Moderate: qt5 security, bug fix, and enhancement update

An update is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604) Security Fix(es): * qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872) * qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869) * qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qt5-qtdeclarative-static-5.12.5-1.el8.x86_64.rpm b3eb4a0cf97bd6befb774bd4fe7d5f71afa420c548b015f54aad24fd757adb9d qt5-qtquickcontrols2-devel-5.12.5-1.el8.i686.rpm 030312768fd033fc1ebe957f7bc0819c226cff176595e2f881d447f15dd0fe82 python3-qt5-devel-5.13.1-1.el8.x86_64.rpm 7dcaa5bddac6b299a85941affe84ef4663ac676827e15184fede5ee73bd30a6a python3-qt5-devel-5.13.1-1.el8.i686.rpm da4c02199f30a3274d82c3eb23e5bd7d1f6bab3ea2e4f635e3f9bd2ae8e835d8 qt5-qtwayland-devel-5.12.5-1.el8.x86_64.rpm 087d0bfd1de3124140ecb95cd6b8774b88139322d799a7f0936f2d7a89e732ca qt5-qtquickcontrols2-devel-5.12.5-1.el8.x86_64.rpm 381a23fe812e759a1993eb84b8c3f52831e25525500531943e1c44258715fe76 qt5-qtwayland-devel-5.12.5-1.el8.i686.rpm 3ee3fb99d2ad06e1d0d31ea7bf2d442252957822641873efc7a3cee834d9f865 qt5-qtdeclarative-static-5.12.5-1.el8.i686.rpm e1c03102339165df9eb0ccc9a16290eb57f42d1277d64855561352d1f1962588 qt5-devel-5.12.5-3.el8.noarch.rpm 45d7c4a4042d9effa1f08252e5a9247037b39d8cd0be3c0b758248496a0c2376 ALEA-2020:4540 device-mapper-multipath bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for device-mapper-multipath is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-multipath-devel-0.8.4-5.el8.i686.rpm 41cfe774978ce994a964025d60401cc42e8ae3113ae13c82ebc7e85a12661ba8 device-mapper-multipath-devel-0.8.4-5.el8.x86_64.rpm f87ba92bece7348779cd797b2b47cde70e916f8ed365e26598ede031b7730078 ALBA-2020:4548 gpgme bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for gpgme is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gpgmepp-devel-1.13.1-3.el8.i686.rpm 5d8f06c9d7cb573a00cce77e97c514385cae65d8a9335b2ab5d2d3f3a40d1b37 gpgme-devel-1.13.1-3.el8.x86_64.rpm b25bb236246006939df141756af41e06384c8f28fbcea0fe6c54c12de6a5e48d gpgme-devel-1.13.1-3.el8.i686.rpm 69794622df34a31d343d78f78f7dd455831fb89d1baa923add1fb767bc488dbd gpgmepp-devel-1.13.1-3.el8.x86_64.rpm b4f100faeb4c668d198da31ff380764772f7e526494e57f7976122c21383601f ALEA-2019:3557 libtalloc bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for libtalloc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default socket_wrapper-1.2.3-1.el8.x86_64.rpm 06d62473e9bab551798bab66b403ec925fdcfd799d2b52bbf98f6b75601b0a5b uid_wrapper-1.2.4-4.el8.i686.rpm 0043a1869cd6d2f7620dd6202e6fbc8ef3910b489d3de26406197ce9094266a9 uid_wrapper-1.2.4-4.el8.x86_64.rpm 36d8d0da84c310f1dcc804367a044e77a1b921278a8e1f28442a3b1a63a4ab6a libcmocka-1.1.5-1.el8.i686.rpm 5ee5a358650befbccf026f5b66fb0b1a269103f89598066795131c9ba7600144 libcmocka-devel-1.1.5-1.el8.x86_64.rpm d7508c39a8679fd007bb32e084192fe1b7d1832d10be0163bf6f5099d676d6bf libcmocka-1.1.5-1.el8.x86_64.rpm 51ac9098e1e5c5f7e1e6100cf3227fcc5e0673892f114871c64b3de0e194f917 libcmocka-devel-1.1.5-1.el8.i686.rpm f83779a880fd1a42205588b84914af8f33f5d93c5aaa61e9e7aa45ba3a439d77 socket_wrapper-1.2.3-1.el8.i686.rpm 66114d79be9a8dd196dcf99147d5a51381d4af175d0705a88b773a588cc11b5e ALBA-2020:1622 python-greenlet bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for python-greenlet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-greenlet-devel-0.4.13-4.el8.i686.rpm e395a519e181aec6621b58a90ee562501f535bac3798dedf061e08985b90c8e0 python3-greenlet-0.4.13-4.el8.i686.rpm 38b80ae01834f3d2b68028d55e09a849e596a1b65c1a4bce3c98b8df59d4e457 python3-greenlet-devel-0.4.13-4.el8.x86_64.rpm b139577567b4811a325edea66ceb64faa6f177c9e328df7e26b9fde17a925669 ALBA-2021:0555 samba bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for samba is now available for AlmaLinux

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fix(es) and Enhancement(s): * DFS links broken in 4.12 (BZ#1903555) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwbclient-devel-4.12.3-14.el8_3.i686.rpm d98d88a4ed7f1cf7c1a9c5d5f2f3eadf8122fbdfbfedf3723b82d698da604f69 libwbclient-devel-4.12.3-14.el8_3.x86_64.rpm 35b6e52af6fc3e1e538833e0d1548c30f266c6254c928516d3c58f4b1490e6bd libsmbclient-devel-4.12.3-14.el8_3.i686.rpm 05adad8bc30d5ac7b8198cb2475e25a0f6f4298b3bbd76351be80e5987ca24c1 libsmbclient-devel-4.12.3-14.el8_3.x86_64.rpm 33146ffc08c3a34c81b8332ca728d6156c667a8957e201ad603168f1bacf786e ALEA-2020:4521 libmodulemd bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libmodulemd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmodulemd-devel-2.9.4-2.el8.i686.rpm db25ba0e8b7f209901cf3c95059a29673f871116abaf6a59684d94440d71d268 libmodulemd-devel-2.9.4-2.el8.x86_64.rpm 4c356bdd24ab1f6117d8c5b483e21cca1d84d15ba9a58580630b47829a295c55 ALBA-2019:3593 ipset bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for ipset is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ipset-devel-7.1-1.el8.x86_64.rpm 1e2febcb226b2f78245549c6a7777c24c69ea4b122c47980971ffd927dec6b7f ipset-devel-7.1-1.el8.i686.rpm fe3564cdcc797fa47fba1dad98257e2519241ffb7ed0f16cf8e6023e5e57aa88 ALSA-2019:3705 Moderate: libjpeg-turbo security update Copyright 2019 AlmaLinux OS Inc 0 3 Moderate

An update for libjpeg-turbo is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default turbojpeg-devel-1.5.3-10.el8.i686.rpm 0f22db58552b14a655a26d67b5677639f4d8e62196a7f23ff9c40c3b3fe944b1 turbojpeg-devel-1.5.3-10.el8.x86_64.rpm 1c749c55916afe09e6d814e1e9684b6449e279277badc76d2297293c5c635117 ALEA-2020:5501 openscap bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for openscap is now available for AlmaLinux

The OpenSCAP suite enables integration of the Security Content Automation Protocol (SCAP) line of standards. The openscap packages provide the OpenSCAP library and the oscap utility that provides various SCAP capabilities. Bug Fix(es) and Enhancement(s): * Enable YAML probe to work with sets of values (BZ#1895715) * Can't build profile with specific platform set (BZ#1896676) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openscap-engine-sce-devel-1.3.3-6.el8_3.alma.x86_64.rpm bda8da07a1a232862e54cd39e53d15e661bb39f85bdbcb93d561bc6ec78daab3 openscap-engine-sce-devel-1.3.3-6.el8_3.alma.i686.rpm 155e64cc0fec817af6e4b963ec35678ec3102d49e7418cad6d6c22db085098c0 ALSA-2019:3706 Moderate: lua security and bug fix update Copyright 2019 AlmaLinux OS Inc 0 3 Moderate

An update for lua is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lua-5.3.4-11.el8.i686.rpm ef36703181d1888648c0caa2f0d85ebdd5ee46846abb60278e09363f0db11f45 lua-devel-5.3.4-11.el8.x86_64.rpm 9a9118c50f62c3137c573ef7dd6e3203b38b1039c902430a6f1042e0a1c113e5 lua-devel-5.3.4-11.el8.i686.rpm 4110f28ef669e0144751bd58102b309594e1d5bf8c2ad199e4d80f59f2645438 ALEA-2020:4838 dtc bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for dtc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libfdt-1.6.0-1.el8.i686.rpm f68702f3b50a23e2dfcf7c64feb5a11b69f47a96200f10d0cca4eb0ea67eb8d9 libfdt-1.6.0-1.el8.x86_64.rpm c2a2b11a92d34c9192c8980c17c2c13fc7ac1d2b765845952e8e33de376bc6d0 dtc-1.6.0-1.el8.x86_64.rpm 861df4236b398d57811b6baa14dee3d4636f04446c6d2c7b7c81eebc9d956cc5 libfdt-devel-1.6.0-1.el8.i686.rpm 98d8f9c2dbbc5d14d05e493611724c1cef75f14786a365873b40674c4121beb0 libfdt-devel-1.6.0-1.el8.x86_64.rpm 1be081f2bcd198a350efc1e9c13c037189f143211aad8fcfd8f82f546566aec7 ALBA-2019:3682 gnu-efi bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for gnu-efi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gnu-efi-devel-3.0.8-4.el8.i686.rpm e5989013532318c23b274c13ec9baddff1df7fc05e55522334683737333ec2da gnu-efi-3.0.8-4.el8.x86_64.rpm 2041451c445f44d99442b612e378818350b7742a5bc2f279d6b43e746973ab65 gnu-efi-devel-3.0.8-4.el8.x86_64.rpm 428c19241e6e6732644260bc581d634ab15fb3828337608ef8ec0047dbc9e561 ALBA-2020:1904 texinfo bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for texinfo is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texinfo-tex-6.5-6.el8.x86_64.rpm 17543af646b348bf57b63f9bf19df90be0d5c3b7653eb0ccb5e9842324914976 texinfo-6.5-6.el8.x86_64.rpm d56b0a54df56b93f8686f9147d1005ff3767cb0b5c698fe0f2381f5a2efdbfc4 ALSA-2020:4649 Low: evolution security and bug fix update Copyright 2020 AlmaLinux OS Inc 0 3 Low

An update for bogofilter, evolution, evolution-data-server, evolution-mapi, and openchange is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications. OpenChange provides libraries to access Microsoft Exchange servers using native protocols. Security Fix(es): * evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evolution-data-server-perl-3.28.5-14.el8.x86_64.rpm 2342e87c6ca2f5d306c34d22983a5bbb3f7876d281d7fd4a2d7cc94c21729055 evolution-devel-3.28.5-14.el8.i686.rpm f247b202a6ac87cfcc732c6cd6f3bd59273019522332796b95233299dfb23ac9 evolution-data-server-tests-3.28.5-14.el8.i686.rpm e11a63fc708d99a54c212f3d598163a979bff95f6f0f853f53527651f19ce997 evolution-devel-3.28.5-14.el8.x86_64.rpm bb5059fec5f56c294b4b6e9dffd2b1b53517d2bc6f228a87f39f52536b4c6a15 evolution-data-server-doc-3.28.5-14.el8.noarch.rpm e187a2d0d8b1590fc91fe3b44b7e44de06f77c907f3abecd756f1392043e9e8c evolution-data-server-tests-3.28.5-14.el8.x86_64.rpm fdc55207c1f7e7c3c4caa8b410d71717ac263cd225ca41ceb5819d85a5d55de4 ALSA-2020:3385 Important: libvncserver security update Copyright 2020 AlmaLinux OS Inc 0 3 Important

An update for libvncserver is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fix(es): * libvncserver: websocket decoding buffer overflow (CVE-2017-18922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvncserver-devel-0.9.11-15.el8_2.1.i686.rpm 23ca90b2e5400eb009ee50b9853c0672e5c366c2fdaad6e9979c1b613518fd64 libvncserver-devel-0.9.11-15.el8_2.1.x86_64.rpm 09243ba908528f98ddbdb6466105688fabc9215bc2c07f0d21bbe43c31073bc3 ALEA-2019:3511 libvarlink bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 4 None

An update for libvarlink is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvarlink-devel-18-3.el8.x86_64.rpm da1104525e71c0fca981727f54f9a8b64e3c2adee8aa62b69393d7afa0ddf86f libvarlink-devel-18-3.el8.i686.rpm 85bc61721c007f080b9afedf5b0879a4c6ec894eeea16178a4c6bd382c675c47 ALSA-2020:4445 Moderate: librabbitmq security update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for librabbitmq is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow (CVE-2019-18609) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librabbitmq-devel-0.9.0-2.el8.x86_64.rpm 0ea97f587a1fcbdf5571895654c9aa89ffaf00a4c4850384f00cc20f410f2b78 librabbitmq-devel-0.9.0-2.el8.i686.rpm 59f9d058af720cd4f2c55c2b617dbe6c48a7bd372696fe9b09d0c1d5d3e152a8 ALBA-2020:4779 ibus bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for ibus is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ibus-devel-1.5.19-12.el8.i686.rpm 54da9861f587a7a005efa423cf2c6dd2a006822463805e2d689cbfbc79688625 ibus-devel-1.5.19-12.el8.x86_64.rpm 85629241eadbc32b39664ea8d7f1dd05e04182c28fd836a83843911d7a23f7d9 ibus-devel-docs-1.5.19-12.el8.noarch.rpm 66a08a212d6951ae774b8c6567166bb3da1709c37ba3a0e64f4445a3cb4c25c3 ALSA-2020:4443 Moderate: libarchive security update Copyright 2020 AlmaLinux OS Inc 0 2 Moderate

