qemu security update

15:4.2.1-17.el7 - arm/acpi: fix an out of spec UID for PCI root Michael S. Tsirkin - arm/acpi: fix duplicated UID of PCI interrupt link devices Heyi Guo - arm/acpi: fix PCI PRT definition Heyi Guo - docs: fix references to docs/devel/atomics.rst Stefano Garzarella Orabug: 33659123 - rcu: do not...

libvirt libvirt-python security update

libvirt 5.7.0-33.el7 - qemu: refresh vNUMA/SMT pinning. Wim ten Have Orabug: 34083505 - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies Wim ten Have Orabug: 34023508 - nwfilter: fix crash when counting number of network filters Daniel P. Berrange Orabug: 33973639...

firefox security update

91.9.1-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.9.1-1 - Update to 91.9.1 build1...

Unbreakable Enterprise kernel security update

5.4.17-2136.307.3.4 - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 5.4.17-2136.307.3.3 - debug: Lock down kgdb Stephen Brennan Orabug: 34152699 CVE-2022-21499...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.307.3.4 - iouring: always use original task when preparing req identity Jens Axboe Orabug: 34186552 CVE-2022-1786 5.4.17-2136.307.3.3 - debug: Lock down kgdb Stephen Brennan Orabug: 34152699 CVE-2022-21499...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.513.2.2.el7 - debug: Lock down kgdb Stephen Brennan Orabug: 34152700 CVE-2022-21499...

Unbreakable Enterprise kernel security update

4.1.12-124.62.3.1 - debug: Lock down kgdb Stephen Brennan Orabug: 34152701 CVE-2022-21499...

Unbreakable Enterprise kernel security update

4.14.35-2047.513.2.2 - debug: Lock down kgdb Stephen Brennan Orabug: 34152700 CVE-2022-21499...

thunderbird security update

91.9.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 91.9.1-1 - Update to 91.9.1 build1...

log4j security update

0:1.2.14-6.4.2 - Fix CVE-2022-23302, CVE-2022-23305, CVE-2022-23307, CVE-2017-5645 - Orabug: 33868008 0:1.2.14-6.4.1 - Fix remote code execution vulnerability - Resolves: CVE-2021-4104 Orabug: 33689748...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.513.2.1.el7 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34175592 CVE-2022-1729...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729...

glibc security update

2.17-325.0.3.ksplice1 - Latest Ksplice-aware release. 2.17-325.0.3 - OraBug 33968985 Security Patches This release fixes CVE-2022-23219, CVE-2022-23218, and CVE-2021-3999 Reviewed-by: Jose E. Marchesi...

pcs security update

0.10.12-6.0.1.el86.1 - Replace HAM-logo.png with a generic one 0.10.12-6.el86.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081331...

Unbreakable Enterprise kernel security update

4.14.35-2047.513.2.1 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34175592 CVE-2022-1729...

Unbreakable Enterprise kernel security update

5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729...

subversion:1.10 security update

subversion 1.10.2-5 - add security fix for CVE-2022-24070...

kernel security and bug fix update

3.10.0-1160.66.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

.NET Core 3.1 security, bug fix, and enhancement update

3.1.419-1.0.1 - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ2060566 3.1.419-1 - Update to .NET SDK 3.1.419 and Runtime 3.1.25 - Resolves: RHBZ2081443 3.1.418-1 - Update to .NET SDK 3.1.418 and Runtime 3.1.24 - Resolves: RHBZ2074654...

rsync security update

3.1.3-14.2 - Related: 2074783 - Needed to bump this to rebuild correctly 3.1.3-14.1 - Resolves: 2074783 - A flaw in zlib-1.2.11 when compressing not decompressing! certain inputs...

