Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,326 results · Feed

  • High
    ELSA-2019-4528 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.24.5] - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker) [Orabug: 28425811] - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra) [Orabug: 28127993] - net: rds: fix excess i…

  • Critical
    ELSA-2019-0219 3 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.5.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.5.0-2] - Updated to 60.5.0 ESR build2 [60.5.0-1] - Updated to 60.5.0 ESR build1 [60.4.0-3] - Fixing fontconfig warnings (rhbz#1601475) [60.4.0-2] - Added pipewi…

  • Medium max 5.9
    ELSA-2019-0194 1 CVE

    Moderate: bind security update (Oracle Linux 7)

    [32:9.9.4-73] - Fixes debug level comments (#1647539)

  • Low max 3.3
    ELSA-2019-0201 1 CVE

    Low: systemd security update (Oracle Linux 7)

    [219-62.0.4] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …

  • High
    ELSA-2019-0163 2 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-957.5.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.5.1] - [fs] revert '[fs]…

  • High max 7.0
    ELSA-2019-4520 4 CVEs

    Important: qemu security update (Oracle Linux 7)

    [12:2.9.0-19.el7] - lsi53c895a: convert to trace-events (Mark Cave-Ayland) [Orabug: 28205376] - lsi: Reselection needed to remove pending commands from queue (George Kennedy) [Orabug: 28626490] - lsi53c895a: check message length value is valid (Prasad J Pandi…

  • High
    ELSA-2019-0160 6 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [60.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.4.0-1] - Update to 60.4.0

  • High max 5.0
    ELSA-2019-4518 6 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:3.0.0-4.el7] - usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann) [Orabug: 29056673] {CVE-2018-16872} - pvrdma: add uar_read routine (Prasad J Pandit) {CVE-2018-20191} - pvrdma: release ring object in case of an error (Prasad J Pandit) [Orabug: 291718…

  • High
    ELSA-2019-0109 1 CVE

    Important: perl security update (Oracle Linux 7)

    [4:5.16.3-294] - Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1661064)

  • High
    ELSA-2019-4509 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-1844.1.3] - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun) [Orabug: 29003422] - nfs: dont dirty kernel pages read by direct-io (Dave Kleikamp) [Orabug: 29122062] - KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li) […

  • High
    ELSA-2019-0059 1 CVE

    Important: libvncserver security update (Oracle Linux 7)

    [0.9.9-13] - Fix CVE-2018-15127 (Heap out-of-bounds write in rfbserver.c:rfbProcessFileTransferReadBuffer()) (bug #1662995)

  • High
    ELSA-2019-4510 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.24.3] - ext4: update i_disksize when new eof exceeds it (Shan Hai) [Orabug: 28940828] - ext4: update i_disksize if direct write past ondisk size (Eryu Guan) [Orabug: 28940828] - ext4: protect i_disksize update by i_data_sem in direct write path (E…

  • High max 8.8
    ELSA-2019-0049 3 CVEs

    Important: systemd security update (Oracle Linux 7)

    [219-62.0.4] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …

  • High
    ELSA-2019-0022 1 CVE

    Important: keepalived security update (Oracle Linux 7)

    [1.3.5-8] - Fixed patch that was incorrectly removed (#1652694) [1.3.5-7] - Fix buffer overflow when parsing HTTP status codes (#1652694)

  • High max 7.8
    ELSA-2019-4316 22 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.29.1] - Copy secure_boot flag in boot params across kexec reboot (Dave Young) [Orabug: 22066352] {CVE-2015-7837} - ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Eric Dumazet) [Orabug: 25059183] {CVE-2016-3841} - ipv6: add complete…

  • High
    ELSA-2019-4315 9 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.24.1] - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration (Laxman Dewangan) [Orabug: 27539246] {CVE-2017-18174} - mlock: fix mlock count can not decrease in race condition (Yisheng Xie) [Orabug: 27677611] {CVE-2017-18221} - perf/c…

  • High max 7.0
    ELSA-2018-4312 1 CVE

    Important: qemu security update (Oracle Linux 7)

    [15:3.0.0-3.el7] - monitor: guard iothread access by mon->use_io_thread (Wolfgang Bumiller) [Orabug: 29046045] - monitor: delay monitor iothread creation (Wolfgang Bumiller) [Orabug: 29010480] - Revert 'qmp: isolate responses into io thread' (Marc-Andre Lurea…

  • High max 7.0
    ELSA-2018-4313 1 CVE

    Important: qemu security update (Oracle Linux 7)

    [15:3.0.0-3.el7] - monitor: guard iothread access by mon->use_io_thread (Wolfgang Bumiller) [Orabug: 29046045] - monitor: delay monitor iothread creation (Wolfgang Bumiller) [Orabug: 29010480] - Revert 'qmp: isolate responses into io thread' (Marc-Andre Lurea…

  • High
    ELSA-2018-3834 9 CVEs

    Important: ghostscript security and bug fix update (Oracle Linux 7)

    [9.07-31.el7_6.6] - Resolves: #1657822 - ghostscript: Regression: Warning: Dropping incorrect smooth shading object (Error: /rangecheck in --run--) [9.07-31.el7_6.5] - Resolves: #1654621 - CVE-2018-16541 ghostscript: incorrect free logic in pagedevice replace…

  • Critical
    ELSA-2018-3833 6 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [60.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.4.0-1] - Update to 60.4.0 ESR [60.3.0-2] - Added firefox-gnome-shell-extension [60.3.0-1] - Update to 60.3.0 ESR

  • High
    ELSA-2018-4304 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-1818.5.4] - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam) [Orabug: 28020694] {CVE-2018-5333} - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez) [Orabug: 28474853] - x86/speculation: Ena…

