2,730 results · Clear filters · Feed
-
MediumELSA-2019-2285 1 CVE
Moderate: keepalived security and bug fix update (Oracle Linux 7)
[1.3.5-16] - Rework previous misc_script/vrrp_script patch (#1667292) [1.3.5-15] - Rework previous checker comparison patch (#1715308) [1.3.5-14] - Make checker variables non global (#1715308) [1.3.5-13] - Fix comparison of checkers on reload (#1715308) [1.3.…
-
MediumELSA-2019-1951 4 CVEs
Moderate: nss and nspr security, bug fix, and enhancement update (Oracle Linux 8)
nspr [4.21.0-2] - Rebuild [4.21.0-1] - Update to NSPR 4.21 nss [3.44.0-7] - Backport fixes from 3.44.1 [3.44.0-6] - Add continuous RNG test required by FIPS - fipstest: use CKM_TLS12_MASTER_KEY_DERIVE instead of vendor specific mechanism [3.44.0-5] - Rebuild …
-
Medium max 5.3ELSA-2019-1896 1 CVE
Moderate: 389-ds-base security and bug fix update (Oracle Linux 7)
[1.3.8.4-25.1] - Bump version to 1.3.8.4-25.1 - Resolves: Bug 1718689 - dse.ldif strip-off string after 1023 character (missing patch file) [1.3.8.4-25] - Bump version to 1.3.8.4-25 - Resolves: Bug 1722828 - referint update should discard any changes if mep u…
-
Medium max 7.3ELSA-2019-1884 1 CVE
Moderate: libssh2 security update (Oracle Linux 7)
[1.4.3-12.0.1.el7_6.3] - Bump and rebuild. [1.4.3-12.el7_6.3] - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
-
Medium max 7.0ELSA-2019-1517 1 CVE
Moderate: gvfs security update (Oracle Linux 8)
[1.36.2-2.1] - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1690470) [1.36.2-2] - rebuild
-
MediumELSA-2019-1527 1 CVE
Moderate: WALinuxAgent security update (Oracle Linux 8)
[2.2.32-1.0.1.el8_0.1] - Add oracle support to fix waagent.service build issue [2.2.32-1.el8_0.1] - wla-Add-fixes-for-handling-swap-file-and-other-nit-fixes.patch [bz#1711338] - Resolves: bz#1711338 (CVE-2019-0804 WALinuxAgent: swapfile created with weak perm…
-
Medium max 9.8ELSA-2019-0984 2 CVEs
Moderate: python36:3.6 security update (Oracle Linux 8)
python-PyMySQL [0.8.0-10] - Bumping due to problems with modular RPM upgrade path (#1695587) - Related: rhbz#1693974 python-docs [3.6.7-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-docutils [0.14-12] - Bumping due…
-
MediumELSA-2019-1817 7 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.4.11-0] - Update to shenandoah-jdk-11.0.4+11 (GA) - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:11.0.4.10-0.0.ea] - Update to shenandoah-jdk-11.0.4+10 (EA) - Resolves: rhbz#1724452 [1:11.0.4.9-0.0.ea] - Update to shenandoah-jdk-11…
-
MediumELSA-2019-1518 2 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.3.7-2.0.1] - link atomic for ix86 build (Livy Ge) [1:11.0.3.7-2] - Do not generate lib-style requires for -slowdebug subpackages. - Resolves: rhbz#1693468 [1:11.0.3.7-2] - Fix requires/provides for the non-system JDK case. JDK 11 is not a system JDK a…
-
MediumELSA-2019-1816 6 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.222.b10-0] - Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452 [1:1.8.0.222.b09-0] - Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:1.8.0.222.b08-0.0.ea] - Update to aar…
-
MediumELSA-2019-0990 1 CVE
Moderate: systemd security and bug fix update (Oracle Linux 8)
[239-13.0.1.3] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set RemoveIPC=no in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 1…
-
MediumELSA-2019-1519 1 CVE
Moderate: go-toolset:ol8 security update (Oracle Linux 8)
go-toolset [1.11.5-2] - Include patch to fix CVE-2019-9741 - Resolves: rhbz#1690443 golang [1.11.5-2] - Include patch to fix CVE-2019-9741 - Resolves: rhbz#1690443 [1.11.5-2] - Switch to pagure fork for Go FIPS
-
MediumELSA-2019-1839 6 CVEs
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.231-2.6.19.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.231-2.6.19.1] - Add missing hyphen in tapset filename. - Resolves: rhbz#1724452 [1:1.7.0.231-2.6.19.0] - Update tapset filename matching pattern. - Resolves: rhbz#1724452 [1:1.7.0.231-2.6.19…
-
