Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

  • High max 6.7
    ELSA-2021-9306 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [5.4.17-2102.202.5] - sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133} {CVE-2021-23133} - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916} - …

  • High max 6.7
    ELSA-2021-9307 5 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2102.202.5] - sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133} - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916} - uek-rpm: update k…

  • High max 5.1
    ELSA-2021-9305 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-2047.504.2] - md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159] - video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879] - Drivers: hv: vmbus: Initialize unload_eve…

  • High
    ELSA-2021-2397 1 CVE

    Important: postgresql security update (Oracle Linux 7)

    [9.2.24-7] - Fix CVE-2021-32027 - Resolves: #1964507

  • High max 7.6
    ELSA-2021-2370 1 CVE

    Important: container-tools:3.0 security update (Oracle Linux 8)

    buildah [1.19.7-1.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) [1.19.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 (https://github.com/containers/buildah/commit/a2854e…

  • High max 7.6
    ELSA-2021-2371 1 CVE

    Important: container-tools:ol8 security update (Oracle Linux 8)

    buildah [1.19.7-2.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.19.7-2] - revert changes to the state of 3.0-8.4.0 - Related: #1954702 conmon [2:2.0.26-3] - fix 'Permission on /dev/null are changing from 666 to 777 after running podma…

  • High max 7.6
    ELSA-2021-9298 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.0.0-1.rc95] - Addresses CVE-2021-30465

  • High max 7.6
    ELSA-2021-14902 1 CVE

    Important: runc security update (Oracle Linux 7)

    [1.0.0-1.rc95] - Addresses CVE-2021-30465

  • High
    ELSA-2021-2305 4 CVEs

    Important: microcode_ctl security, bug fix and enhancement update (Oracle Linux 7)

    [2:2.1-73.9.0.1] - for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727] - set early_microcode='no' in virtualized guests to avoid early load bugs [Orabug: 30618736] - ensure late loading fixes are present on 4.1.12-* and 4.1…

  • High max 7.5
    ELSA-2021-9294 1 CVE

    Important: krb5 security update (Oracle Linux 7)

    [1.15.1-50.0.1] - Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360]

  • High max 7.5
    ELSA-2021-9290 10 CVEs

    Important: rh-postgresql10-postgresql security update (Oracle Linux 7)

    [10.15-1] - Rebase to upstream release 10.15 Resolves: CVE-2020-25695 Resolves: CVE-2020-25694 Resolves: CVE-2020-25696 [10.14-1] - Rebase to upstream release 10.14 https://www.postgresql.org/docs/10/release-10-14.html [10.12-2] - Filter provides RHBZ#1719549…

  • High
    ELSA-2021-2372 4 CVEs

    Important: postgresql:12 security update (Oracle Linux 8)

    pgaudit [1.4.0-6] - Fix build requires [1.4.0-5] - Fix build requires postgresql [12.7-1] - Update to 12.7 Resolves: #1964510 Fix: CVE-2021-32027,CVE-2021-32028

  • High
    ELSA-2021-2375 3 CVEs

    Important: postgresql:13 security update (Oracle Linux 8)

    pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 postgresql [13.3-1] - Update to 13.3 Resolves: #1966338 Fix: CVE-2021-32027,CVE-2021-32028,CVE-2021-32029

  • High max 5.9
    ELSA-2021-2352 1 CVE

    Important: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

    [3.1.116-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.116-1] - Update to .NET SDK 3.1.116 and Runtime 3.1.16 - Resolves: RHBZ#1965505 [3.1.115-1] - Update to .NET SDK 3…

  • Medium
    ELSA-2021-2318 1 CVE

    Moderate: hivex security update (Oracle Linux 7)

    [1.3.10-6.11] - Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500

  • High max 7.4
    ELSA-2021-2357 1 CVE

    Important: dhcp security update (Oracle Linux 7)

    [12:4.2.5-83.0.1] - Direct users to Oracle Linux support site. [12:4.2.5-83.1] - Fix for CVE-2021-25217 [12:4.2.5-83] - Revert fix for 1668696

  • High max 7.8
    ELSA-2021-2314 6 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-1160.31.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

  • High
    ELSA-2021-2354 3 CVEs

    Important: libwebp security update (Oracle Linux 8)

    [1.0.0-3] - Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919

  • High max 7.4
    ELSA-2021-2359 1 CVE

    Important: dhcp security update (Oracle Linux 8)

    [12:4.3.6-44.1] - Fix for CVE-2021-25217

  • High max 5.9
    ELSA-2021-2353 1 CVE

    Important: .NET 5.0 security and bugfix update (Oracle Linux 8)

    [5.0.204-1.0.1] - Add support for new Oracle release [5.0.204-1] - Update to .NET SDK 5.0.204 and Runtime 5.0.7 - Resolves: RHBZ#1966166