.NET 5.0 security, bug fix, and enhancement update

5.0.214-1.0.1 - Support AArch64 on Oracle Linux Orabug: 32738620 - Include new Oracle Linux runtime IDs Add 1000-Add-missing-OL-RIDs.patch 5.0.214-1 - Update to .NET SDK 5.0.214 and Runtime 5.0.17 - Resolves: RHBZ2082258 5.0.213-2 - Update to .NET SDK 5.0.213 and Runtime 5.0.16 - Resolves:...

.NET 6.0 security, bug fix, and enhancement update

6.0.105-1.0.1 - Add missing Oracle RIDs 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime 6.0.5 - Resolves: RHBZ2082267 6.0.104-2 - Update to .NET SDK 6.0.104 and Runtime 6.0.4 - Resolves: RHBZ2074640...

container-tools:3.0 security update

podman 3.0.1-9 - update to the latest content of https://github.com/containers/podman/tree/v3.0.1-rhel https://github.com/containers/podman/commit/801b7e8 - Resolves: 2074143...

glibc security update

2.17-325.0.6 - OraBug 33968985 Security Patches - This release fixes CVE-2022-23219, CVE-2022-23218, and CVE-2021-3999 Reviewed-by: Jose E. Marchesi 2.17-325.0.3 - OraBug 33968985 Security Patches This release fixes CVE-2022-23219, CVE-2022-23218, and CVE-2021-3999 Reviewed-by: Jose E. Marchesi...

libssh security, bug fix, and enhancement update

0.9.6-3 - Remove STI tests 0.9.6-2 - Remove bad patch causing errors - Adding BuildRequires for openssh SSHD support 0.9.6-1 - Fix CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with different key exchange mechanism - Rebase to version 0.9.6 - Rename SSHDEXECUTABLE to SSHEXECUTABL...

bluez security update

5.56-3 + bluez-5.56-3 - Fixing 2027434 - Fixing CVE-2021-41229 5.56-2 + bluez-5.56-2 - Fixing 1968392 - Removing bccmd check from tests 5.56-1 + bluez-5.56-1 - Fixing 1965057 - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56...

xorg-x11-server and xorg-x11-server-Xwayland security update

xorg-x11-server 1.20.11-5 - Fix crash with NVIDIA proprietary driver with Present 2046329 1.20.11-4 - CVE fix for: CVE-2021-4008 2030162, CVE-2021-4009 2030172, CVE-2021-4010 2030175, CVE-2021-4011 2030181 1.20.11-3 - xf86/logind Fix drmdropmaster before vtreldis Resolves: 1771863...

qt5-qtsvg security update

5.15.2-4 - Fix out-of-bound write that may lead to DoS Resolves: bz2038487...

gfbgraph security update

0.2.4-1 - Update to 0.2.4 Resolves: 1997941...

compat-exiv2-026 security update

0.26-7 - Fix stack exhaustion issue in the printIFDStructure function Resolves: bz2003669...

libsndfile security update

1.0.28-12 - fix heap buffer overflow in flac 2030507 1.0.28-11 - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution1985028...

python3 security update

3.6.8-45.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8-45 - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz2036020 3.6.8-44 - Use the monotonic clock for theading.Condition - Use the monotonic clock for the global...

gnome-shell security and bug fix update

3.32.2-44 - Fix more JS warnings Resolves: 2025940 3.32.2-43 - Backport fix for CVE-2020-17489 Resolves: 1874259 3.32.2-42 - Backport WPA3 support Resolves: 1924593 3.32.2-41 - Add bugs introduced in backport for 1651378 Related: 2000918 - Tidy up patch list a bit...

maven:3.5 security update

...

maven:3.6 security and enhancement update

httpcomponents-client 4.5.10-4 - Fix incorrect handling of malformed authority component in request URIs - Resolves: CVE-2020-13956 maven 1:3.6.2-7 - Add maven-openjdk17 - Resolves: rhbz1991521...

