8,323 results · Feed
-
MediumELSA-2020-4619 1 CVE
Moderate: frr security and bug fix update (Oracle Linux 8)
[7.0-10] - Resolves: #1867793 - FRR does not conform to the source port range specified in RFC5881 [7.0-9] - Resolves: #1852476 - default permission issue eases information leaks [7.0-8] - Resolves: #1819319 - frr fails to start start if the initscripts packa…
-
MediumELSA-2020-4655 2 CVEs
Moderate: cyrus-imapd security update (Oracle Linux 8)
[3.0.7-19] - change ownership of pki files (#1710722) [3.0.7-18] - Move old changelog into separate file (#1671239) [3.0.7-17] - Add fix for CVE-2019-19783 - Add fix for CVE-2019-18928
-
MediumELSA-2020-4709 1 CVE
Moderate: librsvg2 security update (Oracle Linux 8)
[2.42.7-4] - Resolves: rhbz#1804519 Add patch for CVE-2019-20446
-
Medium max 7.5ELSA-2020-4500 4 CVEs
Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)
[32:9.11.20-5] - Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - Include available test [32:9.11.20-4] - Prevent crash on d…
-
Medium max 7.0ELSA-2020-4444 3 CVEs
Moderate: glibc security, bug fix, and enhancement update (Oracle Linux 8)
[2.28-127.0.1] - add Ampere emag to tunable cpu list (Patrick McGehearty) - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make…
-
MediumELSA-2020-4497 1 CVE
Moderate: cyrus-sasl security, bug fix, and enhancement update (Oracle Linux 8)
[2.1.27-5] - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 [2.1.27-4] - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 [2.1.27-3] - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 [2.1.27-2] - Backp…
-
LowELSA-2020-4465 1 CVE
Low: binutils security update (Oracle Linux 8)
[2.30-79.0.1] - Forward-port Oracle patches from 2.30-75.0.1 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.30-79] - Fix x86 assemblers handling of non-8-bit displacements. (#1869401) [2.30-77] - Add tests missing from PT_GNU_SEGMENT patch. (#1…
-
LowELSA-2020-4514 1 CVE
Low: openssl security, bug fix, and enhancement update (Oracle Linux 8)
[1.1.1g-11] - Further changes for SP 800-56A rev3 requirements [1.1.1g-9] - Rewire FIPS_drbg API to use the RAND_DRBG - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters [1.1.1g-7] - Disallow dropping Extended Master Secret extension o…
-
MediumELSA-2020-4820 2 CVEs
Moderate: file-roller security update (Oracle Linux 8)
[3.28.1-3] - Fix CVE-2020-11736 (#1827395) - Fix CVE-2019-16680 (#1767594)
-
MediumELSA-2020-4542 1 CVE
Moderate: cryptsetup security, bug fix, and enhancement update (Oracle Linux 8)
[2.3.3-2] - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 [2.3.3-1] - Update to cryptsetup 2.3.3 - Resolves: #1796826 #1743891 #1785748 [2.3.1-1] - Update to cryptsetup 2.3.1 - Resolves: #1796826 #174389…
-
High max 7.7ELSA-2020-4806 4 CVEs
Important: dpdk security, bug fix, and enhancement update (Oracle Linux 8)
[19.11.3-1] - Rebase DPDK to 19.11.3 (#1868708) [19.11.2-1] - Rebase DPDK to 19.11.2 (#1836830, #1837024, #1837030, #1837022) [19.11.1-1] - Rebase DPDK to 19.11.1 (#1824905) - Remove dpdk-pmdinfo.py (#1801361) - Add Requires: rdma-core-devel libmnl-devel on x…
-
MediumELSA-2020-4490 1 CVE
Moderate: gnupg2 security, bug fix, and enhancement update (Oracle Linux 8)
[2.2.20-2] - fixes for issues found in Coverity scan [2.2.20-1] - upgrade to 2.2.20
-
Medium max 5.1ELSA-2020-4539 1 CVE
Moderate: pcre2 security and enhancement update (Oracle Linux 8)
[10.32-2] - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468)
-
HighELSA-2020-5914 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2036.100.6.1.el8uek] - powercap: restrict energy meter to root access (Kanth Ghatraju) [Orabug: 32040802] {CVE-2020-8694} {CVE-2020-8695} - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov) [Orabug: 32066585] {CVE-2020-27152} {CVE-2…
