8,316 results · Feed
-
Medium max 9.8ELSA-2024-8876 1 CVE
Moderate: go-toolset:ol8 security update (Oracle Linux 8)
delve [1.22.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.22.1-1] - Rebase to 1.22.1 - Resolves: RHEL-54307 golang [1.22.7-1] - Update to Go 1.22.7 - Resolves: RHEL-58223 - Resolves: RHEL-57961 - Resolves: RHEL-57847 - Resolves: RH…
-
Medium max 9.8ELSA-2024-8856 42 CVEs
Moderate: kernel security update (Oracle Linux 8)
- [4.18.0-553.27.1_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.…
-
Medium max 7.5ELSA-2024-8914 1 CVE
Moderate: libtiff security update (Oracle Linux 9)
[4.4.0-12.1] - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)
-
Medium max 9.8ELSA-2024-8790 10 CVEs
Moderate: thunderbird security update (Oracle Linux 8)
[128.4.0-1.0.1] - Fix prefs for new nss [Orabug: 37079820] - Add Oracle prefs file [128.4.0] - Add OpenELA debranding [128.4.0-1] - Update to 128.4.0 build1
-
Medium max 7.8ELSA-2024-8798 1 CVE
Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update (Oracle Linux 8)
xorg-x11-server [1.20.11-25] - CVE fix for CVE-2024-9632 xorg-x11-server-Xwayland [21.1.3-17] - Fix for CVE-2024-9632 - (RHEL-61995)
-
Medium max 9.8ELSA-2024-8793 10 CVEs
Moderate: thunderbird security update (Oracle Linux 9)
[128.4.0-1.0.1] - Fix prefs for new nss [Orabug: 37079813] - Add Oracle prefs [128.4.0] - Add OpenELA debranding [128.4.0-1] - Update to 128.4.0 build1
-
High max 9.1ELSA-2024-8800 1 CVE
Important: openexr security update (Oracle Linux 9)
[3.1.1-2.1] - fix CVE-2023-5481 (RHEL-64162)
-
High max 7.1ELSA-2024-12806 3 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[4.1.12-124.91.3] - nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro) [Orabug: 37006239] [4.1.12-124.91.2] - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37035560] [4.1.12-124.91.1] - vt_ioctl:…
-
Medium max 9.8ELSA-2024-8729 10 CVEs
Moderate: firefox security update (Oracle Linux 8)
[128.4.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789] [128.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Abel) [128.4.0-1] - Update to 128.4.0 build1
-
Medium max 9.8ELSA-2024-8726 10 CVEs
Moderate: firefox security update (Oracle Linux 9)
[128.4.0-1.0.1] - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079773] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [128.4.0] - Add debranding patches (Mustafa Gezen) - Add OpenELA default preferences (Louis Ab…
-
Medium max 7.8ELSA-2024-8617 22 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-427.42.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
Low max 5.4ELSA-2024-8680 1 CVE
Low: mod_http2 security update (Oracle Linux 9)
[2.0.26-2.1] - Resolves: RHEL-45803 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387)
-
High max 10.0ELSA-2024-8678 2 CVEs
Important: grafana security update (Oracle Linux 9)
[9.2.10-19] - Resolves RHEL-62309: CVE-2024-47875 [9.2.10-18] - Resolves RHEL-61049: CVE-2024-9355
-
High max 7.8ELSA-2024-8563 1 CVE
Important: buildah security update (Oracle Linux 9)
[1.33.10-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.10-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/bd85c17) - R…
-
High max 9.8ELSA-2024-6838 8 CVEs
Important: firefox update (Oracle Linux 7)
[128.2.0-1.0.1] - Remove nomerge annotation from abort calls [Orabug: 37079143] - Update to 128.2.0 [Orabug: 37079143]
-
High max 9.8ELSA-2024-7702 12 CVEs
Important: firefox security update (Oracle Linux 7)
[128.3.0-1.0.1] - Update to 128.3.0 [Orabug: 37139909]
-
High max 9.8
Important: firefox security update (Oracle Linux 7)
[128.3.1-2.0.1] - Update to 128.3.1 [Orabug: 37168934]
-
Medium max 7.5ELSA-2024-8359 1 CVE
Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)
mod_wsgi numpy python39 [3.9.20-1] - Update to 3.9.20 Resolves: RHEL-60007 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python-ply python-psutil python-psycopg2 python-pycparser python-Py…
-
Medium max 7.5ELSA-2024-8446 1 CVE
Moderate: python3.9 security update (Oracle Linux 9)
[3.9.18-3.6] - Fix: CVE-2024-6232 - Resolves: RHEL-57421
-
Medium max 7.5ELSA-2024-8447 1 CVE
Moderate: python3.12 security update (Oracle Linux 9)
[3.12.1-4.4] - Security fix for CVE-2024-6232 Resolves: RHEL-57416
-
High max 7.8ELSA-2024-8353 1 CVE
Important: NetworkManager-libreswan security update (Oracle Linux 8)
