Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

296 results · Clear filters · Feed

  • High max 7.8
    ELSA-2017-1230 1 CVE 1 exploited

    Important: ghostscript security update (Oracle Linux 7)

    [8.70-23.el6_9.2] - Security fix for CVE-2017-8291 updated to address SIGSEGV [8.70-23.el6_9.1] - Added security fix for CVE-2017-8291 (bug #1446063)

  • High max 7.5
    ELSA-2016-2850 1 CVE 1 exploited

    Important: thunderbird security update (Oracle Linux 7)

    [45.5.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.5.1-1] - Update to 45.5.1

  • High max 7.0
    ELSA-2016-2098 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 7)

    - [3.10.0-327.36.3.OL7] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-327.36.3] - [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Alexander Gordeev) [1385123 1385124] {CVE-2016-5195}

  • High max 7.0
    ELSA-2016-3633 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.13.3] - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds) [Orabug: 24928591] {CVE-2016-5195}

  • High max 7.0
    ELSA-2016-3632 1 CVE 1 exploited

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.16] - mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (Linus Torvalds) [Orabug: 24927306] {CVE-2016-5195} [4.1.12-61.1.15] - drivers/nvme: provide a module parameter for setting number of I/O queues (Shan Hai) [Orabug: 24…

  • High max 8.4
    ELSA-2016-0726 5 CVEs 3 exploited

    Important: ImageMagick security update (Oracle Linux 7)

    [6.7.2.7-4] - Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717

  • High max 9.8
    ELSA-2015-2522 1 CVE 1 exploited

    Important: apache-commons-collections security update (Oracle Linux 7)

    [3.2.1-22] - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501

  • High max 8.8
    ELSA-2015-1581 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [38.1.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.1.1-1] - Update to 38.1.1 ESR

  • High max 9.8
    ELSA-2015-1526 14 CVEs 1 exploited

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.36-1.13.8.1] - Update tarball to fix TCK regression (PR2565) - Resolves: rhbz#1235153 [1:1.6.0.36-1.13.8.0] - Update to IcedTea 1.13.8 - Update no_pr2125.patch to work against new version. - Resolves: rhbz#1235153

  • High max 7.5
    ELSA-2015-1513 1 CVE 1 exploited

    Important: bind security update (Oracle Linux 7)

    [32:9.8.2-0.37.rc1.2] - Fix CVE-2015-5477

  • High max 7.4
    ELSA-2015-1483 2 CVEs 1 exploited

    Important: libuser security update (Oracle Linux 7)

    [0.60-7] - Update CVE-2015-3246 patch based on review comments Resolves: #1235519 [0.60-6] - Fix CVE-2015-3246 Resolves: #1235519

  • High max 9.8
    ELSA-2015-1228 16 CVEs 1 exploited

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.51-1.b16] - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz#1235162 [1:1.8.0.51-0.b16] - July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - …

  • High max 8.8
    ELSA-2014-3092 2 CVEs 1 exploited

    Important: bash security update (Oracle Linux 7)

    [4.2.45-5.4.0.1] - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. [orabug 19905256]

  • High max 9.8
    ELSA-2014-1306 3 CVEs 1 exploited

    Important: bash security update (Oracle Linux 7)

    [4.2.45-5.4] - CVE-2014-7169 Resolves: #1146324 [4.2.45-5.3] - amend patch to match upstream's Related: #1146324 [4.2.45-5.2] - Fix-up the patch Related: #1141647

  • High max 7.8
    ELSA-2014-0786 8 CVEs 1 exploited

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-123.4.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.4.2] - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206} - [fs] aio: plug memory disclosure and fix reqs_activ…

  • High max 5.5
    ELSA-2014-0678 1 CVE 1 exploited

    Important: kernel security update (Oracle Linux 7)

    [3.10.0-123.1.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.1.2] - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}