Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

206 results · Clear filters · Feed

Critical max 7.5

ELSA-2016-2843 1 CVE 1 exploited

Critical: firefox security update (Oracle Linux 7)

[45.5.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.5.1-1] - Update to 45.5.1 ESR

Dec 1, 2016
Critical

ELSA-2016-2780 6 CVEs

Critical: firefox security update (Oracle Linux 7)

[45.5.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.5.0-1] - Update to 45.5.0 ESR [45.4.0-3] - Added upcoming upstream patches mozbz#1018486 [45.4.0-2] - Added Laszlo Er…

Nov 16, 2016
Critical

ELSA-2016-2079 5 CVEs

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.111-0.b15] - added nss restricting requires - Resolves: rhbz#1381990 [1:1.8.0.111-0.b15] - Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL. - Resolves: rhbz#1381990 [1:1.8.0.111-0.b15] - Update to aarch64-jdk8u111-b15, with AA…

Oct 19, 2016
Critical

ELSA-2016-1912 12 CVEs

Critical: firefox security update (Oracle Linux 7)

[45.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.4.0-1] - Update to 45.4.0 ESR

Sep 21, 2016
Critical

ELSA-2016-1551 12 CVEs

Critical: firefox security update (Oracle Linux 7)

[45.3.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.3.0-1] - Update to 45.3.0 ESR [45.2.0-3] - Added fix for mozbz#256180 [45.2.0-2] - Added fix for mozbz#975832, rhbz#1…

Aug 3, 2016
Critical

ELSA-2016-1458 8 CVEs

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.101-3.b13] - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9. - Resolves: rhbz#1350034 [1:1.8.0.101-2.b13] - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811 - Resolves: rhbz#1350034 [1:1.8.0.10…

Jul 20, 2016
Critical

ELSA-2016-1217 6 CVEs

Critical: firefox security update (Oracle Linux 7)

[45.2.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.2.0-1] - Update to 45.2.0 ESR [45.1.1-2] - Added fix for mozbz#1270046 - new Samba auth response

Jun 8, 2016
Critical max 9.8

ELSA-2016-0723 5 CVEs 1 exploited

Critical: java-1.6.0-openjdk security update (Oracle Linux 7)

[1:1.6.0.39-1.13.11.0] - Update to IcedTea 1.13.11 & OpenJDK 6 b39. - Resolves: rhbz#1325432

May 9, 2016
Critical

ELSA-2016-0695 5 CVEs

Critical: firefox security update (Oracle Linux 7)

[45.1.0-1.0.1.el7_2] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.1.0-1] - Update to 45.1.0 ESR [45.0.2-1] - Update to 45.0.2 ESR [45.0.1-1] - Update to 45.0.1 ESR [45.0-5] - Fi…

Apr 26, 2016
Critical max 9.8

ELSA-2016-0676 5 CVEs 1 exploited

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.101-2.6.6.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.101-2.6.6.1] - added Patch666 fontpath.patch to fix tck regressions - Resolves: rhbz#1325427 [1:1.7.0.101-2.6.6.0] - Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7. -…

Apr 21, 2016
Critical max 9.8

ELSA-2016-0650 6 CVEs 1 exploited

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.91-0.b14] - Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Resolves: rhbz#1325422 [1:1.8.0.91-0.b14] - Revert settings to production defaults so we can at least get a build. - Resolves: rhbz#1325422 [1:1.8.0.91-0.b1…

Apr 20, 2016
Critical

ELSA-2016-0612 8 CVEs

Critical: samba and samba4 security, bug fix, and enhancement update (Oracle Linux 7)

ipa [4.2.0-15.0.1.6.1] - Drop redhat-access-plugin-ipa requires for OL7 Blank out header-logo.png product-name.png Replace login-screen-logo.png [20362818] [4.2.0-15.6.1] - Rebuild against newer Samba version - Related: #1322690 libldb [1.1.25-1] - Rebase lib…

