Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

206 results · Clear filters · Feed

  • Critical max 10.0
    ELSA-2019-1696 2 CVEs 2 exploited

    Critical: firefox security update (Oracle Linux 8)

    [60.7.2-3.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.2-3.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-3] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

  • Critical
    ELSA-2019-1764 8 CVEs

    Critical: firefox security update (Oracle Linux 8)

    [60.8.0-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.8.0-1.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

  • Critical
    ELSA-2019-0966 10 CVEs

    Critical: firefox security update (Oracle Linux 8)

    [60.6.1-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.6.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Build with ol8 rust/llvm rather than scl [60.6.1-1] - Update to 60.6.1 ESR (Build 1…

  • Critical
    ELSA-2019-1763 8 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.8.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

  • Critical max 10.0
    ELSA-2019-1603 2 CVEs 2 exploited

    Critical: firefox security update (Oracle Linux 7)

    [60.7.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-1] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

  • Critical max 5.3
    ELSA-2019-1265 13 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.0-1] - Updated to 60.7.0 ESR [60.6.3-1] - Updated to 60.6.3 ESR [60.6.2-1] - Updated to 60.6.2 ESR [60.6.1-2] - Added fix for mozbz#526293 - show remote locat…

  • Critical
    ELSA-2019-0671 2 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.6.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.6.1-1] - Update to 60.6.1 ESR (Build 1)

  • Critical
    ELSA-2019-0622 8 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.6.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.6.0-3] - Added Google API keys (mozbz#1531176) [60.6.0-2] - Update to 60.6.0 ESR (Build 2) [60.6.0-1] - Update to 60.6.0 ESR (Build 1)

  • Critical
    ELSA-2019-0219 3 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.5.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.5.0-2] - Updated to 60.5.0 ESR build2 [60.5.0-1] - Updated to 60.5.0 ESR build1 [60.4.0-3] - Fixing fontconfig warnings (rhbz#1601475) [60.4.0-2] - Added pipewi…

  • Critical
    ELSA-2018-3833 6 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.4.0-1] - Update to 60.4.0 ESR [60.3.0-2] - Added firefox-gnome-shell-extension [60.3.0-1] - Update to 60.3.0 ESR

  • Critical
    ELSA-2018-3521 7 CVEs

    Critical: java-11-openjdk security update (Oracle Linux 7)

    [1:11.0.1.13-3.0.1] - link atomic for ix86 build [1:11.0.1.13-3] - Bump release for rebuild. [1:11.0.1.13-2] - Use LTS designator in version output for RHEL. [1:11.0.1.13-1] - Update to October 2018 CPU release, 11.0.1+13. [1:11.0.0.28-2] - Use --with-vendor-…

  • Critical max 8.8
    ELSA-2018-3347 1 CVE

    Critical: python-paramiko security update (Oracle Linux 7)

    [2.1.1-9] - Fix a security flaw (CVE-2018-1000805) in Paramiko's server mode (does not effect client mode). Backported from 2.1.6 Resolves rhbz#1637366

  • Critical
    ELSA-2018-3005 7 CVEs

    Critical: firefox security and bug fix update (Oracle Linux 7)

    [60.3.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.3.0-1] - Update to 60.3.0 ESR [60.2.2-2] - Added patch for rhbz#1633932

  • Critical
    ELSA-2018-2942 7 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.191.b12-0] - Update to aarch64-shenandoah-jdk8u191-b12. - Resolves: rhbz#1633817 [1:1.8.0.191.b10-0] - Update to aarch64-shenandoah-jdk8u191-b10. - Drop 8146115/PR3508/RH1463098 applied upstream. - Resolves: rhbz#1633817 [1:1.8.0.181.b16-0] - Add new…

  • Critical
    ELSA-2018-2884 2 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.2.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.2.2-1] - Update to 60.2.2 ESR

  • Critical
    ELSA-2018-2692 5 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.2.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.2.0-1] - Update to 60.2.0 ESR [60.1.0-9] - Do not set user agent (rhbz#1608065) - GTK dialogs are localized now (rhbz#1619373) - JNLP association works again (r…

  • Critical
    ELSA-2018-2113 11 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.1.0-4.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.1.0-4] - Disabled jemalloc on all second arches [60.1.0-3] - Updated to 60.1.0 ESR build2 [60.1.0-2] - Disabled jemalloc on second arches [60.1.0-1] - Updated t…

  • Critical max 7.5
    ELSA-2018-1453 1 CVE

    Critical: dhcp security update (Oracle Linux 7)

    [12:4.2.5-68.0.1.1] - Direct users to Oracle Linux support site. [12:4.2.5-68.1] - Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character

  • Critical max 8.8
    ELSA-2018-1415 9 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.8.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.8.0-1] - Update to 52.8.0 ESR

  • Critical
    ELSA-2018-1223 1 CVE

    Critical: librelp security update (Oracle Linux 7)

