Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

  • Medium max 7.5
    ELSA-2020-4479 3 CVEs

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-8.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-8] - Fix CVE-2019-19956 (#1793001) - Fix CVE-2020-7595 (#1799786) - Fix CVE-2019-20388 (#1810058)

  • Medium
    ELSA-2020-4483 5 CVEs

    Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)

    [0.20.0-2] - Unbreak different CardOS 5 configurations supporting raw RSA (#1830856) [0.20.0-1] - Rebase to current upstream release (#1810660)

  • Medium
    ELSA-2020-4625 4 CVEs

    Moderate: spamassassin security update (Oracle Linux 8)

    [3.4.2-10] - Fixed CVE-2018-11805 - Resolves: rhbz#1787514 - Fixed CVE-2020-1930 - Resolves: rhbz#1820649 - Fixed CVE-2020-1931 - Resolves: rhbz#1820650 [3.4.2-9] - Fix CVE-2019-12420 - Resolves: rhbz#1812977 [3.4.2-8] - Removed the obsolete SOUGHT channel fo…

  • Medium
    ELSA-2020-4659 3 CVEs

    Moderate: gd security update (Oracle Linux 8)

    * Fri Mar 27 2020 fjanus@redhat.com - 2.2.5-7 - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone Resolves: RHBZ#1811788 - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() Res…

  • Medium
    ELSA-2020-4627 11 CVEs

    Moderate: SDL security update (Oracle Linux 8)

    [1.2.15-38] - fix CVEs - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212, rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216, rhbz#1716217, rhbz#1716218, rhbz#1716219

  • Medium max 8.6
    ELSA-2020-4690 5 CVEs

    Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update (Oracle Linux 8)

    qt5-qtbase [5.12.5-6] - OpenSSL: handle SSL_shutdowns errors properly Resolves: bz#1851538 [5.12.5-5] - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz#1814739 Resolves: bz#1814683 - Fix: XML…

  • Medium
    ELSA-2020-4508 1 CVE

    Moderate: libsolv security, bug fix, and enhancement update (Oracle Linux 8)

    [0.7.11-1] - Update to 0.7.11 - selected bug fixes: * support arch<->noarch package changes when creating patch conflicts from the updateinfo data * also support other rpm database types * fixed solv_zchunk decoding error if large chunks are used * treat retr…

  • Medium
    ELSA-2020-4650 2 CVEs

    Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 8)

    [19.4-11.0.1] - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672] - Update OCI Datasource to support IMDSv2 - limit permissions [Orabug: 31352433] - Changes to ignore all enslaved interfaces [Orabug: 30092148] - Fix s…

  • Medium
    ELSA-2020-4805 1 CVE

    Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)

    [20200602gitca407c7246bf-3.el8] - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718] - Resolves: bz#1861718 (Very slow boot when overcommitting CPU) [20200602gitca407c7246bf-2.el8] - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-…

  • Medium max 7.5
    ELSA-2020-4807 1 CVE

    Moderate: prometheus-jmx-exporter security update (Oracle Linux 8)

    [0.12.0-6] - Fix CVE-2017-18640 by using updated snakeyaml.

  • Medium max 7.5
    ELSA-2020-4484 2 CVEs

    Moderate: expat security update (Oracle Linux 8)

    [2.2.5-4] - add security fixes for CVE-2018-20843, CVE-2019-15903

  • Medium max 7.8
    ELSA-2020-4599 1 CVE

    Moderate: curl security and bug fix update (Oracle Linux 8)

    [7.61.1-14] - avoid overwriting a local file with -J (CVE-2020-8177) [7.61.1-13] - load built-in openssl engines (#1854369)

  • Medium max 7.5
    ELSA-2020-4689 1 CVE

    Moderate: openwsman security update (Oracle Linux 8)

    [2.6.5-7] - Fix CVE-2019-3833 Resolves: #1687865 [2.6.5-6] - Fix name of Patch6

  • Medium max 9.8
    ELSA-2020-4641 5 CVEs

    Moderate: python38:3.8 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2020-4694 3 CVEs

    Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2020-4654 2 CVEs

    Moderate: python27:2.7 security update (Oracle Linux 8)

  • Medium
    ELSA-2020-4712 1 CVE

    Moderate: subversion:1.10 security update (Oracle Linux 8)

  • Medium max 9.9
    ELSA-2020-4743 18 CVEs

    Moderate: squid:4 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 6.9
    ELSA-2020-4670 10 CVEs

    Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8)

    bind-dyndb-ldap [11.3-1] - New upstream release - Resolves: rhbz#1845211 ipa [4.8.7-12.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.8.7-12] - Require selinux sub package in the proper version Related: RHBZ#1868432 - SELinux: do…

  • Medium max 7.8
    ELSA-2020-4431 46 CVEs

    Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-240.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 2…

  • Medium max 6.9
    ELSA-2020-4847 13 CVEs 1 exploited

    Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 7.5
    ELSA-2020-4676 6 CVEs

    Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 5.3
    ELSA-2020-4350 7 CVEs

    Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

    [1:1.8.0.272.b10-1] - Add backport of JDK-8215727: 'Restore JFR thread sampler loop to old / previous behaviour' - Resolves: rhbz#1876665 [1:1.8.0.272.b10-0] - Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release …

  • Medium max 5.3
    ELSA-2020-4347 7 CVEs

    Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.272.b10-1] - Add backport of JDK-8215727: 'Restore JFR thread sampler loop to old / previous behaviour' - Resolves: rhbz#1876665 [1:1.8.0.272.b10-0] - Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release …

  • Medium max 5.3
    ELSA-2020-4307 7 CVEs

    Moderate: java-11-openjdk security update (Oracle Linux 7)

