Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

High max 9.8

ELSA-2021-9107 1 CVE

Important: python security update (Oracle Linux 7)

[2.7.5-90.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 15, 2021
High

ELSA-2021-9109 5 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-5.el7] - qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva) - hostmem: fix default 'prealloc-threads' count (Mark Kanda) [Orabug: 32472127] - hostmem: introduce 'prealloc-threads' property (Igor Mammedov) - qom: introduce object_register…

Mar 15, 2021
High max 7.8

ELSA-2021-9084 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.501.1.el7uek] - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy) [Orabug: 32620381] [4.14.35-2047.501.0] - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531559] - …

Mar 12, 2021
High

ELSA-2021-9104 5 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-5.el7] - qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva) - hostmem: fix default 'prealloc-threads' count (Mark Kanda) [Orabug: 32472127] - hostmem: introduce 'prealloc-threads' property (Igor Mammedov) - qom: introduce object_register…

Mar 12, 2021
High max 7.5

ELSA-2021-0808 1 CVE

Important: wpa_supplicant security update (Oracle Linux 7)

[1:2.6-12.1.0.2] - Added undefine-bitwise-in-common-header.patch [bug 27677154] [1:2.6-12.1] - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Mar 12, 2021
High max 7.5

ELSA-2021-0809 1 CVE

Important: wpa_supplicant security update (Oracle Linux 8)

[1:2.9-2.1] - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)

Mar 11, 2021
High max 8.1

ELSA-2021-0793 1 CVE

Important: .NET Core on OL 8 security and bugfix update (Oracle Linux 8)

[5.0.104-1.0.1] - Add support for new Oracle release [5.0.104-1] - Update to .NET SDK 5.0.104 and Runtime 5.0.4 - Resolves: RHBZ#1934247

Mar 11, 2021
High max 7.8

ELSA-2021-9085 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.104.4.el8uek] - KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas) [Orabug: 32545182] [5.4.17-2036.104.3.el8uek] - config: enable CONFIG_MLX5_MPFS (Brian Maly) [Orabug: 32249042] - net: Fix bridge enslavement failure (Ido Schimmel) […

Mar 11, 2021
High max 9.8

ELSA-2021-9101 1 CVE

Important: python3 security update (Oracle Linux 7)

[3.6.8-18.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 10, 2021
High max 8.1

ELSA-2021-0790 1 CVE

Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

[3.1.113-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.113-1] - Update to .NET Core SDK 3.1.113 and Runtime 3.1.13 - Resolves: RHBZ#1933845

Mar 10, 2021
High max 9.8

ELSA-2021-9100 1 CVE

Important: python3 security update (Oracle Linux 8)

[3.6.8-31.0.3] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Mar 10, 2021
High max 8.1

ELSA-2021-0788 1 CVE

Important: dotnet security and bugfix update (Oracle Linux 8)

[2.1.522-1] - Update to .NET Core SDK 2.1.522 and Runtime 2.1.26 - Resolves: RHBZ#1933844

Mar 10, 2021
High

ELSA-2021-0742 1 CVE

Important: screen security update (Oracle Linux 7)

[4.1.0-0.27.2012314git3c2946] - fix CVE-2021-26937 (#1927063)

Mar 9, 2021
High max 7.8

ELSA-2021-9087 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.501.0.el7] - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531559] - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches (Dave Kleikamp) [Orabug: 32532588] - dts/pensando: Fix compat…

Mar 9, 2021
High

ELSA-2021-0744 2 CVEs

Important: nodejs:14 security and bug fix update (Oracle Linux 8)

nodejs [1:14.16.0-2] - Resolves: RHBZ#1932427 - remove --debug-nghttp2 option [1:14.16.0-1] - Resolves: RHBZ#1932317, RHBZ#1932425 - Rebase, remove ini patch [1:14.15.4-2] - Add patch for yarn crash - Resolves: RHBZ#1916465 [1:14.15.4-1] - Security rebase to …

