Update vuln-rocky 2026-11-12T01:06:59Z
This commit is contained in:
Vulnerability Bot
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:0975","synopsis":"Important: container-tools:rhel8 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc binary and consequently run arbitrary commands on the container host system. (CVE-2019-5736)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [stream Rocky Linux8] rebase container-selinux to 2.94 (BZ#1693675)\n\n* [stream Rocky Linux8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed (BZ#1695669)\n\n* [stream Rocky Linux8] don't allow a container to connect to random services (BZ#1695689)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1664908","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1664908","description":""},{"ticket":"1693675","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1693675","description":"* [stream rhel8] rebase container-selinux to 2.94"},{"ticket":"1695669","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695669","description":"* [stream rhel8] unable to mount disk at `/var/lib/containers` via `systemd` unit when `container-selinux` policy installed"},{"ticket":"1695689","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1695689","description":"* [stream rhel8] don't allow a container to connect to random services"}],"cves":[{"name":"CVE-2019-5736","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5736","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss3BaseScore":"7.7","cwe":"CWE-672"}],"references":[],"publishedAt":"2019-05-07T03:39:11Z","rpms":{"Rocky Linux 8":{"nvras":["oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:0975","url":"https://access.redhat.com/errata/RHSA-2019:0975","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:0984","synopsis":"Moderate: python36:3.6 security update","severity":"SEVERITY_MODERATE","topic":"An update is available for python-docutils, python-pygments, python-PyMySQL, python-docs, python36, python-nose.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSQLAlchemy is an Object Relational Mapper (ORM) that provides a flexible, high-level interface to SQL databases.\n\nSecurity Fix(es):\n\n* python-sqlalchemy: SQL Injection when the order_by parameter can be controlled (CVE-2019-7164)\n\n* python-sqlalchemy: SQL Injection when the group_by parameter can be controlled (CVE-2019-7548)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1674059","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674059","description":""},{"ticket":"1678520","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1678520","description":""}],"cves":[{"name":"CVE-2019-7164","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"UNKNOWN"},{"name":"CVE-2019-7548","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-89"}],"references":[],"publishedAt":"2019-05-07T03:40:33Z","rpms":{"Rocky Linux 8":{"nvras":["python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.src.rpm","python36-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-debug-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-debug-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-devel-0:3.6.8-2.module+el8.3.0+120+426d8baf.aarch64.rpm","python36-devel-0:3.6.8-2.module+el8.3.0+120+426d8baf.x86_64.rpm","python36-rpm-macros-0:3.6.8-2.module+el8.3.0+120+426d8baf.noarch.rpm","python3-docs-0:3.6.7-2.module+el8.4.0+597+ddf0ddea.noarch.rpm","python3-docs-0:3.6.7-2.module+el8.3.0+120+426d8baf.noarch.rpm","python3-docutils-0:0.14-12.module+el8.4.0+597+ddf0ddea.noarch.rpm","python3-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.noarch.rpm","python3-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python3-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.noarch.rpm","python3-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.noarch.rpm","python-docs-0:3.6.7-2.module+el8.4.0+597+ddf0ddea.src.rpm","python-docs-0:3.6.7-2.module+el8.3.0+120+426d8baf.src.rpm","python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm","python-docutils-0:0.14-12.module+el8.3.0+120+426d8baf.src.rpm","python-nose-0:1.3.7-30.module+el8.3.0+120+426d8baf.src.rpm","python-nose-docs-0:1.3.7-30.module+el8.3.0+120+426d8baf.noarch.rpm","python-pygments-0:2.2.0-20.module+el8.3.0+120+426d8baf.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-PyMySQL-0:0.8.0-10.module+el8.3.0+120+426d8baf.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:0984","url":"https://access.redhat.com/errata/RHSA-2019:0984","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:1152","synopsis":"Important: python-jinja2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python-jinja2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. \n\nSecurity Fix(es):\n\n* python-jinja2: str.format_map allows sandbox escape (CVE-2019-10906)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1698839","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1698839","description":""}],"cves":[{"name":"CVE-2019-10906","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10906","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3BaseScore":"9.0","cwe":"CWE-138"}],"references":[],"publishedAt":"2019-05-13T10:43:53Z","rpms":{"Rocky Linux 8":{"nvras":["python3-jinja2-0:2.10.1-2.el8_0.noarch.rpm","python-jinja2-0:2.10.1-2.el8_0.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:1152","url":"https://access.redhat.com/errata/RHSA-2019:1152","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2002","synopsis":"Important: redis:5 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for redis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Heap buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10192)\n\n* redis: Stack buffer overflow in HyperLogLog triggered by malicious client (CVE-2019-10193)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1723918","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723918","description":""},{"ticket":"1727668","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727668","description":""}],"cves":[{"name":"CVE-2019-10192","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10192","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"CWE-122"},{"name":"CVE-2019-10193","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10193","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.2","cwe":"CWE-121"}],"references":[],"publishedAt":"2019-08-07T10:40:54Z","rpms":{"Rocky Linux 8":{"nvras":["redis-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-0:5.0.3-2.module+el8.4.0+393+5af13779.src.rpm","redis-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-debuginfo-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-debuginfo-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-debugsource-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-debugsource-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-devel-0:5.0.3-2.module+el8.4.0+393+5af13779.aarch64.rpm","redis-devel-0:5.0.3-2.module+el8.4.0+393+5af13779.x86_64.rpm","redis-doc-0:5.0.3-2.module+el8.4.0+393+5af13779.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2002","url":"https://access.redhat.com/errata/RHSA-2019:2002","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2512","synopsis":"Important: subversion:1.10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for utf8proc, libserf.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Subversion (SVN) is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes.\n\nSecurity Fix(es):\n\n* subversion: NULL pointer dereference in svnserve leading to an unauthenticated remote DoS (CVE-2019-0203)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733073","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733073","description":""}],"cves":[{"name":"CVE-2019-0203","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0203","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-476"}],"references":[],"publishedAt":"2019-08-15T17:34:10Z","rpms":{"Rocky Linux 8":{"nvras":["libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.src.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.src.rpm","libserf-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debuginfo-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.aarch64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.7.0+1065+42200b2e.x86_64.rpm","libserf-debugsource-0:1.3.9-9.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.src.rpm","utf8proc-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debuginfo-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.aarch64.rpm","utf8proc-debugsource-0:2.1.1-5.module+el8.4.0+407+38733e5a.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2512","url":"https://access.redhat.com/errata/RHSA-2019:2512","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2593","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: heap-based buffer overflow in HttpHeader::getAuth (CVE-2019-12527)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730533","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730533","description":""}],"cves":[{"name":"CVE-2019-12527","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12527","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.5","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-09-02T10:22:04Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2593","url":"https://access.redhat.com/errata/RHSA-2019:2593","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2722","synopsis":"Low: libwmf security update","severity":"SEVERITY_LOW","topic":"An update is available for libwmf.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.\n\nSecurity Fix(es):\n\n* gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1671390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","description":""}],"cves":[{"name":"CVE-2019-6978","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6978","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-09-10T15:32:59Z","rpms":{"Rocky Linux 8":{"nvras":["libwmf-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.i686.rpm","libwmf-debuginfo-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-lite-0:0.2.9-8.el8_0.i686.rpm","libwmf-0:0.2.9-8.el8_0.src.rpm","libwmf-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-0:0.2.9-8.el8_0.i686.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.i686.rpm","libwmf-debugsource-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-devel-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-devel-0:0.2.9-8.el8_0.i686.rpm","libwmf-devel-0:0.2.9-8.el8_0.x86_64.rpm","libwmf-lite-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.aarch64.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.i686.rpm","libwmf-lite-debuginfo-0:0.2.9-8.el8_0.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2722","url":"https://access.redhat.com/errata/RHSA-2019:2722","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:2799","synopsis":"Important: nginx:1.14 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nginx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735741","description":""},{"ticket":"1741860","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741860","description":""},{"ticket":"1741864","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1741864","description":""}],"cves":[{"name":"CVE-2019-9511","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9511","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9513","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9513","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9516","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9516","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-09-17T08:45:10Z","rpms":{"Rocky Linux 8":{"nvras":["nginx-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-1:1.14.1-9.module+el8.4.0+542+81547229.src.rpm","nginx-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-all-modules-1:1.14.1-9.module+el8.4.0+542+81547229.noarch.rpm","nginx-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-debugsource-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-debugsource-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-filesystem-1:1.14.1-9.module+el8.4.0+542+81547229.noarch.rpm","nginx-mod-http-image-filter-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-image-filter-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-perl-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-perl-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-mail-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-mail-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-stream-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-stream-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm","nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.aarch64.rpm","nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.4.0+542+81547229.