5,096 results · Clear filters · Feed
-
High max 7.5ELSA-2020-5724 1 CVE
Important: pcs security update (Oracle Linux 8)
[0.10.4-6.0.1.el8_2.1] - Replace HAM-logo.png with a generic one [0.10.4-6.el8_2.1] - Fixed running pcs status on remote nodes - Fixed ruby daemon closing connection after 30s - Fixed inability to create colocation constraint in webUI - Updated bundled rubyge…
-
High max 7.5ELSA-2020-2471 1 CVE
Important: .NET Core on Red Hat Enterprise Linux 8 security update (Oracle Linux 8)
[2.1.515-1] - Update to .NET Core SDK 2.1.515 and Runtime 2.1.19 - Resolves: RHBZ#1843680
-
HighELSA-2020-5720 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.7.0-15.el7] - qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug: 31380815] [5.7.0-14.el7] - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano) [Orabug: 31350200] - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino…
-
High max 7.0ELSA-2020-2530 1 CVE
Important: tomcat security update (Oracle Linux 7)
[0:7.0.76-12] - Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence
-
HighELSA-2020-5719 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.7.0-15.el7] - qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug: 31380815] [5.7.0-14.el7] - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano) [Orabug: 31350200] - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino…
-
High max 7.5ELSA-2020-2450 1 CVE
Important: .NET Core 3.1 on Red Hat Enterprise Linux 8 security update (Oracle Linux 8)
[3.1.105-2.0.1.el8_2] - Update patch to support 8.2 (alexander.burmashev@oracle.com) - support OL release scheme (alexander.burmashev@oracle.com) [3.1.105-2] - Remove incorrectly installed files - Resolves: RHBZ#1844515 [3.1.105-1] - Update to .NET Core Runti…
-
HighELSA-2020-5722 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.39.5.1] - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [Orabug: 31352782] {CVE-2020-0543} - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31352782] {CVE-2020-054 3} - x86/speculati…
-
HighELSA-2020-2427 1 CVE
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-193.6.3_2.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.6.3_2] - rebu…
-
High max 7.9ELSA-2020-5715 20 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.303.4.1] - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31422209] {CVE-2020-0543} - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross) [Orabug: 31422209] {CVE…
-
HighELSA-2020-2414 2 CVEs
Important: unbound security update (Oracle Linux 7)
[1.6.6-4] - Fix amplifying an incoming query into a large number of queries directed to a target - Resolves: rhbz#1839172 (CVE-2020-12662), rhbz#1840258 (CVE-2020-12663)
-
HighELSA-2020-5714 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.3.2.1uek] - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [Orabug: 31352779] {CVE-2020-0543} - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31352779] {CVE-2020-0543} - x86/specula…
-
High max 7.5ELSA-2020-2250 2 CVEs
Important: dotnet3.1 security update (Oracle Linux 8)
[3.1.104-2.0.2] - Update patch to support 8.2 (alexander.burmashev@oracle.com) [3.1.104-2.0.1] - support OL release scheme (alexander.burmashev@oracle.com) [3.1.104-2] - Update to new release - Resolves: RHBZ#1833091 [3.1.104-1] - Update to .NET Core Runtime …
-
HighELSA-2020-2416 2 CVEs
Important: unbound security update (Oracle Linux 8)
[1.7.3-11] - Fix amplifying an incoming query into a large number of queries directed to a target - Resolves: rhbz#1839177 (CVE-2020-12662), rhbz#1840262 (CVE-2020-12663)
-
HighELSA-2020-2405 1 CVE
Important: freerdp security update (Oracle Linux 7)
[2.0.0-4.rc4.1] - CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841974)
-
HighELSA-2020-2381 3 CVEs
Important: firefox security update (Oracle Linux 7)
[68.9.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Fri May 29 2020 Jan Horak <jhorak@redhat.com> - Update t…
-
HighELSA-2020-2334 3 CVEs
Important: freerdp security update (Oracle Linux 7)
[2.0.0-4.rc4] - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)
-
HighELSA-2020-2379 3 CVEs
Important: firefox security update (Oracle Linux 8)
[68.9.0-1.0.1.el8_2] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] * Fri May 29 2020 Jan Horak <jhorak@redhat.com…
-
HighELSA-2020-5706 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.46.1] - ipv6: only static routes qualify for equal cost multipathing (Hannes Frederic Sowa) [Orabug: 30977687] {CVE-2013-4125} - USB: adutux: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31240296] {CVE-2019-19523} - USB: cor…
-
High max 8.6ELSA-2020-2338 2 CVEs
Important: bind security update (Oracle Linux 8)
[32:9.11.13-5] - Limit number of queries triggered by a request (CVE-2020-8616) [32:9.11.13-4] - Fix invalid tsig request (CVE-2020-8617)
-
HighELSA-2020-2336 3 CVEs
Important: freerdp security update (Oracle Linux 8)
[2:2.0.0-46.rc4.1] - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837632) - CVE-2020-11523: Fix integer overflow in region.c (#1837633) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837631)
