Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,730 results · Clear filters · Feed

  • Medium
    ELSA-2020-1672 1 CVE

    Moderate: freeradius:3.0 security update (Oracle Linux 8)

  • Medium max 5.9
    ELSA-2020-1650 3 CVEs

    Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 4.8
    ELSA-2020-1624 17 CVEs

    Moderate: php:7.2 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium max 9.8
    ELSA-2020-1605 6 CVEs

    Moderate: python27:2.7 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium
    ELSA-2020-1653 1 CVE

    Moderate: zziplib security update (Oracle Linux 8)

    [0.13.68-8] - Fix CVE-2018-17828 in the 'single z' binaries - Resolves: #1772447

  • Medium max 9.8
    ELSA-2020-1644 5 CVEs

    Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium
    ELSA-2020-1497 5 CVEs

    Moderate: tigervnc security update (Oracle Linux 8)

    [1.9.0-14] - Bump build version Resolves: bz#1819877 Resolves: bz#1819879 Resolves: bz#1819882 Resolves: bz#1819886 Resolves: bz#1819884 [1.9.0-13] - Fix stack buffer overflow in CMsgReader::readSetCursor Resolves: bz#1819877 - Fix heap buffer overflow in Dec…

  • Medium
    ELSA-2020-1372 4 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-147.8.1_1.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-147.8.1_1] - rebu…

  • Medium
    ELSA-2020-1037 1 CVE

    Moderate: advancecomp security update (Oracle Linux 7)

    [1.15-22] - Resolves: #1686115, integer overflow in png_compress [1.15-21] - Resolves: #1711051, CVE-2019-8383 denial of service - Resolves: #1710910, CVE-2019-8379 null pointer dereference [1.15-20] - Mass rebuild 2014-01-24 [1.15-19] - Mass rebuild 2013-12-…

  • Medium max 6.5
    ELSA-2020-1054 2 CVEs

    Moderate: mailman security and bug fix update (Oracle Linux 7)

    [3:2.1.15-30] - Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618) [3:2.1.15-29] - Resolves: #1611689 - Trim long text in 'no such list' messages [3:2.1.15-28] - Resolves: #1718180 - Try to decode member name first [3:2.1.15-27] - Related : …

  • Medium max 8.8
    ELSA-2020-1062 2 CVEs

    Moderate: dovecot security and bug fix update (Oracle Linux 7)

    [1:2.2.36-6] - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes (#1741787) [1:2.2.36-5] - fix CVE-2019-3814: improper certificate validation (#1674369)…

  • Medium
    ELSA-2020-1173 1 CVE

    Moderate: okular security update (Oracle Linux 7)

    [4.10.5-8] - Fix path traversal issue when extracting an .okular file Resolves: bz#1634726

  • Medium max 6.5
    ELSA-2020-1084 2 CVEs

    Moderate: samba security, bug fix, and enhancement update (Oracle Linux 7)

    [4.10.4-10] - resolves: #1786324 - fix security level check for DsRGetForestTrustInformation [4.10.4-9] - resolves: #1764468 - Fix CVE-2019-10218 [4.10.4-8] - resolves: #1656541 - Fix join using netbios name [4.10.4-7] - resolves: #1657428 - Fix spnego downgr…

  • Medium
    ELSA-2020-1121 3 CVEs

    Moderate: httpd security, bug fix, and enhancement update (Oracle Linux 7)

    [2.4.6-93.0.1] - replace index.html with Oracles index page oracle_index.html [2.4.6-93] - Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time [2.4.6-92] - htpasswd: add SHA-2 crypt() support (#1486889) [2.4.6-91] - Reso…

  • Medium max 5.3
    ELSA-2020-1132 2 CVEs

    Moderate: python3 security update (Oracle Linux 7)

    [3.6.8-13.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-13] - Security fix for CVE-2019-16056 Resolves: rhbz#1750774 [3.6.8-12] - Add support for OpenSSL FIPS mode - Fix faulthandler stack size Resolves: rhbz#1732908 [3.6.8-11]…

  • Medium
    ELSA-2020-1112 4 CVEs

    Moderate: php security update (Oracle Linux 7)

    [5.4.16-48] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043 [5.4.16-47] - fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584 - fix out-of-bounds read in base64_decode_xmlrpc CVE-2019-9024 - fix reflected XSS in phar 404 page CVE…