[1.2.10-7] - Unbreak validation of unknown keys [1.2.10-6] - Fix improper escaping of Libreswan configuration (CVE-2024-9050)
-
Low max 6.0ELSA-2024-12791 1 CVE
Low: virt:kvm_utils1 security update (Oracle Linux 8)
hivex [1.3.18-21] - Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950501 [1.3.18] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.3.18] - Resolves: bz#1810193 (Upgrade components in…
-
Medium max 7.5ELSA-2024-8374 1 CVE
Moderate: python3.11 security update (Oracle Linux 9)
[3.11.7-1.6] - Security fix for CVE-2024-6232 Resolves: RHEL-57411
-
High max 10.0ELSA-2024-8327 2 CVEs
Important: grafana security update (Oracle Linux 8)
[9.2.10-20] - Resolves RHEL-62307: CVE-2024-47875 [9.2.10-19] - Resolves RHEL-61779: CVE-2024-9355
-
Medium max 5.3ELSA-2024-12797 2 CVEs
Moderate: linux-firmware security update (Oracle Linux 7)
[20241003-999.35.git95bfe086.el8] - Rebase to latest upstream [Orabug: 37132142] - Fix build error in ol7 due to linking in copy-firmware.sh [Orabug: 37132515] - Bring back drirectory structure qcom/sc8280xp [Orabug: 37132142]
-
Medium max 7.5ELSA-2024-12792 1 CVE
Moderate: virt:kvm_utils3 security update (Oracle Linux 8)
hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] libguestfs-winsupport libiscsi libnbd [1.6.0-6.el8] - Fix CVE-2024-7383 NBD server improper certificate validation resolves: RHEL-52728 [1.6.0-5.el8] - Fix …
-
High max 7.8ELSA-2024-12796 10 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-301.163.5.2] - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37174198] {CVE-2024-47674} - Revert 'Documentation/admin-guide/acpi: Move information out of shell script comments' (Dave Kleikamp) [Orabug: 37144820]…
-
Medium max 5.7ELSA-2024-7434 1 CVE
Moderate: 389-ds-base security update (Oracle Linux 7)
[1.3.11.1-5.0.3] - Security fix for CVE-2024-8445 [Orabug: 37119399][CVE-2024-8445]
-
Medium max 6.5ELSA-2024-12793 4 CVEs
Moderate: edk2 security update (Oracle Linux 7)
[1.7.1] - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {C…
-
Medium max 6.5ELSA-2024-12794 4 CVEs
Moderate: edk2 security update (Oracle Linux 7)
[1.7.1] - Create new 1.7.1 release for OL7 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {C…
-
Medium max 6.5ELSA-2024-28600 4 CVEs
Moderate: edk2 security update (Oracle Linux 8)
-
Medium max 6.5ELSA-2024-12795 4 CVEs
Moderate: edk2 security update (Oracle Linux 8)
[20240909] - Create new 20240909 release for OL8 which includes the following fixed CVEs: - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 369901…
-
Medium max 4.8ELSA-2024-8117 5 CVEs
Moderate: java-1.8.0-openjdk security update (Oracle Linux 8)
[1.8.0.432.b06-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.432.b06-1] - Update to shenandoah-jdk8u432-b06 (GA) - Update release notes for shenandoah-8u432-b06. - Drop JDK-828109{6,7,8}/PR3836 patch following integration of upstream version …
-
Medium max 4.8ELSA-2024-8124 5 CVEs
Moderate: java-17-openjdk security update (Oracle Linux 8)
[17.0.13.0.11-3.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.13.0.11-3] - Correct version suffix in 'Update to jdk-17.0.13+11 (GA)' changelog entry - Related: RHEL-58781 [1:17.0.13.0.11-2] - Update to jdk-17.0.13+11 (GA) - Update .gitignore to …
-
Medium max 4.8ELSA-2024-8127 5 CVEs
Moderate: java-21-openjdk security update (Oracle Linux 8)
[1:21.0.5.0.10-3.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:21.0.5.0.10-3] - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Related: RHEL-61346 [1:21.0.5.0.10-2] - Updat…
-
Medium max 4.8ELSA-2024-8121 5 CVEs
Moderate: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.25.0.9-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:11.0.25.0.9-2] - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58772 - ** This tarball is embargoed until 2024-10-15 @ 1…
-
High max 8.8ELSA-2024-6662 1 CVE
Important: python-setuptools security update (Oracle Linux 7)
[0.9.8-7.0.1] - Fixes CVE-2024-6345 security issue [Orabug: 37054994]
-
High max 9.8ELSA-2024-7101 1 CVE
Important: httpd security update (Oracle Linux 7)
[2.4.6-99.0.5.1] - Differentiate trusted sources [Orabug: 37100272][CVE-2024-38476]
-
Medium max 9.1ELSA-2024-8162 14 CVEs
Moderate: kernel security update (Oracle Linux 9)
[5.14.0-427.40.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.…
-
High max 9.8ELSA-2024-8180 11 CVEs
Important: webkit2gtk3 security update (Oracle Linux 9)
[2.46.1-1] - Update to 2.46.1