dnsmasq security and bug fix update

2.85-5 - Prevent endless loop in forwardquery 2120711 2.85-4 - Prevent use after free in dhcp6norelay CVE-2022-0934...

samba security, bug fix, and enhancement update

4.16.4-101 - resolves: rhbz2121317 - Do not require samba package in python3-samba 4.16.4-100 - Rebase to version 4.16.4 - resolves: rhbz2108332 - Fix CVE-2022-32742 4.16.3-101 - related: rhbz2077487 - Rebase Samba to 4.16.3 - resolves: rhbz2097655 - The pcap background queue process should not b...

qt5 security and bug fix update

5.15.3-1 - 5.15.3 Resolves: bz2061352...

container-tools:ol8 security, bug fix, and enhancement update

aardvark-dns 2:1.1.0-5 - fix 'Two aardvark-dns instances trying to use the same port on the same interface' - Resolves: 2130234 buildah 1:1.27.2-2 - update to the latest content of https://github.com/containers/buildah/tree/release-1.27 https://github.com/containers/buildah/commit/c43a389 -...

mingw-gcc security and bug fix update

12.0.1-11.2 - Bump release and rebuild resolves: rhbz2096010 12.0.1-11.1 - Rebase to Fedora Rawhide resolves: rhbz2080170...

swtpm security and bug fix update

0.7.0-3.20211109gitb79fd91 - Disable OpenSSL FIPS mode to avoid libtpms failures Resolves: rhbz2090219 0.7.0-2.20211109gitb79fd91 - Add fix for CVE-2022-23645. Resolves: rhbz2056518...

libvirt security, bug fix, and enhancement update

8.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 8.5.0-7 - securityselinux: Dont ignore NVMe disks when setting image label rhbz2121441 8.5.0-6 - qemuprocess: Destroy domains namespace after killing QEMU rhbz2121141 8.5.0-5 - rpc: Pass OPENSSLCONF through to ssh invocations...

mingw-glib2 security and bug fix update

2.70.1-2 - Rebuild for mingw-zlib update resolves: rhbz2116278...

libldb security, bug fix, and enhancement update

2.5.2-1 - Rebase to version 2.5.2 - resolves: rhbz2109017 - Fix CVE-2022-32746 2.5.1-1 - related: rhbz2077490 - Rebase to version 2.5.1 2.5.0-1 - resolves: rhbz2077490 - Rebase to version 2.5.0...

buildah security and bug fix update

1.27.0-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 1:1.27.0-2 - fix CVE-2022-2990 - Related: 2061316 1:1.27.0-1 - update to https://github.com/containers/buildah/releases/tag/v1.27.0 - Related: 2061316 1:1.26.4-2 - add buildah-tutorial to test subpackage -...

dovecot security and enhancement update

1:2.3.16-7.0.1 - do not run systemd commands during leapp upgrade Orabug: 34680501 1:2.3.16-7 - fix possible privilege escalation when similar master and non-master passdbs are used 2106232 1:2.3.16-6 - fix possible nonzero return value of postinst script2053368 1:2.3.16-5 - workaround sysuers...

speex security update

1.2.0-11 - CVE-2020-23903 speex: divide by zero in readsamples via crafted WAV file - Resolves: CVE-2020-23903...

podman security and bug fix update

2:4.2.0-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.2.0-3 - fix dependency in test subpackage - Related: 2061316 2:4.2.0-2 - readd catatonit - Related: 2061316 2:4.2.0-1 - update to latest content of...

python-lxml security update

4.6.5-3 - Security fix for CVE-2022-2309 - Resolves: rhbz2107571...

libtirpc security update

1.3.3 - Rebased to libtirpc-1.3.3 bz 2118157...

qemu-kvm security, bug fix, and enhancement update

7.0.0-13 - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch bz2117546 - kvm-i386-do-kvmputmsrfeaturecontrol-first-thing-when.patch bz2117546 - Resolves: bz2117546 RHEL9.1 Guests in VMX root operation fail to reboot with QEMUs systemreset command 7.0.0-12 -...

frr security, bug fix, and enhancement update

Tue Jun 14 2022 Michal Ruprich - 8.2.2-4 - Resolves: 2095404 - frr use systemd-sysusers 8.2.2-3 - Resolves: 2081304 - Enhanced TMT testing for centos-stream 8.2.2-2 - Resolves: 2069571 - the dynamic routing setup does not work any more 8.2.2-1 - Resolves: 2069563 - Rebase frr to version 8.2.2...

libguestfs security, bug fix, and enhancement update

1.48.4-2.0.1 - Add btrfs-progs to the packages installed in the appliance Orabug: 34137448 - Replace upstream references from a description tag - Fix build on Oracle Linux Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.48.4-2 - Rebase to new stable branch version 1.48.4 resolve...

virt-v2v security, bug fix, and enhancement update

2.0.7-6.0.1 - Replaced bugzilla.oracle.com references Orabug: 34202300 - replaced upstream references Orabug:34089586 1:2.0.7-6 - Install qemu-ga package during conversion resolves: rhbz2028764 1:2.0.7-5 - Remove LVM2 devices file during conversion resolves: rhbz2112801 - Add support for Zstandar...

harfbuzz security update

2.7.4-8 - Resolves:rh2103849 - Update tests.yaml 2.7.4-7 - Resolves:rh2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml 2.7.4-6 - Resolves:rh2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c...

dpdk security and bug fix update

21.11.2-1 - Rebase to 21.11.2 2126159 - Includes fixes for CVE-2022-2132 2107173 and CVE-2022-28199 2123616 21.11.1-1 - Rebase to 21.11.1 2106856 - Includes fix for CVE-2021-3839 2026642...

fribidi security update

1.0.10-6.el9.2 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz2050086, rhbz2050069, rhbz2050063...

