Lucene search

K
oraclelinuxOracleLinuxELSA-2021-4489
HistoryNov 16, 2021 - 12:00 a.m.

rpm security, bug fix, and enhancement update

2021-11-1600:00:00
linux.oracle.com
72

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

[4.14.3-19]

  • Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)
    [4.14.3-18]
  • Address important covscan issues (#1996665), vol. 2
    [4.14.3-17]
  • Address important covscan issues (#1996665)
    [4.14.3-16]
  • Add support for read-only sqlite rpmdb (#1938928)
  • Drop compat .decode() method from returned Py3 strings (#1840142)
    [4.14.3-15]
  • Add out-of-bounds checks to hdrblobInit() (#1929445)
  • Fixes CVE-2021-20266
  • Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P