.NET Core security update

2.1.514-2 - Update to new tarball for the release - Resolves: RHBZ1830065 2.1.514-1 - Update to .NET Core SDK 2.1.514 and Runtime 2.1.18 - Resolves: RHBZ1830065...

kernel security and bug fix update

4.18.0-193.1.22.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.1.22 - net netlabel: cope with NULL catmap Paolo Abeni 1827249...

container-tools:1.0 security and bug fix update

buildah 1.5-4.0.1.gite94b4f9 - Fixes troubles with oracle registry login Orabug: 29937283 1.5-4.gite94b4f9 - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: 1819431 container-selinux 2:2.124.0-1.gitf958d0c - update to...

kernel security update

2.6.32-754.29.2.OL6 - Update genkey bug 25599697 2.6.32-754.29.2 - net netlabel: cope with NULL catmap Paolo Abeni 1827226 CVE-2020-10711...

libreswan security update

3.29-7.0.1 - Add libreswan-oracle.patch to detect Oracle Linux distro 3.29-7 - Resolves: rhbz1814935 CVE-2020-1763 doS attack via malicious IKEv1 informational exchange message rhel-8.2.0.z...

thunderbird security update

68.8.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.8.0-1 - Update to 68.8.0 build2...

squid:4 security update

squid 7:4.4-8.1 - Resolves: 1828368 - CVE-2019-12519 squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow - Resolves: 1828367 - CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution...

container-tools:2.0 security update

buildah 1.11.6-7.0.1 - Fixes troubles with oracle registry login Orabug: 29937283 1.11.6-7 - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: 1819393 conmon 2:2.0.6-1.0.1 - Remove upstream references Orabug: 30871880...

thunderbird security update

68.8.0-1.0.1.el82 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.8.0-1 - Update to 68.8.0 build2...

container-tools:ol8 security update

buildah 1.11.6-8.0.1 - Fixes troubles with oracle registry login Orabug: 29937283 1.11.6-8 - fix 'CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process' - Resolves: 1817742 1.11.6-7 - fix 'COPY command takes long time with buildah' - Resolves...

Unbreakable Enterprise kernel security update

4.14.35-1902.302.2 - KVM: x86: Protect pmuintel.c from Spectre-v1/L1TF attacks Marios Pomonis Orabug: 31191092 - KVM: x86: Protect MSR-based index computations in fixedmsrtosegunit from Spectre-v1/L1TF attacks Marios Pomonis Orabug: 31191092 - KVM: x86: Protect x86decodeinsn from Spectre-v1/L1TF...

firefox security update

68.8.0-1.0.1.el82 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 Wed Apr 29 2020 Jan Horak - Update to 68.8.0 build1 68.7.0-3 - Added fix for rhbz1821418...

targetcli security update

2.1.51-4 - Increase the release version 2.1.51-3 - targetclid.sock allows unprivileged user to execute commands 2.1.51-2 - Create the target/pr directory when installing the package...

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.45.1 - HID: hiddev: do cleanup in failure of opening a device Hillf Danton Orabug: 31206361 CVE-2019-19527 - HID: hiddev: avoid opening a disconnected device Hillf Danton Orabug: 31206361 CVE-2019-19527 - HID: Fix assumption that devices have inputs Alan Stern Orabug: 312086...

squid security update

7:3.5.20-15.1 - Resolves: 1828359 - CVE-2020-11945 squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution - Resolves: 1828360 - CVE-2019-12519 squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow -...

firefox security update

68.8.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file Wed Apr 29 2020 Jan Horak - Update to 68.8.0 build1 68.7.0-3 - Added fix for rhbz1821418...

gnutls security update

3.6.8-10 - Fix CVE-2020-11501 1826176...

libvirt security update

5.7.0-13.el7 - domain groups: Fix multiple Domain Group vCPU administration flaws Wim ten Have Orabug: 31145304 - qemu: fix missing if definedENABLEEXADATA Menno Lageman - build: Fix qemu-submodule-init syntax-check issue Wim ten Have - libvirt: Fix various introduced Fedora/RHEL build violations...

git security update

2.18.4-2 - Update to release 2.18.4 - Resolves: CVE-2020-11008...

