297 results · Clear filters · Feed
-
LowELSA-2021-1935 2 CVEs
Low: rust-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
rust [1.49.0-1] - Update to 1.49.0. [1.48.0-1] - Update to 1.48.0. rust-toolset [1.49.0-1] - Update to Rust and Cargo 1.49.0. [1.48.0-1] - Update to Rust and Cargo 1.48.0.
-
LowELSA-2021-1752 1 CVE
Low: evolution security, bug fix, and enhancement update (Oracle Linux 8)
evolution [3.28.5-16] - Resolves: #1902630 (Crash on file drag into mail composer with WebKitGTK 2.30) [3.28.5-15] - Resolves: #1883619 (ECalendarItem: Settings loaded only when being shown) evolution-data-server [3.28.5-15] - Resolves: #1862403 (CVE-2020-161…
-
LowELSA-2021-1758 1 CVE
Low: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)
[0.27.3-2] - Avoid duplicating Changelog file Resolves: bz#1880984 [0.27.3-1] - Update to 0.27.3 Resolves: bz#1880984
-
LowELSA-2021-1924 1 CVE
Low: spice security update (Oracle Linux 8)
[0.14.3-4] - Disable client-side renegotiation to prevent potential DoS Resolves: rhbz#1904459 [0.14.3-3] - Fix some static analyzer issues - Removed Obsoletes line for spice-client Related: rhbz#1840240 [0.14.3-2] - Fix multiple buffer overflows in QUIC deco…
-
LowELSA-2021-0711 1 CVE
Low: virt:ol and virt-devel:ol security update (Oracle Linux 8)
qemu-kvm [4.2.0-34.el8_3.4] - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919109] - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919109] - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919109] - Resolv…
-
Low max 6.8ELSA-2020-5003 1 CVE
Low: fence-agents security and bug fix update (Oracle Linux 7)
[4.2.1-41.2] - Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 [4.2.1-41.1] - fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable eva…
-
Low max 4.8ELSA-2020-5020 1 CVE
Low: tomcat security update (Oracle Linux 7)
[0:7.0.76-16] - Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling
-
LowELSA-2020-4465 1 CVE
Low: binutils security update (Oracle Linux 8)
[2.30-79.0.1] - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.30-79] - Fix x86 assemblers handling of non-8-bit displacements. (#1869401) [2.30-77] - Add tests missing from PT_GNU_SEGMENT patch. (#1…
-
LowELSA-2020-4514 1 CVE
Low: openssl security, bug fix, and enhancement update (Oracle Linux 8)
[1.1.1g-11] - Further changes for SP 800-56A rev3 requirements [1.1.1g-9] - Rewire FIPS_drbg API to use the RAND_DRBG - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters [1.1.1g-7] - Disallow dropping Extended Master Secret extension o…
-
Low max 5.3ELSA-2020-4547 1 CVE
Low: libpcap security, bug fix, and enhancement update (Oracle Linux 8)
[14:1.9.1-4] - Related: #1806422 - Building libpcap to side-tag for tcpdump [14:1.9.1-3] - Related: #1743650 - reverting rdma changes due to unresolved dependency loop [14:1.9.1-2] - Related: #1806422 - Building libpcap to side-tag for tcpdump [14:1.9.1-1] - …
-
LowELSA-2020-4436 1 CVE
Low: gnome-software and fwupd security, bug fix, and enhancement update (Oracle Linux 8)
appstream-data [8-20200724] - Regenerate the RHEL metadata to include the EPEL apps too - Resolves: #1844488 [8-20200630] - Regenerate the RHEL metadata - Resolves: #1844488 fwupd [1.4.2-4.0.1] - Build with the updated Oracle certificate - Use oraclesecureboo…
-
LowELSA-2020-4649 1 CVE
Low: evolution security and bug fix update (Oracle Linux 8)
bogofilter [1.2.5-2] - Bump version to have OSCI/gating tests rerun with updated tests [1.2.5-1] - Resolves: #1836279 (Update to 1.2.5) evolution [3.28.5-14] - Related: #1817143 (Add a small patch to behave better with WebKitGTK 2.28) [3.28.5-13] - Resolves: …
