8,326 results · Feed
-
HighELSA-2015-3013 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.8] - kvm: fix excessive pages un-pinning in kvm_iommu_map error path. (Quentin Casasnovas) [Orabug: 20687313] {CVE-2014-3601} {CVE-2014-8369} {CVE-2014-3601} [3.8.13-55.1.7] - ttusb-dec: buffer overflow in ioctl (Dan Carpenter) [Orabug…
-
HighELSA-2015-0642 4 CVEs
Important: thunderbird security update (Oracle Linux 7)
[31.5.0-2] - Update to 31.5.0
-
MediumELSA-2015-0672 1 CVE
Moderate: bind security update (Oracle Linux 7)
[32:9.9.4-18.1] - Fix CVE-2015-1349
-
HighELSA-2015-0349 4 CVEs
Important: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)
[1.5.3-86.el7] - kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942] - kvm-cirrus-fix-blit-region-check.patch [bz#1169456] - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456] - Resolves: bz#1169456 (CVE-2014-8106 qemu-kvm: qemu: ci…
-
MediumELSA-2015-0439 10 CVEs
Moderate: krb5 security, bug fix and enhancement update (Oracle Linux 7)
[1.12.2-14] - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, 'Do not loop on principal unknown errors'). [1.12.2-13] - fix for CVE-2014-5352 (#1179856) 'gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001)' - fix for CVE-2014-942…
-
LowELSA-2015-0323 2 CVEs
Low: libvirt security, bug fix, and enhancement update (Oracle Linux 7)
[1.2.8-16.0.1] - Replace docs/et.png in tarball with blank image [1.2.8-16] - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094) - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094) [1.2…
-
LowELSA-2015-0325 2 CVEs
Low: httpd security, bug fix, and enhancement update (Oracle Linux 7)
[2.4.6-31.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-31] - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081) [2.4.6-30] - cor…
-
HighELSA-2015-0290 11 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 7)
[3.10.0-229] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-229] - [net] rtnetlink: allow to register ops without ops->setup set (Jiri Benc) [1186492] [3.10.0-228] - [fs] NFSv4.1: Fix an Oops in nfs41_walk_client_list (Steve Dickson) [1185784] - [misc]…
-
MediumELSA-2015-0377 3 CVEs
Moderate: libreoffice security, bug fix, and enhancement update (Oracle Linux 7)
libabw [0.0.2-1] - new upstream release 0.0.2 - generate man pages for the tools [0.0.1-1] - new upstream release libcmis [0.4.1-5] - Related: rhbz#1132065 coverity: fix mismatching exceptions [0.4.1-4] - a few use-after-free fixes for the C wrapper [0.4.1-3]…
-
Medium max 6.1ELSA-2015-0442 2 CVEs
Moderate: ipa security, bug fix, and enhancement update (Oracle Linux 7)
[4.1.0-18.0.1] - Replace login-screen-logo.png [20362818] - Drop subscription-manager requires for OL7 - Drop redhat-access-plugin-ipa requires for OL7 - Blank out header-logo.png product-name.png [4.1.0-18] - Fix ipa-pwd-extop global configuration caching (#…
-
LowELSA-2015-0535 1 CVE
Low: GNOME Shell security, bug fix, and enhancement update (Oracle Linux 7)
clutter [1.14.4-12] - Include upstream patch to prevent a crash when hitting hardware limits Resolves: rhbz#1115162 [1.14.4-11] - Fix a typo in the Requires [1.14.4-10] - Add patch for quadbuffer stereo suppport Resolves: rhbz#1108891 cogl [1.14.1-6] - Add pa…
-
MediumELSA-2015-0301 1 CVE
Moderate: hivex security, bug fix, and enhancement update (Oracle Linux 7)
[1.3.10-5.7] - Fix: 'Argument list too long' when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 [1.3.10-5.6] - Fix: typo in man page resolves: rhbz#1099286 [1.3.10-5.4] - Fix: hivex missing checks for small/truncat…
-
MediumELSA-2015-0327 2 CVEs
Moderate: glibc security and bug fix update (Oracle Linux 7)
[2.17-78.0.1] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. [2.17-78] - Fix ppc64le builds (#1077389). [2.17-77] -…
-
