Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

367 results · Clear filters · Feed

  • Critical max 9.8
    ELSA-2015-1229 14 CVEs 1 exploited

    Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

    [1:1.7.0.85-2.6.1.2.0.1.el7_1] - Update DISTRO_NAME in specfile [1:1.7.0.85-2.6.1.2] - Bump upstream tarball to u25b01 to fix issue with 8075374 backport. - Resolves: rhbz#1235158 [1:1.7.0.85-2.6.1.1] - Update OpenJDK tarball so correct version is used. - Res…

  • High max 8.8
    ELSA-2014-3092 2 CVEs 1 exploited

    Important: bash security update (Oracle Linux 7)

    [4.2.45-5.4.0.1] - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. [orabug 19905256]

  • High max 9.8
    ELSA-2014-1306 3 CVEs 1 exploited

    Important: bash security update (Oracle Linux 7)

    [4.2.45-5.4] - CVE-2014-7169 Resolves: #1146324 [4.2.45-5.3] - amend patch to match upstream's Related: #1146324 [4.2.45-5.2] - Fix-up the patch Related: #1141647

  • Critical max 9.8
    ELSA-2014-3076 1 CVE 1 exploited

    Critical: bash security update (Oracle Linux 7)

    [4.2.45-5.2.0.1] - Preliminary fix for CVE-2014-7169

  • Critical max 9.8
    ELSA-2014-1293 1 CVE 1 exploited

    Critical: bash security update (Oracle Linux 7)

    [4.1.2-15.1] - Check for fishy environment Resolves: #1141645

  • High max 7.8
    ELSA-2014-0786 8 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-123.4.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.4.2] - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206} - [fs] aio: plug memory disclosure and fix reqs_activ…

  • High max 5.5
    ELSA-2014-0678 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-123.1.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.1.2] - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}