Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,730 results · Clear filters · Feed

Medium

ELSA-2018-3073 8 CVEs

Moderate: zsh security and bug fix update (Oracle Linux 7)

[5.0.2-31] - fix defects detected by Coverity related to CVE-2017-18206 and CVE-2018-1083 [5.0.2-30] - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100) - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083) - fix st…

Nov 5, 2018
Medium

ELSA-2018-3090 1 CVE

Moderate: ovmf security, bug fix, and enhancement update (Oracle Linux 7)

[20180508-3.gitee3198e672e2.el7] - ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch [bz#1607792] - Resolves: bz#1607792 (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file) [20180508-2.gitee3198e672e2] - OvmfPkg/PlatformBootManagerLib: connec…

Nov 5, 2018
Medium

ELSA-2018-3140 6 CVEs

Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 7)

PackageKit [1.1.10-1.0.1] - remove PackageKit-0.3.8-Fedora-Vendor.conf.patch [1.1.10-1] - New upstream release - Resolves: #1576494 accountsservice [0.6.50-2] - Fix user switching Resolves: #1597350 [0.6.50-1] - Update to 0.6.50 Related: #1576538 Related: 159…

Nov 5, 2018
Medium

ELSA-2018-2835 2 CVEs

Moderate: firefox security update (Oracle Linux 7)

[60.2.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.2.1-1] - Update to 60.2.1 ESR

Sep 27, 2018
Medium

ELSA-2018-2768 1 CVE

Moderate: nss security update (Oracle Linux 7)

[3.36.0-7] - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which turned out to be a mistake (the symbol was not exported from libnss) [3.36.0-6] - Exercise SSL tests which only run under non-FIPS setting

Sep 25, 2018
Medium max 7.5

ELSA-2018-2757 4 CVEs

Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

[1.3.7.5-28] - Bump version to 1.3.7.5-28 - Resolves: Bug 1628676 - 389-ds-base: race condition on reference counter leads to DoS using persistent search - Resolves: Bug 1628677 - Crash in delete_passwdPolicy when persistent search connections are terminated …

Sep 25, 2018
Medium

ELSA-2018-2766 1 CVE

Moderate: flatpak security update (Oracle Linux 7)

[0.8.8-4] - Add patch for CVE-2018-6560 (#1547376)

Sep 25, 2018
Medium

ELSA-2018-2439 21 CVEs

Moderate: mariadb security and bug fix update (Oracle Linux 7)

[1:5.5.60-1] - Rebase to 5.5.60 - CVE's fixed: #1558256, #1558260, #1559060 CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379 CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668 CVE-2018-27…

Aug 16, 2018
Medium

ELSA-2018-2286 1 CVE

Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)

[1:1.7.0.191-2.6.15.4.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.191-2.6.15.4] - Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix - Resolves: rhbz#1594249 [1:1.7.0.191-2.6.15.3] - Bump to revised 2.6.15 tarball with jdk7u191-b01 - Resol…

Jul 30, 2018
Medium

ELSA-2018-2242 1 CVE

Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)

[1:1.8.0.181-7.b13] - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13. - Remove 8187577/PR3578 now applied upstream. - Resolves: rhbz#1594249 [1:1.8.0.181-3.b04] - Fix hook to show hs_err*.log files on failures. - Resolves: rhbz#1594249 [1:…

Jul 23, 2018
Medium max 7.5

ELSA-2018-2123 1 CVE

Moderate: python security update (Oracle Linux 7)

[2.7.5-69.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-70] - Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32). Resolves: rhbz#1584545

Jul 3, 2018
Medium max 7.5

ELSA-2018-1979 1 CVE

Moderate: pki-core security, bug fix, and enhancement update (Oracle Linux 7)

[10.5.1-13.1] - Rebuild due to build system database problem [10.5.1-13] - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #15…

Jun 27, 2018
Medium

ELSA-2018-1852 1 CVE

Moderate: kernel security update (Oracle Linux 7)

