5,096 results · Clear filters · Feed
-
High max 7.5ELSA-2020-1769 16 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)
[4.18.0-193.el8.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.el8] - [kvm] KV…
-
High max 7.8ELSA-2020-5663 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe) [Orabug: 31136750] {CVE-2020-11494} - blktrace: Protect q->blk_trace with RC…
-
High max 9.8ELSA-2020-1561 2 CVEs
Important: python-twisted-web security update (Oracle Linux 7)
[12.1.0-7] - Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities Resolves: rhbz#1813439 rhbz#1813447 - Remove useless macros definitions
-
High max 8.3ELSA-2020-1507 8 CVEs
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.261-2.6.22.2.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.261-2.6.22.2] - Modify NEWS installation to avoid subpackage naming. - Resolves: rhbz#1810557 [1:1.7.0.261-2.6.22.1] - Add release notes from IcedTea. - Mark license files with appropriate m…
-
High max 9.3ELSA-2020-1511 1 CVE
Important: git security update (Oracle Linux 7)
[1.8.3.1-22 ] - Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260
-
High max 8.3ELSA-2020-1509 13 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.7.10-4.0.1] - link atomic for ix86 build [1:11.0.7.10-4] - Add JDK-8228407 backport to resolve crashes during verification. - Resolves: rhbz#1810557 [1:11.0.7.10-3] - Amend release notes, removing issue actually fixed in 11.0.6. - Resolves: rhbz#18105…
-
High max 8.3ELSA-2020-1512 10 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.252.b09-2] - Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-1] - Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-0] - Update to aarch64-…
-
High max 8.3ELSA-2020-1515 10 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.252.b09-2] - Add release notes. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-1] - Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-0] - Update to aarch64-shenandoah-jdk8u252-b09. - Switch to GA mode …
-
High max 9.3ELSA-2020-1513 1 CVE
Important: git security update (Oracle Linux 8)
[2.18.2-2] - Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260
-
High max 8.3ELSA-2020-1514 13 CVEs
Important: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.7.10-1] - Add JDK-8228407 backport to resolve crashes during verification. - Resolves: rhbz#1810557 [1:11.0.7.10-1] - Amend release notes, removing issue actually fixed in 11.0.6. - Resolves: rhbz#1810557 [1:11.0.7.10-1] - Re-apply --with-extra-asflag…
-
High max 8.1
Important: thunderbird security update (Oracle Linux 8)
[68.7.0-1.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.7.0-1] - Update to 68.7.0 build1
-
HighELSA-2020-5654 0 CVEs
Important: kubernetes kubeadm-ha-setup kubeadm-upgrade security update (Oracle Linux 7)
kubernetes [1.12.10-1.0.11] - [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads [1.12.10-1.0.10] - [CVE-2019-16276] Kubernetes Vulnerabilities Allow Authentication Bypass, DoS [1.12.10-1.0.9] - Define rolling update …
-
High max 8.1
Important: thunderbird security update (Oracle Linux 7)
[68.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.7.0-1] - Update to 68.7.0 build1
-
High max 6.5ELSA-2020-5653 1 CVE
Important: olcne kubernetes security update (Oracle Linux 7)
olcne [1.0.3-1] - updated the default Kubernetes version to 1.14.9 kubernetes [1.14.9-1.0.3] - [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads [1.14.9-1.0.2] - Use bounded crio version [1.14.9-1.0.1] - Added Oracle…
-
HighELSA-2020-1317 1 CVE
Important: nodejs:10 security update (Oracle Linux 8)
nodejs [1:10.19.0-2] - Resolves: RHBZ#1811498 [1:10.19.0-1] - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 [1:10.16.3-1] - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 [1:10.14.1-1] - Resolves: RHBZ#1644207 - fixes node-gyp permissions…
-
HighELSA-2020-1379 1 CVE
Important: container-tools:ol8 security and bug fix update (Oracle Linux 8)
buildah [1.11.6-6.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.11.6-6] - fix COPY command takes long time with buildah - Resolves: #1806119 [1.11.6-5] - fix Podman support for FIPS Mode requires a bind mount inside the container - Re…
-
High max 7.7ELSA-2020-1358 2 CVEs
Important: virt:ol security and bug fix update (Oracle Linux 8)
qemu-kvm [2.12.0-88.0.1.el8_1_0.3] - Added bug30251155-remove-upstream-reference [Orabug: 30251155] [2.12.0-88.el8_1_0.3] - kvm-tcp_emu-Fix-oob-access.patch [bz#1791565] - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791565] - kvm-slirp-…
-
HighELSA-2020-5649 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.301.1] - vhost: Check docket sk_family instead of call getname (Eugenio Perez) [Orabug: 31085991] {CVE-2020-10942} - uek-rpm: config-mips64-embedded misc pruning (Eric Saint-Etienne) [Orabug: 31079017] - ubifs: Check for name being NULL while mo…
