2,730 results · Clear filters · Feed
-
MediumELSA-2015-2360 2 CVEs
Moderate: cups-filters security, bug fix, and enhancement update (Oracle Linux 7)
[1.0.35-21] - Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279). [1.0.35-20] - Improvements to cups-browsed efficiency patch (bug #1191691). [1.0.35-18] - Fix segfault in texttopdf filter (bug #1194263). - Improve…
-
Medium max 8.1ELSA-2015-2088 3 CVEs
Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 7)
[6.6.1p1-22] - Use the correct constant for glob limits (#1160377) [6.6.1p1-21] - Extend memory limit for remote glob in sftp acc. to stat limit (#1160377) [6.6.1p1-20] - Fix vulnerabilities published with openssh-7.0 (#1265807) - Privilege separation weaknes…
-
Medium max 6.5ELSA-2015-2155 14 CVEs
Moderate: file security and bug fix update (Oracle Linux 7)
[5.11-31] - fix #1255396 - Make the build ID output consistent with other tools [5.11-30] - fix CVE-2014-8116 - bump the acceptable ELF program headers count to 2048 [5.11-29] - fix #839229 - fix detection of version of XML files [5.11-28] - fix #839229 - fix…
-
MediumELSA-2015-2393 21 CVEs
Moderate: wireshark security, bug fix, and enhancement update (Oracle Linux 7)
[1.10.14-7.0.1] - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect [1.10.14-7] - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvb_length_remaining() is used - Related: CVE-2015-6244 [1.10.14-6] - Security patch -…
-
MediumELSA-2015-2180 1 CVE
Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update (Oracle Linux 7)
rubygem-bundler [1.7.8-3] - Enforce higher Thor version, which is required by Bundler. Related: rhbz#1194243 [1.7.8-2] - Update to Bundler 1.7.8. Resolves: rhbz#1194243 - Use symlinks for vendored libraries. Resolves: rhbz#1163076 [1.3.1-3] - Mass rebuild 201…
-
MediumELSA-2015-2378 1 CVE
Moderate: squid security and bug fix update (Oracle Linux 7)
[7:3.3.8-26] - Related: #1186768 - removing patch, because of missing tests and incorrent patch [7:3.3.8-25] - Related: #1102842 - squid rpm package misses /var/run/squid needed for smp mode. Squid needs write access to /var/run/squid. [7:3.3.8-24] - Related:…
-
MediumELSA-2015-2154 2 CVEs
Moderate: krb5 security, bug fix, and enhancement update (Oracle Linux 7)
[1.13.2-9] - Add patch and test case for 'KDC does not return proper client principal for client referrals' - Resolves: #1259846 [1.13.2-9] - Ammend patch for RedHat bug #1252454 ('testsuite complains 'Lifetime has increased by 32436 sec while 0 sec passed!',…
-
MediumELSA-2015-2159 5 CVEs
Moderate: curl security, bug fix, and enhancement update (Oracle Linux 7)
[7.29.0-25.0.1] - disable check to make build pass [7.29.0-25] - fix spurious failure of test 1500 on ppc64le (#1218272) [7.29.0-24] - use the default min/max TLS version provided by NSS (#1170339) - improve handling of timeouts and blocking direction to spee…
-
MediumELSA-2015-2241 3 CVEs
Moderate: chrony security, bug fix, and enhancement update (Oracle Linux 7)
[2.1.1-1] - update to 2.1.1 (#1117882) - add -n option to gzip command to not save timestamp [2.1-1] - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821 CVE-2015-1822 CVE-2015-1853) - extend chrony-helper to allow using servers from DNS SRV rec…
-
MediumELSA-2015-2248 1 CVE
Moderate: netcf security, bug fix, and enhancement update (Oracle Linux 7)
[0.2.8-1] - Rebase to netcf-0.2.8 - resolve rhbz#1165965 - CVE-2014-8119 - resolve rhbz#1159000 - support multiple IPv4 addresses in interface config (redhat driver) - resolve rhbz#1113983 - allow static IPv4 config simultaneous with DHCPv4 (redhat driver) - …
-
MediumELSA-2015-2345 1 CVE
Moderate: net-snmp security and bug fix update (Oracle Linux 7)
[1:5.7.2-24] - Fixed lmSensorsTable not reporting sensors with duplicate names (#1252053) - Fixed close() overhead of extend commands (#1252048) - Fixed out-of-bounds write in python code (#1252034) [1:5.7.2-23] - Fixed parsing of invalid variables in incomin…
-
MediumELSA-2015-2079 8 CVEs
