Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.2.4 - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 22373442 CVE-2015-7872 3.8.13-118.2.3 - dcache: Handle escaped paths in prependpath Eric W. Biederman Orabug: 22373283 - vfs: Test for and handle paths that are unreachable from their mntroo...

Unbreakable Enterprise kernel security update

kernel-uek 2.6.32-400.37.15uek - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22250043 CVE-2015-7613 - Initialize msg/shm IPC objects before doing ipcaddid Linus Torvalds Orabug: 22250043 CVE-2015-7613 - crypto: add missing crypto module aliases Mathias...

rpcbind security update

0.2.0-11.el67 - Fix memory corruption in PMAPCALLIT code bz 1283638...

nss security update

3.19.1-8.0.1 - Added nss-vendor.patch to change vendor 3.19.1-8 - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol - Resolves: Bug 1289881...

libldb security update

1.1.13-3.1 - Resolves: rhbz1290712 - CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server rhel-7.2.z - Remove the patch from the previous commit, it doesn't fix a remotely eploitable issue. Add patches from upstream 11636 instead...

samba4 security update

4.0.0-67.rc4 - resolves: 1290708 - CVE-2015-7540 - related: 1290708 - CVE-2015-5299 - related: 1290708 - CVE-2015-5296 - related: 1290708 - CVE-2015-5252 - related: 1290708 - CVE-2015-5330...

samba security update

4.2.3-11 - resolves: 1290710 - CVE-2015-3223 Remote DoS in Samba AD LDAP server - CVE-2015-5299 Missing access control check in shadow copy code - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5296 Samba client requesting encryption vulnerable to downgrade attack...

gnutls security update

3.3.8-14 - Prevent downgrade attack to RSA-MD5 in server key exchange. 3.3.8-13 - Corrected reseed and respect of maxnumberofbitsperrequest in FIPS140-2 mode. Also enhanced the initial tests. 1228199...

samba security update

0:3.6.23-24.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-24 - related: 1290706 - Update patch for CVE-2015-5330 3.6.23-22 - resolves: 1290706 - CVE-2015-5299 - related: 1290706 - CVE-2015-5296 - related: 1290706 - CVE-2015-5252 - related: 129070...

openssl security update

1.0.1e-42.2 - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2...

thunderbird security update

38.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.5.0-1 - Update to 38.5.0...

qemu-kvm security update

0.12.1.2-2.479.el67.3 - kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch bz1287950 - kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch bz1287950 - Resolves: bz1287950 CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws rhel-6.7.z...

jakarta-commons-collections security update

0:3.2-2jpp.4 - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501...

bind97 security update

32:9.7.0-21.P2.4 - Fix CVE-2015-8000 32:9.7.0-21.P2.3 - Fix CVE-2015-5722 32:9.7.0-21.P2.2 - Fix CVE-2015-5477 32:9.7.0-21.P2.1 - Fix CVE-2014-8500 1171972...

bind security update

32:9.8.2-0.44.rc1.5 - Fix CVE-2015-8000...

bind security update

30:9.3.6-25.P1.5 - Fix CVE-2015-8000 30:9.3.6-25.P1.4 - Fix CVE-2015-5722 30:9.3.6-25.P1.3 - Fix CVE-2015-5477 30:9.3.6-25.P1.2 - Remove files backup after patching Related: 1171971 30:9.3.6-25.P1.1 - Fix CVE-2014-8500 1171971...

firefox security update

38.5.0-2.0.1 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat files 38.5.0-2 - Update to 38.5.0 ESR...

grub2 security and bug fix update

2.02-0.33.0.1 - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms bug 19231481 - update Oracle Linux certificates Alexey Petrenko - Put 'with' in menuentry instead of 'using' bug 18504756 - Use different titles for UEK and RHCK kernel...

kernel security and bug fix update

2.6.32-573.12.1 - Revert: netdrv igb: add support for 1512 PHY Stefan Assmann 1278275 1238551 2.6.32-573.11.1 - kvm svm: unconditionally intercept DB Paolo Bonzini 1279467 1279468 CVE-2015-8104 - x86 virt: guest to host DoS by triggering an infinite loop in microcode Paolo Bonzini 1277557 1277559...

libreoffice security update

4.2.8.2-11.0.1.1 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile [email protected] - Build with --with-vendor='Oracle America, Inc.' [email protected] 1:4.2.8.2-11.1 - Resolves: rhbz1285818 various flaws - CVE-2015-4551 Arbitrary file...

