Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,326 results · Feed

  • High
    ELSA-2017-0837 6 CVEs

    Important: icoutils security update (Oracle Linux 7)

    [0.31.3-1] - Rebase to upstream version 0.31.3. - This version includes multiple security fixes CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009, CVE-2017-6010, CVE-2017-6011 resolves: rhbz#1430610

  • Critical
    ELSA-2017-0558 1 CVE

    Critical: firefox security update (Oracle Linux 7)

    [52.0-5.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.0-5] - Added fix for mozbz#1348168/CVE-2017-5428

  • High
    ELSA-2017-0498 9 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [45.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.8.0-1] - Update to 45.8.0

  • Critical
    ELSA-2017-0461 9 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [52.0-4.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.0-4] - Update to 52.0 ESR (b4) [52.0-3] - Added fix for rhbz#1423012 - ppc64 gfx crashes [52.0-2] - Enable system nss [52.0-1] - Update to 52.0ESR (B1) - Build RH…

  • High max 5.5
    ELSA-2017-0396 2 CVEs

    Important: qemu-kvm security and bug fix update (Oracle Linux 7)

    [1.5.3-126.el7_3.5] - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420490] - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420490] - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420490] - Resolves: bz#1420490 (EMBA…

  • Medium max 8.1
    ELSA-2017-0388 1 CVE

    Moderate: ipa security and bug fix update (Oracle Linux 7)

    [4.4.0-14.0.1.el7_3.6] - Blank out header-logo.png product-name.png Replace login-screen-logo.png [20362818] [4.4.0-14.6] - Resolves: #1416488 replication race condition prevents IPA to install - wait_for_entry: use only DN as parameter - Wait until HTTPS pri…

  • High
    ELSA-2017-0386 4 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.10.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.10.2] - [net] dccp: fix…

  • High
    ELSA-2017-3521 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.4] - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) {CVE-2017-6074}

  • High
    ELSA-2017-3520 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.28] - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) [Orabug: 25598257] {CVE-2017-6074}

  • High
    ELSA-2017-0294 1 CVE

    Important: kernel security update (Oracle Linux 7)

    - [3.10.0-514.6.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.6.2] - [net] dccp: fix f…

  • Medium
    ELSA-2017-0286 2 CVEs

    Moderate: openssl security update (Oracle Linux 7)

    [1.0.1e-48.4] - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts

  • Medium max 7.5
    ELSA-2017-0276 1 CVE

    Moderate: bind security update (Oracle Linux 7)

    [32:9.9.4-38.2] - Fix CVE-2017-3135 (ISC change 4557) - Fix and test caching CNAME before DNAME (ISC change 4558)

  • Critical
    ELSA-2017-0269 11 CVEs

    Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

    [1:1.7.0.131-2.6.9.0.0.1] - Add oracle-enterprise.patch - Fix DISTRO_NAME to 'Oracle Linux' [1:1.7.0.131-2.6.9.0] - Add blacklisted.certs to installation file list. - Resolves: rhbz#1410612 [1:1.7.0.131-2.6.9.0] - Bump to 2.6.9 and u131b00. - Remove patch app…

  • High
    ELSA-2017-3515 4 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.3] - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu) [Orabug: 25417805] {CVE-2016-8646} - USB: usbfs: fix potential infoleak in devio (Kangjie Lu) [Orabug: 25462760] {CVE-2016-4482} - net: fix infoleak i…

  • High
    ELSA-2017-3514 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.27] - vfio/pci: Fix integer overflows, bitmask check (Vlad Tsyrklevich) [Orabug: 25164094] {CVE-2016-9083} {CVE-2016-9084} - Don't feed anything but regular iovec's to blk_rq_map_user_iov (Linus Torvalds) [Orabug: 25231931] {CVE-2016-9…

  • Medium
    ELSA-2017-0252 5 CVEs

    Moderate: ntp security update (Oracle Linux 7)

    [4.2.6p5-25.0.1.el7_3.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-25.el7_3.1] - don't limit rate of packets from sources (CVE-2016-7426) - don't change interface from received packets (CVE-2016-7429) - fix calculation of root…

  • Medium max 7.5
    ELSA-2017-0254 2 CVEs

    Moderate: spice security update (Oracle Linux 7)

    [0.12.4-20] - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages. Resolves: CVE-2016-9577 - Fix remote DoS via crafted message. Resolves: CVE-2016-9578

  • High
    ELSA-2017-0238 8 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [45.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.7.0-1] - Update to 45.7.0

  • Medium max 9.8
    ELSA-2017-0225 8 CVEs

    Moderate: libtiff security update (Oracle Linux 7)

    [3.9.4-21] - Fix patch for CVE-2016-5652 - Related: #1412078 [3.9.4-20] - Fix CWE-476 defect found by covscan - Related: #1412078 [3.9.4-19] - Add patches for CVEs: - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 - CVE-…

  • Critical
    ELSA-2017-0190 9 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [45.7.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.7.0-1] - Updated to 45.7.0 (B1) [45.6.0-2] - Enabled ffmpeg > 54.35.1 (rhbz#1330898, mozbz#1263665)

  • Medium
    ELSA-2017-0182 1 CVE

    Moderate: squid security update (Oracle Linux 7)

    [7:3.5.20-2.2] - Resolves: #1412735 - CVE-2016-10002 squid: Information disclosure in HTTP request processing