-
HighELSA-2020-1420 3 CVEs
Important: firefox security update (Oracle Linux 7)
[68.7.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.7.0-2] - Update to 68.7.0 build3
-
HighELSA-2020-1334 1 CVE
Important: telnet security update (Oracle Linux 7)
[1:0.17-65] - Resolves: #1814475 - Arbitrary remote code execution in utility.c via short writes or urgent data
-
HighELSA-2020-1208 1 CVE
Important: qemu-kvm security update (Oracle Linux 7)
[1.5.3-173.el7_8.1] - kvm-util-add-slirp_fmt-helpers.patch [bz#1798970] - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798970] - Resolves: bz#1798970 (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.8.z])
-
HighELSA-2020-5644 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.44.1] - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost) [Orabug: 31055328] {CVE-2019-18806} - swiotlb: clean up reporting (Kees Cook) [Orabug: 31085018] {CVE-2018-5953}
-
HighELSA-2020-1406 3 CVEs
Important: firefox security update (Oracle Linux 8)
[68.7.0-2.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.7.0-2] - Update to 68.7.0 build3 [68.6.1-1…
-
HighELSA-2020-5642 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.38.1] - rds: transport module should be auto loaded when transport is set (Rao Shoaib) [Orabug: 31031928] - KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li) [Orabug: 31078882] - vhost: Check docket sk_family instead of call getname (Eugen…
-
HighELSA-2020-1318 1 CVE
Important: telnet security update (Oracle Linux 8)
[1:0.17-73.1] - Resolves: #1814473 - Arbitrary remote code execution in utility.c via short writes or urgent data
-
HighELSA-2020-1116 1 CVE
Important: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-173.el7] - kvm-tcp_emu-Fix-oob-access.patch [bz#1791560] - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560] - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560] - Resolves: bz#1791560 (CVE-2020-7039 qemu-kv…
-
High max 7.5ELSA-2020-5662 1 CVE
Important: tcpdump security update (Oracle Linux 7)
[4.9.2-4.0.1.el7_7.1] - Fix [CVE-2018-14468] [Orabug: 30480183]
-
HighELSA-2020-1293 1 CVE
Important: nodejs:12 security update (Oracle Linux 8)
nodejs [1:12.16.1-2] - Fix CVE-2020-10531 [1:12.16.1-1] - Resolves: RHBZ#1800393, RHBZ#1800394, RHBZ#1800380 - Rebase to 12.16.1 [1:12.14.1-1] - Rebase to 12.14.1 [1:12.13.1-1] - Resolves: RHBZ# 1773503, update to 12.13.1 - minor clean up and sync with Fedora…
-
High max 7.7ELSA-2020-0984 1 CVE
Important: ipmitool security update (Oracle Linux 7)
[0:1.8.18-9] - Disable -fstrict-aliasing (RPMDiff issue) [0:1.8.18-8] - Backport fix for CVE-2020-5208
-
High max 8.8ELSA-2020-0913 1 CVE
Important: libvncserver security update (Oracle Linux 7)
[0.9.9-14] - Fix CVE-2019-15690 (an integer overflow in HandleCursorShape() in a client) (bug #1814339)
-
High max 7.7ELSA-2020-0981 1 CVE
Important: ipmitool security update (Oracle Linux 8)
[1.8.18-12] - Disable -fstrict-aliasing (RPMDiff issue) [1.8.18-11] - Backport fix for CVE-2020-5208
-
High max 8.8ELSA-2020-0920 1 CVE
Important: libvncserver security update (Oracle Linux 8)
[0.9.11-9.2] - Enable gating (bug #1681199) [0.9.11-9.1] - Fix CVE-2019-15690 (an integer overflow in HandleCursorShape() in a client) (bug #1814342)
-
HighELSA-2020-0919 7 CVEs
Important: thunderbird security update (Oracle Linux 8)
[68.6.0-1.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.6.0-1] - Update to 68.6.0 build2
-
High max 9.8
Important: tomcat security update (Oracle Linux 7)
[0:7.0.76-11] - Resolves: rhbz#1806801 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
-
HighELSA-2020-0905 7 CVEs
Important: thunderbird security update (Oracle Linux 7)
[68.6.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.6.0-1] - Update to 68.6.0 build2
-
HighELSA-2020-0903 1 CVE
Important: zsh security update (Oracle Linux 8)
[5.5.1-6.el8_1.2] - improve printing of error messages introduced by the fix of CVE-2019-20044 [5.5.1-6.el8_1.1] - drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)
-
HighELSA-2020-0902 1 CVE
Important: icu security update (Oracle Linux 8)
[60.3-2] - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808238
-
High max 5.5ELSA-2020-0834 3 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-1062.18.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.18.1] - [x86] x86/b…
-
HighELSA-2020-0897 1 CVE
Important: icu security update (Oracle Linux 7)
[50.2-4] - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808235
-
HighELSA-2020-0853 1 CVE
Important: zsh security update (Oracle Linux 7)
[5.0.2-34.el7_7.2] - improve printing of error messages introduced by the fix of CVE-2019-20044 [5.0.2-33.el7_7.1] - drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)