-
Medium max 9.8ELSA-2020-4760 24 CVEs
Moderate: tcpdump security, bug fix, and enhancement update (Oracle Linux 8)
[14:4.9.3-1] - Resolves: #1804063 - Rebase tcpdump to 4.9.3 to fix multiple CVEs
-
MediumELSA-2020-4453 1 CVE
Moderate: vim security update (Oracle Linux 8)
[2:8.0.1763-15.0.1] - - Remove upstream references [Orabug: 31197557] [2:8.0.1763-15] - 1842755 - CVE-2019-20807 [2:8.0.1763-14] - 1745476 - manpage of vim is garbled in Japanese locale
-
Low max 5.3ELSA-2020-4547 1 CVE
Low: libpcap security, bug fix, and enhancement update (Oracle Linux 8)
[14:1.9.1-4] - Related: #1806422 - Building libpcap to side-tag for tcpdump [14:1.9.1-3] - Related: #1743650 - reverting rdma changes due to unresolved dependency loop [14:1.9.1-2] - Related: #1806422 - Building libpcap to side-tag for tcpdump [14:1.9.1-1] - …
-
MediumELSA-2020-4634 1 CVE
Moderate: libtiff security update (Oracle Linux 8)
[4.0.9-18] - Fix CVE-2019-17546 (#1771372)
-
LowELSA-2020-4436 1 CVE
Low: gnome-software and fwupd security, bug fix, and enhancement update (Oracle Linux 8)
appstream-data [8-20200724] - Regenerate the RHEL metadata to include the EPEL apps too - Resolves: #1844488 [8-20200630] - Regenerate the RHEL metadata - Resolves: #1844488 fwupd [1.4.2-4.0.1] - Build with the updated Oracle certificate - Use oraclesecureboo…
-
Medium max 7.1ELSA-2020-4545 2 CVEs
Moderate: libssh security, bug fix, and enhancement update (Oracle Linux 8)
[0.9.4-2] - Do not return error when server properly closed the channel (#1849071) - Add a test for CVE-2019-14889 - Do not parse configuration file in torture_knownhosts test [0.9.4-1] - Update to version 0.9.4 https://www.libssh.org/2020/04/09/libssh-0-9-4-…
-
MediumELSA-2020-4756 3 CVEs
Moderate: varnish:6 security, bug fix, and enhancement update (Oracle Linux 8)
varnish [6.0.6-2] - new version 6.0.6 - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two client requests leads to information disclosure - Resolves: #1763958 - CVE-2…
-
Medium max 6.5ELSA-2020-4433 4 CVEs
Moderate: python3 security and bug fix update (Oracle Linux 8)
[3.6.8-31.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-31] - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907) Resolves: rhbz#1856481 - Resolve hash collisions for Pv4Interface and IPv6Interface (CV…
-
MediumELSA-2020-4827 1 CVE
Moderate: oniguruma security update (Oracle Linux 8)
[6.8.2-2] - Fix CVE-2019-13225 Resolves: #1771052
-
Medium max 7.5ELSA-2020-4432 1 CVE
Moderate: python-pip security update (Oracle Linux 8)
[9.0.3-18] - Patch for pip install <url> allow directory traversal, leading to arbitrary file write Resolves: rhbz#1868016 [9.0.3-17] - Remove unused CA bundle from the bundled requests library Resolves: rhbz#1775200
-
MediumELSA-2020-4766 8 CVEs
Moderate: libexif security, bug fix, and enhancement update (Oracle Linux 8)
[0.6.22-4] - Add patch for CVE-2020-0181/CVE-2020-0198 - Resolves: #1847753 - Resolves: #1847761 [0.6.22-3] - Also remove timezone from the .mo files - Related: #1841320 [0.6.22-2] - Remove timestamps from the .mo files to avoid multilib conflicts - Related: …
-
Medium max 6.3ELSA-2020-4687 1 CVE
Moderate: oddjob security, bug fix, and enhancement update (Oracle Linux 8)
[0.34.5-3] - Support HOME_MODE from /etc/login.defs Resolves: rhbz#1886362 [0.34.5-2] - Add gating tests using idm:DL1 module stream and upstream tests Resolves: rhbz#1682457 [0.34.5-1] - Upstream release 0.34.5 - Resolves: rhbz#1833289 - Rebase oddjob to 0.3…
-
MediumELSA-2020-4568 1 CVE
Moderate: libldb security, bug fix, and enhancement update (Oracle Linux 8)
[2.1.3-2] - Resolves: rhbz#1849615 - Fix CVE-2020-10730 use-after-free [2.1.3-1] - Resolves: rhbz#1817567 - Rebase libldb to 2.1.3 for samba
-
Medium max 6.5ELSA-2020-4682 8 CVEs
