5,096 results · Clear filters · Feed
-
High max 5.5ELSA-2018-4126 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.4] - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas) - fs/pstore: update the backend parameter in pstore module (Wang Long) [Orabug: 27994372] - kvm: vmx: Reinstate support for CPUs without virtual N…
-
High max 9.8ELSA-2018-1780 1 CVE
Important: xmlrpc security update (Oracle Linux 7)
[1:3.1.3-9] - Disallow deserialization of <ex:serializable> tags by default - Resolves: CVE-2016-5003
-
HighELSA-2018-1725 12 CVEs
Important: thunderbird security update (Oracle Linux 7)
[52.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [52.8.0-1] - Update to 52.8.0
-
High max 7.3ELSA-2018-1700 2 CVEs
Important: procps-ng security update (Oracle Linux 7)
[3.3.10-17.el7_5.2] - check for truncation after calling snprintf() - Related: CVE-2018-1124 [3.3.10-17.el7_5.1] - fix integer overflows leading to heap overflow in file2strvec() - Resolves: CVE-2018-1124
-
High max 5.5ELSA-2018-1629 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-862.3.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.3.2] - [x86] spec_ctrl: Fi…
-
High max 5.5ELSA-2018-1648 1 CVE
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.181-2.6.14.8.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.181-2.6.14.8] - added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578560
-
High max 5.5ELSA-2018-1632 1 CVE
Important: libvirt security update (Oracle Linux 7)
[3.9.0-14.el7_5.5] - cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
-
High max 5.5ELSA-2018-1649 1 CVE
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.171-8.b10] - added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578555
-
High max 5.5ELSA-2018-1633 1 CVE
Important: qemu-kvm security update (Oracle Linux 7)
[1.5.3-156.el7_5.2] - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075] - Resolves: bz#1574075 (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])
-
High max 5.5ELSA-2018-4114 8 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.2] - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner) {CVE-2018-3639} - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk) {CVE-2018-3639} - x86/bugs: Make cpu_show_common() static (Jiri Kosina…
-
HighELSA-2018-4108 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.1] - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee) [Orabug: 27260771] {CVE-2017-17448} - netlink: Add netns check on taps (Kevin Cernekee) [Orabug: 27260799] {CVE-2017-17449} - KVM: Fix stack-out-of-bounds read i…
-
HighELSA-2018-4109 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.21.1] - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav) [Orabug: 27208380] {CVE-2017-16537} - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov) [Orabug: 27215090] {CVE-2017-16643} - usb: usbtest: fix NULL po…
-
High max 7.5ELSA-2018-1380 1 CVE
Important: 389-ds-base security and bug fix update (Oracle Linux 7)
[1.3.7.5-21] - Bump version to 1.3.7.5-21 - Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch [1.3.7.5-20] - Bump version to 1.3.7.5-20 - Resolves: Bug 1563079 - adjustment of csn_generator can fa…
-
High max 8.0ELSA-2018-1318 6 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-862.2.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.2.3] - [x86] kvm: fix iceb…
-
High max 8.0ELSA-2018-4096 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.5] - vhost/scsi: fix reuse of &vq->iov[out] in response (Benjamin Coddington) [Orabug: 27928330] [4.1.12-124.14.4] - kernel.spec: add requires system-release for OL7 (Brian Maly) [Orabug: 27955380] - x86/kernel/traps.c: fix trace_die_notifier r…
-
HighELSA-2018-4098 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.20.7] - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski) {CVE-2018-8897}
-
High max 5.3ELSA-2018-1278 10 CVEs
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.181-2.6.14.5.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.181-2.6.14.5] - added depndence on latest c-j-c who do not have the incorrect jre-abrt handling - Resolves: rhbz#1559766 [1:1.7.0.181-2.6.14.3] - Bump release number to an unused one as rhel…
-
HighELSA-2018-4089 0 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.20.6] - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947608] {CVE-2018-100199} [3.8.13-118.20.5] - x86/microcode: probe CPU features on microcode update (Ankur Arora) [Orabug: 27806667] - x86/mic…
-
HighELSA-2018-4087 0 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.3] - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947602] {CVE-2018-100199}
-
High max 8.7ELSA-2018-1060 3 CVEs
Important: pcs security update (Oracle Linux 7)
[0.9.162-5.0.3.el7_5.1] - Unlike RHEL we DO have corosync/pacemaker for aarch64 on EL7 - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png [0.9.162-5.el7_5.1] - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing info…
