An update that fixes 16 vulnerabilities is now available.

Multiple security vulnerabilities have been discovered in Salt, a powerful remote execution manager, that allow for local privilege escalation on a minion, server side template injection attacks, insufficient checks for eauth credentials, shell and command injections or incorrect validation of SSL

The package chromium before version 96.0.4664.45-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, content spoofing, information disclosure, same-origin policy bypass, sandbox escape and denial of service.

The package opera before version 81.0.4196.54-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation and access restriction bypass.

The package kubectl-ingress-nginx before version 1.0.4-1 is vulnerable to information disclosure.

An update that fixes 12 vulnerabilities is now available.

An update for devtoolset-11-annobin is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for devtoolset-11-binutils is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Several security issues were fixed in Mailman.

rpki-client 7.5 untrusted input: – Fail repository synchronisation after 15min runtime. – Limit the number of repositories per TAL. – Don’t allow `DOCTYPE` definitions in RRDP XML files. – Fix detection of HTTP redirect loops. * Limit the number of concurrent `rsync` processes. * Fix `CRLF` in TAL files.

Security fix for CVE-2021-3927 and CVE-2021-3928

An update that fixes 10 vulnerabilities is now available.

Upstream details at : https://access.redhat.com/errata/RHSA-2021:3801

Upstream details at : https://access.redhat.com/errata/RHSA-2021:4619

Upstream details at : https://access.redhat.com/errata/RHSA-2021:4044

Upstream details at : https://access.redhat.com/errata/RHSA-2021:4033

Upstream details at : https://access.redhat.com/errata/RHSA-2021:3889

Security fix for CVE-2021-40529

An update that contains security fixes and contains one feature can now be installed.

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for rust-toolset-1.54-rust is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Several security issues were fixed in Vim.

Apache Santuario – XML Security for Java is vulnerable to an issue where the “secureValidation” property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.

An update that solves 14 vulnerabilities, contains four features and has 5 fixes is now available.

An update that fixes one vulnerability is now available.

An update for gcc-toolset-10-binutils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

The 5.14.17 stable kernel update contains a number of important fixes across the tree.

The 5.14.17 stable kernel update contains a number of important fixes across the tree.

The 5.14.17 stable kernel update contains a number of important fixes across the tree.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The container bci/golang was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

Security and compatibility fixes

Security and compatibility fixes

Apache Tomcat, the servlet and JSP engine, did not properly release an HTTP upgrade connection for WebSocket connections once the WebSocket connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For Debian 9 stretch, these problems have been fixed in version

The binary got built with Fedora mandatory compiler flags.

ImageMagick is updated 6.9.12.28 , soname bump , many security fixes —- Add scraper2vdr_serienposter_statt_banner.diff

ImageMagick is updated 6.9.12.28 , soname bump , many security fixes —- Add scraper2vdr_serienposter_statt_banner.diff

ImageMagick is updated 6.9.12.28 , soname bump , many security fixes —- Add scraper2vdr_serienposter_statt_banner.diff

OpenEXR could be made to crash or execute arbitrary code if it received a specially crafted EXR file.

Openafs packages have been updated to 1.9.1 for various bugfixes, and added a fix for security vulnerability: There exist in the wild AFS3 clients that improperly construct access control lists which are then stored to directories via RXAFS_StoreACL

This kernel-linus update is based on upstream 5.10.78 and fixes atleast the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability (CVE-2021-3760).

This kernel update is based on upstream 5.10.78 and fixes atleast the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability (CVE-2021-3760).

An update that solves 13 vulnerabilities and has 43 fixes is now available.

An update for freerdp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for gcc-toolset-10-annobin is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for gcc-toolset-10-gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for gcc-toolset-11-gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for gcc-toolset-11-annobin is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update that fixes one vulnerability is now available.

The package grafana before version 8.2.3-1 is vulnerable to cross-site scripting.

The package opera before version 81.0.4196.31-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and insufficient validation.

The package thunderbird before version 91.3.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, same-origin policy bypass and sandbox escape.

The package firefox before version 94.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, same- origin policy bypass and sandbox escape.

The package jenkins before version 2.319-1 is vulnerable to multiple issues including arbitrary filesystem access and sandbox escape.

An update that solves 15 vulnerabilities and has 40 fixes is now available.

An update that solves two vulnerabilities and has two fixes is now available.

rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvements in the way X509 certificates are verified. * Make rpki-client more resilient regarding untrusted input: – Limit the allowed character set for filename

rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvements in the way X509 certificates are verified. * Make rpki-client more resilient regarding untrusted input: – Limit the allowed character set for filename

rpki-client 7.4 Public Keys. * Fix issues with chunked transfer encoding in the RRDP HTTP client. * Cleanup and improvement of how IO is handled. * Improvements in the way X509 certificates are verified. * Make rpki-client more resilient regarding untrusted input: – Limit the allowed character set for filename

An update that fixes 12 vulnerabilities is now available.

A flaw was discovered in containerd, an open and reliable container runtime. Insufficiently restricted permissions on container root and plugin directories could result in privilege escalation.

Update to WebKitGTK 2.34: * Add support for CSS Scroll Snap. * Add support for date and datetime-local input elements. * Add support for display capture. * Add support for ICC color management. * Add support color-schemes CSS property. * Add multi-track support to MSE media backend. * Add new API to handle web process […]

Update to WebKitGTK 2.34: * Add support for CSS Scroll Snap. * Add support for date and datetime-local input elements. * Add support for display capture. * Add support for ICC color management. * Add support color-schemes CSS property. * Add multi-track support to MSE media backend. * Add new API to handle web process […]

Two SQL injection vulnerabilities were discovered in SQLAlchemy, a SQL toolkit and Object Relational Mapper for Python, when the order_by or group_by parameters can be controlled by an attacker.

An update that solves two vulnerabilities and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that fixes 15 vulnerabilities is now available.

The 5.14.16 stable kernel update contains a number of important fixes across the tree.

The 5.14.16 stable kernel update contains a number of important fixes across the tree.

The binary got built with Fedora mandatory compiler flags.

An update that fixes 15 vulnerabilities is now available.

There were a couple of vulnerabilites found in src:python3.5, the Python interpreter v3.5, and are as follows: CVE-2021-3733

This update upgrades Thunderbird to version 91.3.0. * Mozilla: Use-after-free in HTTP2 Session object * Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3 * Mozilla: iframe sandbox rules did not apply to XSLT stylesheets (CVE-2021-38503) * Mozilla: Use-after-free in file picker dialog (CVE-2021-38504) * Mozilla: Firefox could be coaxed into going […]

Stefan Walter found that udisks2, a service to access and manipulate storage devices, could cause denial of service via system crash if a corrupted or specially crafted ext2/3/4 device or image was mounted, which could happen automatically on certain environments.

The container suse/sles12sp5 was updated. The following patches have been included in this update:

Rust 1.56.1 adds a mitigation for CVE-2021-42574, the “trojan source” attack that obfuscates code with BiDi control characters. The compiler will now error on such characters in code comments and string/char literals. For more details, see the upstream [security advisory](https://blog.rust- lang.org/2021/11/01/cve-2021-42574.html).