Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,730 results · Clear filters · Feed

Medium max 5.3

ELSA-2020-1045 1 CVE

Moderate: lftp security update (Oracle Linux 7)

[4.4.8-12] - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased

Apr 6, 2020
Medium

ELSA-2020-1178 1 CVE

Moderate: zziplib security update (Oracle Linux 7)

[0.13.62-12] - Fix a directory traversal bug - unzip-mem should now strip all '../' prefixes from the archived files - Resolves: CVE-2018-17828

Apr 6, 2020
Medium max 9.8

ELSA-2020-0850 4 CVEs

Moderate: python-pip security update (Oracle Linux 7)

[9.0.3-7] - Bump Resolves: rhbz#1649153 Resolves: rhbz#1700824 Resolves: rhbz#1702473 Resolves: rhbz#1643829 [9.0.3-6] - Add four new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074 Resolves: rhb…

Mar 18, 2020
Medium max 9.8

ELSA-2020-0851 3 CVEs

Moderate: python-virtualenv security update (Oracle Linux 7)

[15.1.0-4] - Bump Resolves: rhbz#1649153 Resolves: rhbz#1700824 Resolves: rhbz#1643829 [15.1.0-3] - Add three new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2018-18074 Resolves: rhbz#1649153 Resolves: rhbz#1700824 Res…

Mar 18, 2020
Medium

ELSA-2020-0329 2 CVEs

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

go-toolset [1.12.12-1] - Update for golang package fixes [1.12.12-1] - Bump version to 1.12.12 golang [1.12.12-4.0.1] - from upstream https://github.com/golang/go/issues/2775 - move arbitrary value 10% to 15% for GC tests, hits 10.48% on our - infrastructure …

Feb 17, 2020
Medium max 6.5

ELSA-2020-0279 1 CVE

Moderate: virt:ol security update (Oracle Linux 8)

hivex libguestfs [1:1.38.4-14.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-14] - v2v: use -T as argument of scp when copying vmx files via ssh resolves: rhbz#1738886 * Fri Jun 2…

Feb 17, 2020
Medium max 5.9

ELSA-2020-0335 1 CVE

Moderate: grub2 security update (Oracle Linux 8)

[2.02-78.0.3.el8_1.1] - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497] - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597] - Update upstream references [Orabug: 26388226] - Copy symvers.gz to /boot during kernel …

Feb 7, 2020
Medium

ELSA-2019-3513 1 CVE

Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 8)

[2.28-72.0.1] - add Ampere emag to tunable cpu list (Patrick McGehearty) - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make …

Nov 21, 2019
Medium max 9.8

ELSA-2019-3704 1 CVE

Moderate: numpy security update (Oracle Linux 8)

[1:1.14.3-9] - Fix CVE-2019-6446 resolves: #1668466 [1:1.14.3-8] - Rebuild with fixed gating.yaml related: #1687873 [1:1.14.3-7] - Fix broken float128 on all arches except x86_64 resolves: #1687873

Nov 14, 2019
Medium

ELSA-2019-3698 5 CVEs

Moderate: libarchive security and bug fix update (Oracle Linux 8)

[3.3.2-7] - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) [3.3.2-6] - fixed use after free in RAR decoder (#1700752) - fixed double free in RAR decoder (#1700753) [3.3.2-5] - r…

Nov 14, 2019
Medium

ELSA-2019-3419 1 CVE

Moderate: libtiff security update (Oracle Linux 8)

[4.0.9-15] - Fix DIVIDE_BY_ZERO in patch for CVE-2018-12900 (#1595579) [4.0.9-14] - Fix CVE-2018-12900 (#1595579)

Nov 14, 2019
Medium

ELSA-2019-3624 1 CVE

Moderate: libseccomp security, bug fix, and enhancement update (Oracle Linux 8)

[2.4.1-1] - rebase to 2.4.1 [2.3.3-4] - spec: make the check phase conditional

Nov 14, 2019
Medium

ELSA-2019-3497 1 CVE

Moderate: http-parser security and bug fix update (Oracle Linux 8)

[2.8.0-5] - Resolves: rhbz#1686488: 'make test' fails with stringop-overflow error [2.8.0-4] - Resolves: rhbz#1666382: CVE-2018-12121 http-parser: nodejs: Denial of Service with large HTTP headers [rhel-8] [2.8.0-3] - spec: make the check phase conditional

