Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

Medium max 5.3

ELSA-2021-1298 1 CVE

Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.292.b10-1] - Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201 [1:1.8.0.292.b10-0] - Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @…

Apr 21, 2021
Medium max 5.3

ELSA-2021-1301 1 CVE

Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

[1:1.8.0.292.b10-0] - Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - Update tarball generation script to use PR3822 which handles JDK-8233228 & JDK-8035166 changes - Remove RH1868759 patch as this is now resolved upstre…

Apr 21, 2021
Medium max 5.3

ELSA-2021-1307 1 CVE

Moderate: java-11-openjdk security update (Oracle Linux 8)

[1:11.0.11.0.9-0] - Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Require tzdata 2020f to match upstream change JDK-8259048 - Require tzdata 2021a to match upstream change JDK-8260356 - Remove RH1868754 patch as this is now resolved upstre…

Apr 21, 2021
High

ELSA-2021-1206 1 CVE

Important: gnutls and nettle security update (Oracle Linux 8)

gnutls [3.6.14-8] - Port fixes for potential miscalculation in ecdsa_verify (#1942929) nettle [3.4.1-4] - Fix patch application [3.4.1-3] - Port fixes for potential miscalculation in ecdsa_verify (#1942924)

Apr 16, 2021
Medium

ELSA-2021-1192 3 CVEs

Moderate: thunderbird security update (Oracle Linux 7)

[78.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.1-1] - Update to 78.9.1

Apr 15, 2021
Medium

ELSA-2021-1193 3 CVEs

Moderate: thunderbird security update (Oracle Linux 8)

[78.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.1-1] - Update to 78.9.1

Apr 15, 2021
High

ELSA-2021-1197 1 CVE

Important: libldb security update (Oracle Linux 8)

[2.1.3-3] - resolves: rhbz#1941514 - Fix CVE-2021-20277

Apr 14, 2021
High

ELSA-2021-9175 4 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.502.4.el7] - Revert 'rds: ib: Remove two ib_modify_qp() calls' (Sharath Srinivasan) [Orabug: 32715567] - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy) [Orabug: 32532514] [4.14.35-2047.502.3.el7] - video: hyperv…

Apr 13, 2021
High

ELSA-2021-9176 0 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Apr 13, 2021
High

ELSA-2021-9172 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.502.4] - Revert 'rds: ib: Remove two ib_modify_qp() calls' (Sharath Srinivasan) [Orabug: 32715567] - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy) [Orabug: 32532514] [4.14.35-2047.502.3] - video: hyperv_fb: Fix…

Apr 12, 2021
High

ELSA-2021-1145 1 CVE

Important: nettle security update (Oracle Linux 7)

[2.7.1-9] - Port fixes for potential miscalculation in ecdsa_verify (#1943156)

Apr 9, 2021
High

ELSA-2021-1135 1 CVE

Important: squid security update (Oracle Linux 7)

[7:3.5.20-17.6] - Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling

Apr 9, 2021
Medium

ELSA-2021-1086 1 CVE

Moderate: 389-ds:1.4 security and bug fix update (Oracle Linux 8)

[1.4.3.8-7] - Bump version to 1.4.3.8-7 - Resolves: Bug 1908705 - CVE-2020-35518 389-ds:1.4/389-ds-base: information disclosure during the binding of a DN - Resolves: Bug 1936461 - A failed re-indexing leaves the database in broken state. - Resolves: Bug 1912…

Apr 9, 2021
High

ELSA-2021-9164 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.49.3.1] - SecureBoot Digicert 2021 certificates update (Brian Maly) [Orabug: 32532671] [4.1.12-124.49.3] - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross) [Orabug: 32485156] - audit: fix error handling in audit_data_to_…

Apr 8, 2021
High

ELSA-2021-1072 1 CVE

Important: libldb security update (Oracle Linux 7)

[1.5.4-2] - resolves: #1941511 - Fix CVE-2021-20277

Apr 8, 2021
High

ELSA-2021-1071 3 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.24.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…

Apr 7, 2021
High max 7.1

ELSA-2021-1068 1 CVE

Important: flatpak security update (Oracle Linux 8)

[1.6.2-6] - Fix CVE-2021-21381 (#1938062)

Apr 7, 2021
High max 7.8

ELSA-2021-1093 8 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-240.22.1_3.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…

