bind security update

32:9.16.23-5 - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178 32:9.16.23-4 - Export bind-doc package 2104863 32:9.16.23-3 - Tighten cache protection against record from...

Image Builder security, bug fix, and enhancement update

cockpit-composer 41-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095, Orabug:34398922 41-1 - New upstream release 40-1 - New upstream release 39-1 - New upstream release 38-1 - New upstream release 37-1 - New upstream release 35-1 - New upstream release 34-1 - New...

kernel security, bug fix, and enhancement update

5.14.0-162.6.11.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

python3.9 security, bug fix, and enhancement update

3.9.14-1 - Update to 3.9.14 - Security fixes for CVE-2020-10735 and CVE-2021-28861 Resolves: rhbz2120642, rhbz1834423, rhbz2128249 3.9.13-3 - Fix testgetciphers in testssl.py for FIPS mode Resolves: rhbz2058233 3.9.13-2 - Security fix for CVE-2015-20107 Resolves: rhbz2075390 3.9.13-1 - Update to...

dhcp security and enhancement update

12:4.4.2-17.b1 - omshell: add support for hmac-sha512 algorithm 2083553 12:4.4.2-16.b1 - Fix for CVE-2021-25220...

podman security and bug fix update

2:4.2.0-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.2.0-3 - fix dependency in test subpackage - Related: 2061316 2:4.2.0-2 - readd catatonit - Related: 2061316 2:4.2.0-1 - update to latest content of...

skopeo security and bug fix update

2:1.9.2-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: 2061316 2:1.9.1-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: 2061316 2:1.9.0-1 - update to https://github.com/containers/skopeo/releases/tag/v1.9.0 - Related: 2061316...

redis security and bug fix update

6.2.7-1 - rebase to 6.2.7 2083151...

python39:3.9 security update

python39 3.9.13-2 - Fix for CVE-2022-42919 Resolves: rhbz2138705...

libtiff security update

4.4.0-2 - Update to version 4.4.0 - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354 CVE-2022-1355...

grafana security, bug fix, and enhancement update

7.5.15-3 - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working ...

yajl security update

...

dotnet7.0 security, bug fix, and enhancement update

7.0.100-0.4.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134642 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 - Resolves: RHBZ2134642...

openssl security update

3.0.1-43.0.1 - Replace upstream references Orabug: 34340177 1:3.0.1-43 - CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests Resolves: CVE-2022-3602 1:3.0.1-42 - CVE-2022-3602: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602...

device-mapper-multipath security update

0.8.4-28.1 - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133995...

xorg-x11-server security update

1.20.4-19 - CVE fix for: CVE-2022-3550, CVE-2022-3551 Resolves: rhbz2140765, rhbz2140770...

fribidi security update

1.0.4-9 - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310. Resolves: rhbz2050085, rhbz2050068, rhbz2050062 - Drop --disable-docs from %configure. no such options available...

dnsmasq security and bug fix update

2.79-24 - Prevent endless loop in forwardquery 2120357 2.79-23 - Add IPv6 ntp-server suboptions support 2049691 2.79-22 - Prevent use after free in dhcp6norelay CVE-2022-0934...

qt5 security, bug fix, and enhancement update

5.15.3-1 - 5.15.3 Resolves: bz2061377...

php:7.4 security, bug fix, and enhancement update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php 7.4.30-1 - rebase to 7.4.30 2099615 7.4.19-3 - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 7.4.19-2 - fix SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 - fix Local privilege escalation via...

poppler security and bug fix update

20.11.0-5 - Dont run out of file for Hints - Rebuild for 2096452 - Resolves: 2090969, 2096452...

flatpak-builder security and bug fix update

1.0.14-2 - Fix CVE-2022-21682 2042007 1.0.14-1 - Update to 1.0.14 2047312...

webkit2gtk3 security and bug fix update

glib2 2.56.4-159.0.1 - Rebuild with python 36 Orabug: 34701176 2.56.4-159 - Add --interface-info-body|header modes to gdbus-codegen - Related: 2061994 webkit2gtk3...

rsync security and enhancement update

3.1.3-19 - Resolves: 2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.1.3-18 - Resolves: 2111175 - remote arbitrary files write inside the directories of connecting peers 3.1.3-17 - Related: 2043753 - New option should...

openjpeg2 security update

2.4.0-5 - Fix CVE-2022-1122...

dovecot security update

1:2.3.16-3 - fix possible privilege escalation when similar master and non-master passdbs are used 2106231...

gstreamer1-plugins-good security update

1.16.1-3 - Add patches for matroskademux. CVE-2021-3497 - Resolves: rhbz1948942...

libldb security, bug fix, and enhancement update

2.5.2-2 - resolves: rhbz2108998 - Rebuild to include python3-ldb-devel in CRB 2.5.2-1 - Rebase to version 2.5.2 - resolves: rhbz2109016 - Fix CVE-2022-32746 2.5.1-1 - related: rhbz2077484 - Rebase to version 2.5.1 2.5.0-1 - resolves: rhbz2077484 - Rebase to version 2.5.0...