An update for libarchive is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libarchive-devel-3.3.2-9.el8.i686.rpm 3b7851a47441d3031cd1f1be3cc4197772fa31561f48d9e00496d9b7b3f34e4d libarchive-devel-3.3.2-9.el8.x86_64.rpm b730cb8906dcef2bf0e0f3335b4041fabd684bc683e954044d8666e2d368d821 ALBA-2020:4678 tog-pegasus bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for tog-pegasus is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tog-pegasus-devel-2.14.1-46.el8.x86_64.rpm d02d28a9a40d173b1b71900923134547ec7d9cf7475ef6a631d55dd6439ed1ec ALBA-2020:4575 util-linux bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for util-linux is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmount-devel-2.32.1-24.el8.i686.rpm 796770ea56773cc0dceecbe32d661b9c329d1845f00e6668d1804676bda2cd12 libmount-devel-2.32.1-24.el8.x86_64.rpm 9eaee0092bb98be44774dfcbf5758546af743aafb37960a9aff7ed5e1ad7fed5 ALSA-2020:4634 Moderate: libtiff security update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for libtiff is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libtiff-tools-4.0.9-18.el8.x86_64.rpm 65341a61b45b46649c04c17032a629e81f69cae0ea9a5756661023acf9c2ac27 ALBA-2020:4600 snappy bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for snappy is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default snappy-devel-1.1.8-3.el8.x86_64.rpm c27423c38ee92c0458bde3b85d7f0bf3aacdad2faaabe8d9be84ee88377f2595 snappy-devel-1.1.8-3.el8.i686.rpm f4cef69bd914c4e96f671a9bdb02d1a19a818e7df41ee40aa0ec151b6d4e4558 ALBA-2019:3449 new packages: gcc-toolset-9-dyninst Copyright 2019 AlmaLinux OS Inc 0 4 None

New gcc-toolset-9-dyninst packages are now available for AlmaLinux

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-dyninst packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documented in the GCC Toolset 9 chapter. For detailed changes in this release, see the AlmaLinux Release Notes. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-toolset-9-dyninst-doc-10.1.0-1.el8.x86_64.rpm de7d7ec6b1481162129becb7aa1d20e27482d813cbb732a8159336099f168f5e gcc-toolset-9-dyninst-static-10.1.0-1.el8.i686.rpm a67244482fef776874e61a3176df1346a9200fb40e116c3c26267aef1b00fca9 gcc-toolset-9-dyninst-testsuite-10.1.0-1.el8.x86_64.rpm 52aeb668c41410d32c0206d6360e278e0c55afcd9e692acd7ecd884bc29da3ad gcc-toolset-9-dyninst-static-10.1.0-1.el8.x86_64.rpm dd6ac0f88abc4820d157a55907be36f61219485e2201e0ca9ef3ef33d17a4156 gcc-toolset-9-dyninst-devel-10.1.0-1.el8.i686.rpm f38a25c8fd6cf275cea435910a38788eaba74df5101404ddaf0a90816ccee55b gcc-toolset-9-dyninst-devel-10.1.0-1.el8.x86_64.rpm 117c33980dd22870bf477f5f3c2a86764fffea9837c6ea306b4688d2fb959446 ALEA-2020:1680 opencv bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for opencv is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencv-3.4.6-5.el8.x86_64.rpm a7bffeb2a7d79055f2933787645d802977c4cccd5186127d8b8546f5658885f5 opencv-devel-3.4.6-5.el8.x86_64.rpm f4d9383fd20dcf3acb13edba36edb8dbb5da1d26dc008eb1b1ec9efe6883e7c0 opencv-3.4.6-5.el8.i686.rpm e49654c3998e9f63329ae2dfd57c129be02077709f8d84b650f05264f8f3d3ed opencv-devel-3.4.6-5.el8.i686.rpm 66287ecf1558076ca793e77b78d9d1ff3a23a4222b785dfcb48d461f28032e6f ALEA-2019:3367 google-noto-cjk-fonts bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for google-noto-cjk-fonts is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default google-noto-sans-cjk-jp-fonts-20190416-1.el8.noarch.rpm 37a294a727c0912434ebb0f2e7824b2471e5f2e8aefc88f1d10dacfa326849ac ALEA-2020:4731 boost bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for boost is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default boost-static-1.66.0-10.el8.x86_64.rpm 4f199abd34d8ded9fa180923972999a075539216c2115b332584bfb98d4c3c98 boost-static-1.66.0-10.el8.i686.rpm ca06b3ef88927e7af947f081128d0ff4db2a3c1df48417a6621f1329ce3a2ecb boost-python3-1.66.0-10.el8.i686.rpm f418e8fb98424631b887982253bd825d1067538d5ac09bab80d7e92bbe3ade40 boost-graph-mpich-1.66.0-10.el8.i686.rpm ec04d729ade185ce91a1f34c1aa8b7a00a89056e3a640d61a57c7b5a044b951b boost-openmpi-devel-1.66.0-10.el8.x86_64.rpm 83f3b1de9194ca0453e0adb9602fc501b3e130d7f3d694e6e719aa1eae8974a3 boost-openmpi-1.66.0-10.el8.x86_64.rpm 7a3e8053ecffcfb0f1d5e327eb0f4b37bd5f8088d118842a50c20c9ab81ab649 boost-mpich-devel-1.66.0-10.el8.i686.rpm fc6f4861efb8c26ff3dda441313397f53d26c436807366998cd763973e0bce3a boost-python3-devel-1.66.0-10.el8.x86_64.rpm 8dc76d7946589aefd1f954bce323f731a5d3e4e4ea715ebf398216dad0425185 boost-build-1.66.0-10.el8.noarch.rpm 84904dd56dc4c00b16df71a0b2f6ec303cd8cf5ee503fdd8500bc84a3c9c5d69 boost-openmpi-python3-1.66.0-10.el8.x86_64.rpm 3fc3d1d6f469be4fda6b9bc312f21159a52c34a635a9483c41739b8af33e78e4 boost-mpich-1.66.0-10.el8.x86_64.rpm d85fc71bed8cd8ae5c244c6852f60e9ced8675265ed7e7c97f382a09fb16b72e boost-graph-mpich-1.66.0-10.el8.x86_64.rpm d7c8847fc6a690ba971b9fcafb8edb8188a981d211a5d45a7a84cc92e0ea9fb6 boost-jam-1.66.0-10.el8.x86_64.rpm 307ab661eed76361d88a9a66478160822375bb28877c863bccf476390f2e2f19 boost-python3-1.66.0-10.el8.x86_64.rpm d252755d1debe2dd2e3fb19074fce1ab647b53fda914af2eddac883fe3660b7d boost-numpy3-1.66.0-10.el8.i686.rpm 60267510bafd8d49a0668404176a14ae300d2052dea1d19b465b4c41ecf3ad57 boost-mpich-devel-1.66.0-10.el8.x86_64.rpm beece089626c1daaf4ba7975e36fe7825701b43a659a7c8cf00c37c3d09806ee boost-openmpi-1.66.0-10.el8.i686.rpm 4d9ebe6f7885f06a3edea10a65dc08584d69bc9379ec3b1148bcb2f0c57a6a3d boost-examples-1.66.0-10.el8.noarch.rpm 3a66fca0c712256ed97ec6f22f57c82267c95a6653a9d97f7d060339649f5fb6 boost-graph-openmpi-1.66.0-10.el8.x86_64.rpm a3b35a21fc2478644bd8acd546a0ef6331ed4127e64f8fa06141f18bf005775d boost-openmpi-devel-1.66.0-10.el8.i686.rpm b7f340cb52b66a75fb6ec6053f951bff9d4c569747f81b43df05d8e22d07209c boost-graph-openmpi-1.66.0-10.el8.i686.rpm 2401202735a84bec9ff9edf8c28ddd76f58f5529c8813f426f904b57c8c95c80 boost-mpich-1.66.0-10.el8.i686.rpm 1329553fcb61f568acd77ff62ddb92dcb01a644967049bb776096b16a920c729 boost-mpich-python3-1.66.0-10.el8.x86_64.rpm 6c431251ecb9315073745318c2e2809db872bab12cfe11afdf47c7a270ecd402 boost-numpy3-1.66.0-10.el8.x86_64.rpm 9ee77bff50c511c4b1fddd9958cafee389f559770accfc0016a4653ad9a30b6d boost-python3-devel-1.66.0-10.el8.i686.rpm 1783c9b974840ad7876abf4fcd6b80b8ec82aaf214b7feb2e6e50fcee885000f boost-doc-1.66.0-10.el8.noarch.rpm 4af7c433493c258cdbd928c255e5d0b4e51d581664ac8fb7747e4e153108428a ALBA-2020:4606 kronosnet bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for kronosnet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libknet1-1.16-1.el8.x86_64.rpm b09a6fcd986fa9f009c12909d526078d61cf8b4e54de31d728969f32ffff8133 libknet1-1.16-1.el8.i686.rpm 1a077e15d3293526f7edd7f14be3eb3d77a7d33cd18f3879a14dedc718d34f05 libknet1-devel-1.16-1.el8.i686.rpm e671ba29f176f5c39f6f6905d292c2e55684ed5a9c3809c90dc021f006e728b7 libknet1-devel-1.16-1.el8.x86_64.rpm 19c03f6924726530551483e654f411224d2f43e382b4f0149c300e7d09747c2c ALBA-2020:1633 xorg X11 server and driver bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for xorg X11 server and driver is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default xorg-x11-drv-libinput-devel-0.29.0-1.el8.i686.rpm bf53c84a6e7ba8c0eb30b8df291a869843a883ea5e05f3eb3331f8029fb1846b xorg-x11-drv-libinput-devel-0.29.0-1.el8.x86_64.rpm ea8425fd9776d05ba2832f7e809e15e60c24d5e2c21a6388430c5ab13d377f9d xorg-x11-drv-wacom-devel-0.38.0-1.el8.i686.rpm 5faecce584af84937ef4d2fa3c4b53eaba518b61e391c54d82991ce09d06bbb9 xorg-x11-drv-wacom-devel-0.38.0-1.el8.x86_64.rpm 1c1f508a17a2b1cc21b60fadd0a0b8825049b8424db62d0da3add8f5f1738dbc ALBA-2020:4733 protobuf bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for protobuf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default protobuf-devel-3.5.0-13.el8.x86_64.rpm eeca966ddcb3bfed34a9ba0177fd46a8794dbce0ee83b51fd626a91a262a184c protobuf-devel-3.5.0-13.el8.i686.rpm 100631aebae7d094a707756b29cf663406c9fc6b6794f007345d559ee0ae5764 protobuf-compiler-3.5.0-13.el8.i686.rpm f60bb5305bac77e07a582cb32a407765e6a00d3621abe8c2bbfc062366b2a0d1 protobuf-compiler-3.5.0-13.el8.x86_64.rpm 6b743900af40c50c855f2b1640417a738e03cc5886feabe67b1d4c597fdba84e protobuf-lite-devel-3.5.0-13.el8.x86_64.rpm 92ea5ef7d7af7330f2459c63222e8ebc0ba61d8b05633c847768cdf4f039bab9 ALEA-2020:4456 rdma-core bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for rdma-core is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libfabric-devel-1.10.0-1.el8.i686.rpm 36df8802578e7e36e9484b0de415fbac271cd44ad15e95ffcf903feca8528fdb opensm-devel-3.3.23-1.el8.x86_64.rpm feea81dd42da890dc6e37ec6e226de1ceec93a3099ee66a797dd6cab3a1a5aa6 opensm-devel-3.3.23-1.el8.i686.rpm 6d8350079c2be0cd4020610d229e22205a982120af03d5bf9e14ae668988e139 libpsm2-devel-11.2.91-1.el8.x86_64.rpm d3b41911939fed2f62576f09c5543dbc95c304079b0dd4f9e8d7caf85c3ef36c python3-openmpi-4.0.3-3.el8.x86_64.rpm 5c3cfe60290837da0950428aec5915134649d9c78d0fa72b9d23394764d80216 libfabric-devel-1.10.0-1.el8.x86_64.rpm c50f4f5fcbe85bc18ee473a273b0217ccf55b99c7ea81169bc7acdaba52ed40d ALSA-2020:1880 Moderate: ibus and glib2 security and bug fix update Copyright 2020 AlmaLinux OS Inc 0 4 Moderate

An update for glib2 and ibus is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The Intelligent Input Bus (IBus) is an input method framework for multilingual input in Unix-like operating systems. Security Fix(es): * ibus: missing authorization allows local attacker to access the input bus of another user (CVE-2019-14822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glib2-static-2.56.4-8.el8.x86_64.rpm a718dd9d0f37305045a73b5c7e48cf1fb86f571994f0b404435555a7c4b8f4f6 glib2-static-2.56.4-8.el8.i686.rpm d25f8584616c5b654bd71d10b5bcc7f46d6765bd01d05b2c5cdea7b735758cd7 glib2-doc-2.56.4-8.el8.noarch.rpm bbf6cedd4f551061fdb85e6af5a42f94e577189ed8f6a0e837c89672d7a38770 ALBA-2020:4602 iscsi-initiator-utils bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for iscsi-initiator-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iscsi-initiator-utils-devel-6.2.0.878-5.gitd791ce0.el8.i686.rpm 1735c3a768c85f443f6682c9285ed856e6a653e39805e97169bf5b0db09d932a iscsi-initiator-utils-devel-6.2.0.878-5.gitd791ce0.el8.x86_64.rpm cfd35582ad6b0524b0ba21ee41f1e82548d8578ed8d922c0ccba061274d369a4 ALSA-2020:4547 Low: libpcap security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 5 Low

An update for libpcap is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. The following packages have been upgraded to a later upstream version: libpcap (1.9.1). (BZ#1806422) Security Fix(es): * libpcap: Resource exhaustion during PHB header length validation (CVE-2019-15165) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpcap-devel-1.9.1-4.el8.i686.rpm a753469e89d8c27cb411d6379dad4ea665c5218fff32c7464a1ebef7411ff26f libpcap-devel-1.9.1-4.el8.x86_64.rpm c603370d236911aad713d23fde5261c4508fd0185be0efa92ae3b7801a360c06 ALEA-2020:1607 http-parser bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for http-parser is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default http-parser-devel-2.8.0-9.el8.x86_64.rpm 0e9252920074d3ae06dc9631086362d3e0059db41762221aa65adee965a78043 http-parser-devel-2.8.0-9.el8.i686.rpm a5f1ed153068d8cc5e7467af37645eb684e59e739e6c0c564010379774732b00 ALSA-2020:4846 Moderate: mingw-expat security update Copyright 2020 AlmaLinux OS Inc 0 5 Moderate

An update for mingw-expat is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW. Security Fix(es): * expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw64-expat-2.2.4-5.el8.noarch.rpm 72a7869e3be8b7d1c37339276f2a4667ae71370e37dd08b8269fd6c94ed75938 mingw32-expat-2.2.4-5.el8.noarch.rpm 8ebcaf58985e573250c60c722c601493e71796b0231356a1190b3841b65e3189 ALBA-2020:5504 xorg-x11-server bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for xorg-x11-server is now available for AlmaLinux

