8,321 results · Feed
-
Critical max 8.8ELSA-2022-0332 1 CVE
Critical: samba security and bug fix update (Oracle Linux 8)
[4.14.5-9] - resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717 - resolves: rhbz#2046160 - Fix possible segfault while joining a domain - resolves: rhbz#2046152 - Fix CVE-2021-44142 [4.14.5-8] - resolves: rhbz#2026717 - Dir containi…
-
Medium max 5.3ELSA-2022-0306 12 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.322.b06-1] - Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8…
-
High max 9.8ELSA-2022-0290 4 CVEs
Important: parfait:0.5 security update (Oracle Linux 8)
parfait [0.5.4-4] - Obsolete (remove) vulnerable versions of log4j12 (NVR < 1.2.17-23) when upgrading to parfait 0.5.4-4 (CVE-2021-4104) [0.5.4-3] - Drop all code explicitly using Log4J (BZ 2032158)
-
Medium max 5.3ELSA-2022-0307 12 CVEs
Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 8)
[1:1.8.0.322.b06-2] - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz#2039366 [1:1.8.0.322.b06-1] - Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for f…
-
High max 7.8
Important: polkit security update (Oracle Linux 7)
[0.112-26.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.112-26.1] - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034
-
High max 7.8
Important: polkit security update (Oracle Linux 8)
[0.115-13.0.1] - Increase timeout to avoid defunct processes [Orabug: 26930744] [0.115-13.el8_5.1] - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034
-
HighELSA-2022-0258 1 CVE
Important: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-43.1.0.1] - scoreboard: fix null pointer deference [Orabug: 33690670][CVE-2021-34798] - fix ap_escape_quote logic [Orabug: 33690686][CVE-2021-39275] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's i…
-
Medium max 5.3ELSA-2022-0204 15 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.14.0.9-1.0.1] - link atomic for ix86 build [1:11.0.14.0.9-1] - Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 [1:11…
-
Medium max 5.3ELSA-2022-0185 15 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.14.0.9-2] - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz#2039366 [1:11.0.14.0.9-1] - Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarb…
-
High max 8.4
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-348.12.2_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.gen…
-
HighELSA-2022-0177 1 CVE
Important: gegl04 security update (Oracle Linux 8)
[0.4.4-6.2] - spec bump because of build pipeline issues [0.4.4-6.1] - Fix CVE-2021-45463 (#2035423)
-
HighELSA-2022-0199 1 CVE
Important: libreswan security update (Oracle Linux 8)
[4.4-4.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.4-4] - Resolves: rhbz#2036902 rebuild to enable rpminspect [4.4-3] - Resolves: rhbz#2036902: fix patch application [4.4-2] - Resolves: rhbz#2036902 ikev1: disable diagnostics logging on…
-
High max 8.4
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.302.7.2.1] - vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33761451] {CVE-2022-0185}
-
Medium max 5.3ELSA-2022-0161 15 CVEs
Moderate: java-17-openjdk security update (Oracle Linux 8)
[1:17.0.2.0.8-4] - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz#2039366 [1:17.0.2.0.8-3] - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@ - Up…
-
High max 8.4
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.302.7.2.1] - vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33761451] {CVE-2022-0185}
-
HighELSA-2022-0162 1 CVE
Important: gegl security update (Oracle Linux 7)
[0.2.0-19.1] - fix CVE-2021-45463 (#2035416)
-
HighELSA-2022-0143 4 CVEs
Important: httpd security update (Oracle Linux 7)
[2.4.6-97.0.5.4] - mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690] - replace index.html with Oracle's index page oracle_index.html [2.4.6-97.4] - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests …
-
Medium max 7.4ELSA-2022-9023 1 CVE
Moderate: openssl security update (Oracle Linux 7)
[1.0.2k-23.0.1] - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison [Orabug: 32467026] - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059] - Add TLS KDF self-test [Orabug: 32467193] - Add EC keys pairwise co…
-
High max 9.8ELSA-2022-0130 12 CVEs
