Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

  • Medium
    ELSA-2021-4591 1 CVE

    Moderate: gcc-toolset-11-annobin security update (Oracle Linux 8)

    [9.85-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2017367)

  • Medium
    ELSA-2021-4592 1 CVE

    Moderate: gcc-toolset-10-annobin security update (Oracle Linux 8)

    [9.29-1.2] - Bump and rebuild for new gcc. (#2017782) [9.29-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2009282)

  • Medium
    ELSA-2021-4587 1 CVE

    Moderate: gcc security update (Oracle Linux 8)

    [8.5.0-4.0.1] - Merge oracle patches to security errata 8.5.0-4. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [8.5.0-4] - add -Wbidirectional patch (#2008391)

  • Medium
    ELSA-2021-4594 1 CVE

    Moderate: gcc-toolset-11-binutils security update (Oracle Linux 8)

    [2.36.1-1.0.1.1] - Forward port Oracle patches from 2.36.1-1.0.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.36.1-1.1] - Add ability to control the display of unicode characters. (#2009172)

  • Medium
    ELSA-2021-4593 1 CVE

    Moderate: annobin security update (Oracle Linux 8)

    [9.72-1.2] - Bump NVR and rebuild to use the new gcc. (#2017362) [9.72-1.1] - Annocheck: Add test for multibyte characters in symbol names. (#2017362) [9.72-1] - Rebase to 9.72. (#1960299) - annocheck: Accept 0 as a valid number for gcc minor versions and rel…

  • High
    ELSA-2021-4647 2 CVEs

    Important: kernel security update (Oracle Linux 8)

    [4.18.0-348.2.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…

  • Medium
    ELSA-2021-4586 1 CVE

    Moderate: gcc-toolset-11-gcc security update (Oracle Linux 8)

    [11.2.1-1.2.0.1] - Add -ftrivial-auto-var-init support from GCC12 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> - Add CTF/BTF support Reviewed-by: Qing Zhao <qing.zhao@oracle.com> [11.2.1-1.2] - add -Wbidirectional patch (#2017819)

  • Medium
    ELSA-2021-4181 2 CVEs

    Moderate: mutt security, bug fix, and enhancement update (Oracle Linux 8)

    [5:2.0.7-1] - Upgrade to v2.0.7 - New bug fix release - Resolves: #1912614 [5:2.0.6-1] - Upgrade to v2.0.6 - Resolves: #1912614

  • Medium
    ELSA-2021-4339 1 CVE

    Moderate: grilo security update (Oracle Linux 8)

    [0.3.6-3] + grilo-0.3.6-3 - Fix TLS not being validated correctly - Resolves: rhbz#1997234

  • Medium
    ELSA-2021-4257 2 CVEs

    Moderate: httpd:2.4 security, bug fix, and enhancement update (Oracle Linux 8)

    httpd [2.4.37-41.0.1] - Add checks on the configured UDS path [Orabug: 33412270][CVE-2021-40438] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-41] - Resolves: #1680111 - http…

  • Medium
    ELSA-2021-4413 1 CVE

    Moderate: tpm2-tools security and enhancement update (Oracle Linux 8)

    [4.1.1-5] - Bump nvr to trigger osci. resolves: rhbz#1965981 [4.1.1-4] - Fix CVE-2021-3565 resolves: rhbz#1965981 [4.1.1-3] - Fix resource leak. - Fix to restrict policy digest size. - Fix incompatible pointer cast. - Fix error message in files_load_##name - …

  • Medium max 7.5
    ELSA-2021-4150 2 CVEs

    Moderate: python36:3.6 security and bug fix update (Oracle Linux 8)

    python-docs [3.6.7-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.6.7-1] - Modify for RHEL8 - Update to new Python version - Resolves: rhbz#1656044 python-wheel [1:0.31.1-3] - Adjusted the postun scriptlets to enable up…

