8,323 results · Feed
-
LowELSA-2019-3700 3 CVEs
Low: openssl security, bug fix, and enhancement update (Oracle Linux 8)
[1.1.1c-2] - do not try to use EC groups disallowed in FIPS mode in TLS - fix Valgrind regression with constant-time code [1.1.1c-1] - update to the 1.1.1c release [1.1.1b-6] - adjust the default cert pbe algorithm for pkcs12 -export in the FIPS mode [1.1.1b-…
-
Medium max 8.7ELSA-2019-3338 2 CVEs
Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8)
[20190308git89910a39dcfd-6.el8] - edk2-ArmVirtPkg-silence-DEBUG_VERBOSE-masking-0x00400000-.patch [bz#1714446] - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch [bz#1714446] - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch [bz…
-
MediumELSA-2019-3530 1 CVE
Moderate: glib2 security, bug fix, and enhancement update (Oracle Linux 8)
[2.56.4-7] - Backport patch for CVE-2019-12450 Resolves: #1722101 [2.56.4-5] - Backport glib2 change needed for accountsservice dbus codegen fix Resolves: #1713081 [2.56.4-4] - Back GHmac with GnuTLS for FIPS - Resolves: #1630260 [2.56.4-3] - Backport per-des…
-
MediumELSA-2019-3390 3 CVEs
Moderate: qt5-qtbase security and bug fix update (Oracle Linux 8)
qt5-qtbase [5.11-1-7] - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg Resolves: bz#1692970 - Fix QImage allocaion failure Resolve: bz#1667860 - Fix double free in QXmlStreamReader Resolve: bz#1667858 - Fix segmentation fault on malformed BMP …
-
Low max 3.2ELSA-2019-3464 1 CVE
Low: virt-manager security, bug fix, and enhancement update (Oracle Linux 8)
[2.2.1-2.0.1] - Add OL release support to virt-install for OL KVM guest creation [Orabug: 26135782] [2.2.1-2] - man: virt-install: Fix a couple of launchSecurity related typos (rhbz#1741846) [2.2.1-1] - Rebased to virt-manager-2.2.1 (rhbz#1726535) - The rebas…
-
LowELSA-2019-3387 1 CVE
Low: osinfo-db and libosinfo security and bug fix update (Oracle Linux 8)
gnome-boxes [3.28.5-7] - Bump the release to 3.28.5-7 - Related: #1739897 [3.28.5-7] - Filter off unsupported architectures - Related: #1739897 [3.28.5-6] - Revert 'Add 3D acceleration option (powered by virgl)' - Related: #1647004 [3.28.5-5] - Add 3D acceler…
-
Medium max 4.2ELSA-2019-3582 1 CVE
Moderate: samba security, bug fix, and enhancement update (Oracle Linux 8)
[4.10.4-1] - resolves: #1712378 - Fix smbspool CUPS backend - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain' [4.10.4-0] - related: #1638001 - Rebase to Samba version 4.10.4 - resolves: #1597298 - Build Samba with python3 - resolves: #1658558 - …
-
LowELSA-2019-3643 1 CVE
Low: gettext security update (Oracle Linux 8)
[0.19.8.1-17] - Ported CI gating tests to Python 3.6 [0.19.8.1-16] - add CI gating tests [0.19.8.1-15] - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049)
-
MediumELSA-2019-3592 1 CVE
Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)
[239-18.0.1] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 1…
-
Low max 3.1ELSA-2019-3391 1 CVE
Low: libreswan security and bug fix update (Oracle Linux 8)
[3.29-6.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [3.29-6] - Resolves: rhbz#1714331 support NSS based IKE KDFs [require updated nss for rhbz 1738689, memleak fix] [3.29-5] - Resolves: rhbz#1714331 support NSS based IKE KDFs so libreswan …
-
Medium max 6.8ELSA-2019-3702 3 CVEs
Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 8)
[8.0p1-3 + 0.10.3-7] - Fix typos in manual pages (#1668325) - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436) - Unbreak ssh-keygen -A in FIPS mode (#1732424) - Add missing RSA certificate types to offered hostkey t…
-
LowELSA-2019-3352 1 CVE
Low: gdb security, bug fix, and enhancement update (Oracle Linux 8)
[8.2-6.el8] - Fix yum vs dnf messaging for RHEL8 (RH BZ 1666249): Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch Do not define DNF_DEBUGINFO_INSTALL for RHEL. - Backport 'Remove support for old mangling schemes' (Simon Marchi, RH BZ 1668635) - Backport…
-
Medium max 9.8ELSA-2019-3335 6 CVEs
Moderate: python27:2.7 security and bug fix update (Oracle Linux 8)
-
Medium max 6.4ELSA-2019-3353 1 CVE
Moderate: freeradius:3.0 security and bug fix update (Oracle Linux 8)
-
High max 6.5ELSA-2019-3401 4 CVEs
Important: 389-ds:1.4 security, bug fix, and enhancement update (Oracle Linux 8)
-
MediumELSA-2019-3433 1 CVE
Moderate: go-toolset:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
-
MediumELSA-2019-3436 2 CVEs
Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)
-
MediumELSA-2019-3476 1 CVE
Moderate: squid:4 security and bug fix update (Oracle Linux 8)
-
High max 6.4ELSA-2019-3494 2 CVEs
Important: container-tools:1.0 security and bug fix update (Oracle Linux 8)
-
High max 6.4ELSA-2019-3403 2 CVEs
Important: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 7.5ELSA-2019-3583 2 CVEs
Moderate: yum security, bug fix, and enhancement update (Oracle Linux 8)