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Bug Fix(es) and Enhancement(s): * [DELL 8.2 BUG]The modesetting driver does not gracefully handle missing connectors on EnterVT (BZ#1883491) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default xorg-x11-server-source-1.20.8-6.1.el8_3.noarch.rpm 16eadb26ea6ff9fc2a72b810fec50998aef1666d27f08b118b0261461cdb9fc4 xorg-x11-server-devel-1.20.8-6.1.el8_3.i686.rpm 9be465301054b0228a64c08b198eaa678b4deaec74d07f24fc4e72e7fffcf102 xorg-x11-server-devel-1.20.8-6.1.el8_3.x86_64.rpm 32f9ce51d94d0fc4b31b821d3fff2fceb0b5540c2234f1895e411f2b53984715 ALBA-2020:3056 vulkan bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 6 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2019.5-2.20200421.git67f4838.el8.i686.rpm 956c604a70bcaad1882e4836807b5cbb2cd4cefbf96b1ad0c9de3bce819246ea spirv-tools-libs-2019.5-2.20200421.git67f4838.el8.i686.rpm dd6a63ffebbbca46fa2e0f97a525d7fa8c48b40fc22860700b62c635b434dda7 ALBA-2020:4574 shim bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for shim is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default shim-unsigned-x64-15-9.el8.alma.x86_64.rpm 529e37816071f1debb571ab4791199a5e961891ac8fc70fe7077cde8a00f3658 ALEA-2020:4556 libnetfilter_queue bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libnetfilter_queue is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnetfilter_queue-devel-1.0.4-3.el8.i686.rpm 9ce0262ff401c72aa5d5209bbb1396a1ded798232d11b665031104ecbe07f38a libnetfilter_queue-devel-1.0.4-3.el8.x86_64.rpm 8f55938f97a7352868f987deeeaeff567c799f7a2e49bc665a81895f981a39ec ALBA-2020:4644 texlive bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for texlive is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texlive-lib-devel-20180414-19.el8.i686.rpm 29b1a1727d61520dda1970be90091dd4f89d470b99d893a3b5e035ce07a3127d texlive-lib-devel-20180414-19.el8.x86_64.rpm 74972123fcb47e42d06d23b001c9e998d87a9775aa5b7bf3773ddd7fbb3f3dbb ALBA-2019:3679 parted bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for the parted module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default parted-devel-3.2-38.el8.x86_64.rpm 1cef3e0a1e6f373b77ebfd09e7cdc934148823db494e7590255f2053a4f8ca31 parted-devel-3.2-38.el8.i686.rpm a790203d165a60ca5092981c653f1b83263b404846ad0809111b5b8982766b70 ALBA-2019:3411 lttng-ust bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 3 None

Updated lttng-ust packages that fix several bugs and add various enhancements are now available.

This update fixes two issues in lttng-ust and subpackages. There was a bad shebang in the /usr/bin/lttng-gen-tp utility that prevented users from executing it. This issue has been fixed. lttng-ust was only available for x86_64 architectures. lttng-ust is now available for all architectures supported on RHEL. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lttng-ust-devel-2.8.1-11.el8.i686.rpm 834ffe8ac58a4db417a0e43a3928067c4dd40f69aa027e8aafa90f81d7cbd104 lttng-ust-devel-2.8.1-11.el8.x86_64.rpm fd012ce286362f586c9d6f167e37ff895d61a6f092cc96ee8234ab2468f4d21c ALBA-2020:4499 NetworkManager bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for NetworkManager is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default jimtcl-devel-0.77-6.el8.x86_64.rpm 3ff7abf2783e1f1b0f44dcb0486bb0149e465419a4c673adec2e9134b8d28b6b libnma-devel-1.8.30-1.el8.i686.rpm b45c597794ca6f5b1867216cf0cd1caaeeab052cf9d95d5470bb9ab7043c89aa libnma-devel-1.8.30-1.el8.x86_64.rpm feabb92fb7c4433713d9f3c0c562458a88458177dd435c4a87c508190151c442 jimtcl-devel-0.77-6.el8.i686.rpm aa84619b109e78eba9cf8a9edbe6091b9b6d6505058ba92abd339757f19f826c ALBA-2019:3683 mingw-virt-viewer and dependencies bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 5 None

An update for the mingw-virt-viewer and dependencies module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw32-bzip2-static-1.0.6-12.el8.noarch.rpm 4b38e804a5f227d2d836b884667285ff7eb52e7ed578bbc2ad5d6df065305096 mingw64-bzip2-static-1.0.6-12.el8.noarch.rpm f868f846d2048446cb60d7b5699ef0dffe9a3beef47555619477dc9dd4c5ae9b mingw32-openssl-1.0.2k-2.el8.noarch.rpm 7d3e840fde56ab26a03e90a68a28d0959960b02ee183406170cb338f10eb0e13 mingw64-openssl-1.0.2k-2.el8.noarch.rpm 370c8318f5987b326c2705f0265e665f3a74b28f6f5cc89093eefab787b139f8 mingw32-bzip2-1.0.6-12.el8.noarch.rpm bea77e7a8f7a5fb9a5ad43841c028f983d99b242c69a1bb6be75165c8426baa4 mingw64-bzip2-1.0.6-12.el8.noarch.rpm 6388da084782274263852c73a3e9c9687e949e0dad4554b15773a5944c15b2b3 ALSA-2020:4629 Moderate: libvpx security update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for libvpx is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126) * libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232) * libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371) * libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvpx-devel-1.7.0-8.el8.x86_64.rpm af58c619943e005029109a546899dff3321121281940c2b526eab0a1e04abfb5 libvpx-devel-1.7.0-8.el8.i686.rpm 7ff3c2e21763535f4e3a5d0a1fdeb7ada2b37d40af87dd54232691cfe995aad0 ALSA-2020:0633 Important: ppp security update Copyright 2020 AlmaLinux OS Inc 0 2 Important

An update for ppp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es): * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ppp-2.4.7-26.el8_1.i686.rpm 77338f397cd45c865917959aef6159cfbb3419e48fb1574f4576f80f4606f7b0 ppp-devel-2.4.7-26.el8_1.i686.rpm 62b9599b0e357704737663588a1584008920f7832d74101bd44998e13cedd447 ppp-devel-2.4.7-26.el8_1.x86_64.rpm 9c99fff4af9c8b639762a573a85b20ef2b7b276d2297b75625cad0dc7f0cb8be ALSA-2020:1636 Moderate: libsndfile security update Copyright 2020 AlmaLinux OS Inc 0 4 Moderate

An update for libsndfile is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139) * libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsndfile-devel-1.0.28-10.el8.i686.rpm 897d0c8dc0108faaa5148d4b4906f74768fd16671a05bee0ac6397ef882d8bab libsndfile-devel-1.0.28-10.el8.x86_64.rpm 4d761b7313d8c95165ce7a4e6e9da523c3d1484f9d943e816167e95dbb9fbb97 ALBA-2019:3363 sendmail bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for sendmail is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sendmail-milter-devel-8.15.2-32.el8.x86_64.rpm 3962627aa992c2f7dd6c500a5da7880ecc0937e1b0ec85c9ec4eb476cdd2bb71 sendmail-milter-devel-8.15.2-32.el8.i686.rpm 7a3a76b25725fc9721fa2f45e208b83a70d297ff4d4dd3aefd6a7ffa03329631 ALEA-2019:3585 rdma bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 3 None

An update for rdma is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default infiniband-diags-devel-2.2.0-3.el8.x86_64.rpm d58f85c8a2ce69941a306292fcfff3d4e4472c7e1a4f6d830ae5f3864a9fc5eb infiniband-diags-devel-2.2.0-3.el8.i686.rpm b4afefbec4f2627856f3fca1762b1c8f72d46098fd36185fcdc7397c48f4b055 infiniband-diags-compat-2.2.0-3.el8.x86_64.rpm 641680b34b045dd486781b25ba402a8ed3668aada7056e7f8c782e508221f9d6 infiniband-diags-devel-static-2.2.0-3.el8.x86_64.rpm 053849ef9edcb5b4267859e5f33c0b979067c0bedf5738a2c0676b811c9fd010 infiniband-diags-devel-static-2.2.0-3.el8.i686.rpm cb726dc3163ff04b14a3a7ce1b8576d9822da116764e31661160e5bc56103c63 ALSA-2020:4676 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. The following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296) Security Fix(es): * libvirt: leak of /dev/mapper/control into QEMU guests (CVE-2020-14339) * QEMU: Slirp: use-after-free during packet reassembly (CVE-2019-15890) * libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent (CVE-2019-20485) * QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983) * libvirt: Potential denial of service via active pool without target path (CVE-2020-10703) * libvirt: leak of sensitive cookie information via dumpxml (CVE-2020-14301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ALBA-2021:0556 glibc bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for glibc is now available for AlmaLinux

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Bug Fix(es) and Enhancement(s): * glibc: Transaction ID collisions cause slow DNS lookups in getaddrinfo (BZ#1904153) * glibc: memcpy calls are slower for AMD processors on RHEL 8 than RHEL 7 (BZ#1913750) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default nss_hesiod-2.28-127.el8_3.2.i686.rpm d7873094f8f54faed6430e7afd5ab47efeda8fbf07b30ba13e749aab8d4a7b48 True glibc-nss-devel-2.28-127.el8_3.2.x86_64.rpm 3044ad1d6ac0d3044dcb1be7391ee884eaf51f374d6c0e896275fc44c288b775 True glibc-static-2.28-127.el8_3.2.i686.rpm e18fdaac9df389cccd178365a8b4b84c4e693062945d03e5e2d44df442215125 True glibc-nss-devel-2.28-127.el8_3.2.i686.rpm 50315be355afcded928018deaff351ae93f95f1afa15c768b608a4a5f69f5996 True nss_hesiod-2.28-127.el8_3.2.x86_64.rpm 3deecf97b1fb21720df6f7340c135061200ba26b725b981a497a61118a6b4511 True glibc-benchtests-2.28-127.el8_3.2.x86_64.rpm 611450da5f47d8aea96a991ffbbedb586977563a7ab510c206350c4ab7d3b4c1 True glibc-static-2.28-127.el8_3.2.x86_64.rpm 1759633005b521546e3dc2b766b5ae832bec9a35f45620adbbd8bd01aac1d05b True ALBA-2020:4668 bcc bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for bcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bcc-devel-0.14.0-4.el8.x86_64.rpm f1338b1f502cfc0510742b21158376c5c7ba7f103cbefad1a2923d73c840eb04 bcc-doc-0.14.0-4.el8.noarch.rpm 5e33ce346aac0d72db3cfb9220c5c9caee5badeb2611079389f722cc2cb876ff ALSA-2020:3654 Moderate: libcroco security update Copyright 2020 AlmaLinux OS Inc 0 2 Moderate

An update for libcroco is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library. Security Fix(es): * libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcroco-devel-0.6.12-4.el8_2.1.x86_64.rpm b805d882904907b1091da34a222acca1963c068ab85c187aad010fa85cb5fe2b libcroco-devel-0.6.12-4.el8_2.1.i686.rpm 414f1c5025b1f548afd752fd19252c43888b1e7ed4ce8bdfba572f64145c4166 ALBA-2020:1664 openblas bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for openblas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openblas-threads64-0.3.3-5.el8.x86_64.rpm d6158072204d330f20624bd12a10dc93112b1a6d045802b6f403b3d1ae46d4b6 openblas-threads64_-0.3.3-5.el8.x86_64.rpm 15c8a6fefc6509c7fb82f8c513cf6c9c417f4c971add1e2acf769b5cdce00a05 openblas-openmp-0.3.3-5.el8.i686.rpm 73d5a68ac254b57641f3ba33785fd05eae87928d55a296ccfdd4d88b1e8f7024 openblas-serial64-0.3.3-5.el8.x86_64.rpm 13fbc51f50ba768e288baa7090ba3d440670c07c7b4cacd4de6fa029333d9ca5 openblas-serial64_-0.3.3-5.el8.x86_64.rpm a083812c263bcfc84eb7021811737bd9ec52e6bc84bd6909bbab8d4c56224660 openblas-openmp64-0.3.3-5.el8.x86_64.rpm 2818548294a94ce86834a3faff4b735b58d531ac2b97314b95966f9438cd0cbe openblas-openmp64_-0.3.3-5.el8.x86_64.rpm 6f352591c81bb7f9bcb3adaa27cb512aae6f1eaf004691843c36dbdc20f125c8 openblas-static-0.3.3-5.el8.i686.rpm 5d24f2b8740329b1141a4c2199505f3ad729c160278c03b71953984d1d9740c9 openblas-static-0.3.3-5.el8.x86_64.rpm b49cf78953c21fa0a7681a73cc655e244aee19669b959cf1dabd690739ac7873 openblas-devel-0.3.3-5.el8.i686.rpm 8f285f556d62ca67e791d6259c7163127abac74a29e2f29b156bfd1d5ee47133 openblas-openmp-0.3.3-5.el8.x86_64.rpm 31b3a97df9c25fb8b0d903c46911c29c4ab29e49ee37d55eeb5e06b88dc32837 openblas-Rblas-0.3.3-5.el8.x86_64.rpm 378c5a0c2714bf4b83a8f6ac1601a5217fdc7840718f632f780f2bafaf153c05 openblas-devel-0.3.3-5.el8.x86_64.rpm f9b2f96a67739eda372432579d27a319c746aca53fffad11834783f847b65bcb ALBA-2021:0542 virt:rhel bug fix update Copyright 2021 AlmaLinux OS Inc 0 3 None

