Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

  • High
    ELSA-2021-2147 1 CVE

    Important: glib2 security update (Oracle Linux 7)

    [2.56.1-9] - Fix CVE-2021-27219 Resolves: #1960596

  • High
    ELSA-2021-9221 8 CVEs

    Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

    [5.4.17-2102.201.3.el8] - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544] [5.4.17-2102.201.2.el8] - md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam) [Orabug: 32764237…

  • High
    ELSA-2021-9268 1 CVE

    Important: olcne security update (Oracle Linux 7)

    coredns [1.7.0-1] - Added Oracle specific build files cri-o [1.18.4-2] - Fix for CVE-2021-27918 [1.18.4-1] - Added Oracle Specifile Files for cri-o cri-tools [1.18.0-2] - Address CVE-2021-27918 etcd [3.4.3-1.0.5] - Address CVE-2021-27918 flannel [0.12.0-2] - …

  • High
    ELSA-2021-9267 1 CVE

    Important: olcne security update (Oracle Linux 8)

    helm [3.3.4-2] - Address CVE-2021-27918 coredns [1.7.0-1] - Added Oracle specific build files cri-o [1.18.4-2] - Fix for CVE-2021-27918 [1.18.4-1] - Added Oracle Specifile Files for cri-o cri-tools [1.18.0-2] - Address CVE-2021-27918 etcd [3.4.3-1.0.5] - Addr…

  • High max 7.3
    ELSA-2021-2036 1 CVE

    Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

    [5.0.203-1.0.1] - Add support for new Oracle release [5.0.203-1] - Update to .NET SDK 5.0.203 and Runtime 5.0.6 - Resolves: RHBZ#1954328 [5.0.202-1] - Update to .NET SDK 5.0.202 and Runtime 5.0.5 - Resolves: RHBZ#1947662

  • High max 7.3
    ELSA-2021-2037 1 CVE

    Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

    [3.1.115-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.115-1] - Update to .NET SDK 3.1.115 and Runtime 3.1.15 - Resolves: RHBZ#1954333 [3.1.114-2] - Rebuild to tag into …

  • High max 7.5
    ELSA-2021-2034 1 CVE

    Important: redis:6 security update (Oracle Linux 8)

    [6.0.9-3] - fix integer overflow via STRALGO LCS command CVE-2021-29477

  • High
    ELSA-2021-1979 1 CVE

    Important: squid:4 security update (Oracle Linux 8)

    squid [7:4.11-4.2] - Resolves: #1944260 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling

  • High
    ELSA-2021-1983 1 CVE

    Important: idm:DL1 security update (Oracle Linux 8)

    slapi-nis [0.56.6-2] - CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN - Resolves: rhbz#1944713

  • High max 7.5
    ELSA-2021-1989 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.26-4] - Possible assertion failure on DNAME processing (CVE-2021-25215)

  • Medium max 6.9
    ELSA-2021-1846 1 CVE 1 exploited

    Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8)

    bind-dyndb-ldap [11.6-2] - Rebuild against bind 9.11.26 - Resolves: rhbz#1904612 [11.6-1] - New upstream release - Resolves: rhbz#1891735 ipa [4.9.2-3.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.2-3] - ipa-client-install dis…

  • Medium max 9.8
    ELSA-2021-1879 3 CVEs

    Moderate: python38:3.8 security update (Oracle Linux 8)

    python38 [3.8.6-3] - Security fix for CVE-2021-3177 Resolves: rhbz#1919161 [3.8.6-2] - Add support for upstream architecture names https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names Resolves: rhbz#1868006 [3.8.6-1] - Update to 3.8.6 - S…

  • Medium max 7.5
    ELSA-2021-1796 2 CVEs

    Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

    cockpit-podman [29-2] - fix gating test failure for cockpit-podman - Related: #1914884 [29-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/29 - Related: #1883490 conmon [2:2.0.26-1] - update to https://github.com/containers/conmo…

  • Medium max 6.7
    ELSA-2021-1611 2 CVEs

    Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)

    [239-45.0.1] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orab…

  • Medium
    ELSA-2021-1783 1 CVE

    Moderate: tigervnc security, bug fix, and enhancement update (Oracle Linux 8)

