oddjob security, bug fix, and enhancement update

0.34.5-3 - Support HOMEMODE from /etc/login.defs Resolves: rhbz1886362 0.34.5-2 - Add gating tests using idm:DL1 module stream and upstream tests Resolves: rhbz1682457 0.34.5-1 - Upstream release 0.34.5 - Resolves: rhbz1833289 - Rebase oddjob to 0.34.5 - Resolves: rhbz1833052 - CVE-2020-10737...

qt5-qtbase and qt5-qtwebsockets security and bug fix update

qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814739 Resolves: bz1814683 - Fix: XML entity expansion vulnerability Resolves:...

libvpx security update

1.3.0-8 - Fix for CVE-2020-0034 - Resolves: rhbz1823909 1.3.0-7 - Fix for CVE-2019-9232 and CVE-2019-9433 - Resolves: rhbz1796085, rhbz1796099 1.3.0-6 - Fix for CVE-2017-0393 - Resolves: rhbz1779498 1.3.0-4 - fix Illegal Instruction abort 1.3.0-3 - update library symbol list for 1.3.0 from Debian...

openssl security and bug fix update

1.1.1c-15 - add selftest of the RANDDRBG implementation 1.1.1c-14 - fix incorrect error return value from FIPSselftestdsa - S390x: properly restore SIGILL signal handler 1.1.1c-12 - additional fix for the edk2 build 1.1.1c-9 - disallow use of SHA-1 signatures in TLS in FIPS mode 1.1.1c-8 - fix...

openjpeg2 security update

2.3.1-2 - Fix CVE-2020-6851 1790589...

libarchive security update

3.3.2-8 - Fix CVE-2019-18408: RAR use-after-free...

openslp security update

1:2.0.0-8 - Fix a heap-based buffer overflow vulnerability leading to remote code execution, CVE-2019-5544 Resolves: 1781701...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.40.1 - USB: check usbgetextradescriptor for proper size Mathias Payer Orabug: 30045797 CVE-2018-20169 - scsi: sg: fixup infoleak when using SGGETREQUESTTABLE Hannes Reinecke Orabug: 30393902 CVE-2017-14991 - usb: misc: legousbtower: Fix NULL pointer deference Greg...

firefox security update

68.2.0-2.0.1 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 68.2.0-2 - Rebuild 68.2.0-1 - Update to 68.2.0 ESR 68.1.0-6 - Enable system nss on RHEL6 68.1.0-2 - Enable building langpacks...

pango security update

1.42.4-5 - Fixes crash in pangofcfontkeygetvariations when key is null 1.42.4-4 - Fixes bidi crash - Security fix for CVE-2019-1010238 - Resolves: 1738461 1.42.4-3 - rebuild 1.42.4-2 - rebuild...

mariadb security and bug fix update

1:5.5.64-1 - Rebase to 5.5.64 - Resolves: 1490398 - CVEs fixed: 1610986 CVE-2018-3058 CVE-2018-3063 CVE-2018-3066 CVE-2018-3081 - CVEs fixed: 1664043 CVE-2018-3282 CVE-2019-2503 - CVEs fixed: 1701686 CVE-2019-2529...

freerdp and vinagre security, bug fix, and enhancement update

freerdp 2.0.0-1.rc4 - Update to 2.0.0-rc4 1291254 vinagre 3.22.0-12 - Apply the patch - Resolves: 1569552 3.22.0-11 - Set maximum length of RDP password to 255 characters - Resolves: 1569552 3.22.0-10 - Make vinagre build with FreeRDP 2 library - Resolves: 1680229...

qemu security update

...

thunderbird security update

52.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.5.0-1 - Update to 52.5.0...

java-1.8.0-openjdk security update

1:1.8.0.141-2.b16 - Update to aarch64-jdk8u141-b16. - Revert change to remove-intree-libraries.sh following backout of 8173207 - Resolves: rhbz1466509 1:1.8.0.141-2.b15 - Revert previous commit so we can revise the security update. - Resolves: rhbz1468473 1:1.8.0.141-1.b15 - Backport '8180048:...

qemu-kvm security update

1.5.3-126.el73.6 - kvm-fix-cirrusvga-fix-OOB-read-case-qemu-Segmentation-f.patch bz1430059 - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch bz1430059 - kvm-cirrus-add-option-to-disable-blitter.patch bz1430059 - kvm-cirrus-fix-cirrusinvalidateregion.patch bz1430059 -...

gnutls security, bug fix, and enhancement update

2.12.23-21 - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes 1326389, 1326073, 1323215, 1320982, 1328205, 1321112 - Modified gnutls-serv to accept --sni-hostname 1333521 - Modified gnutls-serv to always reply with an alert message 1327656 - Removed support for DSA2 as it causes...

