8,323 results · Feed
-
MediumELSA-2020-3966 1 CVE
Moderate: fontforge security update (Oracle Linux 7)
[20120731b-13] - Resolves:rh#1790973 - CVE-2020-5395:out-of-bounds write in sfd.c
-
MediumELSA-2020-3875 5 CVEs
Moderate: tigervnc security and bug fix update (Oracle Linux 7)
[1.8.0-21] - Add upstream patch needed because of previous security fixes Resolves: bz#1826822 [1.8.0-20] - Fix stack buffer overflow in CMsgReader::readSetCursor Resolves: bz#1791773 - Fix heap buffer overflow in DecodeManager::decodeRect Resolves: bz#179176…
-
MediumELSA-2020-3973 1 CVE
Moderate: spamassassin security update (Oracle Linux 7)
[3.4.0-6] - Fix CVE-2019-12420 - Resolves: rhbz#1812976
-
LowELSA-2020-3922 1 CVE
Low: libsndfile security update (Oracle Linux 7)
[1.0.25-12] - fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)
-
Medium max 6.9ELSA-2020-3936 10 CVEs
Moderate: ipa security, bug fix, and enhancement update (Oracle Linux 7)
[4.6.8-5.0.1] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7] - Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() …
-
Medium max 7.5ELSA-2020-4011 2 CVEs
Moderate: e2fsprogs security and bug fix update (Oracle Linux 7)
[1.45.6-19] - fix issues with meta_bg when resizing file system (#1849718) [1.42.9-18] - fix out-of-bounds write on corrupted fs (#1797731) - fix out-of-bounds write on corrupted fs (#1768710) - fix e2fsprogs creating corrupted meta image (#1711880) - fix typ…
-
LowELSA-2020-3971 1 CVE
Low: hunspell security update (Oracle Linux 7)
[1.3.2-16] - Resolves: rhbz#1775556 CVE-2019-16707
-
Low max 8.4ELSA-2020-3869 2 CVEs
Low: pcp security, bug fix, and enhancement update (Oracle Linux 7)
[4.3.2-12] - Fix pcp-atop dynamic memory initialization issues (BZ 1818710) [4.3.2-8] - Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528) - Resolve an selinux policy issue with pmlogger (BZ 1792859)
-
MediumELSA-2020-3876 4 CVEs
Moderate: libvpx security update (Oracle Linux 7)
[1.3.0-8] - Fix for CVE-2020-0034 - Resolves: rhbz#1823909 [1.3.0-7] - Fix for CVE-2019-9232 and CVE-2019-9433 - Resolves: rhbz#1796085, rhbz#1796099 [1.3.0-6] - Fix for CVE-2017-0393 - Resolves: rhbz#1779498 [1.3.0-4] - fix Illegal Instruction abort [1.3.0-3…
-
MediumELSA-2020-3915 1 CVE
Moderate: libssh2 security update (Oracle Linux 7)
[1.8.0-4] - fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498) [1.8.0-3] - sanitize public header file (detected by rpmdiff) [1.8.0-2] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863) - fi…
-
Low max 5.1ELSA-2020-4007 1 CVE
Low: systemd security and bug fix update (Oracle Linux 7)
[219-78.0.1] - Backport upstream patches related to private-tmp (Sushmita Bhattacharya) [Orabug: 31561883] - backport upstream pstore tmpfiles patch (Eric DeVolder) [Orabug: 31414539] - udev rules: fix memory hot add and remove [Orabug: 31309730] - enable and…
-
Medium max 7.1ELSA-2020-3887 1 CVE
Moderate: python-pillow security update (Oracle Linux 7)
[2.0.0-21gitd1c6db8] - Fix for CVE-2020-5313 Resolves: rhbz#1789532 [2.0.0-20gitd1c6db8] - Combined fixes for CVE-2020-5312 and CVE-2019-16865 Resolves: rhbz#1789533 Resolves: rhbz#1774066 [2.0.0-19gitd1c6db8] - Reenabled webp support on little endian archs. …
-
MediumELSA-2020-3868 11 CVEs
Moderate: SDL security update (Oracle Linux 7)
[1.2.15-17] - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578, CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638 - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206, - Resolves: …
