8,323 results · Feed
-
HighELSA-2019-1144 10 CVEs
Important: thunderbird security update (Oracle Linux 8)
[60.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.6.1-1] - Update to 60.6.1 [60.6.0-1] - Update to 60.6.0
-
High max 8.1ELSA-2019-0985 1 CVE
Important: mod_auth_mellon security update (Oracle Linux 8)
[0.14.0-3.2] - Resolves: rhbz#1696197 - CVE-2019-3878 mod_auth_mellon: authentication bypass in ECP flow [rhel-8.0.0.z]
-
HighELSA-2019-0975 1 CVE
Important: container-tools:ol8 security and bug fix update (Oracle Linux 8)
container-selinux [2:2.94-1.git1e99f1d] - Resolves: #1690286 - bump to v2.94 - Resolves: #1693806, #1689255 [2:2.89-1.git2521d0d] - bump to v2.89 runc [1.0.0-55.rc5.dev.git2abd837] - Resolves: CVE-2019-5736
-
High max 7.5ELSA-2019-1175 9 CVEs
Important: virt:ol security update (Oracle Linux 8)
libguestfs [1:1.38.4-10.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-10.1] - Fix inspection of partition-less devices resolves: rhbz#1714747 libssh2 [1.8.0-7.el8_0.1] - fix inte…
-
High max 8.8ELSA-2019-1268 1 CVE
Important: virt:ol security update (Oracle Linux 8)
[4.5.0-23.2.0.1.el8] - added librbd1 as dependency (Keshav Sharma) [4.5.0-23.2.el8] - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode…
-
MediumELSA-2019-1519 1 CVE
Moderate: go-toolset:ol8 security update (Oracle Linux 8)
go-toolset [1.11.5-2] - Include patch to fix CVE-2019-9741 - Resolves: rhbz#1690443 golang [1.11.5-2] - Include patch to fix CVE-2019-9741 - Resolves: rhbz#1690443 [1.11.5-2] - Switch to pagure fork for Go FIPS
-
High max 8.8ELSA-2019-1580 4 CVEs
Important: virt:ol security update (Oracle Linux 8)
libguestfs [1:1.38.4-10.1.0.1] - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.38.4-10.1] - Fix inspection of partition-less devices resolves: rhbz#1714747 libssh2 [1.8.0-7.el8_0.1] - fix in…
-
High max 3.3ELSA-2019-4716 1 CVE
Important: kubernetes security update (Oracle Linux 7)
[1.12.7-1.2.3] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.12.7-1.1.3] - [OCNE-372] kubeadm: properly umount dirs in /var/lib/kubelet
-
HighELSA-2019-4729 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.29.3] - mlx4_core: change log_num_{qp,rdmarc} with scale_profile (Mukesh Kacker) [Orabug: 30064080] [4.1.12-124.29.2] - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [Orabug: 30052805] [4.1.12-124.29.1] - USB:…
-
High max 3.3ELSA-2019-4717 1 CVE
Important: kubeadm-ha-setup security update (Oracle Linux 7)
[0.0.2-1.0.52] - [OLCNE-678] Restore fails when trying to restore after a failed update [0.0.2-1.0.51] - [OLCNE-667] Minor version update doesn't update kubeadm on all master nodes [0.0.2-1.0.50] - Make k8s 1.14 specific changes [0.0.2-1.0.49] - [OLCNE-668] R…
-
HighELSA-2019-4719 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.10.5-2.7.4] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.10.5-2.6.4] - [OLCNE-383] [CVE-2019-11243] Authentication information exposure in rest.AnonymousCl…
-
HighELSA-2019-4720 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.9.11-2.7.1] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.9.11-2.6.1] - [OLCNE-382] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the sa cre…
-
HighELSA-2019-4718 0 CVEs
Important: kubernetes security update (Oracle Linux 7)
[1.11.3-2.7.2] - [OLCNE-494] [CVE-2019-11244] fix CVE-2019-11244: 'kubectl --http-cache=<world-accessible dir>' - creates world-writeable cached schema files [1.11.3.2.6.2] - [OLCNE-384] [CVE-2019-11243] rest.AnonymousClientConfig() does not remove the servic…
-
MediumELSA-2019-1839 6 CVEs
