5,089 results · Clear filters · Feed
-
High max 5.5ELSA-2024-6837 2 CVEs
Important: pcp security update (Oracle Linux 8)
[5.3.7-22.0.1] - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733] - Backporting of python tool pcp-meminfo [Orabug: 35759707] - Backporting of python tool pcp-slabinfo [Orabug: 35560940] - Backporting of python tool pcp-buddyinfo [Orabug: 35660932] …
-
High max 6.2ELSA-2024-12673 1 CVE
Important: libvirt security update (Oracle Linux 9)
libvirt [9.0.0-6.el9] - rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrange) [Orabug: 36821472] {CVE-2024-4418} - rpc: Don't warn about 'max_client_requests' in single-threaded daemons (Peter Krempa) [Orabug: 36422853] libvirt-…
-
High max 5.5ELSA-2024-6848 2 CVEs
Important: pcp security update (Oracle Linux 9)
[6.2.0-5.0.1] - Fixed libpcp derived metric issue for ol9 [Orabug: 36538820] [6.2.0-5] - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805) - Guard against symlink attacks in pmpost program (RHEL-57810) - Fix libpcp_web webgroup slow request refcou…
-
High max 8.2ELSA-2024-12674 4 CVEs
Important: qemu-kvm security update (Oracle Linux 9)
[7.2.0-15.el9] - migration: abort on destination if switchover limit exceeded (Elena Ufimtseva) - migration: introduce strict switchover SLA (Elena Ufimtseva) - migration: add error to MigrationIncomingState (Elena Ufimtseva) - migration: Set migration status…
-
High max 7.8
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.119.1.0.3.el7.OL7] - net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36947298] [3.10.0-1160.119.1.0.2.el7.OL7] - md/raid5: fix oops during stripe resizing (Ritika Srivastava) [Orabug: 34048726] - blk-mq: Remove generation seqeunce (…
-
High max 7.4ELSA-2024-4560 6 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.412.b08-1.0.1] - Fixes openjdk below given CVE issues - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes bad immediate dominator info openjdk bug8262017 - Fixes malformed control flow openjdk bug8303466 - CVE…
-
High max 8.8ELSA-2024-4549 1 CVE
Important: ghostscript security update (Oracle Linux 7)
[9.25-5.0.1] - Fixes CVE-2024-33871 OPVP device arbitrary code execution via custom Driver library
-
High max 8.8ELSA-2024-6726 1 CVE
Important: fence-agents security update (Oracle Linux 9)
[4.10.0-62.5] - bundled setuptools: fix CVE-2024-6345 Resolves: RHEL-49657
-
High max 9.1
Important: httpd security update (Oracle Linux 7)
[2.4.6-99.0.3.1] - Opt-ins for unsafe prefix_stat and %3f [Orabug: 36904263][CVE-2024-38474][CVE-2024-38475] - mod_proxy: validate hostname [Orabug: 36904263][CVE-2024-38477]
-
High max 9.8ELSA-2024-12618 143 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-210.163.7] - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu) [Orabug: 37030280] [5.15.0-210.163.6] - Revert 'Fix userfaultfd_api to return EINVAL as expected' (Vijayendra Suman) [Orabug: 37004422] [5.15.0-210.163.5] - Revert 'bpf: Al…
-
High max 10.0ELSA-2024-12611 40 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.540.4.1] - Revert 'selftests/kcmp: Make the test output consistent and clear' (Samasth Norway Ananda) [Orabug: 37029311] [4.14.35-2047.540.4] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson) - ipvs: Avoid unnecessary call…
-
High max 9.8ELSA-2024-12612 88 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.335.4.el8] - mm: memcg/slab: enable kmalloc-cg-<n> caches for x86_64. (Imran Khan) [Orabug: 36951041] - printk: add kthread for long-running print (Stephen Brennan) [Orabug: 36456582] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas…
-
High max 9.8ELSA-2024-12610 88 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.335.4] caches for x86_64. (Imran Khan) [Orabug: 36951041] - printk: add kthread for long-running print (Stephen Brennan) [Orabug: 36456582] - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson) - driver core: Fix uevent_show() …
-
High max 7.4ELSA-2024-4564 6 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.23.0.9-2.0.3] - Fixes below CVE's - CVE-2024-21131 Improve-UTF8-String-supports - CVE-2024-21138 Better-symbol-storage - Fixes malformed control flow openjdk bug8303466 - CVE-2024-21140 Improved-loop-handling - CVE-2024-21144 Enhance-Pack-200-loading …
-
High max 8.6ELSA-2024-4647 1 CVE
Important: qt5-qtbase security update (Oracle Linux 7)
[5.9.7-5.0.1] - Backport fix for CVE-2024-39936 [Orabug: 36904373]
-
High max 10.0ELSA-2024-6422 1 CVE
Important: bubblewrap and flatpak security update (Oracle Linux 8)
bubblewrap [0.4.0-2] - Backport upstream fix to help address CVE-2024-42472 in flatpak flatpak [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backp…
-
High max 8.1ELSA-2024-4622 1 CVE
Important: libndp security update (Oracle Linux 7)
[1.2-10.0.1] - Increasing release number as per Oracle package release policy
-
High max 10.0ELSA-2024-6356 1 CVE