  • Medium
    ELSA-2020-1100 4 CVEs

    Moderate: mariadb security and bug fix update (Oracle Linux 7)

    [1:5.5.65-1] - Rebase to 5.5.65 Also fixes: CVE-2019-2737 CVE-2019-2739 CVE-2019-2740 CVE-2019-2805 Resolves: #1741357 - Revert upstream changes that make the mysql_install_db relocatable because it broke mysql_install_db when run without --rpm arg Resolves: …

  • Medium max 4.8
    ELSA-2020-1021 1 CVE

    Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 7)

    accountsservice [0.6.50-7] - version bump to prevent future update path introduced by RHBA-2019:45836 Resolves: #1721562 colord [1.3.4-2] - Downgrade a trivial warning to a debug statement - Resolves: #1421231 control-center [3.28.1-6] - Calculate better exte…

  • Medium
    ELSA-2020-1003 1 CVE

    Moderate: mod_auth_mellon security and bug fix update (Oracle Linux 7)

    [0.14.0-8] - Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via the login?ReturnTo= substring which could facilitate information theft [rhel-7] [0.14.0-7] - Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name X-Request…

  • Medium max 7.5
    ELSA-2020-1061 3 CVEs

    Moderate: bind security and bug fix update (Oracle Linux 7)

    [32:9.11.4-16.P2] - Finish dig query when name is too long (#1743572) [32:9.11.4-15.P2] - Stop listening on IPv6 by default (#1753259) [32:9.11.4-14.P2] - Limit number of queries per TCP connection (CVE-2019-6477) [32:9.11.4-13.P2] - Revert not searching name…

  • Medium
    ELSA-2020-1185 1 CVE

    Moderate: libsndfile security update (Oracle Linux 7)

    [1.0.25-11] - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)

  • Medium
    ELSA-2020-1000 2 CVEs

    Moderate: rsyslog security, bug fix, and enhancement update (Oracle Linux 7)

    [8.24.0-52] RHEL 7.8 ERRATUM - edited patch file ID for imfile to not log useless errors also improved file-id behavior to adress newly found problems resolves: rhbz#1763746 [8.24.0-49] RHEL 7.8 ERRATUM - fixed fsync patch to actually revognize the new option…

  • Medium
    ELSA-2020-1050 3 CVEs

    Moderate: cups security and bug fix update (Oracle Linux 7)

    [1:1.6.3-43] - 1687571 - cupsd doesnt clean tmp files if client conn is terminated abnormally [1:1.6.3-42] - 1651575 - CVE-2018-4700 cups [1:1.6.3-41] - 1608764 - CVE-2018-4180 cups - 1607291 - CVE-2018-4181 cups

  • Medium max 7.9
    ELSA-2020-1016 19 CVEs

    Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-1127.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1127] - [fs] flexfiles: Dont …

  • Medium max 8.8
    ELSA-2020-1190 6 CVEs

    Moderate: libxml2 security update (Oracle Linux 7)

    [2.9.1-6.0.1.4] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.1-6.4] - Fix CVE-2015-8035 (#1595697) - Fix CVE-2018-14404 (#1602817) - Fix CVE-2017-15412 (#1729857) - Fix CVE-2016-5131 (#1714050) - Fi…

  • Medium max 7.5
    ELSA-2020-1081 1 CVE

    Moderate: net-snmp security and bug fix update (Oracle Linux 7)

    [1:5.7.2-47] - revert calculation of free space (#1779609) [1:5.7.2-46] - fix sha224 and sha384 declaration check (#1774693) [1:5.7.2-45] - fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195) [1:5.7.2-44] - add support for glusterfs (#131…

  • Medium
    ELSA-2020-1172 6 CVEs

    Moderate: qt security update (Oracle Linux 7)

    [1:4.8.7-8] - Fix QImage allocation failure in qgifhandler Resolves: bz#1667863 - Fix QTgaFile CPU exhaustion Resolves: bz#1667879 - Fix QBmpHandler segmentation fault on malformed BMP file Resolves: bz#1667862 [1:4.8.7-7] - Fix crash when parsing malformed u…

  • Medium
    ELSA-2020-1036 1 CVE

    Moderate: texlive security update (Oracle Linux 7)

