2,730 results · Clear filters · Feed
-
MediumELSA-2019-2178 1 CVE
Moderate: udisks2 security, bug fix, and enhancement update (Oracle Linux 7)
[2.7.3-9] - Build udisks2-lsm subpackage (#1672664) - Fix sigint source removal on daemon exit (#1643350) - CVE-2018-17336: Fix format string vulnerability in udisks_log (#1637427) - Describe command options in the udisksctl man page (#1568269)
-
MediumELSA-2019-2298 5 CVEs
Moderate: libarchive security update (Oracle Linux 7)
[3.1.2-12] - fixed use after free in RAR decoder (#1700749) - fixed double free in RAR decoder (#1700748) [3.1.2-11] - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503) - fix crash on crafted 7zip archives (CVE-2019-1000019) - fix infinite l…
-
MediumELSA-2019-2304 2 CVEs
Moderate: openssl security and bug fix update (Oracle Linux 7)
[1.0.2k-19.0.1] - Bump release for rebuild. [1.0.2k-19] - close the RSA decryption 9 lives of Bleichenbacher cat timing side channel (#1649568) [1.0.2k-18] - fix CVE-2018-0734 - DSA signature local timing side channel - fix CVE-2019-1559 - 0-byte record paddi…
-
Medium max 9.1ELSA-2019-2030 5 CVEs
Moderate: python security and bug fix update (Oracle Linux 7)
[2.7.5-86.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-86] - Security fix for CVE-2019-10160 Resolves: rhbz#1718388 [2.7.5-85] - Security fix for CVE-2019-9948 Resolves: rhbz#1704174 [2.7.5-84] - Disallow control chars in http …
-
Medium max 5.0ELSA-2019-2136 2 CVEs
Moderate: libssh2 security, bug fix, and enhancement update (Oracle Linux 7)
[1.8.0-3] - sanitize public header file (detected by rpmdiff) [1.8.0-2] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863) - fix out-of-bounds memory comparison with specially crafted message channel reque…
-
MediumELSA-2019-2118 1 CVE
Moderate: glibc security and bug fix update (Oracle Linux 7)
aarch64: [2.17-292.0.2] - CR29749550 [armv5] build failure - Add 3 arm patches to aarch64 tree to avoid future build/merge failures. - Rebase aarch64 patches at 30000 to avoid future conflicts. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> - EL E…
-
MediumELSA-2019-2052 6 CVEs
Moderate: libjpeg-turbo security update (Oracle Linux 7)
[1.2.90-8] - Fix CVE-2018-14498 (#1687475) [1.2.90-7] - Fix CVE-2018-11212 (#1586062) - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091) and CVE-2018-11214 (#1589110) - Fix CVE-2018-11813 (#1591203)
-
MediumELSA-2019-2053 10 CVEs
Moderate: libtiff security update (Oracle Linux 7)
[4.0.3-32] - Fix one more Covscan defect - Related: #1647965 [4.0.3-31] - Fix processing of RAS files without colormap - Related: #1647965 [4.0.3-30] - Fix various Covscan defects - Related: #1647965 [4.0.3-29] - Fix compiler warning introduced by patch for C…
-
Medium max 6.5ELSA-2019-2057 1 CVE
Moderate: bind security, bug fix, and enhancement update (Oracle Linux 7)
[32:9.11.4-9.P2] - Fix CVE-2019-6471 [32:9.11.4-8.P2] - Fix scriptlet errors when selinux-policy is not installed (#1647659) [32:9.11.4-7.P2] - Fix inefective limit of TCP clients (CVE-2018-5743) [32:9.11.4-6.P2] - Use /sbin/nologin again (#1676661) [32:9.11.…
-
MediumELSA-2019-2017 1 CVE
Moderate: zsh security and bug fix update (Oracle Linux 7)
[5.0.2-33] - fix regression in oh-my-zsh vcs_info hooks introduced in -30 (#1677696) [5.0.2-32] - fix improper handling of shebang line longer than 64 bytes (CVE-2018-13259)
-
MediumELSA-2019-2075 3 CVEs
Moderate: binutils security and bug fix update (Oracle Linux 7)
[2.27-41.base.0.1] - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R_386_GOT32/R_386_GOT32X IFUNC reloc error [Orabug 27930573] - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.27-41.base] - Fix …
-
Medium max 7.3ELSA-2019-2189 1 CVE
Moderate: procps-ng security and bug fix update (Oracle Linux 7)
[3.3.10-26] - free: unreclaimable slabs counted into free memory, used mem incorrect - Resolves: rhbz#1699264 [3.3.10-25] - ps: recognize SCHED_DEADLINE in CLS field, upstream backport - Resolves: rhbz#1692843 [3.3.10-24] - top: Do not default to the cwd in c…
-
MediumELSA-2019-2135 5 CVEs
