5,089 results · Clear filters · Feed
-
High max 8.7ELSA-2024-10980 2 CVEs
Important: python3.12 security update (Oracle Linux 8)
[3.12.8-1] - Update to 3.12.8 - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64880, RHEL-70315
-
High max 8.7ELSA-2024-10978 2 CVEs
Important: python3.12 security update (Oracle Linux 9)
[3.12.5-2.2] - Security fix for CVE-2024-9287 and CVE-2024-12254 Resolves: RHEL-64885, RHEL-70316
-
High max 8.8ELSA-2024-10791 3 CVEs
Important: postgresql security update (Oracle Linux 9)
[13.18-1] - Update to 13.18
-
High max 6.6ELSA-2024-10858 1 CVE
Important: ruby security update (Oracle Linux 9)
[3.0.7-163] - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: rbhz#2322153 [3.0.7-162] - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - …
-
High max 7.5ELSA-2024-9654 1 CVE
Important: libsoup security update (Oracle Linux 7)
[2.62.2-2.0.1] - Fixed CVE-2024-52530 for smuggling nullbytes in header names [Orabug: 37289659]
-
High max 6.6ELSA-2024-10850 1 CVE
Important: ruby:2.5 security update (Oracle Linux 8)
ruby [2.5.9-113.0.1] - Fix REXML ReDoS vulnerability CVE-2024-49761. rubygem-abrt [0.3.0-4] - Execute test suite unconditionally. - Upload correct sources. rubygem-bson rubygem-bundler rubygem-mongo [2.5.1-2] - Disable tests to fix FTBFS by dropped MongoDB mo…
-
High max 9.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.543.3] - rds: Add rds stuck shutdown timeout (Rohit Nair) [Orabug: 37214079] - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso) - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai) …
-
High max 8.8ELSA-2024-10785 3 CVEs
Important: postgresql:12 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [12.22-1] - Update to 12.22 - Fixes: CVE-2024-10976 CVE-2024-10978
-
High max 8.8ELSA-2024-10830 3 CVEs
Important: postgresql:15 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [15.10-1] - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
-
High max 6.6ELSA-2024-10834 1 CVE
Important: ruby:3.1 security update (Oracle Linux 8)
ruby [3.1.5-144] - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68520 rubygem-abrt rubygem-mysql2 rubygem-pg
-
High max 8.8ELSA-2024-10787 3 CVEs
Important: postgresql:15 security update (Oracle Linux 9)
pgaudit pg_repack postgres-decoderbufs postgresql [15.10-1] - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979
-
High max 6.6ELSA-2024-10860 1 CVE
Important: ruby:3.1 security update (Oracle Linux 9)
ruby [3.1.5-145] - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68530 [3.1.5-144] - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options …
-
High max 8.8ELSA-2024-10831 3 CVEs
Important: postgresql:16 security update (Oracle Linux 8)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack [1.5.1-1] - Update to 1.5.1 postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgre…
-
High max 8.8ELSA-2024-10832 3 CVEs
Important: postgresql:13 security update (Oracle Linux 8)
pgaudit [1.5.0-1] - Update to version 1.5.0 Related: #1855776 [1.4.0-4] - Bump release for rebuild against libpq-12.1-3 [1.4.0-3] - BuildRequires libpq-devel [1.4.0-2] - BuildRequires postgresql-server-devel [1.4.0-1] - Update to 1.4.0 [1.3.1-1] - Update to 1…
-
High max 8.8ELSA-2024-10788 3 CVEs
Important: postgresql:16 security update (Oracle Linux 9)
pgaudit pg_repack [1.5.1-1] - Update to v1.5.1 pgvector [0.6.2-1] - Initial packaging postgres-decoderbufs postgresql [16.6-1] - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 [16.4-2] - Fix build on 16.4 [16.4-1] - Update to 16.4 [16.1-…
-
High max 7.8ELSA-2024-9901 1 CVE
Important: tigervnc security update (Oracle Linux 7)
[1.8.0-33.0.3] - xorg-x11-server: xkb: Fix buffer overflow in _XkbSetCompatMap() [CVE-2024-9632][Orabug: 37295822]
-
High max 8.8ELSA-2024-10591 7 CVEs
Important: thunderbird security update (Oracle Linux 8)
[128.5.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.5.0] - Add OpenELA debranding [128.5.0-1] - Update to 128.5.0 build1
-
High max 8.8ELSA-2024-10752 6 CVEs
Important: firefox security update (Oracle Linux 8)
[128.5.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.5.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.5.1-1] - Update to 128.5.1 [128.5.0-1] - Update to 128.5.0 build1
-
High max 8.8ELSA-2024-10592 7 CVEs
Important: thunderbird security update (Oracle Linux 9)
[128.5.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.5.0] - Add OpenELA debranding [128.5.0-1] - Update to 128.5.0 build1
-
High max 8.8ELSA-2024-10702 6 CVEs
Important: firefox security update (Oracle Linux 9)
[128.5.1-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.5.1] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
High max 7.5ELSA-2024-10590 1 CVE
