Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

High

ELSA-2020-5732 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.303.5.3] - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry) [Orabug: 31476202] - Revert rds: Do not cancel RDMAs that have been posted to the HCA (Gerd Rausch) [Orabug: 31475329] - Revert rds: Introduce rds_conn_to_path helper (Gerd …

Jun 18, 2020
Medium

ELSA-2020-2549 1 CVE

Moderate: libexif security update (Oracle Linux 7)

[0.6.21-7] - Add patch for CVE-2020-13112 - Resolves: #1840949

Jun 16, 2020
Medium

ELSA-2020-2550 1 CVE

Moderate: libexif security update (Oracle Linux 8)

[0.6.21-17] - Add patch for CVE-2020-13112 - Resolves: #1840952

Jun 15, 2020
High max 6.3

ELSA-2020-5727 2 CVEs

Important: kubernetes-cni-plugins kubernetes-cni kubernetes olcne security update (Oracle Linux 7)

kubernetes-cni-plugins [0.8.6-1.0.1] - Added Oracle specific build files for Kubernetes CNI Plugins kubernetes-cni [0.7.1-1.0.1] - Added Oracle specific build files for Kubernetes CNI kubernetes [1.14.9-1.0.4] - CVE-2020-10749: IPv4 only clusters susceptible …

Jun 12, 2020
High max 6.0

ELSA-2020-5728 1 CVE

Important: docker-engine docker-cli security update (Oracle Linux 7)

docker-engine [19.03.11-1.0.0] - update to 19.03.11 for CVE-2020-13401 [19.03.1-1.0.0] - update to 19.03.1 [19.03-0.0.1] - update to 19.03 [18.09.1-1.0.6] - disable kmem accounting for UEKR4 [18.09.1-1.0.5] - apply e4931e664feac6fa8846f3f04268a0cc98822549, fi…

Jun 12, 2020
High max 6.3

ELSA-2020-5725 2 CVEs

Important: kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update (Oracle Linux 7)

kubernetes [1.12.10-1.0.12] - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements - CVE-2020-8555: Half-Blind SSRF in kube-controller-manager kubeadm-ha-setup [0.0.2-1.0.70] - Enhance image tag read to depend on…

Jun 12, 2020
High max 6.3

ELSA-2020-5726 3 CVEs

Important: grafana kubernetes-cni kubernetes-cni-plugins kubernetes kubernetes olcne security update (Oracle Linux 7)

grafana [%{}-1.0.1] - Added Oracle Specific Build Files for grafana kubernetes-cni [0.7.1-1.0.1] - Added Oracle specific build files for Kubernetes CNI kubernetes-cni-plugins [0.8.6-1.0.1] - Added Oracle specific build files for Kubernetes CNI Plugins kuberne…

Jun 12, 2020
High max 7.5

ELSA-2020-5724 1 CVE

Important: pcs security update (Oracle Linux 8)

[0.10.4-6.0.1.el8_2.1] - Replace HAM-logo.png with a generic one [0.10.4-6.el8_2.1] - Fixed running pcs status on remote nodes - Fixed ruby daemon closing connection after 30s - Fixed inability to create colocation constraint in webUI - Updated bundled rubyge…

Jun 12, 2020
High max 7.5

ELSA-2020-2471 1 CVE

Important: .NET Core on Red Hat Enterprise Linux 8 security update (Oracle Linux 8)

[2.1.515-1] - Update to .NET Core SDK 2.1.515 and Runtime 2.1.19 - Resolves: RHBZ#1843680

Jun 12, 2020
High

ELSA-2020-5720 1 CVE

Important: libvirt security update (Oracle Linux 7)

[5.7.0-15.el7] - qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug: 31380815] [5.7.0-14.el7] - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano) [Orabug: 31350200] - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino…

Jun 11, 2020
High max 7.0

ELSA-2020-2530 1 CVE

Important: tomcat security update (Oracle Linux 7)

[0:7.0.76-12] - Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence

Jun 11, 2020
High

ELSA-2020-5719 1 CVE

Important: libvirt security update (Oracle Linux 7)

[5.7.0-15.el7] - qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug: 31380815] [5.7.0-14.el7] - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano) [Orabug: 31350200] - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino…

Jun 11, 2020
High max 7.5

ELSA-2020-2450 1 CVE

Important: .NET Core 3.1 on Red Hat Enterprise Linux 8 security update (Oracle Linux 8)

[3.1.105-2.0.1.el8_2] - Update patch to support 8.2 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.105-2] - Remove incorrectly installed files - Resolves: RHBZ#1844515 [3.1.105-1] - Update to .NET Core Runti…

Jun 11, 2020
High

ELSA-2020-5722 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.39.5.1] - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [Orabug: 31352782] {CVE-2020-0543} - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31352782] {CVE-2020-054 3} - x86/speculati…

Jun 10, 2020
Medium

ELSA-2020-2431 3 CVEs

Moderate: microcode_ctl security, bug fix and enhancement update (Oracle Linux 8)

[4:20191115-4.20200602.2] - Avoid temporary file creation, used for here-documents in check_caveats. [4:20191115-4.20200602.1] - Update Intel CPU microcode to microcode-20200602 release, addresses CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827183): - Upda…

Jun 10, 2020
High

ELSA-2020-2427 1 CVE

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-193.6.3_2.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.6.3_2] - rebu…

Jun 10, 2020
High max 7.9

ELSA-2020-5715 20 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.303.4.1] - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31422209] {CVE-2020-0543} - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross) [Orabug: 31422209] {CVE…

