Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,729 results · Clear filters · Feed

Medium max 7.1

ELSA-2020-4032 1 CVE

Moderate: dbus security update (Oracle Linux 7)

[1:1.10.24-15.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.10.24-15] - Fix CVE-2020-12049 (#1851992)

Oct 6, 2020
Medium

ELSA-2020-4024 1 CVE

Moderate: okular security update (Oracle Linux 7)

[4.10.5-9] - Document::processAction: If the url points to a binary, dont run it Resolves: bz#1821451

Oct 6, 2020
Medium max 7.5

ELSA-2020-3996 3 CVEs

Moderate: libxml2 security and bug fix update (Oracle Linux 7)

[2.9.1-6.0.1.5] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.1-6.5] - Fix CVE-2019-19956 (#1793000) - Fix CVE-2019-20388 (#1810057) - Fix CVE-2020-7595 (#1810073) - Fix xsd:any schema validation (#1…

Oct 6, 2020
Medium max 6.5

ELSA-2020-4000 2 CVEs

Moderate: libvirt security and bug fix update (Oracle Linux 7)

[4.5.0-36] - virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976) [4.5.0-35] - qemu: dont take agent and monitor job for shutdown (CVE-…

Oct 6, 2020
Medium max 6.4

ELSA-2020-3984 3 CVEs

Moderate: freeradius security and bug fix update (Oracle Linux 7)

[3.0.13-15] - Fixes EAP-PWD: DoS issues due to multithreaded BN_CTX access Resolves: bz#1818808 [3.0.13-14 - Fixes receiving of multiple RADIUS packets under load Resolves: bz#1630684 [3.0.13-13] - Fixes logging of cleartext pap password Resolves: bz#1677435 …

Oct 6, 2020
Medium max 8.0

ELSA-2020-4031 25 CVEs

Moderate: freerdp security, bug fix, and enhancement update (Oracle Linux 7)

[2.1.1-2] - Update to 2.1.1 (#1834286)

Oct 6, 2020
Medium

ELSA-2020-4041 1 CVE

Moderate: openldap security update (Oracle Linux 7)

[2.4.44-22] - Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)

Oct 6, 2020
Medium

ELSA-2020-3949 1 CVE

Moderate: librabbitmq security update (Oracle Linux 7)

[0.8.0-3] - Resolves: #1809991, CVE-2019-18609 - integer overflow

Oct 6, 2020
Medium

ELSA-2020-3966 1 CVE

Moderate: fontforge security update (Oracle Linux 7)

[20120731b-13] - Resolves:rh#1790973 - CVE-2020-5395:out-of-bounds write in sfd.c

Oct 6, 2020
Medium

ELSA-2020-3875 5 CVEs

Moderate: tigervnc security and bug fix update (Oracle Linux 7)

[1.8.0-21] - Add upstream patch needed because of previous security fixes Resolves: bz#1826822 [1.8.0-20] - Fix stack buffer overflow in CMsgReader::readSetCursor Resolves: bz#1791773 - Fix heap buffer overflow in DecodeManager::decodeRect Resolves: bz#179176…

Oct 6, 2020
Medium

ELSA-2020-3973 1 CVE

Moderate: spamassassin security update (Oracle Linux 7)

[3.4.0-6] - Fix CVE-2019-12420 - Resolves: rhbz#1812976

Oct 6, 2020
Medium max 6.9

ELSA-2020-3936 10 CVEs

Moderate: ipa security, bug fix, and enhancement update (Oracle Linux 7)

[4.6.8-5.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7] - Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() …

Oct 6, 2020
Medium max 7.5

ELSA-2020-4011 2 CVEs

Moderate: e2fsprogs security and bug fix update (Oracle Linux 7)

[1.45.6-19] - fix issues with meta_bg when resizing file system (#1849718) [1.42.9-18] - fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typ…

Oct 6, 2020
Medium

ELSA-2020-3876 4 CVEs

Moderate: libvpx security update (Oracle Linux 7)

[1.3.0-8] - Fix for CVE-2020-0034 - Resolves: rhbz#1823909 [1.3.0-7] - Fix for CVE-2019-9232 and CVE-2019-9433 - Resolves: rhbz#1796085, rhbz#1796099 [1.3.0-6] - Fix for CVE-2017-0393 - Resolves: rhbz#1779498 [1.3.0-4] - fix Illegal Instruction abort [1.3.0-3…