Unbreakable Enterprise kernel security update

2.6.39-400.294.2 - vfs: read filehandle only once in handletopath Sasha Levin Orabug: 25388709 CVE-2015-1420 - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417807 - USB: usbfs: fix potential infoleak in devio Kangjie Lu Orabug: 25462763 CVE-2016-4482 - net:...

Unbreakable Enterprise kernel security update

2.6.39-400.293.2 - x86/iopl/64: properly context-switch IOPL on Xen PV Andy Lutomirski Orabug: 25269184 CVE-2016-3157 - net: Fix use after free in the recvmmsg exit path Arnaldo Carvalho de Melo Orabug: 25298618 CVE-2016-7117...

ntp security update

4.2.6p5-10.0.1.el68.1 - add disable monitor to default ntp.conf CVE-2013-5211...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.9.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393864 CVE-2016-4470...

httpd security and bug fix update

2.4.6-40.0.1.4 - replace index.html with Oracle's index page oracleindex.html 2.4.6-40.4 - add security fix for CVE-2016-5387 2.4.6-40.3 - add 451 Unavailable For Legal Reasons response status-code 1353269 2.4.6-40.2 - modcache: treat cache as valid with changed Expires in 304 1347648...

java-1.8.0-openjdk security update

1:1.8.0.71-1.b15 - Add patch to turn off strict overflow on IndicRearrangementProcessor,2.cpp - Resolves: rhbz1295751 1:1.8.0.71-0.b15 - January 2016 security update to u71b15. - Improve verbosity and helpfulness of tarball generation script. - Update patch documentation using version originally...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.2.1 - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22277382 CVE-2015-7613 - ipc: fix msg newqueue add Guru Anbalagane Orabug: 22277382 CVE-2015-7613 3.8.13-118.1.1 - sctp: fix race on protocol/netns initialization Marcelo Ricardo Leitn...

file security and bug fix update

5.11-31 - fix 1255396 - Make the build ID output consistent with other tools 5.11-30 - fix CVE-2014-8116 - bump the acceptable ELF program headers count to 2048 5.11-29 - fix 839229 - fix detection of version of XML files 5.11-28 - fix 839229 - fix detection of version of XML files 5.11-27 - fix...

Unbreakable Enterprise kernel security update

2.6.39-400.250.7 - ipv6: Don't reduce hop limit for an interface D.S. Ljungmark Orabug: 21444791 CVE-2015-2922 - ipv4: Missing sknullsnodeinit in pingunhash. David S. Miller Orabug: 21444688 CVE-2015-3636...

qemu-kvm security, bug fix, and enhancement update

1.5.3-86.el7 - kvm-vfio-pci-Fix-interrupt-disabling.patch bz1180942 - kvm-cirrus-fix-blit-region-check.patch bz1169456 - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrusbltbuf.patch bz1169456 - Resolves: bz1169456 CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks rhel-7.1 -...

kernel security, bug fix, and enhancement update

2.6.32-504 - netdrv revert 'cxgb4: set skb-rxhash' Prarit Bhargava 1140743 - netdrv revert 'cxgb4: Use netifsetrealnumrx/txqueues' Prarit Bhargava 1140743 - infiniband revert 'cxgb4: Turn on delayed ACK' Prarit Bhargava 1140743 - infiniband revert 'cxgb4: Use ULPMODETCPDDP' Prarit Bhargava 114074...

kernel security and bug fix update

3.10.0-123.8.1 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.8.1 - scsi fnic: fix broken FIP discovery by initializing multicast address Chris Leech 1119727 1100078 - scsi libfcoe: Make fcoesysfs optional / fix fnic NULL exception Chris Leech 1119727 1100078 - fs nfs: Don't mark the data...

kernel security and bug fix update

kernel 2.6.18-371.11.1.0.1 - ocfs2: dlm: fix recovery hung Junxiao Bi orabug 13956772 - i386: fix MTRR code Zhenzhong Duan orabug 15862649 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe...

Unbreakable Enterprise kernel security update

3.8.13-26.2.3.el6uek - net: ipv4: current groupinfo should be put after using. Wang, Xiaoming Orabug: 18603523 CVE-2014-2851...

unbreakable enterprise kernel security update

2.6.39-400.214.4 - netfilter: nfconntrackdccp: fix skbheaderpointer API usages Daniel Borkmann Orabug: 18462070 CVE-2014-2523 - net: sctp: fix sctpsfdo51Dce to verify if we/peer is AUTH capable Daniel Borkmann Orabug: 18461090 CVE-2014-0101 - vhost-net: insufficient handling of error conditions i...

kernel security and bug fix update

kernel 2.6.18-371.1.2 - xen x86: check segment descriptor read result in 64-bit OUTS emulation Radim Krcmar 1012958 1012959 CVE-2013-4368 - md dm snapshot: fix data corruption Mikulas Patocka 1004734 975353 CVE-2013-4299 2.6.18-371.1.1 - crypto ansicprng fix off by one err in non-block size reque...