    [1:11.0.9.11-0.0.1] - link atomic for ix86 build [1:11.0.9.11-0] - Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665 [1:11.0.9.11-0] - Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of J…

  • Medium max 5.3
    ELSA-2020-4305 7 CVEs

    Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)

    [1:11.0.9.11-0] - Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has …

  • Medium max 7.3
    ELSA-2020-4272 4 CVEs

    Moderate: nodejs:12 security and bug fix update (Oracle Linux 8)

    nodejs [1:12.18.4-2] - Resolves: RHBZ#1883966 - nodejs-devel not installable due to missing brotli - Some spec fixes [12.18.4-1] - Rebase to 12.18.4 nodejs-nodemon nodejs-packaging

  • Medium
    ELSA-2020-4072 1 CVE

    Moderate: libcroco security update (Oracle Linux 7)

    [0.6.12-6] - Rebuild with 7.9-z target Related: #1835951 [0.6.12-5] - Fix CVE-2020-12825 Resolves: #1835951

  • Medium
    ELSA-2020-4076 10 CVEs

    Moderate: nss and nspr security, bug fix, and enhancement update (Oracle Linux 7)

    nspr [4.25.0-2] - Rebuild to fix wrong dist tag [4.25.0-1] - Rebase to NSPR 4.25 nss [3.53.1-3] - Disable dh timing test because it's unreliable on s390 (from Bob Relyea) - Explicitly enable upgradedb/sharedb test cycles [3.53.1-2] - Disable TLS 1.3 by defaul…

  • Medium max 6.5
    ELSA-2020-4026 5 CVEs

    Moderate: mariadb security and bug fix update (Oracle Linux 7)

    [1:5.5.68-1] - Rebase to 5.5.68 This is the last upstream release. This major version reached upstream EOL - Related to: rhbz#1834835 [1:5.5.67-2] - Resolves: rhbz#1689827 [1:5.5.67-1] - Rebase to 5.5.67 - Related to: rhbz#1834835 - CVEs fixed: rhbz#1821939 C…

  • Medium max 6.1
    ELSA-2020-3911 1 CVE

    Moderate: python security update (Oracle Linux 7)

    [2.7.5-89.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-89] - Security fix for CVE-2019-16935 Resolves: rhbz#1797998 [2.7.5-88] - Security fix for CVE-2019-16056 Resolves: rhbz#1750773 [2.7.5-87] - Fix CVE-2018-20852 Resolves: r…

  • Medium
    ELSA-2020-4040 6 CVEs

    Moderate: libexif security, bug fix, and enhancement update (Oracle Linux 7)

    [0.6.22-1] - Upgrade to 0.6.22 - Resolves: #1841316

  • Medium
    ELSA-2020-3873 2 CVEs

    Moderate: libsrtp security and bug fix update (Oracle Linux 7)

    [1.4.4-11.20101004cvs] - Fix global buffer overflow Resolves: bz#1301202 - Fix improper handling of CSRC count and extension header length in RTP header Resolves: bz#1323705 - Fix buffer overflow in application of crypto profiles Resolves: bz#1141897

  • Medium max 6.5
    ELSA-2020-3888 2 CVEs

    Moderate: python3 security update (Oracle Linux 7)

    [3.6.8-17.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-17] - Overhaul pythons FIPS mode support Resolves: rhbz#1788459 [3.6.8-16] - Security fix for CVE-2020-8492 Resolves: rhbz#1810616 [3.6.8-15] - Security fix for CVE-2019-1…

  • Medium max 4.6
    ELSA-2020-3898 3 CVEs

    Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 7)

    [19.4-7.0.3] - Add conditional restart of NetworkManager for cloud-final. [Orabug: 31965645] - Correct postinstall upgrade cloud-init.service mismerge order. [19.4-7.0.1] - Add Oracle Linux variant to known distros - Add cloud-init hotplug event handling supp…

  • Medium
    ELSA-2020-3877 2 CVEs

    Moderate: audiofile security update (Oracle Linux 7)

    [1:0.3.6-9] - Apply security patches. CVE-2018-17095, CVE-2018-13440 - Resolves: rhbz#1600369, rhbz#1601014, rhbz#1637128 [1:0.3.6-8] - Escape macros in %changelog [1:0.3.6-7] - Merge upstream pull requests #42,#43,#44 from Agostino Sarubbo to fix security is…

  • Medium
    ELSA-2020-3902 2 CVEs

    Moderate: libtiff security update (Oracle Linux 7)

    [4.0.3-35] - Fix two resource leaks Related: #1771371 [4.0.3-34] - Fix CVE-2019-17546 Resolves: #1771371 [4.0.3-33] - Fix CVE-2019-14973 Resolves: #1755704

  • Medium
    ELSA-2020-3978 2 CVEs

    Moderate: glib2 and ibus security and bug fix update (Oracle Linux 7)

    glib2 [2.56.1-7] - Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099 [2.56.1-6] - Backport patches for GDBus auth Resolves: #1777221 ibus [1.5.17-11] - Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows

  • Medium max 7.5
    ELSA-2020-3944 1 CVE

    Moderate: unoconv security update (Oracle Linux 7)

    [0.6-8] - Resolves: rhbz#1803831 CVE-2019-17400

  • Medium max 4.3
    ELSA-2020-4003 1 CVE

    Moderate: NetworkManager security and bug fix update (Oracle Linux 7)

    [1:1.18.8-1] - Update to 1.18.8 relase - ifcfg-rh: handle '802-1x.{,phase2-}ca-path' (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties. [1:1.18.6-4] - ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170) [1:1.18.…