5,096 results · Clear filters · Feed
-
HighELSA-2015-0102 6 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-123.20.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.20.1] - [fs] seq_file: don't include mm.h in genksyms calculation (Ian Kent) [1184152 1183280] [3.10.0-123.19.1] - [mm] shmem: fix splicing from a hole while it's punched (Denys Vlase…
-
High max 3.4ELSA-2015-0085 12 CVEs
Important: java-1.6.0-openjdk security update (Oracle Linux 7)
[1:1.6.0.33-1.13.6.1.0.1.el5_11] - Add oracle-enterprise.patch [1:1.6.0.34-1.13.6.1] - Update to latest 1.13.6 release candidate tarball - Fixes a number of issues found with b34: - * OJ51, PR2187: Sync patch for 4873188 with 7 version - * OJ52, PR2185: Appli…
-
HighELSA-2015-0074 2 CVEs
Important: jasper security update (Oracle Linux 7)
[1.900.1-16.3] - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)
-
High max 9.8ELSA-2014-3110 3 CVEs
Important: docker security update (Oracle Linux 7)
[1.3.3-1.0.1] - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher - Rename as docker. - Re-enable btrfs graphdriver…
-
HighELSA-2014-2024 4 CVEs
Important: ntp security update (Oracle Linux 7)
[4.2.6p5-2] - don't generate weak control key for resolver (CVE-2014-9293) - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294) - fix buffer overflows via specially-crafted packets (CVE-2014-9295) - don't mobilize passive association when authenticati…
-
HighELSA-2014-3106 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.2.el6uek] - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara) [Orabug: 20224059] {CVE-2014-5471} {CVE-2014-5472} - x86_64, traps: Stop using IST for #SS (Andy Lutomirski) [Orabug: 20224027] {CVE-2014-9090}…
-
HighELSA-2014-2010 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-123.13.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.13.2] - [x86] traps: stop using IST for #SS (Petr Matousek) [1172812 1172813] {CVE-2014-9322}
-
HighELSA-2014-2021 3 CVEs
Important: jasper security update (Oracle Linux 7)
[1.900.1-16.2] - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566) - CVE-2014-8138 - heap overflow in jp2_decode (#1173566) [1.900.1-16.1] - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#11712…
-
HighELSA-2014-1984 1 CVE
Important: bind security update (Oracle Linux 7)
[32:9.9.4-14.0.1.el7_0.1] - Rebuild to fix libmysqlclient dependency [32:9.9.4-14.1] - Fix CVE-2014-8500 (#1171975)
-
HighELSA-2014-1983 13 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.15.0-7.0.1.el7_0.3] - Invalid BUG_RETURN_VAL fix, upstream patch (orabug 18896390) [1.15.0-7.3] - CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096, CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091, CVE-2014…
-
HighELSA-2014-3103 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.1] - ALSA: control: Protect user controls against concurrent access (Lars-Peter Clausen) [Orabug: 20192540] {CVE-2014-4652} - target/rd: Refactor rd_build_device_space + rd_release_device_space (Nicholas Bellinger) [Orabug: 20192516] {…
-
HighELSA-2014-1971 18 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-123.13.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.13.1] - [powerpc] mm: Make sure a local_irq_disable prevent a parallel THP split (Don Zickus) [1151057 1083296] - [powerpc] Implement __get_user_pages_fast() (Don Zickus) [1151057 108…
-
HighELSA-2014-1976 2 CVEs
Important: rpm security update (Oracle Linux 7)
[4.11.1-18] - Add check against malicious CPIO file name size (#1163060) - Fixes CVE-2014-8118 [4.11.1-17] - Fix race condidition where unchecked data is exposed in the file system (#1163060) - Fixes CVE-2013-6435
