ALSA-2022:1642 Copyright 2022 AlmaLinux OS 0 2 Important

An update for zlib is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zlib-static-1.2.11-18.el8_5.i686.rpm 1d9b0d0afcee3707cefadd98e49420065a4210e6d2bef392c722d0fffc928040 zlib-static-1.2.11-18.el8_5.x86_64.rpm 8bc12fe83114f785b7e5ac009b268016a27b16fe4e07832cda1259ba75ccef49 ALSA-2022:1643 Copyright 2022 AlmaLinux OS 0 2 Important

An update for xmlrpc-c is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Security Fix(es): * expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default xmlrpc-c-c++-1.51.0-5.el8_5.1.i686.rpm 771b35f3c0194478e2cb8176890dfb23f55bffb4d5a4add27beff07ddf46cf4b xmlrpc-c-c++-1.51.0-5.el8_5.1.x86_64.rpm 5bc104ebc483138a79dcbb9fc3303e27032567defe5cf12cb08292ffc218ce8e xmlrpc-c-client++-1.51.0-5.el8_5.1.i686.rpm c48d69b28f5ea196d0aedfae9d5cb02c641b7960b1a2b9f7d957ceb8f74238d8 xmlrpc-c-client++-1.51.0-5.el8_5.1.x86_64.rpm 23f3f77218dc0f497a0c1d063945df33a92afe439da3ed0360d054a4e51907ab xmlrpc-c-devel-1.51.0-5.el8_5.1.i686.rpm e41ca6a03c41dc6549c35ee7bd038dcc7153e165b9332eefcd7430139788f463 xmlrpc-c-devel-1.51.0-5.el8_5.1.x86_64.rpm 8795b8102dbcfec9b4c8728093146d0f3bef5329bcb415cf8fcc5600ac497431 ALSA-2022:1550 Copyright 2022 AlmaLinux OS 0 6 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free in RDMA listen() (CVE-2021-4028) * kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Backport DFS fixes from upstream (BZ#2056329) * [RHEL8.5] lpfc driver often fails to detect storage directly connected to Broadcom FC HBA (BZ#2058193) * nf_reinject calls nf_queue_entry_free on an already freed entry->state (BZ#2061446) * gfs2 blocking in gdlm_lock (BZ#2069750) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.23.1.el8_5.x86_64.rpm 2d3c5a8e0d70c94331873bf5050f740091f0add903cc21a1589f70a6aa23d572 True ALBA-2022:1544 Copyright 2022 AlmaLinux OS 0 2 None

An update for mingw-glib2 is now available for AlmaLinux

The mingw-glib2 package provides the MinGW Windows Glib2 library. Bug Fix(es) and Enhancement(s): * [qemu-ga-win] Get error 'Failed to execute helper program (No such file or directory)' after executing command 'guest-exec' (BZ#2034959) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw32-glib2-2.70.1-1.el8_5.noarch.rpm b1ad311529666d507656753581446c53f3662f2470130118516ef5505ff27969 mingw32-glib2-static-2.70.1-1.el8_5.noarch.rpm ab243343a94c27fe2d8eaca12f9051434124a3d728cdd4c928bc27e466e87c78 mingw64-glib2-2.70.1-1.el8_5.noarch.rpm 082e82a83e787f2bb93e021336bffc82d98920a3c473ee773ff0d61790556965 mingw64-glib2-static-2.70.1-1.el8_5.noarch.rpm a94411031746c3698e3330554f8ceca624e3ee624d810cda9b33bf0f4847aa75 ALBA-2022:1548 Copyright 2022 AlmaLinux OS 0 2 None

An update for device-mapper-multipath is now available for AlmaLinux

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Bug Fix(es) and Enhancement(s): * multipathd.socket is missing start conditions (BZ#2054877) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-multipath-devel-0.8.4-17.el8_5.1.i686.rpm 5435f6df7aa862e9f2fc1c8c1e2472b96d6124cb37fde4aa55973da41468cd7c device-mapper-multipath-devel-0.8.4-17.el8_5.1.x86_64.rpm ba38742cb1f944b61a5c7d275bc538e66ef7f93bb9ffbea40e9aa5925d3e0dd4 ALBA-2022:1549 Copyright 2022 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * NetworkManager DHCP client does not work maybe due to received NAKs (BZ#2065188) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.32.10-5.el8_5.i686.rpm 5cb76c9caee391acb21ef733203e1ee684681e35c25842a5370bf73f46e74e9e NetworkManager-libnm-devel-1.32.10-5.el8_5.x86_64.rpm bb432c9087d03db47d8b267e11bc9272f7269e1bd3df8291f044d0ef87948459 ALBA-2022:1547 Copyright 2022 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files. Bug Fix(es) and Enhancement(s): * sanlock lockspace stuck in 'ADD' for days (BZ#2066125) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.4-2.el8_5.i686.rpm af28232ff7754176c3338bc3e908f4d34b8c4de218206b874fe0939f9476a416 sanlock-devel-3.8.4-2.el8_5.x86_64.rpm 4477f909622491f90af80b7ee4f37ce0af693b04673214f899ed1ce86d8033f1 ALSA-2022:1491 Copyright 2022 AlmaLinux OS 0 2 Important

An update for java-1.8.0-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476) * OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) * OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434) * OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443) * OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm fb88efec8f90f8641eea01ef664ff23800e346255e29b5121998862621e7c98b java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm a0fdeb1b21fc8ccc4044a34f758324ffaf8c95eb98ee1655d6aeaf184ccd5d93 java-1.8.0-openjdk-demo-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 3190b77521adac7839d29bb87edd2abd80a6a606bc7e11aa9f2537dfe1aaffb3 java-1.8.0-openjdk-demo-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 769908084a83e622fd7b91b077e1a95ebaaf4927d83a375419e36cbf4f75da77 java-1.8.0-openjdk-devel-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm aff037fc901a4b18867248f710ff2d013f8fabc299a2704b36a15cad196701d2 java-1.8.0-openjdk-devel-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 24db23fabd3f42ac80b56631875c9d11a03c995fa789530656e8780305877891 java-1.8.0-openjdk-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 25378f3ba9efa38dc336e1f3c434dafce937a826e313759dcc14b880ecd0991f java-1.8.0-openjdk-headless-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 48bcb4a5dce24c39da3a4a76cf04a291aed80a2dceace2626cb61ef14f98e47b java-1.8.0-openjdk-headless-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm e675cdaccd7d280dc41bd87227f6c962320ca867416614931624ab94bba4a9a6 java-1.8.0-openjdk-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 8530f6c9f08094d8f88d3e91cb70ca9d9ae99b854d35c522ff5c0c4e6269b948 java-1.8.0-openjdk-src-fastdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm df192d11290c02e1095a23e1a4087c205d8c92531d99439001a725af78deb3b1 java-1.8.0-openjdk-src-slowdebug-1.8.0.332.b09-1.el8_5.x86_64.rpm 9038cbeb9823955c358c5547d69dc85c420a65a4012cde7bde575823fef49d3b ALSA-2022:1442 Copyright 2022 AlmaLinux OS 0 2 Important

An update for java-11-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476) * OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) * OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434) * OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443) * OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 29cef6a239b4988772f2574722ea1cb7a50d775a2bda7373b3949488dbc15a3b java-11-openjdk-demo-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 64ec8e714956ac7b00b7721f00013285cd55a05ede05275343924d031d3ab1f3 java-11-openjdk-devel-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 9178d3f67fecc628b7e91720fa3d94ce4fc1d32f16660ff3e60b697dfe7f2eec java-11-openjdk-devel-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 53d107e68105a2ff2bc8f17bafc603ba567f21123f4a6ee4b5621674ab3eab03 java-11-openjdk-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm ffe4db5de4d6fce981c285bc8768b5f940fcc0bd339bedb8913b59d84bfe686e java-11-openjdk-headless-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm f566bf9361489b51d9f9ac7709ee7c6a468cd67492ab4f6ae5237a9b31d4183f java-11-openjdk-headless-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm cf805eb6b6817e427cbbcbef7a74ff22daf58f4bd8c5a512cc6c09d31cc1a962 java-11-openjdk-jmods-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm b9fc56cfe308530a21ce3f097271bb7f017a776ee36505abea1c2a1fdd6a9fc1 java-11-openjdk-jmods-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 7e116e423874cdf00d72f513aefef39fe65171ddfc53290d0364ef93ad5f40ca java-11-openjdk-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 3c3e33e9649b834632c8fa6996db108f0d4166ed25a4e83dbda0e388e8a28634 java-11-openjdk-src-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 9f3f862010559828bd17f18201a476d692738f342c5616115f6754ad312ea256 java-11-openjdk-src-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm abcf289267041785fca854fef1eae1acefc4b60eb359e0b1711f231d235dff7b java-11-openjdk-static-libs-fastdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 66ed316830e79132505d549d4956bbfdd3ac372bbb626d432a6d0fac50b43e73 java-11-openjdk-static-libs-slowdebug-11.0.15.0.9-2.el8_5.x86_64.rpm 37c5d8bab8f4b9c59983164c3cf26eeccce23afe85e174f3b3f75f4378a56bda ALSA-2022:1445 Copyright 2022 AlmaLinux OS 0 4 Important

An update for java-17-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: Improper ECDSA signature verification (Libraries, 8277233) (CVE-2022-21449) * OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476) * OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) * OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434) * OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443) * OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Enable the import of plain keys into the NSS Software Token while in FIPS mode [rhel-8, openjdk-17] (BZ#2018189) * Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode [rhel-8, openjdk-17] (BZ#2055396) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-17-openjdk-demo-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm ff076ad8f2081a515de58919ee589a50fd9817e4d7038f9c660e76acc6b5d416 java-17-openjdk-demo-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm d231a983357428d82f8fae5e0da02c28461ddce5e12ec5022cee67a65ee392d2 java-17-openjdk-devel-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm d292e2f63ce24180a7338edad40bd34b0d37714ea98c9aa0cc6f9b8f5886ab33 java-17-openjdk-devel-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 0c793da633c6ab2fd69edefc8374ebba88709e426365b9b5b4eb9b9b0fa48cc3 java-17-openjdk-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm f5fe66f5718aa1b6e8723dc534f415a064d0b1932ce4e9dc69970c10dc62cb9d java-17-openjdk-headless-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 5dc7df2171d9eb2a2f92a9e1dbde72967b8302c58e22da7a74e24522590ff2b0 java-17-openjdk-headless-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 30da475f7df124274ff6bf33c3f3718a7a457b16df12da98db16a9064112acb7 java-17-openjdk-jmods-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 1c70734e2fc457ddff0e9335b05819c4c20f9b6eafd5fa7fe3d6ce287bf62bfe java-17-openjdk-jmods-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm dd3292e72f0943e2e31562d89e540cb157543605ffe22e709907115b35b47177 java-17-openjdk-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 1236c23369582357ca2e1aa96efad0f481146c726c6c5f622802c51260a33baf java-17-openjdk-src-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 87379a70a060cf5e414a46ddde46b89315627fbcbf4c4318ffcb4259e2c9bbc1 java-17-openjdk-src-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm fa199ac30fa4792b5a5b58404c89c4919130bb54ffd5b8e91fcbbe002f45c74d java-17-openjdk-static-libs-fastdebug-17.0.3.0.6-2.el8_5.x86_64.rpm 82dc3c1fc38f2fc35246462efa700f2834d59377baee66d43555d3cd2c656696 java-17-openjdk-static-libs-slowdebug-17.0.3.0.6-2.el8_5.x86_64.rpm c7e1239879f131699ee60e354d85362948c056b1d59b77de98ee796702574756 ALBA-2022:1386 Copyright 2022 AlmaLinux OS 0 3 None

An update for .NET Core 3.1 is now available for AlmaLinux

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET Core 3.1 to SDK 3.1.418 and Runtime 3.1.24 [None8.5.0.z] (BZ#2073450) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-3.1-source-built-artifacts-3.1.418-1.el8_5.x86_64.rpm 3cf0da4bcaf3e84fb38ae400247a7456872fb5f2d938164fe65bee064181baec ALBA-2022:1388 Copyright 2022 AlmaLinux OS 0 3 None

An update for .NET 5.0 is now available for AlmaLinux

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET 5.0 to SDK 5.0.213 and Runtime 5.0.16 [rhel-8.5.0.z] (BZ#2072003) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.213-1.el8_5.x86_64.rpm 2c9571e4fad359ef71bcbc2c3e1e7548fec6fe15cbef02eb6f5842e614ef388e ALBA-2022:0900 Copyright 2022 AlmaLinux OS 0 2 None

An update for samba is now available for AlmaLinux

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fix(es) and Enhancement(s): * Samba 4.14.5 - virusfilter_vfs_openat: Not scanned: Directory or special file (BZ#2056877) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.14.5-10.el8_5.i686.rpm afc8593960869f2f9fc58abaeb5097d43ec74411a0170ff2b343ff51038b3d82 libsmbclient-devel-4.14.5-10.el8_5.x86_64.rpm bb07afb82a1e8a9d8b9e6aadbf09c01031c1d2f696e9920d306c94af8aba580c libwbclient-devel-4.14.5-10.el8_5.i686.rpm 8268170f9c305f099d6e9d9a73ef1e8f0263cd75393f3c270d2ddfcbf5b753b5 libwbclient-devel-4.14.5-10.el8_5.x86_64.rpm 70c64afd21ad33a2dccf26d63dc0cf291c2468cbcb1a80519f065eb48947c802 samba-devel-4.14.5-10.el8_5.i686.rpm 385c9a26f82f5834c1d7e7e0fc06bb0bd8e26b45e1114ce63e089ed7504a1953 samba-devel-4.14.5-10.el8_5.x86_64.rpm fc4ca5b11ccf596e120c637f06655c8042d204b40e4ae3d81a2b00429e9dd674 ALSA-2022:0892 Copyright 2022 AlmaLinux OS 0 2 Moderate

An update for libarchive is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: extracting a symlink with ACLs modifies ACLs of target (CVE-2021-23177) * libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive (CVE-2021-31566) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libarchive-devel-3.3.3-3.el8_5.i686.rpm 5dc14b78dec3ebd05c59325577369c404c366b6c4611416f4f3ef67f516c1de8 libarchive-devel-3.3.3-3.el8_5.x86_64.rpm 8e066ada5ac62af8de4794176a48cd1798b712faa367d3096f798b39c0c7921c ALBA-2022:0898 Copyright 2022 AlmaLinux OS 0 2 None

An update for lvm2 is now available for AlmaLinux

The lvm2 packages include complete support for handling read and write operations on physical volumes, creating volume groups from one or more physical volumes, and creating one or more logical volumes in volume groups. Bug Fix(es) and Enhancement(s): * Multiple concurrent lv refreshes fail (BZ#2040514) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-devel-1.02.177-11.el8_5.i686.rpm 5bd3ada3b8a315a040efe369d4cb9f05ebfe91883f4a49f77edde02eb143a124 device-mapper-devel-1.02.177-11.el8_5.x86_64.rpm e00917b0534d4363c2d2c1f9b4bcabb654f9c3b9f6842d57643b0c03a4fd1030 device-mapper-event-devel-1.02.177-11.el8_5.i686.rpm 1582d63d1c3cb4731ad92bfc8d0bddf9c122ae6793b29ff878b2c477cb9d557e device-mapper-event-devel-1.02.177-11.el8_5.x86_64.rpm 749c2808742b5a9a0f9af1a70045b4da578d81928bdcb46a75d15d187963245f lvm2-devel-2.03.12-11.el8_5.i686.rpm a89a132e4de184950a2025595e5b8e081917c47e5787bc3b0c017fb995586522 lvm2-devel-2.03.12-11.el8_5.x86_64.rpm 3ee2e3bb2c95238553c2a54aedd22063c39c143be079d3d8edd734b2f753ffd7 ALSA-2022:0896 Copyright 2022 AlmaLinux OS 0 2 Moderate

An update for glibc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Off-by-one buffer overflow/underflow in getcwd() (CVE-2021-3999) * glibc: Stack-based buffer overflow in svcunix_create via long pathnames (CVE-2022-23218) * glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname (CVE-2022-23219) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glibc-benchtests-2.28-164.el8_5.3.x86_64.rpm ce85595a01c12606157fb56953e9a935613011785a6ada4464e2cd433868e3cc True glibc-nss-devel-2.28-164.el8_5.3.i686.rpm eb33c99f4734edd44b57942cb93c92d8407626cd83ca9434f1986c4cf855b592 True glibc-nss-devel-2.28-164.el8_5.3.x86_64.rpm 8076cf9d4aa2f5736e65b26e27991ecd6f1b377d161a0a7ce10f70ef10cfcb5f True glibc-static-2.28-164.el8_5.3.i686.rpm 32c392ffccac880d69a75d039434a2c10d011d1dc3bad1c38d9e5860977f4925 True glibc-static-2.28-164.el8_5.3.x86_64.rpm dc37bd89460884d72d7c95a05ff15b6aae68f2b07d6eaa60ae1eee4cfc105862 True nss_hesiod-2.28-164.el8_5.3.i686.rpm 46887f8c5e5987df3b26310d502f17f6ee63d791f775a0a355c74ef975d31e9d True nss_hesiod-2.28-164.el8_5.3.x86_64.rpm 946315a7e1c9f3d3e100e8d9cc059ea6b55707e4b3941e1c406d9e1d8f8aefa0 True ALBA-2022:0887 Copyright 2022 AlmaLinux OS 0 2 None

An update for java-11-openjdk is now available for AlmaLinux

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fix(es): * The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client. It caused both the :authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053174) * Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055344) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm e5a325e03236f7a8117a1bbbcc959f4230ab460d3dfba0182148fccaede76d36 java-11-openjdk-demo-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 661bab55ad3a655169ff8904eb13b64832b26368a824436c65315a64856f474a java-11-openjdk-devel-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm e6f1bae4faba89b181fa1514b52bc4515172762e6f38333e600ee467ec7c9013 java-11-openjdk-devel-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 8bfca578ce68fe4c2ecc3d12e240c825125c8621555913dfc0c111fe342ab2a4 java-11-openjdk-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 7f43542e29a05ca3b3001d5a64a6bb9320db053e87802fd053abb938256f822c java-11-openjdk-headless-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm b0295c446fa9516408ea79c04560ed8004d59f9cf4c61dd9116dc821efe3f747 java-11-openjdk-headless-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 5464ce3e12c14a8d17c8d193e62b7c8fc9b515a88613af2a0a3c2335329b6bfb java-11-openjdk-jmods-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 07c392bc1f97dddd42cdc59444964d4fc11895cb9ab7f6e117f2007ed8c22f58 java-11-openjdk-jmods-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 73426899c4a4e933d0756a782e9ef2a6c307e60b4a1ebdba5a835c6d8338e6f9 java-11-openjdk-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 4cabae55600ecb6348c831a4abe36e1fab97c6e79879ab236262ca53a3fef239 java-11-openjdk-src-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 031990555fdb773a8e7275a29c759f8dd51a5c606beb8f07711a52f96406d9b5 java-11-openjdk-src-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 094604f7a5bee3feb487289f6c8180546a5ee2bdc3f4b71b69eb5cf3c3d06151 java-11-openjdk-static-libs-fastdebug-11.0.14.1.1-2.el8_5.x86_64.rpm 8c45568c2e4a821908777e51aeace9a85faab7f4ee1b4faf52bbf72fb3a8d13e java-11-openjdk-static-libs-slowdebug-11.0.14.1.1-2.el8_5.x86_64.rpm d4e448c5700ecf12e93199fb8a7be03608aac0a63ef1d3a7f78ac529c2834bc8 ALSA-2022:0827 Copyright 2022 AlmaLinux OS 0 5 Important

An update for .NET Core 3.1 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23. Security Fix(es): * dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464) * dotnet: double parser stack buffer overrun (CVE-2022-24512) * brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-3.1-source-built-artifacts-3.1.417-1.el8_5.x86_64.rpm da392c6a1ed41d041d64a909d5d9df96ac816e4b2b04b2fb4928d8611d6bd01a ALSA-2022:0830 Copyright 2022 AlmaLinux OS 0 8 Important

An update for .NET 5.0 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15. Security Fix(es): * dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464) * dotnet: double parser stack buffer overrun (CVE-2022-24512) * brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.212-1.el8_5.x86_64.rpm b9fb56d928664d6126eb081f7db3b57b45896a2de658efd21589fa2cd8335292 ALSA-2022:0825 Copyright 2022 AlmaLinux OS 0 9 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2036888) Security Fix(es): * kernel: improper initialization of the "flags" member of the new pipe_buffer (CVE-2022-0847) * kernel: Use After Free in unix_gc() which could result in a local privilege escalation (CVE-2021-0920) * kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout (CVE-2021-4154) * kernel: possible privileges escalation due to missing TLB flush (CVE-2022-0330) * kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435) * kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492) * kernel: missing check in ioctl allows kernel memory read/write (CVE-2022-0516) * kernel: failing usercopy allows for use-after-free exploitation (CVE-2022-22942) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Intel QAT Kernel power up fix (BZ#2016437) * RHEL8.4 seeing scsi_dma_map failed with mpt3sas driver and affecting performance (BZ#2018928) * [Lenovo 8.4 bug] audio_HDMI certification failed on RHEL 8.4GA (No hdmi out) (BZ#2027335) * [RHEL-8.5][4.18.0-323.el8.ppc64le][POWER8/9/10] security_flavor mode is not set back to zero post online migration (BZ#2027448) * iommu/amd: Fix unable to handle page fault due to AVIC (BZ#2030854) * [Lenovo 8.4 bug]The VGA display shows no signal (black screen) when install RHEL8.4(beta or rc1) in the legacy BIOS mode. (BZ#2034949) * Double free of kmalloc-64 cache struct ib_port->pkey_group from module ib_core . (BZ#2038724) * Bus error with huge pages enabled (BZ#2039015) * RHEL8 - kvm: floating interrupts may get stuck (BZ#2040769) * Data corruption on small files served by httpd, which is backed by cifs-mount (BZ#2041529) * Add a net/mlx5 patch for Hardware Offload Fix (BZ#2042663) * Windows guest random Bsod when 'hv-tlbflush' enlightenment is enabled (BZ#2043237) * DNS lookup failures when run two times in a row (BZ#2043548) * net/sched: Fix ct zone matching for invalid conntrack state (BZ#2043550) * Kernel 4.18.0-348.2.1 secpath_cache memory leak involving strongswan tunnel (BZ#2047427) * OCP node XFS metadata corruption after numerous reboots (BZ#2049292) * Broadcom bnxt_re: RDMA stats are not incrementing (BZ#2049684) * ice: bug fix series for 8.6 (BZ#2051951) * panic while looking up a symlink due to NULL i_op->get_link (BZ#2052558) * ceph omnibus backport for RHEL-8.6.0 (BZ#2053725) * SCTP peel-off with SELinux and containers in OCP (BZ#2054112) * Selinux is not allowing SCTP connection setup between inter pod communication in enforcing mode (BZ#2054117) * dnf fails with fsync() over local repository present on CIFS mount point (BZ#2055824) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.20.1.el8_5.x86_64.rpm 77b41d08d816fba2a07b109034d8f9ed534f208532887545b18e57059acac323 True ALSA-2022:0643 Copyright 2022 AlmaLinux OS 0 3 Important

An update for python-pillow is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fix(es): * python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817) * python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-pillow-5.1.1-18.el8_5.i686.rpm 94c7028905416c8b496c79a3661ef6a5e2d34e0816f0d8dcd8c4ec1782afd4cf python3-pillow-devel-5.1.1-18.el8_5.i686.rpm 2adb3d2df8b01316fe2e238ee660ec21eeefe5f0f5367a29d5b07cdf58a84577 python3-pillow-devel-5.1.1-18.el8_5.x86_64.rpm 5dc75f22099237bab4b886a214faaa312c599d5df035985244992fd3d5ac6a70 python3-pillow-doc-5.1.1-18.el8_5.noarch.rpm 77fcdc9fd93c5f375179289519ef43064b05c10f2143c390fd08af864328395b python3-pillow-tk-5.1.1-18.el8_5.x86_64.rpm 233441ce841bb155e018796a576fcec001cc071aa3e071bceceae2d6f182c713 ALSA-2022:0495 Copyright 2022 AlmaLinux OS 0 6 Important

An update for .NET 5.0 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 5.0.211 and .NET Runtime 5.0.14. Security Fix(es): * dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service (CVE-2022-219862) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.211-1.el8_5.x86_64.rpm 0b5e477965291f37acb248949370d776bbc7f9051ac35b0a47b91d0367add7b9 ALEA-2022:0354 Copyright 2022 AlmaLinux OS 0 2 None

An update for vulkan is now available for AlmaLinux

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fix(es) and Enhancement(s): * Rebase vulkan-loader in 8.6 (BZ#2016391) * Rebase vulkan-headers in 8.6 (BZ#2016392) * Rebase spirv-headers in 8.6 (BZ#2016393) * Rebase spirv-tools in 8.6 (BZ#2016394) * Rebase vulkan-tools in 8.6 (BZ#2016395) * Rebase vulkan-validation-layers in 8.6 (BZ#2016396) * Rebase glslang in 8.6 (BZ#2027693) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2021.4-3.20211110.git21e3f68.el8_5.i686.rpm 603cfccb54839f9fbd231c3ff330d4969ce9fc5ae573fa2345ec8e98a3379a24 spirv-tools-devel-2021.4-3.20211110.git21e3f68.el8_5.x86_64.rpm 7e25e321dd4f018ff47eb2c2544dd26895d50fd4ccd4e4ebbe8ddc72a230d5cf spirv-tools-libs-2021.4-3.20211110.git21e3f68.el8_5.i686.rpm 31a5ed145576e1a76feb52dbf7ec5e8a9335ff4e2ae832a8628f71733de372c1 ALBA-2022:0371 Copyright 2022 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Bug Fix(es) and Enhancement(s): * sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries (BZ#2030651) * AD Domain in the AD Forest Missing after sssd latest update (BZ#2035285) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.5.2-2.el8_5.4.i686.rpm 98da588500d3dbba17612d4e5babde4ce37b8d65ea514c759ad983ac7f1bc460 libsss_nss_idmap-devel-2.5.2-2.el8_5.4.x86_64.rpm fbc51a87ccb4985ed762c85348b87abccfa0fe74fb3c7cc986d57c01b634f01a ALSA-2022:0332 Copyright 2022 AlmaLinux OS 0 2 Critical

An update for samba is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution (CVE-2021-44142) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Fix username map script regression introduced with CVE-2020-25717 (BZ#2046174) * Fix possible segfault when joining the domain (BZ#2046160) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.14.5-9.el8_5.x86_64.rpm 6641c41070ef28584f1d417caec2a97a8e71d013c5bb59dc699d51a6fec562ef libwbclient-devel-4.14.5-9.el8_5.x86_64.rpm f30a0d230e23c86d052eda4da0c1155afd58d69014f8c9180fc66ae048f8bd0e samba-devel-4.14.5-9.el8_5.x86_64.rpm e477f3178414e3c1c4ebd8a3d5df711e51b492fa7d3e195dbdda10c9f4b9d9c8 ALEA-2022:0322 Copyright 2022 AlmaLinux OS 0 3 None

An update for .NET Core 3.1 is now available for AlmaLinux.

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET Core 3.1 to SDK 3.1.416 and Runtime 3.1.22 [rhel-8.5.0.z] (BZ#2031429) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-build-reference-packages-0-11.20211215git045b288.el8_5.x86_64.rpm 2c16103e4c98013fffc076960b035db36061b50b8de60bb6f9bc5525d54237ff dotnet-sdk-3.1-source-built-artifacts-3.1.416-3.el8_5.x86_64.rpm 359883534efef0d6b1fbc4fb3b494664609b2b0d5dcb50cf157d440df588de87 ALSA-2022:0307 Copyright 2022 AlmaLinux OS 0 3 Moderate

An update for java-1.8.0-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) (CVE-2022-21282) * OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) (CVE-2022-21283) * OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) (CVE-2022-21293) * OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) (CVE-2022-21294) * OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498) (CVE-2022-21296) * OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) (CVE-2022-21299) * OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014) (CVE-2022-21305) * OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) (CVE-2022-21340) * OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) (CVE-2022-21341) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) (CVE-2022-21360) * OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) (CVE-2022-21365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Previously, OpenJDK would crash when running the Java Flight Recorder (JFR) on PowerPC 64 (ppc64) machines. This was found to be due to missing crash protection in the ppc64 port. With this update, JFR should be run without crashing on ppc64. (BZ#2038935) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm bdb24964edbbe7ba77abd46f154f9bed9b9225b4534a8b2f4e909c247c32a9ae java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm ab84c3010939f0a0fa1100cc21b5e0615772e4a20c6bcc012d03d6f0ef95dc53 java-1.8.0-openjdk-demo-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 96acf0e4ae2f6ff4d78ce656793b55f36498319dfce42c0550c3abbf7bce1771 java-1.8.0-openjdk-demo-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 23f174ab3a777778485d155aa54f67c1d4266540fd344a435971ec4abe239d0f java-1.8.0-openjdk-devel-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 5955ca8f169f2f2fb07cc6aa7b8e79e6845ce55f5a23400fe65a12b02b2eaf12 java-1.8.0-openjdk-devel-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm a5c99c4aba0b57b36e45c5c28a6e7e92434f272c687915a54043d2699c65a198 java-1.8.0-openjdk-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 780813cdad0e5f43c709efdbae0d4391e5810f41b09d06175cb64afff81a3df8 java-1.8.0-openjdk-headless-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 0985e735f99470e3d8edef5643189dbb72ce02f9779f454c157ef4b38464c1ba java-1.8.0-openjdk-headless-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 84f85afff7f794f1999a3b84f1bd2cfaa3e597d33b46c7c088e631707d5580c7 java-1.8.0-openjdk-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 0dfd58dfc59e7a28dcf32f655008d8144fc3e84d46168bf4d804a4b0ab0f770f java-1.8.0-openjdk-src-fastdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm 9b95d1b23808c9d94b4ffd426e670229a43d91ba3f1459c8a23e4d123c19f2b4 java-1.8.0-openjdk-src-slowdebug-1.8.0.322.b06-2.el8_5.x86_64.rpm a1e1ac25dfb5bf1a6151e7ab63d1ff817b7817ae5a86093929a39da0e9e5c207 ALSA-2022:0185 Copyright 2022 AlmaLinux OS 0 3 Moderate

An update for java-11-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a Moderate security impact status. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Incorrect reading of TIFF files in TIFFNullDecompressor (ImageIO, 8270952) (CVE-2022-21277) * OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) (CVE-2022-21282) * OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) (CVE-2022-21283) * OpenJDK: Incorrect marking of writeable fields (Hotspot, 8270386) (CVE-2022-21291) * OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) (CVE-2022-21293) * OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) (CVE-2022-21294) * OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498) (CVE-2022-21296) * OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) (CVE-2022-21299) * OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014) (CVE-2022-21305) * OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) (CVE-2022-21340) * OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) (CVE-2022-21341) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) (CVE-2022-21360) * OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) (CVE-2022-21365) * OpenJDK: Excessive memory allocation in TIFF*Decompressor (ImageIO, 8274096) (CVE-2022-21366) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm a57c5f8e85a1ce45c36ee967560d871c64ae8f40196985cc0d269de14bdc9cd1 java-11-openjdk-demo-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm e4105a563fa55e9eace73cb426c97bead02866c0c530b33f3f33515022382bd3 java-11-openjdk-devel-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm b3a1159e32f2edcd9182ea483fed4be3b1d6357c028220e5f6b4577ee72b8323 java-11-openjdk-devel-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm e2c0daa6e4bc4b153380c8c0f29979d02aecfd43f250b13efd21360b15290e2b java-11-openjdk-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 35a6d600da49df24f499e95cf7568f2e32853fa1c3ec1b25864c60cd81cd5dcd java-11-openjdk-headless-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm bc8496d68f004235b538ea17c6a28decf95da18c82ef98a339ecff0c6b86cbdf java-11-openjdk-headless-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm ce8ffcf106cffd353020312ca52e772c2db64272f347b49acd038549e1e401e7 java-11-openjdk-jmods-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 0639d6b3226bb87e8b3ecc7800f29e0325516086067e032c05fc5020319c8182 java-11-openjdk-jmods-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 029066c9882b87a734f85dc8b1147a71f42a7f30f71fdc0f0e3f71a31cbf7d9b java-11-openjdk-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 229ae1c1a23f877fe9411a520cb6ab21b29b73dbd172f1d6b203329ca8cbca21 java-11-openjdk-src-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 54404eb35e3b17b6c35b349456e412d0d8e9c67491f5ef48924e0c426dbad3a5 java-11-openjdk-src-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 61f30640febd40d73d7ed80804c2bf26eddaefd6bd02d92e86e703aa873fe8eb java-11-openjdk-static-libs-fastdebug-11.0.14.0.9-2.el8_5.x86_64.rpm 0f6e35fa15525c11d10873b7c5eeb2c37e363742c57fa2148fc8046e2d386722 java-11-openjdk-static-libs-slowdebug-11.0.14.0.9-2.el8_5.x86_64.rpm c768557bb568205acd0b5b48c093125171ff410a90b8c428978f916cc3e86873 ALSA-2022:0188 Copyright 2022 AlmaLinux OS 0 7 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL (CVE-2021-4155) * kernel: fs_context: heap overflow in legacy parameter handling (CVE-2022-0185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * kernel show “ BUG: scheduling while atomic:xxx“ and reboot when an uncorrectable memory error injection on RHEL8.4 beta and GA (BZ#2008789) * tcp: Sockets can be orphaned in the FIN-WAIT-1 or CLOSING states. (BZ#2021574) * Hostnetwork pod to service backed by hostnetwork on the same node is not working with OVN Kubernetes (BZ#2024411) * ice: bug fixes for kernel crashes (BZ#2026698) * [RHEL-8.6][SanityOnly] Backport leftover migrate_disable BPF related change (BZ#2027689) * xfs: I_DONTCACHE flag is ignored [xfstests: xfs/177] (BZ#2028534) * FIPS: deadlock between PID 1 and "modprobe crypto-jitterentropy_rng" at boot, preventing system to boot (BZ#2029365) * RHEL8.6: Backport upstream RCU commits up to v5.12 (BZ#2029449) * i40e,ixgbe: revert XDP partial backport from kernel 5.13 (BZ#2029845) * spec: Support separate tools build (BZ#2031053) * RCU stall WARNING: at kernel/rcu/tree.c:1392 rcu_advance_cbs_nowake+0x51/0x60 (BZ#2032579) * block: update to upstream v5.14 (BZ#2034396) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.12.2.el8_5.x86_64.rpm c6c8b01b0b142513f4b17f102aea09a94819bfd334e7cba1713dc44bf96df11e True ALSA-2022:0161 Copyright 2022 AlmaLinux OS 0 3 Moderate

An update for java-17-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE pages listed in the References section.

