Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

5,096 results · Clear filters · Feed

  • High max 8.8
    ELSA-2015-1581 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [38.1.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.1.1-1] - Update to 38.1.1 ESR

  • High max 9.8
    ELSA-2015-1526 14 CVEs 1 exploited

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.36-1.13.8.1] - Update tarball to fix TCK regression (PR2565) - Resolves: rhbz#1235153 [1:1.6.0.36-1.13.8.0] - Update to IcedTea 1.13.8 - Update no_pr2125.patch to work against new version. - Resolves: rhbz#1235153

  • High
    ELSA-2015-3065 2 CVEs

    Important: lxc security update (Oracle Linux 7)

    [1.0.7-2.0.7] - [Orabug 21533491] CVE-2015-1334: Don't use the container's /proc during attach [1.0.7-2.0.6] - [Orabug 21526922] CVE-2015-1331: LXCLOCK: USE /RUN/LXC/LOCK RATHER THAN /RUN/LOCK/LXC

  • High
    ELSA-2015-3064 1 CVE

    Important: Unbreakable Enterprise kernel security , bug fix and enhancement update (Oracle Linux 7)

    kernel-uek [3.8.13-98] - KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502729] {CVE-2015-0239} {CVE-2015-0239} - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502159] {CVE-2015-3339} [3.8.13-97] - add…

  • High max 7.5
    ELSA-2015-1513 1 CVE 1 exploited

    Important: bind security update (Oracle Linux 7)

    [32:9.8.2-0.37.rc1.2] - Fix CVE-2015-5477

  • High
    ELSA-2015-1507 2 CVEs

    Important: qemu-kvm security and bug fix update (Oracle Linux 7)

    [1.5.3-86.el7_1.5] - kvm-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch [bz#1243726] - Resolves: bz#1243726 (CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pit_ioport_read function [rhel-7.1.z]) [1.5.3-86.el7_1.4] - kvm-ide-Ch…

  • High max 7.4
    ELSA-2015-1483 2 CVEs 1 exploited

    Important: libuser security update (Oracle Linux 7)

    [0.60-7] - Update CVE-2015-3246 patch based on review comments Resolves: #1235519 [0.60-6] - Fix CVE-2015-3246 Resolves: #1235519

  • High
    ELSA-2015-1443 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.9.4-18.2] - Fix CVE-2015-4620

  • High
    ELSA-2015-1455 11 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [31.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [31.8.0-1] - Update to 31.8.0

  • High max 9.8
    ELSA-2015-1228 16 CVEs 1 exploited

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.51-1.b16] - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz#1235162 [1:1.8.0.51-0.b16] - July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - …

  • High
    ELSA-2015-3045 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.3.3] - x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Andy Lutomirski) [Orabug: 21308309] {CVE-2015-2830} - x86, mm/ASLR: Fix stack randomization on 64-bit systems (Hector Marco-Gisbert) [Orabug: 21307919] {CVE-2015-1593}…

  • High
    ELSA-2015-1135 31 CVEs

    Important: php security and bug fix update (Oracle Linux 7)

    [5.4.16-36] - fix more functions accept paths with NUL character #1213407 [5.4.16-35] - core: fix multipart/form-data request can use excessive amount of CPU usage CVE-2015-4024 - fix various functions accept paths with NUL character CVE-2015-4025, CVE-2015-4…

  • High
    ELSA-2015-1137 7 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-229.7.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.7.2] - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202861 1198843] {CVE-2015-1805} [3.10.0-229.7.1] - [scsi] storvsc: get rid of overly verbose w…

  • High
    ELSA-2015-1123 3 CVEs

    Important: cups security update (Oracle Linux 7)

    [1:1.4.2-67.1] - CVE-2015-1158, CVE-2015-1159, CVE-2014-9679 (bug #1229982).

  • High
    ELSA-2015-1090 2 CVEs

    Important: wpa_supplicant security and enhancement update (Oracle Linux 7)

    [1:2.0-17] - AP WMM: Fix integer underflow in WMM Action frame parser (rh #1221178) (rh #1222015) [1:2.0-16] - P2P: Validate SSID element length before copying it (CVE-2015-1863) [1:2.0-15] - Add domain_match config option from upstream (rh #1178263) - Includ…

  • High
    ELSA-2015-3041 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.3.2] - x86_64, vdso: Fix the vdso address randomization algorithm (Andy Lutomirski) [Orabug: 21226729] {CVE-2014-9585} - isofs: Fix infinite looping over CE entries (Jan Kara) [Orabug: 21225975] {CVE-2014-9420} - x86_64, switch_to(): Loa…

  • High
    ELSA-2015-1083 8 CVEs

    Important: abrt security update (Oracle Linux 7)

    abrt [2.1.11-22.0.1] - Drop libreport-rhel and libreport-plugin-rhtsupport requires [2.1.11-22] - do not open the build_ids file as the user abrt - do not unlink failed and big user core files - Related: #1212819, #1216973 [2.1.11-21] - validate all D-Bus met…

  • High max 8.4
    ELSA-2015-3037 3 CVEs

    Important: docker security update (Oracle Linux 7)

    [1.6.1-1.0.1] - Update source to 1.6.1 from https://github.com/docker/docker/releases/tag/v1.6.1 Symlink traversal on container respawn allows local privilege escalation (CVE-2015-3629) Insecure opening of file-descriptor 1 leading to privilege escalation (CV…

  • High
    ELSA-2015-1012 4 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [31.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [31.7.0-1] - Update to 31.7.0

  • High
    ELSA-2015-0999 1 CVE

    Important: qemu-kvm security update (Oracle Linux 7)

    [1.5.3-86.el7_1.2] - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219269] - Resolves: bz#1219269 (EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-7.1.z])

