5,096 results · Clear filters · Feed
-
HighELSA-2020-5163 1 CVE
Important: thunderbird security update (Oracle Linux 7)
[78.4.3-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.3-1] - Update to 78.4.3
-
High max 6.8ELSA-2020-5947 1 CVE
Important: resource-agents security update (Oracle Linux 8)
[4.1.1-68] - azure-lb: fix redirect issue Resolves: rhbz#1850778 [4.1.1-67] - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz#1846733 [4.1.1-65] - azure-events: handle exceptions in urlopen Resolves: rhbz#1845574 [4.1.1-64] - nfsserver: fi…
-
HighELSA-2020-5146 1 CVE
Important: thunderbird security update (Oracle Linux 8)
[78.4.3-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.3-1] - Update to 78.4.3
-
HighELSA-2020-4913 2 CVEs
Important: thunderbird security update (Oracle Linux 8)
[78.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.0-1] - Update to 78.4.0 build1 - Disabled telemetry [78.3.1-1] - Update to 78.3.1 build1
-
High max 9.6
Important: freetype security update (Oracle Linux 8)
[2.9.1-4.el8_3.1] - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891905
-
High max 7.5ELSA-2020-4685 3 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-240.1.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Ora…
-
HighELSA-2020-5923 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2025.402.2.1.el7] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2.el7] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable def…
-
HighELSA-2020-5924 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2025.402.2.1.el7] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2.el7] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable def…
-
HighELSA-2020-5926 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.45.2] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32137965] {CVE-2020-8694} {CVE-2020-8695} [4.1.12-124.45.1] - Revert 'x86/efi: Initialize and display UEFI secure boot state a bit later during init' (Eric Snowberg) …
-
High max 6.5ELSA-2020-5913 14 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2025.402.2.1] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable definition …
-
HighELSA-2020-5917 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.44.4.1] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040806] {CVE-2020-8694} {CVE-2020-8695}
-
High max 7.7ELSA-2020-4806 4 CVEs
Important: dpdk security, bug fix, and enhancement update (Oracle Linux 8)
[19.11.3-1] - Rebase DPDK to 19.11.3 (#1868708) [19.11.2-1] - Rebase DPDK to 19.11.2 (#1836830, #1837024, #1837030, #1837022) [19.11.1-1] - Rebase DPDK to 19.11.1 (#1824905) - Remove dpdk-pmdinfo.py (#1801361) - Add Requires: rdma-core-devel libmnl-devel on x…
-
HighELSA-2020-5914 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2036.100.6.1.el8uek] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040802] {CVE-2020-8694} {CVE-2020-8695} - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov) [Orabug: 32066585] {CVE-2020-27152} {CVE-2…
-
High max 6.5ELSA-2020-5912 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.44.4] - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS (himanshu.madhani@cavium.com) [Orabug: 32020790] [4.1.12-124.44.3] - qed: Reduce verbosity of unimplemented MFW messages (Mintz, Yuval) [Orabug: 31959299] - kexec: validate…
-
High max 9.6
Important: freetype security update (Oracle Linux 7)
[2.8-14.el7_9.1] - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635
-
HighELSA-2020-4910 4 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-12] - CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393), CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407) - Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes [1.20.4-11] - Fix a crash when moving an animated…
-
HighELSA-2020-4909 2 CVEs
Important: thunderbird security update (Oracle Linux 7)
[78.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.0-1] - Update to 78.4.0 build1 - Disabled telemetry
-
High max 7.8ELSA-2020-4908 1 CVE
Important: libX11 security update (Oracle Linux 7)
[1.6.7-3] - Fix CVE-2020-14363 (#1873922)
-
High max 6.1ELSA-2020-5906 1 CVE
Important: containerd security update (Oracle Linux 7)
[1.2.14-1.0.1] - BUILDINFO: commit=259ae80da592d4f6b5e3cdc87202d36bc86a3579 - Addresses CVE-2020-15157 [1.2.14-1.0.0] - Added Oracle specific build files
-
High max 6.1ELSA-2020-5900 1 CVE
Important: docker-engine docker-cli security update (Oracle Linux 7)
docker-engine [19.03.11-6] - Fix for CVE-2020-15157 [19.03.11-5] - Bugfix for 'docker images [name]' not working on docker 19.03.11-ol - Address CVE-2020-16845 [19.03.11-4] - added patch for registry list [19.03.11-3] - update to 19.03.11 for CVE-2020-13401 […
-
HighELSA-2020-4317 2 CVEs
Important: firefox security update (Oracle Linux 8)
[78.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.0-1] - Update to 78.4.0 build2