Unbreakable Enterprise kernel security update

4.1.12-124.39.1 - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 Arun Easi Orabug: 30372266 - qla2xxx: Fix device discovery when FCP2 device is lost. Arun Easi Orabug: 30372266 - brcmfmac: add subtype check for event handling in data path John Donnelly Orabug: 30776354 CVE-2019-9503 -...

kernel security, bug fix, and enhancement update

4.18.0-193.el8.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-193.el8 - kvm KVM: PPC: Book3S HV: Use gfntopfnmemslot in HPT page fau...

libtiff security update

4.0.9-17 - Add upstream test suite and enable it in gating 4.0.9-16 - Fix CVE-2019-14973 1755705...

memcached security update

0:1.5.9-3 - fix null-pointer dereference in 'lru mode' and 'lru tempttl' 1709408 - CVE-2019-11596...

libreoffice security and bug fix update

6.0.6.1-20.0.1.el8 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 1:6.0.6.1-20 - Resolves: rhbz1743958 CVE-2019-9849, etc. - Resolves: rhbz1648281 Junk character gets added when some emojis are...

curl security update

7.61.1-12 - double free due to subsequent call of realloc CVE-2019-5481 - fix heap buffer overflow in function tftpreceivepacket CVE-2019-5482 - fix TFTP receive buffer overflow CVE-2019-5436...

gcc security and bug fix update

8.3.1-5.0.3 - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested include This is the same bug as gcc upstream PR90581 from Gcc9: gcc9-pr90581.patch - Fix Orabug 29541051 - confusing error message when there is a problem with ASANOPTIONS 'ERROR: expected '='' This is the...

php:7.2 security, bug fix, and enhancement update

...

freeradius:3.0 security update

...

bind security, bug fix, and enhancement update

32:9.11.13-3 - Fix rwlock to be thread-safe 1740511 32:9.11.13-2 - Release GeoIP data on reload 1790879 32:9.11.13-1 - Update to 9.11.13 32:9.11.12-5 - Report failures on systemctl reload 1739428 32:9.11.12-4 - dhcp: Use monotonic time for detecting time jumps if available 1729211 32:9.11.12-3 -...

ibus and glib2 security and bug fix update

2.56.4-8 - Backport patches for GDBus auth Resolves: 1777213...

systemd security, bug fix, and enhancement update

239-29.0.1.el8 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate systemd-pstore.service file Orabug: 30230056 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug:...

fontforge security update

20170731-14 - Resolves:rh1790974 - CVE-2020-5395:out-of-bounds write in sfd.c...

pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

...

binutils security and bug fix update

2.30-73.0.1 - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni 2.30-68.0.2 - Backport the non-cycle-detecting-capable deduplicating CTF linker - Backport a fix for an upstream hashtab crash no upstream bug number, triggered by the above. - Fix deduplication of...

tcpdump security update

14:4.9.2-6 - Resolves: 1715423 - tcpdump pre creates user and groups unconditionally - Resolves: 1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap...

libsndfile security update

1.0.28-10 - fix CVE-2018-19661 and CVE-2018-19662 - buffer over-read in the function i2alawarray in alaw 1673085 1.0.28-9 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598482...

exiv2 security, bug fix, and enhancement update

exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available Resolves: bz1800472 0.27.2-3 - Fix infinite loop and hang in Jp2Image::readMetadata Resolves: bz1800472 0.27.2-2 Rebuild Resolves: bz1651917 0.27.2...

irssi security update

1.1.1-3 - Fixed use after free when sending SASL login to server Resolves: CVE-2019-13045...

gdb security and bug fix update

8.2-11.0.1 - Import Implement s390x arch13 support Andreas Krebbel, RH BZ 1768593. 8.2-8.0.2 - Forward-port patches from ol8-u1: gdb-ctf-forward-type.patch gdb-ctf-func-args.patch gdb-ctf-optout-var.patch - Reviewed-by: Jose E. Marchesi 8.2-8.0.1 - Forward-port patches from ol8-u1: gdb-ctf.patch...