Mar 9, 2021
High max 7.8

ELSA-2021-9086 7 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.104.4.el7] - KVM: arm64: guest context in x18 instead of x29 (Mihai Carabas) [Orabug: 32545182] [5.4.17-2036.104.3.el7] - config: enable CONFIG_MLX5_MPFS (Brian Maly) [Orabug: 32249042] - net: Fix bridge enslavement failure (Ido Schimmel) [Orabug…

Mar 9, 2021
Medium

ELSA-2021-0699 7 CVEs

Moderate: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.8.e7.2] - Enable common subpackage for aarch64 - Disable RHEL patch 0183-efinet-retransmit-if-our-device-is-busy.patch to comply with UEFI spec - add SBAT metadata for Oracle Linux grub2 - Use similar format for menu entry in grub environment blo…

Mar 5, 2021
High

ELSA-2021-0734 2 CVEs

Important: nodejs:12 security update (Oracle Linux 8)

nodejs [1:12.21.0-1] - Resolves: RHBZ#1932315, RHBZ#1932424 - remove --debug-nghttp2 option - remove ini patch - Backport patch to use getauxval

Mar 5, 2021
High max 7.0

ELSA-2021-0705 1 CVE

Important: container-tools:1.0 security update (Oracle Linux 8)

buildah [1.5-8.gite94b4f9.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.5-8.gite94b4f9] - bump release to preserve upgrade path - Related: #1821193 [1.5-4.gite94b4f9] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to l…

Mar 5, 2021
High max 7.0

ELSA-2021-0706 1 CVE

Important: container-tools:2.0 security update (Oracle Linux 8)

buildah [1.11.6-8.0.1] - Reduce unnecessary writable mounts in NaiveDiffDriver [Orabug: 31025483] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-8] - exclude i686 arch - Related: #1821193 [1.11.6-7] - fix 'CVE-2020-10696 buildah: craft…

Mar 5, 2021
Medium

ELSA-2021-0696 7 CVEs

Moderate: grub2 security update (Oracle Linux 8)

[2.02-90.0.2.el8_3.1] - Fix various coverity issues [Orabug: 32530657] - Add SBAT metadata to grubx64.efi [Orabug: 32530657] - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327] - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]…

Mar 5, 2021
High

ELSA-2021-0735 2 CVEs

Important: nodejs:10 security update (Oracle Linux 8)

nodejs [1:10.24.0-1] - Resolves: RHBZ#1932373, RHBZ#1932426 - Resolves CVE-2021-22883 and CVE-2021-22884 - remove -debug-nghttp2 flag (1930775) - remove ini patch merged upstream

Mar 5, 2021
Low

ELSA-2021-0711 1 CVE

Low: virt:ol and virt-devel:ol security update (Oracle Linux 8)

qemu-kvm [4.2.0-34.el8_3.4] - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919109] - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919109] - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919109] - Resolv…

Mar 5, 2021
High

ELSA-2021-9079 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Mar 3, 2021
High max 8.1

ELSA-2021-0671 1 CVE

Important: bind security update (Oracle Linux 7)

[32:9.11.4-26.P2.4] - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) [32:9.11.4-26.P2.3] - Fix inline re-signing (#rh1889902) [32:9.11.4-26.P2.2] - Fix unsupported algorithms validation (#rh1769876) [32:9.11.4-26.P2.1] - Fix tsig-request veri…

Mar 2, 2021
High

ELSA-2021-9076 7 CVEs

Important: grub2 security update (Oracle Linux 7)

[2.02-0.87.0.7] - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657] - Fix various coverity issues [Orabug: 32530657] - Add SBAT metadata to grubx64.efi [Orabug: 32530657] [2.02-0.87…

Mar 2, 2021
High

ELSA-2021-9077 7 CVEs

Important: grub2 security update (Oracle Linux 8)