    [1.11.0-6] - Use GNOME as default session Resolves: bz#1853608 [1.11.0-5] - Make sure we log properly output to journal (actually log to syslog) Resolves: bz#1841537 [1.11.0-4] - Make sure we log properly output to journal Resolves: bz#1841537 [1.11.0-3] - vn…

  • Medium max 6.5
    ELSA-2021-1631 1 CVE

    Moderate: python-urllib3 security update (Oracle Linux 8)

    [1.24.2-5.0.1] - set RECENT_DATE to 01/30/2019 to make checks happy [Orabug: 30228991] [1.24.2-5] - Security fix for CVE-2020-26137 Resolves: rhbz#1883889

  • Medium
    ELSA-2021-1791 4 CVEs

    Moderate: spice-vdagent security and bug fix update (Oracle Linux 8)

    [0.20.0-3] - Fix mouse problems in multi-monitor environments under Wayland Resolves: rhbz#1790904 rhbz#1824610 [0.20.0-2] - Resolves: CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653

  • Medium max 5.5
    ELSA-2021-1647 3 CVEs 1 exploited

    Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)

    openchange [2.3-27.0.1] - Use ldconfig_scriptlets [2.3-27] - Rebuild for newer samba samba [4.13.3-3] - resolves: #1924615 - Fix a memcache bug when cache is full - resolves: #1924571 - Ensure that libwbclient has been updated before restarting services [4.13…

  • Low max 7.8
    ELSA-2021-1679 1 CVE

    Low: bash security and bug fix update (Oracle Linux 8)

    [4.4.19-14] - Fix hang when limit for nproc is very high Resolves: #1890888 [4.4.19-13] - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943

  • Medium max 9.8
    ELSA-2021-1859 2 CVEs

    Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)

    [7.3.6-2] - change working dir to in grafana-cli wrapper (fixes Red Hat BZ #1916083) - add pcp-redis-datasource to allow_loading_unsigned_plugins config option [7.3.6-1] - update to 7.3.6 tagged upstream community sources, see CHANGELOG - remove dependency on…

  • Medium
    ELSA-2021-1881 1 CVE

    Moderate: poppler and evince security, bug fix, and enhancement update (Oracle Linux 8)

    evince [3.28.4-11] - Add remaining translations of string 'Reset form' - Resolves: #1896006 [3.28.4-10] - Add available translations of string 'Reset form' - Resolves: #1896006 [3.28.4-9] - Ship evince-devel - Resolves: #1919423 [3.28.4-8] - Handle ResetForm …

  • Medium
    ELSA-2021-1887 2 CVEs

    Moderate: dovecot security and bug fix update (Oracle Linux 8)

    [1:2.3.8-9] - fix CVE-2020-24386 IMAP hibernation function allows mail access (#1913534) [1:2.3.8-8] - fix CVE-2020-25275 denial of service via mail MIME parsing (#1914019) [1:2.3.8-7] - change run directory from /var/run to /run (#1805947) [1:2.3.8-6] - fix …

  • Medium max 6.1
    ELSA-2021-1898 1 CVE

    Moderate: python-lxml security update (Oracle Linux 8)

    [4.2.3-2] - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz#1901633

  • Medium
    ELSA-2021-1811 5 CVEs

    Moderate: libvncserver security update (Oracle Linux 8)

    [0.9.11-17] - Fix CVE-2020-25708 Resolves: #1898078 [0.9.11-16] - Fix CVE-2019-20839 Resolves: #1851032 - Fix CVE-2018-21247 Resolves: #1852516 - Fix CVE-2020-14405 Resolves: #1860527 - Fix CVE-2020-14397 Resolves: #1861152

  • Medium
    ELSA-2021-1751 2 CVEs

    Moderate: mailman:2.1 security update (Oracle Linux 8)

    [3:2.1.29-11] - Fixes for CVE-2020-12108 and CVE-2020-15011

  • High max 5.5
    ELSA-2021-1578 23 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

    [4.18.0-305.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

  • Medium max 9.8
    ELSA-2021-1761 4 CVEs

    Moderate: python27:2.7 security and bug fix update (Oracle Linux 8)

    python2 [2.7.18-4.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [2.7.18-4] - Security fix for CVE-2021-3177 Resolves: rhbz#1919163 [2.7.18-3] - Fixes for bundling prefix=/app build in gimp/inkscape containers Resolves: rhbz#1907592 [2…