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:2799","url":"https://access.redhat.com/errata/RHSA-2019:2799","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3476","synopsis":"Moderate: squid:4 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1679526","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1679526","description":""},{"ticket":"1683527","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1683527","description":""},{"ticket":"1703117","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1703117","description":""},{"ticket":"1717046","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1717046","description":""},{"ticket":"1727744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727744","description":""}],"cves":[{"name":"CVE-2019-13345","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13345","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-79"}],"references":[],"publishedAt":"2019-11-05T17:50:00Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3476","url":"https://access.redhat.com/errata/RHSA-2019:3476","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3494","synopsis":"Important: container-tools:1.0 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for fuse-overlayfs, oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)\n\n* containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1700877","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1700877","description":""},{"ticket":"1732508","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732508","description":""},{"ticket":"1734745","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1734745","description":""}],"cves":[{"name":"CVE-2019-10214","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10214","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.4","cwe":"CWE-522"},{"name":"CVE-2019-14378","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14378","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","cvss3BaseScore":"7.0","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-11-05T17:52:13Z","rpms":{"Rocky Linux 8":{"nvras":["fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.src.rpm","fuse-overlayfs-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debuginfo-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.aarch64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.5.0+681+c9a1951f.x86_64.rpm","fuse-overlayfs-debugsource-0:0.3-5.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3494","url":"https://access.redhat.com/errata/RHSA-2019:3494","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3643","synopsis":"Low: gettext security update","severity":"SEVERITY_LOW","topic":"An update is available for gettext.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The gettext packages provide a documentation for producing multi-lingual messages in programs, set of conventions about how programs should be written, a runtime library, and a directory and file naming organization for the message catalogs.\n\nSecurity Fix(es):\n\n* gettext: double free in default_add_message in read-catalog.c (CVE-2018-18751)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1647043","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1647043","description":""}],"cves":[{"name":"CVE-2018-18751","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18751","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.0","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-11-05T18:10:22Z","rpms":{"Rocky Linux 8":{"nvras":["gettext-0:0.19.8.1-17.el8.aarch64.rpm","gettext-0:0.19.8.1-17.el8.src.rpm","gettext-0:0.19.8.1-17.el8.x86_64.rpm","gettext-common-devel-0:0.19.8.1-17.el8.noarch.rpm","gettext-devel-0:0.19.8.1-17.el8.i686.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm","gettext-debugsource-0:0.19.8.1-17.el8.aarch64.rpm","gettext-debugsource-0:0.19.8.1-17.el8.i686.rpm","gettext-debugsource-0:0.19.8.1-17.el8.x86_64.rpm","gettext-devel-0:0.19.8.1-17.el8.aarch64.rpm","gettext-devel-0:0.19.8.1-17.el8.x86_64.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-devel-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm","gettext-libs-0:0.19.8.1-17.el8.aarch64.rpm","gettext-libs-0:0.19.8.1-17.el8.i686.rpm","gettext-libs-0:0.19.8.1-17.el8.x86_64.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.aarch64.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.i686.rpm","gettext-libs-debuginfo-0:0.19.8.1-17.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3643","url":"https://access.redhat.com/errata/RHSA-2019:3643","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3673","synopsis":"Low: lldpad security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for lldpad.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The lldpad packages provide the Linux user space daemon and configuration tool for Intel's Link Layer Discovery Protocol (LLDP) Agent with Enhanced Ethernet support.\n\nSecurity Fix(es):\n\n* lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1614896","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1614896","description":""},{"ticket":"1727326","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727326","description":""}],"cves":[{"name":"CVE-2018-10932","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10932","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss3BaseScore":"4.3","cwe":"CWE-117"}],"references":[],"publishedAt":"2019-11-05T18:14:00Z","rpms":{"Rocky Linux 8":{"nvras":["lldpad-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-0:1.0.1-13.git036e314.el8.src.rpm","lldpad-0:1.0.1-13.git036e314.el8.x86_64.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-debuginfo-0:1.0.1-13.git036e314.el8.x86_64.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.aarch64.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.i686.rpm","lldpad-debugsource-0:1.0.1-13.git036e314.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3673","url":"https://access.redhat.com/errata/RHSA-2019:3673","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3703","synopsis":"Low: libvorbis security update","severity":"SEVERITY_LOW","topic":"An update is available for libvorbis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.\n\nSecurity Fix(es):\n\n* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)\n\n* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1574193","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1574193","description":""},{"ticket":"1574194","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1574194","description":""}],"cves":[{"name":"CVE-2018-10392","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10392","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-122"},{"name":"CVE-2018-10393","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.3","cwe":"CWE-122"}],"references":[],"publishedAt":"2019-11-05T20:52:55Z","rpms":{"Rocky Linux 8":{"nvras":["libvorbis-1:1.3.6-2.el8.aarch64.rpm","libvorbis-1:1.3.6-2.el8.i686.rpm","libvorbis-1:1.3.6-2.el8.src.rpm","libvorbis-1:1.3.6-2.el8.x86_64.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.aarch64.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.i686.rpm","libvorbis-debuginfo-1:1.3.6-2.el8.x86_64.rpm","libvorbis-debugsource-1:1.3.6-2.el8.aarch64.rpm","libvorbis-debugsource-1:1.3.6-2.el8.i686.rpm","libvorbis-debugsource-1:1.3.6-2.el8.x86_64.rpm","libvorbis-devel-1:1.3.6-2.el8.aarch64.rpm","libvorbis-devel-1:1.3.6-2.el8.i686.rpm","libvorbis-devel-1:1.3.6-2.el8.x86_64.rpm","libvorbis-devel-docs-1:1.3.6-2.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3703","url":"https://access.redhat.com/errata/RHSA-2019:3703","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3704","synopsis":"Moderate: numpy security update","severity":"SEVERITY_MODERATE","topic":"An update is available for numpy.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The numpy packages provide NumPY. NumPY is an extension to the Python programming language, which adds support for large, multi-dimensional arrays and matrices, and a library of mathematical functions that operate on such arrays.\n\nSecurity Fix(es):\n\n* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1667950","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1667950","description":""},{"ticket":"1687873","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687873","description":""}],"cves":[{"name":"CVE-2019-6446","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6446","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-358->CWE-20"}],"references":[],"publishedAt":"2019-11-05T20:53:10Z","rpms":{"Rocky Linux 8":{"nvras":["numpy-1:1.14.3-9.el8.src.rpm","python3-numpy-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-1:1.14.3-9.el8.x86_64.rpm","python3-numpy-debuginfo-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-debuginfo-1:1.14.3-9.el8.x86_64.rpm","python3-numpy-f2py-1:1.14.3-9.el8.aarch64.rpm","python3-numpy-f2py-1:1.14.3-9.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3704","url":"https://access.redhat.com/errata/RHSA-2019:3704","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3705","synopsis":"Moderate: libjpeg-turbo security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libjpeg-turbo.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.\n\nSecurity Fix(es):\n\n* libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1687424","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1687424","description":""},{"ticket":"1688397","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1688397","description":""}],"cves":[{"name":"CVE-2018-14498","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14498","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"4.4","cwe":"CWE-125"}],"references":[],"publishedAt":"2019-11-05T20:53:12Z","rpms":{"Rocky Linux 8":{"nvras":["libjpeg-turbo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-0:1.5.3-10.el8.src.rpm","libjpeg-turbo-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-debuginfo-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-debugsource-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.i686.rpm","libjpeg-turbo-devel-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-utils-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-utils-0:1.5.3-10.el8.x86_64.rpm","libjpeg-turbo-utils-debuginfo-0:1.5.3-10.el8.aarch64.rpm","libjpeg-turbo-utils-debuginfo-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-0:1.5.3-10.el8.i686.rpm","turbojpeg-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.i686.rpm","turbojpeg-debuginfo-0:1.5.3-10.el8.x86_64.rpm","turbojpeg-devel-0:1.5.3-10.el8.aarch64.rpm","turbojpeg-devel-0:1.5.3-10.el8.i686.rpm","turbojpeg-devel-0:1.5.3-10.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3705","url":"https://access.redhat.com/errata/RHSA-2019:3705","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3706","synopsis":"Moderate: lua security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for lua.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.