createrepo_c [0.11.0-3] - Backport patch to switch off timestamps on documentation in order to remove file conflicts (RhBug:1738788) [0.11.0-2] - Consistently produce valid URLs by prepending protocol. (RhBug:1632121) - modifyrepo_c: Prevent doubling of compr…
-
MediumELSA-2019-3610 1 CVE
Moderate: libqb security and bug fix update (Oracle Linux 8)
[1.0.3-10] Avoid deadlock in IPC connections Resolves: rhbz#1718773 [1.0.3-9] Improve security of SHM files used for IPCs Resolves: rhbz#1714854 [1.0.3-8] - Add RHEL-8.1 gating tests Resolves: rhbz#1682119
-
Low max 5.4ELSA-2019-3651 1 CVE
Low: sssd security, bug fix, and enhancement update (Oracle Linux 8)
[2.2.0-19] - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid new ones (kcm) [2.2.0-18] - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8 - Also sync. kcm multihost tests with master [2.2.0-17] - Resolves: rhbz#1676385 …
-
LowELSA-2019-3345 3 CVEs
Low: virt:ol security, bug fix, and enhancement update (Oracle Linux 8)
-
MediumELSA-2019-3708 10 CVEs
Moderate: mariadb:10.3 security and bug fix update (Oracle Linux 8)
-
High max 6.5ELSA-2019-4837 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.32.3.2] - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) [Orabug: 30419233] {CVE-2019-11135} - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta) [Orabug: 30419233] {CVE-2019-11135} - x86/tsx: Add 'auto' op…
-
High max 6.5ELSA-2019-4838 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.39.1.1] - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) [Orabug: 30419232] {CVE-2019-11135} - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta) [Orabug: 30419232] {CVE-2019-11135} - x86/tsx: Ad…
-
High max 6.5ELSA-2019-4836 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.7.3] - rds: Rename rds_send_ping to rds_send_hs_ping (Hakon Bugge) [Orabug: 30418043] - rds: Use {READ,WRITE}_ONCE for heartbeat start and state (Hakon Bugge) [Orabug: 30418043] - rds: Change heartbeat params from module params to sysctl (Hakon …
-
Critical max 8.7
Critical: php security update (Oracle Linux 7)
[5.4.16-46.1] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043
-
High max 6.5ELSA-2019-3237 9 CVEs
Important: thunderbird security update (Oracle Linux 8)
[68.2.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.2.0-1] - Update to 68.2.0 [68.1.1-2] - Update to 68.1.1
-
High max 6.5ELSA-2019-3210 9 CVEs
Important: thunderbird security update (Oracle Linux 7)
[68.2.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.2.0-1] - Update to 68.2.0 [68.1.1-2] - Update to 68.1.1 [60.9.0-2] - Update to 60.9.0
-
CriticalELSA-2019-3196 8 CVEs
Critical: firefox security update (Oracle Linux 8)
[68.2.0-2.0.1] - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.2.0-2] - Rebuild [68.2.0-1] - Update to 68.2.0 ESR [68.1.0-6] - Enable system nss on RHEL6 [68.1…
-
CriticalELSA-2019-3193 8 CVEs
Critical: firefox security update (Oracle Linux 7)
[68.2.0-1.0.1] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [68.2.0-1] - Update to 68.2.0 ESR [68.1.0-6] - Enable system nss on RHEL6
-
MediumELSA-2019-3157 12 CVEs
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.241-2.6.20.0.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.241-2.6.20.0] - Bump to 2.6.20 and OpenJDK 7u241-b01. - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423
-
HighELSA-2019-3134 14 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.232.b09-0] - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:1.8.0.232.b08-0.0.ea] - Update to aarch64-shenandoah-jd…
-
HighELSA-2019-3135 15 CVEs
Important: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.5.10-0.0.1] - link atomic for ix86 build (Livy Ge) [1:11.0.5.10-0] - Update to shenandoah-jdk-11.0.5+10 (GA) - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:11.…
-
HighELSA-2019-3127 15 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.5.10-0.0.1] - link atomic for ix86 build [1:11.0.5.10-0] - Update to shenandoah-jdk-11.0.5+10 (GA) - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:11.0.5.9-0.0.…
-
HighELSA-2019-3128 14 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.232.b09-0] - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz#1753423 [1:1.8.0.232.b08-0.0.ea] - Update to aarch64-shenandoah-jd…
-
High max 6.8ELSA-2019-3067 1 CVE
Important: jss security update (Oracle Linux 7)
* Thu Sep 12 2019 Dogtag PKI Team <pki-devel@redhat.com 4.4.6-3 - NVR bump [4.4.6-2] - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy 'Leaf and Chain' implicitly trusts the root certificate
-
HighELSA-2019-4823 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.32.3] - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke) [Orabug: 26941755] {CVE-2017-14991} - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu) [Orabug: 29707258] - Revert 'net_failover: delay taking ov…