  • High
    ELSA-2021-2363 1 CVE

    Important: gupnp security update (Oracle Linux 8)

    [1.0.6-2] + gupnp-1.0.6-2 - Fix DNS rebind issue - Resolves: #1964710

  • High max 7.6
    ELSA-2021-2291 1 CVE

    Important: container-tools:2.0 security update (Oracle Linux 8)

    runc [1.0.0-65.rc10] - fix CVE-2021-30465 - Resolves: #1955650

  • High
    ELSA-2021-2360 2 CVEs

    Important: postgresql:9.6 security update (Oracle Linux 8)

    [9.6.22-1] - Rebase to 9.6.22 Resolves: #1964516 Fix: CVE-2021-32027, CVE-2021-32028

  • High
    ELSA-2021-2361 2 CVEs

    Important: postgresql:10 security update (Oracle Linux 8)

    [10.17-1] - Update to 10.17 Resolves: #1964520 Fix: CVE-2021-32027, CVE-2021-32028

  • High
    ELSA-2021-2290 1 CVE

    Important: nginx:1.16 security update (Oracle Linux 8)

    [1.16.1-2.0.1.1] - Remove Red Hat references [Orabug: 29498217] [1:1.16.1-2.1] - Resolves: #1963174 - CVE-2021-23017 nginx:1.16/nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

  • Medium
    ELSA-2021-2313 1 CVE

    Moderate: samba security and bug fix update (Oracle Linux 7)

    [4.10.16-15] - resolves: #1949444 - Fix CVE-2021-20254 [4.10.16-14] - resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services

  • Medium
    ELSA-2021-2322 1 CVE

    Moderate: qemu-kvm security update (Oracle Linux 7)

    [1.5.3-175.el7_9.4] - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449] - Resolves: bz#1917449 (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])

  • Medium
    ELSA-2021-2323 1 CVE

    Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

    [1.3.10.2-12] - Bump version to 1.3.10.2-12 [1.3.10.2-11] - Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the bi…

  • High
    ELSA-2021-2328 4 CVEs

    Important: qt5-qtimageformats security update (Oracle Linux 7)

    [5.9.7-2] - libwebp security fixes: Resolves: bz#1961742 Resolves: bz#1961743 Resolves: bz#1961744 Resolves: bz#1961745

  • High
    ELSA-2021-2263 3 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [78.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.11.0-1] - Update to 78.11.0 build1

  • High
    ELSA-2021-2260 3 CVEs

    Important: libwebp security update (Oracle Linux 7)

    [0.3.0-10] - Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919

  • High
    ELSA-2021-2264 3 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [78.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.11.0-1] - Update to 78.11.0 build1

  • High
    ELSA-2021-2259 1 CVE

    Important: nginx:1.18 security update (Oracle Linux 8)

    [1.18.0-3.1.0.1] - Remove Red Hat references [Orabug: 29498217] [1:1.18.0-3.1] - Resolves: #1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

  • High
    ELSA-2021-9285 4 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:4.2.1-9.el7] - Revert 'oslib-posix: refactor memory prealloc threads' (Mark Kanda) [Orabug: 32903662] - Revert 'oslib-posix: initialize backend memory objects in parallel' (Mark Kanda) [Orabug: 32903662] [15:4.2.1-8.el7] - i386/pc: let iterator handle reg…

  • High max 7.8
    ELSA-2021-2238 1 CVE 1 exploited

    Important: polkit security update (Oracle Linux 8)

    [0.115-11.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.115-11.1] - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560

  • High
    ELSA-2021-2235 1 CVE

    Important: pki-core:10.6 security update (Oracle Linux 8)

    pki-core [10.10.5-3.0.1] - Remove upstream reference. [10.10.5-3] - Bug 1960146 - CVE-2021-3551 Dogtag installer 'pkispawn' logs admin credentials into a world-readable log file

  • Critical
    ELSA-2021-2233 1 CVE

    Critical: firefox security update (Oracle Linux 8)

    [78.11.0-3.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.11.0-3] - Update to 78.11.0 build2 (release) [78.11.0-2] - Fix rhel_minor_version for dist .el8_4 and .el8 [78.11.0-1] - Update t…

  • Critical
    ELSA-2021-2206 1 CVE

    Critical: firefox security update (Oracle Linux 7)

    [78.11.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.11.0-3] - Update to 78.11.0 build2 (release) [78.11.0…

  • High
    ELSA-2021-2170 1 CVE

    Important: glib2 security and bug fix update (Oracle Linux 8)

    [2.56.4-10] - Fix various problems in GMainContext Resolves: #1953553 - Fix CVE-2021-27219 Resolves: #1960600

  • High
    ELSA-2021-2168 2 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-305.3.1_4.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…