Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,323 results · Feed

  • High max 8.2
    ELSA-2019-2003 3 CVEs

    Important: icedtea-web security update (Oracle Linux 7)

    [1.7.2-16] - added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989

  • High
    ELSA-2019-1883 1 CVE

    Important: qemu-kvm security update (Oracle Linux 7)

    [1.5.3-160.el7_6.3] - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1669067] - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669067] - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669067] - kvm-slirp…

  • Medium max 5.3
    ELSA-2019-1896 1 CVE

    Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)

    [1.3.8.4-25.1] - Bump version to 1.3.8.4-25.1 - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file) [1.3.8.4-25] - Bump version to 1.3.8.4-25 - Resolves: Bug 1722828 - referint update should discard any changes if mep u…

  • High max 7.5
    ELSA-2019-1873 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-957.27.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.27.2] - [x86] hyper-v: fi…

  • Medium max 7.3
    ELSA-2019-1884 1 CVE

    Moderate: libssh2 security update (Oracle Linux 7)

    [1.4.3-12.0.1.el7_6.3] - Bump and rebuild. [1.4.3-12.el7_6.3] - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)

  • Low
    ELSA-2019-1898 1 CVE

    Low: httpd security update (Oracle Linux 7)

    [2.4.6-89.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-89.1] - Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest

  • Low max 7.5
    ELSA-2019-1880 1 CVE

    Low: curl security and bug fix update (Oracle Linux 7)

    [7.29.0-51.0.1.el7_6.3] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html) - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html) -…

  • High max 7.5
    ELSA-2019-0972 1 CVE

    Important: openwsman security update (Oracle Linux 8)

    [2.6.5-5] - Fix CVE-2019-3816 Resolves: #1693972 - Remove Dist Tag from the oldest changelog entry

  • Medium max 7.0
    ELSA-2019-1517 1 CVE

    Moderate: gvfs security update (Oracle Linux 8)

    [1.36.2-2.1] - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1690470) [1.36.2-2] - rebuild

  • High
    ELSA-2019-0968 1 CVE

    Important: edk2 security update (Oracle Linux 8)

    [20180508gitee3198e672e2-9.el8_0] - edk2-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1690501] - edk2-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1690501] - Resolves: bz#1690501 (CVE-2018-12180 edk2: Buffer Overflow in Blo…

  • Medium
    ELSA-2019-1527 1 CVE

    Moderate: WALinuxAgent security update (Oracle Linux 8)

    [2.2.32-1.0.1.el8_0.1] - Add oracle support to fix waagent.service build issue [2.2.32-1.el8_0.1] - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1711338] - Resolves: bz#1711338 (CVE-2019-0804 WALinuxAgent: swapfile created with weak perm…

  • High max 5.9
    ELSA-2019-1714 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.4-17.P2.1] - Fix CVE-2019-6471

  • High
    ELSA-2019-1771 1 CVE

    Important: cyrus-imapd security update (Oracle Linux 8)

    [3.0.7-15.1] - Resolves: #1718194 - don't overrun buffer when parsing strings with sscanf()

  • High
    ELSA-2019-1799 8 CVEs

    Important: thunderbird security and bug fix update (Oracle Linux 8)

    [60.8.0-1.0.1] [60.8.0-1] - Updated to 60.8.0 [60.7.2-3] - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2.

  • High max 9.8
    ELSA-2019-1529 4 CVEs

    Important: pki-deps:10.6 security update (Oracle Linux 8)

    apache-commons-collections [3.2.2-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [3.2.2-9] - Remove workaround for symlink->directory rpm bug jackson-bom [2.9.8-1] - Update to latest upstream release [2.9.4-2] - Rebuilt for https://fe…

  • Medium max 9.8
    ELSA-2019-0984 2 CVEs

    Moderate: python36:3.6 security update (Oracle Linux 8)

    python-PyMySQL [0.8.0-10] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 python-docs [3.6.7-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-docutils [0.14-12] - Bumping due…

  • Medium
    ELSA-2019-1817 7 CVEs

    Moderate: java-11-openjdk security update (Oracle Linux 8)

    [1:11.0.4.11-0] - Update to shenandoah-jdk-11.0.4+11 (GA) - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:11.0.4.10-0.0.ea] - Update to shenandoah-jdk-11.0.4+10 (EA) - Resolves: rhbz#1724452 [1:11.0.4.9-0.0.ea] - Update to shenandoah-jdk-11…

  • High max 7.5
    ELSA-2019-1145 1 CVE

    Important: bind security update (Oracle Linux 8)

    [32:9.11.4-17.P2] - Fix inefective limit of TCP clients (CVE-2018-5743)

  • High max 7.5
    ELSA-2019-1259 4 CVEs

    Important: dotnet security, bug fix, and enhancement update (Oracle Linux 8)

    [2.1.507-2] - Link against strerror_r correctly - Resolves: RHBZ#1712471 [2.1.507-1] - Update to .NET Core Runtime 2.1.11 and SDK 2.1.507 - Resolves: RHBZ#1710068 [2.1.506-1] - Update to .NET Core Runtime 2.1.10 and SDK 2.1.506 - Resolves: RHBZ#1696836

  • High max 8.8
    ELSA-2019-1279 3 CVEs

    Important: pacemaker security and bug fix update (Oracle Linux 8)