MediumELSA-2019-1810 7 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.4.11-0.0.1] - link atomic for ix86 build [1:11.0.4.11-0] - Update to shenandoah-jdk-11.0.4+11 (GA) - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:11.0.4.10-0.0.ea] - Update to shenandoah-jdk-11.0.4+10 (EA) - Resolves: rhbz#1724452 …
-
MediumELSA-2019-1815 6 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.222.b10-0] - Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452 [1:1.8.0.222.b09-0] - Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:1.8.0.222.b08-0.0.ea] - Update to aar…
-
MediumELSA-2019-4680 1 CVE
Moderate: docker-engine security update (Oracle Linux 7)
docker-engine [ 18.09.1-1.0.8] - cherry-picked fix for CVE-2018-15664 from upstream [18.09.1-1.0.7] - added runc version requirement [18.09.1-1.0.6] - disable kmem accounting for UEKR4 docker-cli [ 18.09.1-1.0.8] - rebuild [18.09.1-1.0.7] - rebuild [18.09.1-1…
-
MediumELSA-2019-0778 2 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.3.7-0.0.1] - link atomic for ix86 build [1:11.0.3.7-0] - Add -mstackrealign workaround to build flags to avoid SSE issues on x86 - Resolves: rhbz#1693468 [1:11.0.3.7-0] - Update to shenandoah-jdk-11.0.3+7 (April 2019 GA) - Resolves: rhbz#1693468 [1:11…
-
MediumELSA-2019-0597 1 CVE
Moderate: cloud-init security update (Oracle Linux 7)
[18.2-1.0.1] - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2: 1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata 2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataRea…
-
Medium max 4.3ELSA-2019-0485 1 CVE
Moderate: tomcat security update (Oracle Linux 7)
[0:7.0.76-9] - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
-
MediumELSA-2019-0483 1 CVE
Moderate: openssl security and bug fix update (Oracle Linux 7)
[1.0.2k-16.0.1.el7_6.1] - Bump release for rebuild. [1.0.2k-16.1] - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction
-
Medium max 7.5ELSA-2019-0482 1 CVE
Moderate: cockpit security update (Oracle Linux 7)
[173.2-1.0.1] - turn off display of subscriptions menu item in GUI - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oralce.com) - Remove Red Hat references. [173.2-1] - ws: Fix bug parsing invalid base64 headers rhbz#1672296
-
MediumELSA-2019-0464 1 CVE
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.211-2.6.17.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.211-2.6.17.1] - Produce debug symbols for libpulse-java.so - Set IT_CFLAGS=-g so that debug symbols for the pulse audio - native library are being produced. This is needed to fix - rpmdiff e…
-
MediumELSA-2019-0435 1 CVE
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.201.b09-0] - Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577 [1:1.8.0.192.b12-0] - Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577 [1:1.8.0.192.b12-0] - Add 8160748 for AArch64 wh…
-
MediumELSA-2019-0436 1 CVE
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.2.7-0.0.1] - link atomic for ix86 build [1:11.0.2.7-0] - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU) - Make tagsuffix optional and comment it out while unused. - Drop JDK-8211105/RH1628612/RH1630996 applied upstream. - Drop JDK-8209639/RH1640…
-
Medium max 5.9ELSA-2019-0194 1 CVE
Moderate: bind security update (Oracle Linux 7)
[32:9.9.4-73] - Fixes debug level comments (#1647539)
-
Medium max 5.9ELSA-2018-3663 1 CVE
Moderate: sos-collector security update (Oracle Linux 7)
[1.5-3.0.1] - To recognize OL system[OraBug 28807430] - import os module to detect /etc/redhat-release [OraBug 28740046] [1.5-3] - Resolve race condition in cluster profile loading - Quote all options globally - RHBZ#1633515 - RHBZ#1647955 [1.5-2] - Fix clust…
-
Medium max 7.0ELSA-2018-3651 2 CVEs
Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-957.1.3.el7.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_ key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.1.3.el7] - [x86] Mark…
-
Medium max 6.5ELSA-2018-3041 2 CVEs