Oct 6, 2020
Medium

ELSA-2020-3915 1 CVE

Moderate: libssh2 security update (Oracle Linux 7)

[1.8.0-4] - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) [1.8.0-3] - sanitize public header file (detected by rpmdiff) [1.8.0-2] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863) - fi…

Oct 6, 2020
Medium max 7.1

ELSA-2020-3887 1 CVE

Moderate: python-pillow security update (Oracle Linux 7)

[2.0.0-21gitd1c6db8] - Fix for CVE-2020-5313 Resolves: rhbz#1789532 [2.0.0-20gitd1c6db8] - Combined fixes for CVE-2020-5312 and CVE-2019-16865 Resolves: rhbz#1789533 Resolves: rhbz#1774066 [2.0.0-19gitd1c6db8] - Reenabled webp support on little endian archs. …

Oct 6, 2020
Medium

ELSA-2020-3868 11 CVEs

Moderate: SDL security update (Oracle Linux 7)

[1.2.15-17] - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638 - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206, - Resolves: …

Oct 6, 2020
Medium max 6.7

ELSA-2020-3908 1 CVE

Moderate: cpio security update (Oracle Linux 7)

[2.11-28] - Improper input validation when writing tar header fields (#1766222)

Oct 6, 2020
Medium max 9.8

ELSA-2020-3916 1 CVE

Moderate: curl security update (Oracle Linux 7)

[7.29.0-59.0.1] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/C…

Oct 6, 2020
Medium

ELSA-2020-3864 3 CVEs

Moderate: cups security and bug fix update (Oracle Linux 7)

[1:1.6.3-51] - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7] [1:1.6.3-50] - 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var [1:1.6.3-49] - more covscan issues raised from the fix 1672212 [1:1.…

Oct 6, 2020
Medium max 6.5

ELSA-2020-3981 1 CVE

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 7)

[4.10-16-5] - related: #1785121 - Add missing RPM Requires [4.10.16-2] - resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-join [4.10.16-1] - related: #1785121 - Rebase to version 4.10.16 [4.10.1…

Oct 6, 2020
Medium max 7.5

ELSA-2020-3952 2 CVEs

Moderate: expat security update (Oracle Linux 7)

[2.1.0-12] - add security fixes for CVE-2018-20843, CVE-2019-15903

Oct 6, 2020
Medium

ELSA-2020-3958 6 CVEs

Moderate: httpd security, bug fix, and enhancement update (Oracle Linux 7)

[2.4.6-95.0.1] - replace index.html with Oracles index page oracle_index.html [2.4.6-95] - Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value [2.4.6-94] - Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a tr…

Oct 6, 2020
Medium

ELSA-2020-3972 1 CVE

Moderate: subversion security update (Oracle Linux 7)

[1.7.14-16] - add security fix for CVE-2018-11782

Oct 6, 2020
Medium

ELSA-2020-4001 1 CVE

Moderate: bluez security update (Oracle Linux 7)

[5.44-7] - fixing CVE-2020-0556 .

Oct 6, 2020
Medium

ELSA-2020-4025 2 CVEs

Moderate: qt5-qtbase security update (Oracle Linux 7)

[5.9.7-4] - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz#1814740 Resolves: bz#1814685 [5.9.7-3] - Fix multilib issue with qtcore-config.h header file Resolves: bz#1534528 - Move libQt5EglF…

Oct 6, 2020
Medium max 8.8

ELSA-2020-4035 101 CVEs 2 exploited

Moderate: webkitgtk4 security, bug fix, and enhancement update (Oracle Linux 7)

[2.28.2-2] - Resolves: rhbz#1817144 Rebuild to support ppc and s390 [2.28.2-1] - Resolves: rhbz#1817144 Rebase to 2.28.2

Oct 6, 2020
Medium max 7.5

ELSA-2020-3940 1 CVE

Moderate: openwsman security update (Oracle Linux 7)

[2.6.3-7.git4391e5c] - Fix CVE-2019-3833 Resolves: #1677691

Oct 6, 2020
Medium max 9.8

ELSA-2020-4005 2 CVEs

Moderate: libxslt security update (Oracle Linux 7)