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Incorrect reading of TIFF files in TIFFNullDecompressor (ImageIO, 8270952) (CVE-2022-21277) * OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492) (CVE-2022-21282) * OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) (CVE-2022-21283) * OpenJDK: Incorrect marking of writeable fields (Hotspot, 8270386) (CVE-2022-21291) * OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) (CVE-2022-21293) * OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) (CVE-2022-21294) * OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498) (CVE-2022-21296) * OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) (CVE-2022-21299) * OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014) (CVE-2022-21305) * OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) (CVE-2022-21340) * OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) (CVE-2022-21341) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) (CVE-2022-21360) * OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) (CVE-2022-21365) * OpenJDK: Excessive memory allocation in TIFF*Decompressor (ImageIO, 8274096) (CVE-2022-21366) For more details about the security issues and their impact, the CVSS score, acknowledgements, and other related information, see the CVE pages listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-17-openjdk-demo-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm b86580933904623c98feab0a1b507103d37527c754740c5c2df100df03f81ce3 java-17-openjdk-demo-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm f554164b07ef7c4173d18c847f368c0aa8433b487f30cbe7952190e33ac8b3ac java-17-openjdk-devel-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 7330d70a8f8914c1fc8a55b7bf8428c1415974680e48b3fa2338b669c77ac30f java-17-openjdk-devel-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 49b3b43d093fe2905c2f97c4ffd20209f35b52c0bb6c79cf082e8c546d310d4c java-17-openjdk-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 0c41ed65cbf96680d7549221eedb6cfbb85772344211a6e81e7b10487a2bf168 java-17-openjdk-headless-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm a958a77c528c7228ba1242232d60e5c397b75b891b4060ad7bc3593c289d8db4 java-17-openjdk-headless-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 76169c8a98e2b050bc5d2d16541684086d55c73743a3c51cd4c2d028702b5a96 java-17-openjdk-jmods-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 99c660129ea0338e31a961e35110b62c38cef8e680712a1596ecf15d1af8ef44 java-17-openjdk-jmods-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 15ed6b465618406bea8fbdaa97fdd1994418b5bed965cde51cee560068fc86aa java-17-openjdk-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm cb2340df0a9c7264842d865089afe2487720c5077d8bb54e3548dd9cd6191a3a java-17-openjdk-src-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm a130c26739ab7ed0b2dbc075776107a7ae8efe14fe941f099d31eb1aa7558264 java-17-openjdk-src-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 54e45f32e3bf6e3c9f8805941388a721c2a2d43e8b27795ed2eb541a52e64bee java-17-openjdk-static-libs-fastdebug-17.0.2.0.8-4.el8_5.x86_64.rpm e8d2a9b1e3e0107522024060e3370c527c46825fd0aecdc6a87fdb0ab9fbbfcb java-17-openjdk-static-libs-slowdebug-17.0.2.0.8-4.el8_5.x86_64.rpm 46f219c7cddc25193c4a4f829991e835068ffa0fbd06cacaf5b450f9106e963a ALSA-2022:0177 Copyright 2022 AlmaLinux OS 0 2 Important

An update for gegl04 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): * gegl: shell expansion via a crafted pathname (CVE-2021-45463) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gegl04-devel-0.4.4-6.el8_5.2.i686.rpm deef0f3d2d3297d96e5bdc61b324fea8fd660252281c04fb72055a0116e436eb gegl04-devel-0.4.4-6.el8_5.2.x86_64.rpm 01bda9a1c881d8d060601f884510ce90f075fc077bb723db86b02ba39a469fd1 ALSA-2021:5227 Copyright 2021 AlmaLinux OS 0 7 Moderate

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename() (CVE-2021-20321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * panic while breaking a lease/delegation after user mode helper invocation (BZ#2010333) * The ASR driver is causing a system crash in RHEL8.4 compared to RHEL8.3 due to kernel changes (BZ#2016384) * RHEL8: DFS provided SMB shares are not accessible following unprivileged access (BZ#2017177) * Avoid hitting the rtnl_trylock/restart_syscall logic in net-sysfs when possible (BZ#2021165) * RHEL8: x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (BZ#2024678) * RHEL8.4-[Regression][P10][DD2.0][Rainier/Denali] - system crashed while offlining and onlining cores (BZ#2026450) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.7.1.el8_5.x86_64.rpm 0aea663ec257dfb275b0187828e5df2da64d45910c60d748116f99c8bccd079b True ALBA-2021:5228 Copyright 2021 AlmaLinux OS 0 3 None

An update for sssd is now available for AlmaLinux

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Bug Fix(es) and Enhancement(s): * Lookup with fully-qualified name does not work with 'cache_first = True' (BZ#2013379) * autofs lookups for unknown mounts are delayed for 50s (BZ#2016923) * 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) (BZ#2018440) * Make backtrace less "chatty" (avoid duplicate backtraces) (BZ#2021499) * pam responder does not call initgroups to refresh the user entry (BZ#2028828) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.5.2-2.el8_5.3.i686.rpm 0ca44d83089719e1ee9b5edfb14e5791ea98ae37aeb59894168102485aec5dba libsss_nss_idmap-devel-2.5.2-2.el8_5.3.x86_64.rpm a9f3c2f9c52f7948fa4f169cba98bf88332d58b9236e9b4ced6d43e8480cbc79 ALBA-2021:5230 Copyright 2021 AlmaLinux OS 0 2 None

An update for accountsservice is now available for AlmaLinux

The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information. It is based on the useradd, usermod, and userdel commands. Bug Fix(es) and Enhancement(s): * [HP WS RHEL 8.5 bug] Desktop presentation changes between reboots when logging in as root (BZ#2013103) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default accountsservice-devel-0.6.55-2.el8_5.2.i686.rpm 178ffd2e58ed3e2f714bc56aa8c679962232beccbc2c8b7d1081332e41a3380a accountsservice-devel-0.6.55-2.el8_5.2.x86_64.rpm c48603ee224e0f85caaa22edf05f319f629ff626f566628d22aaff60e4680f8b ALBA-2021:5232 Copyright 2021 AlmaLinux OS 0 2 None

An update for java-11-openjdk is now available for AlmaLinux

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fix(es) and Enhancement(s): * While in FIPS mode, the NSS Software Token does not allow the import of private or secret plain keys. This caused the OpenJDK keytool application to fail when used with OpenJDK in FIPS mode. With this update, OpenJDK will now import such keys into the NSS database. This behaviour may be disabled using -Dcom.AlmaLinux.fips.plainKeySupport=false. (RHBZ#2014212) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 4a169050f681beb405495a6e768e0e7c508e253e340340b13d0d289db770c57f java-11-openjdk-demo-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 4bac8fb11fbec8a7ef3a117955e06cad974ceef0ae986430ea54ec7197719101 java-11-openjdk-devel-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm cccfeff4c5ca12402945a2f2e4d1823ecd0f35b3fc4705dc87ac4db2d15aaf6b java-11-openjdk-devel-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm a6dd43eb267bdd9502d284807cd153e54883e8deeb1ca348fa43f6ba3a429178 java-11-openjdk-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm c9751aa5991089e141de760ec8e3aebd1d9066156fcd30ecd9cf2a8ef3fc3e6c java-11-openjdk-headless-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 9af9f1a30268e7e588500443fa2b5220e2480b8a4c6c4774962820f0cf6b8cfd java-11-openjdk-headless-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm a97223a2632e3207107db5cb31b73b4af903951f29b8574bc48c01e36666e6ff java-11-openjdk-jmods-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 54440ba2046b55a3d3029c3821349007facc88875d394d6cfbee488a11fb1e66 java-11-openjdk-jmods-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm d139cb6e9d021a7712b203faca73140c6612aed1db78b13337f080e11deca824 java-11-openjdk-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 36f6a3fe35b9a59d347eddaa2622acfa6d17e859b41efb7fbe6a5213f7939c59 java-11-openjdk-src-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 899d8e6b2d7a1604f6d1f3c6d7194a5d43c5d2bd8f2b4df1a1c4f0e76cca210f java-11-openjdk-src-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 45dd0d6a4670b3831654788eed0fe0ee8cf5201e2c30e989ace4858c31f11a21 java-11-openjdk-static-libs-fastdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 10d1f48a3c922dd13f463b5f041057e3f008e635944887ac5e9eb5257d32e992 java-11-openjdk-static-libs-slowdebug-11.0.13.0.8-4.el8_5.x86_64.rpm 6dbc0c8ea9e4026da035e4a842c9d1cf05e33931247f79bc40700acdfd4481cf ALBA-2021:5224 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Bug Fix(es) and Enhancement(s): * IPA: usr/lib/api/apiutil.c Could not open /run/lock/opencryptoki/LCK..APIlock (BZ#2009328) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.16.0-7.el8_5.i686.rpm bb9636a0fd2cc7d91f4a0a591c511c641b5e7441b08046e074066b622c2a89d6 opencryptoki-devel-3.16.0-7.el8_5.x86_64.rpm 54624ccfbf19e638878e28f5c0c67f68a943aa46cdd51df04705f47d6da28634 ALBA-2021:5231 Copyright 2021 AlmaLinux OS 0 1 None

An update for poppler is now available for AlmaLinux

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Bug Fix(es) and Enhancement(s): * Unable to open certain PDF documents (BZ#2002691) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default poppler-cpp-20.11.0-3.el8_5.1.i686.rpm 9dc61a52037f408ef732efcbf694f353ea8e7385a944b01b6dac2f6138b1d954 poppler-cpp-20.11.0-3.el8_5.1.x86_64.rpm 24af120a69fc2a25b1ecfb30fbfff46a6f817d343ef673be8831fa42832797de poppler-cpp-devel-20.11.0-3.el8_5.1.i686.rpm d47bde45a7467a0cf118348ba869bdce7ffb8db2178c2f09df6787e4dcbe564b poppler-cpp-devel-20.11.0-3.el8_5.1.x86_64.rpm acf5e5cc51983bf90666c23471b3dff65b4c4a7f7edd664c56c22d8db70b3e93 poppler-devel-20.11.0-3.el8_5.1.i686.rpm fbabf2c534857ab7e36f2e6dfe9975cabe0fa65782cdaa4b9e50a56cfca2af68 poppler-devel-20.11.0-3.el8_5.1.x86_64.rpm 0c6cf62a077bf238433bc01e977c8152c067ebf693d6fc542f55cc5be0f6d752 poppler-glib-devel-20.11.0-3.el8_5.1.i686.rpm f68247d4aca37cc1257eb71ff15af36b49ba8ef9b4138090579a00513ab5f443 poppler-glib-devel-20.11.0-3.el8_5.1.x86_64.rpm 1a3732981e75d28d4b69a3f5a016e0fa6937cdd1171d2bc851a29581cfc1b6b2 poppler-qt5-20.11.0-3.el8_5.1.i686.rpm e1fe15f05f56a8633dae1a3275b27aca5b41397405e2a41a19ba15be4cdd2e27 poppler-qt5-20.11.0-3.el8_5.1.x86_64.rpm df5d89ffdd8cc284589892f3604e5b67ccbf082bbd8421127baf0225349320dc poppler-qt5-devel-20.11.0-3.el8_5.1.i686.rpm c6763908b58d8833ade8f91cbcaeaa7df8cb8563f2c88c040a42e29dc7009d1a poppler-qt5-devel-20.11.0-3.el8_5.1.x86_64.rpm f3545af6d1e3666457e3fc076a40c009a1d7ab311fb295bdd71176d49bebbd1e ALBA-2021:5146 Copyright 2021 AlmaLinux OS 0 2 None

An update for .NET 5.0 is now available for AlmaLinux.

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update .NET 5.0 to SDK 5.0.210 and Runtime 5.0.13 [rhel-8.5.0.z] (BZ#2030738) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.210-1.el8_5.x86_64.rpm 3fbbe1bec3aee9acfa2f17113f9729e2831a27dcae8c14034263ea13336516cf ALSA-2021:5082 Copyright 2021 AlmaLinux OS 0 3 Important

An update for samba is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Active Directory (AD) domain user could become root on domain members (CVE-2020-25717) * samba: SMB1 client connections can be downgraded to plaintext authentication (CVE-2016-2124) * samba: Subsequent DCE/RPC fragment injection vulnerability (CVE-2021-23192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.14.5-7.el8_5.i686.rpm 9d5e5837d4db71847505e8675c14b26e68f7b76f8ff6d8ae7881982e8f1cc735 libsmbclient-devel-4.14.5-7.el8_5.x86_64.rpm b8a1f15e15698a81b7de9dd1edadd435b99d8a5bd148a4bfdd5e23922afa3a98 libwbclient-devel-4.14.5-7.el8_5.i686.rpm 40d6cdf0813e4f8e6af683657dc3e946f22af272d8f94d47019bde44ee7097b1 libwbclient-devel-4.14.5-7.el8_5.x86_64.rpm 8b47981b6f1062c8283231cea50150f0ed4ed9deb2773e85bee04fca1660cee1 samba-devel-4.14.5-7.el8_5.i686.rpm b13b174ef334e48d706b8cc562609a5173bc2bc2b83e0368440cf977938f002b samba-devel-4.14.5-7.el8_5.x86_64.rpm 476ba6009b4404484a8e2f76c0736eae11c28222f539922a002c2a6e6f5fc3b2 ALBA-2021:4534 Copyright 2021 AlmaLinux OS 0 2 None

This is the monthly update for .NET Core 3.1 for October 2021.

This is the monthly update for .NET Core 3.1 for October 2021. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-3.1-source-built-artifacts-3.1.120-2.el8_5.x86_64.rpm f4e401349d4c7390f6db220ff66a7d323fb645c312c2d0a21a7260a50535e601 ALBA-2021:4897 Copyright 2021 AlmaLinux OS 0 2 None

An update for kronosnet is now available for AlmaLinux

Kronosnet (knet) is a network abstraction layer designed for High Availability use cases. Bug Fix(es) and Enhancement(s): * Revert defrag buffer changes that could potentially cause instability. (BZ#2023847) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libknet1-1.18-4.el8_5.i686.rpm 69824d6b2f61f8db00d0cb84eb2abf03ff4fe840f1f87f210a95c163ff9c1fa3 libknet1-1.18-4.el8_5.x86_64.rpm 4e80ab4bf972be341fd58fe026881ad0cf0f96d404909db9a92baea66d209faa libknet1-devel-1.18-4.el8_5.x86_64.rpm 5f537b1ef60c3c6c62edc13fbd80cdf8d1d23fe561edb8f0066bef8523a7d363 ALBA-2021:4840 Copyright 2021 AlmaLinux OS 0 2 None

An update for dotnet5.0-build-reference-packages is now available for AlmaLinux.

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fix(es) and Enhancement(s): * Update to 6ce5818b1c1828ccdc8ac63d460d029c6391a401 [rhel-8.5.0.z] (BZ#2024345) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.209-1.el8_5.x86_64.rpm 6164733e75d03ffa9938c8b700d43e12977df5fceb438b112b2bc1db150de236 dotnet5.0-build-reference-packages-0-12.20211117git6ce5818.el8_5.x86_64.rpm fa5452b937121a338640dbcc8738ff0622b3575614f065220b79618432af11ab ALBA-2021:4535 Copyright 2021 AlmaLinux OS 0 2 None

Monthly update for .NET 5.0 for October 2021, for AlmaLinux 8.5

Monthly update for .NET 5.0 for October 2021, for AlmaLinux 8.5 codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-sdk-5.0-source-built-artifacts-5.0.208-2.el8_5.x86_64.rpm 9e7f39c617fea3c6ee7fab4d8c750d98baee910fe707935694752d4e425feaca ALSA-2021:4587 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for gcc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574) The following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters: This update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters. There are three levels of warning supported by gcc: "-Wbidirectional=unpaired", which warns about improperly terminated BiDi contexts. (This is the default.) "-Wbidirectional=none", which turns the warning off. "-Wbidirectional=any", which warns about any use of bidirectional characters. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-plugin-devel-8.5.0-4.el8_5.alma.i686.rpm e9ee830f90aa962e0812ec8d5496b01f698238d6358928c0532938413208f0ee gcc-plugin-devel-8.5.0-4.el8_5.alma.x86_64.rpm 8a7e6ddaa91eeca0f9f30200d53df560a685aa28353e0808cb08f592bb16a84e libstdc++-static-8.5.0-4.el8_5.alma.i686.rpm c7ae32f7cb8e3f7f9512d491697178a28c3357c0a751115f79aa0942532d0fe0 libstdc++-static-8.5.0-4.el8_5.alma.x86_64.rpm e0b692d3c926461752da3a42e1ccab9b487007598c3c7ec2aeac1b7c40bd8fae ALSA-2021:4647 Copyright 2021 AlmaLinux OS 0 5 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267) * kernel: timer tree corruption leads to missing wakeup and system freeze (CVE-2021-20317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.2.1.el8_5.x86_64.rpm cdb7d95e0b9d136e1d6553e01e25b080b7647fed405efb0e2a07f0f20d3fa6b7 True ALBA-2021:4541 Copyright 2021 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Bug Fix(es) and Enhancement(s): * tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing (BZ#2014460) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.5.2-2.el8_5.1.i686.rpm 38ef69352feedd9aad86dc04992e27023c692cac8f1ef2403aebe76930a2ddd6 libsss_nss_idmap-devel-2.5.2-2.el8_5.1.x86_64.rpm bcb296b63aaf6a584d58ec7dbec61a8631b56b2bd86e862636f4cb8e9f178c47 ALSA-2021:4622 Copyright 2021 AlmaLinux OS 0 4 Important

An update for freerdp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159) * freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freerdp-devel-2.2.0-7.el8_5.i686.rpm f2c28edf5d619de42b02a53ec3f35ae0c95e36575c5aafb498ee9e2c408f58c2 freerdp-devel-2.2.0-7.el8_5.x86_64.rpm 8413776082dddc3aab91013729f8f429c79d095549031fbc2a4afff2c0388ac8 ALBA-2021:3890 Copyright 2021 AlmaLinux OS 0 2 None

An update for java-11-openjdk is now available for AlmaLinux

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fix(es) and Enhancement(s): * java-11-openjdk: JDK: Oracle CPU 2021-10 (BZ#2012334) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm cf16a2e9656adb60af084d7fd855d1e6e269aa6f92c125c92f60def2656dc323 java-11-openjdk-demo-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm cdd4b2f265553e447386fdb3d094be0b552dd7d1dfab15a72b02b49db858eb2d java-11-openjdk-devel-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 1681a9815320230a9e5efbd40b7e474fcf8efa394e84e9846f0e4e17a74c16b1 java-11-openjdk-devel-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 4efd4fed893c43ee66930f1faea8db72ea2a7699d75afd2f2f1d00d0dd48fb71 java-11-openjdk-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm f8e74de18f87a990000e55e30221991d6c5c14889cf52db6000c4facb11b755c java-11-openjdk-headless-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 7c3cd886e7d02861a88a944228f80f30a3f24fa1007cb522d2481027de923abd java-11-openjdk-headless-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 8af80af20cb8fba074981f7b80bc01708975b2089244f0e4d0a59c27ca5f7c8a java-11-openjdk-jmods-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 393413bbba859e7b945b63032266f7ad61602e53d2bce4995f11595fba171a1f java-11-openjdk-jmods-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 71a7091273a11d9f97bfbc3ef0cb3d66ea2b4aa6b8f52de9aeed49387a1e6083 java-11-openjdk-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm e23ae455be205a6f2944a061c26ff51a9e554f44c03d512ab841d72c27db4081 java-11-openjdk-src-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm c1cf04fa2a2aaac39cbe97b4a9da3a377a62090f814b00235a6932cfea39fd2a java-11-openjdk-src-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm e5db31ca10175a12323c420280317b8cf22afd13a1f339fa63f4c1f64cc1adea java-11-openjdk-static-libs-fastdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 219ebf9f5a4fb1a780f8ced34d4aa77e5ccaa210c6a88a7bdfd8f3acf943d633 java-11-openjdk-static-libs-slowdebug-11.0.13.0.8-3.el8_5.x86_64.rpm 00b266aea404f64fc27abd97060c8c828de827a9f56c7bc52f1a81672b37425f ALBA-2021:3888 Copyright 2021 AlmaLinux OS 0 1 None

An update for java-1.8.0-openjdk is now available for AlmaLinux

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Bug Fix(es) and Enhancement(s): * EMBARGOED java-1.8.0-openjdk: JDK: Oracle CPU 2021-10 (BZ#2012338) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 80b8a3b277fa502d90c7b2bc09f126e5bcb82cdf012d1ff081e60991443df489 java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 34fba5a09e505e172c128a15e14231f9f6f168b54f841e3bd7f95da6fb49c975 java-1.8.0-openjdk-demo-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm ae9480c16e73e924f05908dbf381dc6c6b768a98a47f186d9849c16ca2190508 java-1.8.0-openjdk-demo-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm bdb016718a420d8658901a9d50ba5b2d8274d1e73e61bb79fdca6e1762f9802c java-1.8.0-openjdk-devel-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm deed66d8f03050128f6beafeb73c6b9c5eacef4ed0d9b6dff3c4bef7cac41eca java-1.8.0-openjdk-devel-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 33242b87dbfb8b70151b11d2a8b28b3cdd52e3b800ffa7f01b6b8a02845e318a java-1.8.0-openjdk-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 95a794c8fa35e287ec2550146f2b35b21b137d9f9442e62fedd46a7771f25e58 java-1.8.0-openjdk-headless-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 0bc91852e88a0df1cbf0d629092c5a0130a4bb777c99fc0897efe54360e5bc63 java-1.8.0-openjdk-headless-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 52fc9a3465ac1ff313b76884ace69eb38fe82942649ed734fd2ac98dcb844c49 java-1.8.0-openjdk-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 93d2ee8c5360d1239eb7081af20b25f5c76b813f1f340a38ceaa7a2fff1ffa02 java-1.8.0-openjdk-src-fastdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm edd36c1a8a25618eb99aac6836f7513fb955baad5930ba79629232c8c04fd1ef java-1.8.0-openjdk-src-slowdebug-1.8.0.312.b07-2.el8_5.x86_64.rpm 3ae005c66d2c0dddf38fc1c60999773125ee14c7f79a8b7219ba1c9597bedde6 ALBA-2021:4533 Copyright 2021 AlmaLinux OS 0 2 None

An update for ibus is now available for AlmaLinux

The Intelligent Input Bus (IBus) is an input method framework for multilingual input in Unix-like operating systems. Bug fix: * Previously, in GNOME Wayland desktop in AlmaLinux 8.5, the IBus emoji candidate pop-up was used with IBus UI and the selected candidate could not inserted into the target input focus smartly. With this update, the IBus emoji candidate pop-up is used with GNOME-Shell UI in GNOME Wayland desktop and the selected candidate is inserted into the input focus correctly. (BZ#2014064) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ibus-devel-1.5.19-14.el8_5.i686.rpm 522ab3d79d29251128df31572cf150491f3b2e413aebdfff75147139af602c7a ibus-devel-1.5.19-14.el8_5.x86_64.rpm a09e6b5a31b65cb4745e856a47aa653a0dd46c5f95fe38a946903b0396e952db ibus-devel-docs-1.5.19-14.el8_5.noarch.rpm 13ede9be251aa3438c009254d9042cb308f67f3330f734d1c3e0c6da38b346f1 ALEA-2021:4539 Copyright 2021 AlmaLinux OS 0 3 None

An update for flatpak is now available for AlmaLinux

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Bug Fix(es) and Enhancement(s): * CVE-2021-41133 flatpak: sandbox bypass via recent VFS-manipulating syscalls (BZ#2012868) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default flatpak-1.8.5-5.el8_5.i686.rpm 39f1a2acb909427f5cb52b9a7cd57ed7bcdddec2b0378dc7f0f0e8467f249912 flatpak-devel-1.8.5-5.el8_5.i686.rpm 992540aa3084c2ebaf60d05bea530ef7d7fffaf84274295103a253380742d277 flatpak-devel-1.8.5-5.el8_5.x86_64.rpm 21c0ba35349e6b9cdfeacf7cb5a22630d5280d01fa73c70785b9b27b60676f47 flatpak-session-helper-1.8.5-5.el8_5.i686.rpm fc0363855d4bb26b052e5e551a30c8f206ad72c646d4374981657b34aa36c885 ALSA-2021:4135 Copyright 2021 AlmaLinux OS 0 1 Important

An update for java-17-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689) (CVE-2021-35567) * OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167) (CVE-2021-35556) * OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) (CVE-2021-35559) * OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561) * OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137) (CVE-2021-35564) * OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) (CVE-2021-35578) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735) (CVE-2021-35586) * OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618) (CVE-2021-35603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-17-openjdk-demo-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm dd32be3bfcea989543d89da8e01daf59a10f2f9a87f57a3126d54a38ceaef24b java-17-openjdk-demo-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 0e7c6ad6427f286e8f6ce37a55381ed808aba13fdea97cf15d6a241ade27fa72 java-17-openjdk-devel-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm b7c26009353d8c55cf0627c120d61b390a04f2a64f03080bf4275a53125ce1aa java-17-openjdk-devel-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm fdd8beb1466eb7dd82ccaf1f49851cc599f2792f0a28446623a581d51e3edd66 java-17-openjdk-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm b12e40f95bb0fc93c1eedaf2d712ba456b64c37b3c9fe6709ee6821bbe0b0083 java-17-openjdk-headless-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 4799ef48dc51b40c4d2cce48ab2ed206928d1a31e522c052b5adf9fbcb65303f java-17-openjdk-headless-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 703937e6d9d8c4a6f5a1274b0aba6837eb2aea71f40a729ebc17d359bcca804c java-17-openjdk-jmods-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 6f2da09fb2f9fd0d7f75c281d0c644a0df32b8877be4266836eb2050c0dd880f java-17-openjdk-jmods-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 0846f6a5d60c62bdcfb0bd7eb3c05edc4ebc65b44c4f2d8eddd8e6150dcb758d java-17-openjdk-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 9be3b1088ce651e557757b85b08eeca521486d41f81007eb0927d456e512ccf5 java-17-openjdk-src-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 3aed74936a340fbce07da89667c407525bdc3668526099d4a280305765cd66d7 java-17-openjdk-src-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 928324ecb5dacc8423d3bfdf9d57de7d99bc43b17d833ba1bf4c9b5c4daa1370 java-17-openjdk-static-libs-fastdebug-17.0.1.0.12-2.el8_5.x86_64.rpm 288b171b173dde0a9a85b85413b9b757a58cbd43b019433daf690f167df94441 java-17-openjdk-static-libs-slowdebug-17.0.1.0.12-2.el8_5.x86_64.rpm c78f7922bd48c72388ebae471bac8ce83dc44347406d5643835e77ceb26dd5c6 ALSA-2021:4585 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for gcc-toolset-10-gcc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574) The following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters: This update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters. There are three levels of warning supported by gcc: "-Wbidirectional=unpaired", which warns about improperly terminated BiDi contexts. (This is the default.) "-Wbidirectional=none", which turns the warning off. "-Wbidirectional=any", which warns about any use of bidirectional characters. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-toolset-10-gcc-plugin-devel-10.3.1-1.2.el8_5.x86_64.rpm 624886a881fb6c427e55f233ea7a5b0c10c83f22b45da5304d086ba432ad4f86 ALBA-2021:4096 Copyright 2021 AlmaLinux OS 0 2 None

An update for brasero is now available for AlmaLinux

The brasero packages provide a disc-burning program, which serves as a graphical front-end to to the cdrtools, cdrskin, and growisofs utilities, and, optionally, to libburn. Bug Fix(es) and Enhancement(s): * Brasero cannot burn BluRay disks (BZ#2005826) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default brasero-devel-3.12.2-4.el8_4.1.i686.rpm 28288704e463747b0779595a06b843d8019f295c3bf2d199aaf0753522d7e6ae brasero-devel-3.12.2-4.el8_4.1.x86_64.rpm 667647c68c7f8c2776b356c195838f0a978e418686413bb44ed095d380c9c431 ALBA-2021:4061 Copyright 2021 AlmaLinux OS 0 3 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * IPv6 Default gateway deleted from routing table (BZ#2007264) * [nm-cloud-setup] [AWS] default route inter-feres with other subnets on the VM (making containers unreachable) (BZ#2007341) * [Azure][AlmaLinux-8.5] nm-cloud-setup.service makes network connectivity loss (BZ#2014510) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.30.0-13.el8_4.i686.rpm 136f5713a4d21fb6ce8d39ff83426a594c859c949b1987cdbdd35d660d58da04 NetworkManager-libnm-devel-1.30.0-13.el8_4.x86_64.rpm f0470d6377ced00b6b864516c7396fbd9ad3023e97f2ab85e07dea906e435243 ALSA-2021:4060 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for libsolv is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: heap-based buffer overflow in pool_installable() in src/repo.h (CVE-2021-33928) * libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h (CVE-2021-33929) * libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h (CVE-2021-33930) * libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c (CVE-2021-33938) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsolv-devel-0.7.16-3.el8_4.i686.rpm 13b65ad05954b0818ab956c489c8534341165820d84e9cce34a2a5428a818773 libsolv-devel-0.7.16-3.el8_4.x86_64.rpm 0461cb3b116a931bb3186617142b71ae54f4b46d20f104ef1114eb233771b4f9 libsolv-tools-0.7.16-3.el8_4.x86_64.rpm 57a23ad522b720ce4cc7113e692237e6420825e285bab1df95ddc971824c5e40 ALSA-2021:4058 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for samba is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fix(es): * samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (CVE-2021-20254) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.13.3-5.el8_4.i686.rpm eedbafa2b2ca075402656437dfe02aaf83c131032db16c358950f91701923e9b libsmbclient-devel-4.13.3-5.el8_4.x86_64.rpm f083a301eb47bc7200ef677822df9d0ed60a6f4e31530521e8d7022172c56526 libwbclient-devel-4.13.3-5.el8_4.i686.rpm aa3455df4a2cfca5a32ae0b7446d676027d5a4be05e528c3a61edb3df7ecb843 libwbclient-devel-4.13.3-5.el8_4.x86_64.rpm fb5ab754b5892ca8d9d06b270d72c649f3569319e17348d50916ebe7358e0b2a samba-devel-4.13.3-5.el8_4.i686.rpm 4610b9180c755212ecbcd3c44c58e2370dddbf93bf7806419d3da8e1121056f8 samba-devel-4.13.3-5.el8_4.x86_64.rpm a69e6f14ef0762d8162816949ae6e425f03aec84cb9340ea3e4a2cb076d63242 ALBA-2021:4055 Copyright 2021 AlmaLinux OS 0 2 None

An update for nfs-utils is now available for AlmaLinux

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Bug Fix(es) and Enhancement(s): * RFE: Prevent $HOME modification for rpc.gssd with conditional flag (BZ#1995593) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-41.el8_4.3.i686.rpm 324c6c155cf12e4db462d7c97d0f85f854af955947553ddd6fb91cf71b0089b5 libnfsidmap-devel-2.3.3-41.el8_4.3.x86_64.rpm 1cdf960f0c749fb98bc9fd9063c694b896a0401ad3abba39ff080ffad1f2b9d0 ALBA-2021:4052 Copyright 2021 AlmaLinux OS 0 2 None

An update for bluez is now available for AlmaLinux

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. Bug Fix(es) and Enhancement(s): * [Dell 8.4 BUG] Bluetooth keyboard paired and connected but does not work on firt pair. (BZ#1972918) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bluez-libs-devel-5.52-5.el8_4.alma.i686.rpm 4e063b112a40251e5432065390dd66a669f66b8c6d2b70eac440f80db9f2ac2f bluez-libs-devel-5.52-5.el8_4.alma.x86_64.rpm 279f127da4b16ad7809ece37dc218a5852ac97c1268fec487371e67f8e983b77 ALBA-2021:4099 Copyright 2021 AlmaLinux OS 0 2 None

