Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

  • High
    ELSA-2017-1365 1 CVE

    Important: nss security and bug fix update (Oracle Linux 7)

    [3.28.4-1.2.0.1] - Added nss-vendor.patch to change vendor [3.28.4-1.2] - Include CKBI 2.14 and updated CA constraints from NSS 3.28.5 [3.28.4-1.1] - Fix zero-length record treatment in SSL3_GatherData

  • High
    ELSA-2017-1382 1 CVE

    Important: sudo security update (Oracle Linux 7)

    [1.8.6p3-28] - Fixes CVE-2017-1000367 Resolves: rhbz#1455399

  • High
    ELSA-2017-1308 5 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.21.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.21.1] - [kernel] sched/…

  • High
    ELSA-2017-3575 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.18.3] - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet) [Orabug: 26108571] {CVE-2017-8890}

  • High
    ELSA-2017-3574 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-94.3.5] - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet) [Orabug: 26132091] {CVE-2017-8890}

  • High max 9.8
    ELSA-2017-1270 1 CVE 1 exploited

    Important: samba security update (Oracle Linux 7)

    [3.6.23-43.0.1] - Remove use-after-free talloc_tos() inlined function problem (John Haxby) [orabug 18253258] [3.6.24-43] - resolves: #1450782 - Fix CVE-2017-7494

  • High
    ELSA-2017-1263 1 CVE

    Important: libtirpc security update (Oracle Linux 7)

    [0.2.4-0.8_3] - Fixed for CVE-2017-8779 (bz 1449462)

  • High
    ELSA-2017-1264 1 CVE

    Important: kdelibs security update (Oracle Linux 7)

    [6:4.14.8-6] - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422) Resolves: CVE-2017-8422

  • High
    ELSA-2017-1262 1 CVE

    Important: rpcbind security update (Oracle Linux 7)

    [0.2.0-38_3] - Fixed typo in memory leaks patch (bz 1449462)

  • High
    ELSA-2017-3565 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-94.3.4] - ipv6: catch a null skb before using it in a DTRACE (Shannon Nelson) [Orabug: 26075879] - sparc64: Do not retain old VM_SPARC_ADI flag when protection changes on page (Khalid Aziz) [Orabug: 26038830] [4.1.12-94.3.3] - nfsd: stricte…

  • High
    ELSA-2017-3566 11 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.18.2] - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [Orabug: 25986990] {CVE-2017-7895} [3.8.13-118.18.1] - fnic: Update fnic driver version to 1.6.0.24 (John Sobecki) [Orabug: 24448585] - xen-netfront: Rework th…

  • High max 7.8
    ELSA-2017-1230 1 CVE 1 exploited

    Important: ghostscript security update (Oracle Linux 7)

    [8.70-23.el6_9.2] - Security fix for CVE-2017-8291 updated to address SIGSEGV [8.70-23.el6_9.1] - Added security fix for CVE-2017-8291 (bug #1446063)

  • High max 7.8
    ELSA-2017-1208 30 CVEs

    Important: jasper security update (Oracle Linux 7)

    [1.900.1-21] - Bump release [1.900.1-20] - Multiple security fixes (fixed by thoger): CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8883 CVE-2…

  • High
    ELSA-2017-1201 29 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [52.1.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [52.1.0-1] - Update to 52.1.0 [52.0.1-1] - Update to 52.0.1

  • High max 7.5
    ELSA-2017-1095 2 CVEs

    Important: bind security update (Oracle Linux 7)

    [32:9.9.4-38.3] - Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578)

  • High max 5.5
    ELSA-2017-0987 1 CVE

    Important: qemu-kvm security update (Oracle Linux 7)

    [1.5.3-126.el7_3.6] - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430059] - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430059] - kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430059] - kvm-cirrus-fix-cirrus_i…

  • High
    ELSA-2017-3539 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.34] - uek-rpm: enable CONFIG_KSPLICE. (Jamie Iles) [Orabug: 25698171] - ksplice: add sysctls for determining Ksplice features. (Jamie Iles) [Orabug: 25698171] - signal: protect SIGNAL_UNKILLABLE from unintentional clearing. (Jamie Iles…

  • High
    ELSA-2017-3537 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.17.5] - block: fix use-after-free in seq file (Vegard Nossum) [Orabug: 25877530] {CVE-2016-7910}

  • High max 6.5
    ELSA-2017-0920 1 CVE

    Important: 389-ds-base security and bug fix update (Oracle Linux 7)

    [1.3.5.10-20] - Bump version to 1.3.5.10-20 - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages [1.3.5.10-19] - Release 1.3.5.10-19 - Resolves: bug 1429495 - ns-slapd dies under heavy load - Resolves: bug 1429498 - A fi…

