297 results · Clear filters · Feed
-
Low max 7.8ELSA-2019-2137 2 CVEs
Low: keycloak-httpd-client-install security, bug fix, and enhancement update (Oracle Linux 7)
[0.8-1] - Resolves: rhbz#1673716 - Rebase k-h-c-i to version 0.8 - The rebase also includes fixes for: - rhbz#1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py - rhbz#1533202 - CVE-2017-15112 …
-
LowELSA-2019-2157 1 CVE
Low: freerdp and vinagre security, bug fix, and enhancement update (Oracle Linux 7)
freerdp [2.0.0-1.rc4] - Update to 2.0.0-rc4 (#1291254) vinagre [3.22.0-12] - Apply the patch - Resolves: #1569552 [3.22.0-11] - Set maximum length of RDP password to 255 characters - Resolves: #1569552 [3.22.0-10] - Make vinagre build with FreeRDP 2 library -…
-
LowELSA-2019-2290 3 CVEs
Low: libsolv security and bug fix update (Oracle Linux 7)
[0.6.34-4] - Polish the changelog [0.6.34-3] - Make sure that targeted updates dont do reinstalls - Resolves: bug#1668256 - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533) - Resolves: bug#1669562 - Resolves: bug#1669576 - Fix illegal address acc…
-
LowELSA-2019-2332 2 CVEs
Low: advancecomp security update (Oracle Linux 7)
[1.15-21] - Resolves: #1711051, CVE-2019-8383 denial of service - Resolves: #1710910, CVE-2019-8379 null pointer dereference
-
LowELSA-2019-2051 1 CVE
Low: compat-libtiff3 security update (Oracle Linux 7)
[3.9.4-12] - Fix CVE-2018-7456 - Resolves: #1561319
-
LowELSA-2019-2159 1 CVE
Low: unzip security update (Oracle Linux 7)
[6.0-20] - Fix CVE-2018-18384 Resolves: CVE-2018-18384
-
LowELSA-2019-2197 10 CVEs
Low: elfutils security, bug fix, and enhancement update (Oracle Linux 7)
[0.176-2] - Add elfutils-0.176-xlate-note.patch (#1704754) [0.176-1] - New upstream release (#1676504) CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150, CVE-2019-7664, CVE-2019-7665, CVE-2018-16062, CVE-2018-16402, CVE-2018-16403, CVE-2018-18310, CV…
-
LowELSA-2019-2162 1 CVE
Low: blktrace security update (Oracle Linux 7)
[1.0.5-9] - Fix buffer overflow in the dev_map_read function (#1580579) Fixes CVE-2018-10689
-
LowELSA-2019-2078 1 CVE
Low: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-167.el7] - Reverting kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503] - Resolves: bz#1618503 (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7]) [1.5.3-166.el7] - kvm-seccomp-set-the-seccomp-filter-to-all-thr…
-
Low max 7.8ELSA-2019-2130 1 CVE
Low: libreoffice security and bug fix update (Oracle Linux 7)
[1:5.3.6.1-21.0.1] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.3.6.1-21] - Resolves: rhbz#1066844 drop libreofficekit requires [1:5.3.6.1-20] - Res…
-
LowELSA-2019-2308 1 CVE
Low: libguestfs-winsupport security update (Oracle Linux 7)
[7.2-3] - Fix for CVE-2019-9755 (heap-based buffer overflow leads to local root privilege escalation) resolves: rhbz#1698502
-
LowELSA-2019-1898 1 CVE
Low: httpd security update (Oracle Linux 7)
[2.4.6-89.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-89.1] - Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest
-
Low max 7.5ELSA-2019-1880 1 CVE
Low: curl security and bug fix update (Oracle Linux 7)
[7.29.0-51.0.1.el7_6.3] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html) - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html) -…
-
Low max 3.3ELSA-2019-0201 1 CVE
Low: systemd security update (Oracle Linux 7)
[219-62.0.4] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …
-
LowELSA-2018-3229 3 CVEs
Low: zziplib security update (Oracle Linux 7)
[0.13.62-9] - Fix covscan warning - 'Variable 'file' going out of scope leaks the storage it points to.' has been introduced by the original version of 0001-fix-CVE-2018-7725.patch - Related: 1558596 [0.13.62-8] - Fix CVE-2018-7727 - Resolves: 1558891 [0.13.6…
-
LowELSA-2018-3327 4 CVEs
Low: libmspack security update (Oracle Linux 7)
