297 results · Clear filters · Feed
-
LowELSA-2015-2355 1 CVE
Low: sssd security, bug fix, and enhancement update (Oracle Linux 7)
[1.13.0-40] - Resolves: rhbz#1270827 - local overrides: don't contact server with overridden name/id [1.13.0-39] - Resolves: rhbz#1267837 - sssd_be crashed in ipa_srv_ad_acct_lookup_step [1.13.0-38] - Resolves: rhbz#1267176 - Memory leak / possible DoS with k…
-
LowELSA-2015-2455 1 CVE
Low: unbound security and bug fix update (Oracle Linux 7)
[1.4.20-26] - Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645) [1.4.20-25] - Resolve ordering loop with nss-lookup.target and ntpdate (#1259806) [1.4.20-24] - Fix CVE-2014-8602 (#1253961) [1.4.20-23] - Remov…
-
LowELSA-2015-2111 1 CVE
Low: grep security and bug fix update (Oracle Linux 7)
[2.20-2] - Fixed invalid UTF-8 byte sequence error in PCRE mode (by pcre-backported-fixes patch) Resolves: rhbz#1217080 - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 - Fixed \w and \W behaviour in multibyte locales Resolves: rhbz#1159012 - Docume…
-
LowELSA-2015-2369 1 CVE
Low: openhpi security, bug fix, and enhancement update (Oracle Linux 7)
[3.4.0-2] - fix /var/lib/openhpi permissions - Resolves: rhbz#1063367 [3.4.0-1] - update to 3.4.0 (#1127908) - Resolves: rhbz#1127908,rhbz#948461,rhbz#1208127,rhbz#1201827
-
LowELSA-2015-2237 1 CVE
Low: rest security update (Oracle Linux 7)
[0.7.92-3] - Fix tests/proxy-continuous Resolves: #1250935 [0.7.92-2] - Fix memory error due to implicit declaration of rest_proxy_call_get_url Resolves: #1183982
-
LowELSA-2015-2401 1 CVE
Low: grub2 security, bug fix, and enhancement update (Oracle Linux 7)
[2.02-0.29.0.1] - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms [bug 19231481] - update Oracle Linux certificates (Alexey Petrenko) - Put 'with' in menuentry instead of 'using' [bug 18504756] …
-
LowELSA-2015-2151 1 CVE
Low: xfsprogs security, bug fix and enhancement update (Oracle Linux 7)
[3.2.2-2] - Fix xfs_metadump disclosure flaw, CVE-2012-2150 (#1251118) [3.2.2-1] - Update to upstream v3.2.2, plus fixes from v3.2.3 (#1223991) - repair: fix unnecessary secondary scan if only last sb is corrupt (#1201238) - repair: check ino alignment value …
-
LowELSA-2015-2140 1 CVE
Low: libssh2 security and bug fix update (Oracle Linux 7)
[1.4.3-10] - check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782) [1.4.3-9] - curl consumes too much memory during scp download (#1080459) - prevent a not-connected agent from closing STDIN (#1147717)
-
LowELSA-2015-3066 1 CVE
Low: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-98.1.1] - md: use kzalloc() when bitmap is disabled (Benjamin Randazzo) [Orabug: 21563041] {CVE-2015-5697}
-
LowELSA-2015-0323 2 CVEs
Low: libvirt security, bug fix, and enhancement update (Oracle Linux 7)
[1.2.8-16.0.1] - Replace docs/et.png in tarball with blank image [1.2.8-16] - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094) - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094) [1.2…
-
LowELSA-2015-0325 2 CVEs
Low: httpd security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.6-31.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-31] - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081) [2.4.6-30] - cor…
-
LowELSA-2015-0535 1 CVE
Low: GNOME Shell security, bug fix, and enhancement update (Oracle Linux 7)
clutter [1.14.4-12] - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz#1115162 [1.14.4-11] - Fix a typo in the Requires [1.14.4-10] - Add patch for quadbuffer stereo suppport Resolves: rhbz#1108891 cogl [1.14.1-6] - Add pa…
-
LowELSA-2015-0330 1 CVE
Low: pcre security and enhancement update (Oracle Linux 7)
[8.32-14] - Fix CVE-2014-8964 (unused memory usage on zero-repeat assertion condition) (bug #1169797) [8.32-13] - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform (bug #1125642) - Raise optimization level to 3 on little-endian 64-bit Powe…
-
LowELSA-2015-0008 1 CVE
Low: libvirt security and bug fix update (Oracle Linux 7)
[1.1.1-29.0.1.el7_0.4] - Replace docs/et.png in tarball with blank image [1.1.1-29.el7_0.4] - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1149078) - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1149078) - qe…
-
LowELSA-2014-1669 1 CVE
Low: qemu-kvm security and bug fix update (Oracle Linux 7)
[1.5.3-60.el7_0.10] - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch [bz#1122925] - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch [bz#1122925] - kvm-block-add-backing-file-option-to-block-stream.patch [bz#1122925] - kvm-block-…
-
LowELSA-2014-1073 1 CVE
Low: nss, nss-util, nss-softokn security, bug fix, and enhancement update (Oracle Linux 7)
nss [3.16.2-2.0.1.el7_0] - Added nss-vendor.patch to change vendor [3.16.2-2] - Restore missing options descriptions fix for certutil manpage - Document certutil options --dump-ext-val, --extGeneric, and --extSAN - Related: Bug 1124659 - Rebase RHEL 7 to at l…
-
LowELSA-2014-1034 1 CVE
Low: tomcat security update (Oracle Linux 7)
[0:7.0.42-8] - Resolves: CVE-2013-4590 - Resolves: CVE-2014-0119 [0:7.0.42-7] - Related: CVE-2014-0099 incrementing release so rpmdiff doesn't complain about - no new entries in the changelog [0:7.0.42-6] - Resolves: CVE-2014-0099 Fix possible overflow when p…