An update for openscap is now available for AlmaLinux

The OpenSCAP suite enables integration of the Security Content Automation Protocol (SCAP) line of standards. The openscap packages provide the OpenSCAP library and the oscap utility that provides various SCAP capabilities. Bug Fix(es) and Enhancement(s): * Error when scanning DISA-STIG OpenSCAP profile on AlmaLinux 8.2, SSG 0.1.50 or 0.1.48 (BZ#1998045) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openscap-engine-sce-devel-1.3.4-6.el8_4.alma.i686.rpm f23453b671a7ccb08f9ab33891a5f9b5cbbb23dd29a3392b065fcac4de627bbf openscap-engine-sce-devel-1.3.4-6.el8_4.alma.x86_64.rpm 3a0c1f0b7e663b1bd1ebb819eea24bc3e28aeb8a7ff4d2375f3b445b44dda1b6 ALSA-2021:4056 Copyright 2021 AlmaLinux OS 0 8 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385) * kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c (CVE-2021-0512) * kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE) (CVE-2021-3656) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [HPE 8.3 bug] No EDAC MC0 message with one-DIMM two-processor configuration under AlmaLinux8.3 (BZ#1982182) * mlx: devlink port function shows all zero hw_addr (BZ#1986837) * net/sched: act_mirred: allow saving the last chain processed on xmit path (BZ#1992230) * AlmaLinux8.3 - System hang and / or r/o fs during SVC/v5k/v7k maintenance with ibmvfc (BZ#1993892) * AlmaLinux8.1 Snapshot3 - PVT:940:virt:4TB:LPM operation failed by returning HSCLA2CF, HSCL365C SRC's - Linux partition suspend timeout (-> documentation/Linux Alert through LTC bug 182549) (BZ#1993952) * AlmaLinux8.4 - benchTableRepDMLAsyncBarrier regresses by 34% on AlmaLinux8.4 on POWER9 compared to AlmaLinux8.2 (performance) (BZ#1997431) * [panic] call trace: ice_probe+0x238/0x10f0 [ice] (BZ#1997539) * [ice, PTP] ice: fix GPIO 1PPS signal (BZ#1997572) * Fix locality handling in the tpm_tis driver (BZ#1998219) * [ice, PTP]: fix Tx queue iteration for Tx timestamp enablement (BZ#2000128) * PCI passthrough with NVidia GPU "Invalid device 0003:01:00.0 iommu_group file /sys/bus/pci/devices/0003:01:00.0/iommu_group is not a symlink" (BZ#2000602) * [DELL 8.4 BUG] - System Hangs at Dell Logo When Boot to OS(e1000e with wrong GbE checksum) (BZ#2002335) * AlmaLinux8.4 - kernel: Fix hanging ioctl caused by wrong msg counter (BZ#2002635) * kernel: get_timespec64 does not ignore padding in compat syscalls (BZ#2003569) * [mlx5] eth0: hw csum failure (BZ#2005980) * xlog_grant_head_wait() does not return and system hangs (BZ#2007413) * panic while breaking a lease/delegation after user mode helper invocation (BZ#2010331) * Lockd invalid cast to nlm_lockowner (BZ#2010820) * [xfstests generic/388] XFS: Assertion failed: 0, file: fs/xfs/xfs_mount.c, line: 1218 (BZ#2011919) Enhancement(s): * [Intel 8.5 FEAT] ice: Enable PTP Support (BZ#1998220) * [Intel 8.5 FEAT] ice: Enable GPIO/SDP Support (BZ#1998221) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.25.1.el8_4.x86_64.rpm cad85175982e1e340039c386b87941471edd1dbc0a5f0caaa58b8c8440b918bf True ALSA-2021:3893 Copyright 2021 AlmaLinux OS 0 4 Important

An update for java-1.8.0-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967) (CVE-2021-35565) * OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689) (CVE-2021-35567) * OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210) (CVE-2021-35550) * OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167) (CVE-2021-35556) * OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) (CVE-2021-35559) * OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561) * OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137) (CVE-2021-35564) * OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) (CVE-2021-35578) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735) (CVE-2021-35586) * OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071) (CVE-2021-35588) * OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618) (CVE-2021-35603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Previously, OpenJDK's FIPS mode would be enabled if it detected that the system crypto policy was set to FIPS. This meant that containers running on a FIPS mode kernel would not enable FIPS mode without the crypto policy being changed. With this update, OpenJDK queries the NSS library as to whether FIPS mode is active or not. (RHBZ#2014201) * The use of the NSS FIPS mode by OpenJDK requires the JDK to login to the NSS software token. Previously, this happened indirectly as part of some crypto operations, but not others. With this update, the JDK logs in to the token on initialisation. (RHBZ#2014204) * While in FIPS mode, the NSS Software Token does not allow the import of private or secret plain keys. This caused the OpenJDK keytool application to fail when used with OpenJDK in FIPS mode. With this update, OpenJDK will now import such keys into the NSS database. This behaviour may be disabled using -Dcom.AlmaLinux.fips.plainKeySupport=false. (RHBZ#2014193) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 9906ccbed5e14ec48ae51bbe3c55442d569405ea8cec033bf678f76dbac0f397 java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 62242a0db0023586e4ee929356f4436ce618e6f3a7dc1ff52cb5928119966220 java-1.8.0-openjdk-demo-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 463198c66f058d2e00dcf509f3b70d758bdce9674d7d58bbaea6cb28da9df826 java-1.8.0-openjdk-demo-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 64a08e4f8826199ffc49916b9c064e7cffab5460190062563c404bc0ab3ec6f4 java-1.8.0-openjdk-devel-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm e10f3a4c8ecd4be3161f843df458c722b6848cc5d8707303336c41ae0c46b79c java-1.8.0-openjdk-devel-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm c7b796c5705e75e8bd3d5dcdd244b501b2a7974fcc8cbd6895aa1492cbd4f315 java-1.8.0-openjdk-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 8a9393053c0f068c83fb3396761d1adf5a41ce08d20f898c4c76bf933967f391 java-1.8.0-openjdk-headless-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 3c9cc73490c96a8e37cc86c8231c5943ff38f5c90d86a56253dc7ed27a195e4b java-1.8.0-openjdk-headless-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 2e0c1a253e45e65c32a9e206b57eac84761e2b492839c8dcc6cc94ef1fdda736 java-1.8.0-openjdk-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm 1499058f94c7d5461aeb7777a00a3551583b6070ffa37d680961c5efd12d6c11 java-1.8.0-openjdk-src-fastdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm dcd5af5ec5756779e3ea1196927b9366a747ee6da4f5502738999e3ad1605140 java-1.8.0-openjdk-src-slowdebug-1.8.0.312.b07-1.el8_4.x86_64.rpm c939aa78a376c911cb2f0d2e21ce13a2cf286cfad4becab7e9ff1430ff6a385c ALSA-2021:3891 Copyright 2021 AlmaLinux OS 0 3 Important

An update for java-11-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967) (CVE-2021-35565) * OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689) (CVE-2021-35567) * OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210) (CVE-2021-35550) * OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167) (CVE-2021-35556) * OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) (CVE-2021-35559) * OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561) * OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137) (CVE-2021-35564) * OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) (CVE-2021-35578) * OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735) (CVE-2021-35586) * OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618) (CVE-2021-35603) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 34880f022af0f9257c34c8ab4e1297d999f01d5af923265eac65513d2455e64f java-11-openjdk-demo-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm a212cbb9da67c31a4f45b52dd602cd548ec1422d904c8f1024db53cb5a648d9e java-11-openjdk-devel-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 62715b04be4e36d809c13578eff2eda438f590e4937b3ee2617468eb762c611e java-11-openjdk-devel-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 01bf89e4a1c7bc2269e59329dc79e551e4b22296713be19fc6e82a03631029b3 java-11-openjdk-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 6573ad8e44bd9ee4f8a3b0c17994a50a4f503b32dd5f0d891d230d1b73889475 java-11-openjdk-headless-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 889b4e40a71e14c2fde50479637ae55119ce901f910fc60c2d29e71bfc6d549b java-11-openjdk-headless-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 5702469c6bf5ea68f1921c41f7da0708676b4cef60640bf329ad3396b4f04f71 java-11-openjdk-jmods-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm a9e365261e6e877e4f2e78f7a73f62affb8cd3ce2a3d99433f34361c70addcab java-11-openjdk-jmods-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm d6ca27d694a5a127b02e76f6c6a69ade1556cfd43bc1cfe98f36bc9e04edd072 java-11-openjdk-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm f11d3d07a8d3c7362ae66d62997cce75e3afde9ec6a47a9763cf40836124a188 java-11-openjdk-src-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm c7c9dd31f35bdc05961e4e86138a33f5314ce7e8db1fe9a5f15f3872d8eac221 java-11-openjdk-src-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm cae1b45a7883bed1fcdb2e55dcceb5616baf288a58c61bbeb4e33e3f894a746e java-11-openjdk-static-libs-fastdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 3d70b8ee019a4d9c7b72c54e9cc400d2be7c30cb14961d3df9c524104ac76be2 java-11-openjdk-static-libs-slowdebug-11.0.13.0.8-1.el8_4.x86_64.rpm 9a6b5ee68105e741a3dc4b65879ae95d3ae5455dc6e0179b9e80895139e21351 ALBA-2021:3594 Copyright 2021 AlmaLinux OS 0 3 None

An update for libdb is now available for AlmaLinux

The libdb packages provide the Berkeley Database, an embedded database supporting both traditional and client/server applications. Bug Fix(es) and Enhancement(s): * [FJ8.4 Bug]: [REG]The rpm command hangs and the CPU usage reaches 100% (BZ#2001972) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdb-cxx-5.3.28-42.el8_4.i686.rpm 9b89a088148f354773271d561f3d6c6b6b87e0d414855780c33e9a336bbf8ad6 libdb-cxx-5.3.28-42.el8_4.x86_64.rpm 24b21e73677677f74f19a63e048a1d7e85dce4bafba9c56bcbfc5dcc23cd7c68 libdb-cxx-devel-5.3.28-42.el8_4.i686.rpm 1e5b431df3a557c7ed178de40d5b659e08190309ccc5cc477dde0db275614405 libdb-cxx-devel-5.3.28-42.el8_4.x86_64.rpm 9ff6b3ae4a7da5d4d3dc5ffc77f3d9609917b83b7eda37dfcb67d09ad4e16dfb libdb-devel-doc-5.3.28-42.el8_4.noarch.rpm 476055f0467be8dc9f551c62b53bb3308fb2569835ba55c3f7ef08642efba2c2 libdb-sql-5.3.28-42.el8_4.i686.rpm cbe2322d13c349502eb927cf11b79b0cfa7d6441f59132ee2781537e2c8b6f21 libdb-sql-5.3.28-42.el8_4.x86_64.rpm 0ddbe096e86dc00616d367f50d176934883600a306417743788ff78c3d3305fd libdb-sql-devel-5.3.28-42.el8_4.i686.rpm 451d320341b5874f244c7705ef2dbb3c48feb21fb3a35398b0bf644a35ccea25 libdb-sql-devel-5.3.28-42.el8_4.x86_64.rpm 72da94f931275610a398c30e0ee59b2ecf7217f5088b9807f9266c0802a8531a ALBA-2021:3596 Copyright 2021 AlmaLinux OS 0 2 None

An update for poppler is now available for AlmaLinux

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Bug Fix(es) and Enhancement(s): * Unable to open certain PDF documents (BZ#2002638) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default poppler-cpp-20.11.0-2.el8_4.1.i686.rpm e67e409a83a2aaa61018fb3abf8eabcf842031f00348361ce3bb7bee003484eb poppler-cpp-20.11.0-2.el8_4.1.x86_64.rpm d4ad48d94d69a92b6cd079fac59f33570554ff424bdf5193ff505490566efe0e poppler-cpp-devel-20.11.0-2.el8_4.1.i686.rpm 9d5b126a252d0a2a4469cbf5d864553e2a639d1d10475cd64edffff7df039e89 poppler-cpp-devel-20.11.0-2.el8_4.1.x86_64.rpm 719e87725324e666f9afdeb20ec474c6d5a9d0d7881f2a21ab2bf4dfbd0008e9 poppler-devel-20.11.0-2.el8_4.1.i686.rpm 97059761f84c5c2416ebaf73bc19a3ebcd087b9dd577c6c134a911de46bc35e5 poppler-devel-20.11.0-2.el8_4.1.x86_64.rpm d6676f61864a04a247760c41c6999bcde426fb5701d43027b19c174ff1315b1e poppler-glib-devel-20.11.0-2.el8_4.1.i686.rpm 1bc543183692560c92680aa5ced6bc9868c4c79b5bf5ea18d42033ffe731097b poppler-glib-devel-20.11.0-2.el8_4.1.x86_64.rpm 54feb55d9ac1b0df23333fccc40775dd79a0820859cd6ebb18cf6e8081d43cf4 poppler-qt5-20.11.0-2.el8_4.1.i686.rpm 9cbe1e58c70b79636ccb98dcae0f88fb6e5db67bae31ac7cba2c61f40f819972 poppler-qt5-20.11.0-2.el8_4.1.x86_64.rpm 9d23382f39e46dbc69f75328845d4450d7f92745a393e6387a49b65f1849cd6a poppler-qt5-devel-20.11.0-2.el8_4.1.i686.rpm 7c7c4fc9ae124d68814d10bd98349f956ee1bc5c51e11c037947c2ab8b9ef841 poppler-qt5-devel-20.11.0-2.el8_4.1.x86_64.rpm 4386a4a1d43d803cf3cc4bc8d3bb9e891076bd9df8a2af1d251591dbe293d3b1 ALBA-2021:3587 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Bug Fix(es) and Enhancement(s): * AlmaLinux8.4 - pkcstok_migrate leaves options with multiple strings in opencryptoki.conf file options without double-quotes (openCryptoki) (BZ#1995919) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.15.1-7.el8_4.i686.rpm 49fc9ccd9d3e58241fd994ded9145e4fc8a0170eb626d89d8a49305fb2923d73 opencryptoki-devel-3.15.1-7.el8_4.x86_64.rpm c4105a3d2a13e65c659a7c13f55cf6e1b8f4b9c8cb5fb321b6aa694f1412d9ac ALBA-2021:1694 Copyright 2021 AlmaLinux OS 0 2 None

An update for util-linux is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmount-devel-2.32.1-27.el8.alma.i686.rpm d460726b64c74a27d4dd1b25911064fd7c9a3e26458fe76bd8aa311a56cd5144 libmount-devel-2.32.1-27.el8.alma.x86_64.rpm 9b139b868e1f6568686feeaf4bce72021aced4e61395f65cbb808c8dfae1b190 libmount-devel-2.32.1-27.el8.i686.rpm 9a0362ddb8af33a167dac31caf3d452ef845154fb1d3cdad02801a743ada85e9 libmount-devel-2.32.1-27.el8.x86_64.rpm fcb017462966b6fb50f9c34b117148694846d19eb952c5d7f00464c538c9ef5b ALSA-2021:3548 Copyright 2021 AlmaLinux OS 0 6 Moderate

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: SVM nested virtualization issue in KVM (AVIC support) (CVE-2021-3653) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * AlmaLinux8.4 Nightly[0308] - HST:STC950:Fleetwood: LPAR crashed during LPM: BUG at lib/locks.c:34! (using ibmvfc) (BZ#1969792) * AlmaLinux8.2 - s390/vtime: fix increased steal time accounting (BZ#1988386) * [FJ8.4 Bug]: Installation of AlmaLinux8.4 hang up on a Tatlow platform while loading intel_lpss_pci module. (BZ#1989560) * kernel panic in drm_fb_helper_dirty_work() caused by a race condition qxl driver (BZ#1992839) * [AlmaLinux8.4] TIOCGSERIAL ioctl fails on serial device (BZ#1993872) * AlmaLinux8.4 Nightly[0208] - kernel panic when executing test case for persistent device configuration (using DASD) (BZ#1995206) * Killing ceph daemon leaving an unhealthy ocs/ocp cluster (worker node/s NotReady) (BZ#1995862) * ceph: potential data corruption in cephfs write_begin codepath (BZ#1996680) * libceph: allow addrvecs with a single NONE/blank address (BZ#1996682) * [iavf] traffic stops after host sets vf trust on (BZ#1997536) * [ice][iavf] hit some call trace and system panic when create-remove-vfs in loop (BZ#1997538) * Missing backport of IMA boot aggregate calculation in rhel 8.4 kernel (BZ#1997766) * XArray tests broken for single processor (BZ#1997997) * [AlmaLinux-8.4] mlock() end up returning -EINVAL instead of -ENOMEM in rewriting the upper address bits. (BZ#1997998) * Kernel panic at n_tty_set_termios+0x30 (BZ#1997999) * [ice]BUG: scheduling while atomic: ifenslave/270215/0x00000200 (BZ#2000129) * [ice]port lost connectivity after removing from bonding (BZ#2000130) Enhancement(s): * [Mellanox 8.5 FEAT] mlx5: drivers update upto Linux v5.12 (BZ#1983681) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.19.1.el8_4.x86_64.rpm 9200e685491a9341dd5064e04d01e1ed05173b01ecb29f0d7dee5c8d3155e6df True ALSA-2021:3447 Copyright 2021 AlmaLinux OS 0 6 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: powerpc: KVM guest OS users can cause host OS memory corruption (CVE-2021-37576) * kernel: slab-out-of-bounds access in xdr_set_page_base() in net/sunrpc/xdr.c (CVE-2021-38201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Update Broadcom Emulex lpfc driver for AlmaLinux8.5 with bug fixes (BZ#1948608) * cyclictest shows >50us latency when guest enters idle (RT guest with 18 RT vCPUs) (BZ#1981336) * xfrm: backports from upstream (BZ#1981840) * A task is stuck waiting for the completion of the vmci_resouce releasing upon the balloon reset. (BZ#1982042) * [mlx5] backport driver bits of net: zero-initialize tc skb extension on allocation (BZ#1982220) * Kernel cannot kill a process doing compaction for hugepage allocation (BZ#1984085) * AlmaLinux8.4 Nightly[0108] - [P10] [Regression] Kdump failed on AlmaLinux8.4 on SAN disk via flavafish adapter (qla2xxx/HPT/Radix) (BZ#1986156) * [AlmaLinux8.5] scheduler updates and fixes (BZ#1987296) * AlmaLinux 8.3 using FCOE via a FastLinQ QL45000 card will not manually scan in LUN from Target_id's over 8 (BZ#1989097) * fixes for oopses in security mitigation runtime code patching (BZ#1989174) * act mirred doesn't scrub packets when sending them to ingress (BZ#1992226) * HPE: Cannot install 8.4 using the DVD presented to the iLO (BZ#1993894) * NFS client hangs on share listing when server side readdir verifiers are implemented (BZ#1993895) * SNO: The load is extremely high (~870) when pao is added and a profile is applied. (BZ#1994879) * timeout value of conntrack entry with TCP ESTABLISHED status is too short (BZ#1995554) * Increase the default value for flowtable offload timeouts (BZ#1995555) * ice/iavf driver stop responding (BZ#1997534) * [FJ8.4 Bug]: [REG] Some files in /proc/sys/user show wrong data (BZ#1998002) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.17.1.el8_4.x86_64.rpm e5620fb99f019786d19f7fe778fd7e0aa98ae98df5acb0ee6b529e754a66d372 True ALSA-2021:3152 Copyright 2021 AlmaLinux OS 0 3 Important

An update for exiv2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fix(es): * exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default exiv2-devel-0.27.3-3.el8_4.x86_64.rpm 87d2931076533b41afc31151df18caa4cf8664dae701fa0119231af92ee82eb6 exiv2-doc-0.27.3-3.el8_4.noarch.rpm 16aba0a97d57c60bc3109fdcb9497e42372be57667f6ad060e146b9a69f1d2c7 ALSA-2021:3151 Copyright 2021 AlmaLinux OS 0 2 Important

An update for sssd is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Security Fix(es): * sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.4.0-9.el8_4.2.i686.rpm 30dfbed9baef7ca93589b451f7058e09cd5c5941d6a3b91e90cb792e06d0a8e2 libsss_nss_idmap-devel-2.4.0-9.el8_4.2.x86_64.rpm 96d694d483d5217602678dcdedf3aec5d8f646219ae0c8e7c8dec33a71b5c35e ALSA-2021:3075 Copyright 2021 AlmaLinux OS 0 3 Low

An update for libuv is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libuv is a multi-platform support library with a focus on asynchronous I/O. Security Fix(es): * libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes (CVE-2021-22918) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libuv-devel-1.41.1-1.el8_4.i686.rpm ecb67a158cdcabae2242eef6d2d94099e52e53d98d4701f5598240d48221b5ce libuv-devel-1.41.1-1.el8_4.x86_64.rpm 9ab7a1a5e16b9bd569d638156f03c8983d47535cffb27534b8c2b7aadc770284 ALEA-2021:3072 Copyright 2021 AlmaLinux OS 0 2 None

An update for vulkan is now available for AlmaLinux

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fix(es) and Enhancement(s): * Rebase vulkan-loader in 8.5 (BZ#1952989) * Rebase vulkan-headers in 8.5 (BZ#1952990) * Rebase spirv-headers in 8.5 (BZ#1952991) * Rebase spirv-tools in 8.5 (BZ#1952992) * Rebase glslang in 8.5 (BZ#1952993) * Rebase vulkan-tools in 8.5 (BZ#1952994) * Rebase vulkan-validation-layers in 8.5 (BZ#1952995) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2021.2-1.20210619.git5dd2f76.el8_4.i686.rpm 8007aab7df0db01a8b588a843fa8eefc99b0332b1f4854a333dddcd30467b70c spirv-tools-devel-2021.2-1.20210619.git5dd2f76.el8_4.x86_64.rpm b72959dc6847c6df08a4a62cc259a7ae5820757766646ce96e9a8b4adf294315 spirv-tools-libs-2021.2-1.20210619.git5dd2f76.el8_4.i686.rpm 285c38ad02c29a89efe53eac4f5659fd05cb1f00024d8dce505cd41d4eb960f0 ALEA-2021:3065 Copyright 2021 AlmaLinux OS 0 3 None

An update for libwacom is now available for AlmaLinux

The libwacom packages contain a library that provides access to a tablet model database. The libwacom packages expose the contents of this database to applications, allowing for tablet-specific user interfaces. The libwacom packages allow the GNOME tools to automatically configure screen mappings and calibrations, and provide device-specific configurations. Bug Fix(es) and Enhancement(s): * Lenovo: Upstream libwacom fix for X1Y6 (AlmaLinux) (BZ#1965300) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwacom-devel-1.6-2.1.el8_4.i686.rpm 93f20e05d646d552a2ab8cc09d49c2145fe60bba73678b5f45a02b47ca381554 libwacom-devel-1.6-2.1.el8_4.x86_64.rpm 51a1d87a643a83cbc5601b2919ec3bd7816492fa39821e9baed139260ef87f5d ALBA-2021:3056 Copyright 2021 AlmaLinux OS 0 2 None

An update for nfs-utils is now available for AlmaLinux

The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Bug Fix(es) and Enhancement(s): * AlmaLinux 8.4 fails to obey sloppy mount option. (BZ#1982340) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-41.el8_4.2.i686.rpm dc42e4f185ba022c74e2da09bd2d488d0ed0a777630daef4bc4af40ab3d9027d libnfsidmap-devel-2.3.3-41.el8_4.2.x86_64.rpm ed7d0755624f83c7813f6d0b38febd9bd834d2ff40ca27389853dcf59270cc46 ALBA-2021:3049 Copyright 2021 AlmaLinux OS 0 3 None

An update for pcsc-lite is now available for AlmaLinux

PC/SC Lite provides a Windows SCard compatible interface for communicating with smart cards, smart card readers, and other security tokens. Bug Fixes: * Increase global reader array size to 48 to address issue with RHCS secure channel creation (BZ#1972569) * Increase global reader array size to 48 to address issue with RHCS secure channel creation (pcsc-lite-ccid) (BZ#1973405) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pcsc-lite-devel-1.8.23-4.1.el8_4.i686.rpm 0be495deb451fee7e52a1ff6a135c2fe4e100ac94707b2e53ca1f322590c2d11 pcsc-lite-devel-1.8.23-4.1.el8_4.x86_64.rpm 66a7f38c3427acb68a0b13e6036d0e11e57e1be166d610b3d3d23719dceaba13 ALBA-2021:3050 Copyright 2021 AlmaLinux OS 0 2 None

An update for samba is now available for AlmaLinux

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fix(es) and Enhancement(s): * /sbin/ldconfig: /lib64/libsmbldap.so.2 is not a symbolic link (BZ#1964314) * smbd tries to delete files with wrong permissions (uses guest instead of user from force user) (BZ#1964398) * Memory leak in RPC server could allocate a lot of memory for print servers (BZ#1969831) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.13.3-4.el8_4.i686.rpm bdbe7c42e9945f39dd6d6467e3a6aaf149575d1330259407fff2dbb9ae8b7455 libsmbclient-devel-4.13.3-4.el8_4.x86_64.rpm f552e78d5572619d3945e5395dcffe75fb952e3df43e6185dd40caa3d3fb8a3a libwbclient-devel-4.13.3-4.el8_4.i686.rpm 95e9242b756d5405e3999c4850001df67d7451ea5693ea27ff55624e2056fd37 libwbclient-devel-4.13.3-4.el8_4.x86_64.rpm b834deec16215ebc2c42540dd4043712f33818af6823b20ca184c9f3eb50d275 samba-devel-4.13.3-4.el8_4.i686.rpm 440cc140694dea882e7f175e45ced4aa4ed5b2dca042e694fa701dff290c2099 samba-devel-4.13.3-4.el8_4.x86_64.rpm effd7e4a731f3c43de22432408ed0b4ac00e8a151061f8811173dd1713c7370e ALBA-2021:3054 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities. Bug Fix(es) and Enhancement(s): * AlmaLinux8.5 - openCryptoki: Soft token does not check if an EC key is valid (BZ#1979173) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.15.1-6.el8_4.i686.rpm b889f92b305947eb79200fc6897b2da99150d34fa41cdd0cd0ffbe74a7a43315 opencryptoki-devel-3.15.1-6.el8_4.x86_64.rpm 9aa92796b655c14b4ea671e62ab52ca0f9d590bfbdff1cb93a6b1a86a0ba4192 ALSA-2021:3058 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for glib2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform (CVE-2021-27218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glib2-doc-2.56.4-10.el8_4.1.noarch.rpm 9ecc69a1e2f56342473db7dcec30bd55b9fe0820f9e6fdc697377e21ab1cd855 glib2-static-2.56.4-10.el8_4.1.i686.rpm d6ea255e2e1fd470e4e7ff026ee637146d819283efbd6deea5e575bdfeb564de glib2-static-2.56.4-10.el8_4.1.x86_64.rpm 76f0e02d5f96effac1d054e06c59b6601738ae8121878b346121e63d2491dc6a ALBA-2021:3055 Copyright 2021 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * Incorrect set hostname to localhost using DNS reverse lookup of ipv6 address (BZ#1970398) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.30.0-10.el8_4.i686.rpm c1bbe2162c4d653dc47823b488c97245672b911b45208f2a7f2e1b4ad4b7ad3b NetworkManager-libnm-devel-1.30.0-10.el8_4.x86_64.rpm d0bb1b5350252d40789fbd14dd5c725a895cf37f6467e7b8e3d911734cc70d6e ALSA-2021:3057 Copyright 2021 AlmaLinux OS 0 3 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: race condition in net/can/bcm.c leads to local privilege escalation (CVE-2021-3609) * kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543) * kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Urgent: Missing dptf_power.ko module in AlmaLinux8 (BZ#1968381) * [mlx5] kdump over NFS fails: mlx5 driver gives error "Stop room 95 is bigger than the SQ size 64" (BZ#1969909) * BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 in bluetooth hci_error_reset on intel-tigerlake-h01 (BZ#1972564) * Update CIFS to kernel 5.10 (BZ#1973637) * Backport "tick/nohz: Conditionally restart tick on idle exit" to AlmaLinux 8.5 (BZ#1978710) * Significant performance drop starting on kernel-4.18.0-277 visible on mmap benchmark (BZ#1980314) * Inaccessible NFS server overloads clients (native_queued_spin_lock_slowpath connotation?) (BZ#1980613) * [AlmaLinux8.4 BUG],RialtoMLK, I915 graphic driver failed to boot with one new 120HZ panel (BZ#1981250) * act_ct: subject to DNAT tuple collision (BZ#1982494) Enhancement(s): * [Lenovo 8.5 FEAT] drivers/nvme - Update to the latest upstream (BZ#1965415) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.12.1.el8_4.x86_64.rpm 3d65491320f2614efd711a1d5f0b53461332d1740b807b83c6f7d472e99f945c True ALSA-2020:1665 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. The following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604) Security Fix(es): * qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872) * qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869) * qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-qt5-devel-5.13.1-1.el8.i686.rpm da4c02199f30a3274d82c3eb23e5bd7d1f6bab3ea2e4f635e3f9bd2ae8e835d8 python3-qt5-devel-5.13.1-1.el8.x86_64.rpm 7dcaa5bddac6b299a85941affe84ef4663ac676827e15184fede5ee73bd30a6a qt5-devel-5.12.5-3.el8.noarch.rpm 45d7c4a4042d9effa1f08252e5a9247037b39d8cd0be3c0b758248496a0c2376 qt5-qtdeclarative-static-5.12.5-1.el8.i686.rpm e1c03102339165df9eb0ccc9a16290eb57f42d1277d64855561352d1f1962588 qt5-qtdeclarative-static-5.12.5-1.el8.x86_64.rpm b3eb4a0cf97bd6befb774bd4fe7d5f71afa420c548b015f54aad24fd757adb9d qt5-qtquickcontrols2-devel-5.12.5-1.el8.i686.rpm 030312768fd033fc1ebe957f7bc0819c226cff176595e2f881d447f15dd0fe82 qt5-qtquickcontrols2-devel-5.12.5-1.el8.x86_64.rpm 381a23fe812e759a1993eb84b8c3f52831e25525500531943e1c44258715fe76 qt5-qtwayland-devel-5.12.5-1.el8.i686.rpm 3ee3fb99d2ad06e1d0d31ea7bf2d442252957822641873efc7a3cee834d9f865 qt5-qtwayland-devel-5.12.5-1.el8.x86_64.rpm 087d0bfd1de3124140ecb95cd6b8774b88139322d799a7f0936f2d7a89e732ca ALSA-2019:3708 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for the mariadb:10.3 module is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358) Security Fix(es): * mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510) * mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537) * mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627) * mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628) * mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737) * mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739) * mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740) * mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758) * mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_mariadb-devel Judy-devel-1.0.5-18.module_el8.3.0+2028+5e3224e9.i686.rpm a5d4175218d19bd0a7d766a871e269563144014b89cf744902b3a737cf6e2a91 Judy-devel-1.0.5-18.module_el8.3.0+2028+5e3224e9.x86_64.rpm fa6951b6cf8e47a6ab6d2489273fc502e21622ffbe15a4088d68d90c914529fd Judy-1.0.5-18.module_el8.3.0+2028+5e3224e9.i686.rpm 679dc41d7df4dcbac8317331894e44fd329abd01f2b17411a11415e9b900eb17 ALEA-2019:3557 Copyright 2021 AlmaLinux OS 0 2 None

An update for libtalloc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcmocka-1.1.5-1.el8.i686.rpm 5ee5a358650befbccf026f5b66fb0b1a269103f89598066795131c9ba7600144 libcmocka-1.1.5-1.el8.x86_64.rpm 51ac9098e1e5c5f7e1e6100cf3227fcc5e0673892f114871c64b3de0e194f917 libcmocka-devel-1.1.5-1.el8.i686.rpm f83779a880fd1a42205588b84914af8f33f5d93c5aaa61e9e7aa45ba3a439d77 libcmocka-devel-1.1.5-1.el8.x86_64.rpm d7508c39a8679fd007bb32e084192fe1b7d1832d10be0163bf6f5099d676d6bf socket_wrapper-1.2.3-1.el8.i686.rpm 66114d79be9a8dd196dcf99147d5a51381d4af175d0705a88b773a588cc11b5e socket_wrapper-1.2.3-1.el8.x86_64.rpm 06d62473e9bab551798bab66b403ec925fdcfd799d2b52bbf98f6b75601b0a5b uid_wrapper-1.2.4-4.el8.i686.rpm 0043a1869cd6d2f7620dd6202e6fbc8ef3910b489d3de26406197ce9094266a9 uid_wrapper-1.2.4-4.el8.x86_64.rpm 36d8d0da84c310f1dcc804367a044e77a1b921278a8e1f28442a3b1a63a4ab6a ALEA-2020:1587 Copyright 2021 AlmaLinux OS 0 3 None

An update for the virt:rhel module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALBA-2020:1622 Copyright 2021 AlmaLinux OS 0 2 None

An update for python-greenlet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-greenlet-0.4.13-4.el8.i686.rpm 38b80ae01834f3d2b68028d55e09a849e596a1b65c1a4bce3c98b8df59d4e457 python3-greenlet-devel-0.4.13-4.el8.i686.rpm e395a519e181aec6621b58a90ee562501f535bac3798dedf061e08985b90c8e0 python3-greenlet-devel-0.4.13-4.el8.x86_64.rpm b139577567b4811a325edea66ceb64faa6f177c9e328df7e26b9fde17a925669 ALEA-2020:4521 Copyright 2021 AlmaLinux OS 0 2 None

An update for libmodulemd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmodulemd-devel-2.9.4-2.el8.i686.rpm db25ba0e8b7f209901cf3c95059a29673f871116abaf6a59684d94440d71d268 libmodulemd-devel-2.9.4-2.el8.x86_64.rpm 4c356bdd24ab1f6117d8c5b483e21cca1d84d15ba9a58580630b47829a295c55 ALBA-2019:3593 Copyright 2021 AlmaLinux OS 0 2 None

An update for ipset is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ipset-devel-7.1-1.el8.i686.rpm fe3564cdcc797fa47fba1dad98257e2519241ffb7ed0f16cf8e6023e5e57aa88 ipset-devel-7.1-1.el8.x86_64.rpm 1e2febcb226b2f78245549c6a7777c24c69ea4b122c47980971ffd927dec6b7f ALBA-2019:4274 Copyright 2021 AlmaLinux OS 0 2 None