[0.5-0.6.alpha] - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682 - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553
-
LowELSA-2018-3059 1 CVE
Low: X.org X11 security, bug fix, and enhancement update (Oracle Linux 7)
freeglut [3.0.0-8] - HTTPS URLs - Pin soname to libglut.so.3 in the %files glob [3.0.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.0.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.0.0-5] - Re…
-
Low max 4.8ELSA-2018-3249 1 CVE
Low: setup security and bug fix update (Oracle Linux 7)
[2.8.71-10] - fix crudp name in /etc/protocols (#1566469) - do not list /sbin/nologin and /usr/sbin/nologin in /etc/shells (#1571104)
-
LowELSA-2018-3253 2 CVEs
Low: jasper security update (Oracle Linux 7)
[1.900.1-33] - remove implicit declaration of jas_eprintf (#1585830) [1.900.1-32] - Fix CVE-2016-9396 (#1583721) - Fix CVE-2017-1000050 (#1585830)
-
LowELSA-2018-3032 11 CVEs
Low: binutils security, bug fix, and enhancement update (Oracle Linux 7)
[2.27-34.base.0.1] - Backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error [Orabug 27930573] [2.27-34.base] - Fix seg-fault parsing corrupt AOUT format files. (#1579799) - Fix seg-fault …
-
LowELSA-2018-3071 2 CVEs
Low: krb5 security, bug fix, and enhancement update (Oracle Linux 7)
[1.15.1-34] - In FIPS mode, add plaintext fallback for RC4 usages and taint - Resolves: #1570600 [1.15.1-33] - Use SHA-256 instead of MD5 for audit ticket IDs - Resolves: #1570600 [1.15.1-32] - Include preauth name in trace output if possible - Update cert ge…
-
Low max 3.8ELSA-2018-3158 1 CVE
Low: sssd security, bug fix, and enhancement update (Oracle Linux 7)
[1.16.2-13] - Resolves: rhbz#1593756 - sssd needs to require a newer version of libtalloc and libtevent to avoid an issue in GPO processing [1.16.2-12] - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into…
-
LowELSA-2018-3246 3 CVEs
Low: libcdio security update (Oracle Linux 7)
[0.92-3] - fix CVE-2017-18198 and CVE-2017-18199 - Resolves: rhbz#1553769 - Resolves: rhbz#1553604 [0.92-2] - fix CVE-2017-18201 - Resolves: rhbz#1553621
-
LowELSA-2018-1396 2 CVEs
Low: libvirt security and bug fix update (Oracle Linux 7)
[3.9.0-14.el7_5.4] - lxc: Drop useless check in live device update (rhbz#1557922) - Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922) - qemu: Fix updating device with boot order (rhbz#1557922) - conf: Fix crash in virDomainDefCompati…
-
LowELSA-2018-0849 1 CVE
Low: gcc security, bug fix, and enhancement update (Oracle Linux 7)
[4.8.5-28.0.1] - [Orabug: 27557686] (Egeyar Bagcioglu) - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE. [4.8.5-28] - Minor testsuite fixes to clean up test results (#1469697) - retpoline support for spectre mitigation (#1535655) [4.8.5-…
-
LowELSA-2018-0913 1 CVE
Low: policycoreutils security, bug fix, and enhancement update (Oracle Linux 7)
[2.5-22.0.1] - Lazy unmount private, shared entry (Joe Jin) [orabug 12560705] [2.5-22] - semanage: Fix fcontext help message (#1499259) - semanage: Improve semanage-user.8 man page (#1079946) - semodule: Improve man page (#1337192) [2.5-21] - Update translati…
-
LowELSA-2018-0842 1 CVE
Low: xdg-user-dirs security and bug fix update (Oracle Linux 7)
[0.15-5] - Start using autostart mechanism instead of xinitrc.d script Resolves: #1412762
-
LowELSA-2018-0816 5 CVEs
Low: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-156.el7] - kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405] - kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405] - kvm-vnc-update-fix.patch [bz#1527405] - kvm-vnc-return-directly-if-no-vnc-client-connected.patch [b…
-
Low max 5.3ELSA-2018-0980 1 CVE
Low: openssh security, bug fix, and enhancement update (Oracle Linux 7)
