10033 matches found
kdegraphics security update
3.3.1-18.1 - Resolves: 639833 CVE-2010-3702, uninitialized Gfx::parser pointer dereference CVE-2010-3704, array indexing error in FoFiType1::parse...
ImageMagick security and bug fix update
6.2.8.0-4.el55.2 - Fix SGI image decoding 625058 6.2.8.0-4.el55.1 - Add fix for CVE-2009-1882 504304...
freetype security update
2.1.4-15.el3 - Add freetype-2.1.4-axis-name-overflow.patch Avoid overflow when dealing with names of axes - Resolves: 614014 2.1.4-14.el3 - Add freetype-2.1.4-CVE-2010-2527.patch Use precision for '%s' where appropriate to avoid buffer overflows - Resolves: 614014 2.1.4-13.el3 - Add...
seamonkey security update
1.0.9-54.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-54.el4 - Added fix for mozbz497056 1.0.9-53.el4 - Added fixes from 1.9.0.19...
kvm security and bug fix update
kvm-83-105.0.1.el54.27 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.27 - kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch bz563516 - Resolves: bz563516 KVM: Check cpl before emulating debug register access rhel-5.4.z kvm-83-105.el54.26 -...
ntp security update
4.2.2p1-9.el54.1 - fix DoS with mode 7 packets 532639, CVE-2009-3563 - compile with -fno-strict-aliasing...
expat security update
1.95.8-8.3.2 - add security fix for CVE-2009-3560 531710 1.95.8-8.3.1 - add security fix for CVE-2009-3720 531710...
poppler security and bug fix update
0.5.4-4.4.el54.11 - Fixes various flaws addressed in bugs 526637, 526893 and 526915 which were tracked in 527403. - Resolves: 527403 0.5.4-4.4.el54.10 - Add poppler-0.5.4-JBIG2-segment-reading.patch to fix reading of arithmetically encoded JBIG2 images with unknown length. - Resolves: 528147...
kvm security and bug fix update
83-105.0.1.el54.7 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.7 - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch bz524557 - Resolves: bz524557 QEMU crash during virtio-net WHQL tests for Win2008 R2 kvm-83-105.el54.6 -...
dhcp security update
3.0.1-65.1 - Correct package NVR Related: rhbz507736 3.0.1-65.EL4.1 - Fix for CVE-2009-0692 Resolves: rhbz507736...
httpd security update
2.0.46-73.0.1.ent - use oracle index page oracleindex.html - remove logos in poweredby.gif and poweredbyrh.png - add apr-configure.patch 2.0.46-73.ent - forcibly disable SCTP support in APR 2.0.46-72.ent - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 apr-util 504562...
seamonkey security update
1.0.9-43.0.1.el48 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-43.el4 - Added fixes from 1.9.0.11...
httpd security update
2.2.3-22.0.1.el53.1 - Replace index.html with oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-22.el53.1 - add security fixes for CVE-2008-1678, CVE-2009-1195 499284...
kernel security and bug fix update
2.6.9-78.0.8.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with...
ruby security update
1.8.5-5.el52.3 - CVE-2008-2376: Integer overflow in rbaryfill. 1.8.5-5.el52.1 - security fixes. 451928 - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. - CVE-2008-2725: Integer overflow in...
xorg-x11 security update
6.8.2-1.0.1.EL.33.0.4 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.33.0.4 - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows - fix 6.8.2-1.EL.33.0.3 - cve-2008-1377.patch: Record and Security Extension Input validation...
samba security update
3.0.25b-6.el46.5 - Security fix for CVE-2008-1105 - resolves: CVE-2008-1105...
seamonkey security update
1.0.9-15.el4.0.1 - Add mozilla-oracle-default-bookmarks.html, mozilla-oracle-default-prefs.js, and mozilla-home-page.patch with Oracle default URLs 1.0.9-15.el4 - Fix SMTP regression 1.0.9-14.el4 - Don't deny for native wrappers in an XBL Binding 1.0.9-13.el4 - Fix assertions in script 1.0.9-12.e...
Moderate: tk security update
8.4.7-3.EL46.1 - CVE-2008-0553 CVE-2007-5378 - GIF overflow and also GIF overflow Resolves: rhbz 432512...
Important: kernel security and bug fix update
2.6.9-67.0.1.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with rds Zach Brown orabug 5760648 2.6.9-67.0.1 -kernel ieee80211 off-by-two integer underflow...
Important: xpdf security update
2.02-11.el3 - Resolves: 356791, CVE-2007-4033 CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 xpdf various flaws 2.02-10.RHEL3 - Resolves: bz248198, CVE-2007-3387 xpdf integer overflow...
Critical: pcre security update
6.6-2.1 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660 6.6-1.2 - Resolves: 315951, CVE-2007-1659, CVE-2007-1660...
Important: poppler security update
0.5.4-4.1 - Add patch to fix CVE-2007-3387 248212...
Low: gdb security and bug fix update
6.3.0.0-1.138 - Fixed crash on cross-file resolving of opaque types BZ 135488. - 6.3.0.0-1.137 - Never lose any pending signal while attaching - resubmit them BZ 189607. - 6.3.0.0-1.136 - Bugfix segv on the source display by ^X 1 BZ 202345. - Support shared libraries 2GB on 64bit hosts - obstack...
libtiff security update
3.5.7-25.el3.4 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...
vim security update
8.0.1763-23.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-23 - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass 2:8.0.1763-22.3 - Relates:...
libreoffice security update
1:6.4.7.2-19.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. 1:6.4.7.2-19 - Fix CVE-2025-1080 Filter out more unwanted command URIs 6.4.7.2 - Remove Red Hat branding - Change vendor to RESF...