Moderate: qt5 security, bug fix, and enhancement update (Oracle Linux 7)
qt5-qt3d [5.9.7-1] - Update to 5.9.7 Resolves: bz#1564024 qt5-qtbase [5.9.7-1] - Enable -doc subpkg on PPC Resolves: bz#1564000 [5.9.7-1] - Update to 5.9.7 Resolves: bz#1564000 qt5-qtcanvas3d [5.9.7-1] - Update to 5.9.7 Resolves: bz#1564001 qt5-qtconnectivity…
-
MediumELSA-2019-2047 1 CVE
Moderate: libcgroup security update (Oracle Linux 7)
[0.41-21] - fix CVE-2018-14348 resolves: #1612122
-
MediumELSA-2019-2049 2 CVEs
Moderate: libmspack security update (Oracle Linux 7)
[0.5-0.7.alpha] - Fixes for CVE-2018-18584 CVE-2018-18585. resolves: rhbz#1648384 rhbz#1648385
-
MediumELSA-2019-2280 2 CVEs
Moderate: uriparser security update (Oracle Linux 7)
[0.7.5-10] - Fix CVE-2018-19198, CVE-2018-19199 Fix unescaped % in a comment Resolves: #1652002, #1652001
-
Medium max 7.6ELSA-2019-2229 1 CVE
Moderate: spice-gtk security and bug fix update (Oracle Linux 7)
libgovirt [0.3.4-2] - Parse XML nodes automatically Related: rhbz#1427467 - Set detailed error message for async call Related: rhbz#1427467 spice-gtk [0.35-4] - Fix bad channel-reset on usbredir Resolves: rhbz#1625550 [0.35-3] - Fix insufficient encoding chec…
-
Medium max 7.0ELSA-2019-2145 1 CVE
Moderate: gvfs security and bug fix update (Oracle Linux 7)
[1.36.2-3] - Force NT1 protocol version for workgroup support (#1619719) [1.36.2-2] - Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isnt available (#1673887)
-
MediumELSA-2019-2154 11 CVEs
Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 7)
[0.19.0-3] - Make OpenSC multilib also on s390 and ppc arches [0.19.0-2] - Make OpenSC multilib again by moving the conflicting files on ix86 arch [0.19.0-1] - Rebase to new upstream release (#1656791) - Add Support for HID Crescendo 144K (#1612372) - Add Sup…
-
Medium max 9.8ELSA-2019-2276 3 CVEs
Moderate: mercurial security update (Oracle Linux 7)
[2.6.2-10] - Add missing hunk for CVE-2018-13347 patch - Related: CVE-2018-13347 [2.6.2-9] - Fix various CVEs - Resolves: CVE-2018-1000132 CVE-2018-13346 CVE-2018-13347
-
MediumELSA-2019-2046 1 CVE
Moderate: polkit security and bug fix update (Oracle Linux 7)
[0.112-22.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.112-22] - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled - Resolves: rhbz#1325512 [0.112-21] - Mitigation of regression caused by fix of CVE-2018-19788 - Re…
-
Medium max 4.2ELSA-2019-2099 1 CVE
Moderate: samba security, bug fix, and enhancement update (Oracle Linux 7)
[4.9.1-6] - related: #1703204 - Fix printing with smbspool as CUPS backend [4.9.1-5] - resolves: #1703204 - Fix smbspool krb5 authentication [4.9.1-4] - resolves: #1690222 - Fix --max-protocol documentation of smbclient - resolves: #1518353 - Fix 'net ads joi…
-
Medium max 5.4ELSA-2019-2177 2 CVEs
Moderate: sssd security, bug fix, and enhancement update (Oracle Linux 7)
[1.16.4-21] - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization - Rebuild japanese gmo file explicitly [1.16.4-20] - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization [1.16.4-19] - Resolves: rhbz#1707959 - sssd does not properly check GS…
-
Medium max 9.8ELSA-2019-2205 4 CVEs
Moderate: tomcat security, bug fix, and enhancement update (Oracle Linux 7)
[0:7.0.76-9] - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended expo sure of resources - Resolve…
-
MediumELSA-2019-2327 9 CVEs
Moderate: mariadb security and bug fix update (Oracle Linux 7)
[1:5.5.64-1] - Rebase to 5.5.64 - Resolves: #1490398 - CVEs fixed: #1610986 CVE-2018-3058 CVE-2018-3063 CVE-2018-3066 CVE-2018-3081 - CVEs fixed: #1664043 CVE-2018-3282 CVE-2019-2503 - CVEs fixed: #1701686 CVE-2019-2529
-
MediumELSA-2019-2343 2 CVEs
Moderate: httpd security and bug fix update (Oracle Linux 7)
[2.4.6-90.0.1] - replace index.html with Oracles index page oracle_index.html Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due…
-
Medium max 7.0ELSA-2019-2091 3 CVEs
Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 7)
[219-67.0.1] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …
-