pki-core:10.6 security and bug fix update

jss 4.9.3-1 - Rebase to JSS 4.9.3 - Bug 2046022 - CVE-2021-4213 pki-core:10.6/jss: memory leak in TLS connection leads to OOM rhel-8 4.9.2-1 - Rebase to JSS 4.9.2 ldapjdk 4.23.0-1 - Rebase to LDAP SDK 4.23.0 4.23.0-0.1 - Rebase to LDAP SDK 4.23.0-alpha1 pki-core 10.12.0-2.0.1 - Remove upstream...

mod_auth_openidc:2.3 security update

cjose 0.6.1-2 - fix concatkdf big endian architecture problem. Upstream issue 77. 0.6.1-1 - upgrade to latest upstream 0.6.1 0.5.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora29MassRebuild 0.5.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 0.5.1-1 - Initial packagin...

udisks2 security and bug fix update

2.9.0-9 - Fix LVM-VDO statistics tests 2023880,2025483 - Fix GError ownership 1999149 2.9.0-8 - CVE-2021-3802: Harden the default mount options for ext filesystems 2004422...

python27:2.7 security update

babel 9.0.3-19 - Remove bundled windows executables - Resolves: rhbz2006792 python2 2.7.18-10.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 2.7.18-10 - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs Resolves: rhbz2047376...

python39:3.9 and python39-devel:3.9 security update

modwsgi 4.7.1-4 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 4.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 4.7.1-2 - Rebuilt for Python 3.9 4.7.1-1 - update to 4.7.1 1721376 python39 3.9.7-1 - Update to 3.9.7 Resolves: rhbz2003102...

go-toolset:ol8 security and bug fix update

delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.7-1 - Rebase to Go 1.17.7 - Remove fips memory leak patch fixed in tree - Resolves: rhbz2015930 go-toolset 1.17.7-1 - Rebase to Go 1.17.7 - Remove fips memory...

python-lxml security update

4.2.3-4 - Security fix for CVE-2021-43818 Resolves: rhbz2032569...

php:7.4 security update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support php-pear 1:1.10.12-1 - update PEAR to 1.10.12 - update ArchiveTar to 1.4.9 - update ConsoleGetopt to 1.4.3 - update XMLUtil to 1.4.5 php-pecl-apcu 5.1.18-1 - update to 5.1.18 php-pecl-rrd php-pecl-xdebug 2.9.5-1 - update to 2.9.5 php-pecl-zip...

libpq security update

13.5-1 - Rebase to 13.5 Resolves: 2023294...

aspell security update

12:0.60.6.1-22 - resolves: 1988497 fix CVE-2019-25051...

fetchmail security update

6.4.24-1 - Update to fetchmail-6.4.24 fixes CVE-2021-36386 and CVE-2021-39272 Resolves: 1999275, 2002698...

zsh security update

5.5.1-9 - do not perform PROMPTSUBST evaluation on file.file/%K arguments CVE-2021-45444 5.5.1-8 - improve printing of error messages introduced by the fix of CVE-2019-20044 5.5.1-7 - drop privileges securely when unsetting PRIVILEGED option CVE-2019-20044...

dovecot security update

1:2.3.16-2 - do not disable xz/lzma for now despite being deprecated 1:2.3.16-1 - dovecot updated to 2.3.16, pigeonhole to 0.5.16 - fix CVE-2021-33515 plaintext commands injection 1980014...

cairo and pixman security and bug fix update

cairo 1.15.12-6 - Fix CVE reference test 1908113 1.15.12-5 - Add reference test to CVE fix 1908113 1.15.12-4 - Fix CVE-2020-35492 1908113 pixman 0.38.4-2 - Backport the pixman part of cairo CVE-2020-35492...

httpd:2.4 security and bug fix update

modhttp2 1.15.7-5 - Resolves: 2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations 1.15.7-4 - Resolves: 1966728 - CVE-2021-33193 httpd:2.4/modhttp2: httpd: Request splitting via HTTP/2 method injection and modproxy modmd...