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.231-2.6.19.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.231-2.6.19.1] - Add missing hyphen in tapset filename. - Resolves: rhbz#1724452 [1:1.7.0.231-2.6.19.0] - Update tapset filename matching pattern. - Resolves: rhbz#1724452 [1:1.7.0.231-2.6.19…
-
MediumELSA-2019-1810 7 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.4.11-0.0.1] - link atomic for ix86 build [1:11.0.4.11-0] - Update to shenandoah-jdk-11.0.4+11 (GA) - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:11.0.4.10-0.0.ea] - Update to shenandoah-jdk-11.0.4+10 (EA) - Resolves: rhbz#1724452 …
-
MediumELSA-2019-1815 6 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.222.b10-0] - Update to aarch64-shenandoah-jdk8u222-b10. - Resolves: rhbz#1724452 [1:1.8.0.222.b09-0] - Update to aarch64-shenandoah-jdk8u222-b09. - Switch to GA mode for final release. - Resolves: rhbz#1724452 [1:1.8.0.222.b08-0.0.ea] - Update to aar…
-
HighELSA-2019-1619 1 CVE
Important: vim security update (Oracle Linux 7)
[2:8.0.1763-11] - 1719812 - CVE-2019-12735 vim: vim/neovim: arbitrary command execution in getchar.c [rhel-8.1.0]
-
HighELSA-2019-1775 8 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.8.0-1] - Updated to 60.8.0 [60.7.2-3] - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate with gmail with ssl/tls and OAuth2.
-
CriticalELSA-2019-1763 8 CVEs
Critical: firefox security update (Oracle Linux 7)
[60.8.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
-
High max 8.8ELSA-2019-4714 8 CVEs
Important: libvirt security update (Oracle Linux 7)
[5.0.0-9.el7] - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten Have) [Orabug: 29956508] [5.0.0-8.el7] - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Jan Tomko) [Orabug: 29955742] {CVE-2019-10161} - domain: De…
-
High max 5.6ELSA-2019-4710 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.28.6] - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke) [Orabug: 29511036] - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke) [Orabug: 29511036] - sysctl: Fix kabi breakage (Shuning Zhang) [Orabug:…
-
HighELSA-2019-4713 5 CVEs
Important: qemu security update (Oracle Linux 7)
[15:3.1.0-5.el7] - Only enable the halt poll control MSR if it is supported by the host (Mark Kanda) [Orabug: 29946722] [15:3.1.0-4.el7] - kvm: i386: halt poll control MSR support (Marcelo Tosatti) [Orabug: 29933278] - Document CVEs as fixed: CVE-2017-9524, C…
-
HighELSA-2019-4708 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.3.1] - x86/platform/UV: Mark tsc_check_sync as an init function (mike.travis@hpe.com) [Orabug: 29701029] - mm, page_alloc: check for max order in hot path (Michal Hocko) [Orabug: 29924411] - net/mlx5: FW tracer, Enable tracing (Feras Daoud) [Ora…
-
HighELSA-2019-4703 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.36.1] - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925557] {CVE-2018-7191}
-
HighELSA-2019-4706 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.36.1] - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925557] {CVE-2018-7191}
-
High max 10.0
Important: thunderbird security update (Oracle Linux 7)
[60.7.2-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.7.2-2] - Update to 60.7.2 build2 [60.7.2-1] - Update to 60.7.2 [60.7.1-1] - Update to 60.7.1
-
Critical max 10.0
Critical: firefox security update (Oracle Linux 7)
[60.7.2-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.7.2-1] - Update to 60.7.2 ESR [60.7.1-1] - Updated to 60.7.1 ESR
-
High max 8.8ELSA-2019-1579 4 CVEs
Important: libvirt security and bug fix update (Oracle Linux 7)