-
HighELSA-2020-4310 2 CVEs
Important: firefox security update (Oracle Linux 7)
[78.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.0-1] - Update to 78.4.0 build2
-
HighELSA-2020-4276 2 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.2.2.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x6…
-
High max 6.7ELSA-2020-4286 5 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-193.28.1_2.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…
-
HighELSA-2020-4080 12 CVEs
Important: firefox security and bug fix update (Oracle Linux 7)
[78.3.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.3.0] - Update to 78.3.0 build1 [78.2.0-3] - Update to …
-
HighELSA-2020-4163 4 CVEs
Important: thunderbird security update (Oracle Linux 7)
[78.3.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.3.1-1] - Update to 78.3.1 build1 [78.3.0-3] - Update to 78.3.0 build1 - Remove librdp.so as long as we cannot ship it in RHEL [78.2.1-1] - Update to 78.…
-
High max 6.7ELSA-2020-5885 13 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2025.401.4] - KVM: x86: always expose VIRT_SSBD to guests (Paolo Bonzini) [Orabug: 31957046] [4.14.35-2025.401.3] - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit) [Orabug: 31931371] - oracleasm: Access d_bdev befor…
-
High max 6.7ELSA-2020-5884 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.7.4] - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit) [Orabug: 31931369] - iommu/amd: Fix potential @entry null deref (Joao Martins) [Orabug: 31931369] - iommu/amd: Restore IRTE.RemapEn bit after pro…
-
High max 5.5ELSA-2020-5879 8 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.50.1] - USB: serial: omninet: fix reference leaks at open (Mark Nicholson) [Orabug: 30484762] {CVE-2017-8925} - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson) [Orabug: 30254252] {CVE-2016-10905} - GFS2:…
-
High max 9.9ELSA-2020-4082 7 CVEs
Important: squid security update (Oracle Linux 7)
[7:3.5.20-17.4] - Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could result in a DoS - Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could result in cache poisoning - Resolves: #1872342 - CVE-2020-15811 squid: HTTP …
-
HighELSA-2020-4187 1 CVE
Important: spice and spice-gtk security update (Oracle Linux 7)
spice [0.14.0-9.0.2.el7_9.1] - Add ARM support [0.14.0-9.1] - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355 spice-gtk [0.35-5.1] - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355
-
High max 7.5ELSA-2020-4079 2 CVEs
Important: qemu-kvm security update (Oracle Linux 7)
[1.5.3-175.el7_9.1] - Fixing release number for z-stream
-
HighELSA-2020-4186 1 CVE
Important: spice and spice-gtk security update (Oracle Linux 8)
spice [0.14.2-1.1] - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355 spice-gtk [0.37-1.2] - Fix multiple buffer overflows in QUIC decoding code Resolves: CVE-2020-14355
-
High max 8.0ELSA-2020-5866 38 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.43.4] - kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Jann Horn) [Orabug: 29434845] {CVE-2019-6974} - KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) (Peter Shier) [Orabug: 29434898] {CVE-…
-
High max 7.5ELSA-2020-4060 46 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-1160.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <=…
-
High max 7.5ELSA-2020-4004 2 CVEs
Important: tomcat security and bug fix update (Oracle Linux 7)
[0:7.0.76-15] - Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS [0:7.0.76-14] - Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127 - Resolves: CVE-2020-948…
-
HighELSA-2020-4155 4 CVEs
Important: thunderbird security update (Oracle Linux 8)
[78.3.1-1.0.1] - Update to 68.12.0 build1 [78.3.1-1] - Update to 78.3.1 build1 [78.3.0-3] - Update to 78.3.0 build1 - Remove librdp.so as long as we cannot ship it in RHEL [78.2.1-1] - Update to 78.2.1 build1
-
HighELSA-2020-4059 2 CVEs
Important: virt:ol security update (Oracle Linux 8)
qemu-kvm [2.12.0-99.0.1.el8_2.4] - Added bug30251155-remove-upstream-reference [Orabug: 30251155] [2.12.0-99.el8_2.4] - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869708] - Resolves: bz#1869708 (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w …
-
HighELSA-2020-5861 4 CVEs
Important: edk2 security update (Oracle Linux 7)
[1:1.3.2-1.el7] - Updates for OVMF/AAVMF Version 1.3.2 including: * Fri Jul 31 2020 Aaron Young <aaron.young@oracle.com> - Create new 1.3.2 release for OL7 * Fri May 01 2020 Aaron Young <aaron.young@oracle.com> - Create new 1.3.1 release for OL7 * Wed Feb 05 …
-
High max 8.2ELSA-2020-5862 3 CVEs
Important: olcne nginx security update (Oracle Linux 7)
olcne [1.0.8-2] - Added nginx-image resource in module definitions to ensure nginx image upgrading [1.0.8-1] - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx [1.17.7-2] - Changed…