[3.10.0-862.3.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.3.3] - [x86] always enable…

Jun 14, 2018
Medium

ELSA-2018-1416 1 CVE

Moderate: qemu-kvm security update (Oracle Linux 7)

[1.5.3-156.el7_5.1] - kvm-vga-add-ram_addr_t-cast.patch [bz#1567913] - kvm-vga-fix-region-calculation.patch [bz#1567913] - Resolves: bz#1567913 (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])

May 14, 2018
Medium

ELSA-2018-1224 1 CVE

Moderate: PackageKit security update (Oracle Linux 7)

[1.1.5-2.0.1] - remove PackageKit-0.3.8-Fedora-Vendor.conf.patch [1.1.5-2] - Fixes CVE-2018-1106 - Resolves: rhbz#1566425

Apr 24, 2018
Medium

ELSA-2018-1055 1 CVE

Moderate: libvncserver security update (Oracle Linux 7)

[0.9.9-12] - Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)

Apr 17, 2018
Medium

ELSA-2018-0855 3 CVEs

Moderate: ntp security, bug fix, and enhancement update (Oracle Linux 7)

[4.2.6p5-28.0.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-28] - fix buffer overflow in datum refclock driver (CVE-2017-6462) - fix crash with invalid unpeer command (CVE-2017-6463) - fix potential crash with invalid server co…

Apr 16, 2018
Medium

ELSA-2018-0805 6 CVEs

Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 7)

[2.17-222] - Restore internal GLIBC_PRIVATE symbols for use during upgrades (#1523119) [2.17-221] - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635) - i386: Fix unwinding for 32-bit C++ application (#1529982) - Reduce thread and dynamic loader sta…

Apr 16, 2018
Medium max 6.5

ELSA-2018-0666 2 CVEs

Moderate: krb5 security, bug fix, and enhancement update (Oracle Linux 7)

[1.15.1-18] - Expose context errors in pkinit_server_plugin_init - Resolves: #1460089 [1.15.1-17] - Drop certauth test changes that prevented runnig it - Resolves: #1498767 [1.15.1-16] - Drop irrelevant DIR trigger logic - Resolves: #1431198 [1.15.1-15] - Fix…

Apr 16, 2018
Medium

ELSA-2018-0998 3 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 7)

[1.0.2k-12.0.1] - sha256 is used for the RSA pairwise consistency test instead of sha1 [1.0.2k-12] - fix CVE-2017-3737 - incorrect handling of fatal error state - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus [1.0.2k-11] - fix d…

Apr 16, 2018
Medium

ELSA-2018-0505 1 CVE

Moderate: mailman security update (Oracle Linux 7)

[3:2.1.15-26.1] - Related: #1545974 - Add import regular expression module [3:2.1.15-26] - Related: #1545974 - Bump release to make it higher than 7.5 [3:2.1.15-24.2] - Resolves: #1545974 - Add sanitizer to mitigate XSS injection [3:2.1.15-24.1] - Resolves: #…

Mar 13, 2018
Medium

ELSA-2018-0406 1 CVE

Moderate: php security update (Oracle Linux 7)

[5.4.16-43.1] - gd: fix buffer over-read into uninitialized memory CVE-2017-7890

Mar 7, 2018
Medium

ELSA-2018-0418 1 CVE

Moderate: libreoffice security update (Oracle Linux 7)

[1:5.0.6.2-15.0.1] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.0.6.2-15] - Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871 [1:5.0.6.2-14] - Re…

Mar 7, 2018
Medium

ELSA-2018-0260 1 CVE

Moderate: systemd security update (Oracle Linux 7)

[219-42.0.2.7] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 1846746…

Jan 31, 2018
Medium max 5.3

ELSA-2018-0158 1 CVE

Moderate: dhcp security update (Oracle Linux 7)

[12:4.2.5-58.0.1.1] - Added oracle-errwarn-message.patch [12:4.2.5-58.1] - Resolves: #1523475 - Fix omapi socket descriptors leak

