9679 matches found
qt5 security and bug fix update
5.15.3-1 - 5.15.3 Resolves: bz2061352...
php security, bug fix, and enhancement update
8.0.20-3 - snmp3 calls using authPriv or authNoPriv immediately return false 2104630 8.0.20-2 - fix patch41 not applied use system nikic/php-parser when available 8.0.20-1 - rebase to 8.0.20 2095752 - clean unneeded dependency on useradd command 2095447 - add upstream patch to initialize pcre...
container-tools:ol8 security, bug fix, and enhancement update
aardvark-dns 2:1.1.0-5 - fix 'Two aardvark-dns instances trying to use the same port on the same interface' - Resolves: 2130234 buildah 1:1.27.2-2 - update to the latest content of https://github.com/containers/buildah/tree/release-1.27 https://github.com/containers/buildah/commit/c43a389 -...
httpd security, bug fix, and enhancement update
2.4.53-7.0.1 - Replace index.html with Oracles index page oracleindex.html. 2.4.53-7 - Resolves: 2094997 - CVE-2022-26377 httpd: modproxyajp: Possible request smuggling - Resolves: 2097032 - CVE-2022-28615 httpd: out-of-bounds read in apstrcmpmatch - Resolves: 2098248 - CVE-2022-31813 httpd:...
xorg-x11-server security and bug fix update
1.20.11-11 - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070 Resolves: rhbz2108157, rhbz2108162...
dotnet7.0 security, bug fix, and enhancement update
7.0.100-0.4.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134642 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 - Resolves: RHBZ2134642...
openssl security update
3.0.1-43.0.1 - Replace upstream references Orabug: 34340177 1:3.0.1-43 - CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests Resolves: CVE-2022-3602 1:3.0.1-42 - CVE-2022-3602: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602...
device-mapper-multipath security update
0.8.4-28.1 - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz 2133995...
xorg-x11-server security update
1.20.4-19 - CVE fix for: CVE-2022-3550, CVE-2022-3551 Resolves: rhbz2140765, rhbz2140770...
fribidi security update
1.0.4-9 - Fix security issues CVE-2022-25308, CVE-2022-25309, CVE-2022-25310. Resolves: rhbz2050085, rhbz2050068, rhbz2050062 - Drop --disable-docs from %configure. no such options available...
rsync security and enhancement update
3.1.3-19 - Resolves: 2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.1.3-18 - Resolves: 2111175 - remote arbitrary files write inside the directories of connecting peers 3.1.3-17 - Related: 2043753 - New option should...
freetype security update
2.9.1-9 - Guard face-size - Resolves: 2079279 2.9.1-8 - Properly guard faceindex - Resolves: 2079261 2.9.1-7 - Do not search for windres - Resolves: 2079270 2.9.1-6 - Avoid invalid face index - Resolves: 2079270 2.9.1-5 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves...
container-tools:ol8 security, bug fix, and enhancement update
aardvark-dns 2:1.1.0-4 - remove windows binaries and regenerate vendor tarball - Related: 2061390 2:1.1.0-3 - add gating.yaml - Related: 2061390 2:1.1.0-2 - bump Epoch to preserve upgrade path - Related: 2061390 1.1.0-1 - initial import - Related: 2061390 buildah 1:1.27.0-2 - fix CVE-2022-2990 -...
pki-core:10.6 and pki-deps:10.6 security and bug fix update
apache-commons-collections apache-commons-net 3.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 3.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 3.6-1 - Update to upstream version 3.6 jss 4.9.4-1 - Rebase to JSS 4.9.4 - Bug 2013674 - JSS cannot be proper...
wavpack security update
5.1.0-16 - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269...
libreoffice security update
6.4.7.2-11.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Build with --with-vendor=Oracle America, Inc. - Added the --with-hamcrest option to configure. 1:6.4.7.2-11 - Resolves: rhbz2060559 CVE-2021-25636...
nodejs:18 security update
nodejs 1:18.8.0-1 - Rebase to version 18.8.0 - Include sources for WASM blobs nodejs-packaging 2021.06-4 - NPM bundler: also find namespaced bundled dependencies 2021.06-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora35MassRebuild 2021.06-2 - Fix hard-coded output directory in the bundler...
virt:ol and virt-devel:ol security, bug fix, and enhancement update
libguestfs 1.44.0-9.0.1 - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to ol 1:1.44.0-9 - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2101280 1:1.44.0-8 - Obsolete ol...
Unbreakable Enterprise kernel-container security update
5.4.17-2136.313.6 - Uninitialized variable imageext in fixupvdsoexception of extable.c Alok Tiwari Orabug: 33000550 - NFSD: fix use-after-free on source server when doing inter-server copy Dai Ngo Orabug: 34475857 - EDAC/mceamd: Do not load edacmceamd module on guests Smita Koralahalli Orabug:...
openjpeg2 security update
2.4.0-5 - Fix CVE-2022-1122...
