Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

High

ELSA-2018-2916 2 CVEs

Important: spamassassin security update (Oracle Linux 7)

[3.4.0-4] - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker), - which are no longer auto-generated due to a (expected) change in rpm-build - Related: rhbz#1632998 [3.4.0-3] - Fix CVE-2018-11781 - Local user code injection in the meta rule…

Oct 11, 2018
High

ELSA-2018-4244 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.20.1] - bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy) [Orabug: 27988326] - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov) [Orabug: 27988326] - bnxt_en: add meta pointer…

Oct 10, 2018
High

ELSA-2018-4245 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.25.1] - x86/spectre_v2: Don't check microcode versions when running under hypervisors (Konrad Rzeszutek Wilk) [Orabug: 27959785] - rds: CVE-2018-7492: Fix NULL pointer dereference in __rds_rdma_map (Hakon Bugge) [Orabug: 28552792] {CVE-…

Oct 10, 2018
High

ELSA-2018-4242 5 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1818.3.3] - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon) [Orabug: 28122110] - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala) [Orabug: 28122110] - virtio_net: Introduce VIRTIO_NET_F_STANDBY…

Oct 10, 2018
High max 7.8

ELSA-2018-4233 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.24.3] - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook) [Orabug: 28710010] {CVE-2018-14634}

Sep 28, 2018
High max 7.8

ELSA-2018-4230 1 CVE 1 exploited

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.19.6] - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook) [Orabug: 28709994] {CVE-2018-14634}

Sep 28, 2018
High max 7.8

ELSA-2018-2748 1 CVE 1 exploited

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-862.14.4.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.14.4] - [scsi] Revert: lp…

Sep 26, 2018
High

ELSA-2018-4227 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.19.5] - nsfs: mark dentry with DCACHE_RCUACCESS (Cong Wang) [Orabug: 28576290] {CVE-2018-5873} - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk) [Orabug: 28604628] - IB/ipoib: Improve filtering log message (Yuval Shaia) […

Sep 26, 2018
High max 8.3

ELSA-2018-2731 1 CVE

Important: spice and spice-gtk security update (Oracle Linux 7)

spice [0.14.0-2.0.2] - add arm suppport [0.14.0-2.5] - Fix flexible array buffer overflow Resolves: rhbz#1596008 spice-gtk [0.34-3.2] - Fix flexible array buffer overflow Resolves: rhbz#1596008

Sep 20, 2018
High

ELSA-2018-4216 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.19.2] - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug: 28639707] {CVE-2018-5390} - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet) [Orabug: 28639707] {CVE-2018-5390} - tcp: detect malicious patterns in tcp_collapse_of…

Sep 14, 2018
High max 5.6

ELSA-2018-4215 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.24.2] - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka) [Orabug: 28505476] {CVE-2018-3620} - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka) [Orabug: 28505476] {CVE-2018-36…

Sep 13, 2018
High

ELSA-2018-4211 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.24.1] - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang) [Orabug: 28022108] {CVE-2018-10675} - Fix up non-directory creation in SGID directories (Linus Torvalds) [Orabug: 28459478] {CVE-2018-13405} - ALSA: seq: …

Sep 10, 2018
High

ELSA-2018-4210 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.19.1] - x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy) [Orabug: 28402927] {CVE-2018-14678} - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen) [Orabug: 28488808] {CVE-2018-3620} - x86/…

Sep 6, 2018
High

ELSA-2018-4208 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.18.9] - rebuild bumping release [4.1.12-124.18.8] - Cipso: cipso_v4_optptr enter infinite loop (yujuan.qi) [Orabug: 28563992] {CVE-2018-10938} - Btrfs: fix list_add corruption and soft lockups in fsync (Liu Bo) [Orabug: 28119834] - x86/paravirt: F…

Sep 4, 2018
High max 7.5

ELSA-2018-2570 1 CVE

Important: bind security update (Oracle Linux 7)

[32:9.9.4-61.1] - Fix CVE-2018-5740

Aug 27, 2018
High max 8.5

ELSA-2018-2557 1 CVE

Important: postgresql security update (Oracle Linux 7)

[9.2.24-1] - update to the latest 9.2 release - fix CVE-2018-10915

Aug 23, 2018
High

ELSA-2018-2526 3 CVEs

Important: mutt security update (Oracle Linux 7)

[5:1.5.21-28] - Resolves: CVE-2018-14354 CVE-2018-14357 CVE-2018-14362

Aug 20, 2018
High

ELSA-2018-2462 2 CVEs

Important: qemu-kvm security and bug fix update (Oracle Linux 7)

[1.5.3-156.el7_5.5] - kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549824] - kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549824] - kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549824] - kvm-multiboot-fprintf-stde…

Aug 16, 2018
High

ELSA-2018-4200 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.18.6] - qla2xxx: Update the version to 9.00.00.00.41.0-k1. (Giridhar Malavali) [Orabug: 28172611] - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali) [Orabug: 28172611] - qla2xxx: Correction to total data segme…

Aug 16, 2018
High max 5.5

ELSA-2018-4198 1 CVE

Important: qemu security update (Oracle Linux 7)