  • High
    ELSA-2018-4307 3 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.23.2] - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds) [Orabug: 28855335] {CVE-2018-18386} - nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington) [Orabug: 28887442] - x86/topolo…

  • High max 9.8
    ELSA-2018-4303 1 CVE

    Important: kubernetes security update (Oracle Linux 7)

    [1.9.11-2.1.1] - Fix kubeadm-registry.sh - Use golang 1.9.3 - [CVE-2018-1002105] Handle error responses from backends - Bump to v1.9.11

  • High max 7.8
    ELSA-2018-4299 6 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.23.1] - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen) [Orabug: 28898616] {CVE-2018-13094} - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai) [Orabug: 28898636] {CVE-2018-10902} - md/raid5: fix a race condition in s…

  • High max 7.8
    ELSA-2018-4300 10 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.28.1] - udf: Check component length before reading it (Jan Kara) [Orabug: 21193696] {CVE-2014-9728} - udf: Verify i_size when loading inode (Shan Hai) [Orabug: 21193696] {CVE-2014-9728} - intel_pstate: Fix overflow in busy_scaled due to…

  • High max 7.3
    ELSA-2018-3761 1 CVE

    Important: ghostscript security and bug fix update (Oracle Linux 7)

    [9.07-31.el7_6.3] - Resolves: #1654290 ghostscript update breaks xdvi (gs: Error: /undefined in flushpage) [9.07-31.el7_6.2] - Resolves: #1652901 - CVE-2018-16863 ghostscript: incomplete fix for CVE-2018-16509

  • High max 9.8
    ELSA-2018-3738 1 CVE

    Important: ruby security update (Oracle Linux 7)

    [2.0.0.648-34] - CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work. Resolves: CVE-2018-16395

  • High max 5.8
    ELSA-2018-4289 34 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:3.0.0-1.el7] - net: ignore packet size greater than INT_MAX (Jason Wang) [Orabug: 28763782] {CVE-2018-17963} - pcnet: fix possible buffer overflow (Jason Wang) [Orabug: 28763774] {CVE-2018-17962} - rtl8139: fix possible out of bound access (Jason Wang) [O…

  • Medium max 5.9
    ELSA-2018-3663 1 CVE

    Moderate: sos-collector security update (Oracle Linux 7)

    [1.5-3.0.1] - To recognize OL system[OraBug 28807430] - import os module to detect /etc/redhat-release [OraBug 28740046] [1.5-3] - Resolve race condition in cluster profile loading - Quote all options globally - RHBZ#1633515 - RHBZ#1647955 [1.5-2] - Fix clust…

  • High
    ELSA-2018-4288 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.1.12-124.22.4] - Revert commit 8bd274934987 ('block: fix bdi vs gendisk lifetime mismatch') (Ashish Samant) [Orabug: 28968102] - KVM/x86: Add IBPB support (Ashok Raj) [Orabug: 28703712] - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris…

  • Medium max 7.0
    ELSA-2018-3651 2 CVEs

    Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    [3.10.0-957.1.3.el7.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_ key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.1.3.el7] - [x86] Mark…

  • High max 8.8
    ELSA-2018-3665 1 CVE

    Important: NetworkManager security update (Oracle Linux 7)

    [1:1.12.0-8] - dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)

  • High
    ELSA-2018-3650 4 CVEs

    Important: ghostscript security update (Oracle Linux 7)

    [9.07-31.el7_6.1] - Remove as many non-standard operators as possible to make the codebase closer to upstream for later CVEs - Resolves: #1621383 - CVE-2018-16511 ghostscript: missing type check in type checker (699659) - Resolves: #1621159 - CVE-2018-15908 g…

  • High max 7.5
    ELSA-2018-4285 39 CVEs

    Important: qemu security update (Oracle Linux 7)

    [15:3.0.0-1.el7] - net: ignore packet size greater than INT_MAX (Jason Wang) [Orabug: 28763782] {CVE-2018-17963} - pcnet: fix possible buffer overflow (Jason Wang) [Orabug: 28763774] {CVE-2018-17962} - rtl8139: fix possible out of bound access (Jason Wang) [O…

  • Critical
    ELSA-2018-3521 7 CVEs

    Critical: java-11-openjdk security update (Oracle Linux 7)

    [1:11.0.1.13-3.0.1] - link atomic for ix86 build [1:11.0.1.13-3] - Bump release for rebuild. [1:11.0.1.13-2] - Use LTS designator in version output for RHEL. [1:11.0.1.13-1] - Update to October 2018 CPU release, 11.0.1+13. [1:11.0.0.28-2] - Use --with-vendor-…

  • High
    ELSA-2018-3408 1 CVE

    Important: git security update (Oracle Linux 7)

    [1.8.3.1-20] - Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

  • High
    ELSA-2018-3532 4 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [60.3.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.3.0-1] - Update to 60.3.0 [60.2.1-6] - Fixed missing calendar langpacks [60.2.1-5] - Fixing minor issues

  • High
    ELSA-2018-4268 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.26.1] - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet) [Orabug: 27896807] {CVE-2017-18017} - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan) [Orabug: 27927692] {CVE-2018-7757}

  • High
    ELSA-2018-4270 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    [4.14.35-1818.4.5] - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28814574] - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28814574] - x86/speculation: x86_spec_ctrl…

  • Critical max 8.8
    ELSA-2018-3347 1 CVE

    Critical: python-paramiko security update (Oracle Linux 7)

    [2.1.1-9] - Fix a security flaw (CVE-2018-1000805) in Paramiko's server mode (does not effect client mode). Backported from 2.1.6 Resolves rhbz#1637366