Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

High max 9.8

ELSA-2020-5562 1 CVE

Important: curl security update (Oracle Linux 7)

[7.29.0-54.0.5.el7_7.2] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug:30568724]

Mar 9, 2020
High

ELSA-2020-0703 1 CVE

Important: http-parser security update (Oracle Linux 7)

[2.7.1-8.2] - Do not break ABI with CVE-2019-15605 fix [2.7.1-8.1] - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request smuggling using malformed Transfer-Encoding header

Mar 6, 2020
High

ELSA-2020-0704 1 CVE

Important: xerces-c security update (Oracle Linux 7)

[3.1.1-10] - add security fix for CVE-2018-1311

Mar 6, 2020
High

ELSA-2020-0708 1 CVE

Important: http-parser security update (Oracle Linux 8)

[2.8.0-5.2] - Do not break ABI with CVE-2019-15605 fix [2.8.0-5.1] - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request smuggling using malformed Transfer-Encoding header

Mar 6, 2020
High

ELSA-2020-5559 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.43.1] - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum) [Orabug: 30864534] {CVE-2019-15291}

Mar 5, 2020
High max 9.8

ELSA-2020-0630 1 CVE

Important: ppp security update (Oracle Linux 7)

[2.4.5-34.0.2] - Userland headers should always appear before kernel - [Orabug: 27656836] (philip.copeland@oracle.com) [2.4.5-34] - Fixed buffer overflow in the eap_request and eap_response functions Resolves: CVE-2020-8597

Feb 27, 2020
High max 9.8

ELSA-2020-0633 1 CVE

Important: ppp security update (Oracle Linux 8)

[2.4.7-26] - Fixed buffer overflow in the eap_request and eap_response functions Resolves: CVE-2020-8597

Feb 27, 2020
High

ELSA-2020-0577 6 CVEs

Important: thunderbird security update (Oracle Linux 8)

[68.5.0-1.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.5.0-1] - Update to 68.5.0 build1

Feb 26, 2020
High

ELSA-2020-0598 3 CVEs

Important: nodejs:12 security update (Oracle Linux 8)

nodejs [1:12.16.1-1] - Resolves: RHBZ#1800393, RHBZ#1800394, RHBZ#1800380 - Rebase to 12.16.1 nodejs-nodemon nodejs-packaging

Feb 26, 2020
High max 7.7

ELSA-2020-0579 6 CVEs

Important: nodejs:10 security update (Oracle Linux 8)

nodejs [1:10.19.0-1] - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 [1:10.16.3-1] - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 [1:10.14.1-1] - Resolves: RHBZ#1644207 - fixes node-gyp permissions - rebase [1:10.11.0-2] - BuildRequire …

Feb 26, 2020
High max 9.8

ELSA-2020-0578 2 CVEs

Important: python-pillow security update (Oracle Linux 7)

[2.0.0-20gitd1c6db8] - Combined fixes for CVE-2020-5312 and CVE-2019-16865 Resolves: rhbz#1789533 Resolves: rhbz#1774066 [2.0.0-19gitd1c6db8] - Reenabled webp support on little endian archs. [2.0.0-18gitd1c6db8] - Disabled webp support on ppc64le due to #9620…

Feb 25, 2020
High

ELSA-2020-0576 6 CVEs

Important: thunderbird security update (Oracle Linux 7)

[68.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.5.0-1] - Update to 68.5.0 build1

Feb 25, 2020
High max 7.4

ELSA-2020-0568 1 CVE

Important: ksh security update (Oracle Linux 7)

[20120801-140.0.1] - disable _AST_no_spawnveg for taskset workaround [orabug 26754277] Red Hat Bug: #1295563 [20120801-140] - Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790543

Feb 25, 2020
High

ELSA-2020-0570 1 CVE

Important: openjpeg2 security update (Oracle Linux 8)

[2.3.1-3] - Fix CVE-2020-8112 (#1801033)