[12:2.9.0-11.1.el7] - i386: Define the Virt SSBD MSR and handling of it (CVE-2018-3639) (Konrad Rzeszutek Wilk) [Orabug: 28110449] {CVE-2018-3639} - i386: define the AMD 'virt-ssbd' CPUID feature bit (CVE-2018-3639) (Konrad Rzeszutek Wilk) [Orabug: 28110449] …

Aug 15, 2018
High max 5.6

ELSA-2018-4196 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.18.5] - inet: frag: enforce memory limits earlier (Eric Dumazet) [Orabug: 28450977] - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas) [Orabug: 28492122] - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas) [Orabug: 28492122] - x86/asm: Add pud/…

Aug 14, 2018
High max 5.6

ELSA-2018-2384 7 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-862.11.6.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.11.6] - [kernel] cpu/hotp…

Aug 14, 2018
High max 5.6

ELSA-2018-4195 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1818.1.6] - ipv4: frags: handle possible skb truesize change (Eric Dumazet) [Orabug: 28481663] {CVE-2018-5391} [4.14.35-1818.1.5] - inet: frag: enforce memory limits earlier (Eric Dumazet) [Orabug: 28481663] {CVE-2018-5391} - init/main.c: reorder boo…

Aug 14, 2018
High

ELSA-2018-4193 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.23.1] - xen/blkback: free requests on disconnection (Dongli Zhang) [Orabug: 22111941] - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam) [Orabug: 27986376] {CVE-2018-5333} - ACPI: sbshc: remove raw pointer from prin…

Aug 9, 2018
High

ELSA-2018-4190 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1818.0.15] - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390} - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390} - tcp: detect malicious patterns in tcp_collapse_…

Aug 7, 2018
High

ELSA-2018-4189 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.14.35-1818.0.14] - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390} - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390} - tcp: detect malicious patterns in tcp_collapse_…

Aug 6, 2018
High max 8.8

ELSA-2018-2285 1 CVE

Important: yum-utils security update (Oracle Linux 7)

[1.1.31-46.0.1] - needs-restarting not checking kernel-uek for reboot message [Orabug 27189714] - add bug27596617.patch to remove upstream URL reference [1.1.31-46] - reposync: prevent path traversal. - Resolves: bug#1600617

Jul 30, 2018
High

ELSA-2018-2252 11 CVEs

Important: thunderbird security update (Oracle Linux 7)

[52.9.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [52.9.1-1] - Update to 52.9.1

Jul 24, 2018
High

ELSA-2018-2240 1 CVE

Important: openslp security update (Oracle Linux 7)

[1:2.0.0-7] - Fix possible heap memory corruption, CVE-2017-17833 Resolves: #1575698

Jul 23, 2018
High

ELSA-2018-2181 1 CVE

Important: gnupg2 security update (Oracle Linux 7)

[2.0.22-5] - fix CVE-2018-12020 - missing sanitization of original filename

Jul 11, 2018
High max 5.5

ELSA-2018-4161 7 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.17.1] - block: update integrity interval after queue limits change (Ritika Srivastava) [Orabug: 27586756] - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev) [Orabug: 28001529] {CVE-2017-8824} {CVE-2018-1130} - net/rds: Implement …

Jul 10, 2018
High max 5.5

ELSA-2018-4164 9 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.22.1] - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao) {CVE-2017-18203} - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman) [Orabug: 27986407] {CVE-2018-8781} - kernel/exit.c: avoid undefine…

Jul 10, 2018
High max 5.5

ELSA-2018-1997 1 CVE

Important: libvirt security and bug fix update (Oracle Linux 7)

[3.9.0-14.el7_5.6] - logging: Don't inhibit shutdown in system daemon (rhbz#1573268) - util: don't check for parallel iteration in hash-related functions (rhbz#1581364) - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639) - virNumaGetHugePageInfo: …

Jun 27, 2018
High max 5.5

ELSA-2018-1965 2 CVEs

Important: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-862.6.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.6.3] - [x86] always enable…

Jun 27, 2018
High max 5.5

ELSA-2018-2001 1 CVE

Important: qemu-kvm security update (Oracle Linux 7)

[1.5.3-156.el7_5.3] - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363] - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363] - Resolves: bz#1584363 (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store byp…

Jun 27, 2018
High

ELSA-2018-1957 1 CVE

Important: git security update (Oracle Linux 7)

[1.8.3.1-14] - Backport fix for CVE-2018-1123 - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

Jun 20, 2018
High

ELSA-2018-4134 12 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek [3.8.13-118.21.4] - x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176] {CVE-2018-3665} [3.8.13-118.21.3] - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug: 27951287] {CVE-2017-17741} {CVE-2017-17741} - xfs: set …

Jun 15, 2018
High

ELSA-2018-4144 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.16.4] - x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28135099] {CVE-2018-3665}

Jun 15, 2018
High

ELSA-2018-4131 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-124.16.2] - netlink: add a start callback for starting a netlink dump (Tom Herbert) [Orabug: 27169581] {CVE-2017-16939} - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu) [Orabug: 27169581] {CVE-2017-16939}

Jun 13, 2018
High max 5.5

ELSA-2018-1836 1 CVE

Important: plexus-archiver security update (Oracle Linux 7)

[0:2.4.2-5] - Fix arbitrary file write vulnerability - Resolves: CVE-2018-1002200

Jun 12, 2018