openssl security update

0.9.8e-37.0.1 - To disable SSLv2 client connections create the file /etc/sysconfig/openssl-ssl-client-kill-sslv2 John Haxby orabug 21673934 - Backport openssl 08-Jan-2015 security fixes John Haxby orabug 20409893 - fix CVE-2014-3570 - Bignum squaring may produce incorrect results - fix...

openssl security update

1.0.1e-51.1 - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter - fix CVE-2015-3195 - X509ATTRIBUTE memory leak - fix CVE-2015-3196 - race condition when handling PSK identity hint 1.0.1e-51 - fix the CVE-2015-1791 fix broken server side renegotiation 1.0.1e-50 - improved fi...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.2.2 - KVM: svm: unconditionally intercept DB Paolo Bonzini Orabug: 22333698 CVE-2015-8104 - KVM: x86: work around infinite loop in microcode when AC is delivered Eric Northup Orabug: 22333689 CVE-2015-5307 CVE-2015-5307 - KVM: x86: Defining missing x86 vectors Nadav Amit...

libpng security update

2:1.5.13-7 - Security fix for CVE-2015-8126 - Changing pngptr to infoptf based on upstream - Related: 1283576 2:1.5.13-6 - Security fix for CVE-2015-8126 - Resolves: 1283576...

libpng security update

2:1.2.49-2 - Security fix for CVE-2015-7981 and CVE-2015-8126 - Resolves: 1283572...

libpng12 security update

1.2.50-7 - Security fix for CVE-2015-7981 and CVE-2015-8126 - Resolves: 1283576...

git security update

1.8.3.1-6 - fix arbitrary code execution via crafted URLs Resolves: 1274737...

kernel security and bug fix update

3.10.0-327.3.1.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.3.1 - rebuild 3.10.0-327.2.1 - netdrv macvtap: unbreak receiving of gro skb with frag list Jason Wang 1279794 1273737 - net ipv6: drop frames with attached skb-sk in forwarding Hannes Frederic Sowa 1281701 1243966 - net ipv...

libxml2 security update

2.9.1-6.0.1.el71.2 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.9.1-6.2 - Fix a series of CVEs rhbz1286496 - CVE-2015-7941 Stop parsing on entities boundaries errors - CVE-2015-7941 Cleanup conditional section error handling - CVE-2015-831...

libxml2 security update

2.7.6-20.0.1 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-20.1 - Fix a series of CVEs rhbz1286495 - CVE-2015-7941 Cleanup conditional section error handling - CVE-2015-8317 Fail parsing early on if encoding conversion failed -...

apache-commons-collections security update

3.2.1-22 - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501...

jakarta-commons-collections security update

0:3.2.1-3.5 - Fix Java object de-serialization vulnerability - Resolves: CVE-2015-7501...

thunderbird security update

38.4.0-1.0.1.el67 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 38.4.0-1 - Update to 38.4.0...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.2.1 - ipc/sem.c: fully initialize semarray before making it visible Manfred Spraul Orabug: 22277382 CVE-2015-7613 - ipc: fix msg newqueue add Guru Anbalagane Orabug: 22277382 CVE-2015-7613 3.8.13-118.1.1 - sctp: fix race on protocol/netns initialization Marcelo Ricardo Leitn...

abrt and libreport security update

abrt 2.1.11-35.0.1 - Drop libreport-rhel and libreport-plugin-rhtsupport requires 2.1.11-35 - make /var/spool/abrt owned by root - remove 'r' from /var/spool/abrt for other users - abrt-action-install-debug-info: use secure temporary directory - stop saving abrt's core files to /var/spool/abrt if...

glibc security update

2.17-106.0.1.1 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. 2.17-106.1 - Rebuild with corrected release. 2.17-106 - Add fix for CVE-2015-5277 1275920...

tigervnc security, bug fix, and enhancement update

1.3.1-3 - Do not mention that display number is required in the file name Resolves: bz1195266 1.3.1-2 - Resolves: bz1248422 CVE-2014-8240 CVE-2014-8241 tigervnc: various flaws 1.3.1-1 - Drop unecessary patches - Re-base to 1.3.1 bug 1199453 - Re-build against re-based xserver bug 1194898 - Check...

glibc security, bug fix, and enhancement update

2.17-105.0.1 - Remove strstr and strcasestr implementations using sse4.2 instructions. - Upstream commits 584b18eb4df61ccd447db2dfe8c8a7901f8c8598 and 1818483b15d22016b0eae41d37ee91cc87b37510 backported. 2.17-105 - Fix up test case for initial-exec fix 1248208. 2.17-104 - Mark all TLS variables i...