-
LowELSA-2020-4643 1 CVE
Low: poppler security update (Oracle Linux 8)
[0.66.0-27] - Fix crash on broken file in tilingPatternFill() - Resolves: #1801341
-
LowELSA-2020-4628 2 CVEs
Low: libreoffice security, bug fix, and enhancement update (Oracle Linux 8)
libcmis [0.5.2-1] - Related: rhbz#1796893 update to 0.5.2 liborcus [0.14.1-1] - Related: rhbz#1796893 update to 0.14.1 libreoffice [6.3.6.2-3.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added…
-
LowELSA-2020-4469 1 CVE
Low: cups security and bug fix update (Oracle Linux 8)
[1:2.2.6-38] - 1775590 - rastertoepson filter crashes with paper size A6 [1:2.2.6-37] - forgot to enable optimization - 1833516 [1:2.2.6-36] - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied) - 1689207 - Add …
-
Low max 5.1ELSA-2020-4553 1 CVE
Low: systemd security, bug fix, and enhancement update (Oracle Linux 8)
[239-40.0.1] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orab…
-
LowELSA-2020-4638 1 CVE
Low: sysstat security update (Oracle Linux 8)
[11.7.3-5] - Rebuild [11.7.3-4] - Package onboarded to gating [11.7.3-3] - Fix memory corruption bug due to integer overflow (#1790608)
-
Low max 9.8ELSA-2020-3901 1 CVE
Low: libpng security update (Oracle Linux 7)
[2:1.5.13-8] - Fix CVE-2017-12652 - Resolves: #1744870
-
LowELSA-2020-3848 1 CVE
Low: libmspack security update (Oracle Linux 7)
[0.5-0.8.alpha] - Fix for CVE-2019-1010305 resolves: rhbz#1736744
-
LowELSA-2020-3943 1 CVE
Low: libwmf security and bug fix update (Oracle Linux 7)
[0.2.8.4-44] - Resolves: rhbz#1840569 adapt to new urw-fonts [0.2.8.4-43] - Resolves: rhbz#1679005 CVE-2019-6978 [0.2.8.4-42] - Related: rhbz#1239162 fix patch context
-
LowELSA-2020-3861 1 CVE
Low: glibc security, bug fix, and enhancement update (Oracle Linux 7)
[2.17-317.0.1] - Merge RH el7 u8 patches with Oracle patches Review-exception: Simple merge - Adding Mike Fabians C.utf-8 patch (C.utf-8 is a unicode-aware version of the C locale) Orabug 29784239. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> - Re…
-
Low max 3.7ELSA-2020-3878 1 CVE
Low: dnsmasq security and bug fix update (Oracle Linux 7)
[2.76-16] - Fix strict-mode retries on REFUSED (#1755610) [2.76-15] - Forward non-recursive queries to upstream, but serve local names (#1755610) [2.76-14] - Stop treating SERVFAIL as successful response (#1815080) [2.76-13] - Do not ignore DHCPv6 relay messa…
-
LowELSA-2020-3906 2 CVEs
Low: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-175.el7] - kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408] - Resolves: bz#1810408 (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7]) [1.5.3-174.el7] - kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515] - kvm-tc…
-
LowELSA-2020-3977 1 CVE
Low: evince and poppler security and bug fix update (Oracle Linux 7)
evince [3.28.2-10] - Do not try to use icon_view widget when in tree view mode - Resolves: #1610436 poppler [0.26.5-43] - Fix crash on broken file in tilingPatternFill() - Resolves: #1801340
-
LowELSA-2020-3922 1 CVE
Low: libsndfile security update (Oracle Linux 7)
[1.0.25-12] - fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)
-
LowELSA-2020-3971 1 CVE
Low: hunspell security update (Oracle Linux 7)
[1.3.2-16] - Resolves: rhbz#1775556 CVE-2019-16707
-
Low max 8.4ELSA-2020-3869 2 CVEs
Low: pcp security, bug fix, and enhancement update (Oracle Linux 7)