\n\nSecurity Fix(es):\n\n* lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1670019","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1670019","description":""}],"cves":[{"name":"CVE-2019-6706","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6706","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-416"}],"references":[],"publishedAt":"2019-11-05T20:53:20Z","rpms":{"Rocky Linux 8":{"nvras":["lua-0:5.3.4-11.el8.aarch64.rpm","lua-0:5.3.4-11.el8.i686.rpm","lua-0:5.3.4-11.el8.src.rpm","lua-0:5.3.4-11.el8.x86_64.rpm","lua-debuginfo-0:5.3.4-11.el8.aarch64.rpm","lua-debuginfo-0:5.3.4-11.el8.i686.rpm","lua-debuginfo-0:5.3.4-11.el8.x86_64.rpm","lua-debugsource-0:5.3.4-11.el8.aarch64.rpm","lua-debugsource-0:5.3.4-11.el8.i686.rpm","lua-debugsource-0:5.3.4-11.el8.x86_64.rpm","lua-devel-0:5.3.4-11.el8.aarch64.rpm","lua-devel-0:5.3.4-11.el8.i686.rpm","lua-devel-0:5.3.4-11.el8.x86_64.rpm","lua-libs-0:5.3.4-11.el8.aarch64.rpm","lua-libs-0:5.3.4-11.el8.i686.rpm","lua-libs-0:5.3.4-11.el8.x86_64.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.aarch64.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.i686.rpm","lua-libs-debuginfo-0:5.3.4-11.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3706","url":"https://access.redhat.com/errata/RHSA-2019:3706","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3735","synopsis":"Critical: php:7.2 security update","severity":"SEVERITY_CRITICAL","topic":"An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nSecurity Fix(es):\n\n* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1766378","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","description":""}],"cves":[{"name":"CVE-2019-11043","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11043","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-20->CWE-787"}],"references":[],"publishedAt":"2019-11-06T13:15:34Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.12-2.module+el8.4.0+413+c9202dda.noarch.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.src.rpm","libzip-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-debugsource-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-devel-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.aarch64.rpm","libzip-tools-debuginfo-0:1.5.1-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.noarch.rpm","php-pear-1:1.10.5-9.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-apcu-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-apcu-devel-0:5.1.12-2.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.src.rpm","php-pecl-zip-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.3-1.module+el8.4.0+413+c9202dda.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3735","url":"https://access.redhat.com/errata/RHSA-2019:3735","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:3736","synopsis":"Critical: php:7.3 security update","severity":"SEVERITY_CRITICAL","topic":"An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.\n\nSecurity Fix(es):\n\n* php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1766378","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1766378","description":""}],"cves":[{"name":"CVE-2019-11043","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11043","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-20->CWE-787"}],"references":[],"publishedAt":"2019-11-06T13:15:46Z","rpms":{"Rocky Linux 8":{"nvras":["apcu-panel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.src.rpm","libzip-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-debugsource-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-devel-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","libzip-tools-debuginfo-0:1.5.2-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.noarch.rpm","php-pear-1:1.10.9-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-apcu-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debuginfo-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-debugsource-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-apcu-devel-0:5.1.17-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.src.rpm","php-pecl-zip-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debuginfo-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.aarch64.rpm","php-pecl-zip-debugsource-0:1.15.4-1.module+el8.4.0+414+2e7afcdd.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:3736","url":"https://access.redhat.com/errata/RHSA-2019:3736","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2019:4269","synopsis":"Important: container-tools:rhel8 security and bug fix update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for oci-umount, oci-systemd-hook.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc (CVE-2019-16884)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* avc: podman run --security-opt label=type:svirt_qemu_net_t (BZ#1764318)\n\n* backport json-file logging support to 1.4.2 (BZ#1770176)\n\n* Selinux won't allow SCTP inter pod communication (BZ#1774382)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735645","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735645","description":""},{"ticket":"1735744","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735744","description":""},{"ticket":"1757214","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1757214","description":""},{"ticket":"1764318","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764318","description":"* avc: podman run --security-opt label=type:svirt_qemu_net_t"},{"ticket":"1770176","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1770176","description":"* backport json-file logging support to 1.4.2"},{"ticket":"1774382","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1774382","description":"* Selinux won't allow SCTP inter pod communication"}],"cves":[{"name":"CVE-2019-16884","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16884","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss3BaseScore":"6.5","cwe":"CWE-41"},{"name":"CVE-2019-18466","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18466","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss3BaseScore":"2.5","cwe":"CWE-59"},{"name":"CVE-2019-9512","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9512","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-9514","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9514","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"}],"references":[],"publishedAt":"2019-12-17T09:19:28Z","rpms":{"Rocky Linux 8":{"nvras":["oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.src.rpm","oci-systemd-hook-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debuginfo-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-systemd-hook-debugsource-1:0.1.15-2.git2d0b8a3.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.src.rpm","oci-umount-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debuginfo-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.aarch64.rpm","oci-umount-debugsource-2:2.3.4-2.git87f9237.module+el8.4.0+557+48ba8b2f.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2019:4269","url":"https://access.redhat.com/errata/RHSA-2019:4269","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0579","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.19.0).\n\nSecurity Fix(es):\n\n* nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605)\n\n* nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string (CVE-2019-15604)\n\n* nodejs: HTTP header values do not have trailing optional whitespace trimmed (CVE-2019-15606)\n\n* npm: Symlink reference outside of node_modules folder through the bin field upon installation (CVE-2019-16775)\n\n* npm: Arbitrary file write via constructed entry in the package.json bin field (CVE-2019-16776)\n\n* npm: Global node_modules Binary Overwrite (CVE-2019-16777)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1788301","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788301","description":""},{"ticket":"1788305","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788305","description":""},{"ticket":"1788310","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788310","description":""},{"ticket":"1800364","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800364","description":""},{"ticket":"1800366","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800366","description":""},{"ticket":"1800367","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800367","description":""}],"cves":[{"name":"CVE-2019-15604","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15604","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-172"},{"name":"CVE-2019-15605","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15605","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.1","cwe":"CWE-444"},{"name":"CVE-2019-15606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15606","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.8","cwe":"CWE-138"},{"name":"CVE-2019-16775","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16775","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"},{"name":"CVE-2019-16776","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16776","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"},{"name":"CVE-2019-16777","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16777","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"4.8","cwe":"CWE-20"}],"references":[],"publishedAt":"2020-02-25T07:57:02Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0579","url":"https://access.redhat.com/errata/RHSA-2020:0579","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0598","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (12.16.1).\n\nSecurity Fix(es):\n\n* nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605)\n\n* nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string (CVE-2019-15604)\n\n* nodejs: HTTP header values do not have trailing optional whitespace trimmed (CVE-2019-15606)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1800364","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800364","description":""},{"ticket":"1800366","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800366","description":""},{"ticket":"1800367","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800367","description":""}],"cves":[{"name":"CVE-2019-15604","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15604","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.9","cwe":"CWE-172"},{"name":"CVE-2019-15605","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15605","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cvss3BaseScore":"7.1","cwe":"CWE-444"},{"name":"CVE-2019-15606","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15606","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss3BaseScore":"4.8","cwe":"CWE-138"}],"references":[],"publishedAt":"2020-02-25T13:06:23Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0598","url":"https://access.redhat.com/errata/RHSA-2020:0598","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0633","synopsis":"Important: ppp security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for ppp.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.\n\nSecurity Fix(es):\n\n* ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1800727","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1800727","description":""}],"cves":[{"name":"CVE-2020-8597","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"9.8","cwe":"CWE-120"}],"references":[],"publishedAt":"2020-02-27T14:59:09Z","rpms":{"Rocky Linux 8":{"nvras":["ppp-0:2.4.7-26.el8_1.aarch64.rpm","ppp-0:2.4.7-26.el8_1.i686.rpm","ppp-0:2.4.7-26.el8_1.src.rpm","ppp-0:2.4.7-26.el8_1.x86_64.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.aarch64.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.i686.rpm","ppp-debuginfo-0:2.4.7-26.el8_1.x86_64.rpm","ppp-debugsource-0:2.4.7-26.el8_1.aarch64.rpm","ppp-debugsource-0:2.4.7-26.el8_1.i686.rpm","ppp-debugsource-0:2.4.7-26.el8_1.x86_64.rpm","ppp-devel-0:2.4.7-26.el8_1.aarch64.rpm","ppp-devel-0:2.4.7-26.el8_1.i686.rpm","ppp-devel-0:2.4.7-26.el8_1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0633","url":"https://access.redhat.com/errata/RHSA-2020:0633","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0902","synopsis":"Important: icu security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for icu.