Nov 14, 2019
Medium max 9.1

ELSA-2019-3520 4 CVEs

Moderate: python3 security and bug fix update (Oracle Linux 8)

[3.6.8-15.1.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-15.1] - Patch 329 (FIPS) modified: Added workaround for mod_ssl: Skip error checking in _Py_hashlib_fips_error Resolves: rhbz#1760106 [3.6.8-15] - Patch 329 that adds su…

Nov 14, 2019
Medium

ELSA-2019-3705 1 CVE

Moderate: libjpeg-turbo security update (Oracle Linux 8)

[1.5.3-10] - Fix CVE-2018-14498 (#1687477) [1.5.3-9] - Fix LDFLAGS (#1688397) [1.5.3-8] - Support running with Intel CET (#1688397)

Nov 14, 2019
Medium max 6.5

ELSA-2019-3525 1 CVE

Moderate: dhcp security and bug fix update (Oracle Linux 8)

[12:4.3.6-34] - Resolves: #1704672 - Fix crash caused by bind rebase [12:4.3.6-33] - Resolves: #1673946 - Change default prefix length to 128 - Add address-prefix-lenght option to change default value - Fix backporting issues [12:4.3.6-31] - Resolves: #168556…

Nov 14, 2019
Medium max 7.1

ELSA-2019-3707 1 CVE

Moderate: dbus security update (Oracle Linux 8)

[1.12.8-9.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.8-9] - Ensure that patches are applied (#1725570) [1:1.12.8-8] - Fix CVE-2019-12749 (#1725570)

Nov 14, 2019
Medium max 7.7

ELSA-2019-3467 1 CVE

Moderate: dovecot security and bug fix update (Oracle Linux 8)

[1:2.2.36-10] - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes (#1741788) [1:2.2.36-9] - reset errno before iterating through users (#1630410) [1:2.2…

Nov 14, 2019
Medium max 7.1

ELSA-2019-3701 4 CVEs

Moderate: curl security and bug fix update (Oracle Linux 8)

[7.61.1-11] - rebuild with updated annobin to prevent Execshield RPMDiff check from failing [7.61.1-10] - fix SMTP end-of-response out-of-bounds read (CVE-2019-3823) - fix NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822) - fix NTLM type-2 out-of-bou…

Nov 14, 2019
Medium max 5.8

ELSA-2019-3421 1 CVE

Moderate: mod_auth_mellon security, bug fix, and enhancement update (Oracle Linux 8)

[0.14.0-9] - Just bump the release number - Related: rhbz#1718238 - mod_auth_mellon-diagnostics RPM not in product listings [0.14.0-8] - Resolves: rhbz#1691894 - [RFE] Config option to change mod_auth_mellon prefix [0.14.0-7] - Apply the patch from the previo…

Nov 14, 2019
Medium max 5.9

ELSA-2019-3600 2 CVEs

Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 8)

[3.6.8-8] - Use fallback random function for RSA blinding in FIPS selftests [3.6.8-7] - Fix deterministic signature creation in selftests [3.6.8-6] - Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478) - Use deterministic ECDSA/DSA in…

Nov 14, 2019
Medium max 8.1

ELSA-2019-3699 1 CVE

Moderate: evolution security and bug fix update (Oracle Linux 8)

evolution [3.28.5-9] - Add patch for RH bug #1724984 ([ECompEditor] Ensure attendee changes stored before save) [3.28.5-8] - Add patch for RH bug #1724659 (Make sure intltool-merge cache is created only once) [3.28.5-7] - Add patch for RH bug #1724232 (Help C…

Nov 14, 2019
Medium

ELSA-2019-3706 1 CVE

Moderate: lua security and bug fix update (Oracle Linux 8)

[5.3.4-11] - Fix use after free in lua_upvaluejoin (#1670167)

Nov 14, 2019
Medium max 8.7

ELSA-2019-3338 2 CVEs

Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)

[20190308git89910a39dcfd-6.el8] - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446] - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446] - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz…

Nov 14, 2019
Medium

ELSA-2019-3530 1 CVE

Moderate: glib2 security, bug fix, and enhancement update (Oracle Linux 8)

