8,326 results · Feed
-
Medium max 8.1ELSA-2015-2088 3 CVEs
Moderate: openssh security, bug fix, and enhancement update (Oracle Linux 7)
[6.6.1p1-22] - Use the correct constant for glob limits (#1160377) [6.6.1p1-21] - Extend memory limit for remote glob in sftp acc. to stat limit (#1160377) [6.6.1p1-20] - Fix vulnerabilities published with openssh-7.0 (#1265807) - Privilege separation weaknes…
-
Medium max 6.5ELSA-2015-2155 14 CVEs
Moderate: file security and bug fix update (Oracle Linux 7)
[5.11-31] - fix #1255396 - Make the build ID output consistent with other tools [5.11-30] - fix CVE-2014-8116 - bump the acceptable ELF program headers count to 2048 [5.11-29] - fix #839229 - fix detection of version of XML files [5.11-28] - fix #839229 - fix…
-
MediumELSA-2015-2393 21 CVEs
Moderate: wireshark security, bug fix, and enhancement update (Oracle Linux 7)
[1.10.14-7.0.1] - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect [1.10.14-7] - Rebase some tvbuff API from upstream to 1.10.14 - Fixes crash when tvb_length_remaining() is used - Related: CVE-2015-6244 [1.10.14-6] - Security patch -…
-
MediumELSA-2015-2180 1 CVE
Moderate: rubygem-bundler and rubygem-thor security, bug fix, and enhancement update (Oracle Linux 7)
rubygem-bundler [1.7.8-3] - Enforce higher Thor version, which is required by Bundler. Related: rhbz#1194243 [1.7.8-2] - Update to Bundler 1.7.8. Resolves: rhbz#1194243 - Use symlinks for vendored libraries. Resolves: rhbz#1163076 [1.3.1-3] - Mass rebuild 201…
-
MediumELSA-2015-2378 1 CVE
Moderate: squid security and bug fix update (Oracle Linux 7)
[7:3.3.8-26] - Related: #1186768 - removing patch, because of missing tests and incorrent patch [7:3.3.8-25] - Related: #1102842 - squid rpm package misses /var/run/squid needed for smp mode. Squid needs write access to /var/run/squid. [7:3.3.8-24] - Related:…
-
LowELSA-2015-2455 1 CVE
Low: unbound security and bug fix update (Oracle Linux 7)
[1.4.20-26] - Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645) [1.4.20-25] - Resolve ordering loop with nss-lookup.target and ntpdate (#1259806) [1.4.20-24] - Fix CVE-2014-8602 (#1253961) [1.4.20-23] - Remov…
-
LowELSA-2015-2111 1 CVE
Low: grep security and bug fix update (Oracle Linux 7)
[2.20-2] - Fixed invalid UTF-8 byte sequence error in PCRE mode (by pcre-backported-fixes patch) Resolves: rhbz#1217080 - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 - Fixed \w and \W behaviour in multibyte locales Resolves: rhbz#1159012 - Docume…
-
LowELSA-2015-2369 1 CVE
Low: openhpi security, bug fix, and enhancement update (Oracle Linux 7)
[3.4.0-2] - fix /var/lib/openhpi permissions - Resolves: rhbz#1063367 [3.4.0-1] - update to 3.4.0 (#1127908) - Resolves: rhbz#1127908,rhbz#948461,rhbz#1208127,rhbz#1201827
-
MediumELSA-2015-2154 2 CVEs
Moderate: krb5 security, bug fix, and enhancement update (Oracle Linux 7)
[1.13.2-9] - Add patch and test case for 'KDC does not return proper client principal for client referrals' - Resolves: #1259846 [1.13.2-9] - Ammend patch for RedHat bug #1252454 ('testsuite complains 'Lifetime has increased by 32436 sec while 0 sec passed!',…
-
MediumELSA-2015-2159 5 CVEs
Moderate: curl security, bug fix, and enhancement update (Oracle Linux 7)
[7.29.0-25.0.1] - disable check to make build pass [7.29.0-25] - fix spurious failure of test 1500 on ppc64le (#1218272) [7.29.0-24] - use the default min/max TLS version provided by NSS (#1170339) - improve handling of timeouts and blocking direction to spee…
-
MediumELSA-2015-2241 3 CVEs
Moderate: chrony security, bug fix, and enhancement update (Oracle Linux 7)
[2.1.1-1] - update to 2.1.1 (#1117882) - add -n option to gzip command to not save timestamp [2.1-1] - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821 CVE-2015-1822 CVE-2015-1853) - extend chrony-helper to allow using servers from DNS SRV rec…
-
LowELSA-2015-2237 1 CVE
Low: rest security update (Oracle Linux 7)
[0.7.92-3] - Fix tests/proxy-continuous Resolves: #1250935 [0.7.92-2] - Fix memory error due to implicit declaration of rest_proxy_call_get_url Resolves: #1183982
-
MediumELSA-2015-2248 1 CVE
Moderate: netcf security, bug fix, and enhancement update (Oracle Linux 7)
