8,326 results · Feed
-
High max 5.5ELSA-2018-1997 1 CVE
Important: libvirt security and bug fix update (Oracle Linux 7)
[3.9.0-14.el7_5.6] - logging: Don't inhibit shutdown in system daemon (rhbz#1573268) - util: don't check for parallel iteration in hash-related functions (rhbz#1581364) - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639) - virNumaGetHugePageInfo: …
-
High max 5.5ELSA-2018-1965 2 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-862.6.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.6.3] - [x86] always enable…
-
High max 5.5ELSA-2018-2001 1 CVE
Important: qemu-kvm security update (Oracle Linux 7)
[1.5.3-156.el7_5.3] - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363] - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363] - Resolves: bz#1584363 (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store byp…
-
Medium max 7.5ELSA-2018-1979 1 CVE
Moderate: pki-core security, bug fix, and enhancement update (Oracle Linux 7)
[10.5.1-13.1] - Rebuild due to build system database problem [10.5.1-13] - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #15…
-
HighELSA-2018-1957 1 CVE
Important: git security update (Oracle Linux 7)
[1.8.3.1-14] - Backport fix for CVE-2018-1123 - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1
-
HighELSA-2018-4134 12 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.21.4] - x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176] {CVE-2018-3665} [3.8.13-118.21.3] - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug: 27951287] {CVE-2017-17741} {CVE-2017-17741} - xfs: set …
-
HighELSA-2018-4144 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.16.4] - x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28135099] {CVE-2018-3665}
-
MediumELSA-2018-1852 1 CVE
Moderate: kernel security update (Oracle Linux 7)
[3.10.0-862.3.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.3.3] - [x86] always enable…
-
HighELSA-2018-4131 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.16.2] - netlink: add a start callback for starting a netlink dump (Tom Herbert) [Orabug: 27169581] {CVE-2017-16939} - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu) [Orabug: 27169581] {CVE-2017-16939}
-
High max 5.5ELSA-2018-1836 1 CVE
Important: plexus-archiver security update (Oracle Linux 7)
[0:2.4.2-5] - Fix arbitrary file write vulnerability - Resolves: CVE-2018-1002200
-
High max 5.5ELSA-2018-4126 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.4] - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas) - fs/pstore: update the backend parameter in pstore module (Wang Long) [Orabug: 27994372] - kvm: vmx: Reinstate support for CPUs without virtual N…
-
High max 9.8ELSA-2018-1780 1 CVE
Important: xmlrpc security update (Oracle Linux 7)
[1:3.1.3-9] - Disallow deserialization of <ex:serializable> tags by default - Resolves: CVE-2016-5003
-
HighELSA-2018-1725 12 CVEs
Important: thunderbird security update (Oracle Linux 7)
[52.8.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [52.8.0-1] - Update to 52.8.0
-
High max 7.3ELSA-2018-1700 2 CVEs
Important: procps-ng security update (Oracle Linux 7)
[3.3.10-17.el7_5.2] - check for truncation after calling snprintf() - Related: CVE-2018-1124 [3.3.10-17.el7_5.1] - fix integer overflows leading to heap overflow in file2strvec() - Resolves: CVE-2018-1124
-
High max 5.5ELSA-2018-1629 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-862.3.2.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.3.2] - [x86] spec_ctrl: Fi…
-
High max 5.5ELSA-2018-1648 1 CVE
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.181-2.6.14.8.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.181-2.6.14.8] - added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578560
-
High max 5.5ELSA-2018-1632 1 CVE
Important: libvirt security update (Oracle Linux 7)
[3.9.0-14.el7_5.5] - cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
-
High max 5.5ELSA-2018-1649 1 CVE
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.171-8.b10] - added and applied 1566890_embargoed20180521.patch - Resolves: rhbz#1578555
-
High max 5.5ELSA-2018-1633 1 CVE
Important: qemu-kvm security update (Oracle Linux 7)
[1.5.3-156.el7_5.2] - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075] - Resolves: bz#1574075 (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])
-
High max 5.5ELSA-2018-4114 8 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.2] - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner) {CVE-2018-3639} - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk) {CVE-2018-3639} - x86/bugs: Make cpu_show_common() static (Jiri Kosina…
-
Critical max 7.5ELSA-2018-1453 1 CVE
Critical: dhcp security update (Oracle Linux 7)
[12:4.2.5-68.0.1.1] - Direct users to Oracle Linux support site. [12:4.2.5-68.1] - Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character
-