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.\n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-03-19T10:43:49Z","rpms":{"Rocky Linux 8":{"nvras":["icu-0:60.3-2.el8_1.aarch64.rpm","icu-0:60.3-2.el8_1.src.rpm","icu-0:60.3-2.el8_1.x86_64.rpm","icu-debuginfo-0:60.3-2.el8_1.aarch64.rpm","icu-debuginfo-0:60.3-2.el8_1.i686.rpm","icu-debuginfo-0:60.3-2.el8_1.x86_64.rpm","icu-debugsource-0:60.3-2.el8_1.aarch64.rpm","icu-debugsource-0:60.3-2.el8_1.i686.rpm","icu-debugsource-0:60.3-2.el8_1.x86_64.rpm","libicu-0:60.3-2.el8_1.aarch64.rpm","libicu-0:60.3-2.el8_1.i686.rpm","libicu-0:60.3-2.el8_1.x86_64.rpm","libicu-debuginfo-0:60.3-2.el8_1.aarch64.rpm","libicu-debuginfo-0:60.3-2.el8_1.i686.rpm","libicu-debuginfo-0:60.3-2.el8_1.x86_64.rpm","libicu-devel-0:60.3-2.el8_1.aarch64.rpm","libicu-devel-0:60.3-2.el8_1.i686.rpm","libicu-devel-0:60.3-2.el8_1.x86_64.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.aarch64.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.i686.rpm","libicu-devel-debuginfo-0:60.3-2.el8_1.x86_64.rpm","libicu-doc-0:60.3-2.el8_1.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0902","url":"https://access.redhat.com/errata/RHSA-2020:0902","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:0903","synopsis":"Important: zsh security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for zsh.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.\n\nSecurity Fix(es):\n\n* zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1804859","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804859","description":""}],"cves":[{"name":"CVE-2019-20044","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20044","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-271"}],"references":[],"publishedAt":"2020-03-19T10:45:02Z","rpms":{"Rocky Linux 8":{"nvras":["zsh-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-0:5.5.1-6.el8_1.2.src.rpm","zsh-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-debuginfo-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-debuginfo-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-debugsource-0:5.5.1-6.el8_1.2.aarch64.rpm","zsh-debugsource-0:5.5.1-6.el8_1.2.x86_64.rpm","zsh-html-0:5.5.1-6.el8_1.2.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:0903","url":"https://access.redhat.com/errata/RHSA-2020:0903","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1293","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-04-02T07:23:16Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1293","url":"https://access.redhat.com/errata/RHSA-2020:1293","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1317","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1807349","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1807349","description":""}],"cves":[{"name":"CVE-2020-10531","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10531","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-04-06T07:21:40Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1317","url":"https://access.redhat.com/errata/RHSA-2020:1317","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1581","synopsis":"Low: wavpack security update","severity":"SEVERITY_LOW","topic":"An update is available for wavpack.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. \n\nSecurity Fix(es):\n\n* wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)\n\n* wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)\n\n* wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)\n\n* wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)\n\n* wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)\n\n* wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1661448","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661448","description":""},{"ticket":"1661449","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1661449","description":""},{"ticket":"1704633","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1704633","description":""},{"ticket":"1729418","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1729418","description":""},{"ticket":"1737740","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737740","description":""},{"ticket":"1737747","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1737747","description":""}],"cves":[{"name":"CVE-2018-19840","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19840","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-835"},{"name":"CVE-2018-19841","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19841","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-125"},{"name":"CVE-2019-1010315","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010315","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-369"},{"name":"CVE-2019-1010317","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010317","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"3.3","cwe":"CWE-20->CWE-665"},{"name":"CVE-2019-1010319","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010319","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"2.5","cwe":"CWE-665->CWE-369"},{"name":"CVE-2019-11498","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11498","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.0","cwe":"CWE-456"}],"references":[],"publishedAt":"2020-04-28T08:53:05Z","rpms":{"Rocky Linux 8":{"nvras":["wavpack-0:5.1.0-15.el8.aarch64.rpm","wavpack-0:5.1.0-15.el8.i686.rpm","wavpack-0:5.1.0-15.el8.src.rpm","wavpack-0:5.1.0-15.el8.x86_64.rpm","wavpack-debuginfo-0:5.1.0-15.el8.aarch64.rpm","wavpack-debuginfo-0:5.1.0-15.el8.i686.rpm","wavpack-debuginfo-0:5.1.0-15.el8.x86_64.rpm","wavpack-debugsource-0:5.1.0-15.el8.aarch64.rpm","wavpack-debugsource-0:5.1.0-15.el8.i686.rpm","wavpack-debugsource-0:5.1.0-15.el8.x86_64.rpm","wavpack-devel-0:5.1.0-15.el8.aarch64.rpm","wavpack-devel-0:5.1.0-15.el8.i686.rpm","wavpack-devel-0:5.1.0-15.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1581","url":"https://access.redhat.com/errata/RHSA-2020:1581","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1616","synopsis":"Low: irssi security update","severity":"SEVERITY_LOW","topic":"An update is available for irssi.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Irssi is a modular IRC client with Perl scripting. \n\nSecurity Fix(es):\n\n* irssi: use after free when sending SASL login to server (CVE-2019-13045)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1727683","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1727683","description":""}],"cves":[{"name":"CVE-2019-13045","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13045","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.7","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-04-28T08:56:59Z","rpms":{"Rocky Linux 8":{"nvras":["irssi-0:1.1.1-3.el8.aarch64.rpm","irssi-0:1.1.1-3.el8.src.rpm","irssi-0:1.1.1-3.el8.x86_64.rpm","irssi-debuginfo-0:1.1.1-3.el8.aarch64.rpm","irssi-debuginfo-0:1.1.1-3.el8.x86_64.rpm","irssi-debugsource-0:1.1.1-3.el8.aarch64.rpm","irssi-debugsource-0:1.1.1-3.el8.x86_64.rpm","irssi-devel-0:1.1.1-3.el8.aarch64.rpm","irssi-devel-0:1.1.1-3.el8.i686.rpm","irssi-devel-0:1.1.1-3.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1616","url":"https://access.redhat.com/errata/RHSA-2020:1616","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1636","synopsis":"Moderate: libsndfile security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libsndfile.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. \n\nSecurity Fix(es):\n\n* libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139)\n\n* libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1598480","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1598480","description":""},{"ticket":"1659631","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1659631","description":""}],"cves":[{"name":"CVE-2018-13139","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13139","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-19662","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19662","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-190->CWE-125"}],"references":[],"publishedAt":"2020-04-28T08:59:15Z","rpms":{"Rocky Linux 8":{"nvras":["libsndfile-0:1.0.28-10.el8.aarch64.rpm","libsndfile-0:1.0.28-10.el8.i686.rpm","libsndfile-0:1.0.28-10.el8.src.rpm","libsndfile-0:1.0.28-10.el8.x86_64.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.aarch64.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.i686.rpm","libsndfile-debuginfo-0:1.0.28-10.el8.x86_64.rpm","libsndfile-debugsource-0:1.0.28-10.el8.aarch64.rpm","libsndfile-debugsource-0:1.0.28-10.el8.i686.rpm","libsndfile-debugsource-0:1.0.28-10.el8.x86_64.rpm","libsndfile-devel-0:1.0.28-10.el8.aarch64.rpm","libsndfile-devel-0:1.0.28-10.el8.i686.rpm","libsndfile-devel-0:1.0.28-10.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1636","url":"https://access.redhat.com/errata/RHSA-2020:1636","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1653","synopsis":"Moderate: zziplib security update","severity":"SEVERITY_MODERATE","topic":"An update is available for zziplib.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The zziplib is a lightweight library to easily extract data from zip files.\n\nSecurity Fix(es):\n\n* zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1635888","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1635888","description":""}],"cves":[{"name":"CVE-2018-17828","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17828","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.5","cwe":"CWE-22"}],"references":[],"publishedAt":"2020-04-28T09:01:25Z","rpms":{"Rocky Linux 8":{"nvras":["zziplib-0:0.13.68-8.el8.aarch64.rpm","zziplib-0:0.13.68-8.el8.i686.rpm","zziplib-0:0.13.68-8.el8.src.rpm","zziplib-0:0.13.68-8.el8.x86_64.rpm","zziplib-debuginfo-0:0.13.68-8.el8.aarch64.rpm","zziplib-debuginfo-0:0.13.68-8.el8.i686.rpm","zziplib-debuginfo-0:0.13.68-8.el8.x86_64.rpm","zziplib-debugsource-0:0.13.68-8.el8.aarch64.rpm","zziplib-debugsource-0:0.13.68-8.el8.i686.rpm","zziplib-debugsource-0:0.13.68-8.el8.x86_64.rpm","zziplib-devel-0:0.13.68-8.el8.aarch64.rpm","zziplib-devel-0:0.13.68-8.el8.i686.rpm","zziplib-devel-0:0.13.68-8.el8.x86_64.rpm","zziplib-utils-0:0.13.68-8.el8.aarch64.rpm","zziplib-utils-0:0.13.68-8.el8.x86_64.rpm","zziplib-utils-debuginfo-0:0.13.68-8.el8.aarch64.rpm","zziplib-utils-debuginfo-0:0.13.68-8.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1653","url":"https://access.redhat.com/errata/RHSA-2020:1653","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1686","synopsis":"Low: libmspack security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for libmspack.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft.\n\nSecurity Fix(es):\n\n* libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730568","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730568","description":""},{"ticket":"1736743","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1736743","description":""}],"cves":[{"name":"CVE-2019-1010305","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010305","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3BaseScore":"2.5","cwe":"CWE-120"}],"references":[],"publishedAt":"2020-04-28T09:05:11Z","rpms":{"Rocky Linux 8":{"nvras":["libmspack-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-0:0.7-0.3.alpha.el8.4.src.rpm","libmspack-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-debuginfo-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-debugsource-0:0.7-0.3.alpha.el8.4.x86_64.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.aarch64.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.i686.rpm","libmspack-devel-0:0.7-0.3.alpha.el8.4.