Oracle Linux Security Advisories (ELSA)

206 results · Clear filters · Feed

• Critical max 8.8
  ELSA-2022-4730 2 CVEs

  Critical: thunderbird security update (Oracle Linux 7)

  [91.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [91.9.1-1] - Update to 91.9.1 build1

  May 24, 2022
• Critical max 9.8
  ELSA-2022-0824 10 CVEs 2 exploited

  Critical: firefox security and bug fix update (Oracle Linux 7)

  [91.7.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build [91.7.0-3] - Update to 91.7.0 buil…

  Mar 10, 2022
• Critical max 9.8
  ELSA-2022-0818 10 CVEs 2 exploited

  Critical: firefox security update (Oracle Linux 8)

  [91.7.0-3.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.7.0-3] - Update to 91.7.0 build3 [91.7.0-2] - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 [91.7.0-1…

  Mar 10, 2022
• Critical max 8.8
  ELSA-2022-0328 1 CVE

  Critical: samba security and bug fix update (Oracle Linux 7)

  [4.10.16-18] - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142

  Feb 1, 2022
• Critical max 8.8
  ELSA-2022-0332 1 CVE

  Critical: samba security and bug fix update (Oracle Linux 8)

  [4.14.5-9] - resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717 - resolves: rhbz#2046160 - Fix possible segfault while joining a domain - resolves: rhbz#2046152 - Fix CVE-2021-44142 [4.14.5-8] - resolves: rhbz#2026717 - Dir containi…

  Feb 1, 2022
• Critical
  ELSA-2021-4904 1 CVE

  Critical: nss security update (Oracle Linux 7)

  [3.67.0-4] - fix CVE-2021-43527

  Dec 1, 2021
• Critical
  ELSA-2021-4903 1 CVE

  Critical: nss security update (Oracle Linux 8)

  [3.67.0-7] - Fix CVE 2021 43527

  Dec 1, 2021
• Critical
  ELSA-2021-2233 1 CVE

  Critical: firefox security update (Oracle Linux 8)

  [78.11.0-3.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.11.0-3] - Update to 78.11.0 build2 (release) [78.11.0-2] - Fix rhel_minor_version for dist .el8_4 and .el8 [78.11.0-1] - Update t…

  Jun 4, 2021
• Critical
  ELSA-2021-2206 1 CVE

  Critical: firefox security update (Oracle Linux 7)

  [78.11.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.11.0-3] - Update to 78.11.0 build2 (release) [78.11.0…

  Jun 3, 2021
• Critical
  ELSA-2021-0656 4 CVEs

  Critical: firefox security update (Oracle Linux 7)

  [78.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.8.0-1] - Update to 78.8.0 build2 [78.7.1-1] - Update t…

  Feb 26, 2021
• Critical
  ELSA-2021-0655 4 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [78.8.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.8.0-1] - Update to 78.8.0 build2 [78.7.1-1] - Update to 78.7.1 [78.7.0-3] - Fixing install prefix for the homepage

  Feb 26, 2021
• Critical
  ELSA-2021-0089 1 CVE

  Critical: thunderbird security update (Oracle Linux 8)

  [78.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.6.1-1] - Update to 78.6.1

  Jan 14, 2021
• Critical
  ELSA-2021-0087 1 CVE

  Critical: thunderbird security update (Oracle Linux 7)

  [78.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.6.1-1] - Update to 78.6.1

  Jan 13, 2021
• Critical
  ELSA-2021-0053 1 CVE

  Critical: firefox security update (Oracle Linux 7)

  [78.6.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.6.1-1] - Update to 78.6.1 build1

  Jan 11, 2021
• Critical
  ELSA-2021-0052 1 CVE

  Critical: firefox security update (Oracle Linux 8)

  [78.6.1-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.6.1-1] - Update to 78.6.1 build1

  Jan 11, 2021
• Critical
  ELSA-2020-5100 1 CVE

  Critical: firefox security update (Oracle Linux 8)

  [78.4.1-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.1-1] - Update to 78.4.1 [78.4.0-3] - Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading [78.4.0-2] - En…

  Nov 17, 2020
• Critical
  ELSA-2020-5099 1 CVE

  Critical: firefox security update (Oracle Linux 7)

  [78.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Tue Nov 10 2020 erack@redhat.com - 78.4.1-1 - Update to …

  Nov 13, 2020
• Critical max 7.8
  ELSA-2020-2954 1 CVE 1 exploited

  Critical: .NET Core 3.1 security and bugfix update (Oracle Linux 8)

  [3.1.106-1.0.1] - Update patch to support 8.2 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.106-1] - Update to .NET Core Runtime 3.1.6 and SDK 3.1.106 - Resolves: RHBZ#1854137

  Jul 17, 2020
• Critical max 7.8
  ELSA-2020-2938 1 CVE 1 exploited

  Critical: .NET Core security and bugfix update (Oracle Linux 8)

  [2.1.516-1] - Update to .NET Core SDK 2.1.516 and Runtime 2.1.20 - Resolves: RHBZ#1851983

  Jul 16, 2020
• Critical
  ELSA-2020-2050 5 CVEs

  Critical: thunderbird security update (Oracle Linux 7)

