8,323 results · Feed
-
MediumELSA-2020-4625 4 CVEs
Moderate: spamassassin security update (Oracle Linux 8)
[3.4.2-10] - Fixed CVE-2018-11805 - Resolves: rhbz#1787514 - Fixed CVE-2020-1930 - Resolves: rhbz#1820649 - Fixed CVE-2020-1931 - Resolves: rhbz#1820650 [3.4.2-9] - Fix CVE-2019-12420 - Resolves: rhbz#1812977 [3.4.2-8] - Removed the obsolete SOUGHT channel fo…
-
MediumELSA-2020-4659 3 CVEs
Moderate: gd security update (Oracle Linux 8)
* Fri Mar 27 2020 fjanus@redhat.com - 2.2.5-7 - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone Resolves: RHBZ#1811788 - Fixed heap based buffer overflow in gd_color_match.c:gdImageColorMatch() in libgd as used in imagecolormatch() Res…
-
MediumELSA-2020-4627 11 CVEs
Moderate: SDL security update (Oracle Linux 8)
[1.2.15-38] - fix CVEs - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212, rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216, rhbz#1716217, rhbz#1716218, rhbz#1716219
-
Medium max 8.6ELSA-2020-4690 5 CVEs
Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update (Oracle Linux 8)
qt5-qtbase [5.12.5-6] - OpenSSL: handle SSL_shutdowns errors properly Resolves: bz#1851538 [5.12.5-5] - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz#1814739 Resolves: bz#1814683 - Fix: XML…
-
MediumELSA-2020-4508 1 CVE
Moderate: libsolv security, bug fix, and enhancement update (Oracle Linux 8)
[0.7.11-1] - Update to 0.7.11 - selected bug fixes: * support arch<->noarch package changes when creating patch conflicts from the updateinfo data * also support other rpm database types * fixed solv_zchunk decoding error if large chunks are used * treat retr…
-
LowELSA-2020-4628 2 CVEs
Low: libreoffice security, bug fix, and enhancement update (Oracle Linux 8)
libcmis [0.5.2-1] - Related: rhbz#1796893 update to 0.5.2 liborcus [0.14.1-1] - Related: rhbz#1796893 update to 0.14.1 libreoffice [6.3.6.2-3.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added…
-
LowELSA-2020-4469 1 CVE
Low: cups security and bug fix update (Oracle Linux 8)
[1:2.2.6-38] - 1775590 - rastertoepson filter crashes with paper size A6 [1:2.2.6-37] - forgot to enable optimization - 1833516 [1:2.2.6-36] - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied) - 1689207 - Add …
-
Low max 5.1ELSA-2020-4553 1 CVE
Low: systemd security, bug fix, and enhancement update (Oracle Linux 8)
[239-40.0.1] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orab…
-
MediumELSA-2020-4650 2 CVEs
Moderate: cloud-init security, bug fix, and enhancement update (Oracle Linux 8)
[19.4-11.0.1] - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672] - Update OCI Datasource to support IMDSv2 - limit permissions [Orabug: 31352433] - Changes to ignore all enslaved interfaces [Orabug: 30092148] - Fix s…
-
MediumELSA-2020-4805 1 CVE
Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)
[20200602gitca407c7246bf-3.el8] - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718] - Resolves: bz#1861718 (Very slow boot when overcommitting CPU) [20200602gitca407c7246bf-2.el8] - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-…
-
Medium max 7.5ELSA-2020-4807 1 CVE
Moderate: prometheus-jmx-exporter security update (Oracle Linux 8)
[0.12.0-6] - Fix CVE-2017-18640 by using updated snakeyaml.
