5,096 results · Clear filters · Feed
-
High max 8.1ELSA-2019-0766 2 CVEs
Important: mod_auth_mellon security and bug fix update (Oracle Linux 7)
[0.14.0-2.4] - Actually apply the patch in the previous build - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open redirect in logout url when using URLs with backslashes [0.14.0-2.3] - Resolves: rhbz#1697488 - CVE-2019-3877 mod_auth_mellon: open re…
-
HighELSA-2019-4609 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.9.11-2.5.1] - [OLCNE-235] [CVE-2019-9946] portmap inserts rules at the front of the iptables nat chains [1.9.11-2.4.1] - [CVE-2019-1002101] kubectl fix potential directory traversal [1.9.11-2.3.1] - [CVE-2019-1002100] Limit the number of operations in a si…
-
HighELSA-2019-4610 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.10.5-2.5.4] - [OLCNE-235] [CVE-2019-9946] portmap inserts rules at the front of the iptables nat chains [1.10.5-2.4.4] - [CVE-2019-1002101] kubectl fix potential directory traversal [1.10.5-2.3.4] - [CVE-2019-1002100] Limit the number of operations in a si…
-
High max 6.4ELSA-2019-4593 2 CVEs
Important: kubernetes kubeadm-upgrade kubeadm-ha-setup security update (Oracle Linux 7)
kubernetes [1.12.7-1.1.2] - [OLCNE-257] fix coredns issue and minor upgrade issue [1.12.7-1.1.1] - [OLCNE-235] [CVE-2019-9946] portmap inserts rules at the front of the iptables nat chains [1.12.7-1.0.1] - Add Oracle Build Files For Version v1.12.7 kubeadm-up…
-
HighELSA-2019-4611 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.11.3-2.5.2] - [OLCNE-235] [CVE-2019-9946] portmap inserts rules at the front of the iptables nat chains [1.11.3-2.4.2] - [CVE-2019-1002101] kubectl fix potential directory traversal [1.11.3-2.3.2] - [CVE-2019-1002100] Limit the number of operations in a si…
-
HighELSA-2019-4612 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1844.4.5] - x86/apic/x2apic: set back affinity of a single interrupt to one cpu (Mridula Shastry) [Orabug: 29510342] [4.14.35-1844.4.4] - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner) [Orabug: 29598590] - swiotlb: checking …
-
High max 5.3ELSA-2019-0710 1 CVE
Important: python security update (Oracle Linux 7)
[2.7.5-77.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-77] - Security fix for CVE-2019-9636 Resolves: rhbz#1689316
-
High max 7.3ELSA-2019-4600 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.32.1] - x86/fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Oleg Nesterov) [Orabug: 29012034] - x86/fpu: Always allow FPU in interrupt if use_eager_fpu() (Oleg Nesterov) [Orabug: 29012034] - x86/fpu: Fix 32-bit signal frame hand…
-
HighELSA-2019-4597 1 CVE
Important: docker-engine security update (Oracle Linux 7)
[18.03.1.ol-0.0.14] - rebuild [18.03.1.ol-0.0.13] - update for CVE-2018-20699
-
HighELSA-2019-0697 3 CVEs
Important: freerdp security update (Oracle Linux 7)
[1.0.2-15.1] - Fix CVE-2018-8786 (#1684152) - Fix CVE-2018-8787 (#1684156) - Fix CVE-2018-8788 (#1684163)
-
HighELSA-2019-4598 0 CVEs
Important: docker-engine security update (Oracle Linux 7)
[17.06.2.ol-1.0.7] - update for CVE-2018-20699
-
High max 4.8ELSA-2019-4596 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.7] - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker) [Orabug: 29384815] - Revert 'x86/apic: Make arch_setup_hwirq NUMA node aware' (Brian Maly) [Orabug: 29542185] - qlcnic: fix Tx descriptor corruption on 82xx devi…
-
High max 7.5ELSA-2019-0679 4 CVEs
Important: libssh2 security update (Oracle Linux 7)
[1.4.3-12.el7_6.2] - sanitize public header file (detected by rpmdiff) [1.4.3-12.el7_6.1] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863) - fix integer overflow in SSH packet processing channel resultin…
-
HighELSA-2019-0681 10 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.6.1-1] - Update to 60.6.1 [60.6.0-1] - Update to 60.6.0
-
High max 4.2ELSA-2019-4594 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.5] - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard) [Orabug: 29487790] - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis) [Orabug: 29469740] [4.1.12-124.26.4U] - bnxt_en:…
-
High max 7.5ELSA-2019-0638 1 CVE
Important: openwsman security update (Oracle Linux 7)
[2.6.3-6.git4391e5c] - Update the fix for CVE-2019-3816 Resolves: #1668657 - Remove Dist Tag from the oldest changelog entry [2.6.3-5.git4391e5c] - Fix CVE-2019-3816 Resolves: #1668657
-
High max 7.3ELSA-2019-0633 2 CVEs
Important: ghostscript security and bug fix update (Oracle Linux 7)
[9.07-31.el7_6.10] - Resolves: #1673915 - ghostscript: Regression: double comment chars '%' in gs_init.ps leading to missing metadata - Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator is available (700585) - Resolves: #1680025 - CVE-2019-38…
-
High max 7.5ELSA-2019-4585 50 CVEs
Important: qemu security update (Oracle Linux 7)
[15:3.1.0-1.el7] - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu) [Orabug: 29216696] - vfio-pci: add FAILOVER_PRIMARY_CHANGED event to …
-
HighELSA-2019-0512 3 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-957.10.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.10.1] - [fs] revert '[fs]…
-
