Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

2,730 results · Clear filters · Feed

Medium max 3.7

ELSA-2015-1072 1 CVE

Moderate: openssl security update (Oracle Linux 7)

[1.0.1e-30.9] - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits (limit will be increased in future)

Jun 4, 2015
Medium

ELSA-2015-0983 1 CVE

Moderate: tomcat security update (Oracle Linux 7)

[0:7.0.54-2] - Resovles: CVE-2014-0227

May 12, 2015
Medium

ELSA-2015-0986 1 CVE

Moderate: kexec-tools security, bug fix, and enhancement update (Oracle Linux 7)

[2.0.7-19.0.1.el7_1.2] - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999] - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671] [2.0.7-19.2] - dracut-…

May 12, 2015
Medium

ELSA-2015-0797 1 CVE

Moderate: xorg-x11-server security update (Oracle Linux 7)

[1.15.0-26] - CVE fixes for: CVE-2015-0255

Apr 9, 2015
Medium

ELSA-2015-0749 1 CVE

Moderate: libxml2 security update (Oracle Linux 7)

[2.9.1-5.0.1.el7_1.2] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.1-5.2] - Fix missing entities after CVE-2014-3660 fix - CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195649) - Fix…

Mar 30, 2015
Medium

ELSA-2015-0750 4 CVEs

Moderate: postgresql security update (Oracle Linux 7)

[8.4.20-2] - fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161 (rhbz#1198651 & rhbz#1198652)

Mar 30, 2015
Medium

ELSA-2015-0728 2 CVEs

Moderate: ipa and slapi-nis security and bug fix update (Oracle Linux 7)

ipa [4.1.0-18.0.1.el7_1.3] - Replace login-screen-logo.png [20362818] - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png [4.1.0-18.3] - [ipa-python] ipalib.errors.LDAPErro…

Mar 26, 2015
Medium

ELSA-2015-0716 7 CVEs

Moderate: openssl security and bug fix update (Oracle Linux 7)

[1.0.1e-42.4] - update fix for CVE-2015-0287 to what was released upstream [1.0.1e-42.3] - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey() - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison - fix CVE-2015-0287 - ASN.1 struc…

Mar 23, 2015
Medium

ELSA-2015-0700 4 CVEs

Moderate: unzip security update (Oracle Linux 7)

[6.0-2] - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Resolves: #1196132 #1196120 #1196124 #1196128

Mar 18, 2015
Medium

ELSA-2015-0672 1 CVE

Moderate: bind security update (Oracle Linux 7)

[32:9.9.4-18.1] - Fix CVE-2015-1349

Mar 12, 2015
Medium

ELSA-2015-0439 10 CVEs

Moderate: krb5 security, bug fix and enhancement update (Oracle Linux 7)

[1.12.2-14] - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, 'Do not loop on principal unknown errors'). [1.12.2-13] - fix for CVE-2014-5352 (#1179856) 'gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001)' - fix for CVE-2014-942…

Mar 11, 2015
Medium

ELSA-2015-0377 3 CVEs

Moderate: libreoffice security, bug fix, and enhancement update (Oracle Linux 7)

libabw [0.0.2-1] - new upstream release 0.0.2 - generate man pages for the tools [0.0.1-1] - new upstream release libcmis [0.4.1-5] - Related: rhbz#1132065 coverity: fix mismatching exceptions [0.4.1-4] - a few use-after-free fixes for the C wrapper [0.4.1-3]…

Mar 11, 2015
Medium max 6.1

ELSA-2015-0442 2 CVEs

Moderate: ipa security, bug fix, and enhancement update (Oracle Linux 7)

[4.1.0-18.0.1] - Replace login-screen-logo.png [20362818] - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png [4.1.0-18] - Fix ipa-pwd-extop global configuration caching (#…

Mar 11, 2015
Medium

ELSA-2015-0301 1 CVE

Moderate: hivex security, bug fix, and enhancement update (Oracle Linux 7)

[1.3.10-5.7] - Fix: 'Argument list too long' when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 [1.3.10-5.6] - Fix: typo in man page resolves: rhbz#1099286 [1.3.10-5.4] - Fix: hivex missing checks for small/truncat…