    [1.2.12-1.1] - fixed bad NVR - resolves rhbz#1561232 [1.2.12-2] - fixed CVE-2018-1000140 - resolves rhbz#1561232

  • Critical max 5.3
    ELSA-2018-1191 10 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.171-7.b10] - Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix - Resolves: rhbz#1559766 [1:1.8.0.171-4.b10] - Rebuilding due to bad nss-softokn brew-root build override - Resolves: rhbz#1559766 [1:1.8.0.171-3.b10…

  • Critical
    ELSA-2018-0549 1 CVE

    Critical: firefox security update (Oracle Linux 7)

    [52.7.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [52.7.2-1] - Update to 52.7.2 ESR

  • Critical
    ELSA-2018-0527 7 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.7.0-1] - Update to 52.7.0 ESR

  • Critical
    ELSA-2018-0122 11 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.6.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [52.6.0-1] - Update to 52.6.0 ESR

  • Critical
    ELSA-2017-3247 3 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.5.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [52.5.0-1] - Update to 52.5.0 ESR

  • Critical
    ELSA-2017-2998 14 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.151-1.b12] - repack policies adapted to new counts and paths - note that also c-j-c is needed to make this apply in next update - Resolves: rhbz#1499207 [1:1.8.0.151-0.b12] - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not…

  • Critical
    ELSA-2017-2836 6 CVEs

    Critical: dnsmasq security update (Oracle Linux 7)

    [2.76-2.2] - Small correction of CVE-2017-14491 [2.76-2.1] - Fix CVE-2017-14491 - Fix CVE-2017-14492 - Fix CVE-2017-14493 - Fix CVE-2017-14494 - Fix CVE-2017-14496 - Fix CVE-2017-14495 - extra fixes

  • Critical
    ELSA-2017-2831 7 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.4.0-1] - Update to 52.4.0 ESR [52.3.0-3] - Update to 52.3.0 ESR (b2) - Require correct nss version

  • Critical
    ELSA-2017-2456 15 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.3.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [52.3.0-3] - Fix for rhbz#1470294 - bundling newer libffi for pp…

  • Critical
    ELSA-2017-2424 18 CVEs

    Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

    [1:1.7.0.151-2.6.11.0.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.151-2.6.11.0] - Bump to 2.6.11 and u151b00. - Update java-access-bridge-security.patch to apply against 2.6.11. - Apply fix for 8185716 so ppc uses correct ins_encode format - Resolves: rhbz…

  • Critical
    ELSA-2017-1789 21 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.141-2.b16] - Update to aarch64-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz#1466509 [1:1.8.0.141-2.b15] - Revert previous commit so we can revise the security update. - Resolves: rhbz#14684…

  • Critical
    ELSA-2017-1440 19 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.2.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [52.2.0-1] - Update to 52.2.0 ESR [52.1.1-1] - Update to 52.1.1 …

  • Critical
    ELSA-2017-1106 31 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.1.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.1.0-2] - Update to 52.1.0 ESR (Build3) [52.1.0-1] - Update to 52.1.0 ESR

  • Critical
    ELSA-2017-1100 1 CVE

    Critical: nss and nss-util security update (Oracle Linux 7)

    nss [3.28.4-1.0.1] - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed [3.28.4-1] - Rebase to 3.28.4 nss-util [3.28.4-1] - Rebase to NSS 3.28.4 to accommodate base64 encoding fix

  • Critical
    ELSA-2017-0558 1 CVE

    Critical: firefox security update (Oracle Linux 7)

    [52.0-5.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.0-5] - Added fix for mozbz#1348168/CVE-2017-5428

  • Critical
    ELSA-2017-0461 9 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.0-4.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.0-4] - Update to 52.0 ESR (b4) [52.0-3] - Added fix for rhbz#1423012 - ppc64 gfx crashes [52.0-2] - Enable system nss [52.0-1] - Update to 52.0ESR (B1) - Build RH…

  • Critical
    ELSA-2017-0269 11 CVEs

    Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

    [1:1.7.0.131-2.6.9.0.0.1] - Add oracle-enterprise.patch - Fix DISTRO_NAME to 'Oracle Linux' [1:1.7.0.131-2.6.9.0] - Add blacklisted.certs to installation file list. - Resolves: rhbz#1410612 [1:1.7.0.131-2.6.9.0] - Bump to 2.6.9 and u131b00. - Remove patch app…

  • Critical
    ELSA-2017-0190 9 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [45.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.7.0-1] - Updated to 45.7.0 (B1) [45.6.0-2] - Enabled ffmpeg > 54.35.1 (rhbz#1330898, mozbz#1263665)

  • Critical
    ELSA-2017-0180 11 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.121-0.b13] - Update to aarch64-jdk8u121-b13. - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Re-generate RH1393047 ObjectInputStream patch against u121. - Resolves: rhbz#1410612 [1:1.8.0.112-0.b16] - Update to …

  • Critical
    ELSA-2016-2946 10 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [45.6.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.6.0-1] - Update to 45.6.0 ESR