Apr 12, 2016
Critical

ELSA-2016-0513 1 CVE

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.77-0.b03] - Remove what remains of the SunEC sources in the remove-intree-libraries script. - Resolves: rhbz#1320664 [1:1.8.0.77-0.b03] - Update to u77b03. - Drop 8146566 which is applied upstream. - Replace s390 Java options patch with general versi…

Mar 24, 2016
Critical

ELSA-2016-0370 1 CVE

Critical: nss-util security update (Oracle Linux 7)

[3.19.1-5] - Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ... [3.19.1-4] - Rebuild to ensure use of correct NSPR. [3.19.1-3] - Include the fix for CVE-2016-1950 from NSS 3.19.2.3

Mar 9, 2016
Critical

ELSA-2016-0373 26 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [38.7.0-1] - Update to 38.7.0 ESR

Mar 9, 2016
Critical

ELSA-2016-0197 3 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.6.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [38.6.1-1] - Update to 38.6.1 ESR

Feb 16, 2016
Critical

ELSA-2016-0176 2 CVEs

Critical: glibc security and bug fix update (Oracle Linux 7)

[2.17-106.0.1.4] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. [2.17-106.4] - Revert problematic libresolv change,…

Feb 16, 2016
Critical

ELSA-2016-0071 2 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.6.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.6.0-1] - Update to 38.6.0 ESR

Jan 27, 2016
Critical

ELSA-2016-0049 7 CVEs

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.71-2.b15] - Add md5sum for previous java.security file so it gets updated. - Resolves: rhbz#1295753 [1:1.8.0.71-1.b15] - Restore upstream version of system LCMS patch removed by 'sync with Fedora' - Add patch to turn off strict overflow on IndicRearr…

Jan 20, 2016
Critical

ELSA-2015-2657 7 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.5.0-2.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.5.0-2] - Update to 38.5.0 ESR

Dec 16, 2015
Critical

ELSA-2015-1982 8 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.4.0-1.0.1.el5_11] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.4.0-1] - Update to 38.4.0 ESR

Nov 4, 2015
Critical

ELSA-2015-1981 3 CVEs

Critical: nss, nss-util, and nspr security update (Oracle Linux 7)

nspr [4.10.8-2] - Resolves: Bug 1269360 - CVE-2015-7183 - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption nss [3.19.1-5.0.1] - Added nss-vendor.patch to change vendor [3.19.1-5] - Rebuild against upd…

Nov 4, 2015
Critical

ELSA-2015-1920 17 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.91-2.6.2.2.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.91-2.6.2.2] - added and applied patch500 8072932or8074489.patch to fix tck failure - Resolves: rhbz#1271919 [1:1.7.0.91-2.6.2.1] - Bump to 2.6.2 and u91b00. - Resolves: rhbz#1271919

Oct 21, 2015
Critical

ELSA-2015-1834 3 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.3.0-2.0.1.el6_7] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [38.3.0-2] - Update to 38.3.0 ESR

Sep 22, 2015
Critical

ELSA-2015-1693 2 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.2.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.2.1-1] - Update to 38.2.1 ESR

Aug 27, 2015
Critical

ELSA-2015-1586 14 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.2.0-4.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [38.2.0-4] - Update to 38.2.0 ESR

Aug 11, 2015
Critical max 9.8

ELSA-2015-1229 14 CVEs 1 exploited

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.85-2.6.1.2.0.1.el7_1] - Update DISTRO_NAME in specfile [1:1.7.0.85-2.6.1.2] - Bump upstream tarball to u25b01 to fix issue with 8075374 backport. - Resolves: rhbz#1235158 [1:1.7.0.85-2.6.1.1] - Update OpenJDK tarball so correct version is used. - Res…

Jul 15, 2015
Critical

ELSA-2015-1207 17 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.1.0-1.0.1.el7_1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [38.1.0-1] - Update to 38.1.0 ESR [38.0.1-2] - Fixed rhbz#1222807 by removing preun section

Jul 3, 2015
Critical

ELSA-2015-0988 5 CVEs

Critical: firefox security update (Oracle Linux 7)