  • High max 5.5
    ELSA-2017-0933 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.16.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.16.1] - [tty] n_hdlc: g…

  • High
    ELSA-2017-3534 18 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.17.4] - Revert 'fix minor infoleak in get_user_ex()' (Brian Maly) [Orabug: 25790392] {CVE-2016-9644} [3.8.13-118.17.3] - net: ping: check minimum size on ICMP header length (Kees Cook) [Orabug: 25766911] {CVE-2016-8399} [3.8.13-118.17.2…

  • High
    ELSA-2017-3533 22 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.33] - Revert 'x86/mm: Expand the exception table logic to allow new handling options' (Brian Maly) [Orabug: 25790387] {CVE-2016-9644} - Revert 'fix minor infoleak in get_user_ex()' (Brian Maly) [Orabug: 25790387] {CVE-2016-9644} [4.1.1…

  • High
    ELSA-2017-0837 6 CVEs

    Important: icoutils security update (Oracle Linux 7)

    [0.31.3-1] - Rebase to upstream version 0.31.3. - This version includes multiple security fixes CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009, CVE-2017-6010, CVE-2017-6011 resolves: rhbz#1430610

  • High
    ELSA-2017-0498 9 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [45.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.8.0-1] - Update to 45.8.0

  • High max 5.5
    ELSA-2017-0396 2 CVEs

    Important: qemu-kvm security and bug fix update (Oracle Linux 7)

    [1.5.3-126.el7_3.5] - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420490] - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420490] - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420490] - Resolves: bz#1420490 (EMBA…

  • High
    ELSA-2017-0386 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.10.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.10.2] - [net] dccp: fix…

  • High
    ELSA-2017-3521 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.4] - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) {CVE-2017-6074}

  • High
    ELSA-2017-3520 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.28] - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) [Orabug: 25598257] {CVE-2017-6074}

  • High
    ELSA-2017-0294 1 CVE

    Important: kernel security update (Oracle Linux 7)

    - [3.10.0-514.6.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.6.2] - [net] dccp: fix f…

  • High
    ELSA-2017-3515 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.3] - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu) [Orabug: 25417805] {CVE-2016-8646} - USB: usbfs: fix potential infoleak in devio (Kangjie Lu) [Orabug: 25462760] {CVE-2016-4482} - net: fix infoleak i…

  • High
    ELSA-2017-3514 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.27] - vfio/pci: Fix integer overflows, bitmask check (Vlad Tsyrklevich) [Orabug: 25164094] {CVE-2016-9083} {CVE-2016-9084} - Don't feed anything but regular iovec's to blk_rq_map_user_iov (Linus Torvalds) [Orabug: 25231931] {CVE-2016-9…

  • High
    ELSA-2017-0238 8 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [45.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.7.0-1] - Update to 45.7.0

  • High
    ELSA-2017-0086 3 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.6.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.6.1] - [net] sctp: valid…

  • High
    ELSA-2017-0062 3 CVEs

    Important: bind security update (Oracle Linux 7)

    [32:9.9.4-38.1] - Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)

  • High max 6.4
    ELSA-2017-3511 1 CVE

    Important: docker-engine docker-engine-selinux security and bugfix update (Oracle Linux 7)

    [1.12.6-1.0.1] - Enable configuration of Docker daemon via sysconfig [orabug 21804877] - Require UEK4 for docker 1.9 [orabug 22235639 22235645] - Add docker.conf for prelink [orabug 25147708] [1.12.6] - the systemd unit file (/usr/lib/systemd/system/docker.se…

  • High
    ELSA-2017-0061 5 CVEs

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.41-1.13.13.1.0.1] - Add oracle-enterprise.patch [1:1.6.0.41-1.13.13.1] - Update to new 1.13.13 and b41 tarballs to correct TCK failure. - Resolves: rhbz#1381990 [1:1.6.0.41-1.13.13.0] - Remove --htmldir option which is not supported by older autotool…

  • High
    ELSA-2017-3508 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.25] - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells) [Orabug: 25306361] {CVE-2016-7042} - nvme: Limit command retries (Keith Busch) [Orabug: 25374751] - fs/proc/task_mmu.c: fix mm_access() mode parameter in …

  • High
    ELSA-2017-3509 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.2] - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet) [Orabug: 25203623] {CVE-2016-9793} [3.8.13-118.16.1] - nvme: Limit command retries (Ashok Vairavan) [Orabug: 25374794] - tcp: fix use after free in tcp_xmit_ret…

  • High
    ELSA-2016-3655 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.23] - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298601] {CVE-2016-7117}

  • High
    ELSA-2016-3656 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.15.2] - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski) [Orabug: 25269176] {CVE-2016-3157} {CVE-2016-3157} - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298611] {CVE-2016…