389-ds-base security, bug fix, and enhancement update

2.1.3-4 - Bump version to 2.1.3-4 - Resolves: Bug 1872451 - Fix regression with dscreate template 2.1.3-3 - Bump version to 2.1.3-3 - Resolves: Bug 2118765 2.1.3-2 - Bump version to 2.1.3-2 - Resolves: Bug 2118765 - SIGSEGV in syncrepl 2.1.3-1 - Bump version to 2.1.3-1 - Resolves: Bug 2061801 -...

php security, bug fix, and enhancement update

8.0.20-3 - snmp3 calls using authPriv or authNoPriv immediately return false 2104630 8.0.20-2 - fix patch41 not applied use system nikic/php-parser when available 8.0.20-1 - rebase to 8.0.20 2095752 - clean unneeded dependency on useradd command 2095447 - add upstream patch to initialize pcre...

wavpack security update

5.4.0-5 - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269...

hsqldb security update

1:1.8.1.3-15 - Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853...

protobuf security update

3.14.0-13 - Rebuilt for test fixes 3.14.0-12 - Rebuilt for test fixes 3.14.0-11 - Applied patch for for CVE-2021-22570 2055641...

skopeo security and bug fix update

2:1.9.2-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: 2061316 2:1.9.1-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: 2061316 2:1.9.0-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.0 - Related: 2061316...

freetype security update

2.10.4-9 - Guard face-size - Resolves: 2079280 2.10.4-8 - Properly guard faceindex - Resolves: 2079262 2.10.4-7 - Avoid invalid face index - Resolves: 2079271...

flac security update

1.3.3-10 - handle end-of-stream when encoding with verification CVE-2021-0561...

xorg-x11-server security and bug fix update

1.20.11-11 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108157, rhbz2108162...

ignition security, bug fix, and enhancement update

2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux subpackage to -validate-redistributable - Add static Linux binaries to -redistributable - Fix macro invocation in comment - Avoid kernel lockdow...

Image Builder security, bug fix, and enhancement update

cockpit-composer 41-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095, Orabug:34398922 41-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release 37-1 - New upstream release 35-1 - New upstream release 34-1 - New...

unbound security, bug fix, and enhancement update

1.16.2-2 - Require openssl tool for unbound-keygen 2116802 1.16.2-1 - Update to 1.16.2 2087120 1.16.0-3 - Disable ED25519 and ED448 in FIPS mode 2079548 1.16.0-2 - Restart keygen service before every unbound start 2094336 1.16.0-1 - Update to 1.16.0 2087120 1.15.0-1 - Update to 1.15.0 2030608 -...

mingw-zlib security update

1.2.12-2 - Fix changelog Related: rhbz2068371 1.2.12-1 - Bump version to 1.2.12 to fix CVE-2018-25032 Related: rhbz2068371...

redis security and bug fix update

6.2.7-1 - rebase to 6.2.7 2083151...

python39:3.9 security update

python39 3.9.13-2 - Fix for CVE-2022-42919 Resolves: rhbz2138705...

curl security update

7.76.1-19 - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208 7.76.1-18 - fix too eager reuse of TLS and SSH connections CVE-2022-27782 7.76.1-17 - fix leak of SRP credentials in redirects...

libtiff security update

4.4.0-2 - Update to version 4.4.0 - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354 CVE-2022-1355...

yajl security update

...

runc security update

4:1.1.4-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.1.4 - Related: 2061316...

guestfs-tools security, bug fix, and enhancement update

1.48.2-5 - Rebase to guestfs-tools 1.48.2 resolves: rhbz2059286 - Default to --selinux-relabel in various tools resolves: rhbz2075718, rhbz2089748 - Add lvm system.devices cleanup operation to virt-sysprep resolves: rhbz2072493 - Refactor virt-customize --install, --update options in common...

httpd security, bug fix, and enhancement update

2.4.53-7.0.1 - Replace index.html with Oracles index page oracleindex.html. 2.4.53-7 - Resolves: 2094997 - CVE-2022-26377 httpd: modproxyajp: Possible request smuggling - Resolves: 2097032 - CVE-2022-28615 httpd: out-of-bounds read in apstrcmpmatch - Resolves: 2098248 - CVE-2022-31813 httpd:...

bind security update

32:9.16.23-5 - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178 32:9.16.23-4 - Export bind-doc package 2104863 32:9.16.23-3 - Tighten cache protection against record from...

firefox security update

102.5.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.5.0-1 - Update to 102.5.0 build1...

thunderbird security update

102.5.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.5.0-2 - Update to 102.5.0 build2 102.5.0-1 - Update to 102.5.0 build1...

firefox security update

102.5.0-1.0.1 - Updated homepages to use https Orabug: 34648274 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.5.0-1 - Update to 102.5.0 build1 102.4.0-1 - Update to 102.4.0 build1 102.3.0-7 - Fix for expat CVE-2022-40674 and non...

python3.9 security, bug fix, and enhancement update

3.9.14-1 - Update to 3.9.14 - Security fixes for CVE-2020-10735 and CVE-2021-28861 Resolves: rhbz2120642, rhbz1834423, rhbz2128249 3.9.13-3 - Fix testgetciphers in testssl.py for FIPS mode Resolves: rhbz2058233 3.9.13-2 - Security fix for CVE-2015-20107 Resolves: rhbz2075390 3.9.13-1 - Update to...

dhcp security and enhancement update

12:4.4.2-17.b1 - omshell: add support for hmac-sha512 algorithm 2083553 12:4.4.2-16.b1 - Fix for CVE-2021-25220...

e2fsprogs security update

1.46.5-3 - Add sanity check to extent manipulation 2073549...