High max 7.3ELSA-2019-4575 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.1] - NFS: commit direct writes even if they fail partially (J. Bruce Fields) [Orabug: 28212440] - rds: update correct congestion map for loopback transport (Mukesh Kacker) [Orabug: 29175685] - ext4: only look at the bg_flags field if it is vali…
-
High max 5.0ELSA-2019-4576 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.31.1] - alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner) [Orabug: 29269167] {CVE-2018-13053} - KEYS: Don't permit request_key() to construct a new keyring (David Howells) [Orabug: 29304552] {CVE-2017-17807} - KEYS: …
-
HighELSA-2019-4570 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1844.3.2] - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour) [Orabug: 29357695] - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov) [Orabug: 29364665] {CVE-2018-16862} - l2tp: fix readi…
-
High max 7.0ELSA-2019-4556 9 CVEs
Important: qemu security update (Oracle Linux 7)
-
HighELSA-2019-4548 0 CVEs
Important: oraclelinux-release-el7 security update (Oracle Linux 7)
[1.0-5] - Fix ol_yum_configure.sh [ OraBug 29241080]
-
HighELSA-2019-0368 1 CVE
Important: systemd security update (Oracle Linux 7)
[219-62.0.4] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …
-
HighELSA-2019-0375 1 CVE
Important: flatpak security update (Oracle Linux 7)
[1.0.2-4] - Tweak /proc sandbox patch (#1675433) [1.0.2-3] - Do not mount /proc in root sandbox (#1675433)
-
HighELSA-2019-4551 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[18.03.1.ol-0.0.12] - correct the version string of containerd [18.03.1.ol-0.0.11] - update runc for CVE-2019-5736 [18.03.1.ol-0.0.10] - update Go to version 1.10.8 [18.03.1.ol-0.0.9] - correct changelog [18.03.1.ol-0.0.8] - fix [orabug 28452214] and [orabug …
-
HighELSA-2019-0374 2 CVEs
Important: firefox security update (Oracle Linux 7)
[60.5.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.5.1-1] - Update to 60.5.1 ESR [60.5.0-3] - Added fix for rhbz#1672424 - Firefox crashes on NFS drives.
-
HighELSA-2019-4550 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[17.06.2.ol-1.0.6] - update the version string of runc to show the CVE fixed [17.06.2.ol-1.0.4] - build using Go 1.10.8 - apply fix for runc CVE-2019-5736 [17.06.2.ol-1.0.3] - spec: do not replace config files (Jacob Wen) [Orabug: 28235986]
-
HighELSA-2019-4546 1 CVE
Important: kubernetes security update (Oracle Linux 7)
kubernetes [1.9.11-2.2.1] - CVE-2019-6486 [1.9.11-2.1.1] - Fix kubeadm-registry.sh - Use golang 1.9.3 - [CVE-2018-1002105] Handle error responses from backends - Bump to v1.9.11 [1.9.1-2.1.7] - [Orabug 27803001] [1.9.1-2.1.5] - Production built 1.9.1-2.1.5 - …
-
High max 6.1ELSA-2019-4541 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1844.2.5] - x86/apic: Switch all APICs to Fixed delivery mode (Thomas Gleixner) [Orabug: 29262403] [4.14.35-1844.2.4] - x86/platform/UV: Add check of TSC state set by UV BIOS (mike.travis@hpe.com) [Orabug: 29205471] - x86/tsc: Provide a means to disa…
-
HighELSA-2019-4540 1 CVE
Important: runc security update (Oracle Linux 7)
[1.0.0-19.rc5.git4bb1fe4.0.3.el7] - Apply patch for CVE-2019-5736 (Wiekus Beukes) [1.0.0-19.rc5.git4bb1fe4.0.2.el7] - update Go version to 1.10.8, fix version string (Laszlo (Laca) Peter) [1.0.0-19.rc5.git4bb1fe4.0.1.el7] - Tuning .spec file [2:1.0.0-19.rc5.g…
-
High max 5.5ELSA-2019-4531 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.25.1] - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky) [Orabug: 28870524] {CVE-2018-3639} - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk) [Orabug: 28870524] {CVE-2018-3639} - x86/cpufeatures: rename X86_FEAT…
-
HighELSA-2019-4532 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.30.1] - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} - ext4: always initialize the crc32c checksum driver (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} {CVE-2018-1…
-
HighELSA-2019-0270 4 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.5.0-1] - Update to 60.5.0
-
HighELSA-2019-0230 1 CVE
Important: polkit security update (Oracle Linux 7)
[0.112-18.0.1] - Increase timeout to avoid defunct processes [bug26930744] [0.112-18.el7_6.1] - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667311
-
HighELSA-2019-0231 1 CVE
Important: spice security update (Oracle Linux 7)
[0.14.0-6.0.2.1] - Add ARM support [0.14.0-6.1] - Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813
-
HighELSA-2019-0229 5 CVEs
Important: ghostscript security and bug fix update (Oracle Linux 7)
[9.07-31.el7_6.9] - Related: #1667442 - CVE-2019-6116 - added missing parts of patch [9.07-31.el7_6.8] - Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators [9.07-31.el7_6.7] - Resolves: #166…
-
HighELSA-2019-4528 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.24.5] - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker) [Orabug: 28425811] - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra) [Orabug: 28127993] - net: rds: fix excess i…
-
HighELSA-2019-0163 2 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
- [3.10.0-957.5.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.5.1] - [fs] revert '[fs]…