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1686","url":"https://access.redhat.com/errata/RHSA-2020:1686","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1708","synopsis":"Moderate: liblouis security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for liblouis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It features support for computer and literary braille, supports contracted and uncontracted translation for many languages and has support for hyphenation. New languages can easily be added through tables that support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).\n\nSecurity Fix(es):\n\n* liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c (CVE-2018-11684)\n\n* liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c (CVE-2018-11685)\n\n* liblouis: Segmentation fault in logging.c:lou_logPrint() (CVE-2018-11577)\n\n* liblouis: Stack-based buffer overflow in compileTranslationTable.c (CVE-2018-12085)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1585905","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1585905","description":""},{"ticket":"1588631","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1588631","description":""},{"ticket":"1588636","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1588636","description":""},{"ticket":"1589940","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1589940","description":""}],"cves":[{"name":"CVE-2018-11577","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11577","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-400"},{"name":"CVE-2018-11684","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11684","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-11685","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11685","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-121"},{"name":"CVE-2018-12085","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12085","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3BaseScore":"3.3","cwe":"CWE-121"}],"references":[],"publishedAt":"2020-04-28T09:07:17Z","rpms":{"Rocky Linux 8":{"nvras":["liblouis-debuginfo-0:2.6.2-21.el8.x86_64.rpm","liblouis-0:2.6.2-21.el8.aarch64.rpm","liblouis-0:2.6.2-21.el8.i686.rpm","liblouis-0:2.6.2-21.el8.src.rpm","liblouis-0:2.6.2-21.el8.x86_64.rpm","liblouis-debuginfo-0:2.6.2-21.el8.aarch64.rpm","liblouis-debuginfo-0:2.6.2-21.el8.i686.rpm","liblouis-debugsource-0:2.6.2-21.el8.aarch64.rpm","liblouis-debugsource-0:2.6.2-21.el8.i686.rpm","liblouis-debugsource-0:2.6.2-21.el8.x86_64.rpm","python3-louis-0:2.6.2-21.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1708","url":"https://access.redhat.com/errata/RHSA-2020:1708","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:1852","synopsis":"Moderate: patch security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for patch.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file (patching the file).\n\nSecurity Fix(es):\n\n* patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files (CVE-2019-13636)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1732781","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1732781","description":""}],"cves":[{"name":"CVE-2019-13636","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13636","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.9","cwe":"CWE-59"}],"references":[],"publishedAt":"2020-04-28T09:23:52Z","rpms":{"Rocky Linux 8":{"nvras":["patch-0:2.7.6-11.el8.aarch64.rpm","patch-0:2.7.6-11.el8.src.rpm","patch-0:2.7.6-11.el8.x86_64.rpm","patch-debuginfo-0:2.7.6-11.el8.aarch64.rpm","patch-debuginfo-0:2.7.6-11.el8.x86_64.rpm","patch-debugsource-0:2.7.6-11.el8.aarch64.rpm","patch-debugsource-0:2.7.6-11.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:1852","url":"https://access.redhat.com/errata/RHSA-2020:1852","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2041","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow (CVE-2019-12519)\n\n* squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution (CVE-2020-11945)\n\n* squid: parsing of header Proxy-Authentication leads to memory corruption (CVE-2019-12525)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1730535","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1730535","description":""},{"ticket":"1827552","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827552","description":""},{"ticket":"1827563","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1827563","description":""}],"cves":[{"name":"CVE-2019-12519","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12519","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-121"},{"name":"CVE-2019-12525","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12525","cvss3ScoringVector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"4.3","cwe":"CWE-119"},{"name":"CVE-2020-11945","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11945","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-284"}],"references":[],"publishedAt":"2020-05-06T12:52:10Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2041","url":"https://access.redhat.com/errata/RHSA-2020:2041","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2755","synopsis":"Important: nghttp2 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nghttp2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"}],"references":[],"publishedAt":"2020-06-25T16:31:29Z","rpms":{"Rocky Linux 8":{"nvras":["libnghttp2-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-0:1.33.0-3.el8_3.1.x86_64.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-debuginfo-0:1.33.0-3.el8_3.1.x86_64.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.aarch64.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.i686.rpm","libnghttp2-devel-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-0:1.33.0-3.el8_3.1.src.rpm","nghttp2-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.i686.rpm","nghttp2-debuginfo-0:1.33.0-3.el8_3.1.x86_64.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.aarch64.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.i686.rpm","nghttp2-debugsource-0:1.33.0-3.el8_3.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2755","url":"https://access.redhat.com/errata/RHSA-2020:2755","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2848","synopsis":"Important: nodejs:10 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (10.21.0).\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\n* nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload (CVE-2020-7598)\n\n* nodejs: memory corruption in napi_get_value_string_* functions (CVE-2020-8174)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1813344","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","description":""},{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""},{"ticket":"1845256","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845256","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"},{"name":"CVE-2020-7598","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-20"},{"name":"CVE-2020-8174","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8174","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-07-07T08:51:24Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2848","url":"https://access.redhat.com/errata/RHSA-2020:2848","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:2852","synopsis":"Important: nodejs:12 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (12.18.2).\n\nSecurity Fix(es):\n\n* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)\n\n* nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload (CVE-2020-7598)\n\n* nodejs: TLS session reuse can lead to hostname verification bypass (CVE-2020-8172)\n\n* nodejs: memory corruption in napi_get_value_string_* functions (CVE-2020-8174)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1813344","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","description":""},{"ticket":"1844929","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844929","description":""},{"ticket":"1845247","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845247","description":""},{"ticket":"1845256","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845256","description":""}],"cves":[{"name":"CVE-2020-11080","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11080","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-770"},{"name":"CVE-2020-7598","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.6","cwe":"CWE-20"},{"name":"CVE-2020-8172","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8172","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-285"},{"name":"CVE-2020-8174","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8174","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-119"}],"references":[],"publishedAt":"2020-07-07T08:52:35Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:2852","url":"https://access.redhat.com/errata/RHSA-2020:2852","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3032","synopsis":"Moderate: mod_auth_openidc:2.3 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for cjose.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. \n\nSecurity Fix(es):\n\n* mod_auth_openidc: Open redirect in logout url when using URLs with leading slashes (CVE-2019-14857)\n\n* mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash (CVE-2019-20479)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Module stream mod_auth_openidc:2.3 does not have correct module.md file (BZ#1844107)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1760613","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1760613","description":""},{"ticket":"1805102","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1805102","description":""},{"ticket":"1844107","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844107","description":"* Module stream mod_auth_openidc:2.3 does not have correct module.md file"}],"cves":[{"name":"CVE-2019-14857","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14857","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-601"},{"name":"CVE-2019-20479","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20479","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3BaseScore":"6.1","cwe":"CWE-601"}],"references":[],"publishedAt":"2020-07-21T14:12:27Z","rpms":{"Rocky Linux 8":{"nvras":["cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.src.rpm","cjose-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-debuginfo-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-debuginfo-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-debugsource-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-debugsource-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm","cjose-devel-0:0.6.1-2.module+el8.3.0+129+2feafa46.aarch64.rpm","cjose-devel-0:0.6.1-2.module+el8.3.0+129+2feafa46.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3032","url":"https://access.redhat.com/errata/RHSA-2020:3032","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3176","synopsis":"Important: postgresql-jdbc security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for postgresql-jdbc.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs to access a PostgreSQL database.\n\nSecurity Fix(es):\n\n* postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692)\n\nThis update introduces a backwards incompatible change required to resolve this issue. Refer to the Rocky Enterprise Software Foundation Knowledgebase article 5266441 linked to in the References section for information on how to re-enable the old insecure behavior.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1852985","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852985","description":""}],"cves":[{"name":"CVE-2020-13692","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13692","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cvss3BaseScore":"7.7","cwe":"CWE-611"}],"references":[],"publishedAt":"2020-07-28T12:19:54Z","rpms":{"Rocky Linux 8":{"nvras":["postgresql-jdbc-0:42.2.3-3.el8_2.noarch.rpm","postgresql-jdbc-0:42.2.3-3.el8_2.src.rpm","postgresql-jdbc-javadoc-0:42.2.3-3.el8_2.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3176","url":"https://access.redhat.com/errata/RHSA-2020:3176","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3185","synopsis":"Important: python-pillow security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for python-pillow.