5,096 results · Clear filters · Feed
-
HighELSA-2019-1771 1 CVE
Important: cyrus-imapd security update (Oracle Linux 8)
[3.0.7-15.1] - Resolves: #1718194 - don't overrun buffer when parsing strings with sscanf()
-
HighELSA-2019-1799 8 CVEs
Important: thunderbird security and bug fix update (Oracle Linux 8)
[60.8.0-1.0.1] [60.8.0-1] - Updated to 60.8.0 [60.7.2-3] - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2.
-
High max 9.8ELSA-2019-1529 4 CVEs
Important: pki-deps:10.6 security update (Oracle Linux 8)
apache-commons-collections [3.2.2-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [3.2.2-9] - Remove workaround for symlink->directory rpm bug jackson-bom [2.9.8-1] - Update to latest upstream release [2.9.4-2] - Rebuilt for https://fe…
-
High max 7.5ELSA-2019-1145 1 CVE
Important: bind security update (Oracle Linux 8)
[32:9.11.4-17.P2] - Fix inefective limit of TCP clients (CVE-2018-5743)
-
High max 7.5ELSA-2019-1259 4 CVEs
Important: dotnet security, bug fix, and enhancement update (Oracle Linux 8)
[2.1.507-2] - Link against strerror_r correctly - Resolves: RHBZ#1712471 [2.1.507-1] - Update to .NET Core Runtime 2.1.11 and SDK 2.1.507 - Resolves: RHBZ#1710068 [2.1.506-1] - Update to .NET Core Runtime 2.1.10 and SDK 2.1.506 - Resolves: RHBZ#1696836
-
High max 8.8ELSA-2019-1279 3 CVEs
Important: pacemaker security and bug fix update (Oracle Linux 8)
[2.0.1-4.3] - New build with fixed test in gating.yaml - Resolves: rhbz#1694557 - Resolves: rhbz#1695247 - Resolves: rhbz#1697264 - Resolves: rhbz#1697265 [2.0.1-4.2] - New build to apply z-stream tag - Resolves: rhbz#1694557 - Resolves: rhbz#1695247 - Resolv…
-
HighELSA-2019-1146 3 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.212.b04-1] - Remove additions to EXTRA_CFLAGS and EXTRA_CPP_FLAGS which are now made by upstream. - Resolves: rhbz#1693468 [1:1.8.0.212.b04-1] - Add JDK-8223219 to avoid -fstack-protector overriding -fstack-protector-strong - Resolves: rhbz#1693468 […
-
High max 5.3ELSA-2019-1308 12 CVEs
Important: thunderbird security update (Oracle Linux 8)
[60.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.0-1] - Update to 60.7.0
-
High max 7.3ELSA-2019-0971 3 CVEs
Important: ghostscript security update (Oracle Linux 8)
[9.25-2.1] - Resolves: #1692798 - CVE-2019-3839 ghostscript: missing attack vector protections for CVE-2019-6116 - Resolves: #1678170 - CVE-2019-3835 ghostscript: superexec operator is available (700585) - Resolves: #1691414 - CVE-2019-3838 ghostscript: force…
-
High max 8.6ELSA-2019-1152 1 CVE
Important: python-jinja2 security update (Oracle Linux 8)
[2.10.1-2] - Rebuild of package to go through gating - Resolves: rhbz#1701300 [2.10.1-1] - Rebase to 2.10.1 (security update) to fix CVE-2019-10906 - Resolves: rhbz#1701300 [2.10-9] - Require platform-python-setuptools instead of python3-setuptools - Resolves…
-
HighELSA-2019-0983 1 CVE
Important: wget security update (Oracle Linux 8)
[1.19.5-7.0.1.1] - SSLv3 support dropped from openssll, v3 test certificates need to be replaced [Orabug: 29613455] [1.19.5-7.1] - Fix tests with on armhfp [1.19.5-7.1] - Fix CVE-2019-5953 (#1696735)
-
High max 9.8ELSA-2019-0981 3 CVEs
Important: python27:2.7 security update (Oracle Linux 8)
Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 PyYAML [3.12-16] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 babel [2.5.1-9] - Bumping due to problems …
-
High max 7.5ELSA-2019-1479 4 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-80.4.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.4.2_0] - [net] …
-
High max 7.8
Important: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-11.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-11] - Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation from modules scripts - Resolves: #16…
-
High max 5.9ELSA-2019-1167 4 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-80.1.2_0.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-80.1.2_0] - [arm64…
-
High max 10.0
Important: thunderbird security update (Oracle Linux 8)
[60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1
-
High max 5.3ELSA-2019-0997 1 CVE
Important: python3 security update (Oracle Linux 8)
[3.6.8-2.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-2] - Security fix for CVE-2019-9636 (rhbz#1693973)
-
HighELSA-2019-1142 2 CVEs
Important: freeradius:3.0 security update (Oracle Linux 8)
[3.0.17-4] - Fixes two EAP-PWD security issues Resolves: bz#1699416 authentication bypass with an invalid curve attack
-
HighELSA-2019-1143 1 CVE
Important: flatpak security update (Oracle Linux 8)
[1.0.6-3] - Fix IOCSTI sandbox bypass (#1700653)
-
HighELSA-2019-1144 10 CVEs
Important: thunderbird security update (Oracle Linux 8)
[60.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.6.1-1] - Update to 60.6.1 [60.6.0-1] - Update to 60.6.0
-
High max 8.1ELSA-2019-0985 1 CVE