[4.5.0-10.0.1] - added librbd1 as dependency (Keshav Sharma) [4.5.0-10.el7_6.12] - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - a…
-
High max 9.8ELSA-2019-1587 1 CVE
Important: python security update (Oracle Linux 7)
[2.7.5-80.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-80] - Security fix for CVE-2019-10160 Resolves: rhbz#1718401
-
High max 7.3ELSA-2019-4692 1 CVE
Important: libssh2 security update (Oracle Linux 7)
[1.4.3-12.0.1.el7_6.2] - [Orabug: 29909723] Added patch CVE-2019-3862 added length checks to prevent out-of-bounds reads and writes in _libssh2_packet_add()(CVE-2019-3862)
-
High max 7.5ELSA-2019-1481 3 CVEs
Important: kernel security update (Oracle Linux 7)
[3.10.0-957.21.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.21.3] - [net] tcp: enforc…
-
High max 8.8ELSA-2019-4688 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.0.0-4.el7] - logging: restrict sockets to mode 0600 (Daniel P. Berrange) [Orabug: 29861433] {CVE-2019-10132} - locking: restrict sockets to mode 0600 (Daniel P. Berrange) [Orabug: 29861433] {CVE-2019-10132} - admin: reject clients unless their UID matches …
-
High max 8.8ELSA-2019-4687 1 CVE
Important: libvirt security update (Oracle Linux 7)
[5.0.0-4.el7] - logging: restrict sockets to mode 0600 (Daniel P. Berrange) [Orabug: 29861433] {CVE-2019-10132} - locking: restrict sockets to mode 0600 (Daniel P. Berrange) [Orabug: 29861433] {CVE-2019-10132} - admin: reject clients unless their UID matches …
-
High max 7.5ELSA-2019-4684 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.28.3] - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson) [Orabug: 29890820] {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} - tcp: fix fack_count accounting on …
-
High max 7.5ELSA-2019-4686 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.35.2] - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet) [Orabug: 29886600] {CVE-2019-11477} - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet) [Orabug: 29884307] {CVE-2019-11479} - tcp: tcp_fragment() should apply sane me…
-
High max 7.5ELSA-2019-4685 8 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1902.2.0] - mm: account managed pages to correct zone during deferred page init (Daniel Jordan) [Orabug: 29914836] [4.14.35-1902.1.5] - CVE numbers for build v4.14.35-1902.1.3 and fixup (Jack Vogel) [Orabug: 29890784] [Orabug: 29884301] [Orabug: 2988…
-
MediumELSA-2019-4680 1 CVE
Moderate: docker-engine security update (Oracle Linux 7)
docker-engine [ 18.09.1-1.0.8] - cherry-picked fix for CVE-2018-15664 from upstream [18.09.1-1.0.7] - added runc version requirement [18.09.1-1.0.6] - disable kmem accounting for UEKR4 docker-cli [ 18.09.1-1.0.8] - rebuild [18.09.1-1.0.7] - rebuild [18.09.1-1…
-
High max 5.9ELSA-2019-4672 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.35.1] - Bluetooth: hidp: fix buffer overflow (Young Xiao) [Orabug: 29786787] {CVE-2011-1079} {CVE-2019-11884} - x86/speculation/mds: Fix verw usage to use memory operand (Patrick Colp) [Orabug: 29791038] {CVE-2018-12126} {CVE-2018-12130…
-
High max 5.6ELSA-2019-4668 11 CVEs
Important: edk2 security update (Oracle Linux 7)
[1:1.2-5.el7] - Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young) - Update spec file to modprobe kvm_intel module prior to running qemu to enroll defaul…
-
High max 7.0ELSA-2019-4670 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.28.1] - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz) [Orabug: 29324267] - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche) [Orabug: 29660924] - x86/speculation: reformatting RSB overwr…