5,092 results · Clear filters · Feed
-
High max 6.5ELSA-2023-12065 4 CVEs
Important: qemu security update (Oracle Linux 7)
[15:4.2.1-24.el7] - Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Mark Kanda) [Orabug: 34905939] [15:4.2.1-23.el7] - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabu…
-
High max 7.8ELSA-2023-0284 1 CVE
Important: sudo security update (Oracle Linux 8)
[1.8.29.8.1] RHEL 8.7.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161220
-
High max 7.8ELSA-2023-0282 1 CVE
Important: sudo security update (Oracle Linux 9)
[1.9.5p2-7.1] RHEL 9.1.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161224
-
HighELSA-2023-12064 1 CVE
Important: ruby:2.5 security update (Oracle Linux 8)
ruby [2.5.9-110.0.1] - Fix for CVE-2022-28739 [Orabug: 34824177]
-
HighELSA-2023-0171 1 CVE
Important: dpdk security update (Oracle Linux 8)
[21.11-2] - Backport fixes for CVE-2022-2132 (#2107171)
-
High max 7.8ELSA-2023-0101 2 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-425.10.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genke…
-
High max 8.0ELSA-2023-12018 3 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)
[5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]…
-
High max 8.0ELSA-2023-12017 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082]…
-
High max 8.6ELSA-2023-12019 2 CVEs
Important: grub2 security update (Oracle Linux 9)
[2.06-46.0.4] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] [2.06-46.0.3] - Fix CVE-2022-2601 and CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI
-
High max 7.5ELSA-2023-12013 1 CVE
Important: istio security update (Oracle Linux 7)
istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278
-
High max 7.5ELSA-2023-12014 1 CVE
Important: istio security update (Oracle Linux 8)
istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278
-
High max 7.5ELSA-2023-12011 1 CVE
Important: istio security update (Oracle Linux 8)
istio [1.15.3-1] - Added Oracle specific files for 1.15.3-1 olcne [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-39278
-
High max 7.8ELSA-2023-12007 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.521.4] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 34918228] [4.14…
-
High max 8.8ELSA-2023-0046 6 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-21] - Follow-up fix for CVE-2022-46340 (#2151775) [1.20.4-20] - CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775), CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787), CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)
-
High max 7.8ELSA-2023-12006 1 CVE
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2047.521.4.el7] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3.el7] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 3491822…
-
High max 8.8ELSA-2023-0045 6 CVEs
Important: tigervnc security update (Oracle Linux 7)
[1.8.0-23] - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 (bz#2154267) Resolves: CVE-2022-46340 (bz#2154261) Resolves: CVE-2022-46341 (bz#2154264) Resolves: CVE-2022-46342 (bz#2154262) Resolves: CVE-2022-46343 (bz#2154265) Resolves: CVE-2022-46344…
-
High max 7.8ELSA-2023-12009 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.315.5] - Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang) [Orabug: 34917369] [5.4.17-2136.315.4] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888473] - uek-rpm: Add ptp_kvm.ko to nano rpm (Somas…
-
High max 7.8ELSA-2023-12008 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.315.5] - Revert 'xfs: Lower CIL flush limit for large logs' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: Throttle commits on delayed background CIL push' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: fix use-after-free on CIL context on shut…
-
High max 8.8
Important: webkit2gtk3 security update (Oracle Linux 8)
[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153735
-
High max 8.8
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153738
-
High max 7.8ELSA-2022-10108 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.70.2] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882781] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882781] {CVE-2022-4378} - netfilter: …
-
High max 9.8ELSA-2023-0005 1 CVE
Important: bcel security update (Oracle Linux 9)
[6.4.1-9] - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920
-
HighELSA-2022-10093 1 CVE
Important: virt:kvm_utils security update (Oracle Linux 8)
hivex libguestfs [1.40.2-28.0.4] - v2v: Cope with libvirt vpx/esx driver which does not set [Orabug: 34026544] [1.40.2-28.0.3] - virt-v2v: Specify backing file format to qemu-img command [Orabug: 33906330] - Require 'kernel-uek' RPM for installation instead o…
-
High max 9.8ELSA-2022-8958 1 CVE
Important: bcel security update (Oracle Linux 7)
[0:5.2-19] - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920
-
High max 7.8ELSA-2022-10073 3 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2047.520.3.1.el7] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - hu…
-
High max 7.8ELSA-2022-10072 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.520.3.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883027] {CVE-2022-4378} - hugetl…
-
High max 7.8ELSA-2022-10071 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.69.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378}
-
High max 7.8ELSA-2022-10079 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.314.6.2] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} [5.4.17-2…
-
High max 7.8ELSA-2022-10081 3 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.314.6.2.el7] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883034] {CVE-2022-4378} [5.4.…
-
High max 7.8ELSA-2022-10080 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 8)
[5.15.0-5.76.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} [5.15.0-5.76.…
-
High max 7.8ELSA-2022-10078 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-5.76.5.1] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883037] {CVE-2022-4378} [5.15.0-5.76.…
-
HighELSA-2022-26385 0 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
-
High max 4.6ELSA-2022-10065 8 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.69.5] - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang) [Orabug: 34798594] [4.1.12-124.69.4] - btrfs: Remove BUG_ON() as it is causing kernel to panic (Rhythm Mahajan) [Orabug: 34840579] [4.1.12-124.69.…
-
HighELSA-2022-10062 1 CVE
Important: libvirt security update (Oracle Linux 7)
libvirt [5.7.0-38.el7] - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758] - security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631} - spec: Requir…
-
HighELSA-2022-8799 1 CVE
Important: pki-core security update (Oracle Linux 7)
[10.5.18-24] - ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to …
-
High max 4.3ELSA-2022-10024 1 CVE
Important: spacewalk-backend spacewalk-java security update (Oracle Linux 7)
spacewalk-backend [2.10.28-1.0.13] - Fix HTTP 500 and ORA-01830 on client scap report [Orabug: 34823889] [2.10.28-1.0.12] - Handle remote commands that return no output. [Orabug: 32530545] [2.10.28-1.0.11] - Make spacewalk-debug copy symlink target instead of…
-
High max 8.8ELSA-2022-8640 1 CVE
Important: krb5 security update (Oracle Linux 7)
[1.15.1-55.0.1] - Add recursion limit for ASN.1 indefinite lengths [Orabug: 32582360] [1.15.1-55] - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961
-
High max 6.6ELSA-2022-10033 2 CVEs
Important: kubernetes security update (Oracle Linux 7)
kubernetes [1.21.14-3] - Addresses CVE-2022-3294 & CVE-2022-3162 [1.21.14-2] - Fixed kubernetes-cni version. [1.21.14-1] - Addresses CVE-2022-3172 olcne [1.4.9-2] - Fix 1.21 kubernetes version to align with last upstream release [1.4.9-1] - Resolve kubernetes…
-
High max 6.6ELSA-2022-10035 2 CVEs
Important: kubernetes security update (Oracle Linux 7)
kubernetes [1.22.16-1] - Added Oracle specific build files for Kubernetes - Add preBuildOL8Commands to Jenkinsfile kubernetes [1.23.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.24.8-1] - Added Oracle specific build files for Kubernet…
-
High max 6.6ELSA-2022-10036 2 CVEs
Important: kubernetes security update (Oracle Linux 8)
kubernetes [1.22.16-1] - Added Oracle specific build files for Kubernetes - Add preBuildOL8Commands to Jenkinsfile kubernetes [1.23.14-1] - Added Oracle specific build files for Kubernetes kubernetes [1.24.8-1] - Added Oracle specific build files for Kubernet…