Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

367 results · Clear filters · Feed

Critical max 8.1

ELSA-2020-1338 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 7)

[68.6.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.6.1-1] - Update to 68.6.1 ESR

Apr 11, 2020
Critical max 8.1

ELSA-2020-1341 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[68.6.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.6.1-1] - Update to 68.6.1 ESR

Apr 9, 2020
High max 9.8

ELSA-2020-0855 1 CVE 1 exploited

Important: tomcat security update (Oracle Linux 7)

[0:7.0.76-11] - Resolves: rhbz#1806801 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability

Mar 22, 2020
High max 8.8

ELSA-2020-0127 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 8)

[68.4.1-2.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.4.1-2] - Update to 68.4.1 build1

Jan 18, 2020
High max 8.8

ELSA-2020-0120 5 CVEs 1 exploited

Important: thunderbird security update (Oracle Linux 7)

[68.4.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.4.1-2] - Update to 68.4.1 build1

Jan 16, 2020
Critical max 8.8

ELSA-2020-0111 5 CVEs 1 exploited

Critical: firefox security update (Oracle Linux 8)

[68.4.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.4.1-1] - Update to 68.4.1esr build1 - Upda…

Jan 15, 2020
Critical max 8.8

ELSA-2020-0085 5 CVEs 1 exploited

Critical: firefox security update (Oracle Linux 7)

[68.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.4.1-1] - Update to 68.4.1esr build1 - Update to 68.4.0…

Jan 13, 2020
Critical max 9.8

ELSA-2019-4240 1 CVE 1 exploited

Critical: openslp security update (Oracle Linux 7)

[1:2.0.0-8] - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: #1781701

Dec 16, 2019
Critical max 8.7

ELSA-2019-3736 1 CVE 1 exploited

Critical: php:7.3 security update (Oracle Linux 8)

php [7.3.5-5] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Nov 23, 2019
Critical max 8.7

ELSA-2019-3735 1 CVE 1 exploited

Critical: php:7.2 security update (Oracle Linux 8)

php [7.2.11-4] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Nov 23, 2019
Critical max 8.7

ELSA-2019-3286 1 CVE 1 exploited

Critical: php security update (Oracle Linux 7)

[5.4.16-46.1] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043

Oct 31, 2019
High max 7.8

ELSA-2019-2411 2 CVEs 1 exploited

Important: kernel security update (Oracle Linux 8)

- [4.18.0-80.7.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.7.2_0] - [x86…

Aug 19, 2019
High max 7.8

ELSA-2019-4746 8 CVEs 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1902.4.8] - x86/boot: Clear RSDP address in boot_params for broken loaders (Juergen Gross) [Orabug: 30111373] [4.14.35-1902.4.7] - rds: ib: Qualify CM REQ duplicate detection with connection being up (Hakon Bugge) [Orabug: 30062149] - rds: Further pr…

Aug 15, 2019
Critical max 10.0

ELSA-2019-1696 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 8)

[60.7.2-3.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.2-3.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-3] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

Jul 30, 2019
High max 7.8

ELSA-2019-0980 2 CVEs 1 exploited

Important: httpd:2.4 security update (Oracle Linux 8)

httpd [2.4.37-11.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-11] - Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #16…

Jul 30, 2019
High max 10.0

ELSA-2019-1623 6 CVEs 2 exploited

Important: thunderbird security update (Oracle Linux 8)

[60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1

Jul 30, 2019
High max 10.0

ELSA-2019-1626 6 CVEs 2 exploited

Important: thunderbird security update (Oracle Linux 7)

[60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1

Jun 27, 2019
Critical max 10.0

ELSA-2019-1603 2 CVEs 2 exploited

Critical: firefox security update (Oracle Linux 7)

[60.7.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-1] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

Jun 26, 2019
High max 7.8

ELSA-2018-4233 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.24.3] - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook) [Orabug: 28710010] {CVE-2018-14634}

Sep 28, 2018
High max 7.8

ELSA-2018-4230 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.19.6] - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook) [Orabug: 28709994] {CVE-2018-14634}

Sep 28, 2018
High max 7.8

ELSA-2018-2748 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-862.14.4.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.14.4] - [scsi] Revert: lp…

Sep 26, 2018
High max 8.1

ELSA-2017-3081 4 CVEs 2 exploited

Important: tomcat security update (Oracle Linux 7)

[0:7.0.76-3] - Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws - Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning - Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revis…

Oct 30, 2017
High max 9.8

ELSA-2017-1270 1 CVE 1 exploited

Important: samba security update (Oracle Linux 7)

[3.6.23-43.0.1] - Remove use-after-free talloc_tos() inlined function problem (John Haxby) [orabug 18253258] [3.6.24-43] - resolves: #1450782 - Fix CVE-2017-7494

May 24, 2017
High max 7.8

ELSA-2017-1230 1 CVE 1 exploited

Important: ghostscript security update (Oracle Linux 7)