Jan 25, 2018
Medium

ELSA-2018-0223 1 CVE

Moderate: nautilus security update (Oracle Linux 7)

[3.22.3-4] - Fix desktop files security issue (upstream bugzilla.gnome.org/777991) Resolves: #1490949

Jan 25, 2018
Medium max 6.5

ELSA-2017-3402 2 CVEs

Moderate: postgresql security update (Oracle Linux 7)

[9.2.23-3] - setup: keep PGSETUP_* variables after switching to not-privileged user [9.2.23-2] - fix CVE-2017-12172

Dec 7, 2017
Medium max 7.8

ELSA-2017-3384 1 CVE

Moderate: liblouis security update (Oracle Linux 7)

[2.5.2-12] - Resolves: CVE-2017-15101

Dec 5, 2017
Medium max 4.3

ELSA-2017-3379 1 CVE

Moderate: sssd security and bug fix update (Oracle Linux 7)

[1.15.2-50.8] - Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id mapping is applied [rhel-7.4.z] - Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain list and a request that is using the list can cause a segfault is …

Dec 4, 2017
Medium

ELSA-2017-3368 2 CVEs

Moderate: qemu-kvm security update (Oracle Linux 7)

[1.5.3-141.el7_4.4] - kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120] - Resolves: bz#1501120 (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z]) [1.5.3-141.el7_4.3] - kvm-bswap.h-Remove…

Nov 30, 2017
Medium max 9.1

ELSA-2017-3263 1 CVE

Moderate: curl security update (Oracle Linux 7)

[7.29.0-42.el7_4.1] - fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)

Nov 27, 2017
Medium

ELSA-2017-3221 2 CVEs

Moderate: php security update (Oracle Linux 7)

[5.4.16-43] - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167 - gd: Signed Integer Overflow gd_io.c CVE-2016-10168

Nov 15, 2017
Medium max 7.8

ELSA-2017-3111 7 CVEs

Moderate: liblouis security update (Oracle Linux 7)

[2.5.2-11] - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741, CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184

Nov 2, 2017
Medium

ELSA-2017-2882 1 CVE

Moderate: httpd security update (Oracle Linux 7)

[2.4.6-67.0.1.el7_4.5] - replace index.html with Oracle's index page oracle_index.html [2.4.6-67.5] - Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method

Oct 11, 2017
Medium

ELSA-2017-3629 1 CVE

Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

[4.1.12-103.7.3] - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen) [Orabug: 26943541] {CVE-2017-7541} [4.1.12-103.7.2] - rebuild bumping release

Oct 10, 2017
Medium max 7.4

ELSA-2017-2790 3 CVEs

Moderate: samba security update (Oracle Linux 7)

[4.6.2-11] - resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163

Sep 26, 2017
Medium

ELSA-2017-2728 2 CVEs

Moderate: postgresql security update (Oracle Linux 7)

[9.2.23-1] - update to 9.2.23 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-23.html [9.2.22-1] - update to 9.2.22 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-22.html

Sep 14, 2017
Medium

ELSA-2017-2685 1 CVE

Moderate: bluez security update (Oracle Linux 7)

[4.66-2] - sdpd heap fixes Resolves: #1490008

Sep 13, 2017
Medium

ELSA-2017-2569 1 CVE

Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

[1.3.6.19-1] - Bump version to 1.3.6.19-1 - Remove old mozldap and db4 requirements - Resolves: Bug 1483865 - Crash while binding to a server during replication online init [1.3.6.1-18] - Bump version to 1.3.6.1-18 - Require srvcore 4.1.3 - Resolves: Bug 1479…

Sep 5, 2017
Medium

ELSA-2017-2551 2 CVEs

Moderate: poppler security update (Oracle Linux 7)

[0.26.5-17] - Resolves: rhbz#1482934 CVE-2017-9776

Aug 30, 2017