Feb 25, 2020
High max 9.8

ELSA-2020-0580 3 CVEs

Important: python-pillow security update (Oracle Linux 8)

[5.1.1-10] - Bump and rebuild for gating to deliver CVE fixes Resolves: rhbz#1789535 [5.1.1-9] - Fix for CVE-2020-5311 - out-of-bounds write in expandrow Resolves: rhbz#1789535 [5.1.1-8] - Combined fixes for CVE-2020-5312 and CVE-2019-16865 Resolves: rhbz#178…

Feb 25, 2020
High max 7.8

ELSA-2020-0575 1 CVE

Important: systemd security and bug fix update (Oracle Linux 8)

[239-18.0.2.el8_1.4] - fix to generate systemd-pstore.service file [Orabug: 30230056] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874]…

Feb 25, 2020
High max 5.8

ELSA-2020-5543 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.36.4] - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30944739] {CVE-2020-2732} - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30944739] {CVE-2020-2732} - KVM: nVMX: Don't emulate i…

Feb 24, 2020
High max 5.8

ELSA-2020-5542 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.36.1.1] - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30847137] {CVE-2020-2732} - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30847137] {CVE-2020-2732} - KVM: nVMX: Dont emulate …

Feb 24, 2020
High max 5.8

ELSA-2020-5540 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.10.8] - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30847136] {CVE-2020-2732} - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30847136] {CVE-2020-2732} - KVM: nVMX: Dont emulate …

Feb 24, 2020
High max 8.8

ELSA-2020-5541 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.36.3] - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava) [Orabug: 30902926] - Revert 'PCI: Check pref compatible bit for mem64 resource of PCIe device' (Ritika Srivastava) [Orabug: 30902926] [4.1.12-1…

Feb 22, 2020
High

ELSA-2020-0550 1 CVE

Important: openjpeg2 security update (Oracle Linux 7)

[2.3.1-3] - Fix CVE-2020-8112 resolves: #1801030

Feb 20, 2020
High max 7.4

ELSA-2020-0559 1 CVE

Important: ksh security update (Oracle Linux 8)

[20120801-253.0.1.el8_1] - Disable _AST_no_spawnveg for taskset workaround [Orabug: 26754277] Red Hat Bug: #1295563 [20120801-253] - Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790546

Feb 20, 2020
High

ELSA-2020-0540 1 CVE

Important: sudo security update (Oracle Linux 7)

[1.8.23-4.0.2.2] - Bump release to avoid conflict with previous Orace Linux errata [1.8.23-4.2] - RHEL 7.7.z - fixed CVE-2019-18634 Resolves: rhbz#1798094 [1.8.23-4.1] - RHEL-7.7.z - fixed CVE-2019-14287 Resolves: rhbz#1760694

Feb 19, 2020
High max 8.1

ELSA-2020-0541 7 CVEs

Important: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.251-2.6.21.0.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.251-2.6.21.0] - Bump to 2.6.21 and OpenJDK 7u251-b02. - Resolves: rhbz#1785753

Feb 19, 2020
High

ELSA-2020-0512 3 CVEs

Important: firefox security update (Oracle Linux 8)

[68.5.0-2.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] - Update to 68.5.0 build2

Feb 19, 2020
High

ELSA-2020-0520 3 CVEs

Important: firefox security update (Oracle Linux 7)

[68.5.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Fri Feb 07 2020 Jan Horak <jhorak@redhat.com> - Update t…

Feb 18, 2020
High

ELSA-2020-0348 1 CVE

Important: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)

buildah [1.11.6-4.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-4] - compile in FIPS mode - Related: RHELPLAN-25138 [1.11.6-3] - be sure to use golang >= 1.12.12-4 - Related: RHELPLAN-25138 [1.11.6-2] - fix chroot: unmount with M…

Feb 17, 2020
Medium

ELSA-2020-0329 2 CVEs

Moderate: go-toolset:ol8 security update (Oracle Linux 8)

go-toolset [1.12.12-1] - Update for golang package fixes [1.12.12-1] - Bump version to 1.12.12 golang [1.12.12-4.0.1] - from upstream https://github.com/golang/go/issues/2775 - move arbitrary value 10% to 15% for GC tests, hits 10.48% on our - infrastructure …