Jun 9, 2020
High

ELSA-2020-2414 2 CVEs

Important: unbound security update (Oracle Linux 7)

[1.6.6-4] - Fix amplifying an incoming query into a large number of queries directed to a target - Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)

Jun 9, 2020
High

ELSA-2020-5714 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2011.3.2.1uek] - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [Orabug: 31352779] {CVE-2020-0543} - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31352779] {CVE-2020-0543} - x86/specula…

Jun 9, 2020
High max 7.5

ELSA-2020-2250 2 CVEs

Important: dotnet3.1 security update (Oracle Linux 8)

[3.1.104-2.0.2] - Update patch to support 8.2 (alexander.burmashev@oracle.com) [3.1.104-2.0.1] - support OL release scheme (alexander.burmashev@oracle.com) [3.1.104-2] - Update to new release - Resolves: RHBZ#1833091 [3.1.104-1] - Update to .NET Core Runtime …

Jun 9, 2020
High

ELSA-2020-2416 2 CVEs

Important: unbound security update (Oracle Linux 8)

[1.7.3-11] - Fix amplifying an incoming query into a large number of queries directed to a target - Resolves: rhbz#1839177 (CVE-2020-12662), rhbz#1840262 (CVE-2020-12663)

Jun 8, 2020
High

ELSA-2020-2405 1 CVE

Important: freerdp security update (Oracle Linux 7)

[2.0.0-4.rc4.1] - CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841974)

Jun 5, 2020
High

ELSA-2020-2381 3 CVEs

Important: firefox security update (Oracle Linux 7)

[68.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Fri May 29 2020 Jan Horak <jhorak@redhat.com> - Update t…

Jun 5, 2020
High

ELSA-2020-2334 3 CVEs

Important: freerdp security update (Oracle Linux 7)

[2.0.0-4.rc4] - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)

Jun 5, 2020
High

ELSA-2020-2379 3 CVEs

Important: firefox security update (Oracle Linux 8)

[68.9.0-1.0.1.el8_2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] * Fri May 29 2020 Jan Horak <jhorak@redhat.com…

Jun 5, 2020
High

ELSA-2020-5706 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.46.1] - ipv6: only static routes qualify for equal cost multipathing (Hannes Frederic Sowa) [Orabug: 30977687] {CVE-2013-4125} - USB: adutux: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31240296] {CVE-2019-19523} - USB: cor…

Jun 4, 2020
High max 8.6

ELSA-2020-2338 2 CVEs

Important: bind security update (Oracle Linux 8)

[32:9.11.13-5] - Limit number of queries triggered by a request (CVE-2020-8616) [32:9.11.13-4] - Fix invalid tsig request (CVE-2020-8617)

Jun 4, 2020
High

ELSA-2020-2336 3 CVEs

Important: freerdp security update (Oracle Linux 8)

[2:2.0.0-46.rc4.1] - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632) - CVE-2020-11523: Fix integer overflow in region.c (#1837633) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837631)

Jun 4, 2020
High

ELSA-2020-2407 1 CVE

Important: freerdp security update (Oracle Linux 8)

[2:2.0.0-46.rc4.2] - CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841978)

Jun 4, 2020
High max 6.6

ELSA-2020-5708 12 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.39.5] - Input: ff-memless - kill timer in destroy() (Oliver Neukum) [Orabug: 31213691] {CVE-2019-19524} - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang) [Orabug: 31351307] {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897…

Jun 3, 2020
High max 8.6

ELSA-2020-2344 2 CVEs

Important: bind security update (Oracle Linux 7)

[32:9.11.4-16.P2.6] - Fix EDNS512 loops on broken servers [32:9.11.4-16.P2.5] - Add CVE tests to codebase [32:9.11.4-16.P2.4] - Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) [32:9.11.4-16.P2.3] - Dis…

Jun 1, 2020
High max 4.0

ELSA-2020-2337 1 CVE

Important: git security update (Oracle Linux 7)

[1.8.3.1-23] - Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008

May 29, 2020
Medium max 9.8

ELSA-2020-2068 4 CVEs

Moderate: python-pip security update (Oracle Linux 7)

May 19, 2020
Medium max 9.8

ELSA-2020-2081 3 CVEs

Moderate: python-virtualenv security update (Oracle Linux 7)

May 19, 2020
High

ELSA-2020-5691 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231] - xfs: move inode flush to the sync workqueue (Darrick J. Wong) [Orabug: 31132665] - arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for…

May 18, 2020
High max 5.9

ELSA-2020-2082 3 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1127.8.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1127.8.2] - [net] netlabe…

May 14, 2020
High max 8.8

ELSA-2020-1926 1 CVE

Important: container-tools:1.0 security and bug fix update (Oracle Linux 8)

buildah [1.5-4.0.1.gite94b4f9] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.5-4.gite94b4f9] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: #1819431 containe…

May 13, 2020
High max 7.5

ELSA-2020-2143 1 CVE

Important: .NET Core security update (Oracle Linux 8)

[2.1.514-2] - Update to new tarball for the release - Resolves: RHBZ#1830065 [2.1.514-1] - Update to .NET Core SDK 2.1.514 and Runtime 2.1.18 - Resolves: RHBZ#1830065

May 13, 2020
High max 5.9

ELSA-2020-2102 3 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-193.1.2_2.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.1.2_2] - [net…

May 13, 2020
Critical

ELSA-2020-2050 5 CVEs

Critical: thunderbird security update (Oracle Linux 7)

[68.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.8.0-1] - Update to 68.8.0 build2

May 12, 2020