  • Medium
    ELSA-2021-1744 1 CVE

    Moderate: sane-backends security update (Oracle Linux 8)

    [1.0.27-22] - related 1852663 - needed to rebuild due infrastructure error [1.0.27-21] - 1852663, 1848097 - NULL pointer dereference in sanei_epson_net_read function [1.0.27-20] - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img - 185…

  • Medium max 7.5
    ELSA-2021-1593 1 CVE

    Moderate: krb5 security update (Oracle Linux 8)

    [1.18.2-8] - Add recursion limit for ASN.1 indefinite lengths (CVE-2020-28196) - Resolves: #1906492 [1.18.2-7] - Document -k option in kvno(1) synopsis - Resolves: #1869055 [1.18.2-6] - Enable MD5 override for FIPS RADIUS - Resolves: #1872689 [1.18.2-5.2] - U…

  • Medium
    ELSA-2021-1756 1 CVE

    Moderate: qt5-qtbase security and bug fix update (Oracle Linux 8)

    [5.12.5-8] - Build against system xkb and openssl 1.1 Resolves: bz#1882375 [5.12.5-7] - Fix buffer overflow in XBM parser Resolves: bz#1870364

  • Low
    ELSA-2021-1675 1 CVE

    Low: libdb security update (Oracle Linux 8)

    [5.3.28-40] - Resolves: CVE-2019-2708 - Resolves: #1856237

  • Medium
    ELSA-2021-1842 2 CVEs

    Moderate: raptor2 security and bug fix update (Oracle Linux 8)

    [2.0.15-16] - Resolves: rhbz#1900904 CVE-2020-25713 raptor2: malformed input file can lead to a segfault [2.0.15-15] - Resolves: rhbz#1896534 CVE-2017-18926 raptor: heap-based buffer overflow [2.0.15-14] - Resolves: rhbz#1896340 Suppress documentation in Flat…

  • Low
    ELSA-2021-1723 2 CVEs

    Low: sudo security and bug fix update (Oracle Linux 8)

    [1.8.29-7] - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Reso…

  • Low
    ELSA-2021-1935 2 CVEs

    Low: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

    rust [1.49.0-1] - Update to 1.49.0. [1.48.0-1] - Update to 1.48.0. rust-toolset [1.49.0-1] - Update to Rust and Cargo 1.49.0. [1.48.0-1] - Update to Rust and Cargo 1.48.0.

  • Medium
    ELSA-2021-1789 1 CVE

    Moderate: gssdp and gupnp security update (Oracle Linux 8)

    gssdp [1.0.5-1] + gssdp-1.0.5-1 - Update to 1.0.5 - Fix SUBSCRIBE misbehaviour - Resolves: #1861928 gupnp [1.0.6-1] + gupnp-1.0.6-1 - Update to 1.0.6 - Fix SUBSCRIBE misbehaviour - Resolves: #1846589

  • Medium max 5.3
    ELSA-2021-1702 1 CVE

    Moderate: brotli security update (Oracle Linux 8)

    [1.0.6-3] - Resolves: CVE-2020-8927

  • Medium
    ELSA-2021-1678 2 CVEs

    Moderate: perl:5.26 security and bug fix update (Oracle Linux 8)

    [4:5.26.3-419] - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) [4:5.26.3-418] - Fix CVE-2020-12723 (bug #1839279)

  • Medium max 6.7
    ELSA-2021-1582 1 CVE

    Moderate: cpio security update (Oracle Linux 8)

    [2.12-10] - Fixed improper input validation when writing tar header fields (#1766223) [2.12-9] - Extract: retain times for symlinks (#1487673)

  • Medium
    ELSA-2021-1597 1 CVE

    Moderate: libxml2 security update (Oracle Linux 8)

    [2.9.7-9.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-9] - Fix CVE-2020-24977 (#1878252)

  • Medium
    ELSA-2021-1627 3 CVEs

    Moderate: trousers security, bug fix, and enhancement update (Oracle Linux 8)

    [0.3.15-1] - Rebase to 0.3.15 - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414