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.\n\nSecurity Fix(es):\n\n* python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 (CVE-2020-11538)\n\n* python-pillow: out-of-bounds read in ImagingFliDecode when loading FLI images (CVE-2020-5313)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1789532","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789532","description":""},{"ticket":"1852814","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1852814","description":""}],"cves":[{"name":"CVE-2020-11538","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11538","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.1","cwe":"CWE-122"},{"name":"CVE-2020-5313","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5313","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cvss3BaseScore":"8.2","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-07-28T13:17:06Z","rpms":{"Rocky Linux 8":{"nvras":["python3-pillow-0:5.1.1-12.el8_2.aarch64.rpm","python3-pillow-0:5.1.1-12.el8_2.x86_64.rpm","python3-pillow-debuginfo-0:5.1.1-12.el8_2.aarch64.rpm","python3-pillow-debuginfo-0:5.1.1-12.el8_2.x86_64.rpm","python-pillow-0:5.1.1-12.el8_2.src.rpm","python-pillow-debuginfo-0:5.1.1-12.el8_2.aarch64.rpm","python-pillow-debuginfo-0:5.1.1-12.el8_2.x86_64.rpm","python-pillow-debugsource-0:5.1.1-12.el8_2.aarch64.rpm","python-pillow-debugsource-0:5.1.1-12.el8_2.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3185","url":"https://access.redhat.com/errata/RHSA-2020:3185","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3623","synopsis":"Important: squid:4 security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for libecap.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: HTTP Request Smuggling could result in cache poisoning (CVE-2020-15810)\n\n* squid: HTTP Request Splitting could result in cache poisoning (CVE-2020-15811)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1871700","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1871700","description":""},{"ticket":"1871702","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1871702","description":""}],"cves":[{"name":"CVE-2020-15810","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15810","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3BaseScore":"9.6","cwe":"CWE-444"},{"name":"CVE-2020-15811","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15811","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss3BaseScore":"9.6","cwe":"CWE-444"}],"references":[],"publishedAt":"2020-09-03T12:36:52Z","rpms":{"Rocky Linux 8":{"nvras":["libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.src.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debuginfo-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-debugsource-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.x86_64.rpm","libecap-devel-0:1.0.1-2.module+el8.4.0+404+316a0dc5.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3623","url":"https://access.redhat.com/errata/RHSA-2020:3623","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:3654","synopsis":"Moderate: libcroco security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libcroco.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library. \n\nSecurity Fix(es):\n\n* libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1835377","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1835377","description":""}],"cves":[{"name":"CVE-2020-12825","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12825","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3BaseScore":"7.1","cwe":"CWE-674->CWE-121"}],"references":[],"publishedAt":"2020-09-08T08:36:30Z","rpms":{"Rocky Linux 8":{"nvras":["libcroco-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-0:0.6.12-4.el8_2.1.src.rpm","libcroco-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-debuginfo-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-debugsource-0:0.6.12-4.el8_2.1.x86_64.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.aarch64.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.i686.rpm","libcroco-devel-0:0.6.12-4.el8_2.1.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:3654","url":"https://access.redhat.com/errata/RHSA-2020:3654","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4272","synopsis":"Moderate: nodejs:12 security and bug fix update","severity":"SEVERITY_MODERATE","topic":"An update is available for nodejs-nodemon, nodejs-packaging.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version: nodejs (12.18.4).\n\nSecurity Fix(es):\n\n* nodejs-dot-prop: prototype pollution (CVE-2020-8116)\n\n* nodejs: HTTP request smuggling due to CR-to-Hyphen conversion (CVE-2020-8201)\n\n* npm: Sensitive information exposure through logs (CVE-2020-15095)\n\n* libuv: buffer overflow in realpath (CVE-2020-8252)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* The nodejs:12/development module is not installable (BZ#1883966)","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1856875","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1856875","description":""},{"ticket":"1868196","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1868196","description":""},{"ticket":"1879311","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879311","description":""},{"ticket":"1879315","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1879315","description":""},{"ticket":"1883966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1883966","description":"* The nodejs:12/development module is not installable"}],"cves":[{"name":"CVE-2020-15095","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15095","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"4.4","cwe":"CWE-532"},{"name":"CVE-2020-8116","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8116","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"7.3","cwe":"CWE-471"},{"name":"CVE-2020-8201","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8201","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"7.4","cwe":"CWE-444"},{"name":"CVE-2020-8252","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8252","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.8","cwe":"CWE-131->CWE-122"}],"references":[],"publishedAt":"2020-10-19T07:13:10Z","rpms":{"Rocky Linux 8":{"nvras":["nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-nodemon-0:1.18.3-1.module+el8.3.0+101+f84c7154.src.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.noarch.rpm","nodejs-packaging-0:17-3.module+el8.3.0+101+f84c7154.src.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4272","url":"https://access.redhat.com/errata/RHSA-2020:4272","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4436","synopsis":"Low: gnome-software and fwupd security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for appstream-data, libxmlb.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop.\n\nThe appstream-data package provides the distribution specific AppStream metadata required for the GNOME and KDE software centers. \n\nThe fwupd packages provide a service that allows session software to update device firmware.\n\nThe following packages have been upgraded to a later upstream version: gnome-software (3.36.1), fwupd (1.4.2).\n\nSecurity Fix(es):\n\n* fwupd: Possible bypass in signature verification (CVE-2020-10759)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1797932","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1797932","description":""},{"ticket":"1815502","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1815502","description":""},{"ticket":"1839774","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1839774","description":""},{"ticket":"1844316","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844316","description":""},{"ticket":"1844488","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1844488","description":""},{"ticket":"1845714","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1845714","description":""}],"cves":[{"name":"CVE-2020-10759","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10759","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss3BaseScore":"5.7","cwe":"CWE-347"}],"references":[],"publishedAt":"2020-11-03T12:04:30Z","rpms":{"Rocky Linux 8":{"nvras":["appstream-data-0:8-20200724.el8.noarch.rpm","appstream-data-0:8-20200724.el8.src.rpm","libxmlb-0:0.1.15-1.el8.aarch64.rpm","libxmlb-0:0.1.15-1.el8.i686.rpm","libxmlb-0:0.1.15-1.el8.src.rpm","libxmlb-0:0.1.15-1.el8.x86_64.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.aarch64.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.i686.rpm","libxmlb-debuginfo-0:0.1.15-1.el8.x86_64.rpm","libxmlb-debugsource-0:0.1.15-1.el8.aarch64.rpm","libxmlb-debugsource-0:0.1.15-1.el8.i686.rpm","libxmlb-debugsource-0:0.1.15-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4436","url":"https://access.redhat.com/errata/RHSA-2020:4436","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4453","synopsis":"Moderate: vim security update","severity":"SEVERITY_MODERATE","topic":"An update is available for vim.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Vim (Vi IMproved) is an updated and improved version of the vi editor.\n\nSecurity Fix(es):\n\n* vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode (CVE-2019-20807)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1745476","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1745476","description":""},{"ticket":"1842658","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1842658","description":""}],"cves":[{"name":"CVE-2019-20807","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20807","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"5.3","cwe":"CWE-78"}],"references":[],"publishedAt":"2020-11-03T12:06:10Z","rpms":{"Rocky Linux 8":{"nvras":["vim-2:8.0.1763-15.el8.src.rpm","vim-common-2:8.0.1763-15.el8.aarch64.rpm","vim-common-2:8.0.1763-15.el8.x86_64.rpm","vim-common-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-common-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-debugsource-2:8.0.1763-15.el8.aarch64.rpm","vim-debugsource-2:8.0.1763-15.el8.x86_64.rpm","vim-enhanced-2:8.0.1763-15.el8.aarch64.rpm","vim-enhanced-2:8.0.1763-15.el8.x86_64.rpm","vim-enhanced-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-enhanced-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-filesystem-2:8.0.1763-15.el8.noarch.rpm","vim-minimal-2:8.0.1763-15.el8.aarch64.rpm","vim-minimal-2:8.0.1763-15.el8.x86_64.rpm","vim-minimal-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-minimal-debuginfo-2:8.0.1763-15.el8.x86_64.rpm","vim-X11-2:8.0.1763-15.el8.aarch64.rpm","vim-X11-2:8.0.1763-15.el8.x86_64.rpm","vim-X11-debuginfo-2:8.0.1763-15.el8.aarch64.rpm","vim-X11-debuginfo-2:8.0.1763-15.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4453","url":"https://access.redhat.com/errata/RHSA-2020:4453","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4469","synopsis":"Low: cups security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for cups.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar operating systems.