java-1.7.0-openjdk security update

1.7.0.25-2.3.10.3.0.1.el64 - Update DISTRONAME in specfile 1.7.0.25-2.3.10.3.el6 - removed upstreamed patch1000 MBeanFix.patch - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix - Resolves: rhbz973119 1.7.0.25-2.3.10.2.el6 - added patch1000 MBeanFix.patch to fix regressions caused by...

ruby security update

1.8.7.352-10 - escaping vulnerability about Exceptiontos / NameErrortos ruby-1.8.7-p371-CVE-2012-4481.patch - Related: rhbz915379 1.8.7.352-9 - Fix regression introduced by fix for entity expansion DOS vulnerability in REXML https://bugs.ruby-lang.org/issues/7961...

sssd security, bug fix and enhancement update

1.9.2-82 - Resolves: rhbz888614 - Failure in memberof can lead to failed database update 1.9.2-81 - Resolves: rhbz903078 - TOCTOU race conditions by copying and removing directory trees 1.9.2-80 - Resolves: rhbz903078 - Out-of-bounds read flaws in autofs and ssh services responders 1.9.2-79 -...

kernel security and bug fix update

2.6.18-308.20.1.el5 - Revert: x86 mm: randomize SHLIBBASE Dave Anderson 804953 804954 CVE-2012-1568 2.6.18-308.19.1.el5 - net be2net: Remove code that stops further access to BE NIC based on UE bits Alexander Gordeev 867896 862811 - net netpoll: fix an incorrect check for NULL pointer Alexander...

kernel security and bug fix update

2.6.32-279.11.1.el6 - net core: Fix napigrofrags vs netpoll path Amerigo Wang 857854 845347 - netdrv benet: disable BH in callers of beprocessmcc Amerigo Wang 857854 845347 - net bonding: remove IFFINNETPOLL flag Amerigo Wang 857854 845347 - mm fix contigpagedata kABI breakage and related memory...

1

kernel 2.6.18-308.16.1.0.1.el5 - kernel Initialize the local uninitialized variable stats. orabug 14051367 - fs JBD:make jbd support 512B blocks correctly for ocfs2. orabug 13477763 - x86 fix fpu context corrupt when preempt in signal context orabug 14038272 - net bonding: fix carrier detect when...

thunderbird security update

10.0.6-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 10.0.6-1 - Update to 10.0.6 ESR...

openssl security and bug fix update

1.0.0-20.5 - fix for CVE-2012-2333 - improper checking for record length in DTLS 820686 - properly initialize tkeylen in the CVE-2012-0884 fix...

Unbreakable Enterprise kernel security update

kernel-uek: 2.6.32-300.25.1.el6uek - jbd2: clear BHDelay & BHUnwritten in journalunmapbuffer Eric Sandeen Bugdb: 13871 CVE-2011-4086...

Unbreakable Enterprise kernel security and bug fix update

2.6.32-300.11.1.el6uek - fs xfs: Fix possible memory corruption in xfsreadlink Carlos Maiolino CVE-2011-4077 - scsi increase qla2xxx firmware ready time-out Joe Jin - scsi qla2xxx: Module parameter to control use of async or sync port login Joe Jin - net tg3: Fix single-vector MSI-X code Joe Jin ...

qemu-kvm security, bug fix, and enhancement update

qemu-kvm-0.12.1.2-2.209.el62.4 - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch bz772081 - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z qemu-kvm-0.12.1.2-2.209.el62.3 -...

kernel security, bug fix, and enhancement update

kernel: 2.6.18-274.7.1.0.1.el5 - fix ia64 build error due to add-support-above-32-vcpus.patchZhenzhong Duan - x86 use dynamic vcpuinfo remap to support more than 32 vcpus Zhenzhong Duan - scsi add additional scsi medium error handling John Sobecki orabug 12904887 - x86 Fix lvt0 reset when hvm boo...

firefox security and bug fix update

firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3 - Update to build2 3.6.14-2 - Update to 3.6.14 xulrunner: 1.9.2.14-3.0.1.el60 - Added xulrunner-oracle-default-prefs.js and removed the corresponding...

thunderbird security update

3.1.7-3.0.1.el6 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 3.1.7-3 - Update to 3.1.7 build3 3.1.7-2 - Update to 3.1.7 build2 3.1.7-1 - Update to 3.1.7 3.1.6-1 - Update to 3.1.6 3.1.5-1 - Update to 3.1.5...

kernel security and bug fix update

2.6.18-194.26.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug...

automake security update

1.9.6-2.3 - increase delay in self checks - add delays in aclocal7 self check http://osdir.com/ml/sysutils.automake.bugs/2006-09/msg00012.html - preserve timestamps of configure files 1.9.6-2.2 - add fix for CVE-2009-4029...

kernel security and bug fix update

2.6.18-164.9.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...