Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

High max 8.0

ELSA-2021-0162 1 CVE

Important: xstream security update (Oracle Linux 7)

[1.3.1-12] - Rebuild with OpenJDK 7 [1.3.1-11] - Fix remote code execution vulnerability - Resolves: CVE-2020-26217

Jan 19, 2021
High max 7.5

ELSA-2021-0095 1 CVE

Important: dotnet3.1 security and bugfix update (Oracle Linux 8)

[3.1.111-1.0.1] - Update patch to support 8.3 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.111-1] - Update to .NET Core SDK 3.1.111 and Runtime 3.1.11 - Resolves: RHBZ#1907633

Jan 15, 2021
High max 7.5

ELSA-2021-0094 1 CVE

Important: dotnet5.0 security and bugfix update (Oracle Linux 8)

[5.0.102-2.0.1] - Add support for new Oracle release [5.0.102-2] - Rebuild with updated tests - Resolves: RHBZ#1912684 [5.0.102-1] - Update to .NET SDK 5.0.102 and Runtime 5.0.2 - Resolves: RHBZ#1912684

Jan 15, 2021
Critical

ELSA-2021-0089 1 CVE

Critical: thunderbird security update (Oracle Linux 8)

[78.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.6.1-1] - Update to 78.6.1

Jan 14, 2021
Critical

ELSA-2021-0087 1 CVE

Critical: thunderbird security update (Oracle Linux 7)

[78.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.6.1-1] - Update to 78.6.1

Jan 13, 2021
High

ELSA-2021-9008 3 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[4.14.35-2025.404.1.1.el7] - target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248040] {CVE-2020-28374} [4.14.35-2025.404.1.el7] - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253412] {CVE-2020-29568} -…

Jan 12, 2021
High

ELSA-2021-9009 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.46.4.1] - target: fix XCOPY NAA identifier lookup (Mike Christie) [Orabug: 32248041] {CVE-2020-28374} [4.1.12-124.46.4] - xen/events: block rogue events for some time (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673} - xen/events: defer eoi in c…

Jan 12, 2021
High

ELSA-2021-9005 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.404.1.1] - target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248040] {CVE-2020-28374} [4.14.35-2025.404.1] - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253412] {CVE-2020-29568} - xen/xen…

Jan 12, 2021
High max 7.8

ELSA-2021-9007 6 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

[5.4.17-2036.102.0.2.el7] - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260252] {CVE-2020-29569} - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568} - x…

Jan 12, 2021
High max 7.8

ELSA-2021-9006 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.102.0.2uek] - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260252] {CVE-2020-29569} - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568} - xe…

Jan 12, 2021
Critical

ELSA-2021-0053 1 CVE

Critical: firefox security update (Oracle Linux 7)

[78.6.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.6.1-1] - Update to 78.6.1 build1

Jan 11, 2021
Critical

ELSA-2021-0052 1 CVE

Critical: firefox security update (Oracle Linux 8)

[78.6.1-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.6.1-1] - Update to 78.6.1 build1

Jan 11, 2021
High max 8.0

ELSA-2021-9002 14 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.46.3] - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat) [Orabug: 30781859] {CVE-2019-14895} {CVE-2019-14895} - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara) [Orabug: 31265320] {CVE-2019-19037…

Jan 7, 2021
High

ELSA-2021-9001 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.53.1] - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye) [Orabug: 32176267] - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye) [Orabug: 32176267] {CVE-2020-28915} - vt: Disable KD_FONT_…

Jan 7, 2021
High

ELSA-2021-0024 1 CVE

Important: ImageMagick security update (Oracle Linux 7)

[6.9.10.68-5] - Adding CTV-2020-29599 fix

Jan 5, 2021
High

ELSA-2021-0003 1 CVE

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-240.10.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…

Jan 5, 2021
Medium

ELSA-2020-5493 4 CVEs

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

delve [1.4.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.4.1-1] - Rebase to 1.4.1 - Resolves: rhbz#1821281 - Related: rhbz#1820596 [1.4.0-2] - Change i686 to a better macro - Related: rhbz#1820596 [1.4.0-1] - Rebase to 1.4.0 - Remo…

Dec 22, 2020
Medium

ELSA-2020-5487 1 CVE

Moderate: pacemaker security update (Oracle Linux 8)

[2.0.4-6.1] - Prevent users from bypassing ACLs by using IPC directly (CVE-2020-25654) - Resolves: rhbz1891528

Dec 22, 2020
Medium

ELSA-2020-5483 1 CVE

Moderate: gnutls security and bug fix update (Oracle Linux 8)

[3.6.14-7] - Increase DH key bits to >= 2048 in self-tests (#1879506) - Implement self-tests for KDF and CMAC (#1890870) - Fix CVE-2020-24659: heap buffer-overflow when 'no_renegotiation' alert is received (#1873959)

Dec 21, 2020
Medium

ELSA-2020-5495 1 CVE

Moderate: nginx:1.16 security update (Oracle Linux 8)

[1:1.16.1-1.0.1.1] - Remove Red Hat references [Orabug: 29498217] [1:1.16.1-1.1] - Resolves: #1898952 - CVE 2019-20372 nginx:1.16/nginx: HTTP request smuggling via error pages in http/ngx_http_special_response.c

