8,316 results · Feed
-
Medium max 9.8ELSA-2024-3838 6 CVEs
Moderate: ruby security update (Oracle Linux 9)
[3.0.7-162] - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerabi…
-
Medium max 6.2ELSA-2024-3846 1 CVE
Moderate: python-idna security update (Oracle Linux 9)
[2.10-7.0.1.1] - Rebuild with release bump [2.10-7.1] - Security fix for CVE-2024-3651 Resolves: RHEL-33464
-
High max 8.3ELSA-2024-3835 2 CVEs
Important: libreoffice security update (Oracle Linux 9)
[7.1.8.1-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Added the --with-hamcrest option to configure. [7.1.8.1] - Remove Red Hat branding - Change vendor to RESF [1:7.1.8.1-12] - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-20…
-
Medium max 6.5ELSA-2024-3830 1 CVE
Moderate: gvisor-tap-vsock security and bug fix update (Oracle Linux 9)
[6:0.7.3-3] - rebuild for CVE-2023-45290 - Resolves: RHEL-28388
-
High max 7.5ELSA-2024-3837 2 CVEs
Important: 389-ds-base security update (Oracle Linux 9)
[2.4.5-8] - Bump version to 2.4.5-8 - Fix License tag [2.4.5-7] - Bump version to 2.4.5-7 - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c - Resolves: RHEL-34825 - redhat-ds:11/389-ds-bas…
-
High max 5.6ELSA-2024-12433 2 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)
[5.15.0-207.156.6] - uek-container: Add advanced routing options (Boris Ostrovsky) [Orabug: 36691279] - slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655468] - slub: introduce count_partial_free_approx() (Jianfeng Wa…
-
Medium max 6.2ELSA-2024-3823 1 CVE
Moderate: rpm-ostree security update (Oracle Linux 9)
[2024.3-3] - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6 Resolves: #RHEL-31852 [2024.3-2] - Backport https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6 Resolves: #RHEL-31852
-
Medium max 8.8ELSA-2024-3783 6 CVEs
Moderate: firefox security update (Oracle Linux 8)
[115.11.0-1.0.1] - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file [115.11.0-1] - Update to 115.11.0 build1
-
High max 8.8ELSA-2024-3755 2 CVEs
Important: idm:DL1 security update (Oracle Linux 8)
bind-dyndb-ldap custodia ipa [4.9.13-10.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [4.9.13-10] - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183) Resolves: RHEL-29927 - kdb: fix vulnerability in GCD rules handling…
-
Medium max 8.8ELSA-2024-3784 6 CVEs
Moderate: thunderbird security update (Oracle Linux 8)
[115.11.0-1.0.1] - Add Oracle prefs file [115.11.0-1] - Update to 115.11.0 build2
-
Low max 4.4ELSA-2024-3842 1 CVE
Low: c-ares security update (Oracle Linux 9)
[1.19.1-2] - Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9]
-
Medium max 7.3ELSA-2024-3843 1 CVE
Moderate: cockpit security update (Oracle Linux 9)
[311.2-1.0.1] - Replaced upstream urls in documentation with oracle links [Orabug: 36528753] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 34030494] - Update documentation …
-
Medium max 6.5ELSA-2024-3827 3 CVEs
Moderate: buildah security and bug fix update (Oracle Linux 9)
[1.33.7-2.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [2:1.33.7-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/997beea) - Res…
-
Medium max 7.8ELSA-2024-3834 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 9)
[2.42.6-4] - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432
-
Medium max 6.5ELSA-2024-3826 3 CVEs
Moderate: podman security and bug fix update (Oracle Linux 9)
[4.9.4-4.0.1] - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655] - Add devices on container startup, not on creation - Backport fast gzip for compression [Orabug: 36420418] - overlay: Put should ignore ENINVAL for Unmount [O…
-
Medium max 6.5ELSA-2024-3831 1 CVE
Moderate: containernetworking-plugins security and bug fix update (Oracle Linux 9)
[1:1.4.0-3] - rebuild for CVE-2023-45290 - Resolves: RHEL-28384
-
Medium max 5.4ELSA-2024-3820 1 CVE
Moderate: fence-agents security update (Oracle Linux 9)
[4.10.0-62.3] - bundled jinja2: fix CVE-2024-34064 Resolves: RHEL-36482 [4.10.0-62.2] - fence_eps: add fence_epsr2 for ePowerSwitch R2 and newer Resolves: RHEL-35273 [4.10.0-62.1] - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in gcp-vpc-move-…
-
High max 8.1ELSA-2024-3760 1 CVE
Important: ipa security update (Oracle Linux 7)
[4.6.8-5.0.1.el7_9.17] - Blank out header-logo.png product-name.png - Replace login-screen-logo.png [Orabug: 20362818] [4.6.8-5.el7_9.17] - Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
-
High max 7.5ELSA-2024-3741 3 CVEs
Important: bind, bind-dyndb-ldap, and dhcp security update (Oracle Linux 7)
bind [32:9.11.4-26.P2.16] - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use hea…
-
High max 8.8ELSA-2024-3754 2 CVEs
Important: ipa security update (Oracle Linux 9)
[4.11.0-15.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] - Add bind to ipa-server-common Requires [Orabug: 36518596] [4.11.0-15] - Resolves: RHEL-32231 CVE-2024-3183 ipa: freeipa: user can obtain a hash of the passwords of all doma…
-
Medium max 9.8ELSA-2024-3670 3 CVEs