Important: mod_auth_mellon security update (Oracle Linux 8)
[0.14.0-3.2] - Resolves: rhbz#1696197 - CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow [rhel-8.0.0.z]
-
HighELSA-2019-0975 1 CVE
Important: container-tools:ol8 security and bug fix update (Oracle Linux 8)
container-selinux [2:2.94-1.git1e99f1d] - Resolves: #1690286 - bump to v2.94 - Resolves: #1693806, #1689255 [2:2.89-1.git2521d0d] - bump to v2.89 runc [1.0.0-55.rc5.dev.git2abd837] - Resolves: CVE-2019-5736
-
High max 7.5ELSA-2019-1175 9 CVEs
Important: virt:ol security update (Oracle Linux 8)
libguestfs [1:1.38.4-10.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-10.1] - Fix inspection of partition-less devices resolves: rhbz#1714747 libssh2 [1.8.0-7.el8_0.1] - fix inte…
-
High max 8.8ELSA-2019-1268 1 CVE
Important: virt:ol security update (Oracle Linux 8)
[4.5.0-23.2.0.1.el8] - added librbd1 as dependency (Keshav Sharma) [4.5.0-23.2.el8] - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode…
-
High max 8.8ELSA-2019-1580 4 CVEs
Important: virt:ol security update (Oracle Linux 8)
libguestfs [1:1.38.4-10.1.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-10.1] - Fix inspection of partition-less devices resolves: rhbz#1714747 libssh2 [1.8.0-7.el8_0.1] - fix in…
-
High max 3.3ELSA-2019-4716 1 CVE
Important: kubernetes security update (Oracle Linux 7)
[1.12.7-1.2.3] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.12.7-1.1.3] - [OCNE-372] kubeadm: properly umount dirs in /var/lib/kubelet
-
HighELSA-2019-4729 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.29.3] - mlx4_core: change log_num_{qp,rdmarc} with scale_profile (Mukesh Kacker) [Orabug: 30064080] [4.1.12-124.29.2] - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [Orabug: 30052805] [4.1.12-124.29.1] - USB:…
-
High max 3.3ELSA-2019-4717 1 CVE
Important: kubeadm-ha-setup security update (Oracle Linux 7)
[0.0.2-1.0.52] - [OLCNE-678] Restore fails when trying to restore after a failed update [0.0.2-1.0.51] - [OLCNE-667] Minor version update doesn't update kubeadm on all master nodes [0.0.2-1.0.50] - Make k8s 1.14 specific changes [0.0.2-1.0.49] - [OLCNE-668] R…
-
HighELSA-2019-4719 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.10.5-2.7.4] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.10.5-2.6.4] - [OLCNE-383] [CVE-2019-11243] Authentication information exposure in rest.AnonymousCl…
-
HighELSA-2019-4720 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.9.11-2.7.1] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.9.11-2.6.1] - [OLCNE-382] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the sa cre…
-
HighELSA-2019-4718 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.11.3-2.7.2] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.11.3.2.6.2] - [OLCNE-384] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the servic…
-
HighELSA-2019-1619 1 CVE
Important: vim security update (Oracle Linux 7)
[2:8.0.1763-11] - 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]
-
HighELSA-2019-1775 8 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.8.0-1] - Updated to 60.8.0 [60.7.2-3] - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2.
-
High max 8.8ELSA-2019-4714 8 CVEs
Important: libvirt security update (Oracle Linux 7)
[5.0.0-9.el7] - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten Have) [Orabug: 29956508] [5.0.0-8.el7] - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Jan Tomko) [Orabug: 29955742] {CVE-2019-10161} - domain: De…
-
High max 5.6ELSA-2019-4710 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.28.6] - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke) [Orabug: 29511036] - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke) [Orabug: 29511036] - sysctl: Fix kabi breakage (Shuning Zhang) [Orabug:…
-
HighELSA-2019-4713 5 CVEs
Important: qemu security update (Oracle Linux 7)
[15:3.1.0-5.el7] - Only enable the halt poll control MSR if it is supported by the host (Mark Kanda) [Orabug: 29946722] [15:3.1.0-4.el7] - kvm: i386: halt poll control MSR support (Marcelo Tosatti) [Orabug: 29933278] - Document CVEs as fixed: CVE-2017-9524, C…
-
HighELSA-2019-4708 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.3.1] - x86/platform/UV: Mark tsc_check_sync as an init function (mike.travis@hpe.com) [Orabug: 29701029] - mm, page_alloc: check for max order in hot path (Michal Hocko) [Orabug: 29924411] - net/mlx5: FW tracer, Enable tracing (Feras Daoud) [Ora…
-
HighELSA-2019-4703 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.36.1] - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925557] {CVE-2018-7191}
-
HighELSA-2019-4706 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.36.1] - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925557] {CVE-2018-7191}
-
High max 10.0
Important: thunderbird security update (Oracle Linux 7)
[60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1