-
High max 7.3ELSA-2014-3095 2 CVEs
Important: docker security and bug fix update (Oracle Linux 7)
[1.3.2-1.0.1] - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher - Rename as docker. - Re-enable btrfs graphdriver…
-
HighELSA-2014-3096 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55] - freezer: set PF_SUSPEND_TASK flag on tasks that call freeze_processes (Colin Cross) [Orabug: 20082843] [3.8.13-54] - netfilter: nf_nat: fix oops on netns removal (Florian Westphal) [Orabug: 19988779] - tcp: tsq: restore minimal amount…
-
HighELSA-2014-1948 0 CVEs
Important: nss, nss-util, and nss-softokn security, bug fix, and enhancement update (Oracle Linux 7)
nss [3.16.2.3-2.0.1.el7_0] - Added nss-vendor.patch to change vendor [3.16.2.3-2] - Restore patch for certutil man page - supply missing options descriptions - Resolves: Bug 1165525 - Upgrade to NSS 3.16.2.3 for Firefox 31.3 [3.16.2.3-1] - Resolves: Bug 11655…
-
High max 8.8
Important: bash security update (Oracle Linux 7)
[4.2.45-5.4.0.1] - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. [orabug 19905256]
-
HighELSA-2014-1870 3 CVEs
Important: libXfont security update (Oracle Linux 7)
[1.4.5-4] - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601) - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601) - CVE-2014-0211: integer overflows calc…
-
HighELSA-2014-1861 18 CVEs
Important: mariadb security update (Oracle Linux 7)
[1:5.5.40-1] - Rebase to 5.5.40 Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464 CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520 CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564 Resolves: #1160548 …
-
HighELSA-2014-3087 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-44.1.5.el6uek] - net: sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [Orabug: 20010590] {CVE-2014-3687} - net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [Orabug: 20010577] {CVE-2014-3673}
-
HighELSA-2014-1767 4 CVEs
Important: php security update (Oracle Linux 7)
[5.4.16-23.3] - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 [5.4.16-23.2] - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 - core: fix integer overflow in unserialize() CVE-2014-3669 - exif: fix heap corruption issue i…
-
HighELSA-2014-3084 5 CVEs
Important: Unbreakable Enterprise kernel Security update (Oracle Linux 7)
kernel-uek [3.8.13-44.1.4.el7uek] - USB: whiteheat: Added bounds checking for bulk command response (James Forshaw) [Orabug: 19849334] {CVE-2014-3185} - HID: fix a couple of off-by-ones (Jiri Kosina) [Orabug: 19849317] {CVE-2014-3181} - kvm: vmx: handle invvp…
-
HighELSA-2014-1724 5 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-123.9.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.9.2] - [virt] kvm: fix PIT timer race condition (Petr Matousek) [1144879 1144880] {CVE-2014-3611} - [virt] kvm/vmx: handle invept and invvpid vm exits gracefully (Petr Matousek) [11454…
-
HighELSA-2014-3081 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-44.1.3.el7uek] - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen) [Orabug: 19817785] {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} - ALSA: control: Fix replacing user controls (Lars-Peter Clausen) [Or…
-
HighELSA-2014-1652 2 CVEs
Important: openssl security update (Oracle Linux 7)
[1.0.1e-30.2] - fix CVE-2014-3567 - memory leak when handling session tickets - fix CVE-2014-3513 - memory leak in srtp support - add support for fallback SCSV to partially mitigate CVE-2014-3566 (padding attack on SSL3) [1.0.1e-30] - add ECC TLS extensions t…