Mar 9, 2015
Medium

ELSA-2015-0327 2 CVEs

Moderate: glibc security and bug fix update (Oracle Linux 7)

[2.17-78.0.1] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. [2.17-78] - Fix ppc64le builds (#1077389). [2.17-77] -…

Mar 9, 2015
Medium max 6.5

ELSA-2015-0425 2 CVEs

Moderate: openssh security, bug fix and enhancement update (Oracle Linux 7)

[6.6.1p1-11 + 0.9.3-9] - fix direction in CRYPTO_SESSION audit message (#1171248) [6.6.1p1-10 + 0.9.3-9] - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278 (#1169843) [6.6.1p1-9 + 0.9.3-9] - log via monitor in chroots w…

Mar 9, 2015
Medium

ELSA-2015-0166 3 CVEs

Moderate: subversion security update (Oracle Linux 7)

[1.7.14-7] - add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108

Feb 10, 2015
Medium

ELSA-2015-0118 7 CVEs

Moderate: mariadb security update (Oracle Linux 7)

[1:5.5.41-2] - Include new certificate for tests Resolves: #1186109 [1:5.5.41-1] - Rebase to 5.5.41 Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432 Resolves: #1186109 [1:5.5.40-2] - Fix header to let…

Feb 3, 2015
Medium

ELSA-2015-0100 1 CVE

Moderate: libyaml security update (Oracle Linux 7)

[0.1.3-4] - Add patch for CVE-2014-9130 (RHBZ#1169369)

Jan 28, 2015
Medium

ELSA-2015-0066 7 CVEs

Moderate: openssl security update (Oracle Linux 7)

[1.0.1e-34.7] - fix CVE-2014-3570 - incorrect computation in BN_sqr() - fix CVE-2014-3571 - possible crash in dtls1_get_record() - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state - fix CVE-2014-8275 - various certificate fingerprin…

Jan 20, 2015
Medium

ELSA-2014-2023 1 CVE

Moderate: glibc security and bug fix update (Oracle Linux 7)

[2.17-55.0.4.el7_0.3] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.3] - Fix wordexp()…

Dec 18, 2014
Medium

ELSA-2014-1999 2 CVEs

Moderate: mailx security update (Oracle Linux 7)

[12.4-8] - CVE-2004-2771 mailx: command execution flaw resolves: #1171175

Dec 16, 2014
Medium

ELSA-2014-1956 1 CVE

Moderate: wpa_supplicant security update (Oracle Linux 7)

[1:2.0-13] - Use os_exec() for action script execution (CVE-2014-3686)

Dec 3, 2014
Medium

ELSA-2014-1912 3 CVEs

Moderate: ruby security update (Oracle Linux 7)

[2.0.0.353-22] - Fix REXML billion laughs attack via parameter entity expansion (CVE-2014-8080). Resolves: rhbz#1163998 - REXML incomplete fix for CVE-2014-8080 (CVE-2014-8090). Resolves: rhbz#1163998 [2.0.0.353-21] - Fix off-by-one stack-based buffer overflo…

Nov 26, 2014
Medium

ELSA-2014-1846 1 CVE

Moderate: gnutls security update (Oracle Linux 7)

[3.1.18-10] - Applied fix for CVE-2014-8564 (#1161472)

Nov 12, 2014
Medium

ELSA-2014-1826 5 CVEs

Moderate: libvncserver security update (Oracle Linux 7)

[0.9.7-7.1] - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157668) - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup) (bug #1157668) - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message handling) (bug …

Nov 11, 2014
Medium

ELSA-2014-1827 3 CVEs

Moderate: kdenetwork security update (Oracle Linux 7)

[7:4.10.5-8] - Resolves: CVE-2014-6055

Nov 11, 2014
Medium

ELSA-2014-1801 3 CVEs

Moderate: shim security update (Oracle Linux 7)

shim [0.7-8.0.1] - update Oracle Linux certificates (Alexey Petrenko) - replace securebootca.cer (Alexey Petrenko) [0.7-8] - out-of-bounds memory read flaw in DHCPv6 packet processing Resolves: CVE-2014-3675 - heap-based buffer overflow flaw in IPv6 address p…

Nov 5, 2014
Medium

ELSA-2014-1795 2 CVEs

Moderate: cups-filters security update (Oracle Linux 7)

[1.0.35-15:.1] - Applied upstream patch to fix BrowseAllow parsing issue (CVE-2014-4338, bug #1091568). - Applied upstream patch for cups-browsed DoS via process_browse_data() out-of-bounds read (CVE-2014-4337, bug #1111510).

