8,323 results · Feed
-
HighELSA-2019-4598 0 CVEs
Important: docker-engine security update (Oracle Linux 7)
[17.06.2.ol-1.0.7] - update for CVE-2018-20699
-
High max 4.8ELSA-2019-4596 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.7] - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker) [Orabug: 29384815] - Revert 'x86/apic: Make arch_setup_hwirq NUMA node aware' (Brian Maly) [Orabug: 29542185] - qlcnic: fix Tx descriptor corruption on 82xx devi…
-
High max 7.5ELSA-2019-0679 4 CVEs
Important: libssh2 security update (Oracle Linux 7)
[1.4.3-12.el7_6.2] - sanitize public header file (detected by rpmdiff) [1.4.3-12.el7_6.1] - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863) - fix integer overflow in SSH packet processing channel resultin…
-
HighELSA-2019-0681 10 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.6.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.6.1-1] - Update to 60.6.1 [60.6.0-1] - Update to 60.6.0
-
CriticalELSA-2019-0671 2 CVEs
Critical: firefox security update (Oracle Linux 7)
[60.6.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.6.1-1] - Update to 60.6.1 ESR (Build 1)
-
High max 4.2ELSA-2019-4594 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.5] - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard) [Orabug: 29487790] - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis) [Orabug: 29469740] [4.1.12-124.26.4U] - bnxt_en:…
-
High max 7.5ELSA-2019-0638 1 CVE
Important: openwsman security update (Oracle Linux 7)
[2.6.3-6.git4391e5c] - Update the fix for CVE-2019-3816 Resolves: #1668657 - Remove Dist Tag from the oldest changelog entry [2.6.3-5.git4391e5c] - Fix CVE-2019-3816 Resolves: #1668657
-
High max 7.3ELSA-2019-0633 2 CVEs
Important: ghostscript security and bug fix update (Oracle Linux 7)
[9.07-31.el7_6.10] - Resolves: #1673915 - ghostscript: Regression: double comment chars '%' in gs_init.ps leading to missing metadata - Resolves: #1678171 - CVE-2019-3835 ghostscript: superexec operator is available (700585) - Resolves: #1680025 - CVE-2019-38…
-
CriticalELSA-2019-0622 8 CVEs
Critical: firefox security update (Oracle Linux 7)
[60.6.0-3.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.6.0-3] - Added Google API keys (mozbz#1531176) [60.6.0-2] - Update to 60.6.0 ESR (Build 2) [60.6.0-1] - Update to 60.6.0 ESR (Build 1)
-
MediumELSA-2019-0597 1 CVE
Moderate: cloud-init security update (Oracle Linux 7)
[18.2-1.0.1] - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch for 18.2: 1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata 2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataRea…
-
High max 7.5ELSA-2019-4585 50 CVEs
Important: qemu security update (Oracle Linux 7)
[15:3.1.0-1.el7] - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu) [Orabug: 29216696] - vfio-pci: add FAILOVER_PRIMARY_CHANGED event to …
-
Medium max 4.3ELSA-2019-0485 1 CVE
Moderate: tomcat security update (Oracle Linux 7)
[0:7.0.76-9] - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
-
HighELSA-2019-0512 3 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-957.10.1.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-957.10.1] - [fs] revert '[fs]…
-
MediumELSA-2019-0483 1 CVE
Moderate: openssl security and bug fix update (Oracle Linux 7)
[1.0.2k-16.0.1.el7_6.1] - Bump release for rebuild. [1.0.2k-16.1] - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction
-
High max 7.3ELSA-2019-4575 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.26.1] - NFS: commit direct writes even if they fail partially (J. Bruce Fields) [Orabug: 28212440] - rds: update correct congestion map for loopback transport (Mukesh Kacker) [Orabug: 29175685] - ext4: only look at the bg_flags field if it is vali…
-
High max 5.0ELSA-2019-4576 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.31.1] - alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner) [Orabug: 29269167] {CVE-2018-13053} - KEYS: Don't permit request_key() to construct a new keyring (David Howells) [Orabug: 29304552] {CVE-2017-17807} - KEYS: …
-
HighELSA-2019-4570 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1844.3.2] - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour) [Orabug: 29357695] - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov) [Orabug: 29364665] {CVE-2018-16862} - l2tp: fix readi…
-
Medium max 7.5ELSA-2019-0482 1 CVE
Moderate: cockpit security update (Oracle Linux 7)
[173.2-1.0.1] - turn off display of subscriptions menu item in GUI - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oralce.com) - Remove Red Hat references. [173.2-1] - ws: Fix bug parsing invalid base64 headers rhbz#1672296
-
MediumELSA-2019-0464 1 CVE
Moderate: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.211-2.6.17.1.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.211-2.6.17.1] - Produce debug symbols for libpulse-java.so - Set IT_CFLAGS=-g so that debug symbols for the pulse audio - native library are being produced. This is needed to fix - rpmdiff e…
-
MediumELSA-2019-0435 1 CVE
Moderate: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.201.b09-0] - Update to aarch64-shenandoah-jdk8u201-b09. - Resolves: rhbz#1661577 [1:1.8.0.192.b12-0] - Add port of 8189170 to AArch64 which is missing from upstream 8u version. - Resolves: rhbz#1661577 [1:1.8.0.192.b12-0] - Add 8160748 for AArch64 wh…
-
MediumELSA-2019-0436 1 CVE
Moderate: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.2.7-0.0.1] - link atomic for ix86 build [1:11.0.2.7-0] - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU) - Make tagsuffix optional and comment it out while unused. - Drop JDK-8211105/RH1628612/RH1630996 applied upstream. - Drop JDK-8209639/RH1640…
-
High max 7.0ELSA-2019-4556 9 CVEs
Important: qemu security update (Oracle Linux 7)
-
HighELSA-2019-4548 0 CVEs
Important: oraclelinux-release-el7 security update (Oracle Linux 7)
[1.0-5] - Fix ol_yum_configure.sh [ OraBug 29241080]
-
HighELSA-2019-0368 1 CVE
Important: systemd security update (Oracle Linux 7)
[219-62.0.4] - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896] - OL7 udev rule for virtio net standby interface [Orabug: 28826743] - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com) …
-
HighELSA-2019-0375 1 CVE
Important: flatpak security update (Oracle Linux 7)
[1.0.2-4] - Tweak /proc sandbox patch (#1675433) [1.0.2-3] - Do not mount /proc in root sandbox (#1675433)
-
HighELSA-2019-4551 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[18.03.1.ol-0.0.12] - correct the version string of containerd [18.03.1.ol-0.0.11] - update runc for CVE-2019-5736 [18.03.1.ol-0.0.10] - update Go to version 1.10.8 [18.03.1.ol-0.0.9] - correct changelog [18.03.1.ol-0.0.8] - fix [orabug 28452214] and [orabug …
-
HighELSA-2019-0374 2 CVEs
Important: firefox security update (Oracle Linux 7)
[60.5.1-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.5.1-1] - Update to 60.5.1 ESR [60.5.0-3] - Added fix for rhbz#1672424 - Firefox crashes on NFS drives.