An update for the virt:rhel module is now available for AlmaLinux

An update for librevenge is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librevenge-devel-0.0.4-12.el8.i686.rpm 39972815fc9bfe97c9650950f0dcc35f26ebfca3281e805412d1c0a2f40db7bb librevenge-devel-0.0.4-12.el8.x86_64.rpm 45a84e8d307707f38acc03bab72b0d78ef2a95e27d0774c33470cd545ae593fa ALBA-2020:4569 sssd bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for sssd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.3.0-9.el8.x86_64.rpm 5c0dbdcfa6d63e0674d7586f0593019b7d392a446c518a0a3a100eaf242409f7 libsss_nss_idmap-devel-2.3.0-9.el8.i686.rpm 81382e3deb50a85e9b6037057e80fe7013f0d6686606ee6a39ce0050b8c4cde6 ALBA-2020:4773 libgit2 bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libgit2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libgit2-devel-0.26.8-2.el8.x86_64.rpm 3593a3c4b24abe2c72d9ec0463f4a548249861ab43a5b9105e0a1c48d6e74e76 libgit2-devel-0.26.8-2.el8.i686.rpm 033e21af2325f642def21cf8bdf88494814770793d1dfaa1f0c3b0abfc5f227b ALSA-2020:4643 Low: poppler security update Copyright 2020 AlmaLinux OS Inc 0 2 Low

An update for poppler is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc (CVE-2019-14494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default poppler-qt5-0.66.0-27.el8.x86_64.rpm 909f7db56d8dafdc8bf306b507b1cf48a8cda4a288ece7ded3ef311588e44e3e poppler-glib-devel-0.66.0-27.el8.i686.rpm 4952f293318c86b2ede65081f7f7d0fd3395ba7c55225c45a097061bd42e5e69 poppler-glib-devel-0.66.0-27.el8.x86_64.rpm a35c18f4568325762630a8dfde07a12974df3c28821a2ee32af25ee5b913762e poppler-qt5-devel-0.66.0-27.el8.i686.rpm 9f97a36291102b2450cf51c4238a08a205feac098428c234533818c3f788d082 poppler-qt5-0.66.0-27.el8.i686.rpm 5d090f674d6776a1e5502351a2c7f31aa12677614349552fca193f152332fcca poppler-cpp-devel-0.66.0-27.el8.i686.rpm fda0eec2b1b946486170a0e991136b0e9607aaf0a83ea0ed9b7bc2895f5bb61a poppler-qt5-devel-0.66.0-27.el8.x86_64.rpm 0a54aaebcb16c3726517fcc21d5140a6a25d40faa4463ea9279239d64f4bdc8f poppler-devel-0.66.0-27.el8.x86_64.rpm b924bce1901c9dbca3f2cd4a0042d20772f2a24601d4a05ed460a21a9f9b8514 poppler-cpp-0.66.0-27.el8.x86_64.rpm d4212873588c2032ed25a7fbb12a25d4c79467dd2076f32127e8207225122d9d poppler-cpp-0.66.0-27.el8.i686.rpm 1d17317df6955ad54e4981f6d11142dddc6bbe09d90084ca21617b3d14b2471b poppler-devel-0.66.0-27.el8.i686.rpm 4835b664b5220a4b1fe1a8b81e4cbedbfa16107557fe661fd112d7e6f1d04629 poppler-cpp-devel-0.66.0-27.el8.x86_64.rpm 138252dc01eac0a7ddac61f47d7cefdab6013f24dce1c2badd190db55b294a74 ALBA-2020:4834 new packages: gcc-toolset-10-systemtap Copyright 2020 AlmaLinux OS Inc 0 4 None

New gcc-toolset-10-systemtap packages are now available for AlmaLinux

An update for libsepol is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsepol-static-2.9-1.el8.x86_64.rpm 5f5c34d265be534d7c0abfe2cbed9f3b22c6100a706807ae19a8208b73aa7f98 libsepol-static-2.9-1.el8.i686.rpm c9c49bb652ac9b99dfeff6cd81e86528be6d0c454284d2d597294664823786c7 ALSA-2020:2755 Important: nghttp2 security update Copyright 2020 AlmaLinux OS Inc 0 1 Important

An update for nghttp2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnghttp2-devel-1.33.0-3.el8_2.1.i686.rpm 65d8a5b2b3469b1408715d02b285d7700af5810d185de5c584db60db0b895423 libnghttp2-devel-1.33.0-3.el8_2.1.x86_64.rpm 7a0913f751f773b67ce85173ad46dae39a185597674e619a63a99a482c409cf9 nghttp2-1.33.0-3.el8_2.1.x86_64.rpm 786fc0578da180e0567f65f98eb23d5e34dd735dee045d07dc13968db645de7c ALEA-2020:4653 pmix bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for pmix is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pmix-devel-2.2.4rc1-1.el8.x86_64.rpm 32ddec0a9df612145e00a9769d543db34adb53ab7062c68a94ce725cd8b7fd67 ALEA-2020:1844 OpenIPMI bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for OpenIPMI is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default OpenIPMI-devel-2.0.27-1.el8.x86_64.rpm ded77c0a6f79c2a89e6691b2c8995acbd8f916dcc0159ddf30981685daba487f OpenIPMI-devel-2.0.27-1.el8.i686.rpm 38eeb658a00c00cefec0b464db495e8361bb7c0b3255b26701f8f4cb220eae5c ALBA-2020:5494 virt:rhel bug fix update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for the virt:rhel module is now available for AlmaLinux.

An update for TPM 2.0 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tpm2-abrmd-devel-2.1.1-3.el8.x86_64.rpm 5fea17b9b1390273c9a3be516088791eb0f1a2249274cbac3ec95fbe0ac8dd73 tpm2-abrmd-devel-2.1.1-3.el8.i686.rpm 291da9efaac3998941ec3417a081383e641eee2665b9bb03c2ec93a0f039195b ALBA-2020:4530 nfs-utils bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for nfs-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-35.el8.x86_64.rpm 08a64abbde9e23e33dfd860ca3594a79e0cac023df4030375932ca2f164ad22a libnfsidmap-devel-2.3.3-35.el8.i686.rpm 8092d1f7dca02d533ae29cdfb0520c03257c31d09c3465f71fe89085ceeaffde ALBA-2020:4504 gcc bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for gcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-plugin-devel-8.3.1-5.1.el8.alma.i686.rpm 05e7d08b8d102dd51cccf3a8ac1c032713972b3fed28624900fe09ccd495f11c libstdc++-static-8.3.1-5.1.el8.alma.i686.rpm 9f0fbaef2c3af3cfea43581a373ccadcc7c622b4da98373f69822217ed8611c6 gcc-plugin-devel-8.3.1-5.1.el8.alma.x86_64.rpm 7c8538c6c5648fbc3855f08265c36fc6d8438c9eeaab6274cb38e803a9fd8853 libstdc++-static-8.3.1-5.1.el8.alma.x86_64.rpm 9d40603b0565509da19aea2915c94705e0569e72d70e276e4c4692acc2436c74 ALEA-2020:4700 createrepo_c bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for createrepo_c is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default drpm-devel-0.4.1-3.el8.x86_64.rpm e59c26ea61b1ac5bffd4065b45acc5bdb2eddabeb93afc6c029c05b85b7ed059 drpm-devel-0.4.1-3.el8.i686.rpm 8a3f153b14b4436ac757ec3e4a3dc650b5c77986bd828fd424352ca918624b6d ALSA-2020:1686 Low: libmspack security and bug fix update Copyright 2020 AlmaLinux OS Inc 0 2 Low

An update for libmspack is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft. Security Fix(es): * libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmspack-devel-0.7-0.3.alpha.el8.4.x86_64.rpm 2bcc111e94e97f1b3ee1719aebb5133ad832a787282e2c6753be107fc5318749 libmspack-devel-0.7-0.3.alpha.el8.4.i686.rpm c953f6a84944896c8bd279f5685357ac21116356a876140e7abad1ba5d7263c5 ALSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 6 Low

An update for GStreamer, libmad, and SDL is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fix(es): * libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default SDL2-devel-2.0.10-2.el8.x86_64.rpm 54e1621d9e9ea711773150c1bda19d62c25329cc78d790ec88eb41c581bb0398 libmad-devel-0.15.1b-25.el8.i686.rpm 1801f45d9d38feef97cee8da49701cde9d281c4ccfa9bd138647aefc7db5b70b SDL2-devel-2.0.10-2.el8.i686.rpm ea6ef72e7bb278082b4f6c5acea9f2f0b7d27a9037d5f78aca0575d556eb503e gstreamer1-plugins-bad-free-devel-1.16.1-1.el8.x86_64.rpm 0c50ccade9093d1767ea3623436e61cd4d45f73f9c987145d4026b9aaa223dab SDL2-static-2.0.10-2.el8.i686.rpm f30ab1978a77ebd687b26b4e1ccd424f222f7c5f8a28a98201b57131bde85dad SDL2-2.0.10-2.el8.i686.rpm 810e992d8e5e7b7b1e8288f10fcf7330d5fdf5ebbe465fbfe9871bbe11291fb4 libmad-devel-0.15.1b-25.el8.x86_64.rpm 8af340e4fc3bef9c94ced358ac9216dbc7160fe99cc7348dd8b72f0c5c2a1dc1 SDL2-static-2.0.10-2.el8.x86_64.rpm 02597cfcd881f99044b549f5304abac121b60f474896876f1d73966cc3382e7c SDL2-2.0.10-2.el8.x86_64.rpm aff9fc104197bf7e14be8b286edc1c3c120b8e44a6c1f1c33d6236d58bc0675f gstreamer1-plugins-bad-free-devel-1.16.1-1.el8.i686.rpm b91cd28916947fc1081eecf430ecd4997b4ac00b3576c253fd018c1f3c9b602d ALSA-2020:4827 Moderate: oniguruma security update Copyright 2020 AlmaLinux OS Inc 0 2 Moderate

An update for oniguruma is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Oniguruma is a regular expressions library that supports a variety of character encodings. Security Fix(es): * oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default oniguruma-devel-6.8.2-2.el8.x86_64.rpm 341d680c7a4a55c0171fd8f5ea8dfae52e0f2bbde1dfe6886b68624b1ea1a8cc oniguruma-devel-6.8.2-2.el8.i686.rpm 818b5a7714cb9c53e33a5379aff4b07b768844c00d55947efbe53136cb1d954c ALBA-2020:1824 augeas bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for augeas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default augeas-devel-1.12.0-5.el8.x86_64.rpm 733ae14e8bc8b7a9a4c1fd410a4af8372f8d05d7086769bea652b8db9a28ca92 augeas-devel-1.12.0-5.el8.i686.rpm 2b59d43759e67d6b401c006de472942bf6d18f1660847009593691cb684cc895 ALSA-2020:1581 Low: wavpack security update Copyright 2020 AlmaLinux OS Inc 0 3 Low

An update for wavpack is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840) * wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841) * wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498) * wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315) * wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317) * wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default wavpack-devel-5.1.0-15.el8.x86_64.rpm 3a4a4200fbaaeaad7d4ba82a657d9e44dbe56b59c613ba16a9598870ca78faad wavpack-devel-5.1.0-15.el8.i686.rpm e1da8e8de14d0bac64b96e6f3e600679f17f3c578f3770a42fa106181fd6c594 ALBA-2020:4441 glusterfs bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for glusterfs is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glusterfs-devel-6.0-37.2.el8.x86_64.rpm 14227d0107d3fe083f4742892600272186e840279e978bbe3c54dc82a2bf8d90 glusterfs-api-devel-6.0-37.2.el8.x86_64.rpm 4b77226db1f1233a047b22040d6b4296152e5ef22c834f4b72b606f5deeefeaf ALBA-2020:4581 libdb bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libdb is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdb-cxx-5.3.28-39.el8.x86_64.rpm 0acaded09380da4e961c255d43ab51a7818ffa2c9a86e73e1ecc76eb6988674f libdb-sql-5.3.28-39.el8.x86_64.rpm 7a8595cab31bfd781cb4d8477240c5a094e1a3652fd248ca0e7e52dbd6aa66d7 libdb-sql-devel-5.3.28-39.el8.i686.rpm a8c4f107ecf2476868b4d3a46d0612e60351c63fd6bd216bedd012b47a5b1703 libdb-cxx-devel-5.3.28-39.el8.x86_64.rpm f883f2366f1fe4d537dc50e4a77e7fc9cb913ca7befaeacb29046124c384e42c libdb-cxx-devel-5.3.28-39.el8.i686.rpm 62abb8f6805615a93430bab5512166a2a5c15082eee62b9d884092d1b9fecbe5 libdb-devel-doc-5.3.28-39.el8.noarch.rpm df0490facf3d01a645179e731183f6fc65972ba44fcbdbc4632be6b37ae47825 libdb-sql-devel-5.3.28-39.el8.x86_64.rpm 3bdea045fcd097f6e6e375484998115cea88b5bc46a10b53209305acd7b454ad libdb-sql-5.3.28-39.el8.i686.rpm b3f937f3a492d971a79ba5baf2ffa3c47dc5e76592338ee42fce57976f09eb03 libdb-cxx-5.3.28-39.el8.i686.rpm 850ef531f36fb947e23b30be4592c3f4f39ffe946640c3b5be8ebcc901351f5c ALEA-2020:4571 elfutils bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for elfutils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default elfutils-devel-static-0.180-1.el8.i686.rpm f7178c5f343473a72101d27d072ef156f67c439bdaeb571feb4db70a1ce08756 elfutils-libelf-devel-static-0.180-1.el8.x86_64.rpm ecd94a89f84879c002a4983ea89355bad22a467863fb03f1d3cbff1b8b53e4c5 elfutils-libelf-devel-static-0.180-1.el8.i686.rpm 5a7c12a92a2dcacfa16b9f15dc94b167e98e591734007e0dbda75f4bdd3adf97 elfutils-devel-static-0.180-1.el8.x86_64.rpm 2307acb24cac81b796dfabf272b9bded122cc54a605aa3570cfabfcf561b0056 ALSA-2020:4763 Moderate: dovecot security update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for dovecot is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: command followed by sufficient number of newlines leads to use-after-free (CVE-2020-10958) * dovecot: sending mail with empty quoted localpart leads to DoS (CVE-2020-10967) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dovecot-2.3.8-4.el8.i686.rpm 9324049119e6a1e8d40ac4da979dfb9b56249f208e1b18149b3c7389a0a7014e dovecot-devel-2.3.8-4.el8.x86_64.rpm e64405f9af4301a9bb5704b0206ef51b5c6ef8b21d812731881fdb68694f5475 dovecot-devel-2.3.8-4.el8.i686.rpm 3d51c176a4cecd1b28c998c9b0b27fb62da44a76a9977735c89ef85caf62b562 ALSA-2020:4628 Low: libreoffice security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 4 Low