[2.02-90.0.2] - Fix CVE-2020-14372 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 [Orabug: 32530657] - Fix various coverity issues [Orabug: 32530657] - Disable os-prober by default [Orabug: 32530657] - Add SBAT metad…

Mar 2, 2021
High max 8.1

ELSA-2021-0670 1 CVE

Important: bind security update (Oracle Linux 8)

[32:9.11.20-5.1] - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)

Mar 2, 2021
Critical

ELSA-2021-0656 4 CVEs

Critical: firefox security update (Oracle Linux 7)

[78.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.8.0-1] - Update to 78.8.0 build2 [78.7.1-1] - Update t…

Feb 26, 2021
High

ELSA-2021-0661 4 CVEs

Important: thunderbird security update (Oracle Linux 7)

[78.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.8.0-1] - Update to 78.8.0 build1

Feb 26, 2021
Critical

ELSA-2021-0655 4 CVEs

Critical: firefox security update (Oracle Linux 8)

[78.8.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.8.0-1] - Update to 78.8.0 build2 [78.7.1-1] - Update to 78.7.1 [78.7.0-3] - Fixing install prefix for the homepage

Feb 26, 2021
High

ELSA-2021-0657 4 CVEs

Important: thunderbird security update (Oracle Linux 8)

[78.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.8.0-1] - Update to 78.8.0 build1

Feb 26, 2021
High

ELSA-2021-0617 1 CVE

Important: xterm security update (Oracle Linux 7)

[295-3.1] - Backport security fix for CVE-2021-27135 - Resolves: rhbz#1927564

Feb 23, 2021
High

ELSA-2021-0618 1 CVE

Important: stunnel security update (Oracle Linux 8)

[5.56-5] - Fix CVE-2021-20230 stunnel: client certificate not correctly verified when redirect and verifyChain options are used.

Feb 23, 2021
Medium max 7.5

ELSA-2021-0551 7 CVEs

Moderate: nodejs:14 security and bug fix update (Oracle Linux 8)

nodejs [1:14.15.4-2] - Add patch for yarn crash - Resolves: RHBZ#1916465 [1:14.15.4-1] - Security rebase to 14.15.4 - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ - Resolves: RHBZ#1916463, RHBZ#1914788 - Resolves: RHBZ#1914785, RHB…

Feb 20, 2021
Medium max 9.8

ELSA-2021-0549 6 CVEs

Moderate: nodejs:12 security update (Oracle Linux 8)

nodejs [1:12.20.1-1] - Security rebase for January security release - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ - Resolves: RHBZ#1916460, RHBZ#1914786 - Resolves: RHBZ#1914784, RHBZ#1916396 nodejs-nodemon [2.0.3-1] - Resolves: R…

Feb 20, 2021
Medium max 5.3

ELSA-2021-0531 1 CVE

Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

buildah [1.16.7-4.0.1] - Handling redirect from the docker registry [Orabug: 29874238] (Nikita Gerasimov) [1.16.7-4] - update to the latest content of https://github.com/containers/buildah/tree/release-1.16 (https://github.com/containers/buildah/commit/aaed66…

Feb 20, 2021
High

ELSA-2021-0507 1 CVE

Important: subversion:1.10 security update (Oracle Linux 8)

subversion [1.10.2-4] - add security fix for CVE-2020-17525

Feb 20, 2021
Medium max 7.5

ELSA-2021-0548 10 CVEs

Moderate: nodejs:10 security update (Oracle Linux 8)

nodejs [1:10.23.1-1] - January Security release - https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/ - Rebase to 10.23.1 - Resolves: RHBZ#1916461, RHBZ#1914789 - Resolves: RHBZ#1914783, RHBZ#1916462, RHBZ#1916395, RHBZ#1916459 - Resolves…

Feb 20, 2021
High

ELSA-2021-9067 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.500.10.el7uek] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: don't handle error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: don't handle error…

Feb 19, 2021