-
HighELSA-2019-4550 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[17.06.2.ol-1.0.6] - update the version string of runc to show the CVE fixed [17.06.2.ol-1.0.4] - build using Go 1.10.8 - apply fix for runc CVE-2019-5736 [17.06.2.ol-1.0.3] - spec: do not replace config files (Jacob Wen) [Orabug: 28235986]
-
HighELSA-2019-4546 1 CVE
Important: kubernetes security update (Oracle Linux 7)
kubernetes [1.9.11-2.2.1] - CVE-2019-6486 [1.9.11-2.1.1] - Fix kubeadm-registry.sh - Use golang 1.9.3 - [CVE-2018-1002105] Handle error responses from backends - Bump to v1.9.11 [1.9.1-2.1.7] - [Orabug 27803001] [1.9.1-2.1.5] - Production built 1.9.1-2.1.5 - …
-
High max 6.1ELSA-2019-4541 5 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.14.35-1844.2.5] - x86/apic: Switch all APICs to Fixed delivery mode (Thomas Gleixner) [Orabug: 29262403] [4.14.35-1844.2.4] - x86/platform/UV: Add check of TSC state set by UV BIOS (mike.travis@hpe.com) [Orabug: 29205471] - x86/tsc: Provide a means to disa…
-
HighELSA-2019-4540 1 CVE
Important: runc security update (Oracle Linux 7)
[1.0.0-19.rc5.git4bb1fe4.0.3.el7] - Apply patch for CVE-2019-5736 (Wiekus Beukes) [1.0.0-19.rc5.git4bb1fe4.0.2.el7] - update Go version to 1.10.8, fix version string (Laszlo (Laca) Peter) [1.0.0-19.rc5.git4bb1fe4.0.1.el7] - Tuning .spec file [2:1.0.0-19.rc5.g…
-
High max 5.5ELSA-2019-4531 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.25.1] - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky) [Orabug: 28870524] {CVE-2018-3639} - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk) [Orabug: 28870524] {CVE-2018-3639} - x86/cpufeatures: rename X86_FEAT…
-
HighELSA-2019-4532 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.30.1] - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} - ext4: always initialize the crc32c checksum driver (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} {CVE-2018-1…
-
HighELSA-2019-0270 4 CVEs
Important: thunderbird security update (Oracle Linux 7)
[60.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [60.5.0-1] - Update to 60.5.0
-
HighELSA-2019-0230 1 CVE
Important: polkit security update (Oracle Linux 7)
[0.112-18.0.1] - Increase timeout to avoid defunct processes [bug26930744] [0.112-18.el7_6.1] - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667311
-
HighELSA-2019-0231 1 CVE
Important: spice security update (Oracle Linux 7)
[0.14.0-6.0.2.1] - Add ARM support [0.14.0-6.1] - Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813
-
HighELSA-2019-0229 5 CVEs
Important: ghostscript security and bug fix update (Oracle Linux 7)
[9.07-31.el7_6.9] - Related: #1667442 - CVE-2019-6116 - added missing parts of patch [9.07-31.el7_6.8] - Resolves: #1667442 - CVE-2019-6116 ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators [9.07-31.el7_6.7] - Resolves: #166…
-
HighELSA-2019-4528 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.24.5] - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker) [Orabug: 28425811] - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra) [Orabug: 28127993] - net: rds: fix excess i…
-
CriticalELSA-2019-0219 3 CVEs
Critical: firefox security update (Oracle Linux 7)
[60.5.0-2.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [60.5.0-2] - Updated to 60.5.0 ESR build2 [60.5.0-1] - Updated to 60.5.0 ESR build1 [60.4.0-3] - Fixing fontconfig warnings (rhbz#1601475) [60.4.0-2] - Added pipewi…
-
Medium max 5.9ELSA-2019-0194 1 CVE
Moderate: bind security update (Oracle Linux 7)
[32:9.9.4-73] - Fixes debug level comments (#1647539)