An update for the virt:rhel module is now available for AlmaLinux

Bug Fix(es): * AlmaLinux8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm) (BZ#1764829) * [HPE 8.1 BUG] Icelake: KVM missing .pconfig (BZ#1775133) * Failed to create a VM via virt-manager or web console in AlmaLinux8.1 snapshot-2.1 (BZ#1775134) * [Intel 8.2 Bug] Icelake-Server host, mode=host-model: "can't apply global Icelake-Server-x86_64-cpu.pconfig=off: Property '.pconfig' not found" (BZ#1775137) codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALSA-2019:3705 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libjpeg-turbo is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service (CVE-2018-14498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default turbojpeg-devel-1.5.3-10.el8.i686.rpm 0f22db58552b14a655a26d67b5677639f4d8e62196a7f23ff9c40c3b3fe944b1 turbojpeg-devel-1.5.3-10.el8.x86_64.rpm 1c749c55916afe09e6d814e1e9684b6449e279277badc76d2297293c5c635117 ALSA-2019:3706 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for lua is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lua-5.3.4-11.el8.i686.rpm ef36703181d1888648c0caa2f0d85ebdd5ee46846abb60278e09363f0db11f45 lua-devel-5.3.4-11.el8.i686.rpm 4110f28ef669e0144751bd58102b309594e1d5bf8c2ad199e4d80f59f2645438 lua-devel-5.3.4-11.el8.x86_64.rpm 9a9118c50f62c3137c573ef7dd6e3203b38b1039c902430a6f1042e0a1c113e5 ALEA-2020:4838 Copyright 2021 AlmaLinux OS 0 2 None

An update for dtc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dtc-1.6.0-1.el8.x86_64.rpm 861df4236b398d57811b6baa14dee3d4636f04446c6d2c7b7c81eebc9d956cc5 libfdt-1.6.0-1.el8.i686.rpm f68702f3b50a23e2dfcf7c64feb5a11b69f47a96200f10d0cca4eb0ea67eb8d9 libfdt-1.6.0-1.el8.x86_64.rpm c2a2b11a92d34c9192c8980c17c2c13fc7ac1d2b765845952e8e33de376bc6d0 libfdt-devel-1.6.0-1.el8.i686.rpm 98d8f9c2dbbc5d14d05e493611724c1cef75f14786a365873b40674c4121beb0 libfdt-devel-1.6.0-1.el8.x86_64.rpm 1be081f2bcd198a350efc1e9c13c037189f143211aad8fcfd8f82f546566aec7 ALBA-2019:3682 Copyright 2021 AlmaLinux OS 0 2 None

An update for gnu-efi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gnu-efi-3.0.8-4.el8.x86_64.rpm 2041451c445f44d99442b612e378818350b7742a5bc2f279d6b43e746973ab65 gnu-efi-devel-3.0.8-4.el8.i686.rpm e5989013532318c23b274c13ec9baddff1df7fc05e55522334683737333ec2da gnu-efi-devel-3.0.8-4.el8.x86_64.rpm 428c19241e6e6732644260bc581d634ab15fb3828337608ef8ec0047dbc9e561 ALBA-2020:1904 Copyright 2021 AlmaLinux OS 0 3 None

An update for texinfo is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texinfo-6.5-6.el8.x86_64.rpm d56b0a54df56b93f8686f9147d1005ff3767cb0b5c698fe0f2381f5a2efdbfc4 texinfo-tex-6.5-6.el8.x86_64.rpm 17543af646b348bf57b63f9bf19df90be0d5c3b7653eb0ccb5e9842324914976 ALEA-2019:3511 Copyright 2021 AlmaLinux OS 0 4 None

An update for libvarlink is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvarlink-devel-18-3.el8.i686.rpm 85bc61721c007f080b9afedf5b0879a4c6ec894eeea16178a4c6bd382c675c47 libvarlink-devel-18-3.el8.x86_64.rpm da1104525e71c0fca981727f54f9a8b64e3c2adee8aa62b69393d7afa0ddf86f ALBA-2020:4779 Copyright 2021 AlmaLinux OS 0 2 None

An update for ibus is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ibus-devel-1.5.19-12.el8.i686.rpm 54da9861f587a7a005efa423cf2c6dd2a006822463805e2d689cbfbc79688625 ibus-devel-1.5.19-12.el8.x86_64.rpm 85629241eadbc32b39664ea8d7f1dd05e04182c28fd836a83843911d7a23f7d9 ibus-devel-docs-1.5.19-12.el8.noarch.rpm 66a08a212d6951ae774b8c6567166bb3da1709c37ba3a0e64f4445a3cb4c25c3 ALBA-2020:4678 Copyright 2021 AlmaLinux OS 0 2 None

An update for tog-pegasus is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tog-pegasus-devel-2.14.1-46.el8.i686.rpm 8578b7ea83797747bf0237f34ab7c2cae43b24838167a8c1a17e7c89595188c6 tog-pegasus-devel-2.14.1-46.el8.x86_64.rpm d02d28a9a40d173b1b71900923134547ec7d9cf7475ef6a631d55dd6439ed1ec ALSA-2020:4634 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libtiff is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libtiff-tools-4.0.9-18.el8.x86_64.rpm 65341a61b45b46649c04c17032a629e81f69cae0ea9a5756661023acf9c2ac27 ALSA-2020:4059 Copyright 2021 AlmaLinux OS 0 4 Important

An update for the virt:rhel module is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364) * QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALBA-2020:4600 Copyright 2021 AlmaLinux OS 0 2 None

An update for snappy is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default snappy-devel-1.1.8-3.el8.i686.rpm f4cef69bd914c4e96f671a9bdb02d1a19a818e7df41ee40aa0ec151b6d4e4558 snappy-devel-1.1.8-3.el8.x86_64.rpm c27423c38ee92c0458bde3b85d7f0bf3aacdad2faaabe8d9be84ee88377f2595 ALBA-2019:3449 Copyright 2021 AlmaLinux OS 0 4 None

New gcc-toolset-9-dyninst packages are now available for AlmaLinux

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-9-dyninst packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documented in the GCC Toolset 9 chapter. For detailed changes in this release, see the AlmaLinux Release Notes. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-toolset-9-dyninst-devel-10.1.0-1.el8.i686.rpm f38a25c8fd6cf275cea435910a38788eaba74df5101404ddaf0a90816ccee55b gcc-toolset-9-dyninst-devel-10.1.0-1.el8.x86_64.rpm 117c33980dd22870bf477f5f3c2a86764fffea9837c6ea306b4688d2fb959446 gcc-toolset-9-dyninst-doc-10.1.0-1.el8.x86_64.rpm de7d7ec6b1481162129becb7aa1d20e27482d813cbb732a8159336099f168f5e gcc-toolset-9-dyninst-static-10.1.0-1.el8.i686.rpm a67244482fef776874e61a3176df1346a9200fb40e116c3c26267aef1b00fca9 gcc-toolset-9-dyninst-static-10.1.0-1.el8.x86_64.rpm dd6ac0f88abc4820d157a55907be36f61219485e2201e0ca9ef3ef33d17a4156 gcc-toolset-9-dyninst-testsuite-10.1.0-1.el8.x86_64.rpm 52aeb668c41410d32c0206d6360e278e0c55afcd9e692acd7ecd884bc29da3ad ALEA-2019:3367 Copyright 2021 AlmaLinux OS 0 2 None

An update for google-noto-cjk-fonts is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default google-noto-sans-cjk-jp-fonts-20190416-1.el8.noarch.rpm 37a294a727c0912434ebb0f2e7824b2471e5f2e8aefc88f1d10dacfa326849ac ALEA-2020:4731 Copyright 2021 AlmaLinux OS 0 2 None

An update for boost is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default boost-build-1.66.0-10.el8.noarch.rpm 84904dd56dc4c00b16df71a0b2f6ec303cd8cf5ee503fdd8500bc84a3c9c5d69 boost-doc-1.66.0-10.el8.noarch.rpm 4af7c433493c258cdbd928c255e5d0b4e51d581664ac8fb7747e4e153108428a boost-examples-1.66.0-10.el8.noarch.rpm 3a66fca0c712256ed97ec6f22f57c82267c95a6653a9d97f7d060339649f5fb6 boost-graph-mpich-1.66.0-10.el8.i686.rpm ec04d729ade185ce91a1f34c1aa8b7a00a89056e3a640d61a57c7b5a044b951b boost-graph-mpich-1.66.0-10.el8.x86_64.rpm d7c8847fc6a690ba971b9fcafb8edb8188a981d211a5d45a7a84cc92e0ea9fb6 boost-graph-openmpi-1.66.0-10.el8.i686.rpm 2401202735a84bec9ff9edf8c28ddd76f58f5529c8813f426f904b57c8c95c80 boost-graph-openmpi-1.66.0-10.el8.x86_64.rpm a3b35a21fc2478644bd8acd546a0ef6331ed4127e64f8fa06141f18bf005775d boost-jam-1.66.0-10.el8.x86_64.rpm 307ab661eed76361d88a9a66478160822375bb28877c863bccf476390f2e2f19 boost-mpich-1.66.0-10.el8.i686.rpm 1329553fcb61f568acd77ff62ddb92dcb01a644967049bb776096b16a920c729 boost-mpich-1.66.0-10.el8.x86_64.rpm d85fc71bed8cd8ae5c244c6852f60e9ced8675265ed7e7c97f382a09fb16b72e boost-mpich-devel-1.66.0-10.el8.i686.rpm fc6f4861efb8c26ff3dda441313397f53d26c436807366998cd763973e0bce3a boost-mpich-devel-1.66.0-10.el8.x86_64.rpm beece089626c1daaf4ba7975e36fe7825701b43a659a7c8cf00c37c3d09806ee boost-mpich-python3-1.66.0-10.el8.x86_64.rpm 6c431251ecb9315073745318c2e2809db872bab12cfe11afdf47c7a270ecd402 boost-numpy3-1.66.0-10.el8.i686.rpm 60267510bafd8d49a0668404176a14ae300d2052dea1d19b465b4c41ecf3ad57 boost-numpy3-1.66.0-10.el8.x86_64.rpm 9ee77bff50c511c4b1fddd9958cafee389f559770accfc0016a4653ad9a30b6d boost-openmpi-1.66.0-10.el8.i686.rpm 4d9ebe6f7885f06a3edea10a65dc08584d69bc9379ec3b1148bcb2f0c57a6a3d boost-openmpi-1.66.0-10.el8.x86_64.rpm 7a3e8053ecffcfb0f1d5e327eb0f4b37bd5f8088d118842a50c20c9ab81ab649 boost-openmpi-devel-1.66.0-10.el8.i686.rpm b7f340cb52b66a75fb6ec6053f951bff9d4c569747f81b43df05d8e22d07209c boost-openmpi-devel-1.66.0-10.el8.x86_64.rpm 83f3b1de9194ca0453e0adb9602fc501b3e130d7f3d694e6e719aa1eae8974a3 boost-openmpi-python3-1.66.0-10.el8.x86_64.rpm 3fc3d1d6f469be4fda6b9bc312f21159a52c34a635a9483c41739b8af33e78e4 boost-python3-1.66.0-10.el8.i686.rpm f418e8fb98424631b887982253bd825d1067538d5ac09bab80d7e92bbe3ade40 boost-python3-1.66.0-10.el8.x86_64.rpm d252755d1debe2dd2e3fb19074fce1ab647b53fda914af2eddac883fe3660b7d boost-python3-devel-1.66.0-10.el8.i686.rpm 1783c9b974840ad7876abf4fcd6b80b8ec82aaf214b7feb2e6e50fcee885000f boost-python3-devel-1.66.0-10.el8.x86_64.rpm 8dc76d7946589aefd1f954bce323f731a5d3e4e4ea715ebf398216dad0425185 boost-static-1.66.0-10.el8.i686.rpm ca06b3ef88927e7af947f081128d0ff4db2a3c1df48417a6621f1329ce3a2ecb boost-static-1.66.0-10.el8.x86_64.rpm 4f199abd34d8ded9fa180923972999a075539216c2115b332584bfb98d4c3c98 ALSA-2020:0279 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALSA-2020:2774 Copyright 2021 AlmaLinux OS 0 5 Important

An update for the virt:rhel module is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608) * QEMU: vnc: memory leakage upon disconnect (CVE-2019-20382) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALBA-2020:1633 Copyright 2021 AlmaLinux OS 0 2 None

An update for xorg X11 server and driver is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default xorg-x11-drv-libinput-devel-0.29.0-1.el8.i686.rpm bf53c84a6e7ba8c0eb30b8df291a869843a883ea5e05f3eb3331f8029fb1846b xorg-x11-drv-libinput-devel-0.29.0-1.el8.x86_64.rpm ea8425fd9776d05ba2832f7e809e15e60c24d5e2c21a6388430c5ab13d377f9d xorg-x11-drv-wacom-devel-0.38.0-1.el8.i686.rpm 5faecce584af84937ef4d2fa3c4b53eaba518b61e391c54d82991ce09d06bbb9 xorg-x11-drv-wacom-devel-0.38.0-1.el8.x86_64.rpm 1c1f508a17a2b1cc21b60fadd0a0b8825049b8424db62d0da3add8f5f1738dbc ALBA-2020:4733 Copyright 2021 AlmaLinux OS 0 2 None

An update for protobuf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default protobuf-devel-3.5.0-13.el8.i686.rpm 100631aebae7d094a707756b29cf663406c9fc6b6794f007345d559ee0ae5764 protobuf-devel-3.5.0-13.el8.x86_64.rpm eeca966ddcb3bfed34a9ba0177fd46a8794dbce0ee83b51fd626a91a262a184c protobuf-lite-devel-3.5.0-13.el8.i686.rpm cb8f5d2fe4a99f4c0f589508b77085b5ab58db3beebc57d081260dab70cf7b4e protobuf-lite-devel-3.5.0-13.el8.x86_64.rpm 92ea5ef7d7af7330f2459c63222e8ebc0ba61d8b05633c847768cdf4f039bab9 protobuf-compiler-3.5.0-13.el8.i686.rpm f60bb5305bac77e07a582cb32a407765e6a00d3621abe8c2bbfc062366b2a0d1 protobuf-compiler-3.5.0-13.el8.x86_64.rpm 6b743900af40c50c855f2b1640417a738e03cc5886feabe67b1d4c597fdba84e ALEA-2020:1607 Copyright 2021 AlmaLinux OS 0 3 None

An update for http-parser is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default http-parser-devel-2.8.0-9.el8.i686.rpm a5f1ed153068d8cc5e7467af37645eb684e59e739e6c0c564010379774732b00 http-parser-devel-2.8.0-9.el8.x86_64.rpm 0e9252920074d3ae06dc9631086362d3e0059db41762221aa65adee965a78043 ALSA-2020:4846 Copyright 2021 AlmaLinux OS 0 5 Moderate

An update for mingw-expat is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW. Security Fix(es): * expat: large number of colons in input makes parser consume high amount of resources, leading to DoS (CVE-2018-20843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw32-expat-2.2.4-5.el8.noarch.rpm 8ebcaf58985e573250c60c722c601493e71796b0231356a1190b3841b65e3189 mingw64-expat-2.2.4-5.el8.noarch.rpm 72a7869e3be8b7d1c37339276f2a4667ae71370e37dd08b8269fd6c94ed75938 ALEA-2020:4556 Copyright 2021 AlmaLinux OS 0 2 None

An update for libnetfilter_queue is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnetfilter_queue-devel-1.0.4-3.el8.i686.rpm 9ce0262ff401c72aa5d5209bbb1396a1ded798232d11b665031104ecbe07f38a libnetfilter_queue-devel-1.0.4-3.el8.x86_64.rpm 8f55938f97a7352868f987deeeaeff567c799f7a2e49bc665a81895f981a39ec ALBA-2019:3679 Copyright 2021 AlmaLinux OS 0 2 None

An update for the parted module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default parted-devel-3.2-38.el8.i686.rpm a790203d165a60ca5092981c653f1b83263b404846ad0809111b5b8982766b70 parted-devel-3.2-38.el8.x86_64.rpm 1cef3e0a1e6f373b77ebfd09e7cdc934148823db494e7590255f2053a4f8ca31 ALBA-2019:3411 Copyright 2021 AlmaLinux OS 0 3 None

Updated lttng-ust packages that fix several bugs and add various enhancements are now available.

This update fixes two issues in lttng-ust and subpackages. There was a bad shebang in the /usr/bin/lttng-gen-tp utility that prevented users from executing it. This issue has been fixed. lttng-ust was only available for x86_64 architectures. lttng-ust is now available for all architectures supported on AlmaLinux. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lttng-ust-devel-2.8.1-11.el8.i686.rpm 834ffe8ac58a4db417a0e43a3928067c4dd40f69aa027e8aafa90f81d7cbd104 lttng-ust-devel-2.8.1-11.el8.x86_64.rpm fd012ce286362f586c9d6f167e37ff895d61a6f092cc96ee8234ab2468f4d21c ALSA-2019:3345 Copyright 2021 AlmaLinux OS 0 8 Low

An update for the virt:rhel module is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755) * QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824) * QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALBA-2020:4499 Copyright 2021 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default jimtcl-devel-0.77-6.el8.i686.rpm aa84619b109e78eba9cf8a9edbe6091b9b6d6505058ba92abd339757f19f826c jimtcl-devel-0.77-6.el8.x86_64.rpm 3ff7abf2783e1f1b0f44dcb0486bb0149e465419a4c673adec2e9134b8d28b6b libnma-devel-1.8.30-1.el8.i686.rpm b45c597794ca6f5b1867216cf0cd1caaeeab052cf9d95d5470bb9ab7043c89aa libnma-devel-1.8.30-1.el8.x86_64.rpm feabb92fb7c4433713d9f3c0c562458a88458177dd435c4a87c508190151c442 ALBA-2019:3683 Copyright 2021 AlmaLinux OS 0 5 None

An update for the mingw-virt-viewer and dependencies module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw32-openssl-1.0.2k-2.el8.noarch.rpm 7d3e840fde56ab26a03e90a68a28d0959960b02ee183406170cb338f10eb0e13 mingw64-openssl-1.0.2k-2.el8.noarch.rpm 370c8318f5987b326c2705f0265e665f3a74b28f6f5cc89093eefab787b139f8 mingw32-bzip2-1.0.6-12.el8.noarch.rpm bea77e7a8f7a5fb9a5ad43841c028f983d99b242c69a1bb6be75165c8426baa4 mingw32-bzip2-static-1.0.6-12.el8.noarch.rpm 4b38e804a5f227d2d836b884667285ff7eb52e7ed578bbc2ad5d6df065305096 mingw64-bzip2-1.0.6-12.el8.noarch.rpm 6388da084782274263852c73a3e9c9687e949e0dad4554b15773a5944c15b2b3 mingw64-bzip2-static-1.0.6-12.el8.noarch.rpm f868f846d2048446cb60d7b5699ef0dffe9a3beef47555619477dc9dd4c5ae9b ALSA-2020:4629 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libvpx is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126) * libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232) * libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371) * libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvpx-devel-1.7.0-8.el8.i686.rpm 7ff3c2e21763535f4e3a5d0a1fdeb7ada2b37d40af87dd54232691cfe995aad0 libvpx-devel-1.7.0-8.el8.x86_64.rpm af58c619943e005029109a546899dff3321121281940c2b526eab0a1e04abfb5 ALSA-2020:0633 Copyright 2021 AlmaLinux OS 0 2 Important

An update for ppp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line. Security Fix(es): * ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ppp-2.4.7-26.el8_1.i686.rpm 77338f397cd45c865917959aef6159cfbb3419e48fb1574f4576f80f4606f7b0 ppp-devel-2.4.7-26.el8_1.i686.rpm 62b9599b0e357704737663588a1584008920f7832d74101bd44998e13cedd447 ppp-devel-2.4.7-26.el8_1.x86_64.rpm 9c99fff4af9c8b639762a573a85b20ef2b7b276d2297b75625cad0dc7f0cb8be ALSA-2020:1636 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for libsndfile is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: stack-based buffer overflow in sndfile-deinterleave utility (CVE-2018-13139) * libsndfile: buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsndfile-devel-1.0.28-10.el8.i686.rpm 897d0c8dc0108faaa5148d4b4906f74768fd16671a05bee0ac6397ef882d8bab libsndfile-devel-1.0.28-10.el8.x86_64.rpm 4d761b7313d8c95165ce7a4e6e9da523c3d1484f9d943e816167e95dbb9fbb97 ALEA-2019:3585 Copyright 2021 AlmaLinux OS 0 3 None

An update for rdma is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default infiniband-diags-compat-2.2.0-3.el8.x86_64.rpm 641680b34b045dd486781b25ba402a8ed3668aada7056e7f8c782e508221f9d6 infiniband-diags-devel-2.2.0-3.el8.i686.rpm b4afefbec4f2627856f3fca1762b1c8f72d46098fd36185fcdc7397c48f4b055 infiniband-diags-devel-2.2.0-3.el8.x86_64.rpm d58f85c8a2ce69941a306292fcfff3d4e4472c7e1a4f6d830ae5f3864a9fc5eb infiniband-diags-devel-static-2.2.0-3.el8.i686.rpm cb726dc3163ff04b14a3a7ce1b8576d9822da116764e31661160e5bc56103c63 infiniband-diags-devel-static-2.2.0-3.el8.x86_64.rpm 053849ef9edcb5b4267859e5f33c0b979067c0bedf5738a2c0676b811c9fd010 ALSA-2020:4676 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. The following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296) Security Fix(es): * libvirt: leak of /dev/mapper/control into QEMU guests (CVE-2020-14339) * QEMU: Slirp: use-after-free during packet reassembly (CVE-2019-15890) * libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent (CVE-2019-20485) * QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983) * libvirt: Potential denial of service via active pool without target path (CVE-2020-10703) * libvirt: leak of sensitive cookie information via dumpxml (CVE-2020-14301) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 libvirt-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 044539eb17951068e8d6c40fe8690f5cfc96fea94a262dd48a5637e75c7b6793 libvirt-admin-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 35d79809451408e26e257a7399ab7fe4d4dff6f6a1f8db738e3bbb093398bf97 libvirt-bash-completion-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm d13f84c15736b52df2d403a3a28fdf2c865ee880399125b05be2c7d7d6f54856 libvirt-client-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c7a69e5b4194f5ce3effe8676301838a6d266edcc7457999df900ff8c705e7a9 libvirt-daemon-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm fab72908887c5e8716443d5517f40678ef187a48289f11704faabd02b017ed66 libvirt-daemon-config-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 948eb75183ff922c48efb5ffdb0791bf74188828f7cbfa031ecd33f07ae0583f libvirt-daemon-config-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb354e913ab65d184a22b2e5507ffb94327d6c15464bd18a29b88cdc6853a522 libvirt-daemon-driver-interface-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5a58c4efe72d478b5b2646b27f407fe3a3c62c583d8ab4d4110501a10dfc8182 libvirt-daemon-driver-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5d6e6ef9349cd976c69708c8bee3f6704778277df5e40c79d0954b36f6204a8c libvirt-daemon-driver-nodedev-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35f3b32c19c06433149d5da92dbaf928e499f0e417bd2d9f7f81b71ad7ae2e7 libvirt-daemon-driver-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 801117011a6467c62486d4e3a00d4293cdc69cce5c2718d8006970e82264c450 libvirt-daemon-driver-secret-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm ddeb81a695b864e220efc24aa3784b01355ba9c917bab3a45138343af97f68c8 libvirt-daemon-driver-storage-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6f741c0c5a3be6c1c7a5f31ddb205a9e7a2425d79edc9560256b149bebc46da3 libvirt-daemon-driver-storage-core-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a22ee0317808c2a90a80d819541a41c5f121706af0db0e16a88d82f0cf3c2f71 libvirt-daemon-driver-storage-disk-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b44937db86790ca67ee69f76885292148b5ce9c980d7327c0d9a83d747942769 libvirt-daemon-driver-storage-iscsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm e0e7e8c81278760575f24eb04b36c445ee5e9ae6e2621f7013d05b37a707fc30 libvirt-daemon-driver-storage-iscsi-direct-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 53613f1ceba921b12f2155415b0fe868f4d22c48e71f09c33391078187b88b96 libvirt-daemon-driver-storage-logical-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 45ebe0860c227bfd5c99b12f05365ecaa6601b8728978d3ffa3a7c55c9a74612 libvirt-daemon-driver-storage-mpath-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 466d87826b53f2070574ebc16e05121757cca807bc5385b7480b584291848072 libvirt-daemon-driver-storage-rbd-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b6b85c14bf39862f5c1f55564c517ed245e948bf293e2065fe3e2ac7dd8e4bce libvirt-daemon-driver-storage-scsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 09b692c8700d2824a790cda6e9ff21d6286d048c22d968ab11d6bbd0a0eb2a85 libvirt-devel-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c524f5c7aa893d163235da40b97885a8f724e28f2eaa8fdfe49e3e1cd51b92b4 libvirt-docs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a34b54d7167b97bf75cb6ea988f7509aba354a7a13b9ec9a0cdfaed4171550d8 libvirt-libs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 91f2a9485d6d1a7e74bf14bc8a9429fdf72d7dc2806b34bc5da52188cf8edeba libvirt-nss-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35e216a6f6935638c8252915599f19fab48f7ed54549cf5ad2c5a7b5931e030 ocaml-libguestfs-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm 5e5d62c3c36b47d43a0f027959604196cec810ec16cc07fbc8eb567ae2059c2c ocaml-libguestfs-devel-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm f2a3dedb6b49a9b358fb2389be40c11abfce8a399d5158666bdb612544bf58a7 ALSA-2020:3654 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for libcroco is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library. Security Fix(es): * libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcroco-devel-0.6.12-4.el8_2.1.i686.rpm 414f1c5025b1f548afd752fd19252c43888b1e7ed4ce8bdfba572f64145c4166 libcroco-devel-0.6.12-4.el8_2.1.x86_64.rpm b805d882904907b1091da34a222acca1963c068ab85c187aad010fa85cb5fe2b ALBA-2021:0542 Copyright 2021 AlmaLinux OS 0 3 None

An update for the virt:rhel module is now available for AlmaLinux

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Bug Fix(es): * qemu-ga aborts after guest-shutdown command (BZ#1900578) * Report logical_name for disks without mounted file-system (BZ#1913818) codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 libvirt-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 044539eb17951068e8d6c40fe8690f5cfc96fea94a262dd48a5637e75c7b6793 libvirt-admin-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 35d79809451408e26e257a7399ab7fe4d4dff6f6a1f8db738e3bbb093398bf97 libvirt-bash-completion-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm d13f84c15736b52df2d403a3a28fdf2c865ee880399125b05be2c7d7d6f54856 libvirt-client-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c7a69e5b4194f5ce3effe8676301838a6d266edcc7457999df900ff8c705e7a9 libvirt-daemon-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm fab72908887c5e8716443d5517f40678ef187a48289f11704faabd02b017ed66 libvirt-daemon-config-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 948eb75183ff922c48efb5ffdb0791bf74188828f7cbfa031ecd33f07ae0583f libvirt-daemon-config-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb354e913ab65d184a22b2e5507ffb94327d6c15464bd18a29b88cdc6853a522 libvirt-daemon-driver-interface-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5a58c4efe72d478b5b2646b27f407fe3a3c62c583d8ab4d4110501a10dfc8182 libvirt-daemon-driver-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5d6e6ef9349cd976c69708c8bee3f6704778277df5e40c79d0954b36f6204a8c libvirt-daemon-driver-nodedev-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35f3b32c19c06433149d5da92dbaf928e499f0e417bd2d9f7f81b71ad7ae2e7 libvirt-daemon-driver-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 801117011a6467c62486d4e3a00d4293cdc69cce5c2718d8006970e82264c450 libvirt-daemon-driver-secret-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm ddeb81a695b864e220efc24aa3784b01355ba9c917bab3a45138343af97f68c8 libvirt-daemon-driver-storage-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6f741c0c5a3be6c1c7a5f31ddb205a9e7a2425d79edc9560256b149bebc46da3 libvirt-daemon-driver-storage-core-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a22ee0317808c2a90a80d819541a41c5f121706af0db0e16a88d82f0cf3c2f71 libvirt-daemon-driver-storage-disk-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b44937db86790ca67ee69f76885292148b5ce9c980d7327c0d9a83d747942769 libvirt-daemon-driver-storage-iscsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm e0e7e8c81278760575f24eb04b36c445ee5e9ae6e2621f7013d05b37a707fc30 libvirt-daemon-driver-storage-iscsi-direct-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 53613f1ceba921b12f2155415b0fe868f4d22c48e71f09c33391078187b88b96 libvirt-daemon-driver-storage-logical-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 45ebe0860c227bfd5c99b12f05365ecaa6601b8728978d3ffa3a7c55c9a74612 libvirt-daemon-driver-storage-mpath-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 466d87826b53f2070574ebc16e05121757cca807bc5385b7480b584291848072 libvirt-daemon-driver-storage-rbd-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b6b85c14bf39862f5c1f55564c517ed245e948bf293e2065fe3e2ac7dd8e4bce libvirt-daemon-driver-storage-scsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 09b692c8700d2824a790cda6e9ff21d6286d048c22d968ab11d6bbd0a0eb2a85 libvirt-devel-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c524f5c7aa893d163235da40b97885a8f724e28f2eaa8fdfe49e3e1cd51b92b4 libvirt-docs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a34b54d7167b97bf75cb6ea988f7509aba354a7a13b9ec9a0cdfaed4171550d8 libvirt-libs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 91f2a9485d6d1a7e74bf14bc8a9429fdf72d7dc2806b34bc5da52188cf8edeba libvirt-nss-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35e216a6f6935638c8252915599f19fab48f7ed54549cf5ad2c5a7b5931e030 ocaml-libguestfs-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm 5e5d62c3c36b47d43a0f027959604196cec810ec16cc07fbc8eb567ae2059c2c ocaml-libguestfs-devel-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm f2a3dedb6b49a9b358fb2389be40c11abfce8a399d5158666bdb612544bf58a7 ALBA-2020:1743 Copyright 2021 AlmaLinux OS 0 2 None

An update for librevenge is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librevenge-devel-0.0.4-12.el8.i686.rpm 39972815fc9bfe97c9650950f0dcc35f26ebfca3281e805412d1c0a2f40db7bb librevenge-devel-0.0.4-12.el8.x86_64.rpm 45a84e8d307707f38acc03bab72b0d78ef2a95e27d0774c33470cd545ae593fa ALBA-2020:4773 Copyright 2021 AlmaLinux OS 0 2 None

An update for libgit2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libgit2-devel-0.26.8-2.el8.i686.rpm 033e21af2325f642def21cf8bdf88494814770793d1dfaa1f0c3b0abfc5f227b libgit2-devel-0.26.8-2.el8.x86_64.rpm 3593a3c4b24abe2c72d9ec0463f4a548249861ab43a5b9105e0a1c48d6e74e76 ALBA-2020:4834 Copyright 2021 AlmaLinux OS 0 4 None

New gcc-toolset-10-systemtap packages are now available for AlmaLinux

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-10-systemtap packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documented in the GCC Toolset 10 chapter. For detailed changes in this release, see the AlmaLinux Release Notes. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-toolset-9-gcc-plugin-devel-9.2.1-2.3.el8.i686.rpm 357bbbdb86ecaba95ad9ffe642408ae749805f56518c0476aabf88858130ac20 gcc-toolset-9-gcc-plugin-devel-9.2.1-2.3.el8.x86_64.rpm d9f3f1298416c6c33a4c29ef0c64cc8354317637347b7a3f12d084faaf4625d0 ALSA-2020:2755 Copyright 2021 AlmaLinux OS 0 1 Important

An update for nghttp2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnghttp2-devel-1.33.0-3.el8_2.1.i686.rpm 65d8a5b2b3469b1408715d02b285d7700af5810d185de5c584db60db0b895423 libnghttp2-devel-1.33.0-3.el8_2.1.x86_64.rpm 7a0913f751f773b67ce85173ad46dae39a185597674e619a63a99a482c409cf9 nghttp2-1.33.0-3.el8_2.1.x86_64.rpm 786fc0578da180e0567f65f98eb23d5e34dd735dee045d07dc13968db645de7c ALEA-2020:4653 Copyright 2021 AlmaLinux OS 0 2 None

An update for pmix is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pmix-devel-2.2.4rc1-1.el8.i686.rpm 776f1aa4d347bd8a78792c25f87e1ae0d7e2a1288ae335e4846c9d4d89cbb7c6 pmix-devel-2.2.4rc1-1.el8.x86_64.rpm 32ddec0a9df612145e00a9769d543db34adb53ab7062c68a94ce725cd8b7fd67 ALBA-2020:5494 Copyright 2021 AlmaLinux OS 0 2 None