  • High
    ELSA-2015-3035 2 CVEs

    Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)

    kernel-uek [3.8.13-68.2.2] - crypto: aesni - fix memory usage in GCM decryption (Stephan Mueller) [Orabug: 21077385] {CVE-2015-3331} [3.8.13-68.2.1] - xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (Konrad Rzeszutek Wilk) [Orabug: 20807438] {CVE-…

  • High
    ELSA-2015-0987 1 CVE

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-229.4.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.4.2] - [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213331 1212178] {CVE-2015-3331} [3.10.0-229.4.1] - [crypto] x86: sha256_ssse3 - also test for BMI2 (He…

  • High
    ELSA-2015-0895 1 CVE

    Important: 389-ds-base security update (Oracle Linux 7)

    [1.3.3.1-16] - release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn

  • High
    ELSA-2015-3032 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.1.3] - isofs: Fix unchecked printing of ER records (Jan Kara) [Orabug: 20930551] {CVE-2014-9584} - KEYS: close race between key lookup and freeing (Sasha Levin) [Orabug: 20930548] {CVE-2014-9529} {CVE-2014-9529} - mm: memcg: do not allow…

  • High
    ELSA-2015-0808 7 CVEs

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.35-1.13.7.1] - Repackaged source files - Resolves: rhbz#1209067 [1:1.6.0.35-1.13.7.0] - Update to IcedTea 1.13.7 - Regenerate add-final-location-rpaths patch so as to be less disruptive. - Resolves: rhbz#1209067

  • High
    ELSA-2015-0809 8 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.45-30.b13] - repacked sources - Resolves: RHBZ#1209076 [1:1.8.0.45-7.b13] - Re-add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions. - Remove ppc64le test case now fix has been verified. - Resolves: rhbz#1194378 [1:1.8.0.45-27.b13…

  • High
    ELSA-2015-0771 5 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [31.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [31.6.0-1] - Update to 31.6.0

  • High
    ELSA-2015-3019 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.1.2] - IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel) [Orabug: 20799875] {CVE-2014-8159} {CVE-2014-8159} [3.8.13-68.1.1] - xen-pciback: limit guest control of command register (Jan Beulich) [Orabug:…

  • High
    ELSA-2015-0767 2 CVEs

    Important: flac security update (Oracle Linux 7)

    [1.3.0-5] - fix buffer overflow when processing ID3v2 metadata (CVE-2014-8962) - fix buffer overflow with invalid blocksize (CVE-2014-9028)

  • High
    ELSA-2015-0729 1 CVE

    Important: setroubleshoot security update (Oracle Linux 7)

    [3.2.17-4.1.0.1] - Add setroubleshoot-oracle-enterprise.patch to change bug reporting URL to linux.oracle.com [3.2.17-4.1] - Fix get_rpm_nvr_*_temporary functions Resolves:#1203352

  • High
    ELSA-2015-0726 2 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-229.1.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.1.2] - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181177 1179347] {CVE-2014-8159} [3.10.0-229.1.1] - [crypto] testmgr: mark rfc4106(…

  • High
    ELSA-2015-3012 6 CVEs

    Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)

    kernel-uek [3.8.13-68] - ttusb-dec: buffer overflow in ioctl (Dan Carpenter) [Orabug: 20673373] {CVE-2014-8884} - mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support (Kirill A. Shutemov) [Orabug: 20673279] {CVE-2014-8173} - netfilter: conntrack…

  • High
    ELSA-2015-0696 13 CVEs

    Important: freetype security update (Oracle Linux 7)

    [2.3.11-15.el6_6.1] - Fixes CVE-2014-9657 - Check minimum size of record_size. - Fixes CVE-2014-9658 - Use correct value for minimum table length test. - Fixes CVE-2014-9675 - New macro that checks one character more than strncmp. - Fixes CVE-2014-9660 - Chec…

  • High
    ELSA-2015-3013 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-55.1.8] - kvm: fix excessive pages un-pinning in kvm_iommu_map error path. (Quentin Casasnovas) [Orabug: 20687313] {CVE-2014-3601} {CVE-2014-8369} {CVE-2014-3601} [3.8.13-55.1.7] - ttusb-dec: buffer overflow in ioctl (Dan Carpenter) [Orabug…

  • High
    ELSA-2015-0642 4 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [31.5.0-2] - Update to 31.5.0

  • High
    ELSA-2015-0349 4 CVEs

    Important: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)

    [1.5.3-86.el7] - kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942] - kvm-cirrus-fix-blit-region-check.patch [bz#1169456] - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456] - Resolves: bz#1169456 (CVE-2014-8106 qemu-kvm: qemu: ci…

  • High
    ELSA-2015-0290 11 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-229] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229] - [net] rtnetlink: allow to register ops without ops->setup set (Jiri Benc) [1186492] [3.10.0-228] - [fs] NFSv4.1: Fix an Oops in nfs41_walk_client_list (Steve Dickson) [1185784] - [misc]…

  • High
    ELSA-2015-0416 2 CVEs

    Important: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 7)

    [1.3.3.1-13] - release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988) [1.3.3.1-12] - release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade scri…

  • High
    ELSA-2015-0252 1 CVE

    Important: samba security update (Oracle Linux 7)

    [4.1.1-38] - resolves: #1194132 - CVE-2015-0240: RCE in netlogon server.

  • High
    ELSA-2015-3003 2 CVEs

    Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)

    kernel-uek [3.8.13-55.1.5] - [CIFS] Possible null ptr deref in SMB2_tcon (Steve French) [Orabug: 20433140] {CVE-2014-7145} [3.8.13-55.1.4] - net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [Orabug: 20425332…