Moderate: grafana security, bug fix, and enhancement update (Oracle Linux 8)
[6.7.4-3] - apply patch for CVE-2020-13430 also to sources, not only to compiled webpack [6.7.4-2] - security fix for CVE-2020-13430 [6.7.4-1] - update to 6.7.4 tagged upstream community sources, see CHANGELOG - security fix for CVE-2020-13379 [6.7.3-1] - upd…
-
MediumELSA-2020-4629 4 CVEs
Moderate: libvpx security update (Oracle Linux 8)
[1.7.0-8] - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454 - Enable webm-io explicitly [1.7.0-7] - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 - Resolves: rhbz#1796086, rhbz#1796100, rhbz#1796448, rhbz#1796454 - Remove…
-
MediumELSA-2020-4697 1 CVE
Moderate: targetcli security and enhancement update (Oracle Linux 8)
[2.1.53-1] - Update to new upstream version [2.1.52-1] - Update to new upstream version
-
MediumELSA-2020-4751 10 CVEs
Moderate: httpd:2.4 security, bug fix, and enhancement update (Oracle Linux 8)
httpd [2.4.37-13.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-30] - Resolves: #1209162 - support logging to journald from CustomLog [2.4.37-29] - Resolves: #1823263 (CV…
-
LowELSA-2020-4649 1 CVE
Low: evolution security and bug fix update (Oracle Linux 8)
bogofilter [1.2.5-2] - Bump version to have OSCI/gating tests rerun with updated tests [1.2.5-1] - Resolves: #1836279 (Update to 1.2.5) evolution [3.28.5-14] - Related: #1817143 (Add a small patch to behave better with WebKitGTK 2.28) [3.28.5-13] - Resolves: …
-
Medium max 5.3ELSA-2020-4763 2 CVEs
Moderate: dovecot security update (Oracle Linux 8)
[1:2.3.8-4] - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756) - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761) - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768) [1:2.3.8-3…
-
MediumELSA-2020-4667 1 CVE
Moderate: mailman:2.1 security and bug fix update (Oracle Linux 8)
[3:2.1.29-10] - Fix match patter to reduce false allocation [3:2.1.29-9] - Fix for CVE-2020-12137 [3:2.1.29-8] - Drop unversioned python from comments. [3:2.1.29-7] - Change attr of /etc/mailman [3:2.1.29-6] - Update run directory references (#1805954) - fix …
-
MediumELSA-2020-4799 1 CVE
Moderate: freeradius:3.0 security and bug fix update (Oracle Linux 8)
[3.0.20-3] - Require make for proper bootstrap execution, removes post script Resolves: bz#1672285 [3.0.20-2] - Fix breakage caused by OpenSSL FIPS regression Related: bz#1855822 Related: bz#1810911 Resolves: bz#1672285 [3.0.20-1] - Update to FreeRADIUS serve…
-
LowELSA-2020-4643 1 CVE
Low: poppler security update (Oracle Linux 8)
[0.66.0-27] - Fix crash on broken file in tilingPatternFill() - Resolves: #1801341
-
MediumELSA-2020-4482 1 CVE
Moderate: libgcrypt security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.5-4] - add PBKDF2 selftest for FIPS POST [1.8.5-3] - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed
-
Medium max 8.0ELSA-2020-4647 25 CVEs
Moderate: freerdp and vinagre security, bug fix, and enhancement update (Oracle Linux 8)
freerdp [2:2.1.1-1] - Update to 2.1.1 (rhbz#1834287). [2:2.0.0-47.rc4] - Fix SCARD_INSUFFICIENT_BUFFER error (rhbz#1803054) - Do not advertise /usb in help output (rhbz#1761144) vinagre [3.22.0-23] - Remove unused variable (CovScan) - Related: #1839744 [3.22.…
-
Medium max 7.5ELSA-2020-4479 3 CVEs
Moderate: libxml2 security update (Oracle Linux 8)
[2.9.7-8.0.1] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.9.7-8] - Fix CVE-2019-19956 (#1793001) - Fix CVE-2020-7595 (#1799786) - Fix CVE-2019-20388 (#1810058)
-
MediumELSA-2020-4483 5 CVEs
Moderate: opensc security, bug fix, and enhancement update (Oracle Linux 8)
[0.20.0-2] - Unbreak different CardOS 5 configurations supporting raw RSA (#1830856) [0.20.0-1] - Rebase to current upstream release (#1810660)