Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-abi-whitelists | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-alt | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-bootwrapper | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-debug | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-debug-debuginfo | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-debug-devel | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-debuginfo | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-debuginfo-common-ppc64le | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-devel | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-doc | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-tools | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-tools-debuginfo | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-tools-libs | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | kernel-tools-libs-devel | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | perf | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | perf-debuginfo | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-perf | 0:4.14.0-115.32.1.el7a |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-perf-debuginfo | 0:4.14.0-115.32.1.el7a |
Vulnerabilities 4
-
Unscored —CVE-2020-12351 Public exploit
Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via …
-
Unscored —CVE-2020-12352 Public exploit
Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adj…
-
Unscored —
The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information …
-
Unscored —
A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt m…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/security/vulnerabilities/BleedingTooth
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1865751
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1877575
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1886521
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1886529
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4279.json
-
report
https://access.redhat.com/security/cve/CVE-2020-12351
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-12351
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12351
-
article
https://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq
-
article
https://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq
-
article
https://lore.kernel.org/linux-bluetooth/20200806181714.3216076-1-luiz.dentz@gmail.com/
-
article
https://lore.kernel.org/linux-bluetooth/20200806181714.3216076-2-luiz.dentz@gmail.com/
-
article
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00435.html
-
article
https://www.zdnet.com/article/google-warns-of-severe-bleedingtooth-bluetooth-flaw-in-linux-kernel/
-
report
https://access.redhat.com/security/cve/CVE-2020-12352
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-12352
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12352
-
report
https://access.redhat.com/security/cve/CVE-2020-16166
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-16166
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-16166
-
report
https://access.redhat.com/security/cve/CVE-2020-25212
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-25212
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-25212