    [2:2012-45.20130427_r30134] - Related: #1650521, buffer overflow in t1_check_unusual_charstring function [2:2012-44.20130427_r30134] - Resolves: #1650521, buffer overflow in t1_check_unusual_charstring function

  • Medium max 6.5
    ELSA-2020-1180 73 CVEs

    Moderate: ImageMagick security, bug fix, and enhancement update (Oracle Linux 7)

    autotrace [0.31.1-38] - Resolves: #1765205 rebuild against new IM emacs [1:24.3-23] - Resolves: #1765208 rebuild against new IM ImageMagick [6.9.10.68-3] - Fixing freeze when svg file contains class='' [6.9.10.68-2] - Fixed ghostscript fonts, fixed multilib c…

  • Medium
    ELSA-2020-1011 1 CVE

    Moderate: expat security update (Oracle Linux 7)

    [2.1.0-11] - add security fix for CVE-2015-2716

  • Medium
    ELSA-2020-1047 7 CVEs

    Moderate: wireshark security and bug fix update (Oracle Linux 7)

    [1.10.14-24.0.1] - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect [1.10.14-24] - Related: #1613034 - Typo in the previous patch discovered by covscan [1.10.14-23] - Related: #1613034 - Fixing an infinite loop created by previous upd…

  • Medium max 8.1
    ELSA-2020-1080 2 CVEs

    Moderate: evolution security and bug fix update (Oracle Linux 7)

    atk [2.28.1-2] - Remove patch to fix invalid unref at atk_gobject_accessible_object_gone_cb() - Resolves: #1753123 evolution [3.28.5-8] - Update patch for RH bug #1686408 (CVE-2018-15587: Reposition signature bar) [3.28.5-7] - Add patch for RH bug #1686408 (C…

  • Medium max 6.1
    ELSA-2020-1091 1 CVE

    Moderate: python-twisted-web security update (Oracle Linux 7)

    [12.1.0-6] - Fix CVE-2019-12387 (HTTP Header Injection) Resolves: rhbz#1721518

  • Medium
    ELSA-2020-1068 3 CVEs

    Moderate: squid security and bug fix update (Oracle Linux 7)

    [7:3.5.20-15] - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower case - Resolves: #1680022 - squid cant display download/upload packet size for HTTPS sites - Resolves: #1717430 - Excessive memory usage when running out of descriptors…

  • Medium
    ELSA-2020-1151 7 CVEs

    Moderate: libreoffice security and bug fix update (Oracle Linux 7)

    [1:5.3.6.1-24.0.1] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.3.6.1-24] - Resolves: rhbz#1728763 bg of blocks is black [1:5.3.6.1-23] - Resolves: …

  • Medium
    ELSA-2020-1074 5 CVEs

    Moderate: poppler and evince security update (Oracle Linux 7)

    evince [3.28.2-9] - Handle failure from TIFFReadRGBAImageOriented - Resolves: #1717352 poppler [0.26.5-42] - Fix potential integer overflow and check length for negative values - Resolves: #1757283 [0.26.5-41] - Ignore dict Length if it is broken - Resolves: …

  • Medium
    ELSA-2020-1113 1 CVE

    Moderate: bash security update (Oracle Linux 7)

    [4.2.46-34] - BASH_CMD should not be writable in restricted shell Resolves: #1693181

  • Medium
    ELSA-2020-1126 1 CVE

    Moderate: mutt security update (Oracle Linux 7)

    [5:1.5.21-29] - Fix IMAP header caching path traversal vulnerability - Resolves: #1608011 - Resolves: CVE-2018-14355

  • Medium
    ELSA-2020-1189 1 CVE

    Moderate: libqb security update (Oracle Linux 7)

    [1.0.1-9] Also add O_EXCL to log_blackbox.c when creating files Resolves: rhbz#1714853 [1.0.1-8] Improve socket security Resolves: rhbz#1714853

  • Medium max 5.3
    ELSA-2020-1131 2 CVEs

    Moderate: python security update (Oracle Linux 7)

    [2.7.5-88.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-88] - Security fix for CVE-2019-16056 Resolves: rhbz#1750773 [2.7.5-87] - Fix CVE-2018-20852 Resolves: rhbz#1741551