\n\nSecurity Fix(es):\n\n* cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c (CVE-2020-3898)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1689207","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1689207","description":""},{"ticket":"1775590","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1775590","description":""},{"ticket":"1784884","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1784884","description":""},{"ticket":"1809002","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1809002","description":""},{"ticket":"1822135","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822135","description":""},{"ticket":"1823964","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1823964","description":""},{"ticket":"1838449","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1838449","description":""}],"cves":[{"name":"CVE-2020-3898","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"4.5","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-11-03T12:07:34Z","rpms":{"Rocky Linux 8":{"nvras":["cups-1:2.2.6-38.el8.aarch64.rpm","cups-1:2.2.6-38.el8.src.rpm","cups-1:2.2.6-38.el8.x86_64.rpm","cups-client-1:2.2.6-38.el8.aarch64.rpm","cups-client-1:2.2.6-38.el8.x86_64.rpm","cups-client-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-client-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-debuginfo-1:2.2.6-38.el8.i686.rpm","cups-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-debugsource-1:2.2.6-38.el8.aarch64.rpm","cups-debugsource-1:2.2.6-38.el8.i686.rpm","cups-debugsource-1:2.2.6-38.el8.x86_64.rpm","cups-devel-1:2.2.6-38.el8.aarch64.rpm","cups-devel-1:2.2.6-38.el8.i686.rpm","cups-devel-1:2.2.6-38.el8.x86_64.rpm","cups-filesystem-1:2.2.6-38.el8.noarch.rpm","cups-ipptool-1:2.2.6-38.el8.aarch64.rpm","cups-ipptool-1:2.2.6-38.el8.x86_64.rpm","cups-ipptool-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-ipptool-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-libs-1:2.2.6-38.el8.aarch64.rpm","cups-libs-1:2.2.6-38.el8.i686.rpm","cups-libs-1:2.2.6-38.el8.x86_64.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.i686.rpm","cups-libs-debuginfo-1:2.2.6-38.el8.x86_64.rpm","cups-lpd-1:2.2.6-38.el8.aarch64.rpm","cups-lpd-1:2.2.6-38.el8.x86_64.rpm","cups-lpd-debuginfo-1:2.2.6-38.el8.aarch64.rpm","cups-lpd-debuginfo-1:2.2.6-38.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4469","url":"https://access.redhat.com/errata/RHSA-2020:4469","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4482","synopsis":"Moderate: libgcrypt security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libgcrypt.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.\n\nThe following packages have been upgraded to a later upstream version: libgcrypt (1.8.5). (BZ#1764918)\n\nSecurity Fix(es):\n\n* libgcrypt: ECDSA timing attack allowing private key leak (CVE-2019-13627)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1762741","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762741","description":""},{"ticket":"1762765","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1762765","description":""},{"ticket":"1764018","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1764018","description":""}],"cves":[{"name":"CVE-2019-13627","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13627","cvss3ScoringVector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss3BaseScore":"6.3","cwe":"CWE-362"}],"references":[],"publishedAt":"2020-11-03T12:08:44Z","rpms":{"Rocky Linux 8":{"nvras":["libgcrypt-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-0:1.8.5-4.el8.i686.rpm","libgcrypt-0:1.8.5-4.el8.src.rpm","libgcrypt-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.i686.rpm","libgcrypt-debuginfo-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.i686.rpm","libgcrypt-debugsource-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-devel-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-devel-0:1.8.5-4.el8.i686.rpm","libgcrypt-devel-0:1.8.5-4.el8.x86_64.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.aarch64.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.i686.rpm","libgcrypt-devel-debuginfo-0:1.8.5-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4482","url":"https://access.redhat.com/errata/RHSA-2020:4482","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4484","synopsis":"Moderate: expat security update","severity":"SEVERITY_MODERATE","topic":"An update is available for expat.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Expat is a C library for parsing XML documents.\n\nSecurity Fix(es):\n\n* expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843)\n\n* expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1723723","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1723723","description":""},{"ticket":"1752592","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1752592","description":""}],"cves":[{"name":"CVE-2018-20843","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-400"},{"name":"CVE-2019-15903","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"(CWE-122|CWE-125)"}],"references":[],"publishedAt":"2020-11-03T12:09:00Z","rpms":{"Rocky Linux 8":{"nvras":["expat-0:2.2.5-4.el8.aarch64.rpm","expat-0:2.2.5-4.el8.i686.rpm","expat-0:2.2.5-4.el8.src.rpm","expat-0:2.2.5-4.el8.x86_64.rpm","expat-debuginfo-0:2.2.5-4.el8.aarch64.rpm","expat-debuginfo-0:2.2.5-4.el8.i686.rpm","expat-debuginfo-0:2.2.5-4.el8.x86_64.rpm","expat-debugsource-0:2.2.5-4.el8.aarch64.rpm","expat-debugsource-0:2.2.5-4.el8.i686.rpm","expat-debugsource-0:2.2.5-4.el8.x86_64.rpm","expat-devel-0:2.2.5-4.el8.aarch64.rpm","expat-devel-0:2.2.5-4.el8.i686.rpm","expat-devel-0:2.2.5-4.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4484","url":"https://access.redhat.com/errata/RHSA-2020:4484","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4490","synopsis":"Moderate: gnupg2 security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for gnupg2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The GNU Privacy Guard (GnuPG or GPG) is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards.\n\nThe following packages have been upgraded to a later upstream version: gnupg2 (2.2.20). (BZ#1663944)\n\nSecurity Fix(es):\n\n* GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS (CVE-2019-13050)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1726146","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1726146","description":""}],"cves":[{"name":"CVE-2018-1000858","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000858","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cvss3BaseScore":"5.4","cwe":"CWE-352"},{"name":"CVE-2019-13050","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13050","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-297"}],"references":[],"publishedAt":"2020-11-03T12:09:29Z","rpms":{"Rocky Linux 8":{"nvras":["gnupg2-0:2.2.20-2.el8.aarch64.rpm","gnupg2-0:2.2.20-2.el8.src.rpm","gnupg2-0:2.2.20-2.el8.x86_64.rpm","gnupg2-debuginfo-0:2.2.20-2.el8.aarch64.rpm","gnupg2-debuginfo-0:2.2.20-2.el8.x86_64.rpm","gnupg2-debugsource-0:2.2.20-2.el8.aarch64.rpm","gnupg2-debugsource-0:2.2.20-2.el8.x86_64.rpm","gnupg2-smime-0:2.2.20-2.el8.aarch64.rpm","gnupg2-smime-0:2.2.20-2.el8.x86_64.rpm","gnupg2-smime-debuginfo-0:2.2.20-2.el8.aarch64.rpm","gnupg2-smime-debuginfo-0:2.2.20-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4490","url":"https://access.redhat.com/errata/RHSA-2020:4490","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4539","synopsis":"Moderate: pcre2 security and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for pcre2.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. \n\nSecurity Fix(es):\n\n* pcre: Out of bounds read in JIT mode when \\X is used in non-UTF mode (CVE-2019-20454)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1735494","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1735494","description":""},{"ticket":"1822698","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1822698","description":""}],"cves":[{"name":"CVE-2019-20454","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-125"}],"references":[],"publishedAt":"2020-11-03T12:13:54Z","rpms":{"Rocky Linux 8":{"nvras":["pcre2-0:10.32-2.el8.aarch64.rpm","pcre2-0:10.32-2.el8.i686.rpm","pcre2-0:10.32-2.el8.src.rpm","pcre2-0:10.32-2.el8.x86_64.rpm","pcre2-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-debugsource-0:10.32-2.el8.aarch64.rpm","pcre2-debugsource-0:10.32-2.el8.i686.rpm","pcre2-debugsource-0:10.32-2.el8.x86_64.rpm","pcre2-devel-0:10.32-2.el8.aarch64.rpm","pcre2-devel-0:10.32-2.el8.i686.rpm","pcre2-devel-0:10.32-2.el8.x86_64.rpm","pcre2-tools-0:10.32-2.el8.aarch64.rpm","pcre2-tools-0:10.32-2.el8.x86_64.rpm","pcre2-tools-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-tools-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-utf16-0:10.32-2.el8.aarch64.rpm","pcre2-utf16-0:10.32-2.el8.i686.rpm","pcre2-utf16-0:10.32-2.el8.x86_64.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-utf16-debuginfo-0:10.32-2.el8.x86_64.rpm","pcre2-utf32-0:10.32-2.el8.aarch64.rpm","pcre2-utf32-0:10.32-2.el8.i686.rpm","pcre2-utf32-0:10.32-2.el8.x86_64.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.aarch64.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.i686.rpm","pcre2-utf32-debuginfo-0:10.32-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4539","url":"https://access.redhat.com/errata/RHSA-2020:4539","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4545","synopsis":"Moderate: libssh security, bug fix, and enhancement update","severity":"SEVERITY_MODERATE","topic":"An update is available for libssh.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.\n\nThe following packages have been upgraded to a later upstream version: libssh (0.9.4). (BZ#1804797)\n\nSecurity Fix(es):\n\n* libssh: denial of service when handling AES-CTR (or DES) ciphers (CVE-2020-1730)\n\n* libssh: unsanitized location in scp could lead to unwanted command execution (CVE-2019-14889)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1733914","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1733914","description":""},{"ticket":"1772523","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1772523","description":""},{"ticket":"1801998","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1801998","description":""},{"ticket":"1804797","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1804797","description":"The following packages have been upgraded to a later upstream version: libssh (0.9.4)."},{"ticket":"1821339","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1821339","description":""},{"ticket":"1849071","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1849071","description":""}],"cves":[{"name":"CVE-2019-14889","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14889","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"7.1","cwe":"CWE-78"},{"name":"CVE-2020-1730","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1730","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-476"}],"references":[],"publishedAt":"2020-11-03T12:14:19Z","rpms":{"Rocky Linux 8":{"nvras":["libssh-0:0.9.4-2.el8.aarch64.rpm","libssh-0:0.9.4-2.el8.i686.rpm","libssh-0:0.9.4-2.el8.src.rpm","libssh-0:0.9.4-2.el8.x86_64.rpm","libssh-config-0:0.9.4-2.el8.noarch.rpm","libssh-debuginfo-0:0.9.4-2.el8.aarch64.rpm","libssh-debuginfo-0:0.9.4-2.el8.i686.rpm","libssh-debuginfo-0:0.9.4-2.el8.x86_64.rpm","libssh-debugsource-0:0.9.4-2.el8.aarch64.rpm","libssh-debugsource-0:0.9.4-2.el8.i686.rpm","libssh-debugsource-0:0.9.4-2.el8.x86_64.rpm","libssh-devel-0:0.9.4-2.el8.aarch64.rpm","libssh-devel-0:0.9.4-2.el8.i686.rpm","libssh-devel-0:0.9.4-2.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4545","url":"https://access.redhat.com/errata/RHSA-2020:4545","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4628","synopsis":"Low: libreoffice security, bug fix, and enhancement update","severity":"SEVERITY_LOW","topic":"An update is available for libcmis.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.\n\nThe following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)\n\nSecurity Fix(es):\n\n* libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802)\n\n* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1796893","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1796893","description":"The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1)."