-
Medium max 6.7ELSA-2020-3908 1 CVE
Moderate: cpio security update (Oracle Linux 7)
[2.11-28] - Improper input validation when writing tar header fields (#1766222)
-
Medium max 9.8ELSA-2020-3916 1 CVE
Moderate: curl security update (Oracle Linux 7)
[7.29.0-59.0.1] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/C…
-
MediumELSA-2020-3864 3 CVEs
Moderate: cups security and bug fix update (Oracle Linux 7)
[1:1.6.3-51] - 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7] [1:1.6.3-50] - 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var [1:1.6.3-49] - more covscan issues raised from the fix 1672212 [1:1.…
-
Low max 5.8ELSA-2020-3970 2 CVEs
Low: mod_auth_openidc security update (Oracle Linux 7)
[1.8.8-7] - Fix a regression in the previous patches - Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect issue exists in URLs with slash and backslash [rhel-7] [1.8.8-6] - Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open red…
-
Medium max 6.5ELSA-2020-3981 1 CVE
Moderate: samba security, bug fix, and enhancement update (Oracle Linux 7)
[4.10-16-5] - related: #1785121 - Add missing RPM Requires [4.10.16-2] - resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-join [4.10.16-1] - related: #1785121 - Rebase to version 4.10.16 [4.10.1…
-
Medium max 7.5ELSA-2020-3952 2 CVEs
Moderate: expat security update (Oracle Linux 7)
[2.1.0-12] - add security fixes for CVE-2018-20843, CVE-2019-15903
-
MediumELSA-2020-3958 6 CVEs
Moderate: httpd security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.6-95.0.1] - replace index.html with Oracles index page oracle_index.html [2.4.6-95] - Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value [2.4.6-94] - Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a tr…
-
MediumELSA-2020-3972 1 CVE
Moderate: subversion security update (Oracle Linux 7)
[1.7.14-16] - add security fix for CVE-2018-11782
-
MediumELSA-2020-4001 1 CVE
Moderate: bluez security update (Oracle Linux 7)
[5.44-7] - fixing CVE-2020-0556 .
-
MediumELSA-2020-4025 2 CVEs
Moderate: qt5-qtbase security update (Oracle Linux 7)
[5.9.7-4] - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz#1814740 Resolves: bz#1814685 [5.9.7-3] - Fix multilib issue with qtcore-config.h header file Resolves: bz#1534528 - Move libQt5EglF…
-
LowELSA-2020-4030 1 CVE
Low: exiv2 security update (Oracle Linux 7)
[0.27.0-3] - Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695
-
Medium max 8.8
Moderate: webkitgtk4 security, bug fix, and enhancement update (Oracle Linux 7)
[2.28.2-2] - Resolves: rhbz#1817144 Rebuild to support ppc and s390 [2.28.2-1] - Resolves: rhbz#1817144 Rebase to 2.28.2
-
Medium max 7.5ELSA-2020-3940 1 CVE
Moderate: openwsman security update (Oracle Linux 7)
[2.6.3-7.git4391e5c] - Fix CVE-2019-3833 Resolves: #1677691
-
Medium max 9.8ELSA-2020-4005 2 CVEs
Moderate: libxslt security update (Oracle Linux 7)
[1.1.28-6.0.1] - Added libxslt-oracle-enterprise.patch and replaced doc/redhat.gif in tarball [1.1.28-6] - Fix CVE-2019-18197 (#1775516) - Fix CVE-2019-11068 (#1715731)
-
MediumELSA-2020-4039 3 CVEs
Moderate: OpenEXR security update (Oracle Linux 7)
[1.7.1-8] - fix CVE-2020-11764 (#1833552) - fix CVE-2020-11763 (#1833566) - fix CVE-2020-11761 (#1834461)
-
HighELSA-2020-4155 4 CVEs
Important: thunderbird security update (Oracle Linux 8)