[7.4p1-16 + 0.10.3-2] - Fix for CVE-2017-15906 (#1517226) [7.4p1-15 + 0.10.3-2] - Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467) - Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268) - Do not segfault in audit code dur…
-
LowELSA-2017-1950 1 CVE
Low: samba security, bug fix, and enhancement update (Oracle Linux 7)
[4.6.2-8] - resolves: #1459936 - Fix regression with 'follow symlinks = no' [4.6.2-7] - resolves: #1461336 - Fix smbclient username parsing - resolves: #1460937 - Fix username normalization with winbind [4.6.2-6] - resolves: #1459179 - Fix smbclient session s…
-
Low max 9.1ELSA-2017-2247 5 CVEs
Low: tomcat security, bug fix, and enhancement update (Oracle Linux 7)
[0:7.0.76-2] - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used [0:7.0.76-1] - Resolves: rhbz#14148…
-
LowELSA-2017-2180 1 CVE
Low: ghostscript security and bug fix update (Oracle Linux 7)
[9.07-28] - Security fix for CVE-2017-8291 updated to address SIGSEGV [9.07-27] - Added security fix for CVE-2017-8291 (bug #1446063) [9.07-26] - Updated requirements for lcms2 to avoid possible issues in the future [9.07-25] - Added security fix for CVE-2017…
-
LowELSA-2017-0083 1 CVE
Low: qemu-kvm security and bug fix update (Oracle Linux 7)
[1.5.3-126.el7_3.3] - kvm-net-check-packet-payload-length.patch [bz#1398217] - Resolves: bz#1398217 (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-7.3.z]) [1.5.3-126.el7_3.2] - kvm-virtio-introduce-virtqueue_unmap_sg.…
-
LowELSA-2016-2591 2 CVEs
Low: krb5 security, bug fix, and enhancement update (Oracle Linux 7)
[1.14.1-26] - Use responder in non-preauth AS reqs - Resolves: #1363690 [1.14.1-25] - Fix bad debug_log() call in selinux handling - Resolves: #1292153 [1.14.1-24] - Fix KKDCPP with TLS SNI by always presenting 'Host:' header - Resolves: #1364993 [1.14.1-23] …
-
LowELSA-2016-2573 1 CVE
Low: glibc security, bug fix, and enhancement update (Oracle Linux 7)
[2.17-157] - Rebuild with updated binutils (#1268008) [2.17-156] - malloc arena free free list management fix (#1276753) [2.17-155] - Basic validity check for locale-archive.tmpl (#1350733) [2.17-153] - Add Intel AVX-512 optimized routines (#1298526). [2.17-1…
-
LowELSA-2016-2581 1 CVE
Low: NetworkManager security, bug fix, and enhancement update (Oracle Linux 7)
NetworkManager [1:1.4.0-12] - device: consider a device with slaves configured (rh#1333983) [1:1.4.0-11] - build: add RPM dependency for exact glib2 version (rh#1378809) [1:1.4.0-10] - device: improve connection matching for assuming bond and infiniband (rh#1…
-
LowELSA-2016-2605 1 CVE
Low: util-linux security, bug fix, and enhancement update (Oracle Linux 7)
[2.23.2-33.0.1] - fix Oracle bug 23001516 - backport lscpu: correct the Virtualization type on Xen DomU PV guest - Reviewed-by: Joe Jin <joe.jin@oracle.com> [2.23.2-33] - improve patch for #1007734 (libblkid realpaths) [2.23.2-32] - improve patch for chrt(1) …
-
LowELSA-2016-2593 1 CVE
Low: sudo security, bug fix, and enhancement update (Oracle Linux 7)
[1.8.6p7-20] - RHEL 7.3 erratum - fixed visudo's -q flag Resolves: rhbz#1350828 [1.8.6p7-19] - RHEL 7.3 erratum - removed INPUTRC from env_keep to prevent a potential info leak Resolves: rhbz#1340700 [1.8.6p7-18] - RHEL 7.3 erratum - removed requiretty flag f…
-
LowELSA-2016-2586 1 CVE
Low: python security, bug fix, and enhancement update (Oracle Linux 7)
[2.7.5-48.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-48] - Fix for CVE-2016-1000110 HTTPoxy attack Resolves: rhbz#1359164 [2.7.5-47] - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.get_da…
-
LowELSA-2016-2602 1 CVE
Low: mod_nss security, bug fix, and enhancement update (Oracle Linux 7)
[1.0.14-7] - Add the permission patch to the repository (#1312583) [1.0.14-6] - Check the NSS certificate database directory for read permissions by the Apache user. (#1312583) [1.0.14-5] - Update clean semaphore patch to not free the pinList twice. (#1364560…