[4.3.2-12] - Fix pcp-atop dynamic memory initialization issues (BZ 1818710) [4.3.2-8] - Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528) - Resolve an selinux policy issue with pmlogger (BZ 1792859)
-
Low max 5.1ELSA-2020-4007 1 CVE
Low: systemd security and bug fix update (Oracle Linux 7)
[219-78.0.1] - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883] - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539] - udev rules: fix memory hot add and remove [Orabug: 31309730] - enable and…
-
Low max 5.8ELSA-2020-3970 2 CVEs
Low: mod_auth_openidc security update (Oracle Linux 7)
[1.8.8-7] - Fix a regression in the previous patches - Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect issue exists in URLs with slash and backslash [rhel-7] [1.8.8-6] - Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open red…
-
LowELSA-2020-4030 1 CVE
Low: exiv2 security update (Oracle Linux 7)
[0.27.0-3] - Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695
-
LowELSA-2020-1787 1 CVE
Low: unzip security update (Oracle Linux 8)
[6.0-43] - Update the man page with the new exit code introduced in 6.0-42 - Related: CVE-2019-13232 [6.0-42] - Fix CVE-2019-13232 - Resolves: CVE-2019-13232
-
LowELSA-2020-1765 2 CVEs
Low: cups security and bug fix update (Oracle Linux 8)
[1:2.2.6-33] - fix more memory leaks found by coverity in 1775668 [1:2.2.6-32] - fix covscan issues raised by 1775668 [1:2.2.6-31] - 1775668 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created [1:2.2.6-30] - 1774462 - CVE-2019-8675…
-
LowELSA-2020-1686 1 CVE
Low: libmspack security and bug fix update (Oracle Linux 8)
[0.7-0.2.alpha.4] - Fix for CVE-2019-1010305 - Remove 'fix' for CVE-2018-14680 as this fix is included in base tar ball. resolves: rhbz#1736745, rhbz#1736743 [0.7-0.2.alpha.3] - Add gating tests resolves: rhbz#1682770
-
Low max 3.7ELSA-2020-1715 1 CVE
Low: dnsmasq security, bug fix, and enhancement update (Oracle Linux 8)
[2.79-11] - Support multiple static leases for single mac on IPv6 (#1779187) [2.79-10] - Fix memory leak in helper.c (#1795370) [2.79-9] - Fix replies to non-recursive queries (#1700916) [2.79-8] - Fix dhcp_lease_time (#1746411) [2.79-7] - Fix TCP queries aft…
-
LowELSA-2020-1828 1 CVE
Low: glibc security, bug fix, and enhancement update (Oracle Linux 8)
[2.28-101.0.1] - add Ampere emag to tunable cpu list (Patrick McGehearty) - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make…
-
LowELSA-2020-1631 1 CVE
Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update (Oracle Linux 8)
gstreamer1 [1.16.1-2] - Update to 1.16.2 for correctly pick up for side gating - Resolves: rhbz#1756299 [1.16.1-1] - Update to 1.16.1 - Enable libcap for the ptp helper permissions - Resolves: rhbz#1756299 gstreamer1-plugins-bad-free [1.16.1-1] - Update to 1.…
-
LowELSA-2020-1604 1 CVE
Low: tcpdump security update (Oracle Linux 8)
[14:4.9.2-6] - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap
-
LowELSA-2020-1616 1 CVE
Low: irssi security update (Oracle Linux 8)
[1.1.1-3] - Fixed use after free when sending SASL login to server Resolves: CVE-2019-13045
-
Low max 4.5ELSA-2020-1912 1 CVE
Low: bluez security update (Oracle Linux 8)
[5.50-3] + bluez-5.50-3 - Bump the version [5.50-2] + bluez-5.50-2 - Fixing CVE-2018-10910 (#1606373)
-
LowELSA-2020-1797 2 CVEs
Low: binutils security and bug fix update (Oracle Linux 8)
[2.30-73.0.1] - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> [2.30-68.0.2] - Backport the non-cycle-detecting-capable deduplicating CTF linker - Backport a fix for an upstream hashtab crash (no upstr…