[38.0-3.0.1.el7_1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [38.0-3] - Enabled system nss - Removed unused patches [38.0-2] - Update to 38.0 ESR [38.0b8-0.11] - Update to 38.0 Beta 8 [38.0b6-0.10] - Added patch for mozbz…

May 13, 2015
Critical

ELSA-2015-0806 7 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.75-2.5.5.1.0.1.el7_1] - Update DISTRO_NAME in specfile [1:1.7.0.75-2.5.5.1] - repacked sources - Resolves: rhbz#1209072 [1:1.7.0.75-2.5.5.0] - Bump to 2.5.5 using OpenJDK 7u79 b14. - Update OpenJDK tarball creation comments - Remove test case for RH1…

Apr 15, 2015
Critical

ELSA-2015-0766 5 CVEs

Critical: firefox security update (Oracle Linux 7)

[31.6.0-2.0.1.el5_11] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [31.6.0-1] - Update to 31.6.0 ESR Build 2 [31.6.0-1] - Update to 31.6.0 ESR

Apr 1, 2015
Critical

ELSA-2015-0718 2 CVEs

Critical: firefox security update (Oracle Linux 7)

[31.5.3-1.0.1.el5_11] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [31.5.3-1] - Update to 31.5.3 ESR [31.5.2-1] - Update to 31.5.2 ESR [31.5.1-1] - Update to 31.5.1 ESR

Mar 24, 2015
Critical

ELSA-2015-0265 4 CVEs

Critical: firefox security update (Oracle Linux 7)

firefox [31.5.0-2.0.1.el7_0] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [31.5.0-2] - Update to 31.5.0 ESR Build 2 xulrunner [31.5.0-1.0.1-el7_0] - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-pr…

Feb 25, 2015
Critical

ELSA-2015-0092 1 CVE

Critical: glibc security update (Oracle Linux 7)

Oracle Linux 7: [2.17-55.0.4.el7_0.5] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.5]…

Jan 27, 2015
Critical max 3.4

ELSA-2015-0067 12 CVEs

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.75-2.5.4.0.0.1.el6_6] - Update DISTRO_NAME in specfile [1:1.7.0.75-2.5.4.0] - Fix abrt_friendly_hs_log_jdk7.patch to apply again. [1:1.7.0.75-2.5.4.0] - Bump to 2.5.4 using OpenJDK 7u75 b13. - Remove earlier temporary patch for RH1146622 (included up…

Jan 21, 2015
Critical

ELSA-2015-0046 4 CVEs

Critical: firefox security and bug fix update (Oracle Linux 7)

[31.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [31.4.0-1] - Update to 31.4.0 ESR [31.3.0-9] - Fixed problems with dictionaries (mozbz#1097550) - Fixed rhbz#1164855 - fi…

Jan 14, 2015
Critical

ELSA-2014-1919 5 CVEs

Critical: firefox security update (Oracle Linux 7)

[31.3.0-4.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones [31.3.0-4] - Update to 31.3.0 ESR Build 2 - Fix for geolocation API (rhbz#1063739) [31.2.0-5] - splice workaround (rhbz#11…

Dec 3, 2014
Critical

ELSA-2014-1635 6 CVEs

Critical: firefox security update (Oracle Linux 7)

firefox [31.2.0-3.0.1.el7_0] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one [31.2.0-3] - Update to 31.2.0 ESR - Fix for mozbz#1042889 [31.1.0-7] - Enable WebM on all arches xulrunner [31.2.0-1.0.1] - Replaced xulrunner-redhat-d…

Oct 15, 2014
Critical max 9.8

ELSA-2014-3076 1 CVE 1 exploited

Critical: bash security update (Oracle Linux 7)

[4.2.45-5.2.0.1] - Preliminary fix for CVE-2014-7169

Sep 25, 2014
Critical max 9.8

ELSA-2014-1293 1 CVE 1 exploited

Critical: bash security update (Oracle Linux 7)

[4.1.2-15.1] - Check for fishy environment Resolves: #1141645

Sep 24, 2014