HighELSA-2018-4108 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.15.1] - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee) [Orabug: 27260771] {CVE-2017-17448} - netlink: Add netns check on taps (Kevin Cernekee) [Orabug: 27260799] {CVE-2017-17449} - KVM: Fix stack-out-of-bounds read i…
-
HighELSA-2018-4109 9 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.21.1] - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav) [Orabug: 27208380] {CVE-2017-16537} - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov) [Orabug: 27215090] {CVE-2017-16643} - usb: usbtest: fix NULL po…
-
LowELSA-2018-1396 2 CVEs
Low: libvirt security and bug fix update (Oracle Linux 7)
[3.9.0-14.el7_5.4] - lxc: Drop useless check in live device update (rhbz#1557922) - Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922) - qemu: Fix updating device with boot order (rhbz#1557922) - conf: Fix crash in virDomainDefCompati…
-
Critical max 8.8ELSA-2018-1415 9 CVEs
Critical: firefox security update (Oracle Linux 7)
[52.8.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [52.8.0-1] - Update to 52.8.0 ESR
-
MediumELSA-2018-1416 1 CVE
Moderate: qemu-kvm security update (Oracle Linux 7)
[1.5.3-156.el7_5.1] - kvm-vga-add-ram_addr_t-cast.patch [bz#1567913] - kvm-vga-fix-region-calculation.patch [bz#1567913] - Resolves: bz#1567913 (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])
-
High max 7.5ELSA-2018-1380 1 CVE
Important: 389-ds-base security and bug fix update (Oracle Linux 7)
[1.3.7.5-21] - Bump version to 1.3.7.5-21 - Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch [1.3.7.5-20] - Bump version to 1.3.7.5-20 - Resolves: Bug 1563079 - adjustment of csn_generator can fa…
-
High max 8.0ELSA-2018-1318 6 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-862.2.3.OL7] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [bug 24817676] [3.10.0-862.2.3] - [x86] kvm: fix iceb…
-
High max 8.0ELSA-2018-4096 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.5] - vhost/scsi: fix reuse of &vq->iov[out] in response (Benjamin Coddington) [Orabug: 27928330] [4.1.12-124.14.4] - kernel.spec: add requires system-release for OL7 (Brian Maly) [Orabug: 27955380] - x86/kernel/traps.c: fix trace_die_notifier r…
-
HighELSA-2018-4098 1 CVE
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.20.7] - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski) {CVE-2018-8897}
-
High max 5.3ELSA-2018-1278 10 CVEs
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.181-2.6.14.5.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.181-2.6.14.5] - added depndence on latest c-j-c who do not have the incorrect jre-abrt handling - Resolves: rhbz#1559766 [1:1.7.0.181-2.6.14.3] - Bump release number to an unused one as rhel…
-
HighELSA-2018-4089 0 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-118.20.6] - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947608] {CVE-2018-100199} [3.8.13-118.20.5] - x86/microcode: probe CPU features on microcode update (Ankur Arora) [Orabug: 27806667] - x86/mic…
-
HighELSA-2018-4087 0 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.3] - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947602] {CVE-2018-100199}
-
High max 8.7ELSA-2018-1060 3 CVEs
Important: pcs security update (Oracle Linux 7)
[0.9.162-5.0.3.el7_5.1] - Unlike RHEL we DO have corosync/pacemaker for aarch64 on EL7 - replace logo pcsd/public/favicon.ico in tarball - remove Source1 HAM-logo.png [0.9.162-5.el7_5.1] - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing info…
-
High max 7.5ELSA-2018-1169 1 CVE
Important: corosync security update (Oracle Linux 7)
[2.4.3-2.1] - Resolves: rhbz#1560467 - totemcrypto: Check length of the packet
-
HighELSA-2018-4084 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.14.2] - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang) [Orabug: 27726302] - block: fix bio_will_gap() for first bvec with offset (Ming Lei) [Orabug: 27775588] - block: relax check on sg gap (Ming Lei) [Orabug: …
-
CriticalELSA-2018-1223 1 CVE
Critical: librelp security update (Oracle Linux 7)
[1.2.12-1.1] - fixed bad NVR - resolves rhbz#1561232 [1.2.12-2] - fixed CVE-2018-1000140 - resolves rhbz#1561232
-
MediumELSA-2018-1224 1 CVE
Moderate: PackageKit security update (Oracle Linux 7)
[1.1.5-2.0.1] - remove PackageKit-0.3.8-Fedora-Vendor.conf.patch [1.1.5-2] - Fixes CVE-2018-1106 - Resolves: rhbz#1566425
-
HighELSA-2018-1200 1 CVE
Important: patch security update (Oracle Linux 7)
[2.7.1-10] - Fixed Coverity reported issues [2.7.1-9] - Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands
-
Critical max 5.3ELSA-2018-1191 10 CVEs
Critical: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.171-7.b10] - Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix - Resolves: rhbz#1559766 [1:1.8.0.171-4.b10] - Rebuilding due to bad nss-softokn brew-root build override - Resolves: rhbz#1559766 [1:1.8.0.171-3.b10…