Moderate: binutils security, bug fix, and enhancement update (Oracle Linux 7)
[2.23.52.0.1-55] - Add missing delta to patch that fixes parsing corrupted archives. (#1162666) [2.23.52.0.1-54] - Import patch for PR 18270: Create AArch64 GOT entries for local symbols. (#1238783) [2.23.52.0.1-51] - Fix incorrectly generated binaries and DS…
-
MediumELSA-2015-2131 1 CVE
Moderate: openldap security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.40-8] - NSS does not support string ordering (#1231522) - implement and correct order of parsing attributes (#1231522) - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522) - add new cipher suites and correct AES-GCM attri…
-
MediumELSA-2015-2108 1 CVE
Moderate: cpio security and bug fix update (Oracle Linux 7)
[2.11-24] - fix for CVE-2014-9112 [2.11-23] - better check for read() error (rhbz#1138148) - fix ru translation (rhbz#1075513)
-
MediumELSA-2015-2231 7 CVEs
Moderate: ntp security, bug fix, and enhancement update (Oracle Linux 7)
[4.2.6p5-22] - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704) - allow only one step larger than panic threshold with -g (CVE-2015-5300) [4.2.6p5-20] - validate lengths of values in extension fields (CVE-2014-9297) - drop packets with …
-
MediumELSA-2015-2417 1 CVE
Moderate: autofs security, bug fix and enhancement update (Oracle Linux 7)
[5.0.7-54.0.1] - add autofs-5.0.5-lookup-mounts.patch [Orabug:12658280] (Bert Barbe) [1:5.0.7-54] - bz1263508 - Heavy program map usage can lead to a hang - fix out of order call in program map lookup. - Resolves: rhbz#1263508 [1:5.0.7-53] - bz1238573 - RFE: …
-
MediumELSA-2015-2078 2 CVEs
Moderate: postgresql security update (Oracle Linux 7)
[9.2.14-1] - update to 9.2.14 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-14.html [9.2.13-1] - update to 9.2.13 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-13.html [9.2.12-1] - update to 9.2.12 per relea…
-
MediumELSA-2015-3092 1 CVE
Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-98.5.2] - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang) [Orabug: 22145600] {CVE-2015-5156} [3.8.13-98.5.1] - netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver import (Todd Vierling) [Orabug: 22066176]
-
MediumELSA-2015-1978 2 CVEs
Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-229.20.1.OL7] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.20.1] - Revert: [crypto] nx - Check for bogus firmware properties (Phillip Lougher) [1247127 1190103] - Revert: [crypto] nx - Moving NX-AES-CBC to be processed logic (Phillip Loug…
-
MediumELSA-2015-1979 1 CVE
Moderate: libreswan security and enhancement update (Oracle Linux 7)
[3.15-5.0.1] - add libreswan-oracle.patch to detect Oracle Linux distro [3.15-5] - Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for non-existent file hashes [3.15-4] - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias - Reso…
-
MediumELSA-2015-1943 1 CVE
Moderate: qemu-kvm security update (Oracle Linux 7)
[1.5.3-86.el7_1.8] - kvm-qtest-ide-test-disable-flush-test.patch [bz#1273098] - Resolves: bz#1273098 (qemu-kvm build failure race condition in tests/ide-test) [1.5.3-86.el7_1.7] - kvm-CVE-2015-1779-incrementally-decode-websocket-frames.patch [bz#1205050] - kv…
-
MediumELSA-2015-1793 1 CVE
Moderate: qemu-kvm security fix update (Oracle Linux 7)
[1.5.3-86.el7_1.6] - kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248764] - kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248764] - kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248764] - kvm-…
-
MediumELSA-2015-1742 4 CVEs
Moderate: subversion security update (Oracle Linux 7)
[1.7.14-7.1] - add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184, CVE-2015-3187
-
MediumELSA-2015-1699 1 CVE
Moderate: nss-softokn security update (Oracle Linux 7)
[3.14.3-23] - Pick up upstream freebl patch for CVE-2015-2730 - Check for P == Q or P ==-Q before adding P and Q
-
MediumELSA-2015-1694 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 7)
[2.24.1-6] - Fix CVE 2015-4491 - Resolves #1253210
-