An update for the virt:rhel module is now available for AlmaLinux.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 libvirt-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 044539eb17951068e8d6c40fe8690f5cfc96fea94a262dd48a5637e75c7b6793 libvirt-admin-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 35d79809451408e26e257a7399ab7fe4d4dff6f6a1f8db738e3bbb093398bf97 libvirt-bash-completion-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm d13f84c15736b52df2d403a3a28fdf2c865ee880399125b05be2c7d7d6f54856 libvirt-client-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c7a69e5b4194f5ce3effe8676301838a6d266edcc7457999df900ff8c705e7a9 libvirt-daemon-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm fab72908887c5e8716443d5517f40678ef187a48289f11704faabd02b017ed66 libvirt-daemon-config-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 948eb75183ff922c48efb5ffdb0791bf74188828f7cbfa031ecd33f07ae0583f libvirt-daemon-config-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb354e913ab65d184a22b2e5507ffb94327d6c15464bd18a29b88cdc6853a522 libvirt-daemon-driver-interface-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5a58c4efe72d478b5b2646b27f407fe3a3c62c583d8ab4d4110501a10dfc8182 libvirt-daemon-driver-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5d6e6ef9349cd976c69708c8bee3f6704778277df5e40c79d0954b36f6204a8c libvirt-daemon-driver-nodedev-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35f3b32c19c06433149d5da92dbaf928e499f0e417bd2d9f7f81b71ad7ae2e7 libvirt-daemon-driver-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 801117011a6467c62486d4e3a00d4293cdc69cce5c2718d8006970e82264c450 libvirt-daemon-driver-secret-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm ddeb81a695b864e220efc24aa3784b01355ba9c917bab3a45138343af97f68c8 libvirt-daemon-driver-storage-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6f741c0c5a3be6c1c7a5f31ddb205a9e7a2425d79edc9560256b149bebc46da3 libvirt-daemon-driver-storage-core-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a22ee0317808c2a90a80d819541a41c5f121706af0db0e16a88d82f0cf3c2f71 libvirt-daemon-driver-storage-disk-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b44937db86790ca67ee69f76885292148b5ce9c980d7327c0d9a83d747942769 libvirt-daemon-driver-storage-iscsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm e0e7e8c81278760575f24eb04b36c445ee5e9ae6e2621f7013d05b37a707fc30 libvirt-daemon-driver-storage-iscsi-direct-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 53613f1ceba921b12f2155415b0fe868f4d22c48e71f09c33391078187b88b96 libvirt-daemon-driver-storage-logical-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 45ebe0860c227bfd5c99b12f05365ecaa6601b8728978d3ffa3a7c55c9a74612 libvirt-daemon-driver-storage-mpath-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 466d87826b53f2070574ebc16e05121757cca807bc5385b7480b584291848072 libvirt-daemon-driver-storage-rbd-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b6b85c14bf39862f5c1f55564c517ed245e948bf293e2065fe3e2ac7dd8e4bce libvirt-daemon-driver-storage-scsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 09b692c8700d2824a790cda6e9ff21d6286d048c22d968ab11d6bbd0a0eb2a85 libvirt-devel-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c524f5c7aa893d163235da40b97885a8f724e28f2eaa8fdfe49e3e1cd51b92b4 libvirt-docs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a34b54d7167b97bf75cb6ea988f7509aba354a7a13b9ec9a0cdfaed4171550d8 libvirt-libs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 91f2a9485d6d1a7e74bf14bc8a9429fdf72d7dc2806b34bc5da52188cf8edeba libvirt-nss-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35e216a6f6935638c8252915599f19fab48f7ed54549cf5ad2c5a7b5931e030 ocaml-libguestfs-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm 5e5d62c3c36b47d43a0f027959604196cec810ec16cc07fbc8eb567ae2059c2c ocaml-libguestfs-devel-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm f2a3dedb6b49a9b358fb2389be40c11abfce8a399d5158666bdb612544bf58a7 qemu-kvm-tests-4.2.0-34.module_el8.3.0+2048+e7a0a3ea.1.x86_64.rpm 4eb5ffa5e774d7131d86a4bba4ac2d57f790617bf96b5fcfe558fa59dcb8c098 ALEA-2020:4700 Copyright 2021 AlmaLinux OS 0 2 None

An update for createrepo_c is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default drpm-devel-0.4.1-3.el8.i686.rpm 8a3f153b14b4436ac757ec3e4a3dc650b5c77986bd828fd424352ca918624b6d drpm-devel-0.4.1-3.el8.x86_64.rpm e59c26ea61b1ac5bffd4065b45acc5bdb2eddabeb93afc6c029c05b85b7ed059 ALSA-2020:1686 Copyright 2021 AlmaLinux OS 0 2 Low

An update for libmspack is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft. Security Fix(es): * libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmspack-devel-0.7-0.3.alpha.el8.4.i686.rpm c953f6a84944896c8bd279f5685357ac21116356a876140e7abad1ba5d7263c5 libmspack-devel-0.7-0.3.alpha.el8.4.x86_64.rpm 2bcc111e94e97f1b3ee1719aebb5133ad832a787282e2c6753be107fc5318749 ALSA-2020:1631 Copyright 2021 AlmaLinux OS 0 6 Low

An update for GStreamer, libmad, and SDL is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fix(es): * libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default SDL2-2.0.10-2.el8.i686.rpm 810e992d8e5e7b7b1e8288f10fcf7330d5fdf5ebbe465fbfe9871bbe11291fb4 SDL2-2.0.10-2.el8.x86_64.rpm aff9fc104197bf7e14be8b286edc1c3c120b8e44a6c1f1c33d6236d58bc0675f SDL2-devel-2.0.10-2.el8.i686.rpm ea6ef72e7bb278082b4f6c5acea9f2f0b7d27a9037d5f78aca0575d556eb503e SDL2-devel-2.0.10-2.el8.x86_64.rpm 54e1621d9e9ea711773150c1bda19d62c25329cc78d790ec88eb41c581bb0398 SDL2-static-2.0.10-2.el8.i686.rpm f30ab1978a77ebd687b26b4e1ccd424f222f7c5f8a28a98201b57131bde85dad SDL2-static-2.0.10-2.el8.x86_64.rpm 02597cfcd881f99044b549f5304abac121b60f474896876f1d73966cc3382e7c gstreamer1-plugins-bad-free-devel-1.16.1-1.el8.i686.rpm b91cd28916947fc1081eecf430ecd4997b4ac00b3576c253fd018c1f3c9b602d gstreamer1-plugins-bad-free-devel-1.16.1-1.el8.x86_64.rpm 0c50ccade9093d1767ea3623436e61cd4d45f73f9c987145d4026b9aaa223dab libmad-devel-0.15.1b-25.el8.i686.rpm 1801f45d9d38feef97cee8da49701cde9d281c4ccfa9bd138647aefc7db5b70b libmad-devel-0.15.1b-25.el8.x86_64.rpm 8af340e4fc3bef9c94ced358ac9216dbc7160fe99cc7348dd8b72f0c5c2a1dc1 ALSA-2020:4827 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for oniguruma is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Oniguruma is a regular expressions library that supports a variety of character encodings. Security Fix(es): * oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default oniguruma-devel-6.8.2-2.el8.i686.rpm 818b5a7714cb9c53e33a5379aff4b07b768844c00d55947efbe53136cb1d954c oniguruma-devel-6.8.2-2.el8.x86_64.rpm 341d680c7a4a55c0171fd8f5ea8dfae52e0f2bbde1dfe6886b68624b1ea1a8cc ALSA-2020:1581 Copyright 2021 AlmaLinux OS 0 3 Low

An update for wavpack is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix(es): * wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840) * wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841) * wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498) * wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315) * wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317) * wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default wavpack-devel-5.1.0-15.el8.i686.rpm e1da8e8de14d0bac64b96e6f3e600679f17f3c578f3770a42fa106181fd6c594 wavpack-devel-5.1.0-15.el8.x86_64.rpm 3a4a4200fbaaeaad7d4ba82a657d9e44dbe56b59c613ba16a9598870ca78faad ALSA-2020:1358 Copyright 2021 AlmaLinux OS 0 4 Important

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server (CVE-2020-1711) * QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * libvirtd: error : virCPUx86UpdateLive:3110 : operation failed: guest CPU doesn't match specification: missing features: fxsr_opt (BZ#1809510) codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALSA-2020:1577 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917) Security Fix(es): * exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421) * exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005) * exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868) * exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303) * exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304) * exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305) * exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772) * exiv2: information leak via a crafted file (CVE-2018-11037) * exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338) * exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229) * exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230) * exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282) * exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581) * exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915) * exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107) * exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108) * exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535) * exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607) * exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096) * exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097) * exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098) * exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099) * exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143) * exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109) * exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111) * exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112) * exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113) * exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114) * exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libgexiv2-devel-0.10.8-4.el8.i686.rpm 450ba7824d0b59f31b6fc8901448ff6e57fd7e19434397c146504871462a72b0 libgexiv2-devel-0.10.8-4.el8.x86_64.rpm bca558862faf4fab0f57d2950e6dae8ec7d0d5df3eb8a370dad113350e51066b exiv2-devel-0.27.2-5.el8.i686.rpm f2d30f33f961e786ab12348414dcfb0044ca8c7f20f87af1482e6842177dfa14 exiv2-devel-0.27.2-5.el8.x86_64.rpm bc682739258faf1b46be75a0fe3d28c365a712aae74e0856abbaf6e1b9a54971 exiv2-doc-0.27.2-5.el8.noarch.rpm ae02e88f79d5bd056b249f519b1be4afab3e904e29db6a41e2b46af445087524 ALSA-2021:0711 Copyright 2021 AlmaLinux OS 0 2 Important

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: virtiofsd: potential privileged host device access from guest (CVE-2020-35517) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 libvirt-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 044539eb17951068e8d6c40fe8690f5cfc96fea94a262dd48a5637e75c7b6793 libvirt-admin-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 35d79809451408e26e257a7399ab7fe4d4dff6f6a1f8db738e3bbb093398bf97 libvirt-bash-completion-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm d13f84c15736b52df2d403a3a28fdf2c865ee880399125b05be2c7d7d6f54856 libvirt-client-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c7a69e5b4194f5ce3effe8676301838a6d266edcc7457999df900ff8c705e7a9 libvirt-daemon-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm fab72908887c5e8716443d5517f40678ef187a48289f11704faabd02b017ed66 libvirt-daemon-config-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 948eb75183ff922c48efb5ffdb0791bf74188828f7cbfa031ecd33f07ae0583f libvirt-daemon-config-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb354e913ab65d184a22b2e5507ffb94327d6c15464bd18a29b88cdc6853a522 libvirt-daemon-driver-interface-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5a58c4efe72d478b5b2646b27f407fe3a3c62c583d8ab4d4110501a10dfc8182 libvirt-daemon-driver-network-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 5d6e6ef9349cd976c69708c8bee3f6704778277df5e40c79d0954b36f6204a8c libvirt-daemon-driver-nodedev-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35f3b32c19c06433149d5da92dbaf928e499f0e417bd2d9f7f81b71ad7ae2e7 libvirt-daemon-driver-nwfilter-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 801117011a6467c62486d4e3a00d4293cdc69cce5c2718d8006970e82264c450 libvirt-daemon-driver-secret-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm ddeb81a695b864e220efc24aa3784b01355ba9c917bab3a45138343af97f68c8 libvirt-daemon-driver-storage-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6f741c0c5a3be6c1c7a5f31ddb205a9e7a2425d79edc9560256b149bebc46da3 libvirt-daemon-driver-storage-core-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a22ee0317808c2a90a80d819541a41c5f121706af0db0e16a88d82f0cf3c2f71 libvirt-daemon-driver-storage-disk-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b44937db86790ca67ee69f76885292148b5ce9c980d7327c0d9a83d747942769 libvirt-daemon-driver-storage-iscsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm e0e7e8c81278760575f24eb04b36c445ee5e9ae6e2621f7013d05b37a707fc30 libvirt-daemon-driver-storage-iscsi-direct-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 53613f1ceba921b12f2155415b0fe868f4d22c48e71f09c33391078187b88b96 libvirt-daemon-driver-storage-logical-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 45ebe0860c227bfd5c99b12f05365ecaa6601b8728978d3ffa3a7c55c9a74612 libvirt-daemon-driver-storage-mpath-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 466d87826b53f2070574ebc16e05121757cca807bc5385b7480b584291848072 libvirt-daemon-driver-storage-rbd-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b6b85c14bf39862f5c1f55564c517ed245e948bf293e2065fe3e2ac7dd8e4bce libvirt-daemon-driver-storage-scsi-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 09b692c8700d2824a790cda6e9ff21d6286d048c22d968ab11d6bbd0a0eb2a85 libvirt-devel-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm c524f5c7aa893d163235da40b97885a8f724e28f2eaa8fdfe49e3e1cd51b92b4 libvirt-docs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm a34b54d7167b97bf75cb6ea988f7509aba354a7a13b9ec9a0cdfaed4171550d8 libvirt-libs-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm 91f2a9485d6d1a7e74bf14bc8a9429fdf72d7dc2806b34bc5da52188cf8edeba libvirt-nss-6.0.0-28.module_el8.3.0+2048+e7a0a3ea.i686.rpm b35e216a6f6935638c8252915599f19fab48f7ed54549cf5ad2c5a7b5931e030 ocaml-libguestfs-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm 5e5d62c3c36b47d43a0f027959604196cec810ec16cc07fbc8eb567ae2059c2c ocaml-libguestfs-devel-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm f2a3dedb6b49a9b358fb2389be40c11abfce8a399d5158666bdb612544bf58a7 ALEA-2020:4672 Copyright 2021 AlmaLinux OS 0 2 None

An update for autogen is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default autogen-5.18.12-8.el8.x86_64.rpm 5d08a994d3a992d490210e02e1058a055f881d852405fa490219ace2e23387f2 autogen-libopts-devel-5.18.12-8.el8.i686.rpm 86e26d72f347188f75253413c7c578a9631f7994a41dd670e6579143477ecd12 autogen-libopts-devel-5.18.12-8.el8.x86_64.rpm daf472d7124a9da3b56d0a1da28518d2050b494f5a222d8940e9960dcc61fae3 ALSA-2019:2722 Copyright 2021 AlmaLinux OS 0 4 Low

An update for libwmf is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick. Security Fix(es): * gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwmf-devel-0.2.9-8.el8_0.i686.rpm b086c5f535735f48c11ecaea3234b930f13e5d72c5ad257283e2e46008a96173 libwmf-devel-0.2.9-8.el8_0.x86_64.rpm c4213f6736e692bab45dc9a989df50de6d46d6bfdc67750bf2acdaafc1f4e5ce ALBA-2020:1615 Copyright 2021 AlmaLinux OS 0 3 None

An update for graphviz is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default graphviz-devel-2.40.1-40.el8.i686.rpm b11671cbea3fa5f4a878e558773cc87ba56c6762fadcdbd115b1650b4856a4a4 graphviz-devel-2.40.1-40.el8.x86_64.rpm 7c893f5335e6962b8128ffbfbf2da60d56b345987d3c1d1aea4713791e602718 graphviz-doc-2.40.1-40.el8.x86_64.rpm 6e23619cbead577b6468d11924548083e0e5947ecbaf4620880ab54c2360d5ed graphviz-gd-2.40.1-40.el8.i686.rpm 1fd50bf501ca61f31c9f5d2baaec5777ccf92860585b8035bc987d8613707c4b graphviz-gd-2.40.1-40.el8.x86_64.rpm f04351160f58d42f3b57c1fc2dac7a3b882a0e054528ff9877549fd6ca4ac1ab graphviz-python3-2.40.1-40.el8.x86_64.rpm 392b088c946f0c9990ee919d3395cb885e9f4b0584ca75d813d3d09a8812d269 ALSA-2020:1616 Copyright 2021 AlmaLinux OS 0 2 Low

An update for irssi is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Irssi is a modular IRC client with Perl scripting. Security Fix(es): * irssi: use after free when sending SASL login to server (CVE-2019-13045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default irssi-devel-1.1.1-3.el8.i686.rpm 971dbb1a7de30285d9a50723f9d48e8826fbd6c39f423e52ccbb602e3e0c8f61 irssi-devel-1.1.1-3.el8.x86_64.rpm af106afd7d0cdf24c303f09e3e5f87bb261158c0cf48285192f8ed3e9e0a8bcf ALBA-2019:3462 Copyright 2021 AlmaLinux OS 0 2 None

An update for libcdio is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcdio-devel-2.0.0-3.el8.i686.rpm c2b36f738529697b273f03ad87ba00d2a1fb9f645a4c1465b4e97d5d0da9d0d4 libcdio-devel-2.0.0-3.el8.x86_64.rpm 696566867f8157849b7219215f91fceda1b6b89c814a538122a163d45e694750 ALEA-2020:1763 Copyright 2021 AlmaLinux OS 0 3 None

An update for libnftnl is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnftnl-devel-1.1.5-4.el8.i686.rpm 9ff755bae0718bac4ea79d8d31d2d5d69ef11cfa4b90ee10ecb08cfb64d39f59 libnftnl-devel-1.1.5-4.el8.x86_64.rpm 73b492cedf6c0a8a463e590b202b3977dd99b5d7712a316ad9c21a3c34d8cd79 ALBA-2020:4764 Copyright 2021 AlmaLinux OS 0 2 None

An update for papi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpfm-static-4.10.1-3.el8.i686.rpm 8959abf566649f12c0b670bd18e83e4c114d4eca8aa73dc237941087c9dd6d4b libpfm-static-4.10.1-3.el8.x86_64.rpm b05f99f38e0c20ae0996e6f94c8d6998fd52421eb62761496cca31a5bddcf9a9 papi-testsuite-5.6.0-11.el8.x86_64.rpm 92c56452971c204e250be90ef7d6a97bf8294b02d985c0be6b1237dcc3a10270 python3-libpfm-4.10.1-3.el8.x86_64.rpm 0daef2d8c689fb10ab8c8faea5ead510b89d280fc3553ceb34586bfc8e036f68 ALSA-2020:1766 Copyright 2021 AlmaLinux OS 0 6 Moderate

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337) * gdm: lock screen bypass when timed login is enabled (CVE-2019-3825) * gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447) * gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448) * gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default clutter-devel-1.26.2-8.el8.i686.rpm 6bcdd54bf1856e09f47d34870851fbb9ff50ad2dafe67254d1f183a89ef3af8c clutter-devel-1.26.2-8.el8.x86_64.rpm e3a9a98dd74f8dbbcf5b859be5f43b13720fe3bbd90e60af9f151a34437d7152 clutter-doc-1.26.2-8.el8.x86_64.rpm b181d866166cde2078f089da89a27c928def4c1197693f7cb9ff9134bb4a7732 gnome-menus-devel-3.13.3-11.el8.i686.rpm d01446861f2e5b46f66e7a0d3cad782d42cc204d16309f4cf08a1518e1c8dd29 gnome-menus-devel-3.13.3-11.el8.x86_64.rpm 81620071d46e3d94c1d28c452ca3f7d71960c1143306d6d4582c31e9dc0410bc mozjs52-devel-52.9.0-2.el8.i686.rpm 6bc80be3fa0d73a7130f447b33a61181b5d5128d06a4b3ab801baa951cad8086 mozjs52-devel-52.9.0-2.el8.x86_64.rpm 685f009107485ec920db4360c44f01cb33cfff984d678ef986b2f9e164983641 mozjs60-devel-60.9.0-4.el8.i686.rpm 8fac2a3a00dbfec3eb2344bc112f76acc3e4a8013b958fc8a80ce319e751226d mozjs60-devel-60.9.0-4.el8.x86_64.rpm 7189aecf72771dde71b651298db93160cf15d46cefa98d93db6c311db728c90a accountsservice-devel-0.6.50-8.el8.i686.rpm b08cd92df783298a6bb23cff26171e6be307736ffd5954433f0c54b0b116e005 accountsservice-devel-0.6.50-8.el8.x86_64.rpm 39844719e5169607803c2d89a06164f90e6b3894b4219564e4422ce730872ea2 gjs-devel-1.56.2-4.el8.i686.rpm 349cfbbebfd0fa901e7a3940bf7215af1a90e9362b996e20ec8e95b07837b423 gjs-devel-1.56.2-4.el8.x86_64.rpm ce86b010904f170105efb422bdd487916c05d663cbb183b15b5a5937c0a4aad5 vala-0.40.19-1.el8.i686.rpm 93138300f1fed4675186536ac2ea598c049572fc6787bacdd1b22ad7560c5104 vala-0.40.19-1.el8.x86_64.rpm 29ed7e032a1a8f966c069814188f4ee5d7671762261a80af26e5f73187888c54 vala-devel-0.40.19-1.el8.i686.rpm cc77cfcbbd11695b51ef0e8e704fad4a609e40121ba1864875bb22928c4b527e vala-devel-0.40.19-1.el8.x86_64.rpm cbefdc01ca0380f56c49833b9d6819dd939bc21fa553ec5062ef389c45d394b6 ALEA-2020:1611 Copyright 2021 AlmaLinux OS 0 3 None

An update for libevdev, libinput, libwacom, libxkbcommon, and xkeyboard-config is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libevdev-devel-1.8.0-1.el8.i686.rpm 40c4694e237311adea16d842a873e8ec6bb0cf948a5ddc2dcf0994be69ed3ee6 libevdev-devel-1.8.0-1.el8.x86_64.rpm 9b626707bbf0c09354e4c9edce4ef147722f530848e8e666014a0aee1a6d01ca libxkbcommon-x11-devel-0.9.1-1.el8.i686.rpm 42abb48362bc59afd3815205de3cd08167a30766ae0c9233cf2257afeaea3910 libxkbcommon-x11-devel-0.9.1-1.el8.x86_64.rpm 97b93d87163f6255b8748e7c05ff5bdb352f9357a6425697f1dab0b09f5fdbc7 libinput-devel-1.14.3-1.el8.i686.rpm dd5051f66b4c41e637d6801cb7770d756587b372902d7cebdba23a7a39b90d64 libinput-devel-1.14.3-1.el8.x86_64.rpm ba1e1304343dfaeaf8e72435922fd8b943c0359dae077f2ea1d691f4416c39f5 ALSA-2020:1653 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for zziplib is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c (CVE-2018-17828) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zziplib-devel-0.13.68-8.el8.i686.rpm 5502bc7175bbfe19f43d5860046e59c3112a7dc59fc3df19dec7fe8568459a44 zziplib-devel-0.13.68-8.el8.x86_64.rpm 583529ed57c8e0b0b8212e5288431d5ed1775c29991ae2a4971a80c0fc59c4b6 ALBA-2019:3680 Copyright 2021 AlmaLinux OS 0 2 None

An update for doxygen is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default doxygen-1.8.14-12.el8.x86_64.rpm 9174b2c23778e6901010050057d2602de8ad97eaf32613606caa099c0daec480 doxygen-doxywizard-1.8.14-12.el8.x86_64.rpm 165ea31184b2cadd2fc36eafbc68b133f6a1618fcc51c3047acb99ab441e0057 doxygen-latex-1.8.14-12.el8.x86_64.rpm 5f4c65e4df8b1a12a57d2962fcd7c9f86eae0bcee2b588a5eff39e960f632d1d ALBA-2020:1922 Copyright 2021 AlmaLinux OS 0 3 None

An update for uglify-js is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default js-uglify-2.8.29-4.el8.noarch.rpm 6e0d70095280dc8b9e8e63af2e531b80f4a1b062d8aa98ca5611464ca7b18c34 uglify-js-2.8.29-4.el8.noarch.rpm df87f3ba12e381c5e5db06bc1be84c9e5c77c1889649975e4b0a45a6d90e0781 ALBA-2020:1610 Copyright 2021 AlmaLinux OS 0 3 None

An update for wireshark is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default wireshark-devel-2.6.2-12.el8.i686.rpm 7e56141571f76cfc6ce391dbaede6aa573459fb35fe8629448c8bd549d353ef8 wireshark-devel-2.6.2-12.el8.x86_64.rpm 6b6ef577e446ee1555bf3ce788e206e36f008a5c13fcda4e0ebd00dd7105d428 ALSA-2019:3703 Copyright 2021 AlmaLinux OS 0 3 Low

An update for libvorbis is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates. Security Fix(es): * libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392) * libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvorbis-devel-1.3.6-2.el8.i686.rpm 59f90e24c9d7dbfc5a61a7595f604f61de0203f320ede4d80de557cc8ad4afdb libvorbis-devel-1.3.6-2.el8.x86_64.rpm 2951501abde71deb9f5f382c2a1b79634832936bf99a2f85c488c170f723b822 libvorbis-devel-docs-1.3.6-2.el8.noarch.rpm 8fed9a09938ee9f62ed4514fddbdbef65fb3e1330056f8b34c22f8ef59f15a78 ALSA-2020:4451 Copyright 2021 AlmaLinux OS 0 7 Moderate

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406) Security Fix(es): * webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793) * gnome-settings-daemon: AlmaLinux Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391) * LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default LibRaw-devel-0.19.5-2.el8.i686.rpm 90d4871c0096b43047fdf9c4dafc281a00121b628fb57719076e2c14e5ce7148 LibRaw-devel-0.19.5-2.el8.x86_64.rpm b5252c1e66a270971493b70fd37337e8bcdbee3c4b91b797ebf951c79ad39152 PackageKit-glib-devel-1.1.12-6.el8.i686.rpm 4b57bbc11f3c2d26a2560c817069eadac76a0053415bdf4d3125111bccb7444a PackageKit-glib-devel-1.1.12-6.el8.x86_64.rpm 08a650275cafbf2cc16583ea4224237a8acee8523568beaf3a2872e96477305b frei0r-devel-1.6.1-7.el8.i686.rpm 3a6362e127674f8388ca1f59e404af5c21a09ead709014ff06688fa507e95a78 frei0r-devel-1.6.1-7.el8.x86_64.rpm 3711d285276197877314e54ad587d889c64e115e3ac03472f80a75b7bcb09833 frei0r-plugins-1.6.1-7.el8.i686.rpm 53d4dff33f1e580ed9e62afced0b0ffb1430b03cc3ac409b1b2e7601aadede96 pygobject3-devel-3.28.3-2.el8.i686.rpm 5ea825b65a94b23b698cc1fe5a916d7a3fc638e73428ef76a63e588b21aba2e2 pygobject3-devel-3.28.3-2.el8.x86_64.rpm c0856dead00588db1159f674bd205de9abefca865bf60a15ed5e71d029c0ae30 tracker-devel-2.1.5-2.el8.i686.rpm 5ab9bf049051fab0b7801ca8ce3ff322f24ee8d835d519b416784df753b8a950 tracker-devel-2.1.5-2.el8.x86_64.rpm 4f29b02043f3d6b0dd448c4ee22f9b08360f3302f3180afd657f5e6292d6bfab vte291-devel-0.52.4-2.el8.i686.rpm ed06b6eed221c6c54449f4a212b38a612e08c6f7ddc7f553cca9abd9f5eb4450 vte291-devel-0.52.4-2.el8.x86_64.rpm 50fb00fb27a1db6316a3aca649b578280ead2e222f65ea0a04a850a00d7013a5 gtk-doc-1.28-2.el8.x86_64.rpm e66ee49f9ee1ac00dcfb7c9445a2a2816477f28c625ac010e249aebc55921456 gvfs-1.36.2-10.el8.i686.rpm 56edaa92a90559b394b419a217526341a6a8c48c48fcd1b9b7a665c88f1b12ac mutter-devel-3.32.2-48.el8.i686.rpm fa63acee53da165ebf03b5fcade07284410720b41166bb258ec62b705c017fd2 mutter-devel-3.32.2-48.el8.x86_64.rpm 79e9c75d4ec4c54ca46f1e3dd3daa934e69bd53c81350f12a9de9d911f6277df nautilus-3.28.1-14.el8.i686.rpm 644e351c6df077b8f8a25caa19541b3c6361a89387c76174a23155d3839c76d7 nautilus-devel-3.28.1-14.el8.i686.rpm a8a76a320821f264bb91f6d6b003e9c7887d046d1566197386a777e61c2e750f nautilus-devel-3.28.1-14.el8.x86_64.rpm 19b128049340fdbb3dd031c286ea316ade9ea5e915081cca4271520e07272d27 ALBA-2020:1617 Copyright 2021 AlmaLinux OS 0 2 None

An update for pmdk is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpmem-debug-1.6.1-1.el8.x86_64.rpm e34977b354b3d0c638965e2bcdd1accea1e77fb6efcb1c4ea564e36c6b1d6f94 libpmemblk-debug-1.6.1-1.el8.x86_64.rpm 1161d8d0ad5ffe1f069fe943652b3e977d88605741538ef8f6d96f9c967637e9 libpmemlog-debug-1.6.1-1.el8.x86_64.rpm b29ddec41bdaf9f088b480eb431a142ffd4619da55a3baba2f7b32c0318e7c80 libpmemobj-debug-1.6.1-1.el8.x86_64.rpm 0194cf999c019de087685276efe38c22114fa77327bd0e5585048b7ba0baec63 libpmempool-debug-1.6.1-1.el8.x86_64.rpm 7a70bd6827cbd7419ceb66edc6a07d6da7526d717de1ec5b276ba3bab03c352c librpmem-debug-1.6.1-1.el8.x86_64.rpm 7812c6d27210957554ee2861c713b1f351a2ff2a800d6e037e86bed8664d88e9 libvmem-debug-1.6.1-1.el8.x86_64.rpm a2666b1978e03611869bb2ceadfb3f3dcd9307fb8f3c3a1d5744453273ed6893 libvmmalloc-debug-1.6.1-1.el8.x86_64.rpm cd2204b92846384b0710c214e19590276421f0dbcb619dec9697eff679a82225 ALBA-2020:1898 Copyright 2021 AlmaLinux OS 0 3 None

An update for sg3_utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sg3_utils-devel-1.44-5.el8.i686.rpm 0b33ab7d5a3d6385ce5767566aedeea5fff216152200bc17f2b261e61d9136d2 sg3_utils-devel-1.44-5.el8.x86_64.rpm f9392663337dff1ec2aace5ac73cc643d6337739c577452a3056ae1c8c2748e4 ALEA-2020:4555 Copyright 2021 AlmaLinux OS 0 2 None

An update for libpsl is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpsl-devel-0.20.2-6.el8.i686.rpm f954953188bf251a23be8ea4bf7a25a84db66b3483389aa3fc1376283599d53d libpsl-devel-0.20.2-6.el8.x86_64.rpm 23a2f74f118b6530852bee817ddf0e15a893b7887fce6f676012e78bbd8885f0 ALBA-2020:4658 Copyright 2021 AlmaLinux OS 0 2 None

An update for munge is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default munge-devel-0.5.13-2.el8.i686.rpm 091996d245862e65e48cc6b5950c74872a3af616b4a1ca621fcd0069b4a889b7 munge-devel-0.5.13-2.el8.x86_64.rpm 1f39cacebc78982dd235a0780ef3bbe3748a57f4f3df8dc195ea91452ffabc79 ALBA-2019:3558 Copyright 2021 AlmaLinux OS 0 3 None

An update for libzfcphbaapi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libhbaapi-devel-2.2.9-13.el8.i686.rpm 6ced60d11f5cbd23236441fde3f0a9dbf225c2b19b1ca7bce4363522ced92776 libhbaapi-devel-2.2.9-13.el8.x86_64.rpm 952910f2c3940f9d5f2d58411e946020c4b25e539e7fced429557655a662ad86 ALSA-2020:4539 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for pcre2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fix(es): * pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pcre2-tools-10.32-2.el8.x86_64.rpm e0414d240b422deb7a8afcbeb56c20bb55c4952de9bf971cb52315ca8e91d6a3 ALEA-2020:1694 Copyright 2021 AlmaLinux OS 0 2 None

A new python38:3.8 module is now available for AlmaLinux

This enhancement update adds the python38:3.8 module to AlmaLinux (BZ#1747329) For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_python38-devel python38-atomicwrites-1.3.0-8.module_el8.2.0+6107+533dc13a.noarch.rpm ac94e286a8130f4654b21ebb0f4e13961cbb4ad11457cee6e580aa491770869f python38-attrs-19.3.0-3.module_el8.2.0+6107+533dc13a.noarch.rpm ce3d7ce364f42faf8f140f374fc2c6b86b8ac1525f1eecc46284ccb163c109c9 python38-more-itertools-7.2.0-5.module_el8.2.0+6107+533dc13a.noarch.rpm b9954240f4fb775f2437cd50d7aaf02c1ef12f67ab1c3e10852a3ed162d4cc66 python38-packaging-19.2-3.module_el8.2.0+6107+533dc13a.noarch.rpm 74330fe5521fc7ae865e3b6a72b1d70ff3bb9a9b87b9c175036e1b10fe0e3bbc python38-pluggy-0.13.0-3.module_el8.2.0+6107+533dc13a.noarch.rpm 6b262680e6d6f54f2a8d9c6c9809d8c3be1a6e99e972356ca55604ba2baf2086 python38-py-1.8.0-8.module_el8.2.0+6107+533dc13a.noarch.rpm b90a5a50b4725d7bec2fce2ca3839dd84e2174d4e0f432483f932662289a6f8f python38-pyparsing-2.4.5-3.module_el8.2.0+6107+533dc13a.noarch.rpm b8183ee29c9b87380f599e97c71f07edf1cda5938bee6a977a874f1478548aa8 python38-pytest-4.6.6-3.module_el8.2.0+6107+533dc13a.noarch.rpm a0313b2fa9cd4f58ad51651b34be8bb640264c4e15642b1a2b1118d677c67a03 python38-wcwidth-0.1.7-16.module_el8.2.0+6107+533dc13a.noarch.rpm eb17706402b6bfefbe1df4e114207805a4f8a58452bbd279cc3fdfe05809a9a4 ALSA-2020:4689 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for openwsman is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects. Security Fix(es): * openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwsman-devel-2.6.5-7.el8.i686.rpm 5534335bc469c5924b10f4414306b59a752a7c9b74d77c527e33081444c6434b libwsman-devel-2.6.5-7.el8.x86_64.rpm 94f1ecbe2d620167ed52ca0870be5176556bc4ff241cfbb1589241755e6a4467 ALBA-2020:4703 Copyright 2021 AlmaLinux OS 0 2 None

An update for sip is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-sip-devel-4.19.19-2.el8.i686.rpm c19376dd08a64c9daeb681bc197f2d7b46aa773bb0bde1588f33cd87c3bb4b39 python3-sip-devel-4.19.19-2.el8.x86_64.rpm 539146f7106ca143638a88e85510352edee848d8ff6fb1fc7427a232fd50432e ALBA-2020:1781 Copyright 2021 AlmaLinux OS 0 2 None