Unbreakable Enterprise kernel security update
5.4.17-2136.336.5.3.1.el8uek - mm: avoid leaving partial pfn mappings around in error case Linus Torvalds Orabug: 37311329 CVE-2024-47674 - mm: add remappfnrangenotrack Christoph Hellwig Orabug: 37311329 CVE-2024-47674 - mm/memory.c: make remappfnrange reject unaligned addr Alex Zhang Orabug:...
kernel security update
5.14.0-503.14.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
libreoffice security update
7.1.8.1-12.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Added the --with-hamcrest option to configure. 7.1.8.1 - Remove Red Hat branding - Change vendor to RESF 1:7.1.8.1-12 - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols 1:7.1.8.1-...
ansible-core bug fix, enhancement, and security update
2.16.3-2 - rebuild with python 3.12 RHEL-24141 2.16.3-1 - ansible-core 2.16.3 release RHEL-23782 - Fix CVE-2024-0690 possible information leak in tasks that ignore ANSIBLENOLOG configuration RHEL-22123 2.16.2-1 - ansible-core 2.16.2 release RHEL-19297 2.16.1-1 - ansible-core 2.16.1 release...
tigervnc security update
1.13.1-8 - Fix copy/paste error in the DeviceStateNotify Resolves: RHEL-20533 1.13.1-7 - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice Resolves: RHEL-20389 - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent...
ruby:3.1 security, bug fix, and enhancement update
ruby 3.1.4-143 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves:...
expat security update
2.5.0-1.1 - CVE-2023-52425: Fix parsing of large tokens - CVE-2024-28757: Reject direct parameter entity recursion - Resolves: RHEL-29698 - Resolves: RHEL-29695...
nodejs:18 security update
nodejs 1:18.19.1-1 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 high - Fixes: CVE-2023-46809 medium nodejs-nodemon nodejs-packaging...
postgresql-jdbc security update
42.2.28-1 - rebase to 42.2.28 - fix for CVE-2024-1597...
squid security update
7:5.5-6.0.1.8 - Rebuild with release bump 7:5.5-6.8 - Resolves: RHEL-19555 - squid: denial of service in HTTP request parsing CVE-2023-50269 7:5.5-6.7 - Resolves: RHEL-28614 - squid: Denial of Service in HTTP Chunked Decoding CVE-2024-25111 7:5.5-6.6 - Resolves: RHEL-26091 - squid: denial of...
.NET 7.0 security update
7.0.117-1.0.1 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Port revert 'Disable implicit rejection for RSA PKCS1 95217' patch - 7.0.116-1.0.1 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 Tue Jan 16 2024 Lukas Lipinsky - 7.0.115-1.0.1 - Update to .NET SDK 7.0.115 and Runtime 7.0.15...
postgresql:15 security update
pgaudit pgrepack postgres-decoderbufs postgresql 15.6-1 - update to 15.6 - Fixes CVE-2024-0985...
firefox security update
115.7.0.1.0.1 - Update to 115.7.0 build 1...
skopeo security update
2:1.13.3-3 - Rebuild with golang 1.20.10 - Related: Jira:RHEL-2786 2:1.13.3-2 - Rebuild with golang 1.21.3 - Related: Jira:RHEL-2786...
python3.11 security update
3.11.5-1 - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3047, RHEL-3267 3.11.4-4 - Add the importallmodulespy311.py file for the python3.11-rpm-macros subpackage Resolves: rhbz2207631 3.11.4-3 - Fix symlink handling in the fix for CVE-2023-24329 Resolves:...
curl security update
7.76.1-26 - unify the upload/method handling CVE-2023-28322 - fix host name wildcard checking CVE-2023-28321 7.76.1-25 - adapt the fix of CVE-2023-27535 for RHEL 9 curl 7.76.1-24 - fix SSH connection too eager reuse still CVE-2023-27538 - fix GSS delegation too eager connection re-use...
dnsmasq security update
2.76-17.0.1.3 - Prevent use after free in dhcp6norelay CVE-2022-0934 Orabug: 34775167...
kvm_utils2 security update
hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt 7.10.0-3.el8 - virpci: Resolve leak in virPCIVirtualFunctionList cleanup Tim Shearer Orabug: 35395469 CVE-2023-2700 libvirt-dbus libvirt-python 7.10.0-3.el8 - Update version number to match libvirt 7.10.0-3 Karl Heubaum nbdkit...
Unbreakable Enterprise kernel-container security update
5.4.17-2136.323.8.el8 - vhost-scsi: Fix alignment handling with windows Mike Christie Orabug: 35769318 - Revert 'vhost/scsi: support non zerocopy iovecs' Rajan Shanmugavelu Orabug: 35769318 5.4.17-2136.323.7.el8 - x86: change default to specstorebypassdisable=prctl spectrev2user=prctl Andrea...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.382.b05-2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.382.b05-2 - CVE-2023-22045 and CVE-2023-22049 fixed - Release bump for Oracle rebuild 1:1.8.0.382.b05-1 - Update to shenandoah-jdk8u372-b05 GA - Update release notes for shenandoah-8u372-b05. - This tarball is embargoed...
kernel security, bug fix, and enhancement update
4.18.0-477.15.18.OL8 - net: tls: fix possible race condition between dotlsgetsockoptconf and dotlssetsockoptconf Hangyu Hua CVE-2023-28466...
buildah security update
runc 1:1.1.4-1.0.1 - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589...