libreoffice security update

6.4.7.2-11.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor=Oracle America, Inc. - Added the --with-hamcrest option to configure. 1:6.4.7.2-11 - Resolves: rhbz2060559 CVE-2021-25636...

gdisk security update

1.0.3-11 - Fix double byteswap on big-endian systems also while reading partition names resolves: 2065205 1.0.3-10 - Fix CVE-2021-0308 resolves: 2052364...

pki-core:10.6 and pki-deps:10.6 security and bug fix update

apache-commons-collections apache-commons-net 3.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 3.6-1 - Update to upstream version 3.6 jss 4.9.4-1 - Rebase to JSS 4.9.4 - Bug 2013674 - JSS cannot be proper...

wavpack security update

5.1.0-16 - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269...

httpd:2.4 security update

httpd 2.4.37-51.0.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracles index page oracleindex.html 2.4.37-51 - Resolves: 2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via aprwrite - Resolves: 2097031 - CVE-2022-28615 httpd:2.4/httpd:...

php:8.0 security, bug fix, and enhancement update

libzip 1.7.3-1 - update to 1.7.3 php-pecl-apcu 5.1.20-1 - update to 5.1.20 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.1.2-1 - update to 3.1.2 rhbz2030322...

e2fsprogs security and bug fix update

1.45.6-5 - Update e2fsprogs with upstream fixes and improvements 2083621 - Fix out-of-bounds read/write via crafter filesystem 2073548...

Unbreakable Enterprise kernel security update

5.4.17-2136.313.6 - Uninitialized variable imageext in fixupvdsoexception of extable.c Alok Tiwari Orabug: 33000550 - NFSD: fix use-after-free on source server when doing inter-server copy Dai Ngo Orabug: 34475857 - EDAC/mceamd: Do not load edacmceamd module on guests Smita Koralahalli Orabug:...

xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update

xorg-x11-server 1.20.11-9 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108156, rhbz2108161 1.20.11-8 - Rebuild again for ipv6 xtrans fix Related: 2075132 1.20.11-6 - Rebuild for ipv6 xtrans fix Related: 2075132 xorg-x11-server-Xwayland 21.1.3-6 - CVE fix...

unbound security, bug fix, and enhancement update

1.16.2-2 - Require openssl tool for unbound-keygen 2018806 1.16.2-1 - Update to 1.16.2 2027735 1.16.0-2 - Restart keygen service before every unbound start 1959468 1.16.0-1 - Upgrade to 9.16.0 2027735 - Update to recent version with compatibility with RHEL8 2027735 - Ensure also source level...

freetype security update

2.9.1-9 - Guard face-size - Resolves: 2079279 2.9.1-8 - Properly guard faceindex - Resolves: 2079261 2.9.1-7 - Do not search for windres - Resolves: 2079270 2.9.1-6 - Avoid invalid face index - Resolves: 2079270 2.9.1-5 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves...

container-tools:4.0 security and bug fix update

buildah 1:1.24.5-2 - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 https://github.com/containers/buildah/commit/8cc4586 - Related: 2061390 1:1.24.5-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.24...

protobuf security update

3.5.0-15 - Applied patch for for CVE-2021-22570 2050494...

nodejs:18 security update

nodejs 1:18.8.0-1 - Rebase to version 18.8.0 - Include sources for WASM blobs nodejs-packaging 2021.06-4 - NPM bundler: also find namespaced bundled dependencies 2021.06-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora35MassRebuild 2021.06-2 - Fix hard-coded output directory in the bundler...

virt:ol and virt-devel:ol security, bug fix, and enhancement update

libguestfs 1.44.0-9.0.1 - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.44.0-9 - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2101280 1:1.44.0-8 - Obsolete ol...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.313.6 - Uninitialized variable imageext in fixupvdsoexception of extable.c Alok Tiwari Orabug: 33000550 - NFSD: fix use-after-free on source server when doing inter-server copy Dai Ngo Orabug: 34475857 - EDAC/mceamd: Do not load edacmceamd module on guests Smita Koralahalli Orabug:...

nodejs:14 security update

nodejs 1:14.20.1-2 - Record issues fixed in the current version Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 Resolves: CVE-2022-0235 1:14.20.1-1 - Rebase to version 14.20.1 Resolves: CVE-2022-35256 nodejs-packaging 23-3 - Updated - Removed pathfix.py 23-2 - Rebuilt for...

xmlrpc-c security update

1.51.0-8 - Address some Coverity issues in the patch set 1.51.0-7 - lib: Prevent more integer overflows CVE-2022-22822 to CVE-2022-22827 2058567, 2058576, 2058582, 2058589, 2058595, 2058602 - Prevent integer overflow on mgroupSize in doProlog CVE-2021-46143 2058560...

openblas security update

0.3.15-4 - Fix out-of-bounds read in larrv - Resolves: CVE-2021-4048...

container-tools:3.0 security update

buildah 1.19.9-6 - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 https://github.com/containers/buildah/commit/6d7f496 - Related: 2061390 1.19.9-5 - update to the latest content of https://github.com/containers/buildah/tree/release-1.19...

grafana security, bug fix, and enhancement update

7.5.15-3 - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working ...

grafana-pcp security update

3.2.0-2 - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read -...