An update for ModemManager is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ModemManager-1.10.8-2.el8.i686.rpm 02ce536885daa595b29356e86bea9e4c40caf778958c6721efeb21ca7c18bf4f ModemManager-devel-1.10.8-2.el8.i686.rpm 02533523f7d8b34def328e4c01ce303a39135abdb502fb0cdb2ab032640e81b6 ModemManager-devel-1.10.8-2.el8.x86_64.rpm ce135561a36332a00f8da166b16a24029d69801ed0cf0c96986ff87335439e8d ModemManager-glib-devel-1.10.8-2.el8.i686.rpm 249ff2894e30d9e922f59f2f46efc7ea86d6fa625117643b507a7ebd924bec6c ModemManager-glib-devel-1.10.8-2.el8.x86_64.rpm 73ab8630dbca510848cb7dffbe95966e52fd8a3838647a12f975b4cbd7a92576 ALBA-2020:4832 Copyright 2021 AlmaLinux OS 0 2 None

An update for torque is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default torque-4.2.10-25.el8.x86_64.rpm 27306169478c7127bee9e3cc0c3af34a59382b68a242d918e64728e8b4ccabeb torque-devel-4.2.10-25.el8.i686.rpm 32f1236019281edf66ba219794ccff905e71440d0cf1896728a3f5043661d1a7 torque-devel-4.2.10-25.el8.x86_64.rpm 8c27e1b1c6e64d9924ab6e9d9e841e92959fce1d18142d2887b80e5923f8fa66 ALBA-2020:1663 Copyright 2021 AlmaLinux OS 0 3 None

An update for openjpeg2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openjpeg2-devel-2.3.1-6.el8.i686.rpm 2939a8da049e36c451ba342ca4c058edeae8583c15b7ca31b333c312d720924b openjpeg2-devel-2.3.1-6.el8.x86_64.rpm eeb4f66f3ed80246f224ede20b3498b3217675b0f981508dc2e15eb5904d7ca8 openjpeg2-tools-2.3.1-6.el8.i686.rpm 7adafd55ab2914bf8c798dd914b93d0466915023e3e186de2986f009e34c395a ALSA-2020:5393 Copyright 2021 AlmaLinux OS 0 2 Important

An update for libexif is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libexif packages provide a library for extracting extra information from image files. Security Fix(es): * libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libexif-devel-0.6.22-5.el8_3.i686.rpm 640cba9cb316a4a754df0541acebb6d5db9e2edc5dbed908c9fbcdcfe6d92763 libexif-devel-0.6.22-5.el8_3.x86_64.rpm 4993dc7e75c74c87820338603e926335e02ca74e7ba6c6d20c40ea002d1b3f49 ALEA-2020:4742 Copyright 2021 AlmaLinux OS 0 5 None

An update for the userspace graphics, including X.Org, and Mesa is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libXdmcp-devel-1.1.3-1.el8.i686.rpm 11ba3c3231a0764b575f446547f1bb985f55ab91f8251ed3e84537e2407d1165 libXdmcp-devel-1.1.3-1.el8.x86_64.rpm b4ca12bae7f35d81bf0e51f59f96f4b33d02fab3903b45ba851a6c82d333619e libXvMC-devel-1.0.12-1.el8.i686.rpm 3a19fd6ff59f3c0259c44b430cc83b6c5a780fcc0de21e92650fef696cba455e libXvMC-devel-1.0.12-1.el8.x86_64.rpm ca7f8e4e021cb43f3b5635402ed4977be4b9c506dde7148da24f09973c73fd2e libvdpau-devel-1.4-2.el8.i686.rpm 3ee2189affad058dd141bfa63b4bf403a045369d2aa57cfe1cb667458933e57f libvdpau-devel-1.4-2.el8.x86_64.rpm c7f7b3d3d0161b83867d2d2c624423fb91d0db6084902b38d0c71e1dda2a1da5 libxkbfile-devel-1.1.0-1.el8.i686.rpm 863bb01fa4c7f65004b9221e5ae6fb1173f277d4ea0b3ee82518fc3bee72660d libxkbfile-devel-1.1.0-1.el8.x86_64.rpm b95570b71080a6da18995df7858a1cf1944f2aba5bb731f1bbcfc5932c8b6aa9 xorg-x11-util-macros-1.19.2-1.el8.noarch.rpm 61b969180f84d43a8bce3ffc608c7dc1225d2e363a1d10f787ef51fc42c71359 xorg-x11-xkb-utils-devel-7.7-28.el8.i686.rpm fb301f4b8953f2a0577d4a5270529af911d96f56b64fc24d417025a4e8e12278 xorg-x11-xkb-utils-devel-7.7-28.el8.x86_64.rpm 72e8881e42bc191c92a90dd02581b6148050c704b988f754073e0931f803db38 xorg-x11-xtrans-devel-1.4.0-1.el8.noarch.rpm d28a83aca7419a7b3bf879108bd3bd1c467e20eeacc7d228d7e170c91518a803 libwacom-devel-1.1-3.el8.i686.rpm 300e14ebe1345caa45c02b18dd7c55ceb51648748ca5355c6c300e4becfae5fe libwacom-devel-1.1-3.el8.x86_64.rpm d97d559a04ddf11c277ad6ee914719b55a0a087d0c568f0a0ec2f309d45e052c mesa-libOSMesa-devel-20.1.4-1.el8.i686.rpm 4de912dd8eb56fa3727117cadaa099ad3779cb9cfc61febe43ebacd73753e3aa mesa-libOSMesa-devel-20.1.4-1.el8.x86_64.rpm 7256ab12236fbe3963090e2497cac57e308436c01350c377cbb89bae4dbaf29c mesa-libgbm-devel-20.1.4-1.el8.i686.rpm 44618d5858c75b55e6d3fa452b53e1d504ce9e436a9f3f320fcee3a2f9335f1f mesa-libgbm-devel-20.1.4-1.el8.x86_64.rpm 676be90bc966be013961b74fef75205b49088d683b0b2321d66ea1d6c7c34f9f ALSA-2019:3553 Copyright 2021 AlmaLinux OS 0 7 Low

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. Security Fix(es): * evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459) * gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gdk-pixbuf2-xlib-2.36.12-5.el8.i686.rpm 47a98bb197fd5d61173bdaee8b3124474a8160cd28c9f532e2fea321bf5a2099 gdk-pixbuf2-xlib-2.36.12-5.el8.x86_64.rpm 827a66181d28da1f122381c5103a65dc597d3da3405ccf76c1b9e53896b6efc1 gdk-pixbuf2-xlib-devel-2.36.12-5.el8.i686.rpm 9d668307907456df1e7aadf711824cdfa9755e6bd52cacaa615b0bdec66e036b pidgin-devel-2.13.0-5.el8.x86_64.rpm 8ab7d8b4429262a1ecf5a7dc38902314ef7175245694cfcf9f6c71378fed8cb2 pidgin-devel-2.13.0-5.el8.i686.rpm 4b57945f99fc9888383bc5d40d279492280bd1a299554787079e0edcb0614f2c libpurple-devel-2.13.0-5.el8.i686.rpm 80534f6c16a0afe01e3c22159419cb429448583b7b9365a8dc855639bf73329c libpurple-devel-2.13.0-5.el8.x86_64.rpm 0f0ab87a6cd2ec65ecbc1dd65e79d26a06c42f406806f7ceef3f6cce164222da gdk-pixbuf2-xlib-devel-2.36.12-5.el8.x86_64.rpm 2dbefbd5477cc6dde84b3ef4c0c81d027244cf97e05b3ff4c74881ad76ebeb7e ALBA-2019:3490 Copyright 2021 AlmaLinux OS 0 2 None

An update for ldns is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ldns-devel-1.7.0-21.el8.i686.rpm 2c355f1e2b44488a0048a1a604cf946d2bfba244e01b3b4ab13e0ee471df1c77 ldns-devel-1.7.0-21.el8.x86_64.rpm 310d6874ec5776131ef2a09c6e969c2750ce0d439deb31f2b6c50ae536b669c2 ALSA-2021:1064 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: Regression of CVE-2020-10756 fix in virt:rhel/qemu-kvm in AlmaLinux (CVE-2021-20295) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ocaml-libguestfs-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm 5e5d62c3c36b47d43a0f027959604196cec810ec16cc07fbc8eb567ae2059c2c ocaml-libguestfs-devel-1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma.x86_64.rpm f2a3dedb6b49a9b358fb2389be40c11abfce8a399d5158666bdb612544bf58a7 ALBA-2021:1091 Copyright 2021 AlmaLinux OS 0 2 None

An update for file is now available for AlmaLinux

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats. Bug Fix(es) and Enhancement(s): * ftype detection is not working (BZ#1905906) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default file-devel-5.33-16.el8_3.1.i686.rpm 5c86fa0d23edfc827b9ed34eb2e5577904affc982cca5438f7a15bb41e1c7c2e file-devel-5.33-16.el8_3.1.x86_64.rpm 451dc73b02b377253fbc5a339037717b73534977cb3c93f46eb641ba030a11f9 ALSA-2021:1242 Copyright 2021 AlmaLinux OS 0 3 Important

An update for the mariadb:10.3 and mariadb-devel:10.3 modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb (10.3.28), galera (25.3.32). Security Fix(es): * mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user (CVE-2021-27928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_mariadb-devel Judy-1.0.5-18.module_el8.3.0+2028+5e3224e9.i686.rpm 679dc41d7df4dcbac8317331894e44fd329abd01f2b17411a11415e9b900eb17 Judy-devel-1.0.5-18.module_el8.3.0+2028+5e3224e9.i686.rpm a5d4175218d19bd0a7d766a871e269563144014b89cf744902b3a737cf6e2a91 Judy-devel-1.0.5-18.module_el8.3.0+2028+5e3224e9.x86_64.rpm fa6951b6cf8e47a6ab6d2489273fc502e21622ffbe15a4088d68d90c914529fd galera-25.3.32-1.module_el8.3.0+2177+7adc332a.i686.rpm f9dc54e0f2eeb504be42176a4698123b00cc80cf7f937cee2d34f1db4d1374b6 mariadb-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm deb5f50ad825e24ba591a119bdc0779b788aa2a0c019273f9d3e202342c4abff mariadb-backup-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 6ae35a41d8a9f233327c93c115e331da49d7f35536c52d74e1e2030dd5176f6c mariadb-common-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 8fe7eb2448a30431436a2c80e7017d5c8c3200004fa3a5577be5a8f4a69480df mariadb-devel-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 2c88fcd09a22585da60a3562df2f86492331cbb9431367dae79b0f77b445b7e7 mariadb-embedded-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm ff64bdfd58c2825302b08f0c3248ce01976c1113d326da6075860324067e5447 mariadb-embedded-devel-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 31be9c84d51698eae7a8b4fee1ef827d3099c3b2da2b09100591a75d4be8c751 mariadb-errmsg-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 4950619d3d30ebaf2862f4d78b227673e703f8814499ff063b96624becdc9486 mariadb-gssapi-server-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 77d95cd405e014220c772074a9b6a75e9a77a4ff75dfc0738c2c8e8805b72114 mariadb-oqgraph-engine-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm a3efbf929d890a29441db7a136e1bbdde31b3a2c3bdf051cdc081732bdab97c0 mariadb-server-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 40173bd1a8be55ac4932bfbe020044a16de971d61f47f993572e1e9d26d87439 mariadb-server-galera-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 20574fadeca5b5071171321238dbdd232898befa861afcf495331a62d47d99ce mariadb-server-utils-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 9a5b0a778fe5d7a6975caa8bc19acf5e6bc0ae68ea9484bf5d7159698c56f9db mariadb-test-10.3.28-1.module_el8.3.0+2177+7adc332a.i686.rpm 4f486efa3dc5e1d30926c96bf57d7fe79f9fa0b2a8bb96863fad67deb873942a ALSA-2021:1756 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for qt5-qtbase is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp (CVE-2020-17507) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qt5-qtbase-static-5.12.5-8.el8.i686.rpm dd7587451fbd401f3328e83bf34e820c535111e81db4096ea2a1ab1796cbeb2a qt5-qtbase-static-5.12.5-8.el8.x86_64.rpm 31466c04213825248203c9df233600ceeafa2df326028ee12c121fba39280a21 ALEA-2021:1945 Copyright 2021 AlmaLinux OS 0 2 None

An update for qatlib is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qatlib-devel-20.10.0-3.el8.x86_64.rpm 60e23f2c96240b305de884272da279e3c8496edf8e1c98693fcbdc725554dcbc ALSA-2021:1585 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for glibc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding (CVE-2019-25013) * glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read (CVE-2019-9169) * glibc: assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326) * glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228) * glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop (CVE-2020-27618) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glibc-benchtests-2.28-151.el8.x86_64.rpm 43f2ad16da1d1ba5ac0abf9bc2a21438d0a20567002cb56e11c2d3383484ce81 True glibc-nss-devel-2.28-151.el8.i686.rpm 2822d0623798d01ca715ca58b0a945458076fe061ee5d7d359851e000e0ae6bb True glibc-nss-devel-2.28-151.el8.x86_64.rpm cf02e82989091960fddf6f0341d2a352e461d21f0e68b196e21c756f79c2e1bd True glibc-static-2.28-151.el8.i686.rpm c020b1add5cff9d208b1d130b08935404c7e4131c61f36a8b7a596f87f342a95 True glibc-static-2.28-151.el8.x86_64.rpm b9ae48f593fbc6377e9b09483fecbb433f8f7c218c0b7d21ad578cfeb623c77f True nss_hesiod-2.28-151.el8.i686.rpm 54fa67272d984c8129bda7a5fb96a590194cae1a53e3b29c92bde4abf5116556 True nss_hesiod-2.28-151.el8.x86_64.rpm 95eae731e4b3ac372de3f5fcba61919c57de140a2a586aa2256d045f6f665efc True ALBA-2021:1801 Copyright 2021 AlmaLinux OS 0 2 None

An update for libgpod is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libgpod-devel-0.8.3-24.el8.i686.rpm 0d61bf18ce3fcbf2090da34019454bf43b1589ddc4266098991ab335cb0564f4 libgpod-devel-0.8.3-24.el8.x86_64.rpm 11a4d5234055a60074d32455a2eae0c73638722b1abb055c968921ba2a52f2f5 libgpod-doc-0.8.3-24.el8.x86_64.rpm 679da1b07d1896bfd0f6f8fbe0df90eecc2441276b93889ad7ee29e37871af22 ALBA-2021:1579 Copyright 2021 AlmaLinux OS 0 2 None

An update for gpgme is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gpgme-devel-1.13.1-7.el8.i686.rpm 88902a8d9f5296633d5fb89b7ecffd3e60f62306b5c9cf8d14260667ce4111db gpgme-devel-1.13.1-7.el8.x86_64.rpm bcd3224d1bea48c24e41913681c4c65b438c7f72de051e5d854957735efc68b6 gpgmepp-devel-1.13.1-7.el8.i686.rpm 5ae2fda2bd58b63dda701151e03ad7debcc0337e5c65402853acfd2704d56b97 gpgmepp-devel-1.13.1-7.el8.x86_64.rpm aff786e3ee8760b9b4802e7e0e7ee697f44de1b4ec9c46e91fe2660a6a43dbaa qgpgme-devel-1.13.1-7.el8.i686.rpm 3d1c320ab51b0a6408439757c10e609ccaa27ff423503aed85c2bb6c9aa15b04 qgpgme-devel-1.13.1-7.el8.x86_64.rpm 25b0c28fbec9fb01a53b73f1d116f88dc6477173e8d196dcd424bac265493e5f ALBA-2021:1628 Copyright 2021 AlmaLinux OS 0 2 None

An update for tpm-tools is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tpm-tools-devel-1.3.9.2-1.el8.i686.rpm 208a463f39b64944bd145b4bbdf34101975dc76a5a2ee092ce015eb2442ea81a tpm-tools-devel-1.3.9.2-1.el8.x86_64.rpm 14e60ab53a22b662c74b01417c834c4456a0605ead58f6349465ec0b8a6f279c ALBA-2021:1858 Copyright 2021 AlmaLinux OS 0 2 None

An update for sendmail is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sendmail-milter-devel-8.15.2-34.el8.i686.rpm 8d1608ea8f63c963abb07c38f14c9a23f9041538c151b98a94bed044d97deee0 sendmail-milter-devel-8.15.2-34.el8.x86_64.rpm 2d4f5e5a5b320a4885d85bceeca69bd8dc5a7df426b45ac0f74a90ddbf953478 ALSA-2021:1881 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for poppler and evince is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. The following packages have been upgraded to a later upstream version: poppler (20.11.0). (BZ#1644423) Security Fix(es): * poppler: pdftohtml: access to uninitialized pointer could lead to DoS (CVE-2020-27778) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evince-devel-3.28.4-11.el8.i686.rpm 1d222d1be01bf9317e523117403202b00234658740fba21659327c29461c1523 evince-devel-3.28.4-11.el8.x86_64.rpm 6bd29c996b184c6da0a634e1a5d270c7b0489ad6462a756893a3cc5cb1cc830e poppler-cpp-20.11.0-2.el8.i686.rpm 4f827736c6542649e0d32c72b4b3b1b20785f20c80b2c11970ddc1201879a9d7 poppler-cpp-20.11.0-2.el8.x86_64.rpm 2c342a803a62a0aa9f7c8e17ef81211fc361c3514e9ae398465fd564623123e1 poppler-cpp-devel-20.11.0-2.el8.i686.rpm 36d63b4da09e453a4ff4431953511383ed89776d2efe7c492f7fdf9cf1b8587c poppler-cpp-devel-20.11.0-2.el8.x86_64.rpm f3ae108e6dec90fd7964335c43da2a4546ea5684a381da24b994981b716f7023 poppler-devel-20.11.0-2.el8.i686.rpm 4dc2ed376c4683f3db7ceabd6891967b431b85c6fe0e59cd247a8a79e72a6058 poppler-devel-20.11.0-2.el8.x86_64.rpm c16af004d62df5f8e7088ba1b82fd8823e162c9943a08ec5abc4ebfd170cc6bc poppler-glib-devel-20.11.0-2.el8.i686.rpm c0f0a993f0fbd34910daeb045a1af5e47284064d0bc40d19be18a98c045b9f92 poppler-glib-devel-20.11.0-2.el8.x86_64.rpm 1e220521711b75e5955298b20334dbdf8a5bd74689b0cac0ae93c0c16556f072 poppler-qt5-20.11.0-2.el8.i686.rpm 9519555fbcc9f09f7b09ae45024fa7f5e63422d1005a2852030ec194acb7daaf poppler-qt5-20.11.0-2.el8.x86_64.rpm 6797fa284bc59d586493deeb6bb20bff3696573be51de5e55550e2b95c04cfcf poppler-qt5-devel-20.11.0-2.el8.i686.rpm 3eed8f4ea2934e836d454df14edfffe3a88b80ad82ceab0c91dbe3238ab7c574 poppler-qt5-devel-20.11.0-2.el8.x86_64.rpm 68a64663858701a736c4f81e0976c2b6e16bc26aaec05b78ba3fd90b316e6e85 ALSA-2021:1762 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637) * QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c (CVE-2020-27821) * QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443) * QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure (CVE-2020-11947) * QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092) * QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c (CVE-2020-25707) * QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c (CVE-2020-25723) * QEMU: e1000e: infinite loop scenario in case of null packet descriptor (CVE-2020-28916) * QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets (CVE-2020-29129, CVE-2020-29130) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_virt-devel hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 44081d49cd93640fd464e8339060c61cb345544dc3132f31a2c8e1a7b9028050 hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 819f803864ebb68822b6a88fa8b6b1ad542f500433133dfcf65adacd9572207a libguestfs-winsupport-8.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm d7e5c694ba59b033699d3663b3bec40628d38224e3af11629bb6bab4a9af75e7 libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm f3d7ca410a042583a92c168682347a9ef0fc92bfa1c1ab07736019dafe68533b libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 6354d76fcb3f9b45659f5abe06ec2f3a59420619b66d3967949d93b3a76a49f7 libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm 1b48736426106336aecd3b251329dca6eb67d703a3a906c30576599a9680019b libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9bc6d3b6e0d134a5a7de632819e813a13e097ae1a64e13db825de02e32432d4b libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 23560d59a287e25765ab899402271a2d16867ccd05ee250da0f4881a1ae1c6f8 libvirt-dbus-1.3.0-2.module_el8.3.0+2048+e7a0a3ea.i686.rpm 7f249d320a4a9aaf035b912e8ae92422ad8ce950c8b4d81d6b76f57c4fce4e17 nbdfuse-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 11269039fd4c610f1242766a2f22bbddc3fb2d48812bf69be8807ee1f5fde355 netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm a1fedfd353c9753eb41616cfa441b34fbcc8da5d0926a40212761a5476a8a77f netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm 2382e8ade6974ff73d169757ba744f1688d25130570f61eb6ecbeddec08a7dab netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm eb138f7be869d051491087b5952d125d192a791e8e30ba220ede3ea10cb170c5 ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 76d510992a5287aa39b4e0ac2c32d159bf538939c5f1259e556f3b60a8b10a6e ocaml-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 26043e6890509f23a8fdc057139784a75bdbaeaf3749312c0b7c55f5e4de4cf0 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm bb63d67abe6a449c55fd4e86fa5185a717fbd749f17c81116883c09bb717cec6 ocaml-hivex-devel-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 56e0dc460155001ec742a36439bd29231e012bfe2d10e0bc77504545136eab42 ocaml-libguestfs-1.40.2-27.module_el8.4.0+2358+630e803b.alma.x86_64.rpm e373abe7ca3469fa1bdb6ad54755a428954efa999ef7ac5d86b90f7b59428653 ocaml-libguestfs-devel-1.40.2-27.module_el8.4.0+2358+630e803b.alma.x86_64.rpm a7cc8f85a723c8146ee09297cf85ac1c8019588a8c7b2bbb828b80f405b9152d ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 81e8aa76e8fe02843a25a15d3bf0a298c2e3440293cfbf374d9057efd41d3418 ocaml-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 04265e542952aae8322f3b07ff2c6000c428fcbb7ad1f79748d2ce775393c723 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a6e2690904c352b2870ad742ef7a20f2c279c636d94d9dd188cc0188b6ca5ad4 ocaml-libnbd-devel-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.x86_64.rpm 759caa5f4e13d6768c828599fe7c062cdb7ac80d25f73a77838a18d1e075adac perl-Sys-Virt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm a3797b45589b7e3893f31c09019d4c49843ea12639ea4b2ac55dcdb628129597 perl-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 400f2b24792d1089f25b7ca348e920e446e5e937c5b045f62b0ff1d822e6b376 python3-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 645bf234d87d42f39f8660188d206a5629eb79187e32cf9992f676b19a2268b8 python3-libnbd-1.2.2-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 766c411da263bf152270879d9a78016d5922211ff3122359850ec8bd8dd36d26 python3-libvirt-6.0.0-1.module_el8.3.0+2048+e7a0a3ea.i686.rpm 3429c79ca9fe926608002c0d03a8b37accb6b31ae0b65be2f575f57dde1e0381 ruby-hivex-1.3.18-20.module_el8.3.0+2048+e7a0a3ea.i686.rpm 9df5cd455229977e457b222c9f8c934c8f68029568b9cf7448ff7b6982cffeec sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm ae762fce191d248de990f617397e2461da48486d4fedc6dc264feaa9cc05c721 ALBA-2021:1708 Copyright 2021 AlmaLinux OS 0 2 None

An update for kmod is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kmod-devel-25-17.el8.i686.rpm fcce3504b2063ba759cce32633123b63ee4184219bc7fd390eb180080b8d0438 kmod-devel-25-17.el8.x86_64.rpm 8e0c84210060857a4eaf657f3695e2ade0e94957985989ee257096226424c90e ALBA-2021:1798 Copyright 2021 AlmaLinux OS 0 2 None

An update for cups-filters is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default cups-filters-devel-1.20.0-24.el8.i686.rpm d56effc52da999fca4642d4a2f53f1e68d4ad495e7e04a5b10635741f158e1cd cups-filters-devel-1.20.0-24.el8.x86_64.rpm 44ffee866afad459efc3073af02ee08c83a2a7f39b4f0d2c8d168172e3b14d63 ALSA-2021:1578 Copyright 2021 AlmaLinux OS 0 3 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362) * kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811) * kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (CVE-2019-19523) * kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (CVE-2019-19528) * kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431) * kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114) * kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464) * kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314) * kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356) * kernel: NULL pointer dereference in serial8250_isa_init_ports function in drivers/tty/serial/8250/8250_core.c (CVE-2020-15437) * kernel: umask not applied on filesystem without ACL support (CVE-2020-24394) * kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212) * kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284) * kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285) * kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow (CVE-2020-25643) * kernel: perf_event_parse_addr_filter memory (CVE-2020-25704) * kernel: use-after-free in kernel midi subsystem (CVE-2020-27786) * kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835) * kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974) * kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508) * kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322) * kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege (CVE-2021-0342) * kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in drivers/media/usb/gspca/ov519.c (CVE-2020-11608) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.el8.x86_64.rpm 1c8ed1d8352bc2eb29d51393a0db0822f6b364e426e8fa853a2c76def6c5d49c True ALSA-2021:1804 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for the userspace graphics, including X.Org, and Mesa is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Mesa provides a 3D graphics API that is compatible with Open Graphics Library (OpenGL). It also provides hardware-accelerated drivers for many popular graphics chips. The following packages have been upgraded to a later upstream version: egl-wayland (1.1.5), libdrm (2.4.103), libglvnd (1.3.2), libinput (1.16.3), libwacom (1.6), mesa (20.3.3), xorg-x11-server (1.20.10). (BZ#1878160, BZ#1886648, BZ#1887654, BZ#1887655) Security Fix(es): * xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345) * xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346) * xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360) * xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361) * xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability (CVE-2020-14362) * libX11: Integer overflow leads to double free in locale handling (CVE-2020-14363) * xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability (CVE-2020-25712) * libX11: Heap overflow in the X input method client (CVE-2020-14344) * xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of dix/pixmap.c (CVE-2020-14347) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libinput-devel-1.16.3-1.el8.i686.rpm 39e1260023f8522143b24b8e34d89fb8eee23b96b49b6a88a284df713d213e31 libinput-devel-1.16.3-1.el8.x86_64.rpm d4e8336bfa5e8d01848538bfb4d9a8900389c702205ba24124e3b4649a2af618 libwacom-devel-1.6-2.el8.i686.rpm e3e0725a33b4507174708ead9ffce7d270613468d9aba06c3ce88bfb321f0beb libwacom-devel-1.6-2.el8.x86_64.rpm 486c9962a01d3b291c5a1a5d9c0d2c010dbe2b3fe3039b021a01a77418af5622 mesa-libOSMesa-devel-20.3.3-2.el8.i686.rpm 471bf48ccaf9bf2ad9512782b82b9ffc2b12311087a94eb610896d0f708ef622 mesa-libOSMesa-devel-20.3.3-2.el8.x86_64.rpm 4d866018fe4354bc4789ed29f41e253c034b5cf6563d98cb2d637f3a73a3e31b mesa-libgbm-devel-20.3.3-2.el8.i686.rpm 1e3e2aa1a0b5f0cd5b811cf78c23a59dbaa151c8720ba79b870f848965d4d5db mesa-libgbm-devel-20.3.3-2.el8.x86_64.rpm 3d923975a56e2d1bb74e3498b23660b7ada0934d4aefbae0adb2394e460b486e xorg-x11-server-devel-1.20.10-1.el8.i686.rpm 19551232f7a85953b82c7e4ec57fb7c698056fff3d93f2c4ba3be8ded993d6d2 xorg-x11-server-devel-1.20.10-1.el8.x86_64.rpm 6d8e73967f8f7f21d6d6ce925ff51e8a7760d45e7248f270bf7e57bca7f7ebad xorg-x11-server-source-1.20.10-1.el8.noarch.rpm 868a17bed90a5b55365610656de1a89ddfbed3f7b7063a839803c885be0d711a ALBA-2021:1994 Copyright 2021 AlmaLinux OS 0 3 None

An update for corosync is now available for AlmaLinux

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Bug Fix(es) and Enhancement(s): * corosync crash with compression enabled (BZ#1951049) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default corosync-vqsim-3.1.0-3.el8_4.1.x86_64.rpm 9d8329bb0c0da1aeaf0d6eb17709c35e49938adfc679c45a0fb84c9cc4cbeb5e ALBA-2021:1655 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsolv is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsolv-devel-0.7.16-2.el8.i686.rpm e1fbf0967af6d8245554982fa5bc9cb887ff7277cbdbb4519fd983e8980c1937 libsolv-devel-0.7.16-2.el8.x86_64.rpm 7a1918dcd33ed29bbfe86af17dab7a69dcd24c690af40171d182a7396b6595fb libsolv-tools-0.7.16-2.el8.x86_64.rpm 6e4821205630a4842d74e1839bcf1d8d4dfc426039135f7126f642bba50899bf ALBA-2021:1958 Copyright 2021 AlmaLinux OS 0 2 None

An update for qt5-qttools is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qt5-qttools-static-5.12.5-3.el8.i686.rpm a2a42d1413f4023a17318081213249229b2c0805aae814b9028a9437f4b00a4a qt5-qttools-static-5.12.5-3.el8.x86_64.rpm ab2fe28de2990f01fc67f585e309bb0f008a87a33144d1bb75bcbb606f9dab30 ALBA-2021:1948 Copyright 2021 AlmaLinux OS 0 2 None

An update for ibus-table is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ibus-table-devel-1.9.18-6.el8.noarch.rpm 5b09b00a701b066169593c2d8ad7975105e52a639276be69c414bf19587ea465 ibus-table-tests-1.9.18-6.el8.noarch.rpm d4049c5dfc7fba7cd2d75b7684857b3466e4a4f6bff54edde2a41bcc5bb9d566 ALBA-2021:1967 Copyright 2021 AlmaLinux OS 0 2 None

An update for fontforge is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default fontforge-20200314-5.el8.i686.rpm 959054846817180bca5689ef0f179dc1541a3dbc057faeea1231d5443b02558a fontforge-20200314-5.el8.x86_64.rpm 629ee37d353017a38c0f9e43cf534e64f95349cb82cba0985b2eedffed5932e3 ALBA-2021:1696 Copyright 2021 AlmaLinux OS 0 2 None

An update for intel-cmt-cat is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default intel-cmt-cat-devel-4.0.0-0.el8.i686.rpm e1d9767945a2677c21076c886b891e6ec39f169c8a26c597ed58efffe51c1e73 intel-cmt-cat-devel-4.0.0-0.el8.x86_64.rpm 4d0054326e1b6f9f042414a6bd1bd09796643fa8d04d15e3559491119e45ca99 ALBA-2021:1629 Copyright 2021 AlmaLinux OS 0 2 None

An update for libstoragemgmt is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libstoragemgmt-devel-1.8.7-1.el8.i686.rpm 2765a6d964bc19924e23a9087a311b6095eb45691c8a2cacf857828f36a7dcdf libstoragemgmt-devel-1.8.7-1.el8.x86_64.rpm b63578339ed5fb7f18c351813356e6f28f42ffa1c897ce877371a8450be1c5d8 ALEA-2021:1618 Copyright 2021 AlmaLinux OS 0 2 None

An update for iscsi-initiator-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iscsi-initiator-utils-devel-6.2.1.2-1.gita8fcb37.el8.i686.rpm 070d908a54bf1325469b33c8033facaeb0df62245666b59ea89fae46ceaad105 iscsi-initiator-utils-devel-6.2.1.2-1.gita8fcb37.el8.x86_64.rpm b26d63eca719e25e94c4a0b5a48bfdcd47b6cf157802a313c370969f46c36da0 ALEA-2021:1777 Copyright 2021 AlmaLinux OS 0 3 None

An update for openblas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openblas-Rblas-0.3.12-1.el8.x86_64.rpm c231394b91b3a8a612dca01edbbd3a45e844101755de36e6b87f302fdd923b11 openblas-devel-0.3.12-1.el8.i686.rpm bd5fc503b561e3f23d3eeade37ce1f1494ada33f43183d4c7c0cc8bb42ac97ae openblas-devel-0.3.12-1.el8.x86_64.rpm 8db5da872f789c96b20d44093bb2c4ad7020339633ec16476ecf5fd4f14a6fb9 openblas-openmp-0.3.12-1.el8.i686.rpm 4a4f5601420cb5393ac245e8339b4f496d8cc7f8b423916bf722783dc210b62f openblas-openmp-0.3.12-1.el8.x86_64.rpm 7d008cbf63b068b61d5539e3c020e790cb5d30c8091ee1a7833bbe5fec8283f7 openblas-openmp64-0.3.12-1.el8.x86_64.rpm 82108fa241fef74e9ee24a7b2183b9b0b52c5fe236703c0418fb46dd53fdfa19 openblas-openmp64_-0.3.12-1.el8.x86_64.rpm eb4fc0b414395eae021e6e9e4173a1c4ea9f2f698a37420275cf4078eb306da0 openblas-serial64-0.3.12-1.el8.x86_64.rpm 812642b46120ecb417f718da0d17b38ea14bf4287ae4bff5b6d1ce3f6667d2a9 openblas-serial64_-0.3.12-1.el8.x86_64.rpm 767d78ec2d8dd613019603245cec7f7d904eed758928ea0ac12f20b0ce61027a openblas-static-0.3.12-1.el8.i686.rpm caa1c99db5e7412276d3588e160fa8fbf880fd1fb6103790f1ff47ca0c9d57f0 openblas-static-0.3.12-1.el8.x86_64.rpm 9b027f60b5188a39659f0b5c962def80a82270580449041c3ab0171b681fefac openblas-threads64-0.3.12-1.el8.x86_64.rpm 8f42f34a98a0192c02fc70db4a9ced30daf57650809a3eec08ed87355ae6b71c openblas-threads64_-0.3.12-1.el8.x86_64.rpm 3c0325455d759beb9edebe490f8a39dec1a7cd011b85649db3d6fb563ab56d15 ALSA-2021:1887 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for dovecot is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: IMAP hibernation function allows mail access (CVE-2020-24386) * dovecot: Denial of service via mail MIME parsing (CVE-2020-25275) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dovecot-2.3.8-9.el8.i686.rpm 1adef135ba134e6c69617ae46d132245edbf72ec9fad7a0b95599ec91abb90eb dovecot-devel-2.3.8-9.el8.i686.rpm 826807eaf189312f9934de88c82ce7ed571fcb3dc090a7ce8b93c23d9d5f9de6 dovecot-devel-2.3.8-9.el8.x86_64.rpm a0af14e8fa58b9a79fc6b1a65b97c29f9e64fc950a99e59c85f5870d52ca54ab ALBA-2021:1984 Copyright 2021 AlmaLinux OS 0 2 None