-
HighELSA-2014-1620 10 CVEs
Important: java-1.7.0-openjdk security and bug fix update (Oracle Linux 7)
[1:1.7.0.65-2.5.3.1.0.1.el7_0] - Update DISTRO_NAME in specfile [1:1.7.0.65-2.5.3.1] - Bump to 2.5.3 for latest security fixes. - Remove obsolete patches. - Add hsbootstrap option to pre-build HotSpot when required. - Resolves: rhbz#1148893
-
HighELSA-2014-1634 10 CVEs
Important: java-1.6.0-openjdk security and bug fix update (Oracle Linux 7)
[1:1.6.0.33-1.13.5.0] - Update to IcedTea 1.13.5 - Remove upstreamed patches. - Regenerate add-final-location-rpaths patch against new release. - Change versioning to match java-1.7.0-openjdk so revisions work. - Use xz for tarballs to reduce file size. - No …
-
HighELSA-2014-1397 1 CVE
Important: rsyslog security update (Oracle Linux 7)
[7.4.7-7.0.1] - use setsid() to get a controlling session and process group [Orabug: 17346261] (Todd Vierling) [7.4.7-7] - fix CVE-2014-3634 resolves: #1149152
-
HighELSA-2014-1359 1 CVE
Important: polkit-qt security update (Oracle Linux 7)
[0.103.0-10] - Resolves: #1147368 (CVE-2014-5033)
-
HighELSA-2014-1307 1 CVE
Important: nss security update (Oracle Linux 7)
nss [3.16.2-7.0.1.el7_0] - Added nss-vendor.patch to change vendor [3.16.2-7] - Resolves: Bug 1145433 - CVE-2014-1568 [3.16.2-6] - Rolling back to commit e5fb6e476c179665976e906604496cbbb24f22a7 - Related: Bug 1145433 nss-softokn [3.16.2-3] - Resolves: Bug 11…
-
High max 9.8
Important: bash security update (Oracle Linux 7)
[4.2.45-5.4] - CVE-2014-7169 Resolves: #1146324 [4.2.45-5.3] - amend patch to match upstream's Related: #1146324 [4.2.45-5.2] - Fix-up the patch Related: #1141647
-
HighELSA-2014-1172 1 CVE
Important: procmail security update (Oracle Linux 7)
[3.22-34.1] - Fixed buffer overflow in formail Resolves: CVE-2014-3618
-
HighELSA-2014-3072 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[3.8.13-44.1.1] - auditsc: audit_krule mask accesses need bounds checking (Andy Lutomirski) [Orabug: 19590596] {CVE-2014-3917}
-
HighELSA-2014-1166 1 CVE
Important: jakarta-commons-httpclient security update (Oracle Linux 7)
[1:3.1-16] - Fix MITM security vulnerability - Resolves: CVE-2014-3577
-
HighELSA-2014-1146 1 CVE
Important: httpcomponents-client security update (Oracle Linux 7)
[4.2.5-5] - Fix MITM security vulnerability - Resolves: CVE-2014-3577
-
HighELSA-2014-1147 1 CVE
Important: squid security update (Oracle Linux 7)
[7:3.3.8-12] - Resolves: #1134933 - CVE-2014-3609 assertion failure in header processing
-
HighELSA-2014-1110 2 CVEs
Important: glibc security update (Oracle Linux 7)
[2.12-1.132.4] - Remove gconv transliteration loadable modules support (CVE-2014-5119, - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,
-
HighELSA-2014-1091 1 CVE
Important: mod_wsgi security update (Oracle Linux 7)
[3.4-12] - fix possible privilege escalation in setuid() (CVE-2014-0240)
-
HighELSA-2014-3070 3 CVEs
Important: Unbreakable Enterprise kernel security and bug fix update (Oracle Linux 7)
kernel-uek [3.8.13-44] - net: Use netlink_ns_capable to verify the permisions of netlink messages (Eric W. Biederman) [Orabug: 19404229] {CVE-2014-0181} - net: Add variants of capable for use on netlink messages (Eric W. Biederman) [Orabug: 19404229] - net: A…
-
HighELSA-2014-3067 2 CVEs
Important: unbreakable enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-35.3.5.el7uek] - net: Use netlink_ns_capable to verify the permisions of netlink messages (Eric W. Biederman) [Orabug: 19404231] {CVE-2014-0181} - net: Add variants of capable for use on netlink messages (Eric W. Biederman) [Orabug: 1940423…