-
High max 7.5ELSA-2018-1169 1 CVE
Important: corosync security update (Oracle Linux 7)
[2.4.3-2.1] - Resolves: rhbz#1560467 - totemcrypto: Check length of the packet
-
HighELSA-2018-4084 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.2] - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang) [Orabug: 27726302] - block: fix bio_will_gap() for first bvec with offset (Ming Lei) [Orabug: 27775588] - block: relax check on sg gap (Ming Lei) [Orabug: …
-
HighELSA-2018-1200 1 CVE
Important: patch security update (Oracle Linux 7)
[2.7.1-10] - Fixed Coverity reported issues [2.7.1-9] - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands
-
HighELSA-2018-4071 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.1] - ctf: drop the run-as-root error (Nick Alcock) [Orabug: 27852654] - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon) [Orabug: 27846191] - xfs: fix accidental reversion of aa6a6227435cb (Darrick J. Wong) [Orabug: 27845869] [4.1…
-
HighELSA-2018-1058 1 CVE
Important: libvorbis security update (Oracle Linux 7)
[1.3.3-8.1] - Backport fix for CVE-2018-5146
-
HighELSA-2018-1099 1 CVE
Important: firefox security update (Oracle Linux 7)
[52.7.3-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.7.3-1] - Update to 52.7.3 ESR
-
HighELSA-2018-1062 27 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
- [3.10.0-862.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862] - [netdrv] i40e: Fix attach…
-
High max 5.5ELSA-2018-4062 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-112.16.7] - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens) [Orabug: 27718305] - autofs: use dentry flags to block walks during expire (Ian Kent) [Orabug: 26032471] [Orabug: 27766149] - autofs races (Al Viro) [Orabug: 277…
-
HighELSA-2018-0648 6 CVEs
Important: thunderbird security update (Oracle Linux 7)
[52.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [52.7.0-1] - Update to 52.7.0
-
High max 8.8ELSA-2018-4061 2 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.9.1-2.1.5] - Production built 1.9.1-2.1.5 - Fix the upgrade version check - Remove w/a from [Orabug 27125915] [1.9.1-2.1.4.dev] - Make sure worker node upgrade properly - [Orabug 27649898] [1.9.1-2.1.3.dev] - Ensure that the runtime mounts RO volumes read-…
-
High max 9.8ELSA-2018-0592 1 CVE
Important: slf4j security update (Oracle Linux 7)
[0:1.7.4-4] - Disallow EventData deserialization by default (CVE-2018-8088)
-
High max 7.5ELSA-2018-0483 2 CVEs
Important: dhcp security update (Oracle Linux 7)
[12:4.2.5-58.0.1] - Added oracle-errwarn-message.patch [12:4.2.5-68] - Resolves: #1550000 - CVE-2018-5733 Avoid buffer overflow reference counter [12:4.2.5-58.2] - Resolves: #1549979 - CVE-2018-5732 Avoid buffer overflow in options parser
-
HighELSA-2018-0414 2 CVEs
Important: 389-ds-base security and bug fix update (Oracle Linux 7)
[1.3.6.1-28] - Bump version to 1.3.6.1-28 - Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 [1.3.6.1-27] - Bump version to 1.3.6.1-27 - Resolves: Bug 1536343 - Indexing of internationalize…
-
High max 5.5ELSA-2018-0395 2 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
- [3.10.0-693.21.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-693.21.1] - [x86] platform/…
-
High max 7.5ELSA-2018-0377 1 CVE
Important: quagga security update (Oracle Linux 7)
[0.99.22.4-5] - Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code - Resolves: rhbz#1546015
-
High max 9.8ELSA-2018-0378 11 CVEs
Important: ruby security update (Oracle Linux 7)
[2.0.0.648-33] - Fix always passing WEBrick test. [2.0.0.648-32] - Add Psych.safe_load * ruby-2.1.0-there-should-be-only-one-exception.patch * ruby-2.1.0-Adding-Psych.safe_load.patch Related: CVE-2017-0903 - Disable Tokyo TZ tests broken by recen tzdata updat…
-
HighELSA-2018-0349 14 CVEs
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.171-2.6.13.0.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.171-2.6.13.0] - Bump to 2.6.13 and u171b01. - Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080 - Update RC4 patch (8076221/PR2809) to apply after 8148108 (D…
-
HighELSA-2018-0350 1 CVE
Important: gcab security update (Oracle Linux 7)
[0.7-4] - Fixes the security issue known as CVE-2018-5345 - Resolves: #1533174
-
High max 7.1ELSA-2018-4040 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.20.3] - gre: fix a possible skb leak (Eric Dumazet) [Orabug: 26403972] {CVE-2017-9074} - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller) [Orabug: 26403972] {CVE-2017-9074} - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfr…
-
High max 5.6ELSA-2018-4025 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-112.14.14] - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao) [Orabug: 27234850] [Orabug: 27234850] - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov) [Orabug: 26988581] - x86/IBRS: Dro…