2,730 results · Clear filters · Feed
-
Medium max 5.9ELSA-2020-2663 2 CVEs
Moderate: ntp security update (Oracle Linux 7)
[4.2.6p5-29.0.1] - Bump release to avoid ULN conflict with Oracle modified errata. [4.2.6p5-29.el7_8.2] - don't update transmission time on invalid response (CVE-2020-11868) - randomize transmit timestamp in client requests (CVE-?, #1813787)
-
MediumELSA-2020-2432 3 CVEs
Moderate: microcode_ctl security, bug fix and enhancement update (Oracle Linux 7)
[2:2.1-61.6.0.1] - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727] - set early_microcode='no' in virtualized guests to avoid early…
-
MediumELSA-2020-2549 1 CVE
Moderate: libexif security update (Oracle Linux 7)
[0.6.21-7] - Add patch for CVE-2020-13112 - Resolves: #1840949
-
MediumELSA-2020-2550 1 CVE
Moderate: libexif security update (Oracle Linux 8)
[0.6.21-17] - Add patch for CVE-2020-13112 - Resolves: #1840952
-
MediumELSA-2020-2431 3 CVEs
Moderate: microcode_ctl security, bug fix and enhancement update (Oracle Linux 8)
[4:20191115-4.20200602.2] - Avoid temporary file creation, used for here-documents in check_caveats. [4:20191115-4.20200602.1] - Update Intel CPU microcode to microcode-20200602 release, addresses CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827183): - Upda…
-
Medium max 9.8ELSA-2020-2068 4 CVEs
Moderate: python-pip security update (Oracle Linux 7)
-
Medium max 9.8ELSA-2020-2081 3 CVEs
Moderate: python-virtualenv security update (Oracle Linux 7)
-
MediumELSA-2020-1998 1 CVE
Moderate: gnutls security update (Oracle Linux 8)
[3.6.8-10] - Fix CVE-2020-11501 (#1826176)
-
MediumELSA-2020-1576 1 CVE
Moderate: memcached security update (Oracle Linux 8)
[0:1.5.9-3] - fix null-pointer dereference in 'lru mode' and 'lru temp_ttl' (#1709408) - CVE-2019-11596
-
MediumELSA-2020-1598 6 CVEs
Moderate: libreoffice security and bug fix update (Oracle Linux 8)
[6.0.6.1-20.0.1.el8] - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:6.0.6.1-20] - Resolves: rhbz#1743958 CVE-2019-9849, etc. - Resolves: rhbz#1648281 Ju…
-
MediumELSA-2020-1852 1 CVE
Moderate: patch security and bug fix update (Oracle Linux 8)
[2.7.6-11] - Related: #1733565, apply the patch correctly [2.7.6-10] - CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given - Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist
-
MediumELSA-2020-1600 1 CVE
Moderate: evolution security and bug fix update (Oracle Linux 8)
evolution [3.28.5-12] - Add patch for RH bug #1778799 (New Mail account wizard ignores email address change) [3.28.5-11] - Update patch for RH bug #1764563 (CVE-2018-15587: Reposition signature bar) [3.28.5-10] - Add patch for RH bug #1764563 (CVE-2018-15587:…
-
MediumELSA-2020-1659 1 CVE
Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)
[6.3.6-1] - add weak depenency on grafana-pcp - add patch to mute shellcheck SC1090 for grafana-cli - update to 6.3.6 upstream community sources, see CHANGELOG [6.3.5-1] - drop uaparser patch now its upstream - add xerrors patch, see https://github.com/golang…
-
Medium max 7.5ELSA-2020-1735 1 CVE
Moderate: dpdk security, bug fix, and enhancement update (Oracle Linux 8)
[19.11-4] - Remove MLX{4,5} glue libraries since RHEL 8 ships the correct libibverbs library. (#1805140) [19.11-3] - Remove /usr/share/dpdk/mk/exec-env/{bsd,linux}app symlinks (#1773889) [19.11-2] - Add pretrans to handle /usr/share/dpdk/mk/exec-env/{bsd,linu…
-
MediumELSA-2020-1810 7 CVEs
Moderate: sqlite security and bug fix update (Oracle Linux 8)
[3.26.0-6] - Fixed issues found by covscan [3.26.0-5] - Fixed CVE-2019-13752 (#1786529) - Fixed CVE-2019-13753 (#1786535) - Fixed CVE-2019-13734 (#1786509) - Fixed CVE-2019-19924 (#1789776) - Fixed CVE-2019-19923 (#1789812) - Fixed CVE-2019-19925 (#1789808) -…
-