patch security and bug fix update

2.7.6-11 - Related: 1733565, apply the patch correctly 2.7.6-10 - CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given - Resolves: 1665928, patch has a huge error output and segfaults when the file to be patched does not exist...

liblouis security and bug fix update

2.6.2-21 - A further Coverity fix 1602585 2.6.2-20 - Fix buffer overruns found by Coverity 1602585 2.6.2-19 - Fix two issues found by Coverity 1602585 2.6.2-18 - Apply patch for CVE-2018-12085 1589942 2.6.2-17 - Fix CVE-2018-11577 1585906 - Fix CVE-2018-11684 1588632 - Fix CVE-2018-11685 1588637 ...

python-pip security update

9.0.3-16 - Add four new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074 Resolves: rhbz1649153 Resolves: rhbz1700824 Resolves: rhbz1702473 Resolves: rhbz1643829...

edk2 security, bug fix, and enhancement update

20190829git37eef91017ad-9.el8 - edk2-OvmfPkg-QemuVideoDxe-unbreak-secondary-vga-and-bochs.patch bz1806359 - Resolves: bz1806359 bochs-display cannot show graphic wihout driver attach 20190829git37eef91017ad-8.el8 - edk2-MdeModulePkg-Enable-Disable-S3BootScript-dynamically.patch bz1801274 -...

sqlite security and bug fix update

3.26.0-6 - Fixed issues found by covscan 3.26.0-5 - Fixed CVE-2019-13752 1786529 - Fixed CVE-2019-13753 1786535 - Fixed CVE-2019-13734 1786509 - Fixed CVE-2019-19924 1789776 - Fixed CVE-2019-19923 1789812 - Fixed CVE-2019-19925 1789808 - Fixed CVE-2019-19959 1789823...

GStreamer, libmad, and SDL security, bug fix, and enhancement update

gstreamer1 1.16.1-2 - Update to 1.16.2 for correctly pick up for side gating - Resolves: rhbz1756299 1.16.1-1 - Update to 1.16.1 - Enable libcap for the ptp helper permissions - Resolves: rhbz1756299 gstreamer1-plugins-bad-free 1.16.1-1 - Update to 1.16.1 - Remove upstreamed patches - Remove...

mod_auth_mellon security and bug fix update

0.14.0-11 - Resolves: rhbz1731053 - CVE-2019-13038 modauthmellon: an Open Redirect via the login?ReturnTo= substring which could facilitate information theft rhel-8 0.14.0-10 - Resolves: rhbz1761774 - modauthmellon fix for AJAX header name X-Requested-With...

unzip security update

6.0-43 - Update the man page with the new exit code introduced in 6.0-42 - Related: CVE-2019-13232 6.0-42 - Fix CVE-2019-13232 - Resolves: CVE-2019-13232...

qt5 security, bug fix, and enhancement update

python-qt5 5.13.1-1 - 5.13.1 Resolves: bz1775603 qgnomeplatform 0.4-3 - Rebuild qt5 Resolves: bz1774418 qt5 5.12.5-3 - Re-add srpm macros, just leave them empty Resolves: bz1733133 5.12.5-2 - Drop srpm macros as we dont ship qtwebengine Resolves: bz1733133 5.12.5-1 - 5.12.5 + sync with Fedora...

evolution security and bug fix update

evolution 3.28.5-12 - Add patch for RH bug 1778799 New Mail account wizard ignores email address change 3.28.5-11 - Update patch for RH bug 1764563 CVE-2018-15587: Reposition signature bar 3.28.5-10 - Add patch for RH bug 1764563 CVE-2018-15587: Reposition signature bar - Add patch for RH bug...

samba security, bug fix, and enhancement update

openchange 2.3-24.0.1 - Add patch to build against samba 4.11 2.3-24 - Rebuild for newer samba and libldb samba 4.11.2-13 - resolves: 1802182 - Fix join using netbios name 4.11.2-12 - related: 1781232 - Improve debug output of smbclient - resolves: 1794461 - Do not return bogus inode numbers in...