8,323 results · Feed
-
High max 5.2ELSA-2020-5966 1 CVE
Important: docker-cli docker-engine security update (Oracle Linux 7)
docker-cli [19.03.11-7] - Fix for CVE-2020-15257 [19.03.11-6] - Fix for CVE-2020-15157 [19.03.11-5] - Bugfix for 'docker images [name]' not working on docker 19.03.11-ol - Address CVE-2020-16845 [19.03.11-4] - added patch for registry list [19.03.11-3] - upda…
-
High max 5.2ELSA-2020-5964 1 CVE
Important: containerd security update (Oracle Linux 7)
[1.3.9-2] - BUILDINFO: commit=4737bd3784f16c18474a60d8678371108f995d7c - Addresses CVE-2020-15257 [1.3.9-1] - Added Oracle specific build files
-
HighELSA-2020-5956 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.51.2] - Revert 'kexec: Validate pe files against the system_lacklist_keyring' (John Donnelly) [Orabug: 32171714] {CVE-2020-26541} {CVE-2020-26541} [3.8.13-118.51.1] - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neuk…
-
HighELSA-2020-5962 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.45.6] - qla2xxx: disable target reset during link reset and update version (Quinn Tran) [Orabug: 32095664] - scsi: qla2xxx: Fix early srb free on abort (Quinn Tran) [Orabug: 32095664] - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (Ma…
-
HighELSA-2020-5961 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.7.0-21.el7] - exadata: Fix the validation when defining domain groups (Wim ten Have) [Orabug: 32085856] - Revert 'qemu: dont take agent and monitor job for shutdown' (Menno Lageman) [Orabug: 32080283] - Revert 'qemu: dont hold a monitor and agent job for r…
-
HighELSA-2020-5235 10 CVEs
Important: thunderbird security update (Oracle Linux 7)
[78.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.0-1] - Update to 78.5.0 build3
-
HighELSA-2020-5239 10 CVEs
Important: firefox security update (Oracle Linux 7)
[78.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.5.0-1] - Update to 78.5.0 build1
-
HighELSA-2020-5236 10 CVEs
Important: thunderbird security update (Oracle Linux 8)
[78.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.5.0-1] - Update to 78.5.0 build3
-
HighELSA-2020-5237 10 CVEs
Important: firefox security update (Oracle Linux 8)
[78.5.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.5.0-1] - Update to 78.5.0 build1
-
HighELSA-2020-5163 1 CVE
Important: thunderbird security update (Oracle Linux 7)
[78.4.3-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.3-1] - Update to 78.4.3
-
High max 6.8ELSA-2020-5947 1 CVE
Important: resource-agents security update (Oracle Linux 8)
[4.1.1-68] - azure-lb: fix redirect issue Resolves: rhbz#1850778 [4.1.1-67] - gcp-vpc-move-vip: add support for multiple alias IPs Resolves: rhbz#1846733 [4.1.1-65] - azure-events: handle exceptions in urlopen Resolves: rhbz#1845574 [4.1.1-64] - nfsserver: fi…
-
HighELSA-2020-5146 1 CVE
Important: thunderbird security update (Oracle Linux 8)
[78.4.3-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.3-1] - Update to 78.4.3
-
MediumELSA-2020-4481 1 CVE
Moderate: bluez security update (Oracle Linux 8)
[5.50-4] + bluez-5.50-4 - Fixing CVE-2020-0556
-
MediumELSA-2020-5083 3 CVEs
Moderate: microcode_ctl security, bug fix, and enhancement update (Oracle Linux 7)
[2:2.1-73.2.0.1] - for Intel, do not trigger load if on-disk microcode is not an update [Orabug: 30634727] - set early_microcode='no' in virtualized guests to avoid early load bugs [Orabug: 30618736] - ensure late loading fixes are present on 4.1.12-* and 4.1…
-
Medium max 7.5ELSA-2020-5011 3 CVEs
Moderate: bind security and bug fix update (Oracle Linux 7)
[32:9.11.4-26.P2.2] - Fix unsupported algorithms validation (#rh1769876) [32:9.11.4-26.P2.1] - Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentatio…
-
CriticalELSA-2020-5100 1 CVE
Critical: firefox security update (Oracle Linux 8)
[78.4.1-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.1-1] - Update to 78.4.1 [78.4.0-3] - Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading [78.4.0-2] - En…
-
MediumELSA-2020-5085 3 CVEs
Moderate: microcode_ctl security, bug fix and enhancement update (Oracle Linux 8)
[4:20200609-2.20201027.1.0.1] - add support for UEK6 kernels - remove no longer appropriate caveats for 06-2d-07 and 06-55-04 [4:20200609-2.20201027.1] - Update Intel CPU microcode to microcode-20201027 release, addresses CVE-2020-8694, CVE-2020-8695, CVE-202…
-
HighELSA-2020-4913 2 CVEs
Important: thunderbird security update (Oracle Linux 8)
[78.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.0-1] - Update to 78.4.0 build1 - Disabled telemetry [78.3.1-1] - Update to 78.3.1 build1
-
Low max 6.8ELSA-2020-5003 1 CVE