Medium max 6.3ELSA-2020-1766 5 CVEs
Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)
accountsservice [0.6.50-8] - Dont set HasNoUsers=true if realmd has providers Related: #1750516 appstream-data [8-20191129] - Regenerate the RHEL metadata to include the latest evince changes - Resolves: #1768461 clutter [1.26.2-8] - rebuild to get the new in…
-
Medium max 9.8ELSA-2020-1792 3 CVEs
Moderate: curl security update (Oracle Linux 8)
[7.61.1-12] - double free due to subsequent call of realloc() (CVE-2019-5481) - fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) - fix TFTP receive buffer overflow (CVE-2019-5436)
-
MediumELSA-2020-1665 3 CVEs
Moderate: qt5 security, bug fix, and enhancement update (Oracle Linux 8)
python-qt5 [5.13.1-1] - 5.13.1 Resolves: bz#1775603 qgnomeplatform [0.4-3] - Rebuild (qt5) Resolves: bz#1774418 qt5 [5.12.5-3] - Re-add srpm macros, just leave them empty Resolves: bz#1733133 [5.12.5-2] - Drop srpm macros as we dont ship qtwebengine Resolves:…
-
MediumELSA-2020-1880 1 CVE
Moderate: ibus and glib2 security and bug fix update (Oracle Linux 8)
[2.56.4-8] - Backport patches for GDBus auth Resolves: #1777213
-
Medium max 9.8ELSA-2020-1916 4 CVEs
Moderate: python-pip security update (Oracle Linux 8)
[9.0.3-16] - Add four new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074 Resolves: rhbz#1649153 Resolves: rhbz#1700824 Resolves: rhbz#1702473 Resolves: rhbz#1643829
-
Medium max 7.5ELSA-2020-1913 1 CVE
Moderate: e2fsprogs security, bug fix, and enhancement update (Oracle Linux 8)
[1.45.4-3] - Fix clang warning introduced in previous release (#1783777) [1.45.4-2] - Fix ABI breakage introduced in previous release (#1783777) [1.45.4-1] - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279…
-
MediumELSA-2020-1660 1 CVE
Moderate: mod_auth_mellon security and bug fix update (Oracle Linux 8)
[0.14.0-11] - Resolves: rhbz#1731053 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via the login?ReturnTo= substring which could facilitate information theft [rhel-8] [0.14.0-10] - Resolves: rhbz#1761774 - mod_auth_mellon fix for AJAX header name X-Reque…
-
MediumELSA-2020-1921 1 CVE
Moderate: fontforge security update (Oracle Linux 8)
[20170731-14] - Resolves:rh#1790974 - CVE-2020-5395:out-of-bounds write in sfd.c
-
MediumELSA-2020-1636 2 CVEs
Moderate: libsndfile security update (Oracle Linux 8)
[1.0.28-10] - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alaw_array in alaw (#1673085) [1.0.28-9] - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598482)
-
MediumELSA-2020-1688 1 CVE
Moderate: libtiff security update (Oracle Linux 8)
[4.0.9-17] - Add upstream test suite and enable it in gating [4.0.9-16] - Fix CVE-2019-14973 (#1755705)
-
Medium max 5.3ELSA-2020-1764 2 CVEs
Moderate: python3 security and bug fix update (Oracle Linux 8)
[3.6.8-23.0.1.el8] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-23] - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode - Use OpenSSLs DRBG and disable os.getrandom() function in FIPS mode Resolves: rhb…
-
Medium max 6.5ELSA-2020-1827 2 CVEs
Moderate: libxml2 security update (Oracle Linux 8)
[2.9.7-7.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-7] - Fix CVE-2018-14404 (#1595989) [2.9.7-6] - Fix CVE-2018-9251 (#1565322)
-
Medium max 6.5ELSA-2020-1878 3 CVEs
Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)
openchange [2.3-24.0.1] - Add patch to build against samba 4.11 [2.3-24] - Rebuild for newer samba and libldb samba [4.11.2-13] - resolves: #1802182 - Fix join using netbios name [4.11.2-12] - related: #1781232 - Improve debug output of smbclient - resolves: …
-
MediumELSA-2020-1712 1 CVE
Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)