  • Medium max 6.5
    ELSA-2021-4154 2 CVEs

    Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

  • Medium
    ELSA-2021-4315 1 CVE

    Moderate: spamassassin security update (Oracle Linux 8)

    [3.4.4-4.el4] - Fix header parsing

  • Medium
    ELSA-2021-4464 1 CVE

    Moderate: dnf security and bug fix update (Oracle Linux 8)

    dnf [4.7.0-4.0.1] -Fixed python stack trace with updateinfo list cves command [Orabug: 32749660] - Replaced upstream bugzilla reporting reference. [Orabug: 32829849] [4.7.0-4] - Update translations (RhBug:1961632) [4.7.0-3] - Improve signature checking using …

  • Low
    ELSA-2021-4408 1 CVE

    Low: libsolv security and bug fix update (Oracle Linux 8)

    [0.7.19-1] - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks [0.7.17-2] - Fix rpm dependency [0.7.1…

  • Low
    ELSA-2021-4316 1 CVE

    Low: zziplib security update (Oracle Linux 8)

    [0.13.68-9] - Fix CVE-2020-18442 - Resolves: CVE-2020-18442

  • Medium max 9.8
    ELSA-2021-4381 29 CVEs 5 exploited

    Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)

    accountsservice [0.6.55-2] - Add support for user templates so user can specify default session Resolves: #1812788 gdm [40.0-14] - Fix XDMCP Resolves: #2004170 - Fix crash at shutdown Related: #2004170 [40.0-13] - Disable Wayland on HyperV - Fix Xorg fallback…

  • Medium max 9.8
    ELSA-2021-4451 3 CVEs

    Moderate: gnutls and nettle security, bug fix, and enhancement update (Oracle Linux 8)

    gnutls [3.6.16-4] - p11tool: Document ID reuse behavior when importing certs (#1776250) [3.6.16-3] - Treat SHA-1 signed CA in the trusted set differently (#1965445) [3.6.16-2] - Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216) […

  • Low
    ELSA-2021-4510 1 CVE

    Low: lua security update (Oracle Linux 8)

    [5.3.4-12] - Fix segfault in getlocal and setlocal (#1880445)

  • Medium max 7.8
    ELSA-2021-4151 8 CVEs

    Moderate: python27:2.7 security update (Oracle Linux 8)

  • Medium
    ELSA-2021-4396 5 CVEs

    Moderate: sqlite security update (Oracle Linux 8)

    [3.26.0-15] - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) [3.26.0-14] - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixe…

  • Medium
    ELSA-2021-4326 1 CVE

    Moderate: libX11 security update (Oracle Linux 8)

    [1.6.8-5] - Fix CVE-2021-31535 (#1962439)

  • Medium max 8.8
    ELSA-2021-4356 42 CVEs

    Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-348.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

  • Medium max 8.2
    ELSA-2021-4226 5 CVEs

    Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

    [7.5.9-4] - resolve CVE-2021-39226 [7.5.9-3] - rebuild to resolve CVE-2021-34558 [7.5.9-2] - remove unused dependency property-information - always include FIPS patch in SRPM [7.5.9-1] - update to 7.5.9 tagged upstream community sources, see CHANGELOG [7.5.8-…

  • Medium
    ELSA-2021-4426 2 CVEs

    Moderate: ncurses security update (Oracle Linux 8)

    [6.1-9.20180224] - fix tput to accept -x option (#1916340) [6.1-8.20180224] - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595)

  • Medium max 7.8
    ELSA-2021-4201 2 CVEs

    Moderate: babel security and bug fix update (Oracle Linux 8)

    [2.5.1-7] - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the python3-babel package Resolves: rhbz#1967173 [2.5.1-6] - Fix CVE-2021-20095 Resolves: rhbz#1955615

  • Medium
    ELSA-2021-4235 4 CVEs

    Moderate: jasper security update (Oracle Linux 8)

    [2.0.14-5] - Fix CVE-2021-26927 (#1933860) - Fix CVE-2021-26926 (#1922316) - Fix CVE-2021-3272 (#1922283) - Fix CVE-2020-27828 (#1905692)