[0.2.8-1] - Rebase to netcf-0.2.8 - resolve rhbz#1165965 - CVE-2014-8119 - resolve rhbz#1159000 - support multiple IPv4 addresses in interface config (redhat driver) - resolve rhbz#1113983 - allow static IPv4 config simultaneous with DHCPv4 (redhat driver) - …
-
MediumELSA-2015-2345 1 CVE
Moderate: net-snmp security and bug fix update (Oracle Linux 7)
[1:5.7.2-24] - Fixed lmSensorsTable not reporting sensors with duplicate names (#1252053) - Fixed close() overhead of extend commands (#1252048) - Fixed out-of-bounds write in python code (#1252034) [1:5.7.2-23] - Fixed parsing of invalid variables in incomin…
-
MediumELSA-2015-2079 8 CVEs
Moderate: binutils security, bug fix, and enhancement update (Oracle Linux 7)
[2.23.52.0.1-55] - Add missing delta to patch that fixes parsing corrupted archives. (#1162666) [2.23.52.0.1-54] - Import patch for PR 18270: Create AArch64 GOT entries for local symbols. (#1238783) [2.23.52.0.1-51] - Fix incorrectly generated binaries and DS…
-
MediumELSA-2015-2131 1 CVE
Moderate: openldap security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.40-8] - NSS does not support string ordering (#1231522) - implement and correct order of parsing attributes (#1231522) - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522) - add new cipher suites and correct AES-GCM attri…
-
MediumELSA-2015-2108 1 CVE
Moderate: cpio security and bug fix update (Oracle Linux 7)
[2.11-24] - fix for CVE-2014-9112 [2.11-23] - better check for read() error (rhbz#1138148) - fix ru translation (rhbz#1075513)
-
LowELSA-2015-2401 1 CVE
Low: grub2 security, bug fix, and enhancement update (Oracle Linux 7)
[2.02-0.29.0.1] - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms [bug 19231481] - update Oracle Linux certificates (Alexey Petrenko) - Put 'with' in menuentry instead of 'using' [bug 18504756] …
-
MediumELSA-2015-2231 7 CVEs
Moderate: ntp security, bug fix, and enhancement update (Oracle Linux 7)
[4.2.6p5-22] - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704) - allow only one step larger than panic threshold with -g (CVE-2015-5300) [4.2.6p5-20] - validate lengths of values in extension fields (CVE-2014-9297) - drop packets with …
-
LowELSA-2015-2151 1 CVE
Low: xfsprogs security, bug fix and enhancement update (Oracle Linux 7)
[3.2.2-2] - Fix xfs_metadump disclosure flaw, CVE-2012-2150 (#1251118) [3.2.2-1] - Update to upstream v3.2.2, plus fixes from v3.2.3 (#1223991) - repair: fix unnecessary secondary scan if only last sb is corrupt (#1201238) - repair: check ino alignment value …
-
MediumELSA-2015-2417 1 CVE
Moderate: autofs security, bug fix and enhancement update (Oracle Linux 7)
[5.0.7-54.0.1] - add autofs-5.0.5-lookup-mounts.patch [Orabug:12658280] (Bert Barbe) [1:5.0.7-54] - bz1263508 - Heavy program map usage can lead to a hang - fix out of order call in program map lookup. - Resolves: rhbz#1263508 [1:5.0.7-53] - bz1238573 - RFE: …
-
LowELSA-2015-2140 1 CVE
Low: libssh2 security and bug fix update (Oracle Linux 7)
[1.4.3-10] - check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782) [1.4.3-9] - curl consumes too much memory during scp download (#1080459) - prevent a not-connected agent from closing STDIN (#1147717)
-
MediumELSA-2015-2078 2 CVEs
Moderate: postgresql security update (Oracle Linux 7)
[9.2.14-1] - update to 9.2.14 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-14.html [9.2.13-1] - update to 9.2.13 per release notes http://www.postgresql.org/docs/9.2/static/release-9-2-13.html [9.2.12-1] - update to 9.2.12 per relea…
-
HighELSA-2015-2086 16 CVEs
Important: java-1.6.0-openjdk security update (Oracle Linux 7)
[1:1.6.0.35-1.13.9.4.0.1.el5_11] - Add oracle-enterprise.patch [1:1.6.0.37-1.13.9.4] - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression. - Resolves: rhbz#1271926 [1:1.6.0.37-1.13.9.3] - Update with new IcedTea & b37 tarballs, …
-
HighELSA-2015-3098 3 CVEs
Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)
kernel-uek [3.8.13-118] - Update ql2400/ql2500 firmware version to 8.02.00 (Dan Duval) [Orabug: 22159505] - update qla2400/ql2500 firmware version to 8.02.00 (Dan Duval) [Orabug: 22159505] [3.8.13-117] - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang) [Orabug:…
-
CriticalELSA-2015-1982 8 CVEs
