Oracle Linux Security Advisories (ELSA)

2,730 results · Clear filters · Feed

• Medium
  ELSA-2014-0703 2 CVEs

  Moderate: json-c security update (Oracle Linux 7)

  [0.11-4] - fix has collision CVE-2013-6371 - fix buffer overflow CVE-2013-6370 - enable upstream test suite

  Jul 23, 2014
• Medium
  ELSA-2014-0867 3 CVEs

  Moderate: samba security update (Oracle Linux 7)

  [4.1.1-35] - resolves: #1105504 - CVE-2014-0244: DoS in nmbd. - resolves: #1108844 - CVE-2014-3493: DoS in smbd with unicode path names. - resolves: #1105573 - CVE-2014-0178: Uninitialized memory exposure. [4.1.1-33] - related: #717484 - Add missing configure…

  Jul 23, 2014
• Medium
  ELSA-2014-0827 3 CVEs

  Moderate: tomcat security update (Oracle Linux 7)

  [0:7.0.42-6] - Resolves: CVE-2014-0099 Fix possible overflow when parsing - long values from byte array - Resolves: CVE-2014-0096 Information discloser process XSLT - files not subject to same constraint running under - java security manager - Resolves: CVE-2…

  Jul 23, 2014
• Medium
  ELSA-2014-0687 3 CVEs

  Moderate: libtasn1 security update (Oracle Linux 7)

  [3.3-5] - Added missing check for null pointer (#1102338) [3.3-4] - Fix multiple decoding issues (#1102338)

  Jul 23, 2014
• Medium
  ELSA-2014-0927 15 CVEs

  Moderate: qemu-kvm security and bug fix update (Oracle Linux 7)

  [1.5.3-60.el7_0.5] - kvm-Allow-mismatched-virtio-config-len.patch [bz#1095782] - Resolves: bz#1095782 (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-7.0.z]) [1.5.3-60.el7_0.4] - kvm-zero-initializ…

  Jul 23, 2014
• Medium
  ELSA-2014-0914 1 CVE

  Moderate: libvirt security and bug fix update (Oracle Linux 7)

  [1.1.1-29.0.1.el7_0.1] - Replace docs/et.png in tarball with blank image [1.1.1-29.el7_0.1] - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179) - virNetClientSetTLSSession: Restore original signal mask (rhbz#1112689) - Don't use AI_ADDRCON…

  Jul 23, 2014
• Medium
  ELSA-2014-0702 8 CVEs

  Moderate: mariadb security update (Oracle Linux 7)

  [1:5.5.37-1] - Rebase to 5.5.37 https://kb.askmonty.org/en/mariadb-5537-changelog/ Also fixes: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432 CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419 Resolves: #1101062

  Jul 23, 2014
• Medium
  ELSA-2014-0704 1 CVE

  Moderate: qemu-kvm security and bug fix update (Oracle Linux 7)

  [1.5.3-60.el7_0.2] - kvm-pc-add-hot_add_cpu-callback-to-all-machine-types.patch [bz#1094820] - Resolves: bz#1094820 (Hot plug CPU not working with RHEL6 machine types running on RHEL7 host.) [1.5.3-60.el7_0.1] - kvm-iscsi-fix-indentation.patch [bz#1090978] - …

  Jul 23, 2014
• Medium
  ELSA-2014-0861 1 CVE

  Moderate: lzo security update (Oracle Linux 7)

  [2.03-3.1.1] - Fixed integer overflow in decompressor Resolves: CVE-2014-4607

  Jul 9, 2014
• Medium
  ELSA-2014-0790 1 CVE

  Moderate: dovecot security update (Oracle Linux 7)

  [1:2.0.9-7.1] - fix CVE-2014-3430: denial of service through maxxing out SSL connections (#1108001)

  Jun 25, 2014