-
Medium max 7.5ELSA-2020-4484 2 CVEs
Moderate: expat security update (Oracle Linux 8)
[2.2.5-4] - add security fixes for CVE-2018-20843, CVE-2019-15903
-
Medium max 7.8ELSA-2020-4599 1 CVE
Moderate: curl security and bug fix update (Oracle Linux 8)
[7.61.1-14] - avoid overwriting a local file with -J (CVE-2020-8177) [7.61.1-13] - load built-in openssl engines (#1854369)
-
Medium max 7.5ELSA-2020-4689 1 CVE
Moderate: openwsman security update (Oracle Linux 8)
[2.6.5-7] - Fix CVE-2019-3833 Resolves: #1687865 [2.6.5-6] - Fix name of Patch6
-
LowELSA-2020-4638 1 CVE
Low: sysstat security update (Oracle Linux 8)
[11.7.3-5] - Rebuild [11.7.3-4] - Package onboarded to gating [11.7.3-3] - Fix memory corruption bug due to integer overflow (#1790608)
-
Medium max 9.8ELSA-2020-4641 5 CVEs
Moderate: python38:3.8 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 7.5ELSA-2020-4694 3 CVEs
Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 7.5ELSA-2020-4654 2 CVEs
Moderate: python27:2.7 security update (Oracle Linux 8)
-
MediumELSA-2020-4712 1 CVE
Moderate: subversion:1.10 security update (Oracle Linux 8)
-
Medium max 9.9ELSA-2020-4743 18 CVEs
Moderate: squid:4 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 6.9ELSA-2020-4670 10 CVEs
Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8)
bind-dyndb-ldap [11.3-1] - New upstream release - Resolves: rhbz#1845211 ipa [4.8.7-12.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.8.7-12] - Require selinux sub package in the proper version Related: RHBZ#1868432 - SELinux: do…
-
Medium max 7.8ELSA-2020-4431 46 CVEs
Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 8)
[4.18.0-240.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 2…
-
Medium max 6.9
Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 7.5ELSA-2020-4676 6 CVEs
Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)
-
High max 6.5ELSA-2020-5912 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.44.4] - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS (himanshu.madhani@cavium.com) [Orabug: 32020790] [4.1.12-124.44.3] - qed: Reduce verbosity of unimplemented MFW messages (Mintz, Yuval) [Orabug: 31959299] - kexec: validate…
-
High max 9.6
Important: freetype security update (Oracle Linux 7)
[2.8-14.el7_9.1] - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635
-
HighELSA-2020-4910 4 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.20.4-12] - CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393), CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407) - Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes [1.20.4-11] - Fix a crash when moving an animated…
-
HighELSA-2020-4909 2 CVEs
Important: thunderbird security update (Oracle Linux 7)
[78.4.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [78.4.0-1] - Update to 78.4.0 build1 - Disabled telemetry
-
High max 7.8ELSA-2020-4908 1 CVE
Important: libX11 security update (Oracle Linux 7)
[1.6.7-3] - Fix CVE-2020-14363 (#1873922)
-
High max 6.1ELSA-2020-5906 1 CVE
Important: containerd security update (Oracle Linux 7)
[1.2.14-1.0.1] - BUILDINFO: commit=259ae80da592d4f6b5e3cdc87202d36bc86a3579 - Addresses CVE-2020-15157 [1.2.14-1.0.0] - Added Oracle specific build files
-
High max 6.1ELSA-2020-5900 1 CVE
Important: docker-engine docker-cli security update (Oracle Linux 7)
docker-engine [19.03.11-6] - Fix for CVE-2020-15157 [19.03.11-5] - Bugfix for 'docker images [name]' not working on docker 19.03.11-ol - Address CVE-2020-16845 [19.03.11-4] - added patch for registry list [19.03.11-3] - update to 19.03.11 for CVE-2020-13401 […
-
Medium max 5.3ELSA-2020-4350 7 CVEs
Moderate: java-1.8.0-openjdk security and bug fix update (Oracle Linux 7)
[1:1.8.0.272.b10-1] - Add backport of JDK-8215727: 'Restore JFR thread sampler loop to old / previous behaviour' - Resolves: rhbz#1876665 [1:1.8.0.272.b10-0] - Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release …
-
Medium max 5.3ELSA-2020-4347 7 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.272.b10-1] - Add backport of JDK-8215727: 'Restore JFR thread sampler loop to old / previous behaviour' - Resolves: rhbz#1876665 [1:1.8.0.272.b10-0] - Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release …
-
HighELSA-2020-4317 2 CVEs
Important: firefox security update (Oracle Linux 8)
[78.4.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.0-1] - Update to 78.4.0 build2
-
HighELSA-2020-4310 2 CVEs
Important: firefox security update (Oracle Linux 7)
[78.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.4.0-1] - Update to 78.4.0 build2
-
HighELSA-2020-4276 2 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-1160.2.2.OL7] - Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x6…
-
Medium max 5.3ELSA-2020-4307 7 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.9.11-0.0.1] - link atomic for ix86 build [1:11.0.9.11-0] - Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665 [1:11.0.9.11-0] - Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of J…
-
Medium max 5.3ELSA-2020-4305 7 CVEs
Moderate: java-11-openjdk security and bug fix update (Oracle Linux 8)
[1:11.0.9.11-0] - Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has …
-
High max 6.7ELSA-2020-4286 5 CVEs
Important: kernel security and bug fix update (Oracle Linux 8)
[4.18.0-193.28.1_2.OL8] - Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Or…
-
Medium max 7.3ELSA-2020-4272 4 CVEs
Moderate: nodejs:12 security and bug fix update (Oracle Linux 8)
nodejs [1:12.18.4-2] - Resolves: RHBZ#1883966 - nodejs-devel not installable due to missing brotli - Some spec fixes [12.18.4-1] - Rebase to 12.18.4 nodejs-nodemon nodejs-packaging