296 results · Clear filters · Feed
-
High max 9.8
Important: thunderbird security update (Oracle Linux 8)
[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1
-
High max 9.8
Important: thunderbird security update (Oracle Linux 9)
[128.3.1-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.3.1] - Add OpenELA debranding [128.3.1-1] - Update to 128.3.1
-
High max 9.8
Important: firefox security update (Oracle Linux 8)
[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.3.1-1] - Update to 128.3.1
-
High max 9.8
Important: firefox security update (Oracle Linux 9)
[128.3.1-2.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.3.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
High max 7.8
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.3.el7.OL7] - net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36947298] [3.10.0-1160.119.1.0.2.el7.OL7] - md/raid5: fix oops during stripe resizing (Ritika Srivastava) [Orabug: 34048726] - blk-mq: Remove generation seqeunce (…
-
High max 9.1
Important: httpd security update (Oracle Linux 7)
[2.4.6-99.0.3.1] - Opt-ins for unsafe prefix_stat and %3f [Orabug: 36904263][CVE-2024-38474][CVE-2024-38475] - mod_proxy: validate hostname [Orabug: 36904263][CVE-2024-38477]
-
High max 10.0
Important: kernel security update (Oracle Linux 9)
[5.14.0-427.31.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 10.0
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.334.6.el7] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB h…
-
High max 10.0
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.334.6] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB handl…
-
High max 10.0
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)
[5.4.17-2136.334.6.el8] - loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36197800] - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672495] - x86/bhi: Avoid warning in #DB h…
-
High max 9.8
Important: kernel security update (Oracle Linux 8)
[4.18.0-553.16.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.ge…
-
High max 9.1
Important: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-65.0.1.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-65.1] - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474) - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding prob…
-
High max 9.1
Important: httpd security update (Oracle Linux 9)
[2.4.57-11.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-11] - Resolves: RHEL-45792 - httpd: Encoding problem in mod_proxy (CVE-2024-38473) [2.4.57-9] - Resolves: RHEL-45766 - httpd: null pointer dereference in mod_proxy (CVE-2…
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.536.5] - mmc: core: Fix switch on gp3 partition (Dominique Martinet) - Revert 'Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d'' (Song Liu) - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin) - Revert 'x86/mm/ident_map…
-
High max 9.8
Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)
[5.14.0-427.13.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 7.8
Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)
[4.18.0-513.24.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.535.2.1] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36467681] {CVE-2024-1086} [4.14.35-2047.535.2] - Fix null ptr in rds_tcp_recv_path (Allison Henderson) [Orabug: 33499812] - LTS version: v4.14.338 …
-
High max 7.8
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.330.7.1.el7] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2…
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.330.7.1] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2024-…
-
High max 7.8
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)
[5.4.17-2136.330.7.1.el8] - KVM: x86: Add BHI_NO (Daniel Sneddon) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Pawan Gupta) [Orabug: 36384803] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Pawan Gupta) [Orabug: 36384803] {CVE-2…
-
High max 7.8
Important: kernel security update (Oracle Linux 8)
[4.18.0-513.18.1.0.1_9.OL8] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461932] {CVE-2024-1086} [4.18.0-513.18.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHC…
-
High max 7.8
Important: kernel security update (Oracle Linux 9)
- [5.14.0-362.24.1.0.1_3.OL9] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461940 ] {CVE-2024-1086} - [5.14.0-362.24.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linu…
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.534.3.1] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251145] {CVE-2024-1086}
-
High max 7.8
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.329.3.2.el7] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}
-
High max 7.8
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)
[5.4.17-2136.329.3.2.el8] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.84.2] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251327] {CVE-2024-1086} [4.1.12-124.84.1] - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga) [Orabug: 36334311] - ko…
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.329.3.2] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36465920] {CVE-2024-1086}
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-204.147.6.3] - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36464807] {CVE-2024-1086}
-
High max 7.5
Important: nodejs:16 security update (Oracle Linux 8)
nodejs [1:16.20.2-4.0.1] - reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks Resolves: CVE-2024-22019 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject…
-
High max 8.0
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1160.114.2.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.114.2.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.p…
-
High max 7.8
Important: glibc security update (Oracle Linux 8)
[2.28-225.0.4.6] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2023-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435). - CVE-2023-4813: work around RHEL-8 limitation i…
-
High max 7.5
Important: conmon security update (Oracle Linux 8)
conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add …
-
High max 7.5
Important: conmon security update (Oracle Linux 9)
conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add …
-
High max 8.8
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058
-
High max 8.8
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058
-
High max 7.5
Important: olcne security update (Oracle Linux 7)
conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …
-
High max 7.5
Important: olcne security update (Oracle Linux 8)
conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with …
-
High max 7.7
Important: nodejs:20 security update (Oracle Linux 8)
nodejs [1:20.8.1-1] - Update node and nghttp - Add fips patch - Fixes CVE-2023-44487 (nghttp) - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333 nodejs-nodemon nodejs-packaging
-
High max 7.5
Important: nghttp2 security update (Oracle Linux 9)
[1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487)
-
High max 7.5
Important: varnish security update (Oracle Linux 8)
varnish [6.0.8-3.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 varnish-modules