An update for libreoffice, libcmis, and liborcus is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893) Security Fix(es): * libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802) * libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libreoffice-sdk-6.3.6.2-3.el8.alma.x86_64.rpm 143535ccf197cb6d5d852ca23de2cc1c7fa9cd8a08d00d5d99d9ddace8c27944 libreoffice-sdk-doc-6.3.6.2-3.el8.alma.x86_64.rpm 23d91d944b3fa30a9b703d4e2c6b5b07ff08d9ad9a6bc61c6134b5705068ed92 ALBA-2020:4637 cups-filters bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for cups-filters is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default cups-filters-devel-1.20.0-20.el8.x86_64.rpm 3096f6752db95a22882befb99da9de49c986cb57447f924045dbb06bc4cea930 cups-filters-devel-1.20.0-20.el8.i686.rpm 4d7e1459e6876fd9eab9492562b47c83aaec68791f8083073d38ff8db029865d ALSA-2020:1577 Moderate: exiv2 security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 4 Moderate

An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917) Security Fix(es): * exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421) * exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005) * exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868) * exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303) * exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304) * exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305) * exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772) * exiv2: information leak via a crafted file (CVE-2018-11037) * exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338) * exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229) * exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230) * exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282) * exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581) * exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915) * exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107) * exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108) * exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535) * exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607) * exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096) * exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097) * exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098) * exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099) * exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143) * exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109) * exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111) * exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112) * exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113) * exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114) * exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libgexiv2-devel-0.10.8-4.el8.x86_64.rpm bca558862faf4fab0f57d2950e6dae8ec7d0d5df3eb8a370dad113350e51066b exiv2-devel-0.27.2-5.el8.i686.rpm f2d30f33f961e786ab12348414dcfb0044ca8c7f20f87af1482e6842177dfa14 libgexiv2-devel-0.10.8-4.el8.i686.rpm 450ba7824d0b59f31b6fc8901448ff6e57fd7e19434397c146504871462a72b0 exiv2-doc-0.27.2-5.el8.noarch.rpm ae02e88f79d5bd056b249f519b1be4afab3e904e29db6a41e2b46af445087524 exiv2-devel-0.27.2-5.el8.x86_64.rpm bc682739258faf1b46be75a0fe3d28c365a712aae74e0856abbaf6e1b9a54971 ALSA-2021:0711 Important: virt:rhel and virt-devel:rhel security update Copyright 2021 AlmaLinux OS Inc 0 2 Important

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

An update for autogen is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default autogen-libopts-devel-5.18.12-8.el8.x86_64.rpm daf472d7124a9da3b56d0a1da28518d2050b494f5a222d8940e9960dcc61fae3 autogen-5.18.12-8.el8.x86_64.rpm 5d08a994d3a992d490210e02e1058a055f881d852405fa490219ace2e23387f2 ALSA-2019:2722 Low: libwmf security update Copyright 2019 AlmaLinux OS Inc 0 4 Low

An update for libwmf is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick. Security Fix(es): * gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwmf-devel-0.2.9-8.el8_0.x86_64.rpm c4213f6736e692bab45dc9a989df50de6d46d6bfdc67750bf2acdaafc1f4e5ce libwmf-devel-0.2.9-8.el8_0.i686.rpm b086c5f535735f48c11ecaea3234b930f13e5d72c5ad257283e2e46008a96173 ALBA-2020:4591 libstoragemgmt bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libstoragemgmt is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libstoragemgmt-devel-1.8.3-2.el8.i686.rpm deab6216b1d5b91a99873ad1dae6d99b49ffd6c874691964490b12734d57bd55 libstoragemgmt-devel-1.8.3-2.el8.x86_64.rpm 620e46f0289c2577e2386fe80c590e8f7a14854cd2542206ef3b4500d0bb965d ALBA-2020:1615 graphviz bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for graphviz is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default graphviz-devel-2.40.1-40.el8.i686.rpm b11671cbea3fa5f4a878e558773cc87ba56c6762fadcdbd115b1650b4856a4a4 graphviz-doc-2.40.1-40.el8.x86_64.rpm 6e23619cbead577b6468d11924548083e0e5947ecbaf4620880ab54c2360d5ed graphviz-gd-2.40.1-40.el8.x86_64.rpm f04351160f58d42f3b57c1fc2dac7a3b882a0e054528ff9877549fd6ca4ac1ab graphviz-python3-2.40.1-40.el8.x86_64.rpm 392b088c946f0c9990ee919d3395cb885e9f4b0584ca75d813d3d09a8812d269 graphviz-devel-2.40.1-40.el8.x86_64.rpm 7c893f5335e6962b8128ffbfbf2da60d56b345987d3c1d1aea4713791e602718 graphviz-gd-2.40.1-40.el8.i686.rpm 1fd50bf501ca61f31c9f5d2baaec5777ccf92860585b8035bc987d8613707c4b ALSA-2020:1616 Low: irssi security update Copyright 2020 AlmaLinux OS Inc 0 2 Low

An update for irssi is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Irssi is a modular IRC client with Perl scripting. Security Fix(es): * irssi: use after free when sending SASL login to server (CVE-2019-13045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default irssi-devel-1.1.1-3.el8.x86_64.rpm af106afd7d0cdf24c303f09e3e5f87bb261158c0cf48285192f8ed3e9e0a8bcf irssi-devel-1.1.1-3.el8.i686.rpm 971dbb1a7de30285d9a50723f9d48e8826fbd6c39f423e52ccbb602e3e0c8f61 ALBA-2019:3462 libcdio bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for libcdio is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcdio-devel-2.0.0-3.el8.i686.rpm c2b36f738529697b273f03ad87ba00d2a1fb9f645a4c1465b4e97d5d0da9d0d4 libcdio-devel-2.0.0-3.el8.x86_64.rpm 696566867f8157849b7219215f91fceda1b6b89c814a538122a163d45e694750 ALEA-2020:1763 libnftnl bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for libnftnl is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnftnl-devel-1.1.5-4.el8.x86_64.rpm 73b492cedf6c0a8a463e590b202b3977dd99b5d7712a316ad9c21a3c34d8cd79 libnftnl-devel-1.1.5-4.el8.i686.rpm 9ff755bae0718bac4ea79d8d31d2d5d69ef11cfa4b90ee10ecb08cfb64d39f59 ALBA-2020:4764 papi bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for papi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpfm-static-4.10.1-3.el8.i686.rpm 8959abf566649f12c0b670bd18e83e4c114d4eca8aa73dc237941087c9dd6d4b libpfm-static-4.10.1-3.el8.x86_64.rpm b05f99f38e0c20ae0996e6f94c8d6998fd52421eb62761496cca31a5bddcf9a9 papi-testsuite-5.6.0-11.el8.x86_64.rpm 92c56452971c204e250be90ef7d6a97bf8294b02d985c0be6b1237dcc3a10270 python3-libpfm-4.10.1-3.el8.x86_64.rpm 0daef2d8c689fb10ab8c8faea5ead510b89d280fc3553ceb34586bfc8e036f68 ALSA-2020:1766 Moderate: GNOME security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 6 Moderate

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) * gdm: lock screen bypass when timed login is enabled (CVE-2019-3825) * gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447) * gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448) * gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default clutter-doc-1.26.2-8.el8.x86_64.rpm b181d866166cde2078f089da89a27c928def4c1197693f7cb9ff9134bb4a7732 gjs-devel-1.56.2-4.el8.i686.rpm 349cfbbebfd0fa901e7a3940bf7215af1a90e9362b996e20ec8e95b07837b423 mozjs60-devel-60.9.0-4.el8.i686.rpm 8fac2a3a00dbfec3eb2344bc112f76acc3e4a8013b958fc8a80ce319e751226d vala-0.40.19-1.el8.x86_64.rpm 29ed7e032a1a8f966c069814188f4ee5d7671762261a80af26e5f73187888c54 mozjs52-devel-52.9.0-2.el8.i686.rpm 6bc80be3fa0d73a7130f447b33a61181b5d5128d06a4b3ab801baa951cad8086 vala-devel-0.40.19-1.el8.x86_64.rpm cbefdc01ca0380f56c49833b9d6819dd939bc21fa553ec5062ef389c45d394b6 gnome-menus-devel-3.13.3-11.el8.x86_64.rpm 81620071d46e3d94c1d28c452ca3f7d71960c1143306d6d4582c31e9dc0410bc accountsservice-devel-0.6.50-8.el8.x86_64.rpm 39844719e5169607803c2d89a06164f90e6b3894b4219564e4422ce730872ea2 mozjs60-devel-60.9.0-4.el8.x86_64.rpm 7189aecf72771dde71b651298db93160cf15d46cefa98d93db6c311db728c90a vala-devel-0.40.19-1.el8.i686.rpm cc77cfcbbd11695b51ef0e8e704fad4a609e40121ba1864875bb22928c4b527e vala-0.40.19-1.el8.i686.rpm 93138300f1fed4675186536ac2ea598c049572fc6787bacdd1b22ad7560c5104 accountsservice-devel-0.6.50-8.el8.i686.rpm b08cd92df783298a6bb23cff26171e6be307736ffd5954433f0c54b0b116e005 clutter-devel-1.26.2-8.el8.x86_64.rpm e3a9a98dd74f8dbbcf5b859be5f43b13720fe3bbd90e60af9f151a34437d7152 gnome-menus-devel-3.13.3-11.el8.i686.rpm d01446861f2e5b46f66e7a0d3cad782d42cc204d16309f4cf08a1518e1c8dd29 clutter-devel-1.26.2-8.el8.i686.rpm 6bcdd54bf1856e09f47d34870851fbb9ff50ad2dafe67254d1f183a89ef3af8c gjs-devel-1.56.2-4.el8.x86_64.rpm ce86b010904f170105efb422bdd487916c05d663cbb183b15b5a5937c0a4aad5 mozjs52-devel-52.9.0-2.el8.x86_64.rpm 685f009107485ec920db4360c44f01cb33cfff984d678ef986b2f9e164983641 ALEA-2020:1611 input stack bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for libevdev, libinput, libwacom, libxkbcommon, and xkeyboard-config is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libevdev-devel-1.8.0-1.el8.x86_64.rpm 9b626707bbf0c09354e4c9edce4ef147722f530848e8e666014a0aee1a6d01ca libxkbcommon-x11-devel-0.9.1-1.el8.i686.rpm 42abb48362bc59afd3815205de3cd08167a30766ae0c9233cf2257afeaea3910 libxkbcommon-x11-devel-0.9.1-1.el8.x86_64.rpm 97b93d87163f6255b8748e7c05ff5bdb352f9357a6425697f1dab0b09f5fdbc7 libevdev-devel-1.8.0-1.el8.i686.rpm 40c4694e237311adea16d842a873e8ec6bb0cf948a5ddc2dcf0994be69ed3ee6 libinput-devel-1.14.3-1.el8.i686.rpm dd5051f66b4c41e637d6801cb7770d756587b372902d7cebdba23a7a39b90d64 libinput-devel-1.14.3-1.el8.x86_64.rpm ba1e1304343dfaeaf8e72435922fd8b943c0359dae077f2ea1d691f4416c39f5 ALSA-2020:1653 Moderate: zziplib security update Copyright 2020 AlmaLinux OS Inc 0 2 Moderate

An update for zziplib is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zziplib-devel-0.13.68-8.el8.i686.rpm 5502bc7175bbfe19f43d5860046e59c3112a7dc59fc3df19dec7fe8568459a44 zziplib-devel-0.13.68-8.el8.x86_64.rpm 583529ed57c8e0b0b8212e5288431d5ed1775c29991ae2a4971a80c0fc59c4b6 ALBA-2020:4531 file bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for file is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default file-devel-5.33-16.el8.x86_64.rpm a03f01ec7051d8d969b493ebe04f8cf7158b195e10507758fbdd3b611b2e274d file-devel-5.33-16.el8.i686.rpm 36d58b6a3e0b294a3c44d4d4d15a7c6b6c15837850724111aea519055503d46a ALBA-2019:3680 doxygen bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for doxygen is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default doxygen-1.8.14-12.el8.x86_64.rpm 9174b2c23778e6901010050057d2602de8ad97eaf32613606caa099c0daec480 doxygen-latex-1.8.14-12.el8.x86_64.rpm 5f4c65e4df8b1a12a57d2962fcd7c9f86eae0bcee2b588a5eff39e960f632d1d doxygen-doxywizard-1.8.14-12.el8.x86_64.rpm 165ea31184b2cadd2fc36eafbc68b133f6a1618fcc51c3047acb99ab441e0057 ALBA-2021:0554 lvm2 bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for lvm2 is now available for AlmaLinux