realmd security, bug fix, and enhancement update

0.16.1-5 - Revert 0.16.1-4 - Use samba by default - Resolves: rhbz1271618 0.16.1-4 - Fix regressions in 0.16.x releases - Resolves: rhbz1258745 - Resolves: rhbz1258488 0.16.1-3 - Fix regression accepting DNS domain names - Resolves: rhbz1243771 0.16.1-2 - Fix discarded patch: ipa-packages.patch...

kernel security, bug fix, and enhancement update

3.10.0-327.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327 - mm free compound page with correct order Andrea Arcangeli 1274867 - netdrv revert 'ixgbe: Refactor busy poll socket code to address multiple issues' John Greene 1261275 - powerpc dma: dmasetcoherentmask should not be GPL only...

NetworkManager security, bug fix, and enhancement update

ModemManager 1.1.0-8.git20130913 - rfcomm: don't open the ttys until NetworkManager connects them rh 1251954 1.1.0-7.git20130913 - iface-modem: fix MODEMSTATEISINTERMEDIATE macro rh 1200958 NetworkManager 1.0.6-27.0.1 - fix build error on i386 1:1.0.6-27 build: update vala-tools build requirement...

sssd security, bug fix, and enhancement update

1.13.0-40 - Resolves: rhbz1270827 - local overrides: don't contact server with overridden name/id 1.13.0-39 - Resolves: rhbz1267837 - sssdbe crashed in ipasrvadacctlookupstep 1.13.0-38 - Resolves: rhbz1267176 - Memory leak / possible DoS with krb auth. 1.13.0-37 - Resolves: rhbz1267836 - PAM...

curl security, bug fix, and enhancement update

7.29.0-25.0.1 - disable check to make build pass 7.29.0-25 - fix spurious failure of test 1500 on ppc64le 1218272 7.29.0-24 - use the default min/max TLS version provided by NSS 1170339 - improve handling of timeouts and blocking direction to speed up FTP 1218272 7.29.0-23 - require credentials t...

rubygem-bundler and rubygem-thor security, bug fix, and enhancement update

rubygem-bundler 1.7.8-3 - Enforce higher Thor version, which is required by Bundler. Related: rhbz1194243 1.7.8-2 - Update to Bundler 1.7.8. Resolves: rhbz1194243 - Use symlinks for vendored libraries. Resolves: rhbz1163076 1.3.1-3 - Mass rebuild 2013-12-27 1.3.1-2 - Always include Patch100 in...

cpio security and bug fix update

2.11-24 - fix for CVE-2014-9112 2.11-23 - better check for read error rhbz1138148 - fix ru translation rhbz1075513...

openldap security, bug fix, and enhancement update

2.4.40-8 - NSS does not support string ordering 1231522 - implement and correct order of parsing attributes 1231522 - add multimask and multistrength to correctly handle sets of attributes 1231522 - add new cipher suites and correct AES-GCM attributes 1245279 - correct DEFAULT ciphers handling to...

libreport security update

2.0.9-25.0.1 - Add Fix-for-bug-21110293.patch bug 21110293 - Add oracle-enterprise.patch and oracle-enterprise-po.patch - Remove libreport-plugin-rhtsupport pkg 2.0.9-25 - save all files changed by the reporter in the reporting GUI - Fixes CVE-2015-5302 - Resolves: 1282143...

netcf security, bug fix, and enhancement update

0.2.8-1 - Rebase to netcf-0.2.8 - resolve rhbz1165965 - CVE-2014-8119 - resolve rhbz1159000 - support multiple IPv4 addresses in interface config redhat driver - resolve rhbz1113983 - allow static IPv4 config simultaneous with DHCPv4 redhat driver - resolve rhbz1170941 - remove extra quotes from...

grep security and bug fix update

2.20-2 - Fixed invalid UTF-8 byte sequence error in PCRE mode by pcre-backported-fixes patch Resolves: rhbz1217080 - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 - Fixed \w and \W behaviour in multibyte locales Resolves: rhbz1159012 - Documented --fixed-regexp option Resolves:...

net-snmp security and bug fix update

1:5.7.2-24 - Fixed lmSensorsTable not reporting sensors with duplicate names 1252053 - Fixed close overhead of extend commands 1252048 - Fixed out-of-bounds write in python code 1252034 1:5.7.2-23 - Fixed parsing of invalid variables in incoming packets 1248414 - Fixed...