8,323 results · Feed
-
HighELSA-2020-0262 1 CVE
Important: openjpeg2 security update (Oracle Linux 7)
[2.3.1-2] - Fix CVE-2020-6851 resolves: #1790586
-
HighELSA-2020-0271 1 CVE
Important: libarchive security update (Oracle Linux 8)
[3.3.2-8] - Fix CVE-2019-18408: RAR use-after-free
-
HighELSA-2020-0273 1 CVE
Important: sqlite security update (Oracle Linux 8)
[3.26.0-4] - Fixed CVE-2019-13734 (#1786508)
-
HighELSA-2020-0274 1 CVE
Important: openjpeg2 security update (Oracle Linux 8)
[2.3.1-2] - Fix CVE-2020-6851 (#1790589)
-
HighELSA-2020-0227 1 CVE
Important: sqlite security update (Oracle Linux 7)
[3.7.17-8.1] - Fixes for CVE-2019-13734 (#1786505)
-
High max 9.8ELSA-2020-0195 1 CVE
Important: python-reportlab security update (Oracle Linux 7)
[2.5-9.el7_7.1] - Do not eval strings passed to toColor - Resolves: #1788552 [2.5-9] - Mass rebuild 2014-01-24 [2.5-8] - Mass rebuild 2013-12-27 [2.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.5-6] - Add a dep on python-imaging …
-
High max 8.1ELSA-2020-0196 7 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.242.b08-0] - Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Resolves: rhbz#1785753 [1:1.8.0.242.b07-1] - Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. -…
-
HighELSA-2020-0203 1 CVE
Important: libarchive security update (Oracle Linux 7)
[3.1.2-14] - Fix patch application error [3.1.2-13] - Fix CVE-2019-18408: RAR use-after-free
-
High max 7.3ELSA-2020-0194 1 CVE
Important: apache-commons-beanutils security update (Oracle Linux 7)
[1.8.3-15] - Fix CVE-2014-0114 - Fix CVE-2019-10086
-
High max 9.8ELSA-2020-0201 1 CVE
Important: python-reportlab security update (Oracle Linux 8)
[3.4.0-6.el8_1_0.2] - Fix Requires for doc subpackage - Resolves: #1788556 [3.4.0-6.el8_1_0.1] - Do not eval strings passed to toColor - Resolves: #1788555
-
High max 8.1ELSA-2020-0202 7 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.242.b08-0] - Update to aarch64-shenandoah-jdk8u242-b08. - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions. - Resolves: rhbz#1785753 [1:1.8.0.242.b07-1] - Add backports of JDK-8031111 & JDK-8132111 to fix TCK issue. -…
-
High max 8.1ELSA-2020-0128 7 CVEs
Important: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.6.10-1] - Update to shenandoah-jdk-11.0.6+10 (GA) - Switch to GA mode for final release. - Add JDK-8236039 backport to resolve OpenShift blocker - Resolves: rhbz#1785753 [1:11.0.6.1-0.0.ea] - Update to shenandoah-jdk-11.0.6+1 (EA) - Switch to EA mode …
-
CriticalELSA-2020-0130 2 CVEs
Critical: .NET Core on Red Hat Enterprise Linux security and bug fix update (Oracle Linux 8)
[102-2.0.1.el8_1] - support OL release scheme [3.0.102-2] - Fix prebuilts leaking into the final build - Fix regressions in binary hardering - Resolves: RHBZ#1788171 [3.0.102-1] - Update to .NET Core Runtime 3.0.2 and SDK 3.0.102 - Resolves: RHBZ#1788171
-
High max 8.8
Important: thunderbird security update (Oracle Linux 8)
[68.4.1-2.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.4.1-2] - Update to 68.4.1 build1
-
High max 8.8
Important: thunderbird security update (Oracle Linux 7)
[68.4.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.4.1-2] - Update to 68.4.1 build1
-
HighELSA-2020-0124 1 CVE
Important: git security update (Oracle Linux 7)
[1.8.3.1-21] - Fix CVE-2019-1387
-
High max 8.1ELSA-2020-0122 7 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.6.10-1.0.1] - link atomic for ix86 build [1:11.0.6.10-1] - Add JDK-8236039 backport to resolve OpenShift blocker - Resolves: rhbz#1785753 [1:11.0.6.10-0] - Update to shenandoah-jdk-11.0.6+10 (GA) - Switch to GA mode for final release. - Resolves: rhbz…
-
HighELSA-2020-5511 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.42.1] - scsi: libsas: delete sas port if expander discover failed (Jason Yan) [Orabug: 30580688] {CVE-2019-15807}
-
Critical max 8.8
Critical: firefox security update (Oracle Linux 8)
[68.4.1-1.0.1.el8_1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references [Orabug: 30530527] [68.4.1-1] - Update to 68.4.1esr build1 - Upda…
-
Critical max 8.8
Critical: firefox security update (Oracle Linux 7)
[68.4.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.4.1-1] - Update to 68.4.1esr build1 - Update to 68.4.0…
-
HighELSA-2020-5508 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.35.1] - ixgbe: protect TX timestamping from API misuse (Manjunath Patil) [Orabug: 30275491] - block: init flush rq ref count to 1 (Josef Bacik) [Orabug: 30360559] - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu) [Orabug: 3…
-
High max 7.5ELSA-2019-4269 3 CVEs