The lvm2 packages include complete support for handling read and write operations on physical volumes, creating volume groups from one or more physical volumes, and creating one or more logical volumes in volume groups. Bug Fix(es) and Enhancement(s): * lvmvdo(7) manpage bugs (manpage needs refinement) (BZ#1895081) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-event-devel-1.02.171-5.el8_3.2.i686.rpm d86db7d8282cd6ea41bcc60cbf1d1d06c4d3fcf21e927c19e7fc5f5197764cdc device-mapper-devel-1.02.171-5.el8_3.2.x86_64.rpm 066f7e96f83e174da462ff1bcae6a42c694c638af5899c448de512e3909e4180 device-mapper-devel-1.02.171-5.el8_3.2.i686.rpm 1178f50b472785a7a75b47a5d19036d89a61fd40ad7f904bbd157ac2271a6151 lvm2-devel-2.03.09-5.el8_3.2.x86_64.rpm 99db6b04f1e97b47272e63fac70bdf29287d8f2893a95ec94887e18343668831 device-mapper-event-devel-1.02.171-5.el8_3.2.x86_64.rpm 88646ba91462818f494efab4738129e88e73fca1ef1f7a910cb397941b3f1cbf lvm2-devel-2.03.09-5.el8_3.2.i686.rpm dd177d0f4c782b686c7cf2fb6d9dfb61675446edb53097c0f51a015f8e9af615 ALBA-2020:1654 dyninst bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for dyninst is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dyninst-devel-10.1.0-4.el8.i686.rpm 44c0b479be28b78186dc357c8e131c652436ddebc5ff45a10552a4afa898844b dyninst-doc-10.1.0-4.el8.x86_64.rpm 0ab506a9062f4cf654daca53480dac364ef968bc64c0c19e749d20a51b168d3e dyninst-static-10.1.0-4.el8.i686.rpm 23c948ff38156f249c7650f814102db5f46a045e35e5e2a347df4cae9221907c dyninst-static-10.1.0-4.el8.x86_64.rpm bf12d792d1e12adc232c430b7f64995cf700f5ad292cd540e3e46a1bd8621428 dyninst-devel-10.1.0-4.el8.x86_64.rpm d00a2c0b4cc90964299426ddd303a9b1b2596d0905b563889ee99dcf9f0173b6 dyninst-testsuite-10.1.0-4.el8.x86_64.rpm be97b8c77d86614aeca37f2fbc91a2cc91e4f593de325b96284fb44a1674a4a0 ALBA-2020:1922 uglify-js bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for uglify-js is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default js-uglify-2.8.29-4.el8.noarch.rpm 6e0d70095280dc8b9e8e63af2e531b80f4a1b062d8aa98ca5611464ca7b18c34 uglify-js-2.8.29-4.el8.noarch.rpm df87f3ba12e381c5e5db06bc1be84c9e5c77c1889649975e4b0a45a6d90e0781 ALBA-2020:4589 libsemanage bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libsemanage is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsemanage-devel-2.9-3.el8.x86_64.rpm 1976b1bca212d6b2eb113ebbf983ab80cb3e89c70e4b33336d982466bbf41478 ALBA-2020:1610 wireshark bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for wireshark is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default wireshark-devel-2.6.2-12.el8.i686.rpm 7e56141571f76cfc6ce391dbaede6aa573459fb35fe8629448c8bd549d353ef8 wireshark-devel-2.6.2-12.el8.x86_64.rpm 6b6ef577e446ee1555bf3ce788e206e36f008a5c13fcda4e0ebd00dd7105d428 ALBA-2020:4635 ghostscript bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for ghostscript is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ghostscript-tools-fonts-9.25-7.el8.x86_64.rpm 0fa452b59ad0a2f4289de2dc21f63356852a6e0a2bc71b44e84c1c883b786228 libgs-devel-9.25-7.el8.i686.rpm 036fac14bef4bc348e3d85599afc06a7e4a7eb5ae4b3b7360c6c1bf29f7dc4d6 libgs-devel-9.25-7.el8.x86_64.rpm f0fe5e3b86b032481202cc49ec02e35858f47631f672a9a9c4dd6e0a380b77cc ghostscript-tools-printing-9.25-7.el8.x86_64.rpm 37be3dab93488d5db5d97ee8c9cd56a3eff0bdbb5673f093c3decc0b7b2055be ghostscript-doc-9.25-7.el8.noarch.rpm 65387f1dd6e929fca160db21aef0865007d6aa854c1026131d8c99f3fd0c7003 ghostscript-tools-dvipdf-9.25-7.el8.x86_64.rpm 0661595d192004e73627118071080dd2f99c002298fd367338f6a985a97f8f74 ALSA-2021:0558 Important: kernel security, bug fix, and enhancement update Copyright 2021 AlmaLinux OS Inc 0 9 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free (CVE-2020-29661) * kernel: performance counters race condition use-after-free (CVE-2020-14351) * kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Final fixes + drop alpha_support flag requirement for Tigerlake (BZ#1882620) * OVS complains Invalid Argument on TCP packets going into conntrack (BZ#1892744) * BUG: using smp_processor_id() in preemptible [00000000] code: handler106/3082 (BZ#1893281) * Icelake performance - add intel_idle: Customize IceLake server support to RHEL-8 (BZ#1897183) * [mlx5] IPV6 TOS rewrite flows are not getting offloaded in HW (BZ#1897688) * RHEL 8.3 SAS - multipathd fails to re-establish paths during controller random reset (BZ#1900112) * RHEL8.3 Beta - RHEL8.3 hangs on dbginfo.sh execution, crash dump generated (mm-) (BZ#1903019) * Win10 guest automatic reboot after migration in Win10 and WSL2 on AMD hosts (BZ#1905084) * block, dm: fix IO splitting for stacked devices (BZ#1905136) * Failed to hotplug scsi-hd disks (BZ#1905214) * PCI quirk needed to prevent GPU hang (BZ#1906516) * RHEL8.2 - various patches to stabilize the OPAL error log processing and the powernv dump processing (ESS) (BZ#1907301) * pmtu not working with tunnels as bridge ports and br_netfilter loaded (BZ#1907576) * [ThinkPad X13/T14/T14s AMD]: Kdump failed (BZ#1907775) * NFSv4 client improperly handles interrupted slots (BZ#1908312) * NFSv4.1 client ignores ERR_DELAY during LOCK recovery, could lead to data corruption (BZ#1908313) * [Regression] RHEL8.2 - [kernel 148.el8] cpu (sys) time regression in SAP HANA 2.0 benchmark benchInsertSubSelectPerformance (BZ#1908519) * RHEL8: kernel-rt: kernel BUG at kernel/sched/deadline.c:1462! (BZ#1908731) * SEV VM hang at efi_mokvar_sysfs_init+0xa9/0x19d during boot (BZ#1909243) * C6gn support requires "Ensure dirty bit is preserved across pte_wrprotect" patch (BZ#1909577) * [Lenovo 8.3 & 8.4 Bug] [Regression] No response from keyboard and mouse when boot from tboot kernel (BZ#1911555) * Kernel crash with krb5p (BZ#1912478) * [RHEL8] Need additional backports for FIPS 800-90A DRBG entropy seeding source (BZ#1912872) * [Hyper-V][RHEL-8] Request to included a commit that adds a timeout to vmbus_wait_for_unload (BZ#1913528) * Host becomes unresponsive during stress-ng --cyclic test rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: (BZ#1913964) * RHEL8.4: Backport upstream RCU patches up to v5.6 (BZ#1915638) * Missing mm backport to fix regression introduced by another mm backport (BZ#1915814) * [Hyper-V][RHEL-8]video: hyperv_fb: Fix the cache type when mapping the VRAM Edit (BZ#1917711) * ionic 0000:39:00.0 ens2: IONIC_CMD_Q_INIT (40) failed: IONIC_RC_ERROR (-5) (BZ#1918372) * [certification] mlx5_core depends on tls triggering TAINT_TECH_PREVIEW even if no ConnectX-6 card is present (BZ#1918743) * kvm-rhel8.3 [AMD] - system crash observed while powering on virtual machine with attached VF interfaces. (BZ#1919885) Enhancement(s): * [Mellanox 8.4 FEAT] mlx5: Add messages when VF-LAG fails to start (BZ#1892344) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-240.15.1.el8_3.x86_64.rpm add5a9c8240aa251cfb8c00fbb82a4d03064449c36c7fb3f847cdc1116d8b193 True ALBA-2020:4639 memkind bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for memkind is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default memkind-devel-1.10.0-10.el8.x86_64.rpm 99ab381181f6687bed8d9eec06b0ccd79e030cd85438dad9ed7b39f617c38e1d ALSA-2020:4647 Moderate: freerdp and vinagre security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 7 Moderate

An update for freerdp and vinagre is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop. The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287) Security Fix(es): * freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018) * freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039) * freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042) * freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047) * freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396) * freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397) * freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019) * freerdp: Integer overflow in VIDEO channel (CVE-2020-11038) * freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040) * freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041) * freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043) * freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044) * freerdp: out of bounds read in update_read_bitmap_data function (CVE-2020-11045) * freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read (CVE-2020-11046) * freerdp: out-of-bounds read could result in aborting the session (CVE-2020-11048) * freerdp: out-of-bound read of client memory that is then passed on to the protocol parser (CVE-2020-11049) * freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read (CVE-2020-11058) * freerdp: out-of-bounds read in cliprdr_read_format_list function (CVE-2020-11085) * freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function (CVE-2020-11086) * freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage (CVE-2020-11087) * freerdp: out-of-bounds read in ntlm_read_NegotiateMessage (CVE-2020-11088) * freerdp: out-of-bounds read in irp functions (CVE-2020-11089) * freerdp: out-of-bounds read in gdi.c (CVE-2020-11522) * freerdp: out-of-bounds read in bitmap.c (CVE-2020-11525) * freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later (CVE-2020-11526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freerdp-devel-2.1.1-1.el8.i686.rpm 039cd71e74b668f1ff3e4a068cfe6aeb22d4e4b878a3ee16429467bac5b82af8 freerdp-devel-2.1.1-1.el8.x86_64.rpm 0d2fb3b5aa877db896f5c722897ff18b72f635c5c2f7603e1f4f0aaab5158d64 ALSA-2019:3703 Low: libvorbis security update Copyright 2019 AlmaLinux OS Inc 0 3 Low

An update for libvorbis is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates. Security Fix(es): * libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392) * libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvorbis-devel-docs-1.3.6-2.el8.noarch.rpm 8fed9a09938ee9f62ed4514fddbdbef65fb3e1330056f8b34c22f8ef59f15a78 libvorbis-devel-1.3.6-2.el8.i686.rpm 59f90e24c9d7dbfc5a61a7595f604f61de0203f320ede4d80de557cc8ad4afdb libvorbis-devel-1.3.6-2.el8.x86_64.rpm 2951501abde71deb9f5f382c2a1b79634832936bf99a2f85c488c170f723b822 ALSA-2020:4451 Moderate: GNOME security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 7 Moderate

GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406) Security Fix(es): * webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793) * gnome-settings-daemon: AlmaLinux Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391) * LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default PackageKit-glib-devel-1.1.12-6.el8.x86_64.rpm 08a650275cafbf2cc16583ea4224237a8acee8523568beaf3a2872e96477305b mutter-devel-3.32.2-48.el8.x86_64.rpm 79e9c75d4ec4c54ca46f1e3dd3daa934e69bd53c81350f12a9de9d911f6277df nautilus-devel-3.28.1-14.el8.x86_64.rpm 19b128049340fdbb3dd031c286ea316ade9ea5e915081cca4271520e07272d27 vte291-devel-0.52.4-2.el8.i686.rpm ed06b6eed221c6c54449f4a212b38a612e08c6f7ddc7f553cca9abd9f5eb4450 pygobject3-devel-3.28.3-2.el8.i686.rpm 5ea825b65a94b23b698cc1fe5a916d7a3fc638e73428ef76a63e588b21aba2e2 vte291-devel-0.52.4-2.el8.x86_64.rpm 50fb00fb27a1db6316a3aca649b578280ead2e222f65ea0a04a850a00d7013a5 gvfs-1.36.2-10.el8.i686.rpm 56edaa92a90559b394b419a217526341a6a8c48c48fcd1b9b7a665c88f1b12ac PackageKit-glib-devel-1.1.12-6.el8.i686.rpm 4b57bbc11f3c2d26a2560c817069eadac76a0053415bdf4d3125111bccb7444a frei0r-devel-1.6.1-7.el8.i686.rpm 3a6362e127674f8388ca1f59e404af5c21a09ead709014ff06688fa507e95a78 frei0r-plugins-1.6.1-7.el8.i686.rpm 53d4dff33f1e580ed9e62afced0b0ffb1430b03cc3ac409b1b2e7601aadede96 nautilus-devel-3.28.1-14.el8.i686.rpm a8a76a320821f264bb91f6d6b003e9c7887d046d1566197386a777e61c2e750f pygobject3-devel-3.28.3-2.el8.x86_64.rpm c0856dead00588db1159f674bd205de9abefca865bf60a15ed5e71d029c0ae30 frei0r-devel-1.6.1-7.el8.x86_64.rpm 3711d285276197877314e54ad587d889c64e115e3ac03472f80a75b7bcb09833 tracker-devel-2.1.5-2.el8.x86_64.rpm 4f29b02043f3d6b0dd448c4ee22f9b08360f3302f3180afd657f5e6292d6bfab mutter-devel-3.32.2-48.el8.i686.rpm fa63acee53da165ebf03b5fcade07284410720b41166bb258ec62b705c017fd2 nautilus-3.28.1-14.el8.i686.rpm 644e351c6df077b8f8a25caa19541b3c6361a89387c76174a23155d3839c76d7 LibRaw-devel-0.19.5-2.el8.i686.rpm 90d4871c0096b43047fdf9c4dafc281a00121b628fb57719076e2c14e5ce7148 LibRaw-devel-0.19.5-2.el8.x86_64.rpm b5252c1e66a270971493b70fd37337e8bcdbee3c4b91b797ebf951c79ad39152 gtk-doc-1.28-2.el8.x86_64.rpm e66ee49f9ee1ac00dcfb7c9445a2a2816477f28c625ac010e249aebc55921456 ALSA-2020:4844 Moderate: fontforge security update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for fontforge is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Security Fix(es): * fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default fontforge-20170731-15.el8.i686.rpm 22a1244c9ee94f8ddb2863a01587b263892196091a647a1832a377dd724eae94 fontforge-20170731-15.el8.x86_64.rpm e999711c1e075d00be50c3d4512c1f6fc216973231b5e6d5df5907429a62402a ALBA-2020:1617 pmdk bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for pmdk is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librpmem-debug-1.6.1-1.el8.x86_64.rpm 7812c6d27210957554ee2861c713b1f351a2ff2a800d6e037e86bed8664d88e9 libvmem-debug-1.6.1-1.el8.x86_64.rpm a2666b1978e03611869bb2ceadfb3f3dcd9307fb8f3c3a1d5744453273ed6893 libpmem-debug-1.6.1-1.el8.x86_64.rpm e34977b354b3d0c638965e2bcdd1accea1e77fb6efcb1c4ea564e36c6b1d6f94 libpmemblk-debug-1.6.1-1.el8.x86_64.rpm 1161d8d0ad5ffe1f069fe943652b3e977d88605741538ef8f6d96f9c967637e9 libpmemobj-debug-1.6.1-1.el8.x86_64.rpm 0194cf999c019de087685276efe38c22114fa77327bd0e5585048b7ba0baec63 libpmempool-debug-1.6.1-1.el8.x86_64.rpm 7a70bd6827cbd7419ceb66edc6a07d6da7526d717de1ec5b276ba3bab03c352c libpmemlog-debug-1.6.1-1.el8.x86_64.rpm b29ddec41bdaf9f088b480eb431a142ffd4619da55a3baba2f7b32c0318e7c80 libvmmalloc-debug-1.6.1-1.el8.x86_64.rpm cd2204b92846384b0710c214e19590276421f0dbcb619dec9697eff679a82225 ALBA-2021:0563 NetworkManager bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * Bond port been deattached when attaching this bond to a new linux bridge (BZ#1915832) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.26.0-13.el8_3.x86_64.rpm dfae9217fec71706121a4b2f11771c43599056e7e5eab273ef9c02d993e167a4 NetworkManager-libnm-devel-1.26.0-13.el8_3.i686.rpm cacf7852513663c56cf59e6c02dd898f30a6360de06cc3168711f79f18541b27 ALEA-2020:4818 spice bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 4 None