},{"ticket":"1819798","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1819798","description":""},{"ticket":"1824876","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1824876","description":""},{"ticket":"1841907","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1841907","description":""},{"ticket":"1848346","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1848346","description":""},{"ticket":"1850226","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1850226","description":""}],"cves":[{"name":"CVE-2020-12802","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12802","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3BaseScore":"5.3","cwe":"CWE-200"},{"name":"CVE-2020-12803","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12803","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.5","cwe":"CWE-284"}],"references":[],"publishedAt":"2020-11-03T12:21:42Z","rpms":{"Rocky Linux 8":{"nvras":["libcmis-0:0.5.2-1.el8.i686.rpm","libcmis-0:0.5.2-1.el8.src.rpm","libcmis-0:0.5.2-1.el8.x86_64.rpm","libcmis-debuginfo-0:0.5.2-1.el8.i686.rpm","libcmis-debuginfo-0:0.5.2-1.el8.x86_64.rpm","libcmis-debugsource-0:0.5.2-1.el8.i686.rpm","libcmis-debugsource-0:0.5.2-1.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4628","url":"https://access.redhat.com/errata/RHSA-2020:4628","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4629","synopsis":"Moderate: libvpx security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libvpx.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.\n\nSecurity Fix(es):\n\n* libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)\n\n* libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)\n\n* libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)\n\n* libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1788966","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788966","description":""},{"ticket":"1788994","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1788994","description":""},{"ticket":"1789004","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789004","description":""},{"ticket":"1789008","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1789008","description":""}],"cves":[{"name":"CVE-2019-2126","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2126","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-672"},{"name":"CVE-2019-9232","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9232","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3BaseScore":"7.5","cwe":"CWE-125"},{"name":"CVE-2019-9371","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9371","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"6.5","cwe":"CWE-400"},{"name":"CVE-2019-9433","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9433","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss3BaseScore":"6.5","cwe":"CWE-416->CWE-200"}],"references":[],"publishedAt":"2020-11-03T12:21:50Z","rpms":{"Rocky Linux 8":{"nvras":["libvpx-0:1.7.0-8.el8.aarch64.rpm","libvpx-0:1.7.0-8.el8.i686.rpm","libvpx-0:1.7.0-8.el8.src.rpm","libvpx-0:1.7.0-8.el8.x86_64.rpm","libvpx-debuginfo-0:1.7.0-8.el8.aarch64.rpm","libvpx-debuginfo-0:1.7.0-8.el8.i686.rpm","libvpx-debuginfo-0:1.7.0-8.el8.x86_64.rpm","libvpx-debugsource-0:1.7.0-8.el8.aarch64.rpm","libvpx-debugsource-0:1.7.0-8.el8.i686.rpm","libvpx-debugsource-0:1.7.0-8.el8.x86_64.rpm","libvpx-devel-0:1.7.0-8.el8.aarch64.rpm","libvpx-devel-0:1.7.0-8.el8.i686.rpm","libvpx-devel-0:1.7.0-8.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4629","url":"https://access.redhat.com/errata/RHSA-2020:4629","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4634","synopsis":"Moderate: libtiff security update","severity":"SEVERITY_MODERATE","topic":"An update is available for libtiff.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1765705","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1765705","description":""}],"cves":[{"name":"CVE-2019-17546","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3BaseScore":"8.8","cwe":"CWE-190->CWE-122"}],"references":[],"publishedAt":"2020-11-03T12:22:21Z","rpms":{"Rocky Linux 8":{"nvras":["libtiff-0:4.0.9-18.el8.aarch64.rpm","libtiff-0:4.0.9-18.el8.i686.rpm","libtiff-0:4.0.9-18.el8.src.rpm","libtiff-0:4.0.9-18.el8.x86_64.rpm","libtiff-debuginfo-0:4.0.9-18.el8.aarch64.rpm","libtiff-debuginfo-0:4.0.9-18.el8.i686.rpm","libtiff-debuginfo-0:4.0.9-18.el8.x86_64.rpm","libtiff-debugsource-0:4.0.9-18.el8.aarch64.rpm","libtiff-debugsource-0:4.0.9-18.el8.i686.rpm","libtiff-debugsource-0:4.0.9-18.el8.x86_64.rpm","libtiff-devel-0:4.0.9-18.el8.aarch64.rpm","libtiff-devel-0:4.0.9-18.el8.i686.rpm","libtiff-devel-0:4.0.9-18.el8.x86_64.rpm","libtiff-tools-0:4.0.9-18.el8.aarch64.rpm","libtiff-tools-0:4.0.9-18.el8.x86_64.rpm","libtiff-tools-debuginfo-0:4.0.9-18.el8.aarch64.rpm","libtiff-tools-debuginfo-0:4.0.9-18.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4634","url":"https://access.redhat.com/errata/RHSA-2020:4634","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4638","synopsis":"Low: sysstat security update","severity":"SEVERITY_LOW","topic":"An update is available for sysstat.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity.\n\nSecurity Fix(es):\n\n* sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c (CVE-2019-16167)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1768970","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1768970","description":""}],"cves":[{"name":"CVE-2019-16167","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16167","cvss3ScoringVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss3BaseScore":"5.5","cwe":"CWE-190"}],"references":[],"publishedAt":"2020-11-03T12:22:41Z","rpms":{"Rocky Linux 8":{"nvras":["sysstat-0:11.7.3-5.el8.aarch64.rpm","sysstat-0:11.7.3-5.el8.src.rpm","sysstat-0:11.7.3-5.el8.x86_64.rpm","sysstat-debuginfo-0:11.7.3-5.el8.aarch64.rpm","sysstat-debuginfo-0:11.7.3-5.el8.x86_64.rpm","sysstat-debugsource-0:11.7.3-5.el8.aarch64.rpm","sysstat-debugsource-0:11.7.3-5.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4638","url":"https://access.redhat.com/errata/RHSA-2020:4638","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4649","synopsis":"Low: evolution security and bug fix update","severity":"SEVERITY_LOW","topic":"An update is available for bogofilter, evolution-mapi.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.\n\nThe evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.\n\nOpenChange provides libraries to access Microsoft Exchange servers using native protocols.\n\nSecurity Fix(es):\n\n* evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1825447","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1825447","description":""},{"ticket":"1836165","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836165","description":""},{"ticket":"1836279","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1836279","description":""},{"ticket":"1857470","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1857470","description":""}],"cves":[{"name":"CVE-2020-14928","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14928","cvss3ScoringVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cvss3BaseScore":"5.3","cwe":"CWE-20"}],"references":[],"publishedAt":"2020-11-03T12:23:41Z","rpms":{"Rocky Linux 8":{"nvras":["bogofilter-0:1.2.5-2.el8.aarch64.rpm","bogofilter-0:1.2.5-2.el8.src.rpm","bogofilter-0:1.2.5-2.el8.x86_64.rpm","bogofilter-debuginfo-0:1.2.5-2.el8.aarch64.rpm","bogofilter-debuginfo-0:1.2.5-2.el8.x86_64.rpm","bogofilter-debugsource-0:1.2.5-2.el8.aarch64.rpm","bogofilter-debugsource-0:1.2.5-2.el8.x86_64.rpm","evolution-mapi-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-0:3.28.3-3.el8.src.rpm","evolution-mapi-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-debuginfo-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-debuginfo-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-debugsource-0:3.28.3-3.el8.aarch64.rpm","evolution-mapi-debugsource-0:3.28.3-3.el8.x86_64.rpm","evolution-mapi-langpacks-0:3.28.3-3.el8.noarch.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4649","url":"https://access.redhat.com/errata/RHSA-2020:4649","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4659","synopsis":"Moderate: gd security update","severity":"SEVERITY_MODERATE","topic":"An update is available for gd.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. \n\nSecurity Fix(es):\n\n* gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)\n\n* gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)\n\n* gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1600727","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1600727","description":""},{"ticket":"1671390","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1671390","description":""},{"ticket":"1672207","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1672207","description":""}],"cves":[{"name":"CVE-2018-14553","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14553","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cvss3BaseScore":"7.4","cwe":"CWE-119"},{"name":"CVE-2019-6977","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6977","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3BaseScore":"6.3","cwe":"CWE-122"},{"name":"CVE-2019-6978","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6978","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3BaseScore":"5.3","cwe":"CWE-416"}],"references":[],"publishedAt":"2020-11-03T12:24:40Z","rpms":{"Rocky Linux 8":{"nvras":["gd-debuginfo-0:2.2.5-7.el8.i686.rpm","gd-0:2.2.5-7.el8.aarch64.rpm","gd-0:2.2.5-7.el8.i686.rpm","gd-0:2.2.5-7.el8.src.rpm","gd-0:2.2.5-7.el8.x86_64.rpm","gd-debuginfo-0:2.2.5-7.el8.aarch64.rpm","gd-debuginfo-0:2.2.5-7.el8.x86_64.rpm","gd-debugsource-0:2.2.5-7.el8.aarch64.rpm","gd-debugsource-0:2.2.5-7.el8.i686.rpm","gd-debugsource-0:2.2.5-7.el8.x86_64.rpm","gd-devel-0:2.2.5-7.el8.aarch64.rpm","gd-devel-0:2.2.5-7.el8.i686.rpm","gd-devel-0:2.2.5-7.el8.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4659","url":"https://access.redhat.com/errata/RHSA-2020:4659","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -0,0 +1 @@
|
||||
{"advisory":{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2020:4689","synopsis":"Moderate: openwsman security update","severity":"SEVERITY_MODERATE","topic":"An update is available for openwsman.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects.\n\nSecurity Fix(es):\n\n* openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"1674478","sourceBy":"Red Hat","sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=1674478","description":""}],"cves":[{"name":"CVE-2019-3833","sourceBy":"MITRE","sourceLink":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3833","cvss3ScoringVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3BaseScore":"7.5","cwe":"CWE-835"}],"references":[],"publishedAt":"2020-11-03T12:27:08Z","rpms":{"Rocky Linux 8":{"nvras":["libwsman1-0:2.6.5-7.el8_3.aarch64.rpm","libwsman1-0:2.6.5-7.el8_3.i686.rpm","libwsman1-0:2.6.5-7.el8_3.x86_64.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.i686.rpm","libwsman1-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","libwsman-devel-0:2.6.5-7.el8_3.aarch64.rpm","libwsman-devel-0:2.6.5-7.el8_3.i686.rpm","libwsman-devel-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-0:2.6.5-7.el8_3.src.rpm","openwsman-client-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-client-0:2.6.5-7.el8_3.i686.rpm","openwsman-client-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-client-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.i686.rpm","openwsman-debugsource-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-python3-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-python3-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-python3-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-python3-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-server-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-server-0:2.6.5-7.el8_3.i686.rpm","openwsman-server-0:2.6.5-7.el8_3.x86_64.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.aarch64.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.i686.rpm","openwsman-server-debuginfo-0:2.6.5-7.el8_3.x86_64.rpm"]}},"rebootSuggested":false,"buildReferences":[],"source":{"name":"RHSA-2020:4689","url":"https://access.redhat.com/errata/RHSA-2020:4689","vendor":"Red Hat","license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/"}}}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user