Apr 7, 2021
High max 7.8

ELSA-2021-9140 8 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2102.200.13] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171} - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2…

Mar 31, 2021
High max 7.8

ELSA-2021-9141 8 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2102.200.13.el7] - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {CVE-2020-27171} - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656761] {CVE-2020-27170} {C…

Mar 31, 2021
High max 7.1

ELSA-2021-1002 1 CVE

Important: flatpak security update (Oracle Linux 7)

[1.0.9-11] - Fix CVE-2021-21381 (#1938059)

Mar 29, 2021
High max 7.4

ELSA-2021-1024 2 CVEs

Important: openssl security update (Oracle Linux 8)

[1.1.1g-15] - version bump [1.1.1g-14] - CVE-2021-3450 openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT [1.1.1g-13] - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing

Mar 29, 2021
High

ELSA-2021-0996 4 CVEs

Important: thunderbird security update (Oracle Linux 7)

[78.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.0-3] - Update to 78.9.0 build2, updated langpacks [78.9.0-2] - Update to 78.9.0 build2 [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0993 4 CVEs

Important: thunderbird security update (Oracle Linux 8)

[78.9.0-3.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.9.0-3] - Update to 78.9.0 build2, updated langpacks [78.9.0-2] - Update to 78.9.0 build2 [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0990 4 CVEs

Important: firefox security update (Oracle Linux 8)

[78.9.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.9.0-1] - Update to 78.9.0 build1

Mar 26, 2021
High

ELSA-2021-0992 4 CVEs

Important: firefox security update (Oracle Linux 7)

[78.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.9.0-1] - Update to 78.9.0 build1

Mar 25, 2021
High

ELSA-2021-9136 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.500.9.3.el7] - net/rds: Reject error code change (Ka-Cheong Poon) [Orabug: 32577425] - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran) [Orabug: 32577399] - net/rds: increase 1MB MR pool size for RDS (Manj…

Mar 24, 2021
High

ELSA-2021-9135 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.500.9.3.el7uek] - net/rds: Reject error code change (Ka-Cheong Poon) [Orabug: 32577425] - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran) [Orabug: 32577399] - net/rds: increase 1MB MR pool size for RDS (M…

Mar 24, 2021
High

ELSA-2021-0966 1 CVE

Important: pki-core:10.6 security update (Oracle Linux 8)

pki-core [10.9.4-3.0.1] - Remove redhat reference. [10.9.4-3] - Bug # 1933146 - PKI instance creation failed with new 389-ds-base build [10.9.4-2] - CVE-2021-20179: Fix unprivileged users can renew any certificate

Mar 24, 2021
High max 9.8

ELSA-2021-9130 1 CVE

Important: python38:3.8 security update (Oracle Linux 8)

python38 [3.8.3-3.0.1] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
High max 9.8

ELSA-2021-9129 1 CVE

Important: python36:3.6 security update (Oracle Linux 8)

python36 [3.6.8-2.0.1] - Rebuild with python containing fix for [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
High max 9.8

ELSA-2021-9128 1 CVE

Important: python27:2.7 security update (Oracle Linux 8)

python2 [2.7.17-2.0.2] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 22, 2021
Medium max 6.9

ELSA-2021-0860 1 CVE 1 exploited

Moderate: ipa security and bug fix update (Oracle Linux 7)

[4.6.8-5.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7_9.4] - Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore e…

Mar 19, 2021
High

ELSA-2021-9116 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.501.2.el7] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CV…

Mar 18, 2021
High max 4.7

ELSA-2021-0851 6 CVEs

Important: pki-core security and bug fix update (Oracle Linux 7)

[10.5.18-12] - Change variable 'TPS' to 'tps' - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport an…

Mar 17, 2021
High

ELSA-2021-9113 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.48.6] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603382] - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603382] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: is…

Mar 17, 2021
High

ELSA-2021-0856 11 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.21.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x…

Mar 17, 2021
High

ELSA-2021-9112 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.501.2] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CVE-20…

Mar 17, 2021
High

ELSA-2021-9115 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.104.5.el7] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603379] {CVE…

Mar 17, 2021
High

ELSA-2021-9114 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.104.5] - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603379] {CVE-202…

Mar 17, 2021