Important: bubblewrap and flatpak security update (Oracle Linux 9)
bubblewrap [0.4.1-7] - Add support for --bind-fd and --ro-bind-fd (CVE-2024-42472) flatpak [1.12.9-3] - Fix previous changelog entry [1.12.9-2] - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backporte…
-
High max 7.5ELSA-2024-6194 3 CVEs
Important: podman security update (Oracle Linux 9)
[4.9.4-10.0.1] - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for comp…
-
High max 8.8ELSA-2024-5999 1 CVE
Important: postgresql security update (Oracle Linux 9)
[13.16-1.0.1] - Remove non ASCII character from changelog date [13.16-1] - Update to 13.16 [13.14-2] - Remove /var/run/postgresql - Related: RHEL-25756 [13.14-1] - Update to 13.14 - Fix CVE-2024-0985 [13.13-1] - Update to 13.13 - Fixes CVE-2023-5868, CVE-2023…
-
High max 9.8ELSA-2024-12606 43 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.89.4] - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma) [Orabug: 36940405] {CVE-2021-47284} - tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware)) [Orabug: 36940388] {CVE-2021-46939} - udf: Fix NULL pointer der…
-
High max 8.8ELSA-2024-12605 18 CVEs
Important: virt:kvm_utils2 security update (Oracle Linux 8)
hivex libguestfs libguestfs-winsupport [8.6-1] - Rebase to ntfs-3g 2021.8.22 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-3925…
-
High max 8.2ELSA-2024-12604 5 CVEs
Important: virt:kvm_utils3 security update (Oracle Linux 8)
hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX…
-
High max 8.8ELSA-2024-6000 1 CVE
Important: postgresql:12 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [12.20-1] - Update to 12.20 - Fix CVE-2024-7348
-
High max 8.8ELSA-2024-6018 1 CVE
Important: postgresql:13 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [13.16-1] - Update to 13.16 - Fix CVE-2024-7348
-
High max 8.8ELSA-2024-6001 2 CVEs
Important: postgresql:15 security update (Oracle Linux 8)
pgaudit pg_repack postgres-decoderbufs postgresql [15.8-1] - Update to 15.8 - Fix CVE-2024-7348
-
High max 8.8ELSA-2024-6020 2 CVEs
Important: postgresql:15 security update (Oracle Linux 9)
pgaudit [1.7.0-1] - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 pg_repack postgres-decoderbufs [1.9.7-1.Final] - Iitial import for postgresql 15 stream - Related: #2128410 postgresql [15.8-1] - Update …
-
High max 8.8ELSA-2024-5927 2 CVEs
Important: postgresql:16 security update (Oracle Linux 8)
pgaudit [16.0-1] - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3636 pg_repack postgres-decoderbufs [2.4.0-1.Final] - Initial import for postgresql 16 stream - Related: RHEL-3636 postgresql [16.4-1] - Update to 16.…
-
High max 8.8ELSA-2024-5929 2 CVEs
Important: postgresql:16 security update (Oracle Linux 9)
pgaudit pg_repack postgres-decoderbufs postgresql [16.4-1] - Update to 16.4
-
High max 9.8ELSA-2024-5928 41 CVEs
Important: kernel security update (Oracle Linux 9)
[5.14.0-427.33.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 8.8ELSA-2024-5531 1 CVE
Important: python3.12-setuptools security update (Oracle Linux 8)
[68.2.2-4] - Security fix for CVE-2024-6345 Resolves: RHEL-50475
-
High max 7.5ELSA-2024-5694 1 CVE
Important: tomcat security update (Oracle Linux 8)
[1:9.0.87-1.el8_10.2] - Resolves: RHEL-46167 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)
-
High max 7.5ELSA-2024-5693 1 CVE
Important: tomcat security update (Oracle Linux 9)
[1:9.0.87-1.el9_4.2] - Resolves: RHEL-46162 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)
-
High max 7.5ELSA-2024-5524 2 CVEs
Important: bind security update (Oracle Linux 8)
[32:9.11.36-16.2] - Rebuild after CI change [32:9.11.36-16.1] - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name [32:9.11.36-16] - Ensure incompatible dhcp is not accepted [32:9.11.36-15] …
-
High max 8.8ELSA-2024-5533 1 CVE
Important: python3.12-setuptools security update (Oracle Linux 9)
[68.2.2-3.1] - Security fix for CVE-2024-6345 Resolves: RHEL-50481
-
High max 8.8ELSA-2024-5534 1 CVE
Important: python-setuptools security update (Oracle Linux 9)
[53.0.0-12.1] - Security fix for CVE-2024-6345 Resolves: RHEL-50466
-
High max 8.8ELSA-2024-5530 1 CVE
Important: python-setuptools security update (Oracle Linux 8)
[39.2.0-8] - Security fix for CVE-2024-6345 Resolves: RHEL-50470
-
High max 8.8ELSA-2024-5532 1 CVE
Important: python3.11-setuptools security update (Oracle Linux 8)
[65.5.1-3] - Security fix for CVE-2024-6345 Resolves: RHEL-50484
-
High max 9.8ELSA-2024-5402 10 CVEs
Important: thunderbird security update (Oracle Linux 8)
[115.14.0-1.0.1] - Add Oracle prefs file [115.14.0] - Add OpenELA debranding [115.14.0-1] - Update to 115.14.0 build1
-
High max 9.8ELSA-2024-5391 11 CVEs
Important: firefox security update (Oracle Linux 8)
[115.14.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.14.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [115.14.0-2] - Update to 115.14.0 build2 [115.14.0-1] - Update …