5,096 results · Clear filters · Feed
-
HighELSA-2019-3951 1 CVE
Important: SDL security update (Oracle Linux 8)
[1.2.15-36] - Fix CVE-2019-13616 (a heap buffer over-read in BlitNtoN) (bug #1747237) - Resolves: rhbz#1756279
-
High max 6.5ELSA-2019-3832 3 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-147.0.2_1.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-147.0.2_1] - [drm…
-
HighELSA-2019-3871 1 CVE
Important: kernel security update (Oracle Linux 8)
[4.18.0-147.0.3_1.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-147.0.3_1] - [drm…
-
HighELSA-2019-3694 1 CVE
Important: sudo security update (Oracle Linux 8)
[1.8.25p1-8] - RHEL-8.1.0 - fixed CVE-2019-14287 Resolves: rhbz#1760696
-
High max 7.3ELSA-2019-3890 1 CVE
Important: ghostscript security update (Oracle Linux 8)
[9.25-5.1] - 1769342 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys
-
High max 6.5ELSA-2019-4854 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.40.1] - USB: check usb_get_extra_descriptor for proper size (Mathias Payer) [Orabug: 30045797] {CVE-2018-20169} - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke) [Orabug: 30393902] {CVE-2017-14991} - usb: misc…
-
High max 7.2ELSA-2019-4850 16 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.33.4] - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang) [Orabug: 30036349] - ocfs2: direct-IO: protect get_blocks (Junxiao Bi) [Orabug: 30036349] - SUNRPC: Remove xprt_connect_status() (Trond Myklebust) [Orabug: 30165…
-
High max 7.3ELSA-2019-3888 1 CVE
Important: ghostscript security update (Oracle Linux 7)
[9.25-2.3] - 1769340 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys
-
High max 6.5ELSA-2019-3834 3 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-1062.4.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.4.2] - [drm] drm/i91…
-
HighELSA-2019-3872 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-1062.4.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.4.3] - [drm] drm/i91…
-
High max 7.6ELSA-2019-3517 22 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)
[4.18.0-147.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-147] - [x86] perf/x86/i…
-
High max 6.5ELSA-2019-3401 4 CVEs
Important: 389-ds:1.4 security, bug fix, and enhancement update (Oracle Linux 8)
-
High max 6.4ELSA-2019-3494 2 CVEs
Important: container-tools:1.0 security and bug fix update (Oracle Linux 8)
-
High max 6.4ELSA-2019-3403 2 CVEs
Important: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
-
High max 6.5ELSA-2019-4837 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.32.3.2] - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) [Orabug: 30419233] {CVE-2019-11135} - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta) [Orabug: 30419233] {CVE-2019-11135} - x86/tsx: Add 'auto' op…
-
High max 6.5ELSA-2019-4838 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.39.1.1] - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) [Orabug: 30419232] {CVE-2019-11135} - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta) [Orabug: 30419232] {CVE-2019-11135} - x86/tsx: Ad…
-
High max 6.5ELSA-2019-4836 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.7.3] - rds: Rename rds_send_ping to rds_send_hs_ping (Hakon Bugge) [Orabug: 30418043] - rds: Use {READ,WRITE}_ONCE for heartbeat start and state (Hakon Bugge) [Orabug: 30418043] - rds: Change heartbeat params from module params to sysctl (Hakon …
-
High max 6.5ELSA-2019-3237 9 CVEs
Important: thunderbird security update (Oracle Linux 8)
[68.2.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.2.0-1] - Update to 68.2.0 [68.1.1-2] - Update to 68.1.1
-
High max 6.5ELSA-2019-3210 9 CVEs
Important: thunderbird security update (Oracle Linux 7)
[68.2.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.2.0-1] - Update to 68.2.0 [68.1.1-2] - Update to 68.1.1 [60.9.0-2] - Update to 60.9.0
-
HighELSA-2019-3134 14 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.232.b09-0] - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:1.8.0.232.b08-0.0.ea] - Update to aarch64-shenandoah-jd…
-
HighELSA-2019-3135 15 CVEs
Important: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.5.10-0.0.1] - link atomic for ix86 build (Livy Ge) [1:11.0.5.10-0] - Update to shenandoah-jdk-11.0.5+10 (GA) - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:11.…
-