Unbreakable Enterprise kernel security update
5.4.17-2136.313.6 - Uninitialized variable imageext in fixupvdsoexception of extable.c Alok Tiwari Orabug: 33000550 - NFSD: fix use-after-free on source server when doing inter-server copy Dai Ngo Orabug: 34475857 - EDAC/mceamd: Do not load edacmceamd module on guests Smita Koralahalli Orabug:...
python39:3.9 and python39-devel:3.9 security update
Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 0.29.21-4 - Drop build dependency on coverage 0.29.21-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 0.29.21-2 - Re-enable tests. 0.29.21-1 - 0.29.21 scipy 1.5.4-3 - Specify LDFLAGS...
container-tools:3.0 security update
buildah 1.19.9-6 - update to the latest content of https://github.com/containers/buildah/tree/release-1.19 https://github.com/containers/buildah/commit/6d7f496 - Related: 2061390 1.19.9-5 - update to the latest content of https://github.com/containers/buildah/tree/release-1.19...
bind security update
32:9.11.36-5 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178 32:9.11.36-4 - Tighten cache protection against record from forwarders CVE-2021-25220 - Include test of forwarders 32:9.11.36-2 - Reduce memory used per-view on...
grafana security, bug fix, and enhancement update
7.5.15-3 - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working ...
python38:3.8 and python38-devel:3.8 security update
Cython 0.29.14-4 - Exclude unsupported i686 arch 0.29.14-3 - Unversioned binaries renamed 0.29.14-2 - Adjusted for Python 3.8 module in RHEL 8 - without emacs plugin 0.29.14-1 - Update to 0.29.14 1768034 - Python 2 subpackage has been removed scipy 1.3.1-4 - Exclude unsupported i686 arch 1.3.1-3 ...
Image Builder security, bug fix, and enhancement update
cockpit-composer 41-1.0.1 - Make per page documentation links point to Oracle Linux Orabug: 32013095 41-1 - New upstream release...
gstreamer1-plugins-good security update
1.16.1-3 - Add patches for matroskademux. CVE-2021-3497 - Resolves: rhbz1948942...
nodejs:14 security update
nodejs 1:14.20.1-2 - Record issues fixed in the current version Resolves: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-21824 Resolves: CVE-2022-0235 1:14.20.1-1 - Rebase to version 14.20.1 Resolves: CVE-2022-35256 nodejs-packaging 23-3 - Updated - Removed pathfix.py 23-2 - Rebuilt for...
poppler security and bug fix update
20.11.0-5 - Dont run out of file for Hints - Rebuild for 2096452 - Resolves: 2090969, 2096452...
qt5 security, bug fix, and enhancement update
5.15.3-1 - 5.15.3 Resolves: bz2061377...
php:8.0 security, bug fix, and enhancement update
libzip 1.7.3-1 - update to 1.7.3 php-pecl-apcu 5.1.20-1 - update to 5.1.20 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.1.2-1 - update to 3.1.2 rhbz2030322...
python27:2.7 security update
babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...
grafana-pcp security update
3.2.0-2 - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read -...
webkit2gtk3 security and bug fix update
glib2 2.56.4-159.0.1 - Rebuild with python 36 Orabug: 34701176 2.56.4-159 - Add --interface-info-body|header modes to gdbus-codegen - Related: 2061994 webkit2gtk3...
php:7.4 security, bug fix, and enhancement update
libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php 7.4.30-1 - rebase to 7.4.30 2099615 7.4.19-3 - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 7.4.19-2 - fix SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 - fix Local privilege escalation via...
bind9.16 security update
32:9.16.23-0.9.1 - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178 32:9.16.23-0.9 - Tighten cache protection against record from forwarders CVE-2021-25220 - Include test of...
Unbreakable Enterprise kernel security update
4.14.35-2047.519.2.1 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints'...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.519.2.1.el7 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints...
yajl security update
2.1.0-11 - fix CVE-2022-24795 - Related: 2061390...
container-tools:4.0 security and bug fix update
buildah 1:1.24.5-2 - update to the latest content of https://github.com/containers/buildah/tree/release-1.24 https://github.com/containers/buildah/commit/8cc4586 - Related: 2061390 1:1.24.5-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.24...
protobuf security update
3.5.0-15 - Applied patch for for CVE-2021-22570 2050494...
libtiff security update
4.0.9-23 - Fix various CVEs - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865 CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1355...
redis:6 security, bug fix, and enhancement update
6.2.7-1 - rebase to 6.2.7 1999873...
openblas security update
0.3.15-4 - Fix out-of-bounds read in larrv - Resolves: CVE-2021-4048...
kernel security, bug fix, and enhancement update
4.18.0-425.3.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
httpd:2.4 security update
httpd 2.4.37-51.0.1 - Set vstring per ORACLESUPPORTPRODUCT Orabug: 29892262 - Replace index.html with Oracles index page oracleindex.html 2.4.37-51 - Resolves: 2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via aprwrite - Resolves: 2097031 - CVE-2022-28615 httpd:2.4/httpd:...
dnsmasq security and bug fix update
2.79-24 - Prevent endless loop in forwardquery 2120357 2.79-23 - Add IPv6 ntp-server suboptions support 2049691 2.79-22 - Prevent use after free in dhcp6norelay CVE-2022-0934...