MediumELSA-2015-1667 2 CVEs
Moderate: httpd security update (Oracle Linux 7)
[2.4.6-31.0.1.el7_1.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-31.1] - core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-…
-
MediumELSA-2015-1665 16 CVEs
Moderate: mariadb security update (Oracle Linux 7)
[1:5.5.44-1] - Rebase to 5.5.44 Resolves: #1247021
-
MediumELSA-2015-1640 1 CVE
Moderate: pam security update (Oracle Linux 7)
[1.1.1-20.1] - fix CVE-2015-3238 - DoS due to blocking pipe with very long password
-
MediumELSA-2015-1635 3 CVEs
Moderate: sqlite security update (Oracle Linux 7)
[3.7.17-6.1] - Fixes for CVE-2015-3415 CVE-2015-3414 CVE-2015-3416 Resolves: rhbz#1244731 [3.7.17-6] - Release bump for ppc64le [3.7.17-5] - Release bump [3.7.17-4.1] - Backport 64k page fix from latest upstream (#1118151)
-
Medium max 7.5ELSA-2015-1636 1 CVE
Moderate: net-snmp security update (Oracle Linux 7)
[1:5.5-54.0.1.el6_7.1] - Add Oracle ACFS to hrStorage (John Haxby) [orabug 18510373] [1:5.5-54.el6_7.1] - Fixed parsing of invalid variables in incoming packets (#1248410)
-
MediumELSA-2015-1534 4 CVEs
Moderate: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-229.11.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.11.1] - [fs] Fixing lease renewal (Steve Dickson) [1226328 1205048] - [fs] revert 'nfs: Fixing lease renewal' (Carlos Maiolino) [1226328 1205048] - [redhat] spec: Update dracut depend…
-
MediumELSA-2015-3053 3 CVEs
Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-68.3.5] - KVM: x86: SYSENTER emulation is broken (Nadav Amit) [Orabug: 21502739] {CVE-2015-0239} {CVE-2015-0239} - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn) [Orabug: 21502254] {CVE-2015-3339} - eCryptfs: R…
-
MediumELSA-2015-1510 1 CVE
Moderate: clutter security update (Oracle Linux 7)
[1.14.4-12.1] - Fix crash when doing gestures at unlock screen Resolves: rhbz#1227103
-
MediumELSA-2015-3048 2 CVEs
Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-68.3.4] - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark) [Orabug: 21444790] {CVE-2015-2922} - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller) [Orabug: 21444687] {CVE-2015-3636}
-
MediumELSA-2015-1193 1 CVE
Moderate: xerces-c security update (Oracle Linux 7)
[3.1.1-7] Resolves: rhbz#1217104 CVE-2015-0252
-
MediumELSA-2015-1194 3 CVEs
Moderate: postgresql security update (Oracle Linux 7)
[9.2.13-1] - update to 9.2.13 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-13.html [9.2.12-1] - update to 9.2.12 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-12.html [9.2.11-1] - update to 9.2.11 per relea…
-
Medium max 3.7ELSA-2015-1185 1 CVE
Moderate: nss security update (Oracle Linux 7)
nss [3.19.1-3.0.1] - Added nss-vendor.patch to change vendor [3.19.1-3] - Additional NULL initialization. [3.19.1-2] - Updated the patch to keep old cipher suite order - Resolves: Bug 1224449 [3.19.1-1] - Rebase to nss-3.19.1 - Resolves: Bug 1224449 nss-util …
-
MediumELSA-2015-1154 1 CVE
Moderate: libreswan security, bug fix and enhancement update (Oracle Linux 7)
[3.12-10.1.0.1] - add libreswan-oracle.patch to detect Oracle Linux distro [3.12-10.1] - Resolves: rhbz#1226407 CVE-2015-3204 libreswan: crafted IKE packet causes daemon restart [3.12-10] - Resolves: rhbz#1213652 Support CAVS [updated another prf() free symke…
-
MediumELSA-2015-1153 1 CVE
Moderate: mailman security and bug fix update (Oracle Linux 7)
[3:2.1.15-21] - fix CVE-2015-2775 - directory traversal in MTA transports [3:2.1.15-20] - fix #1107652 - do not install patch backup files in documentation [3:2.1.15-19] - fix #1188043 - set 2775 permission only for /etc/mailman [3:2.1.15-18] - fix #1107652 -…
-
MediumELSA-2015-1115 6 CVEs
Moderate: openssl security update (Oracle Linux 7)
[1.0.1e-42.8] - improved fix for CVE-2015-1791 - add missing parts of CVE-2015-0209 fix for corectness although unexploitable [1.0.1e-42.7] - fix CVE-2014-8176 - invalid free in DTLS buffering code - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time - f…