Nov 3, 2014
Medium

ELSA-2014-1764 1 CVE

Moderate: wget security update (Oracle Linux 7)

[1.14-10.1] - Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156135)

Oct 30, 2014
Medium

ELSA-2014-1676 12 CVEs

Moderate: wireshark security update (Oracle Linux 7)

[1.10.3-12.0.1.el7] - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect [1.10.3-12] - security patches - Related: #1148266 [1.10.3-11] - security patches - Resolves: CVE-2014-6421 CVE-2014-6423 CVE-2014-6424 CVE-2014-6425 CVE-2014-6426…

Oct 21, 2014
Medium

ELSA-2014-1655 1 CVE

Moderate: libxml2 security update (Oracle Linux 7)

[2.9.1-5.0.1.el7_0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.1-5.1] - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)

Oct 16, 2014
Medium

ELSA-2014-1352 2 CVEs

Moderate: libvirt security and bug fix update (Oracle Linux 7)

[1.1.1-29.0.1.el7_0.3] - Replace docs/et.png in tarball with blank image [1.1.1-29.el7_0.3] - domain_conf: fix domain deadlock (CVE-2014-3657) [1.1.1-29.el7_0.2] - qemu: split out cpuset.mems setting (rhbz#1135871) - qemu: leave restricting cpuset.mems after …

Oct 1, 2014
Medium max 6.5

ELSA-2014-1327 8 CVEs

Moderate: php security update (Oracle Linux 7)

[5.4.16-23.1] - gd: fix NULL pointer dereference in gdImageCreateFromXpm(). CVE-2014-2497 - gd: fix NUL byte injection in file names. CVE-2014-5120 - fileinfo: fix extensive backtracking in regular expression (incomplete fix for CVE-2013-7345). CVE-2014-3538 …

Sep 30, 2014
Medium

ELSA-2014-1319 1 CVE

Moderate: xerces-j2 security update (Oracle Linux 7)

[2.11.0-17] - Fix XML parsing bug (JAXP, 8017298) - Resolves: CVE-2013-4002

Sep 29, 2014
Medium

ELSA-2014-1292 1 CVE

Moderate: haproxy security update (Oracle Linux 7)

[1.5.2-3] - Fix remote client denial of service vulnerability (#1138191)

Sep 24, 2014
Medium

ELSA-2014-1281 1 CVE

Moderate: kernel security and bug fix update (Oracle Linux 7)

[3.10.0-123.8.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.8.1] - [scsi] fnic: fix broken FIP discovery by initializing multicast address (Chris Leech) [1119727 1100078] - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Chr…

Sep 22, 2014
Medium

ELSA-2014-1052 7 CVEs

Moderate: openssl security update (Oracle Linux 7)

[1.0.1e-34.4] - fix CVE-2014-3505 - doublefree in DTLS packet processing - fix CVE-2014-3506 - avoid memory exhaustion in DTLS - fix CVE-2014-3507 - avoid memory leak in DTLS - fix CVE-2014-3508 - fix OID handling to avoid information leak - fix CVE-2014-3509…

Aug 13, 2014
Medium max 6.5

ELSA-2014-1013 10 CVEs

Moderate: php security update (Oracle Linux 7)

[5.4.16-23] - fileinfo: cdf_unpack_summary_info() excessive looping DoS. CVE-2014-0237 - fileinfo: CDF property info parsing nelements infinite loop. CVE-2014-0238 - fileinfo: cdf_check_stream_offset insufficient boundary check. CVE-2014-3479 - fileinfo: cdf_…

Aug 6, 2014
Medium

ELSA-2014-1011 1 CVE

Moderate: resteasy-base security update (Oracle Linux 7)

[2.3.5-3] - Resolves: rhbz1121917 - CVE-2014-3490: XXE via parameter entities

Aug 5, 2014