2,729 results · Clear filters · Feed
-
Medium max 7.8ELSA-2020-5002 1 CVE
Moderate: curl security update (Oracle Linux 7)
[7.29.0-59.0.1.1] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs…
-
MediumELSA-2020-5012 1 CVE
Moderate: librepo security update (Oracle Linux 7)
[1.8.1-8] - Validate paths read from repomd.xml (RhBug: 1866500)
-
MediumELSA-2020-5021 1 CVE
Moderate: qt and qt5-qtbase security update (Oracle Linux 7)
qt [1:4.8.7-9] - Fix buffer overflow in XBM parser Resolves: bz#1870297 qt5-qtbase [5.9.7-5] - Fix buffer overflow in XBM parser Resolves: bz#1870365
-
MediumELSA-2020-5023 2 CVEs
Moderate: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1160.6.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x6…
-
MediumELSA-2020-5040 1 CVE
Moderate: libvirt security and bug fix update (Oracle Linux 7)
[4.5.0-36.el7_9.3] - rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifnam…
-
Medium max 8.1ELSA-2020-4442 8 CVEs
Moderate: sqlite security update (Oracle Linux 8)
[3.26.0-11] - Fixed bug in CVE-2019-20218 (#1791592) [3.26.0-10] - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) [3.26.0-9] - Fixed CVE-2019-5018 (#1721509) [3.26.0-8] - Fixed CVE-2019-16168 (#1826897) [3.…
-
MediumELSA-2020-4445 1 CVE
Moderate: librabbitmq security update (Oracle Linux 8)
[0.9.0-2] - Resolves: #1809992, CVE-2019-18609
-
Medium max 8.8
Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)
dleyna-renderer [0.6.0-3] - Add a manual Resolves: #1612579 frei0r-plugins [1.6.1-7] - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz#1703994 gdm [3.28.3-34] - Fix file descriptor leak Resolves: #187785…
-
MediumELSA-2020-4443 1 CVE
Moderate: libarchive security update (Oracle Linux 8)
[3.3.2-9] - Fix out-of-bounds read (CVE-2019-19221) (#1803967)
-
Medium max 9.8ELSA-2020-4464 2 CVEs
Moderate: libxslt security update (Oracle Linux 8)
[1.1.32-5.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-5] - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732)
-
MediumELSA-2020-4619 1 CVE
Moderate: frr security and bug fix update (Oracle Linux 8)
[7.0-10] - Resolves: #1867793 - FRR does not conform to the source port range specified in RFC5881 [7.0-9] - Resolves: #1852476 - default permission issue eases information leaks [7.0-8] - Resolves: #1819319 - frr fails to start start if the initscripts packa…
-
MediumELSA-2020-4655 2 CVEs
Moderate: cyrus-imapd security update (Oracle Linux 8)
[3.0.7-19] - change ownership of pki files (#1710722) [3.0.7-18] - Move old changelog into separate file (#1671239) [3.0.7-17] - Add fix for CVE-2019-19783 - Add fix for CVE-2019-18928
-
MediumELSA-2020-4709 1 CVE
Moderate: librsvg2 security update (Oracle Linux 8)
[2.42.7-4] - Resolves: rhbz#1804519 Add patch for CVE-2019-20446
-
Medium max 7.5ELSA-2020-4500 4 CVEs
Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)
[32:9.11.20-5] - Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - Include available test [32:9.11.20-4] - Prevent crash on d…
-
Medium max 7.0ELSA-2020-4444 3 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 8)
[2.28-127.0.1] - add Ampere emag to tunable cpu list (Patrick McGehearty) - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make…
-
MediumELSA-2020-4497 1 CVE
Moderate: cyrus-sasl security, bug fix, and enhancement update (Oracle Linux 8)
[2.1.27-5] - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 [2.1.27-4] - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 [2.1.27-3] - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 [2.1.27-2] - Backp…
-
MediumELSA-2020-4820 2 CVEs
Moderate: file-roller security update (Oracle Linux 8)
[3.28.1-3] - Fix CVE-2020-11736 (#1827395) - Fix CVE-2019-16680 (#1767594)
-
MediumELSA-2020-4542 1 CVE
Moderate: cryptsetup security, bug fix, and enhancement update (Oracle Linux 8)
[2.3.3-2] - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 [2.3.3-1] - Update to cryptsetup 2.3.3 - Resolves: #1796826 #1743891 #1785748 [2.3.1-1] - Update to cryptsetup 2.3.1 - Resolves: #1796826 #174389…
-
MediumELSA-2020-4490 1 CVE
Moderate: gnupg2 security, bug fix, and enhancement update (Oracle Linux 8)
[2.2.20-2] - fixes for issues found in Coverity scan [2.2.20-1] - upgrade to 2.2.20
-
Medium max 5.1ELSA-2020-4539 1 CVE
Moderate: pcre2 security and enhancement update (Oracle Linux 8)
[10.32-2] - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468)
-
Medium max 9.8ELSA-2020-4760 24 CVEs
Moderate: tcpdump security, bug fix, and enhancement update (Oracle Linux 8)
[14:4.9.3-1] - Resolves: #1804063 - Rebase tcpdump to 4.9.3 to fix multiple CVEs
-
MediumELSA-2020-4453 1 CVE
Moderate: vim security update (Oracle Linux 8)
[2:8.0.1763-15.0.1] - - Remove upstream references [Orabug: 31197557] [2:8.0.1763-15] - 1842755 - CVE-2019-20807 [2:8.0.1763-14] - 1745476 - manpage of vim is garbled in Japanese locale
-
MediumELSA-2020-4634 1 CVE
Moderate: libtiff security update (Oracle Linux 8)
[4.0.9-18] - Fix CVE-2019-17546 (#1771372)
-
Medium max 7.1ELSA-2020-4545 2 CVEs
