Skip to content
OpenAdvisories

Source

Oracle Linux Security Advisories (ELSA)

Source: https://linux.oracle.com/security/

All Critical High Medium Low With exploited CVEs

8,326 results · Feed

  • Critical
    ELSA-2015-1834 3 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [38.3.0-2.0.1.el6_7] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [38.3.0-2] - Update to 38.3.0 ESR

  • High
    ELSA-2015-3078 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-98.2.2] - sctp: fix ASCONF list handling (Marcelo Ricardo Leitner) [Orabug: 21842668] {CVE-2015-3212} - KEYS: ensure we free the assoc array edit if edit is valid (Colin Ian King) [Orabug: 21842655] {CVE-2015-1333}

  • Medium
    ELSA-2015-1793 1 CVE

    Moderate: qemu-kvm security fix update (Oracle Linux 7)

    [1.5.3-86.el7_1.6] - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248764] - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248764] - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248764] - kvm-…

  • High
    ELSA-2015-1778 7 CVEs

    Important: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-229.14.1.OL7] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.14.1] - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1248381 1238230] [3.10.0-229.13.1] - [dma] ioat: fix tasklet tear down (Herton R. Krzes…

  • Medium
    ELSA-2015-1742 4 CVEs

    Moderate: subversion security update (Oracle Linux 7)

    [1.7.14-7.1] - add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184, CVE-2015-3187

  • High
    ELSA-2015-1741 1 CVE

    Important: haproxy security update (Oracle Linux 7)

    [1.5.4-4.1] - Fix buffer_slow_realign() function to respect output data (CVE-2015-3281, #1241537)

  • High
    ELSA-2015-1705 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.8.2-0.37.rc1.4] - Apply previously not applied patch for CVE-2015-5722 [32:9.8.2-0.37.rc1.3] - Fix CVE-2015-5722

  • High
    ELSA-2015-1708 3 CVEs

    Important: libXfont security update (Oracle Linux 7)

    [1.4.5-5] - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892) - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892) - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)

  • High
    ELSA-2015-1714 1 CVE

    Important: spice security update (Oracle Linux 7)

    [0.12.4-9.1] - Avoid race conditions reading monitor configs from guest. This race could trigger memory corruption host-side Resolves: rhbz#1239127

  • Medium
    ELSA-2015-1699 1 CVE

    Moderate: nss-softokn security update (Oracle Linux 7)

    [3.14.3-23] - Pick up upstream freebl patch for CVE-2015-2730 - Check for P == Q or P ==-Q before adding P and Q

  • Medium
    ELSA-2015-1694 1 CVE

    Moderate: gdk-pixbuf2 security update (Oracle Linux 7)

    [2.24.1-6] - Fix CVE 2015-4491 - Resolves #1253210

  • High
    ELSA-2015-1695 1 CVE

    Important: jakarta-taglibs-standard security update (Oracle Linux 7)

    [0:1.1.1-11.7] - Gracefully handle parsers without FSP support (e.g. Java 5 GCJ) - Resolves: CVE-2015-0254 [0:1.1.1-11.6] - Prevent XXE and RCE in JSTL XML tags - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>) - Resolves: CVE…

  • Critical
    ELSA-2015-1693 2 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [38.2.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.2.1-1] - Update to 38.2.1 ESR

  • High
    ELSA-2015-1682 5 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [38.2.0-4.0.1.el6_7] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [38.2.0-4] - Update to 38.2.0 [38.1.0-4] - Update to 38.1.0

  • Medium
    ELSA-2015-1667 2 CVEs

    Moderate: httpd security update (Oracle Linux 7)

    [2.4.6-31.0.1.el7_1.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-31.1] - core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-…

  • Medium
    ELSA-2015-1665 16 CVEs

    Moderate: mariadb security update (Oracle Linux 7)

    [1:5.5.44-1] - Rebase to 5.5.44 Resolves: #1247021

  • Medium
    ELSA-2015-1640 1 CVE

    Moderate: pam security update (Oracle Linux 7)

    [1.1.1-20.1] - fix CVE-2015-3238 - DoS due to blocking pipe with very long password

  • Medium
    ELSA-2015-1635 3 CVEs

    Moderate: sqlite security update (Oracle Linux 7)

    [3.7.17-6.1] - Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416 Resolves: rhbz#1244731 [3.7.17-6] - Release bump for ppc64le [3.7.17-5] - Release bump [3.7.17-4.1] - Backport 64k page fix from latest upstream (#1118151)

  • Medium max 7.5
    ELSA-2015-1636 1 CVE

    Moderate: net-snmp security update (Oracle Linux 7)

    [1:5.5-54.0.1.el6_7.1] - Add Oracle ACFS to hrStorage (John Haxby) [orabug 18510373] [1:5.5-54.el6_7.1] - Fixed parsing of invalid variables in incoming packets (#1248410)

  • High
    ELSA-2015-3071 2 CVEs

    Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-98.1.2] - udp: fix behavior of wrong checksums (Eric Dumazet) [Orabug: 21628850] {CVE-2015-5364} {CVE-2015-5366}

  • Critical
    ELSA-2015-1586 14 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [38.2.0-4.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484] [38.2.0-4] - Update to 38.2.0 ESR

  • High max 8.8
    ELSA-2015-1581 1 CVE 1 exploited

    Important: firefox security update (Oracle Linux 7)

    [38.1.1-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.1.1-1] - Update to 38.1.1 ESR