Critical: firefox security update (Oracle Linux 7)
[38.4.0-1.0.1.el5_11] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [38.4.0-1] - Update to 38.4.0 ESR
-
MediumELSA-2015-3092 1 CVE
Moderate: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-98.5.2] - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang) [Orabug: 22145600] {CVE-2015-5156} [3.8.13-98.5.1] - netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver import (Todd Vierling) [Orabug: 22066176]
-
CriticalELSA-2015-1981 3 CVEs
Critical: nss, nss-util, and nspr security update (Oracle Linux 7)
nspr [4.10.8-2] - Resolves: Bug 1269360 - CVE-2015-7183 - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption nss [3.19.1-5.0.1] - Added nss-vendor.patch to change vendor [3.19.1-5] - Rebuild against upd…
-
MediumELSA-2015-1978 2 CVEs
Moderate: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-229.20.1.OL7] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229.20.1] - Revert: [crypto] nx - Check for bogus firmware properties (Phillip Lougher) [1247127 1190103] - Revert: [crypto] nx - Moving NX-AES-CBC to be processed logic (Phillip Loug…
-
MediumELSA-2015-1979 1 CVE
Moderate: libreswan security and enhancement update (Oracle Linux 7)
[3.15-5.0.1] - add libreswan-oracle.patch to detect Oracle Linux distro [3.15-5] - Resolves: rhbz#1273719 libreswan FIPS test mistakenly looks for non-existent file hashes [3.15-4] - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias - Reso…
-
MediumELSA-2015-1943 1 CVE
Moderate: qemu-kvm security update (Oracle Linux 7)
[1.5.3-86.el7_1.8] - kvm-qtest-ide-test-disable-flush-test.patch [bz#1273098] - Resolves: bz#1273098 (qemu-kvm build failure race condition in tests/ide-test) [1.5.3-86.el7_1.7] - kvm-CVE-2015-1779-incrementally-decode-websocket-frames.patch [bz#1205050] - kv…
-
HighELSA-2015-1930 2 CVEs
Important: ntp security update (Oracle Linux 7)
[4.2.6p5-5.el6_7.2] - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704) - allow only one step larger than panic threshold with -g (CVE-2015-5300)
-
CriticalELSA-2015-1920 17 CVEs
Critical: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.91-2.6.2.2.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.91-2.6.2.2] - added and applied patch500 8072932or8074489.patch to fix tck failure - Resolves: rhbz#1271919 [1:1.7.0.91-2.6.2.1] - Bump to 2.6.2 and u91b00. - Resolves: rhbz#1271919
-
HighELSA-2015-1919 18 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.65-0.b17] - October 2015 security update to u65b17. - Add script for generating OpenJDK tarballs from a local Mercurial tree. - Update RH1191652 patch to build against current AArch64 tree. - Use appropriate source ID to avoid unpacking both tarballs…
-
HighELSA-2015-1917 4 CVEs
Important: libwmf security update (Oracle Linux 7)
[0.2.8.4-25] - Resolves: rhbz#1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 [0.2.8.4-24] - Resolves: rhbz#1227429 CVE-2015-0848 libwmf: heap overflow when decoding BMP images
-
HighELSA-2015-3087 1 CVE
Important: lxc security update (Oracle Linux 7)
[1.0.7-2.0.12] - [Orabug 22011867] ol6 ct shutdown script remounts /dev/pts/* devices as ro on host system. [1.0.7-2.0.11] - [Orabug 21842483] failed to create directory '/RUN/LXC/LOCK//CONTAINER/OL7.1/SNAPS' - CVE-2015-1335: Protect container mounts against …
-
HighELSA-2015-3085 2 CVEs
Important: docker-engine security update (Oracle Linux 7)
[1.8.3-1.0.1] - Enable configuration of Docker daemon via sysconfig [orabug 21804877] - Add documentation files to binary RPM [1.8.3] - Fix layer IDs lead to local graph poisoning (CVE-2014-8178) - Fix manifest validation and parsing logic errors allow pull-b…
-
HighELSA-2015-1890 2 CVEs
Important: spice security update (Oracle Linux 7)
[0.12.4-9.3] - CVE-2015-5260 CVE-2015-5261 fixed various security flaws Resolves: rhbz#1262771 [0.12.4-9.2] - Validate surface_id Resolves: rhbz#1262771
-
HighELSA-2015-1852 12 CVEs
Important: thunderbird security update (Oracle Linux 7)
[38.3.0-1.0.1.el6_7] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [38.3.0-1] - Update to 38.3.0
-
HighELSA-2015-1840 1 CVE
Important: openldap security update (Oracle Linux 7)
[2.3.43-29] - CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263170)