An update for java-11-openjdk is now available for AlmaLinux

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Bug Fix(es) and Enhancement(s): * Prepare for the next quarterly OpenJDK upstream release (2021-04, 11.0.11) [rhel-8] (BZ#1942311) * java-11-openjdk: JDK: Oracle CPU 2021-04 (BZ#1943233) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm b006087117440848752db39e891884ad2f3dd51b05b37384f8b2ea6ed092fcba java-11-openjdk-demo-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm a7345540963018d0e36c66513fe64b7b928b1f29d16247e6ac5a37a08d6a6bcb java-11-openjdk-devel-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 5f2869f272f9a61e4482b09c9a665998d77ae02ef080b6520b33fc364d16b884 java-11-openjdk-devel-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 6d3e6d494ee8a46f95d037943c3617e191e9ebecc78117e46505eddbae18f008 java-11-openjdk-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 4a2b1b5bafb1556484def643fb5568a158c0e3322f055f42c0ed7bbf4b280aa5 java-11-openjdk-headless-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 1dacf42d980d3bb3be3d5868f0b9e45aa6a5dea1d0023d4dfc1b1b48a1f32d4f java-11-openjdk-headless-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm f8afe7b517b186dd20a5a8ffd5f708342109202408fce5ece4f9a4b0a580fb73 java-11-openjdk-jmods-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm e33b1e95599f76305eb280119554dbeeb948ae4b0a5677d6dc9385c0edf8d9b7 java-11-openjdk-jmods-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 8045c2eaf446258b90136d2494c2fd56c7b9b4e1d3618993ddf4b892c69e0204 java-11-openjdk-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 96d3d4f261cd4b5f62d90fb634420f5c407edb33e6b5dabffd303aa6294e1d39 java-11-openjdk-src-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm d6e5aff7596da91138350a54cd4ec705ddfe4a4829231ecaa71756e2cc8189c9 java-11-openjdk-src-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 86990475e4c418402ce3cee8de30f0a5b9b9647070dd577b731ca0e8a28f5ea8 java-11-openjdk-static-libs-fastdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 5efc54f96823593060ecf37b8efd16a2640bde5510b49965265eb5aefa313673 java-11-openjdk-static-libs-slowdebug-11.0.11.0.9-2.el8_4.x86_64.rpm 864f8534bfed95b43b8e2d16928fd1c654dc8a1b0669ece0b64684c89811f4c4 ALEA-2021:1938 Copyright 2021 AlmaLinux OS 0 2 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2020.5-3.20201208.gitb27b1af.el8.i686.rpm 5c7eb674963404a0cafd7b5828c5bebe7e4aa118f7b70a70b76df2f245079a96 spirv-tools-devel-2020.5-3.20201208.gitb27b1af.el8.x86_64.rpm 5ea4799f35cf7acf56187b79db5a05232403e942bc9a407de24c6ec7d213a7f2 spirv-tools-libs-2020.5-3.20201208.gitb27b1af.el8.i686.rpm 0e212d2b509332a1ff35a13a576848f9038fd44c45933dece7dae8043b19cec7 ALSA-2021:1972 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for pandoc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Security Fix(es): * cmark-gfm: Exponential time to parse certain inputs could lead to DoS (CVE-2020-5238) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pandoc-2.0.6-5.el8.x86_64.rpm b97dc64711360de0f157ea20061334ec4c2e27f5146bf18fcbff500ed1c89fa7 pandoc-common-2.0.6-5.el8.noarch.rpm 3ba5b63cf461a486cd5d71f2f09a20a1ed91ed0d7dd639fcd44f3ca3d2fb358e ALSA-2021:1789 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for gssdp and gupnp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. The following packages have been upgraded to a later upstream version: gssdp (1.0.5), gupnp (1.0.6). (BZ#1846589, BZ#1861928) Security Fix(es): * hostapd: UPnP SUBSCRIBE misbehavior in WPS AP (CVE-2020-12695) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gssdp-devel-1.0.5-1.el8.i686.rpm 65de2457c3ed8c0b0b882b5e4bfaa351b02fce4c6b6753033051bd84b5e12cc9 gssdp-devel-1.0.5-1.el8.x86_64.rpm 87acb0ee6c60f51022d71656d7dd587b1e2e3cfb233c31ea9357392f303fad8a gssdp-docs-1.0.5-1.el8.noarch.rpm 6c844d13ebf582672013a54345f097d1b093ecfd603f783357e0d1f6d7ba64ea gupnp-devel-1.0.6-1.el8.i686.rpm b68798acfe0d63fecf7e00e5cc8fe8af58d7a4e33bdb1154766050caf5c0ae3b gupnp-devel-1.0.6-1.el8.x86_64.rpm 8424734b592bd74be800098a9d0309f5cd43a2d3c2c606916e85d85e754023bd ALBA-2021:1788 Copyright 2021 AlmaLinux OS 0 2 None

An update for bcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bcc-devel-0.16.0-3.el8.x86_64.rpm 16ce643f99738973d69e356ab8f4518b485b5f450a8155f32dff25d5fc4dd321 bcc-doc-0.16.0-3.el8.noarch.rpm 0b13f49b719259195b246996c65e76499849c8a221cf58812e498d2f823c9467 ALSA-2021:1574 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for NetworkManager and libnma is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. The following packages have been upgraded to a later upstream version: NetworkManager (1.30.0). (BZ#1878783) Security Fix(es): * NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.30.0-7.el8.i686.rpm ca27422c571cb1a95887b1ced8805f42418414bcd4fcf2894e8b5ebcfbfc468e NetworkManager-libnm-devel-1.30.0-7.el8.x86_64.rpm 60fe0653bd5eaae932c358737e2a301b1acd6f64931ad234e283cb6013026218 libnma-devel-1.8.30-2.el8.i686.rpm 04e9501ae3b032f3a5b20b2c90c51a917f30d526adb9cf4b3711ed05d257dd1d libnma-devel-1.8.30-2.el8.x86_64.rpm 65c415c46198a79aae4427211a152c5c99e041597553fe18755450b83cd51450 ALBA-2021:1812 Copyright 2021 AlmaLinux OS 0 2 None

An update for crash is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default crash-devel-7.2.9-2.el8.alma.i686.rpm 049ab7104a6436102633a9b8fea6c897103ce11b0a32a0669964f5b43c3e86a7 crash-devel-7.2.9-2.el8.alma.x86_64.rpm fab84d094fd765156a62e94ec37cc25c1f70bbba0b1ddff9965f8603afcfbcdd ALEA-2021:1900 Copyright 2021 AlmaLinux OS 0 2 None

An update for memkind is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default memkind-devel-1.10.1-1.el8.x86_64.rpm 391134e436a97f62615927f679efb03438a3b03e9628fa1f2598e7ec28dfaf9e ALEA-2021:1779 Copyright 2021 AlmaLinux OS 0 2 None

An update for libreoffice is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libreoffice-sdk-6.4.7.2-5.el8.alma.x86_64.rpm bf59f3796a6207e96d6b0e932952ab7f939a721979c462f41ece91e707742334 libreoffice-sdk-doc-6.4.7.2-5.el8.alma.x86_64.rpm 72fe898632a034968659509c9d1f2a3e1dbdf89638cbc49c90a5bce47bd99bd3 ALBA-2021:1653 Copyright 2021 AlmaLinux OS 0 2 None

An update for iproute is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iproute-devel-5.9.0-4.el8.i686.rpm 59eb4f1354ab02c14f22d90a669b65b5b9f49cd03a6e6e4f88dec4c42f68210b iproute-devel-5.9.0-4.el8.x86_64.rpm e97d2a9c73990854e84ea5c278f89fb569ed2a2b5a2e7a6f1efbf794c644ab26 ALBA-2021:1802 Copyright 2021 AlmaLinux OS 0 2 None

An update for gnome-bluetooth is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gnome-bluetooth-3.34.3-1.el8.i686.rpm dc92e02e84b69912fbb24d8a1bc661a99d96b06c19cf38b55792e7cff526c0b2 gnome-bluetooth-libs-devel-3.34.3-1.el8.i686.rpm 670e49cf50a9f5a06ed05151e1edbc4a289ca141e85fa2943623d1d62f59817d gnome-bluetooth-libs-devel-3.34.3-1.el8.x86_64.rpm 1025a886c4d62e35fac57b4bcfc14dde8a43691eedd98fa0ebfd829be77a457f ALEA-2021:1870 Copyright 2021 AlmaLinux OS 0 3 None

An update for libecpg is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libecpg-devel-13.2-1.el8.i686.rpm fdd98bd5044c25afc9308bb552739f530ac3afab55c06a1175f8639ff413e18f libecpg-devel-13.2-1.el8.x86_64.rpm 5c95360bd74f4d6eb117263b4e1168075b2f4f6fc31b7fc432feb739b485c0a1 ALEA-2021:1784 Copyright 2021 AlmaLinux OS 0 2 None

An update for openscap is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openscap-engine-sce-devel-1.3.4-5.el8.alma.i686.rpm 3e6c7f4f6c569e1c8bd185261aeb523df2baa4960b1b314eaa34689a9058fd32 openscap-engine-sce-devel-1.3.4-5.el8.alma.x86_64.rpm bda7ba3e43ec1709c76560cf962a2fcda123d2c27a7a40557199fc9fd0a89b41 ALSA-2021:1586 Copyright 2021 AlmaLinux OS 0 7 Moderate

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304) Security Fix(es): * webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951) * webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543) * webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584) * glib2: insecure permissions for files and directories (CVE-2019-13012) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default OpenEXR-devel-2.2.0-12.el8.i686.rpm 27bcb05c66fb5821c922286f70d29539ddabf8836eeef94d31ad1eda93f09abe OpenEXR-devel-2.2.0-12.el8.x86_64.rpm 083f6a55d3e431ef926acc574ab80089d4568e46517c31d25b6920d1f8ceb82b accountsservice-devel-0.6.55-1.el8.i686.rpm 6063728b22778bb594271afcb617ba7eba53fa13613a0a3d0d1760bb24970114 accountsservice-devel-0.6.55-1.el8.x86_64.rpm 5191e5e26466e31be685ca5ff96a364226d6ab0f9ca9cd324e99834601a6a1a0 atkmm-devel-2.24.2-7.el8.i686.rpm f3031407fc12a65477220e8c29d4c5904681062998801437744936592b3c2939 atkmm-devel-2.24.2-7.el8.x86_64.rpm df934c0630beea7147d0c5d9782cfaa8100c50e8a46675623e7b1a949efd0796 atkmm-doc-2.24.2-7.el8.noarch.rpm 32da3c070956adcb7ec5fe547f957936c11e26e401106cd1e1d4b0a42bbbc981 cairomm-devel-1.12.0-8.el8.i686.rpm 5e4d1390a14c4078ec2349d3363f09af1ae7afee2f80617a87668262aa8c9120 cairomm-devel-1.12.0-8.el8.x86_64.rpm f1ed0bed55ded0ff08027416e55b1dccb508410903f361dd2c5454604ab7bdc7 cairomm-doc-1.12.0-8.el8.noarch.rpm c0d2e86db66a2535f6cc4cf530226e0cb4a3aab436804723add4feb7c8d35a25 enchant2-devel-2.2.3-3.el8.i686.rpm 986502bb7731b97f848716efe6d8352663398766955bfbeb4d1160c702f7b42c enchant2-devel-2.2.3-3.el8.x86_64.rpm 9cd7e8c96e26becbc55a851d02a5a6f78767974d853ae831fbe4e48b006031e5 gamin-devel-0.1.10-32.el8.i686.rpm eb662d5292e64cdf90dbdc03caefa19cae1da5acc31db80b66dd5751c75532c2 gamin-devel-0.1.10-32.el8.x86_64.rpm 91029b3570793bc1e90e6c4df44a791da8ee3fba5e98cc071eab3ec4fe7acd6c geoclue2-devel-2.5.5-2.el8.i686.rpm cfeac00a258dcb75e85d9ea9a58f852c22a93037b44dfbd9d830ea46a0e1df3c geoclue2-devel-2.5.5-2.el8.x86_64.rpm dc7b6271c5797b0f6109666c76fdf94ea4d4acb9be3b58521efddb733440a524 gjs-devel-1.56.2-5.el8.i686.rpm f7c80fa32280af579cff206d5d195f1066de290585b7c9863f92015b25accbb8 gjs-devel-1.56.2-5.el8.x86_64.rpm cc78795997d41a3ee75430f5fa51fc81751f3f8697c3c8d4552e1b9c5238dcf4 glib2-doc-2.56.4-9.el8.noarch.rpm 7567e30a7729c99bc06a05130fbfc8f9dc5e285bd1c090079dda7ba41295e1f0 glib2-static-2.56.4-9.el8.i686.rpm 09933f6ac4ed3a5243d3daaa87dfa3000f364ddb1c2d2bc54c9e6f8349fdc7c5 glib2-static-2.56.4-9.el8.x86_64.rpm 08994dc5c1a09e432683d5b328c822ca1333318ac84e63aba8e3e4f8e7cad5e5 glibmm24-devel-2.56.0-2.el8.i686.rpm 7a0036fd13ce9f45c785df080e723511d6476a990ff90cd60cc7c8df4b6ce2a2 glibmm24-devel-2.56.0-2.el8.x86_64.rpm 9f9017b2e7ca7e76178146806facbb4809551fb170e026730d6c60711a6f5a01 glibmm24-doc-2.56.0-2.el8.noarch.rpm a6fb154f2d7710a870b7efae7667771d82fad0e8dca9f8c88efe2286bc5836eb gtk-doc-1.28-3.el8.x86_64.rpm 0875c088fe8f348e7dac736238e47d69e4b5a04a8dff7d84fa8e922adcc18786 gtkmm24-devel-2.24.5-6.el8.i686.rpm 13ef21d780868a3ca9a386c175b86a2f224c364cea795644912dfc3fad2e8909 gtkmm24-devel-2.24.5-6.el8.x86_64.rpm a70aba13460c1789c75d20f37c2bba7e2e8d93624f6013fa8748cd954c3d59fb gtkmm24-docs-2.24.5-6.el8.noarch.rpm ec2bcfd210f07b22d6b4af7c42dc4fb8cfb6aca17530d852dc8dfb6d50d6c535 gtkmm30-devel-3.22.2-3.el8.i686.rpm f83f6bff8beb4b37632e0905eb549592d52dda983a70a90d8b98d5976669a23c gtkmm30-devel-3.22.2-3.el8.x86_64.rpm 1f03f9349a8e128f1c6e2dc1f900993741c7ad1ba246edc44e04268b10519399 gtkmm30-doc-3.22.2-3.el8.noarch.rpm 838d9437c59a0a5dcc11752f2d615a16b282fb0093ed01047da8fcb3ab181d64 gvfs-1.36.2-11.el8.i686.rpm bf0494ddf1913bebced2e17292bc7d1ed79abdaa246b6b9400cb84c2620b700c libdazzle-devel-3.28.5-2.el8.i686.rpm bc21f95056f935095b35d8fc2495f64db895a8c6969085552a41956f739b858a libdazzle-devel-3.28.5-2.el8.x86_64.rpm 35ecefc4aee6089719846df0f145d4411c9633401f2b7f344d1d3eddae446b3a libepubgen-devel-0.1.0-3.el8.i686.rpm 28f509200de494dac3df01d5df8a73c01da15f73399dcad5a02bf419c1e30c5b libepubgen-devel-0.1.0-3.el8.x86_64.rpm 9b21397ed70df7036789f20ba284dc6793812f53425646281c1d8f9827417866 libsass-3.4.5-6.el8.i686.rpm 7053411ba3a669fefb3df871638016832c298b9d4e3c1341fe5ec02c3220ea2c libsass-3.4.5-6.el8.x86_64.rpm 96551de111bdf9311fc02b718966e2116e57e7e9fe1b336bdbd8f1a30c893f84 libsass-devel-3.4.5-6.el8.i686.rpm e460314242fe38f9a8e0fff9d387336fb45bb9b782399943e1af63bb90787447 libsass-devel-3.4.5-6.el8.x86_64.rpm f7e11dade12d9fc0d8c55bb3de42f319625c576170e96631f879ff5f3e096f83 libsigc++20-devel-2.10.0-6.el8.i686.rpm f9c04c622508ba1a280d5de4c5aef1679f1cdb91b0a7772f9ab5d167d994d60a libsigc++20-devel-2.10.0-6.el8.x86_64.rpm 030ed5e6f89fa0683e4213320fd540d451b751fc11427c1142ce3ffdd891ea50 libsigc++20-doc-2.10.0-6.el8.noarch.rpm ce564a74dbd28bf47584a702b85f2b1f00b926fd8db3b38ed7887d87fbe22462 libvisual-devel-0.4.0-25.el8.i686.rpm 5f459707adfa7708666bf20541d65fea8ffa04a3fb69d19c53034bd0ef15e085 libvisual-devel-0.4.0-25.el8.x86_64.rpm b6fecf2e5a963ac1709339c9a81aa84378e362de77df1ce48c95c9fb9a07cfaf mutter-devel-3.32.2-57.el8.i686.rpm 859816c0574c5060fa41bd4fb9b5f02c444300c80ec92b1b8452ab428baf59eb mutter-devel-3.32.2-57.el8.x86_64.rpm 0edd87d6291dd2a8757632752974a08ce332560c7ba15c393fe2122d4eafa63b nautilus-3.28.1-15.el8.i686.rpm 4374f42377cf0821eada9c1bcdbd4a0d7396f8a80c87ad232af129e77c909d16 nautilus-devel-3.28.1-15.el8.i686.rpm dc96408133d43152760e138d132a3e691cacb24829e19d87e6932c9805c192f4 nautilus-devel-3.28.1-15.el8.x86_64.rpm 9e2dafc8fa90c1b96053e00123e734cc3e07087c4f72bdfe40c3c6c1e7fbf9b0 pangomm-devel-2.40.1-6.el8.i686.rpm 9ea87b64f08c5ac3785c1f566371d62ce8841d351a3dc5bbabeb612200571f23 pangomm-devel-2.40.1-6.el8.x86_64.rpm 4769f1ca7a7c4148fa33cd643a5ab35e4bfb1631f5d19efbe76e2e2c5c698dfd pangomm-doc-2.40.1-6.el8.noarch.rpm 72b1a494752737554dd1b03a321bd14541613dc625ee492a4c64f67acf22fee7 soundtouch-devel-2.0.0-3.el8.i686.rpm aab4fa40b82e3e45330b759575492205a91733118068e77d2f402b5e9c9cb4b2 soundtouch-devel-2.0.0-3.el8.x86_64.rpm 31ffed4e3ed96d1bfeb668f52185aa4e15ae5a6cfb24ae925608a9fd438a6c55 vala-0.40.19-2.el8.i686.rpm 1d3cf8c650ad6d91212084c3cddfb401fa69ffb93af5f6e725211e1e800caa99 vala-0.40.19-2.el8.x86_64.rpm 6c78b2a12f4fa060ddee60116a372380c009f06ed1447a9d39858b8794ad96d3 vala-devel-0.40.19-2.el8.i686.rpm fd4e69d92cd3fd6dc5aaefe0201fe9746892e85f59e8f7950c2109ed73423a37 vala-devel-0.40.19-2.el8.x86_64.rpm c182b791493b59f722bc4f2be2f7bfc44dbc8b59943c2bdb12b940bba4ad2c56 woff2-devel-1.0.2-5.el8.i686.rpm ae9a720439728898a6a00dc37fc58ffbf086a92e39a464d3a6943b70187fd69a woff2-devel-1.0.2-5.el8.x86_64.rpm e190798c0779fad8d6cd8d97e6ec411842e57cab39334809fd9f12a8eede518d ALSA-2021:1675 Copyright 2021 AlmaLinux OS 0 3 Low

An update for libdb is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libdb packages provide the Berkeley Database, an embedded database supporting both traditional and client/server applications. Security Fix(es): * libdb: Denial of service in the Data Store component (CVE-2019-2708) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdb-cxx-5.3.28-40.el8.i686.rpm 8bc1ab5eecec787897b8bf09aa959d98aa976edc8e5732d4b9af3abbe819c934 libdb-cxx-5.3.28-40.el8.x86_64.rpm 1f3b8cb79e7669003aad8d5de6e86c0818d9f2045f746bbf3e75214231b91e95 libdb-cxx-devel-5.3.28-40.el8.i686.rpm 908a665fcc6593de04f1b7d2b4deb812aa6257654f4fc19cb3ae52b22033bada libdb-cxx-devel-5.3.28-40.el8.x86_64.rpm 5b5e6cdf0ee36643caa869d7b722e63ca60f0b644b4d73a0c83e2e8cd1746444 libdb-devel-doc-5.3.28-40.el8.noarch.rpm eec677456b3d11b619514509a07be226d92e1fa538f4323a54d831f92403e713 libdb-sql-5.3.28-40.el8.i686.rpm 67d10783cddae6190152c5b95904d3395ce03dab1c0c709985e0cd311235b9ea libdb-sql-5.3.28-40.el8.x86_64.rpm 003dc47e0d61e1e59cef2bcd7d8989f6631eb79ed96a4a28c4c5f75a87050ef4 libdb-sql-devel-5.3.28-40.el8.i686.rpm 1de0d13608ff855d5afc48fdddc62a11c29b843ffc7665e3314d0d6ecd637103 libdb-sql-devel-5.3.28-40.el8.x86_64.rpm cb00202ae1dd0bec9821e7cd64992427ceaa4bc45e57805ee3047542c8545b07 ALBA-2021:1703 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsepol is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsepol-static-2.9-2.el8.i686.rpm 1d8ae5bc56ece0d0c773164731943b2de0e27f3fa2b01e1cd2c1e06fbe59713e libsepol-static-2.9-2.el8.x86_64.rpm f247ed3dfc937526f97ade8ac91b9fe4ec21b2808c55c4ea38071b656044b058 ALBA-2021:1841 Copyright 2021 AlmaLinux OS 0 2 None

An update for udisks2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libudisks2-devel-2.9.0-6.el8.i686.rpm 782d762b795cac04531f2806dc19601c2ffb266a0a3277c2cc5a8f774924321d libudisks2-devel-2.9.0-6.el8.x86_64.rpm 92eb0954b8a6c9a66535359bc9d3847bff35e0c93a3d13408db49c3583f782d9 ALBA-2021:1601 Copyright 2021 AlmaLinux OS 0 2 None

An update for json-c is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default json-c-doc-0.13.1-0.4.el8.noarch.rpm ec285efbf88824e18f78d936c5dd5a22fd216e2a12d2e9b4690b23a650da69f7 ALBA-2021:1760 Copyright 2021 AlmaLinux OS 0 2 None

An update for libmpc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmpc-devel-1.1.0-9.1.el8.i686.rpm 6491759f23c151ad6b6962847bfd1da43083346402eda17f026f1019678fd724 libmpc-devel-1.1.0-9.1.el8.x86_64.rpm 881171441198a38ef560ab5f60a7b2ac472ab1ef3d7cba2969c163d8ebc96739 ALEA-2021:1685 Copyright 2021 AlmaLinux OS 0 2 None

An update for device-mapper-multipath is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-multipath-devel-0.8.4-10.el8.i686.rpm 10ebed943172c8ccd074ebaf91a17d957b53d6c9c305e629314ea1b9d50f4335 device-mapper-multipath-devel-0.8.4-10.el8.x86_64.rpm d34d723b7e9761efdda4ebf2137f58587355426a172735708cbfb9afca7b64a2 ALSA-2021:1734 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for shim, shim-unsigned-aarch64, and shim-unsigned-x64 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments. Security Fix(es): * grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled (CVE-2020-14372) * grub2: Use-after-free in rmmod command (CVE-2020-25632) * grub2: Out-of-bounds write in grub_usb_device_initialize() (CVE-2020-25647) * grub2: Stack buffer overflow in grub_parser_split_cmdline() (CVE-2020-27749) * grub2: cutmem command allows privileged user to remove memory regions when Secure Boot is enabled (CVE-2020-27779) * grub2: Heap out-of-bounds write in short form option parser (CVE-2021-20225) * grub2: Heap out-of-bounds write due to miscalculation of space required for quoting (CVE-2021-20233) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default shim-unsigned-x64-15.4-4.el8_1.alma.x86_64.rpm 53edabf45d130e941b33f902afc225ec68b6b3d4a7d034e872d49b3dcbccd256 ALEA-2021:1965 Copyright 2021 AlmaLinux OS 0 2 None

An update for py3c is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default py3c-devel-1.2-4.el8.i686.rpm 5502b0d7fbcf56b6fe1ba897bd1acefcbc110cddeeb22c98f7be5cde73a60cc9 py3c-devel-1.2-4.el8.x86_64.rpm 17fddb56243b77da515cac673623dbad2a56bc529260e618b00b9a78fb9c1abd py3c-doc-1.2-4.el8.noarch.rpm de740a23dfab0afd1f859c50c2228fa7c128e1436c5f857a62d7e121887c4a2c ALBA-2021:1966 Copyright 2021 AlmaLinux OS 0 2 None

An update for nasm is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default nasm-2.15.03-3.el8.x86_64.rpm 1b5f671b935571795ebb917ec1bc8c1477a348bb85fb6a9a606a4fd622537b43 ALSA-2021:1924 Copyright 2021 AlmaLinux OS 0 3 Low

An update for spice is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. Security Fix(es): * spice: Client initiated renegotiation denial of service (CVE-2021-20201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spice-server-devel-0.14.3-4.el8.i686.rpm 3d87b31ed29da2745b8ad1e518bcf32e3c203368870e90718db9dcbc6060b701 spice-server-devel-0.14.3-4.el8.x86_64.rpm eafbaf7623020e1608709990410ac7092956c27dc2f603c36b84b41cf202a144 ALBA-2021:1711 Copyright 2021 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.3-1.el8.i686.rpm 58238135600959935682fef964e00c3c7a1ac0693b0345f36ce4384cef6f7ae3 sanlock-devel-3.8.3-1.el8.x86_64.rpm 1c351fa7fc8e70d384832a3278584787387044f19e20dbdc4324ecbe23c0fc64 ALEA-2021:1580 Copyright 2021 AlmaLinux OS 0 2 None

An update for libarchive is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libarchive-devel-3.3.3-1.el8.i686.rpm 890528fdf5afd08ee44768d5c4d360df5fa72277bb7d862b7d2770d3655fafdc libarchive-devel-3.3.3-1.el8.x86_64.rpm 61e8be8c1fc0bd0330af1fce7cd5973f92cb6610a098aa93141b712f2e69729b ALBA-2021:1961 Copyright 2021 AlmaLinux OS 0 3 None

An update for sombok is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sombok-2.4.0-7.el8.i686.rpm 5613d8f44441761a6b8a8e86c5cd18aff10b0eee75f7c48ac3cde87c178e5e76 sombok-2.4.0-7.el8.x86_64.rpm 43654d5988fb234641881c68d18c5ff3c0654808c8428d8c0f214f6a920f738b sombok-devel-2.4.0-7.el8.i686.rpm a17bff8c46a6f0fc86f8a51f74c2c3ee8685abd542f602cd84d29e494c0c9956 sombok-devel-2.4.0-7.el8.x86_64.rpm 8cb2b57d5fe715a11453d38d190839b0a8d3db947f68ab5baf470d51c4a20586 ALBA-2021:1914 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsmi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmi-devel-0.4.8-23.el8.i686.rpm 93f588a348b4946b9cc902c25ea1e387453261fe57577fd44050a18ba6817921 libsmi-devel-0.4.8-23.el8.x86_64.rpm 820b8f1ce6d1ad06cc499004cad6b90696832f4a36cc20f3c9d8718c80f0ae56 ALBA-2021:1616 Copyright 2021 AlmaLinux OS 0 2 None

An update for elfutils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default elfutils-devel-static-0.182-3.el8.i686.rpm eecd3938919ccca192f18eede354bde9ffe6607f3832a41cb0a68e96639b0d29 elfutils-devel-static-0.182-3.el8.x86_64.rpm c17378724e1fd19e768905a0c514ae63f48d25637089a1b15a322a8a47b7dda8 elfutils-libelf-devel-static-0.182-3.el8.i686.rpm 5bbcba09ebb173b6c859011e07fcc91c78cd91aceb84b0f452714eccf42fcb71 elfutils-libelf-devel-static-0.182-3.el8.x86_64.rpm 3437e636ccd6d818e51b6d104ecf45345a202466e4f96bd544cfccbe8f73ead0 ALBA-2021:1603 Copyright 2021 AlmaLinux OS 0 2 None

An update for zlib is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zlib-static-1.2.11-17.el8.i686.rpm e681ac7f88e9e0111e7bff5e9082db7a86dc96dd503665185788f0655ea1deae zlib-static-1.2.11-17.el8.x86_64.rpm df4ab449b1f3801235eb6151f20faf1f25d280f3edd019be6ba877997b2be86e ALEA-2021:1716 Copyright 2021 AlmaLinux OS 0 2 None

An update for accel-config is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default accel-config-devel-2.8-1.el8.i686.rpm 1a0be5cfd1d4ab83d2935fe4f9993a84febeff3f468bc2e36c868a599bf80ff8 accel-config-devel-2.8-1.el8.x86_64.rpm 006385cad36d54e92deacf4baa0108d24d87286b21638bcf213916cc4e376817 ALBA-2021:1962 Copyright 2021 AlmaLinux OS 0 2 None

An update for meson is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default meson-0.55.3-3.el8.noarch.rpm 9c78651e771567cd96d70136036f58ca43dd83aafd39c73e7619bab9dc3961a7 ALSA-2021:1647 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for samba is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version: samba (4.13.3). (BZ#1878109) Security Fix(es): * samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472) * samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318) * samba: Unprivileged user can crash winbind (CVE-2020-14323) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.13.3-3.el8.i686.rpm 6af030548546455679c0c05729d7c34a6e289e216d9a7ffcec9261bc81d30635 libsmbclient-devel-4.13.3-3.el8.x86_64.rpm e317684a3a0e2124f78b82e06b14ae6c0344410759357f0f59e6e595ea46a949 libwbclient-devel-4.13.3-3.el8.i686.rpm 2acd42b28a28ff2d11e61882f72bb6ed65e4137bc1a7ffcb743eb191f03a63ea libwbclient-devel-4.13.3-3.el8.x86_64.rpm dc86605fefd8dcf4d1611db6406e3c0f42da54f29f860c75ebd4226394860503 samba-devel-4.13.3-3.el8.i686.rpm 902fc13eb7cfde84c8a52a3e51d12bc52b5f0ee3009de62c5805af825289add6 samba-devel-4.13.3-3.el8.x86_64.rpm 94a27eeeb5d19e6eeec9f66dc93cfab79edb6ab6cf5c114c4a395a45a14f4f87 ALSA-2021:1968 Copyright 2021 AlmaLinux OS 0 5 Moderate

An update for mingw-binutils, mingw-bzip2, mingw-filesystem, and mingw-sqlite is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

MinGW is a free and open source software development environment to create Microsoft Windows applications. The following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475) Security Fix(es): * sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168) * sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434) * sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630) * sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631) * sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw-binutils-generic-2.30-3.el8.x86_64.rpm ff69aa8fbbfef22dc1f95a94ee8e39b3e6e39b6c6fe58a4b70de9eb72a2bd3d3 mingw-filesystem-base-104-2.el8.noarch.rpm 8b13e0c940af1e9dee09a98b88f965e0cb204f907d006436b2d21bc3d8a5736e mingw32-binutils-2.30-3.el8.x86_64.rpm bd46328106c3173bd255701447eb54e602ecf66de27fda6c9a4b0a94a4065a8c mingw32-bzip2-1.0.6-14.el8.noarch.rpm d786e38669ae3888d4218f9eedeccc74180dc03d1241c6dfbe785284264a221c mingw32-bzip2-static-1.0.6-14.el8.noarch.rpm 5ead7341f4fb765581cdd6ed8c8723c66ff788c5da29668d64725f534c683cab mingw32-filesystem-104-2.el8.noarch.rpm f38cbadb0f2be95dfa1d8d39406f47b8189ee2c9a6dcb5fb9f7d94af8b8ab8ff mingw32-sqlite-3.26.0.0-1.el8.noarch.rpm 65f32ec0f6e867edfd68bb7ac3fd821d0fcedd524af472842e626a3bc360c7a2 mingw32-sqlite-static-3.26.0.0-1.el8.noarch.rpm 35e6013c5508afd841454c97effa0f29159773a8535ab71d53a722c8733dc905 mingw64-binutils-2.30-3.el8.x86_64.rpm e69659adc97e487b5dc5ce0e7b1dd8e1d3b8e11859d08b6fea1a9dac5a10e8e7 mingw64-bzip2-1.0.6-14.el8.noarch.rpm d559a1e5bfcb89b17e2a95ee8b6ba9dc47de5cdb53829f6d20753747dc593be8 mingw64-bzip2-static-1.0.6-14.el8.noarch.rpm defcfa4844146febc70e056d73cbd2cf0722d9a0812c5d4685526f3ba0978b28 mingw64-filesystem-104-2.el8.noarch.rpm 38f6f73b1264786cf8ceec2cb28c884d1131a48111253107328ec51ec770e439 mingw64-sqlite-3.26.0.0-1.el8.noarch.rpm 946945c5351083959ac0f55d6f3f0ef0eb505e7494d920cf630a32b68faff352 mingw64-sqlite-static-3.26.0.0-1.el8.noarch.rpm b51047f448ee5b19af3f75e4276808dfeeabf9f4fd1a23710d93bfec49580e8a ALBA-2021:1964 Copyright 2021 AlmaLinux OS 0 2 None