An update for spice is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spice-server-devel-0.14.3-3.el8.x86_64.rpm 232d42d54ac81dc463899559886eecbc9432e71c1e209876b0136337037e47ef spice-server-devel-0.14.3-3.el8.i686.rpm 8ce31386c9bb67736db7501733ef0786b313fd09032ee662539eb26174a2db25 ALBA-2019:3638 trousers bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for trousers is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default trousers-devel-0.3.14-4.el8.x86_64.rpm 7ba8a6787b041eaaf52aa48ae0ee0f01385e399d790e53fcb00766c608b72f78 trousers-devel-0.3.14-4.el8.i686.rpm 697ecca9b84fc4b7d5117f7eb0c8cb46dd4e549dd3ceff9adf66dbabf48073aa tpm-tools-devel-1.3.9-7.el8.x86_64.rpm c7ce0b93b203313cf33d9602e872eda534a2722881012b80fe2767b2c633c817 tpm-tools-devel-1.3.9-7.el8.i686.rpm a8591106efd9fd4d0cf25d99c6c4c23a8a14faf019d93e69a704ef8b0cfbceed ALBA-2020:1898 sg3_utils bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for sg3_utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sg3_utils-devel-1.44-5.el8.x86_64.rpm f9392663337dff1ec2aace5ac73cc643d6337739c577452a3056ae1c8c2748e4 sg3_utils-devel-1.44-5.el8.i686.rpm 0b33ab7d5a3d6385ce5767566aedeea5fff216152200bc17f2b261e61d9136d2 ALBA-2020:4562 bluez bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for bluez is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bluez-libs-devel-5.52-1.el8.alma.x86_64.rpm 6f49e0c829bb8b663bc6629bc1f2fc962cd4ad595fb0f6df9c755d113b208e91 bluez-libs-devel-5.52-1.el8.alma.i686.rpm eeba113f32321e7f1035204cc9a81dde7db26bd6e0b25d362ba52b87a1b9acf5 ALEA-2020:4555 libpsl bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libpsl is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpsl-devel-0.20.2-6.el8.x86_64.rpm 23a2f74f118b6530852bee817ddf0e15a893b7887fce6f676012e78bbd8885f0 ALEA-2020:1767 flatpak bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 5 None

An update for flatpak is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default geoclue2-devel-2.5.5-1.el8.i686.rpm c6e0c531af0134858e9db15266265c836b7347a7903449da14c8b1d1858149e4 geoclue2-devel-2.5.5-1.el8.x86_64.rpm d0f23640bd1fd4e37eb1459c05e403f65280491099196b67b4df4fb69d418ba1 ALBA-2020:4658 munge bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for munge is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default munge-devel-0.5.13-2.el8.x86_64.rpm 1f39cacebc78982dd235a0780ef3bbe3748a57f4f3df8dc195ea91452ffabc79 munge-devel-0.5.13-2.el8.i686.rpm 091996d245862e65e48cc6b5950c74872a3af616b4a1ca621fcd0069b4a889b7 ALBA-2019:3558 libzfcphbaapi bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 3 None

An update for libzfcphbaapi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libhbaapi-devel-2.2.9-13.el8.x86_64.rpm 952910f2c3940f9d5f2d58411e946020c4b25e539e7fced429557655a662ad86 libhbaapi-devel-2.2.9-13.el8.i686.rpm 6ced60d11f5cbd23236441fde3f0a9dbf225c2b19b1ca7bce4363522ced92776 ALBA-2020:4588 libbpf bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for libbpf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libbpf-static-0.0.8-4.el8.i686.rpm 097c182b038bd9cd1c46f40585a3c9292e89b4cdf2e017fa82890284b7758f5e libbpf-static-0.0.8-4.el8.x86_64.rpm e559e9d134e4dc16dae849ce69baa4f7c1cf468504276a5b84b1df5921452b07 libbpf-devel-0.0.8-4.el8.i686.rpm 37a543590530ab55cdb7b24f901b093cf43103713eb9a5940a33749c8e01f6a6 libbpf-devel-0.0.8-4.el8.x86_64.rpm 98e4b5f7b297857ad9772d789dd066bb39e2170d0db4d7019f516774bd46258f ALBA-2021:0561 kmod bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for kmod is now available for AlmaLinux

The kmod packages provide various programs needed for automatic loading and unloading of modules under 2.6, 3.x, and later kernels, as well as other module management programs. Bug Fix(es) and Enhancement(s): * Symbolic links are not created after applying an errata kernel (BZ#1915253) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kmod-devel-25-16.el8_3.1.i686.rpm 6608d8e47c816b2fd31cb16317ddb4f55ec52da8b87e251cc406c1732e4e4937 kmod-devel-25-16.el8_3.1.x86_64.rpm e0b26f608a9bbc861d737568b33e4813cd29435bd98dc7b93b6abccb0461385b ALBA-2020:4845 dwarves bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for dwarves is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dwarves-1.17-1.el8.x86_64.rpm 8495ef565a94960aa06cd6dfafcdf4b89c233c2fabe20265ca7da193376b1d5d libdwarves1-1.17-1.el8.i686.rpm 0bf2b8c054ab4aa83f289b1fd35720ddbb815c8b0265435b029f7dcc3cc93283 libdwarves1-1.17-1.el8.x86_64.rpm 03940b8a32cfd5bce5962d048c200449b555056e1f839ef6d1fc918f37c2be02 ALSA-2020:4690 Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for qt5-qtbase, qt5-qttools, and qt5-qtwebsockets is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: XML entity expansion vulnerability (CVE-2015-9541) * qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035) * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569) * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570) * qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qt5-qtbase-static-5.12.5-6.el8.x86_64.rpm bdad9b6b54fcc7ab9f0c6bba183f41ac575b36c0aca0a189b06636873abc7453 qt5-qtbase-static-5.12.5-6.el8.i686.rpm 6d2ada93bc5119a88eb282fa9ea6b862c12d9091f0cb8407d755fbeb88f11b27 qt5-qttools-static-5.12.5-2.el8.x86_64.rpm f55373b68b0cd18b6bc2827dcd09c2836834f0d415da2f5d7007172a0f835c7d qt5-qttools-static-5.12.5-2.el8.i686.rpm ab9a111b516d3e15a955184de790c62dfd7e1068e894db237183df840c9fb42b ALSA-2020:4539 Moderate: pcre2 security and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 Moderate

An update for pcre2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pcre2-tools-10.32-2.el8.x86_64.rpm e0414d240b422deb7a8afcbeb56c20bb55c4952de9bf971cb52315ca8e91d6a3 ALBA-2020:4478 iproute bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for iproute is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iproute-devel-5.3.0-5.el8.x86_64.rpm 788568fb07721d6286e89e39fc183c172485c59bcc5a58665a881d162e8002cc iproute-devel-5.3.0-5.el8.i686.rpm 32796524f62b2dc61ffe53447affb9d8a2d4adfecc26d5fb67e3bdb9f98da0c2 ALEA-2020:1694 new module: python38:3.8 Copyright 2020 AlmaLinux OS Inc 0 2 None

A new python38:3.8 module is now available for AlmaLinux

This enhancement update adds the python38:3.8 module to AlmaLinux (BZ#1747329) For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_python38-devel python38-more-itertools-7.2.0-5.module_el8.2.0+6107+533dc13a.noarch.rpm b9954240f4fb775f2437cd50d7aaf02c1ef12f67ab1c3e10852a3ed162d4cc66 python38-packaging-19.2-3.module_el8.2.0+6107+533dc13a.noarch.rpm 74330fe5521fc7ae865e3b6a72b1d70ff3bb9a9b87b9c175036e1b10fe0e3bbc python38-atomicwrites-1.3.0-8.module_el8.2.0+6107+533dc13a.noarch.rpm ac94e286a8130f4654b21ebb0f4e13961cbb4ad11457cee6e580aa491770869f python38-wcwidth-0.1.7-16.module_el8.2.0+6107+533dc13a.noarch.rpm eb17706402b6bfefbe1df4e114207805a4f8a58452bbd279cc3fdfe05809a9a4 python38-attrs-19.3.0-3.module_el8.2.0+6107+533dc13a.noarch.rpm ce3d7ce364f42faf8f140f374fc2c6b86b8ac1525f1eecc46284ccb163c109c9 python38-pyparsing-2.4.5-3.module_el8.2.0+6107+533dc13a.noarch.rpm b8183ee29c9b87380f599e97c71f07edf1cda5938bee6a977a874f1478548aa8 python38-py-1.8.0-8.module_el8.2.0+6107+533dc13a.noarch.rpm b90a5a50b4725d7bec2fce2ca3839dd84e2174d4e0f432483f932662289a6f8f python38-pluggy-0.13.0-3.module_el8.2.0+6107+533dc13a.noarch.rpm 6b262680e6d6f54f2a8d9c6c9809d8c3be1a6e99e972356ca55604ba2baf2086 python38-pytest-4.6.6-3.module_el8.2.0+6107+533dc13a.noarch.rpm a0313b2fa9cd4f58ad51651b34be8bb640264c4e15642b1a2b1118d677c67a03 ALEA-2021:0532 vulkan bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 3 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2020.5-2.20201031.gitf7da527.el8.x86_64.rpm 018fab59f08872b480a3d7bdffef78426871456be34dbbdc303bd7243bc928d5 ALBA-2021:0539 libblockdev bug fix and enhancement update Copyright 2021 AlmaLinux OS Inc 0 2 None

An update for libblockdev is now available for AlmaLinux

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Bug Fix(es) and Enhancement(s): * libblockdev doesn't run external utilities with LC_ALL=C and fails to parse their localized output (BZ#1895286) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libblockdev-mdraid-devel-2.24-2.el8_3.i686.rpm 16d65a8631b7f6ea76f7bd1c011e52fce7b95f003c0378043724f7e634e578b8 libblockdev-loop-devel-2.24-2.el8_3.i686.rpm b56ac30092dcf5bf4a762490120bc62fe1123f419e7715cbba17ee13267876cb libblockdev-devel-2.24-2.el8_3.i686.rpm 7ab5f12326ee82c4f173143c430aa10e3c5f80429d47a95211f2900194d80a67 libblockdev-devel-2.24-2.el8_3.x86_64.rpm da8b7bad6d065ece4c51b438e83c6b3ce3fb9b158d946f77c4f35dd9c72f0ba6 libblockdev-fs-devel-2.24-2.el8_3.x86_64.rpm 5df449b75af7419fb95020b00ee699b353f341419ba8801b57e4dacbaf1e4419 libblockdev-part-devel-2.24-2.el8_3.i686.rpm f463ea13a69cd3f139f1033745488433f4d162a9df7246ecacc4ed366e3e715b libblockdev-utils-devel-2.24-2.el8_3.i686.rpm 895a5a595e4b7957169553a466f16ac2c4f73d8b0510604f504ce08798618b2d libblockdev-vdo-devel-2.24-2.el8_3.i686.rpm 35e21f9fd10800b9564d8828111fe61745bb54a8678b4bcf6dadeaec217e4417 libblockdev-swap-devel-2.24-2.el8_3.x86_64.rpm b9207c03710bdb485caacc78b2242cad4654f75b49e1e03fbb4863675c90566d libblockdev-crypto-devel-2.24-2.el8_3.i686.rpm 806abb3e8fd6a0ee9e36dcba1bac3ea9f20427c15fdca79ff6968fe9ce5eafc8 libblockdev-vdo-devel-2.24-2.el8_3.x86_64.rpm c17a87c876ad1a751feb9fcd318df12206565bbc33f039f650153b09f93df245 libblockdev-loop-devel-2.24-2.el8_3.x86_64.rpm 1aa2bac51f9ab26156173fa15a68e71f62ebc388c34fc6f4ce9d4c68f1e3932e libblockdev-utils-devel-2.24-2.el8_3.x86_64.rpm 4b5e64745e770cf359cbcf04f221e33e69cbeea594372db1113414428b2d3a0e libblockdev-mdraid-devel-2.24-2.el8_3.x86_64.rpm 38e9eeaa7b95572e78a38184c24361cec216b64ba8878e090fc5212cdf698010 libblockdev-lvm-devel-2.24-2.el8_3.i686.rpm 451189d61207fd45ef19afaf50936634ac6ee897fe8b74dfa962fbb738e209be libblockdev-lvm-devel-2.24-2.el8_3.x86_64.rpm 456edf5ed3d573d8bd3360c213d1d4813e55cd3706ee835574e292bfc6646f74 libblockdev-swap-devel-2.24-2.el8_3.i686.rpm fe06a633f0467ad2c511330e29c5335d9850efcd03990d90ec1bc33323a07e99 libblockdev-fs-devel-2.24-2.el8_3.i686.rpm 0d839e62c5fe059d2490a1c9c5c4a662cdb4bf845af86223d0f56909329ad185 libblockdev-part-devel-2.24-2.el8_3.x86_64.rpm 9b24f1683d063fa8307781d373c918b78670e1319d763c6a4afc9200f62c85b0 libblockdev-crypto-devel-2.24-2.el8_3.x86_64.rpm 8469bf06d6c4ca6f9584f83aa6bec2c5594c0865ddba2a4214b26848eb0eaef8 ALBA-2020:4595 sanlock bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for sanlock is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.2-1.el8.i686.rpm 241b38f0bd478444aec33a69531ae1618ceccd18e6940e54768c370266868e46 sanlock-devel-3.8.2-1.el8.x86_64.rpm bcb905d332b0a2a6887336b9e08d1f45025c545462613ea7658e38369521f726 ALBA-2020:3657 zlib bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for zlib is now available for AlmaLinux

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Bug Fix(es) and Enhancement(s): * RHEL8.2 - zlib on s390x may produce incomplete raw (but not gzip/zlib) streams (BZ#1860952) * RHEL8.2 - raw zlib test failed with DFLTCC_LEVEL_MASK set to 0x1ff (BZ#1862108) * RHEL8.2 - Fix support for IBM Z hardware-accelerated deflate (zlib) (BZ#1867876) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zlib-static-1.2.11-16.el8_2.x86_64.rpm cc0eb42ed84a0b053b5439bb9a090cb91b3c87bd5b18e89a6f3f203535f693fb zlib-static-1.2.11-16.el8_2.i686.rpm e2120fc54d7540faaaf833169269582edc7167e3d2beda3040913e9c059ab103 ALSA-2020:4431 Moderate: kernel security, bug fix, and enhancement update Copyright 2020 AlmaLinux OS Inc 0 6 Moderate