HighELSA-2019-3127 15 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.5.10-0.0.1] - link atomic for ix86 build [1:11.0.5.10-0] - Update to shenandoah-jdk-11.0.5+10 (GA) - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:11.0.5.9-0.0.…
-
HighELSA-2019-3128 14 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.232.b09-0] - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:1.8.0.232.b08-0.0.ea] - Update to aarch64-shenandoah-jd…
-
High max 6.8ELSA-2019-3067 1 CVE
Important: jss security update (Oracle Linux 7)
* Thu Sep 12 2019 Dogtag PKI Team <pki-devel@redhat.com 4.4.6-3 - NVR bump [4.4.6-2] - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy 'Leaf and Chain' implicitly trusts the root certificate
-
HighELSA-2019-4823 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.32.3] - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke) [Orabug: 26941755] {CVE-2017-14991} - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu) [Orabug: 29707258] - Revert 'net_failover: delay taking ov…
-
High max 8.0ELSA-2019-3055 4 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1062.4.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.4.1] - [vhost] vhost…
-
HighELSA-2019-4821 1 CVE
Important: sudo security update (Oracle Linux 7)
[1.8.23-4.0.1] - Treat an ID of -1 as invalid since that means 'no change' [Orabug: 30421281] {CVE-2019-14287} - Add sudo_strtoid() tests for -1 and range errors. [Orabug: 30421281]
-
HighELSA-2019-4822 1 CVE
Important: sudo security update (Oracle Linux 8)
[1.8.25-4.0.1.el8.1] - Treat an ID of -1 as invalid since that means 'no change' [Orabug: 30421281] {CVE-2019-14287} - Add sudo_strtoid() tests for -1 and range errors. [Orabug: 30421281]
-
High max 7.5ELSA-2019-4820 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.6.6] - RDMA/restrack: Protect from reentry to resource return path (Leon Romanovsky) [Orabug: 30388717] [4.14.35-1902.6.5] - hv_netvsc: fix vf serial matching with pci slot info (Haiyang Zhang) [Orabug: 30373111] - rds: Use correct conn when dro…
-
High max 7.5ELSA-2019-4813 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[18.09.8-1.0.4] - Modified version to include ol suffix [ 18.09.8-1.0.3] - ol7 image related changes [ 18.09.8-1.0.2] - Merge upstream for CVE fixes.
-
HighELSA-2019-2964 2 CVEs
Important: patch security update (Oracle Linux 7)
[2.7.1-12] - Fixed CVE-2018-20969, invoke ed directly instead of using the shell
-
HighELSA-2019-4810 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.39.1] - tcp: purge write queue in tcp_connect_init() (Eric Dumazet) [Orabug: 30240134] {CVE-2019-15239} - cx24116: fix a buffer overflow when checking userspace params (Mauro Carvalho Chehab) [Orabug: 30254282] {CVE-2015-9289} - floppy:…
-
High max 7.5ELSA-2019-4808 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.32.1] - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust) [Orabug: 30124013] - x86/microcode: Update late microcode in parallel (Ashok Raj) [Orabug: 30302412] - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov) [Orabug:…
-
High max 7.5ELSA-2019-2925 8 CVEs
Important: nodejs:10 security update (Oracle Linux 8)
nodejs-packaging 17-3] - Change Requires to Recommends on nodejs dependency, so it is usable for building nodejs
-
High max 7.5ELSA-2019-2893 1 CVE
Important: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-12.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-12] - Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount of data request leads …
-
HighELSA-2019-2822 1 CVE
Important: dovecot security update (Oracle Linux 8)
[1:2.2.36-5.1] - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap memory writes (#1741788)
-
High max 7.2ELSA-2019-2827 1 CVE
Important: kernel security update (Oracle Linux 8)
- [4.18.0-80.11.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.11.2_0] - [v…
-
High max 7.2ELSA-2019-2829 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-1062.1.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] [3.10.0-1062.1.2] - [vhost] vhost…
-
High max 7.5ELSA-2019-4800 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.31.1.1] - KVM: coalesced_mmio: add bounds checking (Matt Delco) [Orabug: 30318042] {CVE-2019-14821} {CVE-2019-14821}
-
High max 7.5ELSA-2019-4799 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.5.2.2] - KVM: coalesced_mmio: add bounds checking (Matt Delco) [Orabug: 30318013] {CVE-2019-14821} {CVE-2019-14821}