LowELSA-2015-0330 1 CVE
Low: pcre security and enhancement update (Oracle Linux 7)
[8.32-14] - Fix CVE-2014-8964 (unused memory usage on zero-repeat assertion condition) (bug #1169797) [8.32-13] - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform (bug #1125642) - Raise optimization level to 3 on little-endian 64-bit Powe…
-
HighELSA-2015-0416 2 CVEs
Important: 389-ds-base security, bug fix, and enhancement update (Oracle Linux 7)
[1.3.3.1-13] - release 1.3.3.1-13 - Resolves: bug 1183655 - Fixed Covscan FORWARD_NULL defects (DS 47988) [1.3.3.1-12] - release 1.3.3.1-12 - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989) - Resolves: bug 1180325 - upgrade scri…
-
Medium max 6.5ELSA-2015-0425 2 CVEs
Moderate: openssh security, bug fix and enhancement update (Oracle Linux 7)
[6.6.1p1-11 + 0.9.3-9] - fix direction in CRYPTO_SESSION audit message (#1171248) [6.6.1p1-10 + 0.9.3-9] - add new option GSSAPIEnablek5users and disable using ~/.k5users by default CVE-2014-9278 (#1169843) [6.6.1p1-9 + 0.9.3-9] - log via monitor in chroots w…
-
CriticalELSA-2015-0265 4 CVEs
Critical: firefox security update (Oracle Linux 7)
firefox [31.5.0-2.0.1.el7_0] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [31.5.0-2] - Update to 31.5.0 ESR Build 2 xulrunner [31.5.0-1.0.1-el7_0] - Replaced xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-pr…
-
HighELSA-2015-0252 1 CVE
Important: samba security update (Oracle Linux 7)
[4.1.1-38] - resolves: #1194132 - CVE-2015-0240: RCE in netlogon server.
-
MediumELSA-2015-0166 3 CVEs
Moderate: subversion security update (Oracle Linux 7)
[1.7.14-7] - add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108
-
MediumELSA-2015-0118 7 CVEs
Moderate: mariadb security update (Oracle Linux 7)
[1:5.5.41-2] - Include new certificate for tests Resolves: #1186109 [1:5.5.41-1] - Rebase to 5.5.41 Also fix: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432 Resolves: #1186109 [1:5.5.40-2] - Fix header to let…
-
HighELSA-2015-3003 2 CVEs
Important: Unbreakable Enterprise kernel security and bugfix update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.5] - [CIFS] Possible null ptr deref in SMB2_tcon (Steve French) [Orabug: 20433140] {CVE-2014-7145} [3.8.13-55.1.4] - net: sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [Orabug: 20425332…
-
MediumELSA-2015-0100 1 CVE
Moderate: libyaml security update (Oracle Linux 7)
[0.1.3-4] - Add patch for CVE-2014-9130 (RHBZ#1169369)
-
HighELSA-2015-0102 6 CVEs
Important: kernel security and bug fix update (Oracle Linux 7)
[3.10.0-123.20.1] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.20.1] - [fs] seq_file: don't include mm.h in genksyms calculation (Ian Kent) [1184152 1183280] [3.10.0-123.19.1] - [mm] shmem: fix splicing from a hole while it's punched (Denys Vlase…
-
CriticalELSA-2015-0092 1 CVE
Critical: glibc security update (Oracle Linux 7)
Oracle Linux 7: [2.17-55.0.4.el7_0.5] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.5]…
-
High max 3.4ELSA-2015-0085 12 CVEs
Important: java-1.6.0-openjdk security update (Oracle Linux 7)
[1:1.6.0.33-1.13.6.1.0.1.el5_11] - Add oracle-enterprise.patch [1:1.6.0.34-1.13.6.1] - Update to latest 1.13.6 release candidate tarball - Fixes a number of issues found with b34: - * OJ51, PR2187: Sync patch for 4873188 with 7 version - * OJ52, PR2185: Appli…
-
HighELSA-2015-0074 2 CVEs
Important: jasper security update (Oracle Linux 7)
[1.900.1-16.3] - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671) - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)
-
Critical max 3.4ELSA-2015-0067 12 CVEs
Critical: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.75-2.5.4.0.0.1.el6_6] - Update DISTRO_NAME in specfile [1:1.7.0.75-2.5.4.0] - Fix abrt_friendly_hs_log_jdk7.patch to apply again. [1:1.7.0.75-2.5.4.0] - Bump to 2.5.4 using OpenJDK 7u75 b13. - Remove earlier temporary patch for RH1146622 (included up…
