    [0.23.22-1] - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363) - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff - Add xsltproc to BR [0.23.21-4] - Fix realloc usage on proxy clean…

  • Medium
    ELSA-2021-1574 1 CVE

    Moderate: NetworkManager and libnma security, bug fix, and enhancement update (Oracle Linux 8)

    libnma [1.8.30-2] - Rebuild with new gtk-doc to fix multilib issues (rh #1853152) NetworkManager [1.30.0-7.0.1] - add connectivity check via Oracle servers [Orabug: 32051972] - Disable the build of NetworkManager-config-connectivity-* subpackage for 8.3 [1:1.…

  • Medium max 9.1
    ELSA-2021-1608 2 CVEs

    Moderate: python-cryptography security, bug fix, and enhancement update (Oracle Linux 8)

    [3.2.1-4] - CVE-2020-36242: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. - Resolves: rhbz#1926528 [3.2.1-3] - Conflict with non…

  • Medium max 9.8
    ELSA-2021-1633 4 CVEs

    Moderate: python3 security update (Oracle Linux 8)

    [3.6.8-37.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-37] - Fix for CVE-2021-23336 Resolves: rhbz#1928904 [3.6.8-36] - Fix for CVE-2021-3177 Resolves: rhbz#1918168 [3.6.8-35] - New options -a and -k for pathfix.py script back…

  • Medium
    ELSA-2021-1852 26 CVEs

    Moderate: ghostscript security, bug fix, and enhancement update (Oracle Linux 8)

    [9.27-1] - Rebase to 9.27 - Resolves: rhbz#1874523

  • Medium max 7.5
    ELSA-2021-1585 5 CVEs

    Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 8)

    [2.28-151.0.1.el8_4] - merge RH patches for ol8-u4 release Review-exception: Patch merge - Provide glibc.pthread.mutex_spin_count tunable for pthread adaptive - spin mutex Orabug: 27982358. Reviewed-by: Qing Zhao <qing.zhao@oracle.com> - add Ampere emag to tu…

  • Medium max 7.5
    ELSA-2021-1610 4 CVEs

    Moderate: curl security and bug fix update (Oracle Linux 8)

    [7.61.1-18] - http: send payload when (proxy) authentication is done (#1918692) - curl: Inferior OCSP verification (CVE-2020-8286) - libcurl: FTP wildcard stack overflow (CVE-2020-8285) - curl: trusting FTP PASV responses (CVE-2020-8284) [7.61.1-17] - validat…

  • Medium
    ELSA-2021-1809 3 CVEs

    Moderate: httpd:2.4 security, bug fix, and enhancement update (Oracle Linux 8)

    httpd [2.4.37-39.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-39] - prevent htcacheclean from while break when first file processed [2.4.37-38] - Resolves: #1918741 - T…

  • Medium max 3.5
    ELSA-2021-1849 8 CVEs

    Moderate: freerdp security, bug fix, and enhancement update (Oracle Linux 8)

    [2:2.2.0-1] - Update to 2.2.0 (rhbz#1881971)

  • Medium
    ELSA-2021-1746 2 CVEs

    Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

    delve [1.5.0-2.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.5.0-2] - Add golang-1.15.4 related patch - Resolves: rhbz#1901189 [1.5.0-1] - Rebase to 1.5.0 - Related: rhbz#1870531 golang [1.15.7-1] - Rebase to 1.15.7 - Resolves: rhbz#18…

  • Medium
    ELSA-2021-1853 11 CVEs

    Moderate: unbound security, bug fix, and enhancement update (Oracle Linux 8)

    [1.7.3-15] - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key - Resolves: rhbz#1714175 - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting - Resolves: rhbz#1842837 - Enable additional logging in unbound…

  • Medium
    ELSA-2021-1581 2 CVEs

    Moderate: sqlite security update (Oracle Linux 8)

    [3.26.0-13] - enabled fts3conf.test on s390x and ppc64 architectures [3.26.0-12] - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208)

  • Medium max 7.5
    ELSA-2021-1775 1 CVE

    Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8)

    apache-commons-collections jss [4.8.1-2] - Bug 1932803 - HSM + FIPS: CMCRequest with a shared secret resulting in error [4.8.1-1] - Rebase to upstream JSS v4.8.1 - Red Hat Bugilla #1908541 - jss broke SCEP - missing PasswordChallenge class - Red Hat Bugilla #…