8,321 results · Feed
-
Medium max 5.5ELSA-2024-12406 1 CVE
Moderate: libvirt security update (Oracle Linux 9)
libvirt [9.0.0-5.el9] - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441} libvirt-python [9.0.0-5.el9] - Update to libvirt 9.0.0-5 (Karl Heubaum)
-
High max 8.3ELSA-2024-12409 10 CVEs
Important: edk2 security update (Oracle Linux 9)
* Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com> - Create new 20240227 release for OL9 which includes the following fixed CVEs: {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2…
-
Medium max 9.8ELSA-2024-3500 6 CVEs
Moderate: ruby:3.0 security update (Oracle Linux 8)
ruby [3.0.7-143] - Fix Zlib test failures on s390x due to HW acceleration Related: RHEL-36189 [3.0.7-142] - Upgrade to Ruby 3.0.7. Resolves: RHEL-36189 - Fix HTTP response splitting in CGI. Resolves: RHEL-36193 - Fix ReDoS vulnerability in URI. Resolves: RHEL…
-
High max 7.8ELSA-2024-3466 3 CVEs
Important: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)
mod_wsgi numpy python39 [3.9.19-1] - Update to 3.9.19 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33676, RHEL-33688 python3x-pip python3x-setuptools python3x-six python-cffi pytho…
-
Medium max 6.2ELSA-2024-3253 1 CVE
Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)
hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [8.0.0-23.1.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-23.1.el8] - remote: check for negative arra…
-
High max 8.6ELSA-2024-3513 1 CVE
Important: less security update (Oracle Linux 9)
[590-4] - Fix CVE-2024-32487 - Resolves: RHEL-33773
-
High max 8.6ELSA-2024-3254 5 CVEs
Important: container-tools:ol8 security update (Oracle Linux 8)
aardvark-dns buildah [2:1.33.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 (https://github.com/containers/buildah/commit/b95e962) - Resolves: RHEL-28224 cockpit-podman conmon containernetworking-plugins contain…
-
High max 7.8ELSA-2024-3343 3 CVEs
Important: xorg-x11-server-Xwayland security update (Oracle Linux 8)
[21.1.3-16] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083
-
High max 7.8ELSA-2024-3347 2 CVEs
Important: python3 security update (Oracle Linux 8)
[3.6.8-62.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-62] - Security fix for CVE-2024-0450 Resolves: RHEL-33683 [3.6.8-61] - Security fix for CVE-2023-6597 Resolves: RHEL-33671 [3.6.8-60] - Fix build with expat with fixed CVE…
-
Medium max 6.8ELSA-2024-3267 2 CVEs
Moderate: idm:DL1 and idm:client security update (Oracle Linux 8)
bind-dyndb-ldap custodia ipa [4.9.13-9.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [9.4.13-9] - dcerpc: invalidate forest trust intfo cache when filtering out realm domains Resolves: RHEL-28559 - Backport latests test fixes in py…
-
High max 7.8ELSA-2024-3261 3 CVEs
Important: tigervnc security update (Oracle Linux 8)
[1.13.1-10] - Drop patches that are already part of xorg-x11-server Resolves: RHEL-30755 Resolves: RHEL-30767 Resolves: RHEL-30761 [1.13.1-9] - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves…
-
High max 6.3ELSA-2024-3340 2 CVEs
Important: .NET 7.0 security update (Oracle Linux 8)
[7.0.119-1.0.1] - Add support for Oracle Linux [7.0.119-1] - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35313 [7.0.118-2] - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31199
-
High max 7.5ELSA-2024-3271 3 CVEs
Important: bind and dhcp security update (Oracle Linux 8)