Low: fence-agents security and bug fix update (Oracle Linux 7)
[4.2.1-41.2] - Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 [4.2.1-41.1] - fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable eva…
-
CriticalELSA-2020-5099 1 CVE
Critical: firefox security update (Oracle Linux 7)
[78.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file * Tue Nov 10 2020 erack@redhat.com - 78.4.1-1 - Update to …
-
Medium max 5.5ELSA-2020-5010 2 CVEs
Moderate: python3 security update (Oracle Linux 7)
[3.6.8-18.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-18] - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907) Resolves: rhbz#1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface (CV…
-
Medium max 5.5ELSA-2020-5009 1 CVE
Moderate: python security update (Oracle Linux 7)
[2.7.5-90.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-90] - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907) Resolves: rhbz#1856481
-
High max 9.6
Important: freetype security update (Oracle Linux 8)
[2.9.1-4.el8_3.1] - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891905
-
High max 7.5ELSA-2020-4685 3 CVEs
Important: kernel security update (Oracle Linux 8)
[4.18.0-240.1.1_3.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Ora…
-
Low max 4.8ELSA-2020-5020 1 CVE
Low: tomcat security update (Oracle Linux 7)
[0:7.0.76-16] - Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling
-
Medium max 7.8ELSA-2020-5002 1 CVE
Moderate: curl security update (Oracle Linux 7)
[7.29.0-59.0.1.1] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs…
-
MediumELSA-2020-5012 1 CVE
Moderate: librepo security update (Oracle Linux 7)
[1.8.1-8] - Validate paths read from repomd.xml (RhBug: 1866500)
-
HighELSA-2020-5923 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2025.402.2.1.el7] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2.el7] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable def…
-
HighELSA-2020-5924 2 CVEs
Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)
[4.14.35-2025.402.2.1.el7] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2.el7] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable def…
-
HighELSA-2020-5926 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.45.2] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32137965] {CVE-2020-8694} {CVE-2020-8695} [4.1.12-124.45.1] - Revert 'x86/efi: Initialize and display UEFI secure boot state a bit later during init' (Eric Snowberg) …
-
MediumELSA-2020-5021 1 CVE
Moderate: qt and qt5-qtbase security update (Oracle Linux 7)
qt [1:4.8.7-9] - Fix buffer overflow in XBM parser Resolves: bz#1870297 qt5-qtbase [5.9.7-5] - Fix buffer overflow in XBM parser Resolves: bz#1870365
-
MediumELSA-2020-5023 2 CVEs
Moderate: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-1160.6.1.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x6…
-
MediumELSA-2020-5040 1 CVE
Moderate: libvirt security and bug fix update (Oracle Linux 7)
[4.5.0-36.el7_9.3] - rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifnam…
-
High max 6.5ELSA-2020-5913 14 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2025.402.2.1] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040805] {CVE-2020-8694} {CVE-2020-8695} [4.14.35-2025.402.2] - ocfs2: fix remounting needed after setfacl command (Gang He) - Fix multiple variable definition …
-
HighELSA-2020-5917 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.44.4.1] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040806] {CVE-2020-8694} {CVE-2020-8695}
-
Medium max 8.1ELSA-2020-4442 8 CVEs
Moderate: sqlite security update (Oracle Linux 8)
[3.26.0-11] - Fixed bug in CVE-2019-20218 (#1791592) [3.26.0-10] - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) [3.26.0-9] - Fixed CVE-2019-5018 (#1721509) [3.26.0-8] - Fixed CVE-2019-16168 (#1826897) [3.…
-
MediumELSA-2020-4445 1 CVE
Moderate: librabbitmq security update (Oracle Linux 8)
[0.9.0-2] - Resolves: #1809992, CVE-2019-18609
-
Medium max 8.8
Moderate: GNOME security, bug fix, and enhancement update (Oracle Linux 8)
dleyna-renderer [0.6.0-3] - Add a manual Resolves: #1612579 frei0r-plugins [1.6.1-7] - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz#1703994 gdm [3.28.3-34] - Fix file descriptor leak Resolves: #187785…
-
MediumELSA-2020-4443 1 CVE
Moderate: libarchive security update (Oracle Linux 8)
[3.3.2-9] - Fix out-of-bounds read (CVE-2019-19221) (#1803967)
-
Medium max 9.8ELSA-2020-4464 2 CVEs
Moderate: libxslt security update (Oracle Linux 8)
[1.1.32-5.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.32-5] - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732)