Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

High

ELSA-2021-9068 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2047.500.10.el7] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: don't 'handle' erro…

Feb 19, 2021
Medium

ELSA-2021-0557 1 CVE

Moderate: perl:5.26 security update (Oracle Linux 8)

[4:5.26.3-417] - Fix CVE-2020-12723 (bug #1909860) - Fix Time-Local tests to pass after year 2019 (bug #1807120)

Feb 18, 2021
High

ELSA-2021-0611 1 CVE

Important: xterm security update (Oracle Linux 8)

[331-1.2] - Fix issue found by covcan - Related: rhbz#1927567 [331-1.1] - Backport security fix for CVE-2021-27135 - Resolves: rhbz#1927567

Feb 18, 2021
High

ELSA-2021-9058 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Feb 17, 2021
High

ELSA-2021-0558 3 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)

[4.18.0-240.15.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

Feb 17, 2021
Medium

ELSA-2021-0538 3 CVEs

Moderate: nss security and bug fix update (Oracle Linux 8)

[3.53.1-17] - Fix various corner cases with ike v1 app b support. [3.53.1-16] - Fix the following CVE - CVE-2020-12403 chacha-poly issues - CVE-2020-12400 constant time ECC. - CVE-2020-6829 constant time ECC. [3.53.1-15] - Revert some policy changes the gener…

Feb 17, 2021
High

ELSA-2021-9051 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.48.3.1] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492113] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492105] {CVE-2021-26931} - xen-netback: don't 'handle' error by B…

Feb 16, 2021
High

ELSA-2021-9052 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2047.500.9.1] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492110] {CVE-2021-26930} - xen-scsiback: dont 'handle' error by BUG() (Jan Beulich) [Orabug: 32492102] {CVE-2021-26931} - xen-netback: dont 'handle' error by …

Feb 16, 2021
High

ELSA-2021-9057 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.103.3.1.el7] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492109] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492101] {CVE-2021-26931} - xen-netback: don't 'handle' erro…

Feb 16, 2021
High

ELSA-2021-9053 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.103.3.1uek] - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich) [Orabug: 32492109] {CVE-2021-26930} - xen-scsiback: don't 'handle' error by BUG() (Jan Beulich) [Orabug: 32492101] {CVE-2021-26931} - xen-netback: don't 'handle' error…

Feb 16, 2021
High max 6.5

ELSA-2021-0474 1 CVE

Important: dotnet security and bugfix update (Oracle Linux 8)

[2.1.521-1] - Update to .NET Core SDK 2.1.521 and Runtime 2.1.25 - Resolves: RHBZ#1922272

Feb 16, 2021
High max 6.5

ELSA-2021-0476 1 CVE

Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

[5.0.103-1.0.1] - Add support for new Oracle release [5.0.103-1] - Update to .NET SDK 5.0.103 and Runtime 5.0.3 - Resolves: RHBZ#1924765

Feb 11, 2021
High max 6.5

ELSA-2021-0471 1 CVE

Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

[3.1.112-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.112-1] - Update to .NET Core SDK 3.1.112 and Runtime 3.1.12 - Resolves: RHBZ#1923377

Feb 11, 2021
High max 6.3

ELSA-2021-9029 2 CVEs

Important: olcne security update (Oracle Linux 7)

kata-runtime [1.7.3-1.0.7] - Address CVE-2020-28914 kata [1.7.3-1.0.12] - UEKR6 guest kernel support [1.7.3-1.0.11] - Address CVE-2020-28914 kubernetes [1.17.9-1.0.6] - Kata CVE-2020-28914 olcne [1.1.10-1] - Address CVE-2020-28914: An improper file permission…

Feb 10, 2021
High max 6.3

ELSA-2021-9028 2 CVEs

Important: olcne security update (Oracle Linux 7)

kubernetes [1.18.10-3] - Kata CVE-2020-28914 kata-proxy [1.11.5-1] - Added Oracle Specific Build Files for kata-proxy kata-shim [1.11.5-1] - Added Oracle Specific Build Files for kata-shim kata-ksm-throttler [1.11.5-1] - Added Oracle Specific Build Files for …

Feb 10, 2021
High max 8.8

ELSA-2021-9041 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.54.1] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349209] {CVE-2020-36158}

Feb 9, 2021
High max 8.8

ELSA-2021-9040 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.54.1] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349209] {CVE-2020-36158}

Feb 9, 2021
High max 8.8

ELSA-2021-9039 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2025.405.3.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280] [4.14.35-2025.405.2.el7] - nfs: Fix security label length not being reset (Jeffrey Mitchell) [Orabug: 32350995] [4.14.35-2025.405.1.el7] - net/rds: …

Feb 8, 2021
High max 5.5

ELSA-2021-9034 22 CVEs

Important: qemu security update (Oracle Linux 7)

[15:4.2.1-4.el7] - Document CVE-2020-25723 as fixed (Mark Kanda) [Orabug: 32222397] {CVE-2020-25084} {CVE-2020-25723} - hw/net/e1000e: advance desc_offset in case of null descriptor (Prasad J Pandit) [Orabug: 32217517] {CVE-2020-28916} - i386: Add 2nd Generat…