[2.56.4-7] - Backport patch for CVE-2019-12450 Resolves: #1722101 [2.56.4-5] - Backport glib2 change needed for accountsservice dbus codegen fix Resolves: #1713081 [2.56.4-4] - Back GHmac with GnuTLS for FIPS - Resolves: #1630260 [2.56.4-3] - Backport per-des…

Nov 14, 2019
Medium

ELSA-2019-3390 3 CVEs

Moderate: qt5-qtbase security and bug fix update (Oracle Linux 8)

qt5-qtbase [5.11-1-7] - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg Resolves: bz#1692970 - Fix QImage allocaion failure Resolve: bz#1667860 - Fix double free in QXmlStreamReader Resolve: bz#1667858 - Fix segmentation fault on malformed BMP …

Nov 14, 2019
Medium max 4.2

ELSA-2019-3582 1 CVE

Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

[4.10.4-1] - resolves: #1712378 - Fix smbspool CUPS backend - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain' [4.10.4-0] - related: #1638001 - Rebase to Samba version 4.10.4 - resolves: #1597298 - Build Samba with python3 - resolves: #1658558 - …

Nov 14, 2019
Medium

ELSA-2019-3592 1 CVE

Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)

[239-18.0.1] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 1…

Nov 14, 2019
Medium max 6.8

ELSA-2019-3702 3 CVEs

Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 8)

[8.0p1-3 + 0.10.3-7] - Fix typos in manual pages (#1668325) - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436) - Unbreak ssh-keygen -A in FIPS mode (#1732424) - Add missing RSA certificate types to offered hostkey t…

Nov 14, 2019
Medium max 9.8

ELSA-2019-3335 6 CVEs

Moderate: python27:2.7 security and bug fix update (Oracle Linux 8)

Nov 14, 2019
Medium max 6.4

ELSA-2019-3353 1 CVE

Moderate: freeradius:3.0 security and bug fix update (Oracle Linux 8)

Nov 14, 2019
Medium

ELSA-2019-3433 1 CVE

Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

Nov 14, 2019
Medium

ELSA-2019-3436 2 CVEs

Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)

Nov 14, 2019
Medium

ELSA-2019-3476 1 CVE

Moderate: squid:4 security and bug fix update (Oracle Linux 8)

Nov 14, 2019
Medium max 7.5

ELSA-2019-3583 2 CVEs

Moderate: yum security, bug fix, and enhancement update (Oracle Linux 8)

createrepo_c [0.11.0-3] - Backport patch to switch off timestamps on documentation in order to remove file conflicts (RhBug:1738788) [0.11.0-2] - Consistently produce valid URLs by prepending protocol. (RhBug:1632121) - modifyrepo_c: Prevent doubling of compr…

Nov 14, 2019
Medium

ELSA-2019-3610 1 CVE

Moderate: libqb security and bug fix update (Oracle Linux 8)

[1.0.3-10] Avoid deadlock in IPC connections Resolves: rhbz#1718773 [1.0.3-9] Improve security of SHM files used for IPCs Resolves: rhbz#1714854 [1.0.3-8] - Add RHEL-8.1 gating tests Resolves: rhbz#1682119

Nov 14, 2019
Medium

ELSA-2019-3708 10 CVEs

Moderate: mariadb:10.3 security and bug fix update (Oracle Linux 8)

Nov 14, 2019
Medium

ELSA-2019-3157 12 CVEs

Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.241-2.6.20.0.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.241-2.6.20.0] - Bump to 2.6.20 and OpenJDK 7u241-b01. - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423

Oct 21, 2019
Medium max 7.5

ELSA-2019-2731 1 CVE

Moderate: .NET Core on Red Hat Enterprise Linux security and bug fix update (Oracle Linux 8)

[2.1.509-1] - Update to .NET Core Runtime 2.1.13 and SDK 2.1.509 - Resolves: RHBZ#1747874

Sep 12, 2019
Medium

ELSA-2019-2713 12 CVEs

Moderate: poppler security update (Oracle Linux 8)

[0.66.0-11.el8_0.12] - Ignore dict Length if it is broken - Resolves: #1741146 [0.66.0-11.el8_0.11] - Check whether input is RGB in PSOutputDev::checkPageSlice() - (also when using '-optimizecolorspace' flag) - Resolves: #1741145 [0.66.0-11.el8_0.10] - Fail g…

Sep 12, 2019