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use after free in the video driver leads to local privilege escalation (CVE-2019-9458) * kernel: use-after-free in drivers/bluetooth/hci_ldisc.c (CVE-2019-15917) * kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg (CVE-2019-15925) * kernel: memory leak in ccp_run_sha_cmd() (CVE-2019-18808) * kernel: Denial Of Service in the __ipmi_bmc_register() (CVE-2019-19046) * kernel: out-of-bounds write in ext4_xattr_set_entry (CVE-2019-19319) * Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid (CVE-2019-19332) * kernel: use-after-free in ext4_put_super (CVE-2019-19447) * kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free (CVE-2019-19524) * kernel: race condition caused by a malicious USB device in the USB character device driver layer (CVE-2019-19537) * kernel: use-after-free in serial_ir_init_module() (CVE-2019-19543) * kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry (CVE-2019-19767) * kernel: use-after-free in debugfs_remove (CVE-2019-19770) * kernel: out-of-bounds write via crafted keycode table (CVE-2019-20636) * kernel: possible use-after-free due to a race condition in cdev_get (CVE-2020-0305) * kernel: out-of-bounds read in in vc_do_resize function (CVE-2020-8647) * kernel: use-after-free in n_tty_receive_buf_common function (CVE-2020-8648) * kernel: invalid read location in vgacon_invert_region function (CVE-2020-8649) * kernel: uninitialized kernel data leak in userspace coredumps (CVE-2020-10732) * kernel: SELinux netlink permission check bypass (CVE-2020-10751) * kernel: out-of-bounds write in mpol_parse_str (CVE-2020-11565) * kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c (CVE-2020-11668) * kernel: buffer overflow in mt76_add_fragment function (CVE-2020-12465) * kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption (CVE-2020-12659) * kernel: sg_write function lacks an sg_remove_request call in a certain failure case (CVE-2020-12770) * kernel: possible to send arbitrary signals to a privileged (suidroot) parent process (CVE-2020-12826) * kernel: referencing inode of removed superblock in get_futex_key() causes UAF (CVE-2020-14381) * kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS (CVE-2020-25641) * kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure (CVE-2019-9455) * kernel: null pointer dereference in dlpar_parse_cc_property (CVE-2019-12614) * kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c (CVE-2019-16231) * kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c (CVE-2019-16233) * kernel: memory leak in af9005_identify_state() function (CVE-2019-18809) * kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function (CVE-2019-19056) * kernel: memory leak in the crypto_report() function (CVE-2019-19062) * kernel: Two memory leaks in the rtl_usb_probe() function (CVE-2019-19063) * kernel: A memory leak in the rtl8xxxu_submit_int_urb() function (CVE-2019-19068) * kernel: A memory leak in the predicate_parse() function (CVE-2019-19072) * kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c (CVE-2019-19533) * kernel: Null pointer dereference in drop_sysctl_table() (CVE-2019-20054) * kernel: kernel stack information leak on s390/s390x (CVE-2020-10773) * kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features (CVE-2020-10774) * kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field (CVE-2020-10942) * kernel: sync of excessive duration via an XFS v5 image with crafted metadata (CVE-2020-12655) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-240.el8.x86_64.rpm ad958429fc2e2a8973ff4610c42e00e85454890cfa63b47f877e5ec60dfc6dfe True ALSA-2020:4689 Moderate: openwsman security update Copyright 2020 AlmaLinux OS Inc 0 4 Moderate

An update for openwsman is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects. Security Fix(es): * openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwsman-devel-2.6.5-7.el8.x86_64.rpm 94f1ecbe2d620167ed52ca0870be5176556bc4ff241cfbb1589241755e6a4467 libwsman-devel-2.6.5-7.el8.i686.rpm 5534335bc469c5924b10f4414306b59a752a7c9b74d77c527e33081444c6434b ALBA-2019:3676 hwloc bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 3 None

An update for the hwloc module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default hwloc-devel-1.11.9-3.el8.x86_64.rpm df030e5aec5dc0a237a64aeb7d197e332a9a271677a6333fbcee79d6736c26c5 hwloc-devel-1.11.9-3.el8.i686.rpm edc8ab2f28a766a0fe261ddab5a6c107e0940c6dc3784e778eb92af5928801f3 ALBA-2019:3523 ima-evm-utils bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for ima-evm-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ima-evm-utils-devel-1.1-5.el8.i686.rpm 5ef2386e13be43998faa3f0aee1305667bc82f2a98956083994545aadd20fc27 ima-evm-utils-devel-1.1-5.el8.x86_64.rpm 4a52cde39432afec5efe08d1ee0272d4620deaf7cebaf40ea69929fb88b2f56b ALBA-2020:4703 sip bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for sip is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-sip-devel-4.19.19-2.el8.i686.rpm c19376dd08a64c9daeb681bc197f2d7b46aa773bb0bde1588f33cd87c3bb4b39 python3-sip-devel-4.19.19-2.el8.x86_64.rpm 539146f7106ca143638a88e85510352edee848d8ff6fb1fc7427a232fd50432e ALBA-2020:1781 ModemManager bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for ModemManager is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ModemManager-devel-1.10.8-2.el8.x86_64.rpm ce135561a36332a00f8da166b16a24029d69801ed0cf0c96986ff87335439e8d ModemManager-devel-1.10.8-2.el8.i686.rpm 02533523f7d8b34def328e4c01ce303a39135abdb502fb0cdb2ab032640e81b6 ModemManager-1.10.8-2.el8.i686.rpm 02ce536885daa595b29356e86bea9e4c40caf778958c6721efeb21ca7c18bf4f ModemManager-glib-devel-1.10.8-2.el8.x86_64.rpm 73ab8630dbca510848cb7dffbe95966e52fd8a3838647a12f975b4cbd7a92576 ModemManager-glib-devel-1.10.8-2.el8.i686.rpm 249ff2894e30d9e922f59f2f46efc7ea86d6fa625117643b507a7ebd924bec6c ALEA-2020:4749 udisks2 bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for udisks2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libudisks2-devel-2.9.0-3.el8.x86_64.rpm 190f7169e6739bc4e0ef59cbffe057f62ee1ab19c39efcdd4cc2872cddb02963 ALBA-2020:4527 opencryptoki bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for opencryptoki is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.14.0-5.el8.i686.rpm 01f49a9b3a418a72b83d5a1e3c44491234c8927884471b46a5d0df56127164fc opencryptoki-devel-3.14.0-5.el8.x86_64.rpm 2b5e65725904987b0d7c268a7af4c671bcda3ac1054d35baec8bf92086e3b186 ALBA-2020:4832 torque bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for torque is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default torque-devel-4.2.10-25.el8.x86_64.rpm 8c27e1b1c6e64d9924ab6e9d9e841e92959fce1d18142d2887b80e5923f8fa66 torque-4.2.10-25.el8.x86_64.rpm 27306169478c7127bee9e3cc0c3af34a59382b68a242d918e64728e8b4ccabeb torque-devel-4.2.10-25.el8.i686.rpm 32f1236019281edf66ba219794ccff905e71440d0cf1896728a3f5043661d1a7 ALBA-2020:4736 corosync bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for corosync is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default corosync-vqsim-3.0.3-4.el8.x86_64.rpm e27425fc51dc13380fc33bea6b8e80315001bf76cce46f6f77688430fab504c8 ALBA-2020:1663 openjpeg2 bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 3 None

An update for openjpeg2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openjpeg2-devel-2.3.1-6.el8.x86_64.rpm eeb4f66f3ed80246f224ede20b3498b3217675b0f981508dc2e15eb5904d7ca8 openjpeg2-tools-2.3.1-6.el8.i686.rpm 7adafd55ab2914bf8c798dd914b93d0466915023e3e186de2986f009e34c395a openjpeg2-devel-2.3.1-6.el8.i686.rpm 2939a8da049e36c451ba342ca4c058edeae8583c15b7ca31b333c312d720924b ALSA-2020:5393 Important: libexif security update Copyright 2020 AlmaLinux OS Inc 0 2 Important

An update for libexif is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libexif-devel-0.6.22-5.el8_3.i686.rpm 640cba9cb316a4a754df0541acebb6d5db9e2edc5dbed908c9fbcdcfe6d92763 libexif-devel-0.6.22-5.el8_3.x86_64.rpm 4993dc7e75c74c87820338603e926335e02ca74e7ba6c6d20c40ea002d1b3f49 ALEA-2020:4742 userspace graphics, xorg-x11, and mesa bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 5 None

An update for the userspace graphics, including X.Org, and Mesa is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libXdmcp-devel-1.1.3-1.el8.x86_64.rpm b4ca12bae7f35d81bf0e51f59f96f4b33d02fab3903b45ba851a6c82d333619e libxkbfile-devel-1.1.0-1.el8.x86_64.rpm b95570b71080a6da18995df7858a1cf1944f2aba5bb731f1bbcfc5932c8b6aa9 libXdmcp-devel-1.1.3-1.el8.i686.rpm 11ba3c3231a0764b575f446547f1bb985f55ab91f8251ed3e84537e2407d1165 mesa-libOSMesa-devel-20.1.4-1.el8.x86_64.rpm 7256ab12236fbe3963090e2497cac57e308436c01350c377cbb89bae4dbaf29c xorg-x11-xkb-utils-devel-7.7-28.el8.x86_64.rpm 72e8881e42bc191c92a90dd02581b6148050c704b988f754073e0931f803db38 libxkbfile-devel-1.1.0-1.el8.i686.rpm 863bb01fa4c7f65004b9221e5ae6fb1173f277d4ea0b3ee82518fc3bee72660d libXvMC-devel-1.0.12-1.el8.x86_64.rpm ca7f8e4e021cb43f3b5635402ed4977be4b9c506dde7148da24f09973c73fd2e mesa-libgbm-devel-20.1.4-1.el8.x86_64.rpm 676be90bc966be013961b74fef75205b49088d683b0b2321d66ea1d6c7c34f9f xorg-x11-xtrans-devel-1.4.0-1.el8.noarch.rpm d28a83aca7419a7b3bf879108bd3bd1c467e20eeacc7d228d7e170c91518a803 libXvMC-devel-1.0.12-1.el8.i686.rpm 3a19fd6ff59f3c0259c44b430cc83b6c5a780fcc0de21e92650fef696cba455e mesa-libgbm-devel-20.1.4-1.el8.i686.rpm 44618d5858c75b55e6d3fa452b53e1d504ce9e436a9f3f320fcee3a2f9335f1f libvdpau-devel-1.4-2.el8.x86_64.rpm c7f7b3d3d0161b83867d2d2c624423fb91d0db6084902b38d0c71e1dda2a1da5 xorg-x11-util-macros-1.19.2-1.el8.noarch.rpm 61b969180f84d43a8bce3ffc608c7dc1225d2e363a1d10f787ef51fc42c71359 mesa-libOSMesa-devel-20.1.4-1.el8.i686.rpm 4de912dd8eb56fa3727117cadaa099ad3779cb9cfc61febe43ebacd73753e3aa libwacom-devel-1.1-3.el8.x86_64.rpm d97d559a04ddf11c277ad6ee914719b55a0a087d0c568f0a0ec2f309d45e052c libwacom-devel-1.1-3.el8.i686.rpm 300e14ebe1345caa45c02b18dd7c55ceb51648748ca5355c6c300e4becfae5fe libvdpau-devel-1.4-2.el8.i686.rpm 3ee2189affad058dd141bfa63b4bf403a045369d2aa57cfe1cb667458933e57f ALBA-2020:4787 crash bug fix and enhancement update Copyright 2020 AlmaLinux OS Inc 0 2 None

An update for crash is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default crash-devel-7.2.8-7.el8.alma.x86_64.rpm e1058e23172a68ac6278e9221b4b3de03b006c90bd0b96ccd89e827639c1bca0 crash-devel-7.2.8-7.el8.alma.i686.rpm a7ba9af5b04f5f356619c31752985680b70434ff9d06cf8df317cc3e8b86639f ALSA-2019:3553 Low: GNOME security, bug fix, and enhancement update Copyright 2019 AlmaLinux OS Inc 0 7 Low

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459) * gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpurple-devel-2.13.0-5.el8.x86_64.rpm 0f0ab87a6cd2ec65ecbc1dd65e79d26a06c42f406806f7ceef3f6cce164222da pidgin-devel-2.13.0-5.el8.i686.rpm 4b57945f99fc9888383bc5d40d279492280bd1a299554787079e0edcb0614f2c gdk-pixbuf2-xlib-devel-2.36.12-5.el8.x86_64.rpm 2dbefbd5477cc6dde84b3ef4c0c81d027244cf97e05b3ff4c74881ad76ebeb7e libpurple-devel-2.13.0-5.el8.i686.rpm 80534f6c16a0afe01e3c22159419cb429448583b7b9365a8dc855639bf73329c gdk-pixbuf2-xlib-devel-2.36.12-5.el8.i686.rpm 9d668307907456df1e7aadf711824cdfa9755e6bd52cacaa615b0bdec66e036b gdk-pixbuf2-xlib-2.36.12-5.el8.i686.rpm 47a98bb197fd5d61173bdaee8b3124474a8160cd28c9f532e2fea321bf5a2099 gdk-pixbuf2-xlib-2.36.12-5.el8.x86_64.rpm 827a66181d28da1f122381c5103a65dc597d3da3405ccf76c1b9e53896b6efc1 pidgin-devel-2.13.0-5.el8.x86_64.rpm 8ab7d8b4429262a1ecf5a7dc38902314ef7175245694cfcf9f6c71378fed8cb2 ALBA-2019:3490 ldns bug fix and enhancement update Copyright 2019 AlmaLinux OS Inc 0 2 None

An update for ldns is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ldns-devel-1.7.0-21.el8.x86_64.rpm 310d6874ec5776131ef2a09c6e969c2750ce0d439deb31f2b6c50ae536b669c2 ldns-devel-1.7.0-21.el8.i686.rpm 2c355f1e2b44488a0048a1a604cf946d2bfba244e01b3b4ab13e0ee471df1c77