  • Critical
    ELSA-2017-0180 11 CVEs

    Critical: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.121-0.b13] - Update to aarch64-jdk8u121-b13. - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. - Re-generate RH1393047 ObjectInputStream patch against u121. - Resolves: rhbz#1410612 [1:1.8.0.112-0.b16] - Update to …

  • High
    ELSA-2017-0086 3 CVEs

    Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)

    - [3.10.0-514.6.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-514.6.1] - [net] sctp: valid…

  • Low
    ELSA-2017-0083 1 CVE

    Low: qemu-kvm security and bug fix update (Oracle Linux 7)

    [1.5.3-126.el7_3.3] - kvm-net-check-packet-payload-length.patch [bz#1398217] - Resolves: bz#1398217 (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-7.3.z]) [1.5.3-126.el7_3.2] - kvm-virtio-introduce-virtqueue_unmap_sg.…

  • High
    ELSA-2017-0062 3 CVEs

    Important: bind security update (Oracle Linux 7)

    [32:9.9.4-38.1] - Fix CVE-2016-9131 (ISC change 4508) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Fix CVE-2016-9444 (ISC change 4517)

  • High max 6.4
    ELSA-2017-3511 1 CVE

    Important: docker-engine docker-engine-selinux security and bugfix update (Oracle Linux 7)

    [1.12.6-1.0.1] - Enable configuration of Docker daemon via sysconfig [orabug 21804877] - Require UEK4 for docker 1.9 [orabug 22235639 22235645] - Add docker.conf for prelink [orabug 25147708] [1.12.6] - the systemd unit file (/usr/lib/systemd/system/docker.se…

  • High
    ELSA-2017-0061 5 CVEs

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.41-1.13.13.1.0.1] - Add oracle-enterprise.patch [1:1.6.0.41-1.13.13.1] - Update to new 1.13.13 and b41 tarballs to correct TCK failure. - Resolves: rhbz#1381990 [1:1.6.0.41-1.13.13.0] - Remove --htmldir option which is not supported by older autotool…

  • High
    ELSA-2017-3508 7 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.25] - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells) [Orabug: 25306361] {CVE-2016-7042} - nvme: Limit command retries (Keith Busch) [Orabug: 25374751] - fs/proc/task_mmu.c: fix mm_access() mode parameter in …

  • High
    ELSA-2017-3509 5 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.16.2] - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet) [Orabug: 25203623] {CVE-2016-9793} [3.8.13-118.16.1] - nvme: Limit command retries (Ashok Vairavan) [Orabug: 25374794] - tcp: fix use after free in tcp_xmit_ret…

  • Medium
    ELSA-2017-0020 5 CVEs

    Moderate: gstreamer1-plugins-good security update (Oracle Linux 7)

    [1.4.5-3] - Remove insecure FLX plugin Resolves: rhbz#1400892

  • Medium
    ELSA-2017-0018 3 CVEs

    Moderate: gstreamer-plugins-bad-free security update (Oracle Linux 7)

    [0.10.23-22] - h264parse: Ensure codec_data has the required size when reading number of SPS Resolves: rhbz#1400838 [0.10.23-21] - Remove insecure NSF plugin - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400838

  • Medium
    ELSA-2017-0019 5 CVEs

    Moderate: gstreamer-plugins-good security update (Oracle Linux 7)

    [0.10.31-12] - Disable insecure FLX plugin Resolves: rhbz#1400842

  • Medium
    ELSA-2017-0021 4 CVEs

    Moderate: gstreamer1-plugins-bad-free security update (Oracle Linux 7)

    [1.4.5-6] - Fix h264 and h265 buffer size checks - Fix mpegts pat parsing and add more size checks Resolves: rhbz#1400897 [1.4.5-5] - vmncdec: Sanity-check width/height before using it Resolves: rhbz#1400897

  • Medium
    ELSA-2017-0013 5 CVEs

    Moderate: ghostscript security update (Oracle Linux 7)

    [9.07-20_1] - Added security fixes for: - CVE-2013-5653 (bug #1380327) - CVE-2016-7977 (bug #1380415) - CVE-2016-7978 (bug #1382300) - CVE-2016-7979 (bug #1382305) - CVE-2016-8602 (bug #1383940)

  • Medium
    ELSA-2017-0001 2 CVEs

    Moderate: ipa security update (Oracle Linux 7)

    [4.4.0-14.0.1.el7_3.1.1] - Blank out header-logo.png product-name.png Replace login-screen-logo.png [20362818] [4.4.0-14.1.1] - Resolves: #1370493 CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy - ipa-kdb: search for passw…

  • High
    ELSA-2016-3655 1 CVE

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [4.1.12-61.1.23] - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298601] {CVE-2016-7117}

  • High
    ELSA-2016-3656 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-118.15.2] - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski) [Orabug: 25269176] {CVE-2016-3157} {CVE-2016-3157} - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298611] {CVE-2016…

  • High
    ELSA-2016-2973 7 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [45.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [45.6.0-1] - Update to the latest upstream (45.6.0)

  • Medium
    ELSA-2016-2972 1 CVE

    Moderate: vim security update (Oracle Linux 7)

    [7.4.629-5.1] - add fix for CVE-2016-1248

  • Critical
    ELSA-2016-2946 10 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [45.6.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [45.6.0-1] - Update to 45.6.0 ESR