Moderate: python security and bug fix update (Oracle Linux 7)
[2.7.5-76.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-76] - Remove an unversioned obsoletes tag Resolves: rhbz#1627059 [2.7.5-75] - Provide the /usr/libexec/platform-python symlink to the main binary Resolves: rhbz#1599159 [2.…
-
MediumELSA-2018-3107 1 CVE
Moderate: wpa_supplicant security and bug fix update (Oracle Linux 7)
[1:2.6-12] - Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526) [1:2.6-11] - Better handling of /run/wpa_supplicant (rh #1507919) [1:2.6-10] - Fix memory leak when macsec MKA/PSK is used (rh #1500442) - Fix authentication failure when the MAC is…
-
Medium max 9.8ELSA-2018-3157 5 CVEs
Moderate: curl and nss-pem security and bug fix update (Oracle Linux 7)
curl [7.29.0-51] - require a new enough version of nss-pem to avoid regression in yum (#1610998) [7.29.0-50] - remove dead code, detected by Coverity Analysis - remove unused variable, detected by GCC and Clang [7.29.0-49] - make curl --speed-limit work with …
-
Medium max 5.9ELSA-2018-3050 3 CVEs
Moderate: gnutls security, bug fix, and enhancement update (Oracle Linux 7)
[3.3.29-8.0.1] - Include ECDSA KAT into selftests for FIPS140-2 compliance [Orabug 27484156] [3.3.29-8] - Backported --sni-hostname option which allows overriding the hostname advertised to the peer (#1444792) - Improved counter-measures in TLS CBC record pad…
-
MediumELSA-2018-3052 1 CVE
Moderate: wget security and bug fix update (Oracle Linux 7)
[1.14-18] - Fix CVE-2018-0494 (#1576106) [1.14-17] - Fix segfault when Digest Authentication header is missing 'qop' part (#1545310) [1.14-16] - Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)
-
MediumELSA-2018-3092 4 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 7)
[2.17-260.0.9] - Regenerate plural.c - OraBug 28806294. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.17-260.0.7] - intl: Port to Bison 3.0 - Backport of upstream gettext commit 19f23e290a5e4a82b9edf9f5a4f8ab6192871be9 - OraBug 28806294. - Rev…
-
MediumELSA-2018-3221 5 CVEs
Moderate: openssl security, bug fix, and enhancement update (Oracle Linux 7)
[1.0.2k-16.0.1] - sha256 is used for the RSA pairwise consistency test instead of sha1 [1.0.2k-16] - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on FIPS DSA parameter generation (#1603597) [1.0.2k-14] - …
-
MediumELSA-2018-3113 1 CVE
Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 7)
[4.5.0-10] - conf: correct false boot order error during domain parse (rhbz#1601318) [4.5.0-9] - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910) - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910) - virDomainNetDefCheck…
-
Medium max 7.5ELSA-2018-3127 1 CVE
Moderate: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 7)
[1.3.8.4-15] - Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch [1.3.8.4-14] - Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack [1.3.8.4-13] - Bump version to 1.3.8.4-13 - Resolves: Bug 1…
-
MediumELSA-2018-3335 1 CVE
Moderate: xerces-c security update (Oracle Linux 7)
[3.1.1-9] - Fix CVE-2016-4463 - Resolves: #1534481
-
Medium max 5.4ELSA-2018-3056 3 CVEs
Moderate: samba security, bug fix, and enhancement update (Oracle Linux 7)
[4.8.3-4] - resolves: #1614132 - Fix delete-on-close after smb2_find - resolves: #1614265 - Fix CVE-2018-1139 - resolves: #1614269 - Fix CVE-2018-10858 [4.8.3-3] - resolves: #1581016 - Add smbclient quiet argument [4.8.3-2] - related: #1538743 - Fix local use…
-
MediumELSA-2018-3065 5 CVEs
Moderate: libkdcraw security update (Oracle Linux 7)
[4.10.5-5] - Resolves: #1557171, #1557189, #1558954 use the system LibRaw
-
Medium max 6.5ELSA-2018-3242 1 CVE
Moderate: glusterfs security, bug fix, and enhancement update (Oracle Linux 7)
[3.12.2-18] - fixes bugs bz#1524336 bz#1622029 bz#1622452 [3.12.2-17] - fixes bugs bz#1615578 bz#1619416 bz#1619538 bz#1620469 bz#1620765 [3.12.2-16] - fixes bugs bz#1569657 bz#1608352 bz#1609163 bz#1609724 bz#1610825 bz#1611151 bz#1612098 bz#1615338 bz#16154…