  • Low
    ELSA-2015-3066 1 CVE

    Low: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-98.1.1] - md: use kzalloc() when bitmap is disabled (Benjamin Randazzo) [Orabug: 21563041] {CVE-2015-5697}

  • Medium
    ELSA-2015-1534 4 CVEs

    Moderate: kernel security and bug fix update (Oracle Linux 7)

    [3.10.0-229.11.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.11.1] - [fs] Fixing lease renewal (Steve Dickson) [1226328 1205048] - [fs] revert 'nfs: Fixing lease renewal' (Carlos Maiolino) [1226328 1205048] - [redhat] spec: Update dracut depend…

  • High max 9.8
    ELSA-2015-1526 14 CVEs 1 exploited

    Important: java-1.6.0-openjdk security update (Oracle Linux 7)

    [1:1.6.0.36-1.13.8.1] - Update tarball to fix TCK regression (PR2565) - Resolves: rhbz#1235153 [1:1.6.0.36-1.13.8.0] - Update to IcedTea 1.13.8 - Update no_pr2125.patch to work against new version. - Resolves: rhbz#1235153

  • High
    ELSA-2015-3065 2 CVEs

    Important: lxc security update (Oracle Linux 7)

    [1.0.7-2.0.7] - [Orabug 21533491] CVE-2015-1334: Don't use the container's /proc during attach [1.0.7-2.0.6] - [Orabug 21526922] CVE-2015-1331: LXCLOCK: USE /RUN/LXC/LOCK RATHER THAN /RUN/LOCK/LXC

  • High
    ELSA-2015-3064 1 CVE

    Important: Unbreakable Enterprise kernel security , bug fix and enhancement update (Oracle Linux 7)

    kernel-uek [3.8.13-98] - KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502729] {CVE-2015-0239} {CVE-2015-0239} - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502159] {CVE-2015-3339} [3.8.13-97] - add…

  • Medium
    ELSA-2015-3053 3 CVEs

    Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.3.5] - KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502739] {CVE-2015-0239} {CVE-2015-0239} - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502254] {CVE-2015-3339} - eCryptfs: R…

  • High max 7.5
    ELSA-2015-1513 1 CVE 1 exploited

    Important: bind security update (Oracle Linux 7)

    [32:9.8.2-0.37.rc1.2] - Fix CVE-2015-5477

  • Medium
    ELSA-2015-1510 1 CVE

    Moderate: clutter security update (Oracle Linux 7)

    [1.14.4-12.1] - Fix crash when doing gestures at unlock screen Resolves: rhbz#1227103

  • High
    ELSA-2015-1507 2 CVEs

    Important: qemu-kvm security and bug fix update (Oracle Linux 7)

    [1.5.3-86.el7_1.5] - kvm-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch [bz#1243726] - Resolves: bz#1243726 (CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pit_ioport_read function [rhel-7.1.z]) [1.5.3-86.el7_1.4] - kvm-ide-Ch…

  • High max 7.4
    ELSA-2015-1483 2 CVEs 1 exploited

    Important: libuser security update (Oracle Linux 7)

    [0.60-7] - Update CVE-2015-3246 patch based on review comments Resolves: #1235519 [0.60-6] - Fix CVE-2015-3246 Resolves: #1235519

  • High
    ELSA-2015-1443 1 CVE

    Important: bind security update (Oracle Linux 7)

    [32:9.9.4-18.2] - Fix CVE-2015-4620

  • High
    ELSA-2015-1455 11 CVEs

    Important: thunderbird security update (Oracle Linux 7)

    [31.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [31.8.0-1] - Update to 31.8.0

  • Medium
    ELSA-2015-3048 2 CVEs

    Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)

    kernel-uek [3.8.13-68.3.4] - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark) [Orabug: 21444790] {CVE-2015-2922} - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller) [Orabug: 21444687] {CVE-2015-3636}

  • High max 9.8
    ELSA-2015-1228 16 CVEs 1 exploited

    Important: java-1.8.0-openjdk security update (Oracle Linux 7)

    [1:1.8.0.51-1.b16] - Add md5sum for January 2015 java.security update so it gets updated this time. - Resolves: rhbz#1235162 [1:1.8.0.51-0.b16] - July 2015 security update to u51b16. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - …

  • Critical max 9.8
    ELSA-2015-1229 14 CVEs 1 exploited

    Critical: java-1.7.0-openjdk security update (Oracle Linux 7)

    [1:1.7.0.85-2.6.1.2.0.1.el7_1] - Update DISTRO_NAME in specfile [1:1.7.0.85-2.6.1.2] - Bump upstream tarball to u25b01 to fix issue with 8075374 backport. - Resolves: rhbz#1235158 [1:1.7.0.85-2.6.1.1] - Update OpenJDK tarball so correct version is used. - Res…

  • Critical
    ELSA-2015-1207 17 CVEs

    Critical: firefox security update (Oracle Linux 7)

    [38.1.0-1.0.1.el7_1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [38.1.0-1] - Update to 38.1.0 ESR [38.0.1-2] - Fixed rhbz#1222807 by removing preun section

  • Medium
    ELSA-2015-1193 1 CVE

    Moderate: xerces-c security update (Oracle Linux 7)

    [3.1.1-7] Resolves: rhbz#1217104 CVE-2015-0252

  • Medium
    ELSA-2015-1194 3 CVEs

    Moderate: postgresql security update (Oracle Linux 7)

    [9.2.13-1] - update to 9.2.13 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-13.html [9.2.12-1] - update to 9.2.12 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-12.html [9.2.11-1] - update to 9.2.11 per relea…