-
MediumELSA-2015-0066 7 CVEs
Moderate: openssl security update (Oracle Linux 7)
[1.0.1e-34.7] - fix CVE-2014-3570 - incorrect computation in BN_sqr() - fix CVE-2014-3571 - possible crash in dtls1_get_record() - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state - fix CVE-2014-8275 - various certificate fingerprin…
-
CriticalELSA-2015-0046 4 CVEs
Critical: firefox security and bug fix update (Oracle Linux 7)
[31.4.0-1.0.1] - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files [31.4.0-1] - Update to 31.4.0 ESR [31.3.0-9] - Fixed problems with dictionaries (mozbz#1097550) - Fixed rhbz#1164855 - fi…
-
LowELSA-2015-0008 1 CVE
Low: libvirt security and bug fix update (Oracle Linux 7)
[1.1.1-29.0.1.el7_0.4] - Replace docs/et.png in tarball with blank image [1.1.1-29.el7_0.4] - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1149078) - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1149078) - qe…
-
High max 9.8ELSA-2014-3110 3 CVEs
Important: docker security update (Oracle Linux 7)
[1.3.3-1.0.1] - Rename requirement of docker-io-pkg-devel in %package devel as docker-pkg-devel - Restore SysV init scripts for Oracle Linux 6 - Require Oracle Unbreakable Enterprise Kernel Release 3 or higher - Rename as docker. - Re-enable btrfs graphdriver…
-
HighELSA-2014-2024 4 CVEs
Important: ntp security update (Oracle Linux 7)
[4.2.6p5-2] - don't generate weak control key for resolver (CVE-2014-9293) - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294) - fix buffer overflows via specially-crafted packets (CVE-2014-9295) - don't mobilize passive association when authenticati…
-
HighELSA-2014-3106 4 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.2.el6uek] - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara) [Orabug: 20224059] {CVE-2014-5471} {CVE-2014-5472} - x86_64, traps: Stop using IST for #SS (Andy Lutomirski) [Orabug: 20224027] {CVE-2014-9090}…
-
HighELSA-2014-2010 1 CVE
Important: kernel security update (Oracle Linux 7)
[3.10.0-123.13.2] - Oracle Linux certificates (Alexey Petrenko) [3.10.0-123.13.2] - [x86] traps: stop using IST for #SS (Petr Matousek) [1172812 1172813] {CVE-2014-9322}
-
HighELSA-2014-2021 3 CVEs
Important: jasper security update (Oracle Linux 7)
[1.900.1-16.2] - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566) - CVE-2014-8138 - heap overflow in jp2_decode (#1173566) [1.900.1-16.1] - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders (#11712…
-
MediumELSA-2014-2023 1 CVE
Moderate: glibc security and bug fix update (Oracle Linux 7)
[2.17-55.0.4.el7_0.3] - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. (Jose E. Marchesi) [2.17-55.3] - Fix wordexp()…
-
MediumELSA-2014-1999 2 CVEs
Moderate: mailx security update (Oracle Linux 7)
[12.4-8] - CVE-2004-2771 mailx: command execution flaw resolves: #1171175
-
HighELSA-2014-1984 1 CVE
Important: bind security update (Oracle Linux 7)
[32:9.9.4-14.0.1.el7_0.1] - Rebuild to fix libmysqlclient dependency [32:9.9.4-14.1] - Fix CVE-2014-8500 (#1171975)
-
HighELSA-2014-1983 13 CVEs
Important: xorg-x11-server security update (Oracle Linux 7)
[1.15.0-7.0.1.el7_0.3] - Invalid BUG_RETURN_VAL fix, upstream patch (orabug 18896390) [1.15.0-7.3] - CVE fixes for: CVE-2014-8099, CVE-2014-8098, CVE-2014-8097, CVE-2014-8096, CVE-2014-8095, CVE-2014-8094, CVE-2014-8093, CVE-2014-8092, CVE-2014-8091, CVE-2014…
-
HighELSA-2014-3103 7 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
kernel-uek [3.8.13-55.1.1] - ALSA: control: Protect user controls against concurrent access (Lars-Peter Clausen) [Orabug: 20192540] {CVE-2014-4652} - target/rd: Refactor rd_build_device_space + rd_release_device_space (Nicholas Bellinger) [Orabug: 20192516] {…