Dec 18, 2020
High max 6.5

ELSA-2020-5500 14 CVEs

Important: mariadb:10.3 security, bug fix, and enhancement update (Oracle Linux 8)

asio [1.10.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.10.8-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.10.8-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.10.8-…

Dec 18, 2020
High

ELSA-2020-5480 1 CVE

Important: net-snmp security and bug fix update (Oracle Linux 8)

[1:5.8-18.1] - revert permission of config files to 600 (#1902662) [1:5.8-18] - fix CVE-2020-15862 (#1886100) - fix bulk responses for invalid PID (#1896760)

Dec 17, 2020
Medium max 7.3

ELSA-2020-5499 3 CVEs

Moderate: nodejs:12 security and bug fix update (Oracle Linux 8)

nodejs [1:12.19.1-1] - Resolves: RHBZ#1901044, #1901045, #1901046, #1901047 - c-ares, ajv and y18n CVEs and yarn installability issues

Dec 17, 2020
Medium

ELSA-2020-5473 1 CVE

Moderate: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-240.8.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Ora…

Dec 17, 2020
High max 5.9

ELSA-2020-5476 1 CVE

Important: openssl security and bug fix update (Oracle Linux 8)

[1.1.1g-12] - Fix CVE-2020-1971 ediparty null pointer dereference [1.1.1g-11.1] - Implemented new FIPS requirements in regards to KDF and DH selftests - Disallow certificates with explicit EC parameters

Dec 17, 2020
Medium max 7.8

ELSA-2020-5435 1 CVE

Moderate: python-rtslib security update (Oracle Linux 7)

[2.1.74-1.0.1] - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix [Orabug: 27613482] - Add patch 0004-allow-underscore-in-oracle-iqns to fix [Orabug: 27582660] - Add patch 0014-reenable-vhost to fix [Orabug: 27707403] <alan.adamson@oracle.com> [2.1.74-1]…

Dec 16, 2020
Medium max 5.5

ELSA-2020-5439 3 CVEs 1 exploited

Moderate: samba security and bug fix update (Oracle Linux 7)

[4.10.17-9] - related: #1853272 - Add back missing patch hunks [4.10.16-8] - resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020…

Dec 16, 2020
Medium

ELSA-2020-5434 1 CVE

Moderate: targetcli security update (Oracle Linux 7)

[2.1.53-1.0.1] - added Requires: python-gobject-base [Orabug: 30252308] [2.1.53-1] - Rebase the targetcli package to fix some security issues

Dec 16, 2020
High max 5.5

ELSA-2020-5437 7 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1160.11.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x…

Dec 16, 2020
Medium

ELSA-2020-5443 1 CVE

Moderate: gd security update (Oracle Linux 7)

[2.0.35-27] - Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8

Dec 16, 2020
High

ELSA-2020-5996 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2036.101.2uek] - vt: Disable KD_FONT_OP_COPY (Daniel Vetter) [Orabug: 32187738] {CVE-2020-28974} - page_frag: Recover from memory pressure (Dongli Zhang) [Orabug: 32177966] - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye) [Orabu…

Dec 15, 2020
High

ELSA-2020-5398 1 CVE

Important: thunderbird security update (Oracle Linux 8)

[78.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.1-1] - Update to 78.5.1 build1

Dec 15, 2020
High

ELSA-2020-5401 2 CVEs

Important: libpq security update (Oracle Linux 8)

[12.5-1] - Rebase to upstream release 12.5 Resolves: rhbz#1898228 Resolves: rhbz#1901558

Dec 15, 2020
High

ELSA-2020-5393 1 CVE

Important: libexif security update (Oracle Linux 8)

[0.6.22-5] - Fix CVE-2020-0452 - Resolves: #1902593

Dec 15, 2020
High

ELSA-2020-5402 1 CVE

Important: libexif security update (Oracle Linux 7)

[0.6.22-2] - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589

Dec 14, 2020
High max 5.5

ELSA-2020-5408 3 CVEs

Important: xorg-x11-server security update (Oracle Linux 7)

[1.20.4-15] - CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934) [1.20.4-14] - CVE fix for: CVE-2020-14347 (#1862319)

Dec 14, 2020
High

ELSA-2020-5400 1 CVE

Important: thunderbird security update (Oracle Linux 7)

[78.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.1-1] - Update to 78.5.1 build1

Dec 14, 2020
High

ELSA-2020-5995 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-2025.403.3] - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb) [Orabug: 32005117] - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb) [Orabug: 32005117] - lib/scatterlist: Add SG_CHAIN and SG_END…

Dec 14, 2020
High

ELSA-2020-5350 1 CVE

Important: net-snmp security update (Oracle Linux 7)

[1:5.7.2-49.1] - fix CVE-2020-15862 (#1875496)

Dec 7, 2020
High

ELSA-2020-5968 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.52.1] - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers) [Orabug: 31535530] {CVE-2020-10769} - crypto: authenc - Export key parsing helper function (Mathias Krause) [Orabug: 31535530] {CVE-2020-10769}

Dec 7, 2020