bind [32:9.11.36-14] - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers dhcp [4.3.6] - Change bug …
-
High max 8.8ELSA-2024-3264 1 CVE
Important: pcp security update (Oracle Linux 8)
[5.3.7-20.0.1] - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733] - Backporting of python tool pcp-meminfo [Orabug: 35759707] - Backporting of python tool pcp-slabinfo [Orabug: 35560940] - Backporting of python tool pcp-buddyinfo [Orabug: 35660932] …
-
High max 6.3ELSA-2024-3345 2 CVEs
Important: .NET 8.0 security update (Oracle Linux 8)
[8.0.105-1.0.1] - Add support for Oracle Linux [8.0.105-1] - Update to .NET SDK 8.0.105 and Runtime 8.0.5 - Resolves: RHEL-35316
-
Medium max 7.8ELSA-2024-3258 3 CVEs
Moderate: xorg-x11-server security update (Oracle Linux 8)
[1.20.14-23] - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083 - Add util-linux as a dependency of Xvfb - Fix compilation error on i686
-
Medium max 7.1ELSA-2024-3270 1 CVE
Moderate: sssd security update (Oracle Linux 8)
[2.9.4-3.0.1] - Restore default debug level for sss_cache [Orabug: 32810448] [2.9.4-3] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently
-
Medium max 7.0ELSA-2024-3275 1 CVE
Moderate: python-dns security update (Oracle Linux 8)
[1.15.0-12] - Security fix for CVE-2023-29483 Resolves: RHEL-32630
-
High max 7.3ELSA-2024-3269 1 CVE
Important: glibc security update (Oracle Linux 8)
[2.28-251.0.2.1] - Forward port of Oracle patches over 2.28-251.1 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
-
High max 7.5ELSA-2024-3346 4 CVEs
Important: git-lfs security update (Oracle Linux 8)
[3.4.1-2] - Rebuild with new Golang - Resolves: RHEL-32543, RHEL-28377, RHEL-28399, RHEL-28423 [3.4.1-1] - Update to version 3.4.1 - Resolves: RHEL-17102
-
High max 8.1ELSA-2024-3344 4 CVEs
Important: glibc security update (Oracle Linux 8)
[2.28-251.0.2.2] - Forward port of Oracle patches over 2.28-251.2 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> Oracle history: May-23-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.28-251.0.2.1 - Forward port of Oracle patches over 2.28…
-
Medium max 7.8ELSA-2024-3341 1 CVE
Moderate: gdk-pixbuf2 security update (Oracle Linux 8)
[2.36.12-6] - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478
-
Low max 7.5ELSA-2024-3268 2 CVEs
Low: krb5 security update (Oracle Linux 8)
[1.18.2-27.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.18.2-27] - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves:…
-
High max 7.5ELSA-2024-3265 2 CVEs
Important: grafana security update (Oracle Linux 8)
[9.2.10-16] - Check OrdID is correct before deleting snapshot - fix CVE-2024-1313 - fix CVE-2024-1394
-
High max 7.5ELSA-2024-3259 6 CVEs
Important: go-toolset:ol8 security update (Oracle Linux 8)
delve golang [1.21.9-1] - Fix CVE-2023-45288 - Resolves: RHEL-31915 go-toolset [1.21.9-1] - Fix CVE-2023-45288 - Resolves: RHEL-31915
-
High max 8.1ELSA-2024-3339 5 CVEs
Important: glibc security update (Oracle Linux 9)
[2.34-100.0.1.2] - Forward-port Oracle patches for ol9-u4 Reviewed by: Jose E. Marchesi
-
Medium max 7.8ELSA-2024-2994 1 CVE
Moderate: LibRaw security update (Oracle Linux 8)
[0.19.5-4] - Backport fix for CVE-2021-32142 from upstream Resolves: RHEL-9523
-
Medium max 5.5ELSA-2024-3047 1 CVE
Moderate: 389-ds:1.4 security update (Oracle Linux 8)
[1.4.3.39-3] - Bump version to 1.4.3.39-3 - Resolves: RHEL-19240 - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix [1.4.3.39-2] - Bump version to 1.4.3.39-2 - Resolves: RHEL-23209 - CVE-2024-1062 389-ds:1.4/389-ds-base…
