Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

22 results · Clear filters · Feed

Critical max 9.6

ELSA-2026-74084 322 CVEs 1 exploited

Critical: webkit2gtk3 security update (Oracle Linux 8)

[2.54.0-1] - Update to 2.54.0

Oct 1, 2026
Critical max 9.8

ELSA-2022-0824 10 CVEs 2 exploited

Critical: firefox security and bug fix update (Oracle Linux 7)

[91.7.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.7.0-3] - Update to 91.7.0 buil…

Mar 10, 2022
Critical max 9.8

ELSA-2022-0818 10 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[91.7.0-3.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.7.0-3] - Update to 91.7.0 build3 [91.7.0-2] - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 [91.7.0-1…

Mar 10, 2022
Critical max 7.8

ELSA-2020-2954 1 CVE 1 exploited

Critical: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

[3.1.106-1.0.1] - Update patch to support 8.2 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.106-1] - Update to .NET Core Runtime 3.1.6 and SDK 3.1.106 - Resolves: RHBZ#1854137

Jul 17, 2020
Critical max 7.8

ELSA-2020-2938 1 CVE 1 exploited

Critical: .NET Core security and bugfix update (Oracle Linux 8)

[2.1.516-1] - Update to .NET Core SDK 2.1.516 and Runtime 2.1.20 - Resolves: RHBZ#1851983

Jul 16, 2020
Critical max 8.1

ELSA-2020-1338 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 7)

[68.6.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.6.1-1] - Update to 68.6.1 ESR

Apr 11, 2020
Critical max 8.1

ELSA-2020-1341 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[68.6.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.6.1-1] - Update to 68.6.1 ESR

Apr 9, 2020
Critical max 8.8

ELSA-2020-0111 5 CVEs 1 exploited

Critical: firefox security update (Oracle Linux 8)

[68.4.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.4.1-1] - Update to 68.4.1esr build1 - Upda…

Jan 15, 2020
Critical max 8.8

ELSA-2020-0085 5 CVEs 1 exploited

Critical: firefox security update (Oracle Linux 7)

[68.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.4.1-1] - Update to 68.4.1esr build1 - Update to 68.4.0…

Jan 13, 2020
Critical max 9.8

ELSA-2019-4240 1 CVE 1 exploited

Critical: openslp security update (Oracle Linux 7)

[1:2.0.0-8] - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: #1781701

Dec 16, 2019
Critical max 8.7

ELSA-2019-3736 1 CVE 1 exploited

Critical: php:7.3 security update (Oracle Linux 8)

php [7.3.5-5] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Nov 23, 2019
Critical max 8.7

ELSA-2019-3735 1 CVE 1 exploited

Critical: php:7.2 security update (Oracle Linux 8)

php [7.2.11-4] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Nov 23, 2019
Critical max 8.7

ELSA-2019-3286 1 CVE 1 exploited

Critical: php security update (Oracle Linux 7)

[5.4.16-46.1] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Oct 31, 2019
Critical max 10.0

ELSA-2019-1696 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[60.7.2-3.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.2-3.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-3] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

Jul 30, 2019
Critical max 10.0

ELSA-2019-1603 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 7)

[60.7.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-1] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

Jun 26, 2019
Critical max 7.5

ELSA-2016-2843 1 CVE 1 exploited

Critical: firefox security update (Oracle Linux 7)

[45.5.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.5.1-1] - Update to 45.5.1 ESR

Dec 1, 2016
Critical max 9.8

ELSA-2016-0723 5 CVEs 1 exploited

Critical: java-1.6.0-openjdk security update (Oracle Linux 7)

[1:1.6.0.39-1.13.11.0] - Update to IcedTea 1.13.11 & OpenJDK 6 b39. - Resolves: rhbz#1325432

May 9, 2016
Critical max 9.8

ELSA-2016-0676 5 CVEs 1 exploited

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.101-2.6.6.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.101-2.6.6.1] - added Patch666 fontpath.patch to fix tck regressions - Resolves: rhbz#1325427 [1:1.7.0.101-2.6.6.0] - Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7. -…

Apr 21, 2016
Critical max 9.8

ELSA-2016-0650 6 CVEs 1 exploited

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.91-0.b14] - Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Resolves: rhbz#1325422 [1:1.8.0.91-0.b14] - Revert settings to production defaults so we can at least get a build. - Resolves: rhbz#1325422 [1:1.8.0.91-0.b1…

Apr 20, 2016
Critical max 9.8

ELSA-2015-1229 14 CVEs 1 exploited

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.85-2.6.1.2.0.1.el7_1] - Update DISTRO_NAME in specfile [1:1.7.0.85-2.6.1.2] - Bump upstream tarball to u25b01 to fix issue with 8075374 backport. - Resolves: rhbz#1235158 [1:1.7.0.85-2.6.1.1] - Update OpenJDK tarball so correct version is used. - Res…

Jul 15, 2015
Critical max 9.8

ELSA-2014-3076 1 CVE 1 exploited

Critical: bash security update (Oracle Linux 7)

[4.2.45-5.2.0.1] - Preliminary fix for CVE-2014-7169

Sep 25, 2014
Critical max 9.8

ELSA-2014-1293 1 CVE 1 exploited

Critical: bash security update (Oracle Linux 7)

[4.1.2-15.1] - Check for fishy environment Resolves: #1141645

Sep 24, 2014