Important: python-tornado security update (Oracle Linux 9)
[6.4.2-1] - Update to 6.4.2 Resolves: RHEL-68663
-
High max 9.0ELSA-2024-8788 1 CVE
Important: krb5 security update (Oracle Linux 7)
[1.15.1-55.0.7] - libkrad: implement support for Message-Authenticator (CVE-2024-3596) [Orabug: 37241077]
-
High max 7.8ELSA-2024-10384 2 CVEs
Important: tuned security update (Oracle Linux 9)
[2.24.0-2.0.1] - Fix RPS/XPS and busy polling optimization not getting applied [Orabug: 32153315] - Fix error in uninstalling tuned [Orabug: 351528377] - Updated patch with the more recent version [Orabug: 30730976] - Set AMD CPU freq governor to ondemand whe…
-
High max 7.8ELSA-2024-12851 17 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.92.3] - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070674] {CVE-2024-45021} - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [Orabug: 36835819] {CVE-2024-40943} [4.1.12-124.92.2] - fbdev: savage: Han…
-
High max 6.3
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.46.3-2] - Add patch for CVE-2024-44309
-
High max 6.3
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.46.3-2] - Add patch for CVE-2024-44309
-
High max 7.4ELSA-2024-10379 2 CVEs
Important: pam security update (Oracle Linux 8)
[1.3.1-36.0.1] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36272695] [1.3.1-36] - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 [1.3.1-35] - pam_unix: always run the helper to obtain shadow pa…
-
High max 7.8ELSA-2024-12845 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.336.5.3.1.el8uek] - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37311329] {CVE-2024-47674} - mm: add remap_pfn_range_notrack (Christoph Hellwig) [Orabug: 37311329] {CVE-2024-47674} - mm/memory.c: make rem…
-
High max 7.4ELSA-2024-10244 1 CVE
Important: pam:1.5.1 security update (Oracle Linux 9)
[1.5.1-22.0.1] - pam_access: clean up the remote host matching code [Orabug: 36771903] - pam_limits: fix use after free in pam_sm_open_session [Orabug: 36406534] [1.5.1-22] - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHE…
-
High max 8.2ELSA-2024-8795 1 CVE
Important: xerces-c security update (Oracle Linux 7)
[3.1.1-10.0.1] - back port fix for CVE-2023-37536 [Orabug: 37241079]
-
High max 7.5ELSA-2024-9738 1 CVE
Important: squid security update (Oracle Linux 7)
[7:3.5.20-17.0.3] - Disable ESI support [CVE-2024-45802][Orabug: 37289058]
-
High max 7.5ELSA-2024-9472 1 CVE
Important: grafana-pcp security update (Oracle Linux 9)
[5.1.1-9] - Resolves: RHEL-57932 [5.1.1-8] - Add a premade uwsgi dashboard for the vector datasource
-
High max 10.0ELSA-2024-9473 2 CVEs
Important: grafana security update (Oracle Linux 9)
[10.2.6-7] - Resolves RHEL-62308: CVE-2024-47875 [10.2.6-6] - Resolves: RHEL-57927 [10.2.6-5] - Resolves RHEL-47185
-
High max 9.0ELSA-2024-9474 1 CVE
Important: krb5 security update (Oracle Linux 9)
[1.21.1-4.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-4] - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-55423 - Fix various issues detected by static analysis Resolves: RHEL-58216 - Remo…
-
High max 7.8ELSA-2024-12830 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-300.163.18.7] - Revert 'net/mlx5: disable the 'fast unload' feature on Exadata systems' (Qing Huang) [Orabug: 37285705] - Revert 'net/mlx5: pretend 'fast unload' succeeded on Exadata systems' (Qing Huang) [Orabug: 37285705] [5.15.0-300.163.18.6] - x86…
-
High max 7.5ELSA-2024-9456 1 CVE
Important: osbuild-composer security update (Oracle Linux 9)
[118-2.0.1] - Simplify repository names [JIRA: OLDIS-35893] [118-2] - Ensure build on latest golang: CVE-2024-34156
-
High max 7.8ELSA-2024-9459 7 CVEs
Important: buildah security update (Oracle Linux 9)
[1.37.5-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.37.5-1] - update to https://github.com/containers/buildah/releases/tag/v1.37.5 - Resolves: RHEL-61857 [2:1.37.4-2] - enable CNI - Resolves: RHEL-62107 [2:1.37…
-
High max 7.8ELSA-2024-9454 7 CVEs
Important: podman security update (Oracle Linux 9)
[5.2.2-9.0.1] - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [4:5.2.2-9] - update to the latest content o…
-
High max 7.8ELSA-2024-10090 1 CVE
Important: tigervnc security update (Oracle Linux 9)
[1.14.1-1] - 1.14.1 Resolves: RHEL-66600 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62000
-
High max 9.8ELSA-2024-9543 2 CVEs
Important: .NET 9.0 security update (Oracle Linux 9)
[9.0.100-1.0.1] - Add support for Oracle Linux [9.0.100-1] - Update to .NET SDK 9.0.100 and Runtime 9.0.0 - Resolves: RHEL-65539 [9.0.100~rc.2.24474.1-0.7] - Disable bootstrap - Related: RHEL-62776 [9.0.100~rc.2.24474.1-0.6] - Rebootstrap - Related: RHEL-6277…