-
Medium max 7.0ELSA-2024-3128 1 CVE
Moderate: perl:5.32 security update (Oracle Linux 8)
perl-Algorithm-Diff perl-Archive-Tar perl-Archive-Zip perl-autodie perl-bignum perl-Carp perl-Compress-Bzip2 perl-Compress-Raw-Bzip2 perl-Compress-Raw-Lzma perl-Compress-Raw-Zlib [2.096-2] - Fix test broken by update in zlib on s390x - Related: RHEL-16371 per…
-
Medium max 5.9ELSA-2024-2987 5 CVEs
Moderate: python27:2.7 security update (Oracle Linux 8)
babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned …
-
Medium max 7.5ELSA-2024-3184 3 CVEs
Moderate: grub2 security update (Oracle Linux 8)
[2.02-156.0.1] - Restore correct SBAT entries - Replaced bugzilla.oracle.com references [Orabug: 35475894] - efinet: Close and reopen card on failure [Orabug: 35126950] - Fix CVE-2022-3775 [Orabug: 34867710] - Bump SBAT metadata for grub to 3 [Orabug: 3487175…
-
Medium max 5.3ELSA-2024-3044 1 CVE
Moderate: idm:DL1 security update (Oracle Linux 8)
bind-dyndb-ldap [11.6-4] - Modify empty zone conflicts under exclusive mode Resolves: rhbz#2126877 [11.6-3] - Rebuild against bind 9.11.36 - Resolves: rhbz#2022762 [11.6-2] - Rebuild against bind 9.11.26 - Resolves: rhbz#1904612 [11.6-1] - New upstream releas…
-
Medium max 6.1ELSA-2024-2961 1 CVE
Moderate: Image builder components bug fix, enhancement and security update (Oracle Linux 8)
osbuild [110-1] - New upstream release [109-1] - New upstream release [106-1] - New upstream release [105-1] - New upstream release [104-2] - Fix unit tests in RHEL CI by backporting upstream fixes [104-1] - New upstream release [101-1] - New upstream release…
-
High max 8.2ELSA-2024-3178 2 CVEs
Important: linux-firmware security update (Oracle Linux 8)
[20240415-999.32.git5da74b16.el8] - Rebase to latest upstream [Orabug: 36482906]
-
MediumELSA-2024-3121 2 CVEs
Moderate: httpd:2.4 security update (Oracle Linux 8)
httpd [2.4.37-64.0.1] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-64] - Resolves: RHEL-14448 - httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122) [2.4.37-63] - mod_xml2enc: fix media type handling Resolves: RHEL-14…
-
Medium max 6.1ELSA-2024-2988 16 CVEs
Moderate: container-tools:ol8 security update (Oracle Linux 8)
-
Medium max 7.5ELSA-2024-3061 1 CVE
Moderate: pki-core:10.6 and pki-deps:10.6 security update (Oracle Linux 8)
apache-commons-collections apache-commons-lang apache-commons-net bea-stax fasterxml-oss-parent [49-1] - Rebase to upstream version 49 [26-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [26-5] - Fix license tag [26-4] - Rebuilt for htt…
-
Medium max 6.5ELSA-2024-2962 4 CVEs
Moderate: virt:ol and virt-devel:rhel security and enhancement update (Oracle Linux 8)
hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX…
-
Medium max 5.9ELSA-2024-2985 4 CVEs
Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)
mod_wsgi [4.7.1-7] - Bump release for rebuild Resolves: rhbz#2213595 [4.7.1-6] - Remove rpath Resolves: rhbz#2213837 [4.7.1-5] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125172 [4.7.1-4] - Convert from Fedora to the python39 module in RHEL8 - Resol…
-
High max 8.3ELSA-2024-3304 1 CVE
Important: libreoffice security fix update (Oracle Linux 7)
[1:5.3.6.1-26.0.1] - adjust color palette to match Redwood style. - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' [1:5.3.6.1-26] - Fix CVE-2022-38745 Empty …