Oracle Linux Security Advisories (ELSA)

5,096 results · Clear filters · Feed

• High
  ELSA-2014-1031 1 CVE

  Important: 389-ds-base security update (Oracle Linux 7)

  [1.2.11.15-34] - Release 1.2.11.15-34 - Resolves: #1123861 EMBARGOED CVE-2014-3562 unauthenticated information disclosure [rhel-6.5.z] (DS 616, BZ 1123477)

  Aug 7, 2014
• High
  ELSA-2014-1023 6 CVEs

  Important: kernel security and bug fix update (Oracle Linux 7)

  [3.10.0-123.6.3] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.6.3] - [net] l2tp_ppp: fail when socket option level is not SOL_PPPOL2TP (Petr Matousek) [1119465 1119466] {CVE-2014-4943} [3.10.0-123.6.2.el7] - [s390] ptrace: correct insufficient sa…

  Aug 6, 2014
• High
  ELSA-2014-1008 1 CVE

  Important: samba security and bug fix update (Oracle Linux 7)

  [4.1.1-37] - resolves: #1126013 - CVE-2014-3560: remote code execution in nmbd. [4.1.1-36] - resolves: #1115490 - Fix potential Samba file corruption.

  Aug 5, 2014
• High
  ELSA-2014-3052 3 CVEs

  Important: unbreakable enterprise kernel security update (Oracle Linux 7)

  kernel-uek [3.8.13-35.3.3.el7uek] - filter: prevent nla extensions to peek beyond the end of the message (Mathias Krause) [Orabug: 19315781] {CVE-2014-3144} {CVE-2014-3145} - mac80211: fix AP powersave TX vs. wakeup race (Emmanuel Grumbach) [Orabug: 19316457]…

  Jul 29, 2014
• High
  ELSA-2014-0921 5 CVEs

  Important: httpd security update (Oracle Linux 7)

  [2.4.6-18.0.1.el7_0] - replace index.html with Oracle's index page oracle_index.html [2.4.6-18] - mod_cgid: add security fix for CVE-2014-0231 (#1120607) - mod_proxy: add security fix for CVE-2014-0117 (#1120607) - mod_deflate: add security fix for CVE-2014-0…

  Jul 23, 2014
• High
  ELSA-2014-0923 2 CVEs

  Important: kernel security update (Oracle Linux 7)

  [3.10.0-123.4.4] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.4.4] - [net] l2tp_ppp: fail when socket option level is not SOL_PPPOL2TP (Petr Matousek) [1119465 1119466] {CVE-2014-4943} [3.10.0-123.4.3] - [x86] ptrace: force IRET path after a ptra…

  Jul 23, 2014
• High
  ELSA-2014-3049 3 CVEs

  Important: unbreakable enterprise kernel security update (Oracle Linux 7)

  kernel-uek [3.8.13-35.3.2.el7uek] - l2tp: fix an unprivileged user to kernel privilege escalation (Sasha Levin) [Orabug: 19229497] {CVE-2014-4943} {CVE-2014-4943} - ptrace,x86: force IRET path after a ptrace_stop() (Tejun Heo) [Orabug: 19230689] {CVE-2014-469…

  Jul 23, 2014
• High max 7.8
  ELSA-2014-0786 8 CVEs 1 exploited

  Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

  [3.10.0-123.4.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.4.2] - [fs] aio: fix plug memory disclosure and fix reqs_active accounting backport (Jeff Moyer) [1094604 1094605] {CVE-2014-0206} - [fs] aio: plug memory disclosure and fix reqs_activ…

  Jul 23, 2014
• High
  ELSA-2014-0679 6 CVEs

  Important: openssl security update (Oracle Linux 7)

  [1.0.1e-34.3] - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible NULL pointer dereference - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet - fix CV…

  Jul 23, 2014
• High
  ELSA-2014-0684 2 CVEs

  Important: gnutls security update (Oracle Linux 7)

  [3.1.18-9] - fix session ID length check (#1102027) - fixes null pointer dereference (#1101727)

  Jul 23, 2014
• High
  ELSA-2014-0680 1 CVE

  Important: openssl098e security update (Oracle Linux 7)

  [0.9.8e-29.2] - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability

  Jul 23, 2014
• High
  ELSA-2014-0907 10 CVEs

  Important: java-1.6.0-openjdk security and bug fix update (Oracle Linux 7)

  [1:1.6.0.1-6.1.13.4] - moved to icedteaver 1.13.4 - moved to openjdkver b32 and openjdkdate 15_jul_2014 - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch - Resolves: rhbz#1115580 - Resolves: rhbz#1115867

  Jul 21, 2014
• High max 5.5
  ELSA-2014-0678 1 CVE 1 exploited

  Important: kernel security update (Oracle Linux 7)

  [3.10.0-123.1.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.1.2] - [tty] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094241 1094242] {CVE-2014-0196}

  Jul 20, 2014
• High
  ELSA-2014-0685 19 CVEs

  Important: java-1.6.0-openjdk security update (Oracle Linux 7)

  [1:1.6.0.1-6.1.13.3] - updated to icedtea 1.13.3 - updated to openjdk-6-src-b31-15_apr_2014 - renmoved upstreamed patch7, 1.13_fixes.patch - renmoved upstreamed patch9, 1051245.patch - Resolves: rhbz#1099563

  Jul 20, 2014
• High
  ELSA-2014-0686 3 CVEs

  Important: tomcat security update (Oracle Linux 7)

  [0:7.0.42-5] - Related: CVE-2013-4286 - Related: CVE-2013-4322 - Related: CVE-2014-0050 - revisit patches for above.

  Jul 20, 2014
• High max 7.5
  ELSA-2023-12012 1 CVE

  Important: istio security update (Oracle Linux 7)

  istio [1.15.3-1] - Added Oracle specific files for 1.15.3-1 olcne [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-39278

  Jan 11, 2012