Moderate: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 8)
ruby [3.3.1-2] - Upgrade to Ruby 3.3.1. Resolves: RHEL-37446 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-37448 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-37449 - Fix Arbitrary memor…
-
High max 8.6ELSA-2024-3669 1 CVE
Important: less security update (Oracle Linux 7)
[458-10] - Fix CVE-2024-32487 - Resolves: RHEL-32802
-
High max 7.5ELSA-2024-3666 2 CVEs
Important: tomcat security and bug fix update (Oracle Linux 8)
[1:9.0.87-1.el8_10.1] - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29255 tomcat: Apache Tomcat: WebSocket DoS with incomplete cl…
-
Medium max 7.3ELSA-2024-3667 1 CVE
Moderate: cockpit security update (Oracle Linux 8)
[310.4-1.0.1] - Update documentation links [Orabug: 34706402] - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110] - Remove duplicate reference to server in cockpit [Orabug: 33862832] - Update documentation links [Orabug: 32795691] - Make…
-
MediumELSA-2024-3619 2 CVEs
Moderate: kernel security and bug fix update (Oracle Linux 9)
- [5.14.0-427.20.1_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_ke…
-
Medium max 9.8ELSA-2024-3671 3 CVEs
Moderate: ruby:3.3 security, bug fix, and enhancement update (Oracle Linux 9)
ruby [3.3.1-2] - Upgrade to Ruby 3.3.1. Resolves: RHEL-37697 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-37699 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-37696 - Fix Arbitrary memor…
-
Medium max 9.8ELSA-2024-3668 3 CVEs
Moderate: ruby:3.1 security, bug fix, and enhancement update (Oracle Linux 9)
ruby [3.1.5-144] - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability wit…
-
High max 8.1ELSA-2024-3588 5 CVEs
Important: glibc security update (Oracle Linux 7)
[2.17-326.3] - Forward-port Oracle patches to 2.17-326.3 Reviewed-by: Jose E. Marchesi [2.17-326.3] - nscd: Fix timeout type in netgroup cache (RHEL-34263) [2.17-326.2] - nscd: Do not use sendfile for the netgroup cache - nscd: Use-after-free in netgroup cach…
-
Medium max 7.5ELSA-2024-3626 1 CVE
Moderate: libxml2 security update (Oracle Linux 8)
[2.9.7-18.1] - Fix CVE-2024-25062 (RHEL-31056)
-
Medium max 9.8ELSA-2024-3618 57 CVEs
Moderate: kernel update (Oracle Linux 8)
[4.18.0-553.5.1.el8_10.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509…
-
High max 7.5ELSA-2024-3591 2 CVEs
Important: 389-ds-base security update (Oracle Linux 7)
[1.3.11.1-5] - Bump version to 1.3.11.1-5 - Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request - Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at…
-
High max 8.3ELSA-2024-12408 10 CVEs
Important: edk2 security update (Oracle Linux 7)
* Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com> - Create new 1.7.0 release for OL7 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022…
-
Medium max 9.8ELSA-2024-3546 3 CVEs
Moderate: ruby:3.1 security, bug fix, and enhancement update (Oracle Linux 8)
ruby [3.1.5-143] - Upgrade to Ruby 3.1.5. Resolves: RHEL-35748 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35749 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35750 - Fix arbitrary memory address read vulnerability wit…
-
Medium max 8.8ELSA-2024-12407 7 CVEs
Moderate: qemu-kvm security update (Oracle Linux 9)
[7.2.0-11.el9] - vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758] - vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758] - migration: Don't serialize devices in qemu_savevm_state_i…
-
High max 8.3ELSA-2024-23120 10 CVEs
Important: edk2 security update (Oracle Linux 9)
* Tue Feb 27 2024 Aaron Young - Create new 20240227 release for OL9 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-3676…
-
Medium max 5.5ELSA-2024-12406 1 CVE
Moderate: libvirt security update (Oracle Linux 9)
libvirt [9.0.0-5.el9] - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441} libvirt-python [9.0.0-5.el9] - Update to libvirt 9.0.0-5 (Karl Heubaum)
-
High max 8.3ELSA-2024-12409 10 CVEs
Important: edk2 security update (Oracle Linux 9)
* Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com> - Create new 20240227 release for OL9 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2…
-
Medium max 9.8ELSA-2024-3500 6 CVEs
Moderate: ruby:3.0 security update (Oracle Linux 8)
ruby [3.0.7-143] - Fix Zlib test failures on s390x due to HW acceleration Related: RHEL-36189 [3.0.7-142] - Upgrade to Ruby 3.0.7. Resolves: RHEL-36189 - Fix HTTP response splitting in CGI. Resolves: RHEL-36193 - Fix ReDoS vulnerability in URI. Resolves: RHEL…
-
High max 7.8ELSA-2024-3466 3 CVEs
Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)
mod_wsgi numpy python39 [3.9.19-1] - Update to 3.9.19 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33676, RHEL-33688 python3x-pip python3x-setuptools python3x-six python-cffi pytho…
-
Medium max 6.2ELSA-2024-3253 1 CVE
Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)
hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [8.0.0-23.1.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-23.1.el8] - remote: check for negative arra…