An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability, contains three features and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that solves 14 vulnerabilities and has three fixes is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes one vulnerability is now available.

An update that solves 9 vulnerabilities and has two fixes is now available.

Updated htmldoc packages fix security vulnerabilities: Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181 (CVE-2021-20308).

Updated connman packages fix security vulnerability. ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA) (CVE-2021-33833).

Updated php packages provides upstream 8.0.8 and fixes the following security vulnerabilities: – PDO_Firebird: * Fix Stack buffer overflow in firebird_info_cb (CVE-2021-21704).

Updated botan2 packages fix security vulnerability: In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex) (CVE-2021-24115).

The package ruby-addressable before version 2.8.0-1 is vulnerable to denial of service.

The package gitlab before version 14.0.3-1 is vulnerable to multiple issues including cross-site request forgery, access restriction bypass, arbitrary code execution, arbitrary command execution, cross-site scripting, information disclosure, content spoofing and denial of service.

The package rabbitmq before version 3.8.19-1 is vulnerable to cross- site scripting.

The package php7 before version 7.4.21-1 is vulnerable to multiple issues including denial of service and insufficient validation.

The package php before version 8.0.8-1 is vulnerable to multiple issues including denial of service and insufficient validation.

The package openexr before version 3.0.5-1 is vulnerable to arbitrary code execution.

Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes option could result in unexpected behaviour.

The container ses/7/rook/ceph was updated. The following patches have been included in this update:

An inefficient regular expression could be exploited to cause a Denial of Service condition.

A buffer overflow in BladeEnc might allow arbitrary code execution.

A file named by an attacker being utilized by Mechanize could result in arbitrary code execution.

Multiple vulnerabilities have been found in Privoxy, the worst of which could result in Denial of Service.

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

linuxptp: missing length check of forwarded messages (CVE-2021-3570) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE — SL7 x86_64 – linuxptp-2.0-2.el7_9.1.x86_64.rpm – linuxptp-debuginfo-2.0-2.el7_9.1.x86_64.rpm – Scientific Linux Development Team

Several security issues were fixed in PHP.

libuv could be made to crash or expose sensitive information if it received a specially crafted input.

A bug in TCG TPM2 Software Stack may result in information disclosure to a local attacker.

An update for linuxptp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for linuxptp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for linuxptp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for linuxptp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Red Hat OpenShift Container Platform release 4.7.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7.

An update that fixes three vulnerabilities is now available.

An update that contains security fixes can now be installed.

DjVuLibre could be made to crash or execute arbitrary code if it opened a specially crafted file.