Feb 17, 2020
Medium max 6.5

ELSA-2020-0279 1 CVE

Moderate: virt:ol security update (Oracle Linux 8)

hivex libguestfs [1:1.38.4-14.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-14] - v2v: use -T as argument of scp when copying vmx files via ssh resolves: rhbz#1738886 * Fri Jun 2…

Feb 17, 2020
High

ELSA-2020-0487 1 CVE

Important: sudo security update (Oracle Linux 8)

[1.8.25p1-8.1] - RHEL 8.1.0.Z ERRATUM - CVE-2019-18634 Resolves: rhbz#1798092

Feb 13, 2020
High max 6.1

ELSA-2020-5535 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.36.1] - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider) [Orabug: 30459537] - x86/microcode: Issue update message only once (Borislav Petkov) [Orabug: 30528904] - x86/microcode/intel: Issue the revision updated message …

Feb 12, 2020
High max 6.2

ELSA-2020-5533 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.10.7] - rtlwifi: Fix potential overflow on P2P code (Laura Abbott) [Orabug: 30807747] {CVE-2019-17666} - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu) [Orabug: 30770961] {CVE-2016-5244} - KVM: x86: fix out-of-bounds write in KVM_GET_EMU…

Feb 10, 2020
Medium max 5.9

ELSA-2020-0335 1 CVE

Moderate: grub2 security update (Oracle Linux 8)

[2.02-78.0.3.el8_1.1] - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497] - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597] - Update upstream references [Orabug: 26388226] - Copy symvers.gz to /boot during kernel …

Feb 7, 2020
High max 8.8

ELSA-2020-0339 8 CVEs

Important: kernel security and bug fix update (Oracle Linux 8)

[4.18.0-147.5.1_1.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-147.5.1_1] - [pow…

Feb 7, 2020
High max 8.8

ELSA-2020-0374 5 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-1062.12.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.12.1] - [powerpc] p…

Feb 5, 2020
High max 8.8

ELSA-2020-0378 2 CVEs

Important: ipa security and bug fix update (Oracle Linux 7)

[4.6.5-11.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.5-11.el7_7.4] - Resolves: #1781153 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrus…

Feb 5, 2020
High max 6.5

ELSA-2020-0366 2 CVEs

Important: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)

[1.5.3-167.el7_7.4] - kvm-target-i386-add-MDS-NO-feature.patch [bz#1755333] - Resolves: bz#1755333 ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm [rhel-7.7.z]) [1.5.3-167.el7_7.3] - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771960] - kvm-t…

Feb 5, 2020
High max 7.5

ELSA-2019-4816 8 CVEs

Important: kubernetes security update (Oracle Linux 7)

kubernetes [1.12.10-1.0.10] - [CVE-2019-16276] Kubernetes Vulnerabilities Allow Authentication Bypass, DoS [1.12.10-1.0.9] - Define rolling update for flannel [1.12.10-1.0.8] - Modify flannel/dashboard image tags to use images that have the cve fix kubeadm-ha…

Jan 31, 2020
High max 6.2

ELSA-2020-5526 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.10.4.el7uek] - kvm: Don't reference vcpu->arch.st in arch-independent code (Boris Ostrovsky) [Orabug: 30489861] - kvm: fix compile on s390 part 2 (Christian Borntraeger) [Orabug: 30489861] - kvm: fix compilation on s390 (Paolo Bonzini) [Orabug: …

Jan 30, 2020
High max 6.2

ELSA-2020-5528 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.10.4.1.el7uek] - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil) [Orabug: 30815818] - IB/mlx4: Fix leak in id_map_find_del (Hakon Bugge) [Orabug: 30815811] - RDMA/cma: Relax device check in cma_match_net_dev() (Hako…

Jan 30, 2020