Feb 8, 2021
High max 7.3

ELSA-2021-0411 1 CVE

Important: flatpak security update (Oracle Linux 7)

[1.0.9-10] - Fix CVE-2021-21261 (#1918771)

Feb 8, 2021
High max 8.8

ELSA-2021-9035 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.405.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280] [4.14.35-2025.405.2] - nfs: Fix security label length not being reset (Jeffrey Mitchell) [Orabug: 32350995] [4.14.35-2025.405.1] - net/rds: Fix gfp_t pa…

Feb 8, 2021
High max 8.8

ELSA-2021-9037 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.103.3] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2036.103.2] - A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380824] - netfilter: add and use nf_hook_slow_list() (Florian West…

Feb 8, 2021
High max 8.8

ELSA-2021-9038 6 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.103.3.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426610] [5.4.17-2036.103.2.el7] - A/A Bonding: Fix a one-byte-off kmalloc (Hakon Bugge) [Orabug: 32380824] - netfilter: add and use nf_hook_slow_list() (Flor…

Feb 8, 2021
Medium max 5.9

ELSA-2021-0348 3 CVEs

Moderate: glibc security and bug fix update (Oracle Linux 7)

[2.17-322.0.2] - merge RH el7 u9 errata patches with Oracle patches Review-exception: Simple merge - merge RH el7 u9 patches with Oracle patches Review-exception: Simple merge - Four patches to match 3rd patch bundle from Marvell - modify MIPS values in elf/e…

Feb 5, 2021
Medium

ELSA-2021-0347 2 CVEs

Moderate: qemu-kvm security and bug fix update (Oracle Linux 7)

[1.5.3-175.el7_9.3] - kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997] - Resolves: bz#1884997 (qemu-kvm FTBFS on rhel7.9) [1.5.3-175.el7_9.2] - kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960] - kvm-hw-core-loader-F…

Feb 3, 2021
Medium

ELSA-2021-0343 3 CVEs

Moderate: perl security update (Oracle Linux 7)

[4:5.16.3-299] - Fix CVE-2020-10543 (bug #1839272) - Fix CVE-2020-10878 (bug #1839275) [4:5.16.3-298] - Fix CVE-2020-12723 (bug #1839278)

Feb 3, 2021
Medium

ELSA-2021-0336 2 CVEs

Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)

[3.10.0-1160.15.2.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x…

Feb 3, 2021
High max 8.8

ELSA-2021-9030 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.47.3] - sysctl: handle overflow in proc_get_long (Christian Brauner) [Orabug: 31588015] [4.1.12-124.47.2] - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu) [Orabug: 31350932] {CVE-2020-12653} - lockd: don't use in…

Feb 3, 2021
High

ELSA-2021-9025 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2025.404.1.2.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

Feb 1, 2021
High

ELSA-2021-9024 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2025.404.1.2.el7] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

Feb 1, 2021
High max 7.3

ELSA-2021-0304 1 CVE

Important: flatpak security update (Oracle Linux 8)

[1.6.2-5] - Fix CVE-2021-21261 (#1918774)

Feb 1, 2021
High

ELSA-2021-9023 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.404.1.2] - Revert 'rds: Deregister all FRWR mr with free_mr' (aru kolappan) [Orabug: 32426280]

Jan 30, 2021
High max 8.8

ELSA-2021-0297 6 CVEs

Important: thunderbird security update (Oracle Linux 7)

[78.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.7.0-1] - Update to 78.7.0

Jan 29, 2021
High max 8.8

ELSA-2021-0298 6 CVEs

Important: thunderbird security update (Oracle Linux 8)

[78.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.7.0-1] - Update to 78.7.0

Jan 29, 2021
High

ELSA-2021-0290 5 CVEs

Important: firefox security update (Oracle Linux 7)

[78.7.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.7.0-2] - Update to 78.7.0 build2 [78.7.0-1] - Update t…

Jan 28, 2021
High

ELSA-2021-0288 5 CVEs

Important: firefox security update (Oracle Linux 8)

[78.7.0-2.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.7.0-2] - Update to 78.7.0 build2 [78.7.0-1] - Update to 78.7.0 build1

Jan 28, 2021
High max 7.8

ELSA-2021-0221 1 CVE 1 exploited

Important: sudo security update (Oracle Linux 7)

[1.8.23-10.1] - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz#1917729

Jan 27, 2021
High max 7.8

ELSA-2021-0218 1 CVE 1 exploited

Important: sudo security update (Oracle Linux 8)

[1.8.29-6.1] - RHEL 8.3.Z ERRATUM - CVE-2021-3156 Resolves: rhbz#1917732

Jan 27, 2021
High

ELSA-2021-0150 7 CVEs

Important: dnsmasq security update (Oracle Linux 8)

[2.79-13.1] - Fix various issues in dnssec validation (CVE-2020-25681) - Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685)

Jan 20, 2021
Medium

ELSA-2021-0153 3 CVEs

Moderate: dnsmasq security update (Oracle Linux 7)

[2.76-16.1] - Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementation

Jan 19, 2021