[8.70-23.el6_9.2] - Security fix for CVE-2017-8291 updated to address SIGSEGV [8.70-23.el6_9.1] - Added security fix for CVE-2017-8291 (bug #1446063)

May 12, 2017
High max 7.5

ELSA-2016-2850 1 CVE 1 exploited

Important: thunderbird security update (Oracle Linux 7)

[45.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.5.1-1] - Update to 45.5.1

Dec 5, 2016
Critical max 7.5

ELSA-2016-2843 1 CVE 1 exploited

Critical: firefox security update (Oracle Linux 7)

[45.5.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.5.1-1] - Update to 45.5.1 ESR

Dec 1, 2016
High max 7.0

ELSA-2016-2098 1 CVE 1 exploited

Important: kernel security update (Oracle Linux 7)

- [3.10.0-327.36.3.OL7] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-327.36.3] - [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Alexander Gordeev) [1385123 1385124] {CVE-2016-5195}

Oct 24, 2016
High max 7.0

ELSA-2016-3633 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.13.3] - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds) [Orabug: 24928591] {CVE-2016-5195}

Oct 21, 2016
High max 7.0

ELSA-2016-3632 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [4.1.12-61.1.16] - mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (Linus Torvalds) [Orabug: 24927306] {CVE-2016-5195} [4.1.12-61.1.15] - drivers/nvme: provide a module parameter for setting number of I/O queues (Shan Hai) [Orabug: 24…

Oct 21, 2016
High max 8.4

ELSA-2016-0726 5 CVEs 3 exploited

Important: ImageMagick security update (Oracle Linux 7)

[6.7.2.7-4] - Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

May 9, 2016
Critical max 9.8

ELSA-2016-0723 5 CVEs 1 exploited

Critical: java-1.6.0-openjdk security update (Oracle Linux 7)

[1:1.6.0.39-1.13.11.0] - Update to IcedTea 1.13.11 & OpenJDK 6 b39. - Resolves: rhbz#1325432

May 9, 2016
Critical max 9.8

ELSA-2016-0676 5 CVEs 1 exploited

Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.101-2.6.6.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.101-2.6.6.1] - added Patch666 fontpath.patch to fix tck regressions - Resolves: rhbz#1325427 [1:1.7.0.101-2.6.6.0] - Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7. -…

Apr 21, 2016
Critical max 9.8

ELSA-2016-0650 6 CVEs 1 exploited

Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.91-0.b14] - Add additional fix to Zero patch to properly handle result on 64-bit big-endian - Resolves: rhbz#1325422 [1:1.8.0.91-0.b14] - Revert settings to production defaults so we can at least get a build. - Resolves: rhbz#1325422 [1:1.8.0.91-0.b1…

Apr 20, 2016
High max 9.8

ELSA-2015-2522 1 CVE 1 exploited

Important: apache-commons-collections security update (Oracle Linux 7)

[3.2.1-22] - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501

Nov 30, 2015
Medium max 7.8

ELSA-2015-2505 3 CVEs 1 exploited

Moderate: abrt and libreport security update (Oracle Linux 7)

abrt [2.1.11-35.0.1] - Drop libreport-rhel and libreport-plugin-rhtsupport requires [2.1.11-35] - make /var/spool/abrt owned by root - remove 'r' from /var/spool/abrt for other users - abrt-action-install-debug-info: use secure temporary directory - stop savi…

Nov 25, 2015
High max 8.8

ELSA-2015-1581 1 CVE 1 exploited

Important: firefox security update (Oracle Linux 7)

[38.1.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.1.1-1] - Update to 38.1.1 ESR

Aug 8, 2015
High max 9.8

ELSA-2015-1526 14 CVEs 1 exploited

Important: java-1.6.0-openjdk security update (Oracle Linux 7)

[1:1.6.0.36-1.13.8.1] - Update tarball to fix TCK regression (PR2565) - Resolves: rhbz#1235153 [1:1.6.0.36-1.13.8.0] - Update to IcedTea 1.13.8 - Update no_pr2125.patch to work against new version. - Resolves: rhbz#1235153

Jul 31, 2015
High max 7.5

ELSA-2015-1513 1 CVE 1 exploited

Important: bind security update (Oracle Linux 7)

[32:9.8.2-0.37.rc1.2] - Fix CVE-2015-5477

Jul 29, 2015
High max 7.4

ELSA-2015-1483 2 CVEs 1 exploited

Important: libuser security update (Oracle Linux 7)

[0.60-7] - Update CVE-2015-3246 patch based on review comments Resolves: #1235519 [0.60-6] - Fix CVE-2015-3246 Resolves: #1235519

Jul 23, 2015
High max 9.8

ELSA-2015-1228 16 CVEs 1 exploited

Important: java-1.8.0-openjdk security update (Oracle Linux 7)

[1:1.8.0.51-1.b16] - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz#1235162 [1:1.8.0.51-0.b16] - July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - …

Jul 15, 2015