  [68.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.8.0-1] - Update to 68.8.0 build2

  May 12, 2020
• Critical
  ELSA-2020-2046 5 CVEs

  Critical: thunderbird security update (Oracle Linux 8)

  [68.8.0-1.0.1.el8_2] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.8.0-1] - Update to 68.8.0 build2

  May 12, 2020
• Critical
  ELSA-2020-2031 4 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [68.8.0-1.0.1.el8_2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] * Wed Apr 29 2020 Jan Horak <jhorak@redhat.com…

  May 9, 2020
• Critical
  ELSA-2020-2037 4 CVEs

  Critical: firefox security update (Oracle Linux 7)

  [68.8.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Wed Apr 29 2020 Jan Horak <jhorak@redhat.com> - Update t…

  May 7, 2020
• Critical max 8.1
  ELSA-2020-1338 2 CVEs 2 exploited

  Critical: firefox security update (Oracle Linux 7)

  [68.6.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.6.1-1] - Update to 68.6.1 ESR

  Apr 11, 2020
• Critical max 8.1
  ELSA-2020-1341 2 CVEs 2 exploited

  Critical: firefox security update (Oracle Linux 8)

  [68.6.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.6.1-1] - Update to 68.6.1 ESR

  Apr 9, 2020
• Critical
  ELSA-2020-1288 1 CVE

  Critical: haproxy security update (Oracle Linux 8)

  [1.8.15-6.1] - - Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819518) [1.8.15-6] - Add gating tests (#1682106)

  Apr 2, 2020
• Critical
  ELSA-2020-0130 2 CVEs

  Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update (Oracle Linux 8)

  [102-2.0.1.el8_1] - support OL release scheme [3.0.102-2] - Fix prebuilts leaking into the final build - Fix regressions in binary hardering - Resolves: RHBZ#1788171 [3.0.102-1] - Update to .NET Core Runtime 3.0.2 and SDK 3.0.102 - Resolves: RHBZ#1788171

  Jan 20, 2020
• Critical max 8.8
  ELSA-2020-0111 5 CVEs 1 exploited

  Critical: firefox security update (Oracle Linux 8)

  [68.4.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.4.1-1] - Update to 68.4.1esr build1 - Upda…

  Jan 15, 2020
• Critical max 8.8
  ELSA-2020-0085 5 CVEs 1 exploited

  Critical: firefox security update (Oracle Linux 7)

  [68.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.4.1-1] - Update to 68.4.1esr build1 - Update to 68.4.0…

  Jan 13, 2020
• Critical max 9.8
  ELSA-2019-4240 1 CVE 1 exploited

  Critical: openslp security update (Oracle Linux 7)

  [1:2.0.0-8] - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: #1781701

  Dec 16, 2019
• Critical
  ELSA-2019-4107 5 CVEs

  Critical: firefox security update (Oracle Linux 7)

  [68.3.0-1.0.1] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.3.0-1] - Update to 68.3.0 ESR [68.2.0-4] - Added patch for TLS 1.3 support. [68.2.0-3] - Rebuild [68.2…

  Dec 6, 2019
• Critical
  ELSA-2019-4111 5 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [68.3.0-1.0.1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.3.0-1] - Update to 68.3.0 ESR [68.2.0-4] - Added…

  Dec 5, 2019
• Critical max 8.7
  ELSA-2019-3736 1 CVE 1 exploited

  Critical: php:7.3 security update (Oracle Linux 8)

  php [7.3.5-5] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

  Nov 23, 2019
• Critical max 8.7
  ELSA-2019-3735 1 CVE 1 exploited

  Critical: php:7.2 security update (Oracle Linux 8)

  php [7.2.11-4] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

  Nov 23, 2019
• Critical max 8.7
  ELSA-2019-3286 1 CVE 1 exploited

  Critical: php security update (Oracle Linux 7)

  [5.4.16-46.1] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

  Oct 31, 2019
• Critical
  ELSA-2019-3196 8 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [68.2.0-2.0.1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.2.0-2] - Rebuild [68.2.0-1] - Update to 68.2.0 ESR [68.1.0-6] - Enable system nss on RHEL6 [68.1…

  Oct 24, 2019
• Critical
  ELSA-2019-3193 8 CVEs

  Critical: firefox security update (Oracle Linux 7)

  [68.2.0-1.0.1] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.2.0-1] - Update to 68.2.0 ESR [68.1.0-6] - Enable system nss on RHEL6

  Oct 23, 2019
• Critical
  ELSA-2019-2729 8 CVEs

  Critical: firefox security update (Oracle Linux 7)

  [60.9.0-1.0.1] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.9.0-1] - Update to 60.9.0 ESR

  Sep 11, 2019
• Critical
  ELSA-2019-2663 13 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [68.1.0-1.0.1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.1.0-1] - Update to 68.1.0 ESR [68.0.1-4] - Enable system nss

  Sep 6, 2019
• Critical max 5.3
  ELSA-2019-1269 13 CVEs

  Critical: firefox security update (Oracle Linux 8)

  [60.7.0-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.0-1] - Manaul CentOS Debranding [60.7.0-1] - Updated to 60.7.0 ESR [60.6.3-1] -…

  Jul 30, 2019