-
HighELSA-2020-2407 1 CVE
Important: freerdp security update (Oracle Linux 8)
[2:2.0.0-46.rc4.2] - CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841978)
-
High max 6.6ELSA-2020-5708 12 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.39.5] - Input: ff-memless - kill timer in destroy() (Oliver Neukum) [Orabug: 31213691] {CVE-2019-19524} - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang) [Orabug: 31351307] {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897…
-
High max 8.6ELSA-2020-2344 2 CVEs
Important: bind security update (Oracle Linux 7)
[32:9.11.4-16.P2.6] - Fix EDNS512 loops on broken servers [32:9.11.4-16.P2.5] - Add CVE tests to codebase [32:9.11.4-16.P2.4] - Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) [32:9.11.4-16.P2.3] - Dis…
-
High max 4.0ELSA-2020-2337 1 CVE
Important: git security update (Oracle Linux 7)
[1.8.3.1-23] - Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008
-
HighELSA-2020-5691 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.2.2uek] - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31225231] - xfs: move inode flush to the sync workqueue (Darrick J. Wong) [Orabug: 31132665] - arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for…
-
High max 5.9ELSA-2020-2082 3 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1127.8.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1127.8.2] - [net] netlabe…
-
High max 8.8ELSA-2020-1926 1 CVE
Important: container-tools:1.0 security and bug fix update (Oracle Linux 8)
buildah [1.5-4.0.1.gite94b4f9] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.5-4.gite94b4f9] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: #1819431 containe…
-
High max 7.5ELSA-2020-2143 1 CVE
Important: .NET Core security update (Oracle Linux 8)
[2.1.514-2] - Update to new tarball for the release - Resolves: RHBZ#1830065 [2.1.514-1] - Update to .NET Core SDK 2.1.514 and Runtime 2.1.18 - Resolves: RHBZ#1830065
-
High max 5.9ELSA-2020-2102 3 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-193.1.2_2.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.1.2_2] - [net…
-
High max 8.8ELSA-2020-1932 1 CVE
Important: container-tools:ol8 security update (Oracle Linux 8)
buildah [1.11.6-8.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-8] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: #1817742 [1.11.6-7] - fix 'COPY c…
-
High max 8.8ELSA-2020-1931 1 CVE
Important: container-tools:2.0 security update (Oracle Linux 8)
buildah [1.11.6-7.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-7] - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: #1819393 conmon [2:2.0.6-1.0.1] -…
-
High max 7.5ELSA-2020-2070 1 CVE
Important: libreswan security update (Oracle Linux 8)
[3.29-7.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [3.29-7] - Resolves: rhbz#1814935 CVE-2020-1763 doS attack via malicious IKEv1 informational exchange message [rhel-8.2.0.z]
-
HighELSA-2020-2041 3 CVEs
Important: squid:4 security update (Oracle Linux 8)
squid [7:4.4-8.1] - Resolves: #1828368 - CVE-2019-12519 squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow - Resolves: #1828367 - CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce …
-
High max 7.8ELSA-2020-5676 16 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.302.2] - KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (Marios Pomonis) [Orabug: 31191092] - KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (Marios Pomonis) [Orabug: 31191092] …
-
HighELSA-2020-5674 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.7.0-13.el7] - domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have) [Orabug: 31145304] - qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman) - build: Fix qemu-submodule-init syntax-check issue (Wim ten Have) - libvirt:…
-
HighELSA-2020-2040 3 CVEs
Important: squid security update (Oracle Linux 7)
[7:3.5.20-15.1] - Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution - Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in ESIExpression::E…
-
High max 7.9ELSA-2020-5671 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.45.1] - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton) [Orabug: 31206361] {CVE-2019-19527} - HID: hiddev: avoid opening a disconnected device (Hillf Danton) [Orabug: 31206361] {CVE-2019-19527} - HID: Fix assumptio…
-
High max 7.8ELSA-2020-1933 1 CVE
Important: targetcli security update (Oracle Linux 8)
[2.1.51-4] - Increase the release version [2.1.51-3] - targetclid.sock allows unprivileged user to execute commands [2.1.51-2] - Create the target/pr directory when installing the package
-
High max 4.0ELSA-2020-1980 1 CVE
Important: git security update (Oracle Linux 8)
[2.18.4-2] - Update to release 2.18.4 - Resolves: CVE-2020-11008
-
High max 7.9ELSA-2020-5670 18 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.39.1] - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 (Arun Easi) [Orabug: 30372266] - qla2xxx: Fix device discovery when FCP2 device is lost. (Arun Easi) [Orabug: 30372266] - brcmfmac: add subtype check for event handling in data path (…