    [2.0.1-4.3] - New build with fixed test in gating.yaml - Resolves: rhbz#1694557 - Resolves: rhbz#1695247 - Resolves: rhbz#1697264 - Resolves: rhbz#1697265 [2.0.1-4.2] - New build to apply z-stream tag - Resolves: rhbz#1694557 - Resolves: rhbz#1695247 - Resolv…

  • High
    ELSA-2019-1146 3 CVEs

    Important: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.212.b04-1] - Remove additions to EXTRA_CFLAGS and EXTRA_CPP_FLAGS which are now made by upstream. - Resolves: rhbz#1693468 [1:1.8.0.212.b04-1] - Add JDK-8223219 to avoid -fstack-protector overriding -fstack-protector-strong - Resolves: rhbz#1693468 […

  • Critical max 5.3
    ELSA-2019-1269 13 CVEs

    Critical: firefox security update (Oracle Linux 8)

    [60.7.0-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.0-1] - Manaul CentOS Debranding [60.7.0-1] - Updated to 60.7.0 ESR [60.6.3-1] -…

  • High max 5.3
    ELSA-2019-1308 12 CVEs

    Important: thunderbird security update (Oracle Linux 8)

    [60.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.0-1] - Update to 60.7.0

  • High max 7.3
    ELSA-2019-0971 3 CVEs

    Important: ghostscript security update (Oracle Linux 8)

    [9.25-2.1] - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator is available (700585) - Resolves: #1691414 - CVE-2019-3838 ghostscript: force…

  • High max 8.6
    ELSA-2019-1152 1 CVE

    Important: python-jinja2 security update (Oracle Linux 8)

    [2.10.1-2] - Rebuild of package to go through gating - Resolves: rhbz#1701300 [2.10.1-1] - Rebase to 2.10.1 (security update) to fix CVE-2019-10906 - Resolves: rhbz#1701300 [2.10-9] - Require platform-python-setuptools instead of python3-setuptools - Resolves…

  • Medium
    ELSA-2019-1518 2 CVEs

    Moderate: java-11-openjdk security update (Oracle Linux 8)

    [1:11.0.3.7-2.0.1] - link atomic for ix86 build (Livy Ge) [1:11.0.3.7-2] - Do not generate lib-style requires for -slowdebug subpackages. - Resolves: rhbz#1693468 [1:11.0.3.7-2] - Fix requires/provides for the non-system JDK case. JDK 11 is not a system JDK a…

  • Critical max 10.0
    ELSA-2019-1696 2 CVEs 2 exploited

    Critical: firefox security update (Oracle Linux 8)

    [60.7.2-3.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.7.2-3.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-3] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR

  • Critical
    ELSA-2019-1764 8 CVEs

    Critical: firefox security update (Oracle Linux 8)

    [60.8.0-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.8.0-1.0.1] * Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

  • High
    ELSA-2019-0983 1 CVE

    Important: wget security update (Oracle Linux 8)

    [1.19.5-7.0.1.1] - SSLv3 support dropped from openssll, v3 test certificates need to be replaced [Orabug: 29613455] [1.19.5-7.1] - Fix tests with on armhfp [1.19.5-7.1] - Fix CVE-2019-5953 (#1696735)

  • High max 9.8
    ELSA-2019-0981 3 CVEs

    Important: python27:2.7 security update (Oracle Linux 8)

    Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 PyYAML [3.12-16] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 babel [2.5.1-9] - Bumping due to problems …

  • High max 7.5
    ELSA-2019-1479 4 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-80.4.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.4.2_0] - [net] …

  • High max 7.8
    ELSA-2019-0980 2 CVEs 1 exploited

    Important: httpd:2.4 security update (Oracle Linux 8)

    httpd [2.4.37-11.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-11] - Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #16…

  • High max 5.9
    ELSA-2019-1167 4 CVEs

    Important: kernel security and bug fix update (Oracle Linux 8)

    [4.18.0-80.1.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.1.2_0] - [arm64…

  • Medium
    ELSA-2019-1816 6 CVEs

    Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)

    [1:1.8.0.222.b10-0] - Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452 [1:1.8.0.222.b09-0] - Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:1.8.0.222.b08-0.0.ea] - Update to aar…

  • High max 10.0
    ELSA-2019-1623 6 CVEs 2 exploited

    Important: thunderbird security update (Oracle Linux 8)

    [60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1

  • Critical
    ELSA-2019-0966 10 CVEs

    Critical: firefox security update (Oracle Linux 8)

    [60.6.1-1.0.2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] [60.6.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Build with ol8 rust/llvm rather than scl [60.6.1-1] - Update to 60.6.1 ESR (Build 1…

  • Medium
    ELSA-2019-0990 1 CVE

    Moderate: systemd security and bug fix update (Oracle Linux 8)

    [239-13.0.1.3] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set RemoveIPC=no in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 1…

  • High max 5.3
    ELSA-2019-0997 1 CVE

    Important: python3 security update (Oracle Linux 8)

    [3.6.8-2.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-2] - Security fix for CVE-2019-9636 (rhbz#1693973)

  • High
    ELSA-2019-1142 2 CVEs

    Important: freeradius:3.0 security update (Oracle Linux 8)

    [3.0.17-4] - Fixes two EAP-PWD security issues Resolves: bz#1699416 authentication bypass with an invalid curve attack

  • High
    ELSA-2019-1143 1 CVE

    Important: flatpak security update (Oracle Linux 8)

    [1.0.6-3] - Fix IOCSTI sandbox bypass (#1700653)