MediumELSA-2019-2336 2 CVEs
Moderate: unixODBC security update (Oracle Linux 7)
[2.3.1-14.0.1] - backport unchecked malloc memory references fix [Orabug: 29684195] [2.3.1-14] - fixed insecure buffer copy (#1571530) - fixed possible buffer overflow (#1571528) [2.3.1-13] - revert: ltdl bundling [2.3.1-12] - fix the libtool-ltdl compatibili…
-
Medium max 9.8ELSA-2019-2028 14 CVEs
Moderate: ruby security update (Oracle Linux 7)
[2.0.0.648-36] - Introduce 'Gem::UserInteraction#verbose' method as precondition to fix CVE-2019-8321. * rubygems-2.3.0-refactor-checking-really_verbose.patch - Fix escape sequence injection vulnerability in verbose. - Fix escape sequence injection vulnerabil…
-
MediumELSA-2019-2237 2 CVEs
Moderate: nss, nss-softokn, nss-util, and nspr security, bug fix, and enhancement update (Oracle Linux 7)
nspr [4.21.0-1] - Rebase to NSPR 4.21 nss [3.44.0-4] - Fix certutil man page - Fix extracting a public key from a private key for dh, ec, and dsa [3.44.0-3] - Disable TLS 1.3 under FIPS mode - Disable RSASSA-PKCS1-v1_5 in TLS 1.3 - Fix post-handshake auth tra…
-
Medium max 5.3ELSA-2019-2110 1 CVE
Moderate: rsyslog security and bug fix update (Oracle Linux 7)
[8.24.0-38.0.2] - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler [8.24.0-38] RHEL 7.7 ERRATUM - added patch increasing max path size preventing buffer overflow with too long paths resolves: rhbz#1656860 [8.2…
-
MediumELSA-2019-2079 13 CVEs
Moderate: Xorg security and bug fix update (Oracle Linux 7)
gdm [3.28.2-16] - Dont bring up login screen if background session gets killed Related: #1680120 [3.28.2-15] - sync AllowMultipleSessionsPerUser patch from 7.6 branch Resolves: #1664353 - Create dconf dirs by default Resolves: #1664284 [3.28.2-14] - Fix unloc…
-
MediumELSA-2019-2097 1 CVE
Moderate: perl-Archive-Tar security update (Oracle Linux 7)
[1.92-3] - CVE-2018-12015 - Directory traversal in Archive::Tar (bug #1592803)
-
Medium max 5.8ELSA-2019-2294 1 CVE
Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 7)
[4.5.0-23] - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections …
-
MediumELSA-2019-2112 2 CVEs
Moderate: mod_auth_openidc security update (Oracle Linux 7)
[1.8.8-5] - Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an 'AuthType oauth20' configuration [rhel-7] [1.8.8-4] - Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows user-supplied content on…
-
Medium max 8.7ELSA-2019-2125 10 CVEs
Moderate: ovmf security and enhancement update (Oracle Linux 7)
[20180508-6.gitee3198e672e2.el7] - ovmf-MdeModulePkg-HiiDatabase-Fix-potential-integer-overf.patch [bz#1691479] - ovmf-MdeModulePkg-HiiImage-Fix-stack-overflow-when-corrup.patch [bz#1691479] - ovmf-MdeModulePkg-PartitionDxe-Add-check-for-underlying-d.patch [b…
-
Medium max 6.5ELSA-2019-2060 1 CVE
Moderate: dhcp security and bug fix update (Oracle Linux 7)
[12:4.2.5-77.0.1] - Direct users to Oracle Linux support site. [12:4.2.5-77] - Resolves: #1712414 - Reset signal handlers set by isclib [12:4.2.5-76] - Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase [12:4.2.5-75] - Resolves: #1672308 - Do…
-
MediumELSA-2019-2258 2 CVEs
Moderate: http-parser security update (Oracle Linux 7)
[2.7.1-8] - Backport needed test fixes - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser allowed for spaces inside Content-Length header values [rhel-7] [2.7.1-7] - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser…
-
Medium max 9.8ELSA-2019-2272 2 CVEs
Moderate: python-urllib3 security update (Oracle Linux 7)
[1.10.2-7] - Provide python2-urllib3 - Add patch for CVE-2019-11236 Resolves: rhbz#1703360 [1.10.2-6] - Source URL switched to HTTPS protocol - Add patch for CVE-2018-20060 Resolves: rhbz#1658471
-
MediumELSA-2019-2022 12 CVEs
Moderate: poppler security, bug fix, and enhancement update (Oracle Linux 7)
evince [3.28.2-8] - Do not free EvDocumentInfo in ev_window_save_print_settings(), - it is freed in EvDocuments destructor - Resolves: #1541358 [3.28.2-7] - Do not store page-scaling for documents with enforced - page-scaling - Resolves: #1541358 [3.28.2-6] -…