[78.3.1-1.0.1] - Update to 68.12.0 build1 [78.3.1-1] - Update to 78.3.1 build1 [78.3.0-3] - Update to 78.3.0 build1 - Remove librdp.so as long as we cannot ship it in RHEL [78.2.1-1] - Update to 78.2.1 build1
-
HighELSA-2020-4059 2 CVEs
Important: virt:ol security update (Oracle Linux 8)
qemu-kvm [2.12.0-99.0.1.el8_2.4] - Added bug30251155-remove-upstream-reference [Orabug: 30251155] [2.12.0-99.el8_2.4] - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869708] - Resolves: bz#1869708 (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w …
-
HighELSA-2020-5861 4 CVEs
Important: edk2 security update (Oracle Linux 7)
[1:1.3.2-1.el7] - Updates for OVMF/AAVMF Version 1.3.2 including: * Fri Jul 31 2020 Aaron Young <aaron.young@oracle.com> - Create new 1.3.2 release for OL7 * Fri May 01 2020 Aaron Young <aaron.young@oracle.com> - Create new 1.3.1 release for OL7 * Wed Feb 05 …
-
High max 8.2ELSA-2020-5862 3 CVEs
Important: olcne nginx security update (Oracle Linux 7)
olcne [1.0.8-2] - Added nginx-image resource in module definitions to ensure nginx image upgrading [1.0.8-1] - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx [1.17.7-2] - Changed…
-
High max 8.2ELSA-2020-5859 3 CVEs
Important: olcne nginx security update (Oracle Linux 7)
olcne [1.1.6-1] - support upgrading nginx - Adress CVE-2019-9511 - Adress CVE-2018-16845 - Adress CVE-2017-7529 - support upgrading flannel nginx [1.17.7-2] - Changed nginx home dir to /var/lib/nginx for consistency [1.17.7-1] - Added Oracle Specific Build Fi…
-
HighELSA-2020-3832 4 CVEs
Important: firefox security update (Oracle Linux 8)
[78.3.0-1.0.1] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [78.3.0-1] - Update to 78.3.0 build1
-
HighELSA-2020-3631 2 CVEs
Important: thunderbird security update (Oracle Linux 7)
[68.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Build with rust-toolset 1.43 [68.12.0-1] - Update to 68.12.0 build1
-
High max 7.2ELSA-2020-3732 98 CVEs
Important: mysql:8.0 security update (Oracle Linux 8)
mysql [8.0.21-1] - Rebase to 8.0.21 - Use bundled libzstd and libevent for RHSCL and RHEL-8.0.0 - Check that we have correct versions in bundled(*) Provides - Remove re2 bundled dependency [8.0.20-1] - Rebase to 8.0.20 [8.0.19-2] - Specify all perl dependenci…
-
High max 6.1ELSA-2020-5848 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.6.2] - Revert 'aarch64/BM: config failed, hub doesnt have any ports' (Thomas Tai) [Orabug: 31838351] [Orabug: 31844671] - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini) [Orabug: 31839185] [Orabug: 31844556] [5.…
-
High max 7.4ELSA-2020-5845 32 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.306.2] - rename kABI whitelists to lockedlists (Dan Duval) [Orabug: 31783150] - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Dave Chiluk) [Orabug: 31350999] {CVE-2019-19922} - sched/fair: Fix thr…
-
High max 5.5ELSA-2020-5844 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-2025.400.9] - btrfs: merge btrfs_find_device and find_device (Anand Jain) [Orabug: 31867382] {CVE-2019-18885} - sctp: implement memory accounting on tx path (Xin Long) [Orabug: 31867387] {CVE-2019-3874} - Revert 'zram: convert remaining CLASS_ATTR() …
-
Medium max 7.5ELSA-2020-3665 3 CVEs
Moderate: go-toolset:ol8 security update (Oracle Linux 8)
golang [1.13.15-1] - Rebase to 1.13.15 - Related: rhbz#1865875 - Related: rhbz#1865873 go-toolset [1.13.15-1] - Rebase to 1.13.15 - Related: rhbz#1865875 - Related: rhbz#1865873