Important: firefox security update (Oracle Linux 8)
[91.5.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.5.0-1] - Update to 91.5.0 build1
-
High max 9.8ELSA-2022-0129 12 CVEs
Important: thunderbird security update (Oracle Linux 8)
[91.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.5.0-1] - Update to 91.5.0 build1
-
High max 9.8ELSA-2022-0127 12 CVEs
Important: thunderbird security update (Oracle Linux 7)
[91.5.0-1.0.2] - Removed aarch64 exclusion. [91.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [91.5.0-1] - Update to 91.5.0 build1
-
Medium max 7.4ELSA-2022-0064 1 CVE
Moderate: openssl security update (Oracle Linux 7)
[1.0.2k-23] - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#1996054
-
High max 9.8ELSA-2022-0124 12 CVEs
Important: firefox security update (Oracle Linux 7)
[91.5.0-1.0.2] - Enabled aarch64 builds [91.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [91.5.0-1] - Updat…
-
Medium max 8.8
Moderate: webkitgtk4 security update (Oracle Linux 7)
[2.28.2-3] - Fix CVE-2021-30858 - Resolves: #2006421
-
MediumELSA-2022-0063 3 CVEs
Moderate: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1160.53.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and…
-
High max 6.4
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2047.510.5.2] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33722441] {CVE-2021-4155} [4.14.35-2047.510.5.1] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Ora…
-
High max 6.4
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2047.510.5.2.el7uek] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33722441] {CVE-2021-4155} [4.14.35-2047.510.5.1.el7uek] - fget: check that the fd still exists after getting a ref to it (Linus …
-
High max 7.8
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.59.1.2] - fix regression in 'epoll: Keep a reference on files added to the check list' (Al Viro) [Orabug: 33679854] {CVE-2021-1048} - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679806] {CVE-2021-0920…
-
High max 6.4
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2136.302.7.2] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33699625] {CVE-2021-4155} [5.4.17-2136.302.7.1] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabu…
-
High max 6.4
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.302.7.2] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33699625] {CVE-2021-4155} [5.4.17-2136.302.7.1] - fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabu…
-
HighELSA-2022-9005 2 CVEs
Important: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-43.0.2] - scoreboard: fix null pointer deference [Orabug: 33690670][CVE-2021-34798] - fix ap_escape_quote logic [Orabug: 33690686][CVE-2021-39275]
-
HighELSA-2021-9638 10 CVEs
Important: qemu security update (Oracle Linux 7)
-
HighELSA-2022-0003 4 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-17] - CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171), CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)
-
High max 7.5ELSA-2022-0001 1 CVE
Important: grafana security update (Oracle Linux 8)
[7.5.9-5] - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
-
MediumELSA-2021-5236 2 CVEs
Moderate: postgresql:13 security update (Oracle Linux 8)
postgresql [13.5-1] - Update to 13.5 - Resolves: #2024608
-
MediumELSA-2021-5227 1 CVE
Moderate: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-348.7.1_5.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genk…
-
Medium max 7.4ELSA-2021-5226 1 CVE
Moderate: openssl security update (Oracle Linux 8)
[1:1.1.1k-5] - CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005400
-
MediumELSA-2021-5235 2 CVEs
Moderate: postgresql:12 security update (Oracle Linux 8)
postgresql [12.9-1] - Update to 12.9 - Resolves: #2024677
-
Medium max 7.5ELSA-2021-5206 1 CVE
Moderate: log4j security update (Oracle Linux 7)
[0:1.2.17-17] - Fix remote code execution vulnerability - Resolves: CVE-2021-4104
-
HighELSA-2021-9623 1 CVE
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[5.4.17-2136.302.6.1] - rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33667276] [5.4.17-2136.302.6] - Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty) [Orabug: 33627551] [5.4.17-2136.302.5] - Revert drm: Initi…