Moderate: libssh security, bug fix, and enhancement update (Oracle Linux 8)
[0.9.4-2] - Do not return error when server properly closed the channel (#1849071) - Add a test for CVE-2019-14889 - Do not parse configuration file in torture_knownhosts test [0.9.4-1] - Update to version 0.9.4 https://www.libssh.org/2020/04/09/libssh-0-9-4-…
-
MediumELSA-2020-4756 3 CVEs
Moderate: varnish:6 security, bug fix, and enhancement update (Oracle Linux 8)
varnish [6.0.6-2] - new version 6.0.6 - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure - Resolves: #1763958 - CVE-2…
-
Medium max 6.5ELSA-2020-4433 4 CVEs
Moderate: python3 security and bug fix update (Oracle Linux 8)
[3.6.8-31.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-31] - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907) Resolves: rhbz#1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface (CV…
-
MediumELSA-2020-4827 1 CVE
Moderate: oniguruma security update (Oracle Linux 8)
[6.8.2-2] - Fix CVE-2019-13225 Resolves: #1771052
-
Medium max 7.5ELSA-2020-4432 1 CVE
Moderate: python-pip security update (Oracle Linux 8)
[9.0.3-18] - Patch for pip install <url> allow directory traversal, leading to arbitrary file write Resolves: rhbz#1868016 [9.0.3-17] - Remove unused CA bundle from the bundled requests library Resolves: rhbz#1775200
-
MediumELSA-2020-4766 8 CVEs
Moderate: libexif security, bug fix, and enhancement update (Oracle Linux 8)
[0.6.22-4] - Add patch for CVE-2020-0181/CVE-2020-0198 - Resolves: #1847753 - Resolves: #1847761 [0.6.22-3] - Also remove timezone from the .mo files - Related: #1841320 [0.6.22-2] - Remove timestamps from the .mo files to avoid multilib conflicts - Related: …
-
Medium max 6.3ELSA-2020-4687 1 CVE
Moderate: oddjob security, bug fix, and enhancement update (Oracle Linux 8)
[0.34.5-3] - Support HOME_MODE from /etc/login.defs Resolves: rhbz#1886362 [0.34.5-2] - Add gating tests using idm:DL1 module stream and upstream tests Resolves: rhbz#1682457 [0.34.5-1] - Upstream release 0.34.5 - Resolves: rhbz#1833289 - Rebase oddjob to 0.3…
-
MediumELSA-2020-4568 1 CVE
Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 8)
[2.1.3-2] - Resolves: rhbz#1849615 - Fix CVE-2020-10730 use-after-free [2.1.3-1] - Resolves: rhbz#1817567 - Rebase libldb to 2.1.3 for samba
-
Medium max 6.5ELSA-2020-4682 8 CVEs
Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)
[6.7.4-3] - apply patch for CVE-2020-13430 also to sources, not only to compiled webpack [6.7.4-2] - security fix for CVE-2020-13430 [6.7.4-1] - update to 6.7.4 tagged upstream community sources, see CHANGELOG - security fix for CVE-2020-13379 [6.7.3-1] - upd…
-
MediumELSA-2020-4629 4 CVEs
Moderate: libvpx security update (Oracle Linux 8)
[1.7.0-8] - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454 - Enable webm-io explicitly [1.7.0-7] - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454 - Remove…
-
MediumELSA-2020-4697 1 CVE
Moderate: targetcli security and enhancement update (Oracle Linux 8)
[2.1.53-1] - Update to new upstream version [2.1.52-1] - Update to new upstream version
-
MediumELSA-2020-4751 10 CVEs
Moderate: httpd:2.4 security, bug fix, and enhancement update (Oracle Linux 8)
httpd [2.4.37-13.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-30] - Resolves: #1209162 - support logging to journald from CustomLog [2.4.37-29] - Resolves: #1823263 (CV…
-
Medium max 5.3ELSA-2020-4763 2 CVEs
Moderate: dovecot security update (Oracle Linux 8)
[1:2.3.8-4] - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756) - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761) - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768) [1:2.3.8-3…
-
MediumELSA-2020-4667 1 CVE
Moderate: mailman:2.1 security and bug fix update (Oracle Linux 8)
[3:2.1.29-10] - Fix match patter to reduce false allocation [3:2.1.29-9] - Fix for CVE-2020-12137 [3:2.1.29-8] - Drop unversioned python from comments. [3:2.1.29-7] - Change attr of /etc/mailman [3:2.1.29-6] - Update run directory references (#1805954) - fix …
-
MediumELSA-2020-4799 1 CVE
Moderate: freeradius:3.0 security and bug fix update (Oracle Linux 8)
[3.0.20-3] - Require make for proper bootstrap execution, removes post script Resolves: bz#1672285 [3.0.20-2] - Fix breakage caused by OpenSSL FIPS regression Related: bz#1855822 Related: bz#1810911 Resolves: bz#1672285 [3.0.20-1] - Update to FreeRADIUS serve…
-
MediumELSA-2020-4482 1 CVE
Moderate: libgcrypt security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.5-4] - add PBKDF2 selftest for FIPS POST [1.8.5-3] - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed
-
Medium max 8.0ELSA-2020-4647 25 CVEs
Moderate: freerdp and vinagre security, bug fix, and enhancement update (Oracle Linux 8)
freerdp [2:2.1.1-1] - Update to 2.1.1 (rhbz#1834287). [2:2.0.0-47.rc4] - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054) - Do not advertise /usb in help output (rhbz#1761144) vinagre [3.22.0-23] - Remove unused variable (CovScan) - Related: #1839744 [3.22.…