[1.1.28-6.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.28-6] - Fix CVE-2019-18197 (#1775516) - Fix CVE-2019-11068 (#1715731)

Oct 6, 2020
Medium

ELSA-2020-4039 3 CVEs

Moderate: OpenEXR security update (Oracle Linux 7)

[1.7.1-8] - fix CVE-2020-11764 (#1833552) - fix CVE-2020-11763 (#1833566) - fix CVE-2020-11761 (#1834461)

Oct 6, 2020
Medium max 7.5

ELSA-2020-3665 3 CVEs

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

golang [1.13.15-1] - Rebase to 1.13.15 - Related: rhbz#1865875 - Related: rhbz#1865873 go-toolset [1.13.15-1] - Rebase to 1.13.15 - Related: rhbz#1865875 - Related: rhbz#1865873

Sep 11, 2020
Medium max 7.5

ELSA-2020-3662 22 CVEs

Moderate: php:7.3 security, bug fix, and enhancement update (Oracle Linux 8)

php [7.3.20-1] - update to 7.3.20 #1856655 php-pear [1:1.10.9-1] - update PEAR to 1.10.9 - update Archive_Tar to 1.4.7 - update Console_Getopt to 1.4.2

Sep 9, 2020
Medium

ELSA-2020-3654 1 CVE

Moderate: libcroco security update (Oracle Linux 8)

[0.6.12-4.1] - Fix CVE-2020-12825 Resolves: #1866484

Sep 9, 2020
Medium max 7.5

ELSA-2020-3669 6 CVEs

Moderate: postgresql:10 security and bug fix update (Oracle Linux 8)

[10.14-1] - Rebase to upstream release 10.14 Fixes RHBZ#1727803 Fixes RHBZ#1741489 Fixes RHBZ#1709196 [10.13-1] - Rebase to upstream release 10.13 Fixes RHBZ#1727803 Fixes RHBZ#1741489 Fixes RHBZ#1709196

Sep 9, 2020
Medium max 7.5

ELSA-2020-3053 1 CVE

Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

buildah [1.14.9-1.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.14.9-1] - update to https://github.com/containers/buildah/releases/tag/v1.14.9 - Related: RHELPLAN-39206 [1.14.8-2] - make container-selinux a soft dependency - Related: …

Aug 6, 2020
Medium

ELSA-2020-3280 4 CVEs

Moderate: nss and nspr security, bug fix, and enhancement update (Oracle Linux 8)

nspr [4.25.0-2] - Rebuild [4.25.0-1] - Update to NSPR 4.25 nss [3.53.1-11] - Fix issue with upgradedb where upgradedb expects standard to generate dbm databases, not sql databases (default in RHEL8) [3.53.1-10] - Disable dh timing test because it's unreliable…

Aug 4, 2020
Medium

ELSA-2020-3218 2 CVEs

Moderate: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-193.14.3_2.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

Jul 30, 2020
Medium max 5.8

ELSA-2020-3032 2 CVEs

Moderate: mod_auth_openidc:2.3 security and bug fix update (Oracle Linux 8)

cjose [0.6.1-2] - fix concatkdf big endian architecture problem. Upstream issue #77. [0.6.1-1] - upgrade to latest upstream 0.6.1 [0.5.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [0.5.1-2] - Rebuilt for https://fedoraproject.org/w…

Jul 29, 2020
Medium max 4.3

ELSA-2020-3011 1 CVE

Moderate: NetworkManager security and bug fix update (Oracle Linux 8)

[1:1.22.8-5] - dhcp: fix handling IO error in nettools DHCPv4 client (rh #1843357) - ifcfg-rh: handle '802-1x.{,phase2-}ca-path' (rh #1843360, CVE-2020-10754)

Jul 24, 2020
Medium max 5.9

ELSA-2020-2663 2 CVEs

Moderate: ntp security update (Oracle Linux 7)

[4.2.6p5-29.0.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-29.el7_8.2] - don't update transmission time on invalid response (CVE-2020-11868) - randomize transmit timestamp in client requests (CVE-?, #1813787)

Jun 24, 2020