Important: container-tools:ol8 security and bug fix update (Oracle Linux 8)
buildah [1.9.0-5.0.1] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.9.0-5] - Use autosetup macro again. [1.9.0-4] - Fix CVE-2019-10214 (#1734653). [1.9.0-3] - Resolves: #1721247 - enable fips mode [1.9.0-2] - Resolves: #1720654 - tests sub…
-
High max 7.5ELSA-2019-4273 2 CVEs
Important: container-tools:1.0 security update (Oracle Linux 8)
buildah [1.5-6.0.1.gite94b4f9] - Fixes troubles with oracle registry login [Orabug: 29937283] [1.5-6.gite94b4f9] - rebuild because of CVE-2019-9512 and CVE-2019-9514 - Resolves: #1766309 containernetworking-plugins [0.7.4-4.git9ebe139] - rebuild because of CV…
-
High max 8.1ELSA-2019-4360 2 CVEs
Important: libyang security update (Oracle Linux 8)
[0.16.105-3.2] - Related: #1779573 - Fixing a few covscan issues [0.16.105-3.1] - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used - Resolves: #1779576 - CVE-2019-19334 libyang: stack-based…
-
HighELSA-2019-4361 1 CVE
Important: fribidi security update (Oracle Linux 8)
[1.0.4-7] - Security fix for CVE-2019-18397 Resolves: rhbz#1781226
-
HighELSA-2019-4326 1 CVE
Important: fribidi security update (Oracle Linux 7)
[1.0.2-1.1] - Security fix for CVE-2019-18397 Resolves: rhbz#1781224
-
High max 4.3ELSA-2019-4884 1 CVE
Important: python security update (Oracle Linux 7)
[2.7.5-86.0.3] - Prefix dot in domain for proper subdomain validation [CVE-2018-20852][Orabug: 30114725]
-
HighELSA-2019-4356 4 CVEs
Important: git security update (Oracle Linux 8)
[2.18.2-1] - Update to release 2.18.2 - Remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 - Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352, CVE-2019-1353, CVE-2019-1354
-
High max 5.9ELSA-2019-4869 1 CVE
Important: grub2 security update (Oracle Linux 8)
[2.02-78.0.2] - grub-set-bootflag: fix grubenv update method, fix CVE-2019-14865 [Orabug: 30607067]
-
Critical max 9.8
Critical: openslp security update (Oracle Linux 7)
[1:2.0.0-8] - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: #1781701
-
High max 4.3ELSA-2019-4876 1 CVE
Important: python security update (Oracle Linux 7)
[2.7.5-86.0.3] - Prefix dot in domain for proper subdomain validation [CVE-2018-20852][Orabug: 30114725]
-
HighELSA-2019-4878 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.8.4] - Revert 'oled: give panic handler chance to run before kexec' (John Donnelly) [Orabug: 30594702] - Revert 'oled: export symbols' (John Donnelly) [Orabug: 30594702] - net/rds: Recycle RDS headers to speed up connection fail over (Ka-Cheong …
-
HighELSA-2019-4148 5 CVEs
Important: thunderbird security update (Oracle Linux 7)
[68.3.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.3.0-1] - Update to 68.3.0 build2 [68.2.0-2] - Added patch for TLS 1.3 support.
-
HighELSA-2019-4190 2 CVEs
Important: nss, nss-softokn, nss-util security update (Oracle Linux 7)
nss [3.44.0-7] - Increase timeout on ssl_gtest so that slow platforms can complete when running on a busy system. [3.44.0-6] - back out out-of-bounds patch (patch for nss-softokn). - Fix segfault on empty or malformed ecdh keys (#1777712) [3.44.0-5] - Fix out…
-
HighELSA-2019-4195 5 CVEs
Important: thunderbird security update (Oracle Linux 8)
[68.3.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.3.0-2] - Update to 68.3.0 build2 [68.2.0-2] - Added patch for TLS 1.3 support.
-
HighELSA-2019-4870 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.34.1] - block/loop: set hw_sectors (Shaohua Li) [Orabug: 30244514] - block-mq: fix hung due to too much warning log (Junxiao Bi) [Orabug: 30273956] - oled: export symbols (Wengang Wang) [Orabug: 30512063] - oled: give panic handler chance to run b…
-
High max 4.6ELSA-2019-4871 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.41.1] - x86/speculation: Determine swapgs before alternative instructions are set (Patrick Colp) [Orabug: 30379626] - ieee802154: enforce CAP_NET_RAW for raw sockets (Allen Pais) [Orabug: 30444947] {CVE-2019-17053} - mISDN: enforce CAP_…
-
HighELSA-2019-4114 1 CVE
Important: nss security update (Oracle Linux 8)
[3.44.0-9] - Fix out-of-bounds write in NSC_EncryptUpdate (#1775912)
-
CriticalELSA-2019-4107 5 CVEs
Critical: firefox security update (Oracle Linux 7)
[68.3.0-1.0.1] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.3.0-1] - Update to 68.3.0 ESR [68.2.0-4] - Added patch for TLS 1.3 support. [68.2.0-3] - Rebuild [68.2…
-
High max 9.8ELSA-2019-4827 2 CVEs
Important: docker-engine docker-cli security update (Oracle Linux 7)
docker-engine [19.03.1-1.0.0] - update to 19.03.1 [19.03-0.0.1] - update to 19.03