[20190829git37eef91017ad-9.el8] - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch [bz#1806359] - Resolves: bz#1806359 (bochs-display cannot show graphic wihout driver attach) [20190829git37eef91017ad-8.el8] - edk2-MdeModulePkg-Enable-Disable-S…
-
Medium max 7.5ELSA-2020-1845 1 CVE
Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)
[32:9.11.13-3] - Fix rwlock to be thread-safe (#1740511) [32:9.11.13-2] - Release GeoIP data on reload (#1790879) [32:9.11.13-1] - Update to 9.11.13 [32:9.11.12-5] - Report failures on systemctl reload (#1739428) [32:9.11.12-4] - dhcp: Use monotonic time for …
-
MediumELSA-2020-1702 2 CVEs
Moderate: rsyslog security, bug fix, and enhancement update (Oracle Linux 8)
[8.1911.0-3] RHEL 8.2.0 ERRATUM - added patch reverting rejecting expired certs by default resolves: rhbz#1782353 - added patch silencing false errors on config.enabled statement resolves: rhbz#1659383 [8.1911.0-2] RHEL 8.2.0 ERRATUM - cleaned old patches, fi…
-
Medium max 4.5ELSA-2020-1794 2 CVEs
Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)
[239-29.0.1.el8] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orabug: 30853009] - fix to generate systemd-pstore.service file [Orabug: 30230056] - fix _netdev is missing for iscsi entry …
-
MediumELSA-2020-1840 3 CVEs
Moderate: openssl security and bug fix update (Oracle Linux 8)
[1.1.1c-15] - add selftest of the RAND_DRBG implementation [1.1.1c-14] - fix incorrect error return value from FIPS_selftest_dsa - S390x: properly restore SIGILL signal handler [1.1.1c-12] - additional fix for the edk2 build [1.1.1c-9] - disallow use of SHA-1…
-
MediumELSA-2020-1635 1 CVE
Moderate: gdb security and bug fix update (Oracle Linux 8)
[8.2-11.0.1] - Import Implement s390x arch13 support (Andreas Krebbel, RH BZ 1768593). [8.2-8.0.2] - Forward-port patches from ol8-u1: gdb-ctf-forward-type.patch gdb-ctf-func-args.patch gdb-ctf-optout-var.patch - Reviewed-by: Jose E. Marchesi <jose.marchesi@o…
-
MediumELSA-2020-1725 2 CVEs
Moderate: haproxy security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.23-3] - Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819519) [1.8.23-2] - Consider exist status 143 as success (#1778844) [1.8.23-1] - Update to 1.8.23 (#1774745)
-
MediumELSA-2020-1864 1 CVE
Moderate: gcc security and bug fix update (Oracle Linux 8)
[8.3.1-5.0.3] - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested #include This is the same bug as gcc upstream PR90581 from Gcc9: gcc9-pr90581.patch - Fix Orabug 29541051 - confusing error message when there is a problem with ASAN…
-
MediumELSA-2020-1804 1 CVE
Moderate: sudo security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.29-5] - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 [1.8.29-4] - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 [1.8.29-2] - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz#1733961 Resolves: rhbz#1651662 […
-
MediumELSA-2020-1716 1 CVE
Moderate: unbound security update (Oracle Linux 8)
[1.7.3-10] - Secure ipsec mode (#1772061) - CVE-2019-18934 [1.7.3-9] - Use pthread_mutex_t locks when dealing with I/O operations (#1775708)
-
Medium max 6.5ELSA-2020-1577 29 CVEs
Moderate: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)
exiv2 [0.27.2-5] - Fix failing test Resolves: bz#1800472 [0.27.2-4] - Drop test for the previous CVE as we test it manually and we dont have POC available Resolves: bz#1800472 [0.27.2-3] - Fix infinite loop and hang in Jp2Image::readMetadata() Resolves: bz#18…
-
MediumELSA-2020-1708 4 CVEs
Moderate: liblouis security and bug fix update (Oracle Linux 8)
[2.6.2-21] - A further Coverity fix (#1602585) [2.6.2-20] - Fix buffer overruns found by Coverity (#1602585) [2.6.2-19] - Fix two issues found by Coverity (#1602585) [2.6.2-18] - Apply patch for CVE-2018-12085 (#1589942) [2.6.2-17] - Fix CVE-2018-11577 (#1585…