  • Low max 5.7
    ELSA-2021-4455 1 CVE

    Low: python-pip security update (Oracle Linux 8)

    [9.0.3-20] - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856

  • Medium
    ELSA-2021-4231 8 CVEs

    Moderate: libwebp security update (Oracle Linux 8)

    [1.0.0-5] - Added fixes for rhbz#1956853, rhbz#1956856, rhbz#1956868, rhbz#1956917

  • Medium max 7.8
    ELSA-2021-4382 1 CVE

    Moderate: json-c security and bug fix update (Oracle Linux 8)

    [0.13.1-2] - rebuild (#1954436) [0.13.1-1] - Fix CVE-2020-12762 out-of-bounds write via a large JSON file - Resolves: rhbz#1835626

  • Low
    ELSA-2021-4404 1 CVE

    Low: kexec-tools security, bug fix, and enhancement update (Oracle Linux 8)

    [2.0.20-57.0.3] - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440] [2.0.20-57.0.2] - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981] [2.0.20-57.0.1] - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 3325…

  • Medium
    ELSA-2021-4513 4 CVEs

    Moderate: libsepol security update (Oracle Linux 8)

    [2.9-3] - cil: Fix out-of-bound read of file context pattern ending with '\' - cil: Destroy classperms list when resetting classpermission (#1983517) - cil: Destroy classperm list when resetting map perms (#1983521) - cil: cil_reset_classperms_set() should no…

  • Medium
    ELSA-2021-4321 1 CVE

    Moderate: linuxptp security, bug fix, and enhancement update (Oracle Linux 8)

    [3.1.1-1] - update to 3.1.1 (#1895005 CVE-2021-3571) - add read-only UDS port (#1929797) - add option to set clockClass threshold (#1980386) - dont repeat some log messages in multi-port configuration (#1980377) - increase default TX timestamp timeout to 10 m…

  • Medium
    ELSA-2021-4385 2 CVEs

    Moderate: glib2 security and bug fix update (Oracle Linux 8)

    [2.56.4-15] - Fix test failure introduced in previous update - Related: #1971533 [2.56.4-14] - Refresh GHmac patchset - Resolves: #1971533 [2.56.4-13] - Rename and consolidate existing patches for better maintainability - Refresh CVE-2021-27219 patcheset, usi…

  • Low
    ELSA-2021-4489 1 CVE

    Low: rpm security, bug fix, and enhancement update (Oracle Linux 8)

    [4.14.3-19] - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) [4.14.3-18] - Address important covscan issues (#1996665), vol. 2 [4.14.3-17] - Address important covscan issues (#1996665) [4.14.3-16] - Add support for read-only sqlite rpmdb (#1…

  • Medium
    ELSA-2021-4374 1 CVE

    Moderate: file security update (Oracle Linux 8)

    [5.33-20] - rebuild (#1954434) [5.33-18] - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) [5.33-17] - improve magic for script recognition and other changes (#1903531)

  • Medium max 5.5
    ELSA-2021-4221 1 CVE

    Moderate: container-tools:2.0 security update (Oracle Linux 8)

    buildah [1.11.6-9.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-9] - update to the latest content of https://github.com/containers/buildah/tree/release-1.…

  • Medium max 6.5
    ELSA-2021-4384 1 CVE

    Moderate: bind security and bug fix update (Oracle Linux 8)

    [32:9.11.26-6] - Use random entropy to generate unique TKEY identifiers (#1980916) [32:9.11.26-5] - Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1953056)

  • Medium max 5.9
    ELSA-2021-4368 1 CVE

    Moderate: openssh security update (Oracle Linux 8)

    [8.0p1-10] - sshd -T requires -C when 'Match' is used in sshd_config (#1836277) [8.0p1-9] - CVE-2020-14145 openssh: Observable Discrepancy leading to an information leak in the algorithm negotiation (#1882252) - Hostbased ssh authentication fails if session I…