An update for python-sphinx is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python-sphinx-locale-1.7.6-2.el8.noarch.rpm e1a17a8a3c2c90f9b50477806d55d61c638285423e8b44c263097eb2b9de40fc python3-sphinx-1.7.6-2.el8.noarch.rpm 6a8d810ed9ee19293cddcf6772d4a128e832b31e6ed2d4d5f268b03e76ca3143 ALBA-2021:1689 Copyright 2021 AlmaLinux OS 0 2 None

An update for librepo is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librepo-devel-1.12.0-3.el8.i686.rpm 03be9fad4cec1235c54a1a01b474f95393c8c426931495cc8863d6cbae6392b0 librepo-devel-1.12.0-3.el8.x86_64.rpm 079593f6bb6a3b325b98b1f769aa0f24220e23448e250f308fc57b156f2e3805 librhsm-devel-0.0.3-4.el8.i686.rpm e01435931fb3b180098113b72fe4b187e8c6fe6b9cb5a780989ed154e33e36a7 librhsm-devel-0.0.3-4.el8.x86_64.rpm 739ead7265ec54d39937a06dfa3d2f6a4a684b61fc77ac1432214499f2c22934 ALBA-2021:1589 Copyright 2021 AlmaLinux OS 0 3 None

An update for hwloc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default hwloc-devel-2.2.0-1.el8.i686.rpm cec2c0879d6dc55c5b581f2b082046e879538607ff21a6c7136bdd2dc48f0894 hwloc-devel-2.2.0-1.el8.x86_64.rpm fbc8025989becfe48d53738e59e72d7afb6b5712064428e6645639ae2d346872 ALBA-2021:1806 Copyright 2021 AlmaLinux OS 0 3 None

An update for dyninst is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dyninst-devel-10.2.1-2.el8.i686.rpm 4b4d79027359bebce64aaa91de4ac9533ea5cdb7eb095aa93d262e84b8394185 dyninst-devel-10.2.1-2.el8.x86_64.rpm 8132956844b8e06bbf7a593f0bbb0e2080acd042b77de66bdb2982ab17126fc1 dyninst-doc-10.2.1-2.el8.x86_64.rpm fa748d60e0c4f4671af236addf6c4ec2e7d059b8b072e488d854b86ee1b1bd0d dyninst-static-10.2.1-2.el8.i686.rpm 63bf0d888520e8400cd035514560d8cd81a400d2b685813c92ddfe9f0ee12dc4 dyninst-static-10.2.1-2.el8.x86_64.rpm c34c7fef076c407975b9125257d7256732b761f71b621a3f540694f115019295 dyninst-testsuite-10.2.1-2.el8.x86_64.rpm 79098a8cfdf72dab881ca74f17613a633b025ea39a147280758977394b6f90b0 ALSA-2021:1598 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for bluez is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. Security Fix(es): * bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE (CVE-2020-27153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bluez-libs-devel-5.52-4.el8.alma.i686.rpm 53cd8d54555bd05cef2c8d82c1c1ee706b19a51e0cf9d8c9d7a1dea5fd84e377 bluez-libs-devel-5.52-4.el8.alma.x86_64.rpm b746f511f883d9823cdd23f4a605cea569e02c7ba492540e69e17f306c0654ee ALBA-2021:1908 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencv is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencv-3.4.6-6.el8.i686.rpm ff9e51a20b48bb160617776e642b7fb77ff9dc634ca12ed1ab034cb644216361 opencv-3.4.6-6.el8.x86_64.rpm 5da432e4dc35d3a5990b574d97f3dc82b942474d7dada2bc2fade0fd7ba489cc opencv-devel-3.4.6-6.el8.i686.rpm e8afbb34fd67fa3f367f020ce1d1475f18c55ce59525f73a8a147a4bdc6512fd opencv-devel-3.4.6-6.el8.x86_64.rpm bd96afb37f5120373061752cd3bad44683524fe2d5f256c4424736affa46a46e ALEA-2021:1720 Copyright 2021 AlmaLinux OS 0 2 None

An update for ima-evm-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ima-evm-utils-devel-1.3.2-12.el8.i686.rpm e01eac6e328f13015a479c33edfbfddb2ac78fb8e2fb1319f15bf95157106f70 ima-evm-utils-devel-1.3.2-12.el8.x86_64.rpm 593b238573a1f7e1e79846cea02a5f36db1d4ce3f00bee3d91094ec3361f9cd9 ALBA-2021:1848 Copyright 2021 AlmaLinux OS 0 2 None

An update for dconf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dconf-devel-0.28.0-4.el8.i686.rpm 14d1d15d785a5ab68729cfe2041e54eaa9002e144312ff09f7977d58dbbd3e6d dconf-devel-0.28.0-4.el8.x86_64.rpm d86430fb0401ba33e2f75a241cee53e8804b88efd29311fd16624aa8ca31c8a1 ALEA-2021:1712 Copyright 2021 AlmaLinux OS 0 2 None

An update for libpcap is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpcap-devel-1.9.1-5.el8.i686.rpm b1478178e0b0565db1a394fe893b96f320f3d482f9cba9cfbba0444fc54b3184 libpcap-devel-1.9.1-5.el8.x86_64.rpm c6def90e8c4753913d085617b5ee3bbbc07d0c4aa0b43a1aa9151153c0640d68 ALBA-2021:1605 Copyright 2021 AlmaLinux OS 0 2 None

An update for libpwquality is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpwquality-devel-1.4.4-3.el8.i686.rpm 34c67c121d4c11d6970fba31a6bbce3fd11442ca518137199e7c16b84108b3a0 libpwquality-devel-1.4.4-3.el8.x86_64.rpm 6b9d7875928e54809a2bab5b945c15e765cc4a3319c3c59a74b36b15366dfe91 ALBA-2021:1590 Copyright 2021 AlmaLinux OS 0 2 None

An update for quota is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default quota-devel-4.04-12.el8.i686.rpm e61f59c7298b1d40c895310171a42a84d8638b3da8a6681d7cb3266cf7f81434 quota-devel-4.04-12.el8.x86_64.rpm 92e15b97a054b29f91275d0884dd9a8f60e36d3aeaa472fc6bf9ebb6820a49fd ALBA-2021:1912 Copyright 2021 AlmaLinux OS 0 2 None

An update for ilmbase is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ilmbase-devel-2.2.0-13.el8.i686.rpm 81d56f8bbcf7d9958ae82eb296269c124af140a723d7f71e37ced67f2498b980 ilmbase-devel-2.2.0-13.el8.x86_64.rpm b3264c368a86ef49c004a0ca9eb4d4b696be4010422fe9956030882b6686544e ALSA-2021:1842 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for raptor2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fix(es): * raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer (CVE-2017-18926) * raptor2: malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common (CVE-2020-25713) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default raptor2-devel-2.0.15-16.el8.i686.rpm 78c256072a68a6f65d4da07e5947f5cd8b3093c0f2f17cc0fb02640709726f83 raptor2-devel-2.0.15-16.el8.x86_64.rpm bfdc1188ac4e0c8f3af9478adeb8f2fbf41990bab52ebba7e0ad898c01c5c489 ALEA-2021:1928 Copyright 2021 AlmaLinux OS 0 2 None

An update for libuv is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libuv-devel-1.40.0-1.el8.i686.rpm 6fd5a7a00bc1d9e921016b10458cf14d49917086614658841eae08e57fb83398 libuv-devel-1.40.0-1.el8.x86_64.rpm 22158f18a7bd7c9692c1fdeac6d385e388961619d47aa14b38fdcceec7ddb8d4 ALBA-2021:1883 Copyright 2021 AlmaLinux OS 0 2 None

An update for texlive is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texlive-lib-devel-20180414-20.el8.i686.rpm f32e73b11a19787bd6c9f230f10f386dd2276966f8160a26d11a57e21181f1c4 texlive-lib-devel-20180414-20.el8.x86_64.rpm a7b6d60e2178b87695884f814d965545342b53d90e6e925a15eae8a9854d38dd ALSA-2021:1849 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for freerdp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The following packages have been upgraded to a later upstream version: freerdp (2.2.0). (BZ#1881971) Security Fix(es): * freerdp: out of bounds read in TrioParse (CVE-2020-4030) * freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11095) * freerdp: out of bounds read in PRIMARY_DRAWING_ORDER_FIELD_BYTES (CVE-2020-11097) * freerdp: out of bounds read in license_read_new_or_upgrade_license_packet (CVE-2020-11099) * freerdp: integer overflow due to missing input sanitation in rdpegfx channel (CVE-2020-15103) * freerdp: out-of-bounds read in RLEDECOMPRESS (CVE-2020-4033) * freerdp: out-of-bound read in update_read_cache_bitmap_v3_order (CVE-2020-11096) * freerdp: out-of-bound read in glyph_cache_put (CVE-2020-11098) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freerdp-devel-2.2.0-1.el8.i686.rpm 8da088728d08d5c1ee780eb4c28c6fe0896a5c80832ddf7375ffad79a4f7be62 freerdp-devel-2.2.0-1.el8.x86_64.rpm 2ee662cf77b8f3ffb5e7c931b5104bc3ba49a3d43547314999a31ca196c78752 ALBA-2021:1571 Copyright 2021 AlmaLinux OS 0 2 None

An update for gcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-plugin-devel-8.4.1-1.el8.alma.i686.rpm 7e18e298c4e7d5273781b50b8a4fea9310b81e9d597995e20a601b9d78d695c7 gcc-plugin-devel-8.4.1-1.el8.alma.x86_64.rpm 0ea6dc6580f82cff91a13ce0037fc7cb0eba219d1446f0ee2c2494adf2287eec libstdc++-static-8.4.1-1.el8.alma.i686.rpm 8d409e828ba1c7ce5ddd839f461a40c19941416a5821f8020cf7f097b591a836 libstdc++-static-8.4.1-1.el8.alma.x86_64.rpm 42d8c01e08c53edf3a9f256527301243a3f432db572d1e5bce66d9e16df7a5a0 ALBA-2021:1693 Copyright 2021 AlmaLinux OS 0 2 None

An update for augeas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default augeas-devel-1.12.0-6.el8.i686.rpm 6fa4eac19e497fc39566ca51ba008130ee0e93529c0d98a440ddb536e7fea9bd augeas-devel-1.12.0-6.el8.x86_64.rpm 1ac6ad5e110ebc5640728281e7f886357f1488573716fc52e627cd0ace09b582 ALBA-2021:1595 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.15.1-5.el8.i686.rpm 6a1484163a9f97dc74c0b29f76aaa201af929366868f5a931208ae870bb5b7d3 opencryptoki-devel-3.15.1-5.el8.x86_64.rpm bf66b7f15352abe806b8b80b95745a1a7f4c67a757131e492acf86aee689fc1b ALSA-2021:1811 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for libvncserver is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fix(es): * libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247) * libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839) * libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397) * libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405) * libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvncserver-devel-0.9.11-17.el8.i686.rpm 7776e8cd00c039de134e7adadd8d7aa02265b9a949117e1dc5fbcb842de564af libvncserver-devel-0.9.11-17.el8.x86_64.rpm 3208117cf82714bfcb05156e8f1cf08fb9c299884dd49b60144800b3f21432b2 ALBA-2021:1765 Copyright 2021 AlmaLinux OS 0 2 None

An update for brltty is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default brlapi-devel-0.6.7-32.el8.i686.rpm 01fd770fbaf08e5428bacfd350e8fae4ea166295240bc2279f2eb34c28c6271d brlapi-devel-0.6.7-32.el8.x86_64.rpm 7a271b0920c0c52234cdf466548bc555cd87d26534556efe1a3dcf57c915a62f ALBA-2021:1820 Copyright 2021 AlmaLinux OS 0 2 None

An update for libblockdev is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libblockdev-crypto-devel-2.24-5.el8.i686.rpm 15572303f20d7cea2669fd9a5b35d762cf51b6c5f66d3fc157eb5ab7beda00b1 libblockdev-crypto-devel-2.24-5.el8.x86_64.rpm d5ed9e4ebf17adebfa4a21c67fa38c6ccee28ec45b3ebc17ad0a48ed2853cdf0 libblockdev-devel-2.24-5.el8.i686.rpm 4a31715e1c691a4e22635a53a2830dab7e78f815e69df67f0522d42395fe3c73 libblockdev-devel-2.24-5.el8.x86_64.rpm caefb3053c997c7302ed46668722f246c32250d690d67023a24dc8aed6d21fd7 libblockdev-fs-devel-2.24-5.el8.i686.rpm eb50a2a50d3ae93d094fb286be592c454163d783f259d6b1fc068a718aec00b5 libblockdev-fs-devel-2.24-5.el8.x86_64.rpm 6b0c44c5ef83b7ba328d865d174fcfe9648364835d25a39c9c6ce56a8dc2189b libblockdev-loop-devel-2.24-5.el8.i686.rpm 23aea693becb40fb45e710fa08615b7d6eaaa889ec5e22c217606052df980c7c libblockdev-loop-devel-2.24-5.el8.x86_64.rpm 8b92e429ad253ceae99a44d8f31db5fd42242ef050d2ae7f04c2f3ab5bf4169e libblockdev-lvm-devel-2.24-5.el8.i686.rpm a4c8b469f700344c9692398bb3ea7949b539e038a2d413311ff53279cdf87f80 libblockdev-lvm-devel-2.24-5.el8.x86_64.rpm 5b873493c378101a57ae4e8dd51204d2a3fba623955fd7ec2a79da1c62c566a5 libblockdev-mdraid-devel-2.24-5.el8.i686.rpm 2e548d2c8875b42e43778c7b91c0337fdf835f18d286ab4f69b792dbfc1965ad libblockdev-mdraid-devel-2.24-5.el8.x86_64.rpm 8889ecc9e7cd17451e1a41d37a5a71bfd19c73829edff9348eee6aeb0c91f3e4 libblockdev-part-devel-2.24-5.el8.i686.rpm e8c22e5821b9024b7e3ea47e1e415f517e07755f2128d817f689baa8941da428 libblockdev-part-devel-2.24-5.el8.x86_64.rpm e63cd38b3bc7656790cbd73cdc669e82850bbeaf0b99447f50458189eb35e832 libblockdev-swap-devel-2.24-5.el8.i686.rpm 4f700f601d3bef6ebd631fe24594d615c181df93824fd7f678ab35572e999f83 libblockdev-swap-devel-2.24-5.el8.x86_64.rpm 237f544aa6e09a69076bb5e51c4b739217f3e5bb5ec7147e6c88f61f7ce0be24 libblockdev-utils-devel-2.24-5.el8.i686.rpm 51549b986b3b8284debb4ecf1335ca6f955678f2966618c23047c967cea5ea0b libblockdev-utils-devel-2.24-5.el8.x86_64.rpm 286e6a215f46785f20a6448acf04d878b47e243c24f3e7d1a54dff921a99fd69 libblockdev-vdo-devel-2.24-5.el8.i686.rpm 1b039fa86dd2c7459d2cc864b7f199b9f78a4ce0977fc71264fac8ee8ec6e84c libblockdev-vdo-devel-2.24-5.el8.x86_64.rpm a0af6ca90b7adc39e35ffd836cb04e94893909c3b9a1a133052f3a5b1de8e99b ALSA-2021:1752 Copyright 2021 AlmaLinux OS 0 3 Low

An update for evolution, evolution-data-server, and evolution-ews is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications. Security Fix(es): * evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evolution-data-server-doc-3.28.5-15.el8.noarch.rpm 4fca4ac0b1d0b6809a9880a80d115b299941a9735324ca45743d918ff54d4a64 evolution-data-server-perl-3.28.5-15.el8.x86_64.rpm 0e663e8525018cade797ee7995619f2e121644a713d5036d1d279ffde1c50ed5 evolution-data-server-tests-3.28.5-15.el8.i686.rpm a297a18e43e87a9ac6fbc062a55075c987f4044b7ced5edffc49f4a53691c69c evolution-data-server-tests-3.28.5-15.el8.x86_64.rpm de6705377f346b3011ebd7315e9bb7130498db0e6bae52c45889a5b0c5701429 evolution-devel-3.28.5-16.el8.i686.rpm ae80270f0ea5ddcc6097c2874ce69082668f45a38f9852cf9285e48610f0777b evolution-devel-3.28.5-16.el8.x86_64.rpm 6446d7494260dae7be0623571c05ef9147e7bba37b0be6d1bcf0a9cc262c9243 ALBA-2021:1970 Copyright 2021 AlmaLinux OS 0 2 None

An update for scotch is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ptscotch-mpich-6.0.5-3.el8.i686.rpm b3582eeb8824e54268560cc666dbb21a160be1e221ca353e8cab2090a98d7e0b ptscotch-mpich-6.0.5-3.el8.x86_64.rpm 75734ab3cbf3c2677639bd4c661f471b8a0d6b94e2743299d7a7afeac1763394 ptscotch-mpich-devel-6.0.5-3.el8.i686.rpm 2807987390af597073a2a7f4a6941d8ea033602f3ca43538c1f1679f9e5697b7 ptscotch-mpich-devel-6.0.5-3.el8.x86_64.rpm 41256a24de7e5e0152e8dafff1d9c46c48576dfa5ab21f1b200d0af5ace07b23 ptscotch-mpich-devel-parmetis-6.0.5-3.el8.x86_64.rpm 528c3d460fb79fb3f9954f0a44b1dfbaafddca08244c73b4c01ff63b45eca76f ptscotch-openmpi-6.0.5-3.el8.i686.rpm d4c4ab7ff751739bdca479c157223a4f73c7558498b5e25b77d50f6caeed01d7 ptscotch-openmpi-6.0.5-3.el8.x86_64.rpm 71ffb4aac7f4fb4bf6d4031e93bd0e0da4f8b7f32b3b3e2e27717c3f7d4ef414 ptscotch-openmpi-devel-6.0.5-3.el8.i686.rpm 704e4cc9658ca4fd5d8b430e1f2c91b65a10e00f2d1c3971d865427124fbc1e0 ptscotch-openmpi-devel-6.0.5-3.el8.x86_64.rpm 76457803b1707a6c1186c2161586a4bfd37387cba187dd95f50f69b2f1083808 scotch-6.0.5-3.el8.i686.rpm 939c4c72fbc2854b8d950ac724c294238036f3ceeebda4770122bc9436e34d3e scotch-6.0.5-3.el8.x86_64.rpm 74cb1ef70d073be290a0e40e3981cb2ee2c9e37bea94af32eab57f02a34caa79 scotch-devel-6.0.5-3.el8.i686.rpm f704df012e8ec1ac21c756c760837df948540cd713eb988acd8b2ff62ebe8759 scotch-devel-6.0.5-3.el8.x86_64.rpm f2eb8597295a7291b49732c0268e3eda5db70dec7cce936bd51981b9f4b250de ALEA-2021:1969 Copyright 2021 AlmaLinux OS 0 2 None

An update for dwarves is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dwarves-1.19-1.el8.x86_64.rpm b6b16948fb323bbcc788a1e0a5345a08f08346096715dae743ce704bc8228673 libdwarves1-1.19-1.el8.i686.rpm aafab866e9ac8ae3a0eec00a734b2adf65ff672a4878c3416c7e2078c46dfa70 libdwarves1-1.19-1.el8.x86_64.rpm 103230e17ec4f4f90c14cac7a860272c09f7186262e889436766573c961817bf ALEA-2021:1656 Copyright 2021 AlmaLinux OS 0 2 None

An update for OpenIPMI is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default OpenIPMI-devel-2.0.29-1.el8.i686.rpm 49b8a57440217355f9b54ea4ff02a28a7f1fe1bd6b21ac2e568d7aa78cdd2d1d OpenIPMI-devel-2.0.29-1.el8.x86_64.rpm 17ed5a0a11d641346b275b185e3552cae3cdf190e33cc45cb313e185cce13c06 ALBA-2021:1666 Copyright 2021 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.4.0-9.el8.i686.rpm 8f84a545362cc96ca44549a5eb070d89f19a87a8dd71bd3a354cb64136d7cb47 libsss_nss_idmap-devel-2.4.0-9.el8.x86_64.rpm f388f396913208a5a69b06149761367ec9aeb0af46a1d6af3841707a9a524692 ALBA-2021:1731 Copyright 2021 AlmaLinux OS 0 2 None

An update for userspace-rcu is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default userspace-rcu-devel-0.10.1-4.el8.i686.rpm 2de2a0ef9be8c68cdab9e731648bb8b922f4409bcff748d321198472bc7ed75f userspace-rcu-devel-0.10.1-4.el8.x86_64.rpm 83d06f2ba1087a91c4ea37c902418debc554f60c678c3c67483f732d258cb1a1 ALBA-2021:1657 Copyright 2021 AlmaLinux OS 0 2 None

An update for dnf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdnf-devel-0.55.0-7.el8.alma.i686.rpm 70e831e4ed502c0519a2e8ae85cce74272f1b91252e4ae84f89c175c09892367 libdnf-devel-0.55.0-7.el8.alma.x86_64.rpm 4a2bb97ed08dfbc93181fad2308e67d4239a0e760c356bf6eee6552db8567e83 ALBA-2021:1659 Copyright 2021 AlmaLinux OS 0 2 None

An update for lvm2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-devel-1.02.175-5.el8.i686.rpm c25e553e1dd933be61a41dc0d4a3b77f31bcc6bfdd067471294635f5a4ac7732 device-mapper-devel-1.02.175-5.el8.x86_64.rpm 3fa9f7b8fffc06973bd6a745483233f149c0fc1c6d3f905225dafad4a61b1c72 device-mapper-event-devel-1.02.175-5.el8.i686.rpm db1254de3f192ae3d9bf4496ddb16b25ff1bf5a0c1fd30fd5a45e06f22a30e88 device-mapper-event-devel-1.02.175-5.el8.x86_64.rpm 2486818cde2caabe2558cb5f2dc5c0355d072bddccba065564ffcaa60203225f lvm2-devel-2.03.11-5.el8.i686.rpm a8eaa05bfaa9ed16f7ac4987c5b15ff9cdc235186b8caef9df8c06d52a644f23 lvm2-devel-2.03.11-5.el8.x86_64.rpm fba6cb043ef0e9c783fe852d68d0a44866e11f37110871a814fe6f27173c0b44 ALBA-2021:1963 Copyright 2021 AlmaLinux OS 0 2 None

An update for kronosnet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libknet1-1.18-1.el8.i686.rpm eab8f895ba39961455e214290121333e744d1cd922a0b6235a740bcf0146dfa4 libknet1-1.18-1.el8.x86_64.rpm 16e52b3e790e02caae89abf9626ccf56a6c8b32a96a4dbd22e4b36a037ab6cdc libknet1-devel-1.18-1.el8.i686.rpm 69e48e4d962e662e9abe9975f9b911690816f9a1e6ec3a02f20dbc6b5cf1b862 libknet1-devel-1.18-1.el8.x86_64.rpm 40d4bcf8a1693700d2abdd1ed9fb16c40893ec41c7df39dae948d8c256186907 ALBA-2021:1971 Copyright 2021 AlmaLinux OS 0 2 None

An update for lensfun is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lensfun-0.3.2-15.el8.i686.rpm 9a062780a3e14b47ac8c8cc4d43b7b13d536f16eb80c97312ec9e1fa9370b40c lensfun-0.3.2-15.el8.x86_64.rpm 5bb5ec4f36cb8285d72da71b637479bdc2e673da142e939df3003a35cd306227 lensfun-devel-0.3.2-15.el8.i686.rpm 6b903baa7d42a91642ea97c97d6414d88385711efe25407abe3ef693e88506c1 lensfun-devel-0.3.2-15.el8.x86_64.rpm b9252798c36e9fca91b8ee91d7038be00ce13232f04f441d5638127d39a61628 ALBA-2021:1669 Copyright 2021 AlmaLinux OS 0 7 None

An update for nfs-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-41.el8.i686.rpm 6d07b6bf5d49fe2d6eef6b2e48f9be8215ea0f0dd69459ac561d1246bd5eb640 libnfsidmap-devel-2.3.3-41.el8.x86_64.rpm 23e9ea0ef332e9fa3faf93fcecb600fa02d36d20f86c676e42e132a24b612eda ALBA-2021:1726 Copyright 2021 AlmaLinux OS 0 1 None

An update for glusterfs is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glusterfs-api-devel-6.0-49.1.el8.x86_64.rpm a38d92d871a3d59401c4fbb59ca7133384ddc35fa0e572ce59051b870b250018 glusterfs-devel-6.0-49.1.el8.x86_64.rpm 3b3a9befadf373d42d3726acdf25f194b4f04061f314fed5d28dd14b93fda6ef ALEA-2021:1654 Copyright 2021 AlmaLinux OS 0 2 None

An update for freeipmi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freeipmi-devel-1.6.6-1.el8.i686.rpm 31b84309d0d435f23ca4d8b10c5792b59d4f7d69a93b25c68d8a5d968ed9ff05 freeipmi-devel-1.6.6-1.el8.x86_64.rpm 87bc1dad5b64495106e801c60be2d53967b373bb50e9c91c50fd833538da66fc ALSA-2021:1852 Copyright 2021 AlmaLinux OS 0 6 Moderate

An update for ghostscript is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. The following packages have been upgraded to a later upstream version: ghostscript (9.27). (BZ#1874523) Security Fix(es): * ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS (CVE-2020-14373) * ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS (CVE-2020-16287) * ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS (CVE-2020-16288) * ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS (CVE-2020-16290) * ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS (CVE-2020-16291) * ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS (CVE-2020-16292) * ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS (CVE-2020-16293) * ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS (CVE-2020-16294) * ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS (CVE-2020-16295) * ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS (CVE-2020-16296) * ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS (CVE-2020-16297) * ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS (CVE-2020-16298) * ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS (CVE-2020-16299) * ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS (CVE-2020-16300) * ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS (CVE-2020-16301) * ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation (CVE-2020-16302) * ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation (CVE-2020-16303) * ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS (CVE-2020-16304) * ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS (CVE-2020-16306) * ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS (CVE-2020-16307) * ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS (CVE-2020-16308) * ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS (CVE-2020-16309) * ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS (CVE-2020-16310) * ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS (CVE-2020-17538) * ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS (CVE-2020-16289) * ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS (CVE-2020-16305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ghostscript-doc-9.27-1.el8.noarch.rpm f4272facbfb25f9aaf34b083a0f00b542c5dd78760c50f62dd3d46024d35b7f1 ghostscript-tools-dvipdf-9.27-1.el8.x86_64.rpm 00d6e1acafca7f7eeeabc3f2b959fa73a74d13fc2a566b3fdb8524518ec766f4 ghostscript-tools-fonts-9.27-1.el8.x86_64.rpm f5cc1797f6d71845d680d1ebf35599c34108307e271bd899467e20d8dc748afd ghostscript-tools-printing-9.27-1.el8.x86_64.rpm a967a540af40b34c792bb03dbbc0228a22344bcf81d42e1a9d82f4611e0dc41f libgs-devel-9.27-1.el8.i686.rpm 34f5085bee4ab147c758ae2fe1b979f9bb1d976489b5d764ab1fcc487fe0cb8c libgs-devel-9.27-1.el8.x86_64.rpm 802e25447a5d2f929735cffce1d3870475f9b867b4a14d1013d1b6ecd5e5a90d ALBA-2021:1903 Copyright 2021 AlmaLinux OS 0 2 None

An update for pulseaudio is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default twolame-devel-0.3.13-12.el8.i686.rpm f3955aa1b17521f6f4e7f17c02581f71e21e1adb7d2eeb3c91d7b0fec7ecf59f twolame-devel-0.3.13-12.el8.x86_64.rpm 4f23536e11b775c266ba84553103157299803f24d35c073173c7768522cdb870 ALBA-2021:1985 Copyright 2021 AlmaLinux OS 0 2 None

An update for java-1.8.0-openjdk is now available for AlmaLinux

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Bug Fix(es) and Enhancement(s): * Prepare for the next quarterly OpenJDK upstream release (2021-04, 8u292) [rhel-8] (BZ#1942308) * EMBARGOED java-1.8.0-openjdk: JDK: Oracle CPU 2021-04 (BZ#1943839) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 2e10393f8aa68a8860332f6e311fcbd3c36e0b1f0d5a1d650d4faf9238147602 java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 3ad243f5a5d6708a5ce44df50ac769575c2a21a0ee26c53ef06cbcb096e0d493 java-1.8.0-openjdk-demo-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 0bdb0de69449fa553e9014000e2d43f4e4c0c86c4a7873764e5dec58cf5948a8 java-1.8.0-openjdk-demo-slowdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm e837e36b97f45d25501ceb3a5c3e59ff37b675c0f29224633862ad8e9c1aad11 java-1.8.0-openjdk-devel-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 904ec0a29ce3c163da39204ef1ccbf09fa5163c90c0b12a3824d2b8b6d3acc7d java-1.8.0-openjdk-devel-slowdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm dfb5b9b2fa4226d0c9ca3862cb43fe96785875af44fe39e6ddfc87d01a416187 java-1.8.0-openjdk-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm b710777bb84a89f82774416ac43837d9ccbc9db801d485beed9bf2c54fb334a1 java-1.8.0-openjdk-headless-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 58b8129938cc400b9aa8bb1bd1600503c97f89d1f4e457b164da88d6194e6068 java-1.8.0-openjdk-src-fastdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 598e75c5e0fda7123ff92010e09160387a4c736750987bab6f4106c5c7de5e98 java-1.8.0-openjdk-src-slowdebug-1.8.0.292.b10-1.el8_4.x86_64.rpm 135ff35e9e5f81b70c6fc49bdac90a1eb5e4197c25262a07e8db83bb66d05a2b ALBA-2021:1587 Copyright 2021 AlmaLinux OS 0 2 None

An update for librabbitmq is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librabbitmq-devel-0.9.0-3.el8.i686.rpm d227dd00fd77fe736b0c11d1204ce42c6fd4317d00990d45ea5b7ae7f3efcfcc librabbitmq-devel-0.9.0-3.el8.x86_64.rpm 9635aaa99496290911e6e33647614abd55b013f39dd997eff5cdbe32537f427e ALBA-2021:1672 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsemanage is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsemanage-devel-2.9-6.el8.i686.rpm 239b9a11bc9e04f2cb0e30331ed6a563baa3337ae0d9753aab480da6374b8586 libsemanage-devel-2.9-6.el8.x86_64.rpm faf23810373462b9f852f4a680b69ab5e94b5aedf085b07d93d456dccd9ef494 ALBA-2021:1717 Copyright 2021 AlmaLinux OS 0 2 None

An update for libbpf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libbpf-devel-0.2.0-1.el8.i686.rpm c9b8da0ba978bbc70fe901b8d1f28e616ea3c9342ee93510f99567c1a519f89b libbpf-devel-0.2.0-1.el8.x86_64.rpm a5225e31757fc83deafa498153f127d37f785dc68ce92b6267de7312240c1e7d libbpf-static-0.2.0-1.el8.i686.rpm 5a9961a05ff48fb9b2cfa54231e38b8ed38294bdc8f38ea4ee77b787c8028158 libbpf-static-0.2.0-1.el8.x86_64.rpm 5dfe75966fb1c1265ac137b533a77b5e3663071fd259d77a70934b4ab6c433c6 ALBA-2021:1660 Copyright 2021 AlmaLinux OS 0 2 None

An update for tpm2-abrmd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tpm2-abrmd-devel-2.3.3-2.el8.i686.rpm e0756d5eed57ca74e4cfa573b7b0f8660146926121144247a8dec07c2742e719 tpm2-abrmd-devel-2.3.3-2.el8.x86_64.rpm 50b0db339a6c5d47d52e7568630578500b375fa77063205f055b05aac4be9010 ALBA-2021:1902 Copyright 2021 AlmaLinux OS 0 2 None

An update for uuid is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default uuid-devel-1.6.2-43.el8.i686.rpm f5b00a142d1e404a4d6274301809b3f414f0cd91838f1135e2699ab04adb6482 uuid-devel-1.6.2-43.el8.x86_64.rpm a8ee7905b7a5c5c7feeee65b667cc27c7a84db5726a179dbd00d6c5e9e31cd41 ALEA-2021:1919 Copyright 2021 AlmaLinux OS 0 2 None

A new python39:3.9 module is now available for AlmaLinux

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. This enhancement update adds the python39:3.9 module to AlmaLinux (BZ#1877430) For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_python39-devel python39-Cython-0.29.21-5.module_el8.4.0+2369+c6fb4bc5.x86_64.rpm 55ea7e7e53d0aa0899893f54f3ae1e4055cb7bb279cfd21df10f35ac2c55916a python39-attrs-20.3.0-2.module_el8.4.0+2369+c6fb4bc5.noarch.rpm 915e861d4edd0a75592cbf8094c16027d4a54832b74d522170a1a3d97b368544 python39-iniconfig-1.1.1-2.module_el8.4.0+2369+c6fb4bc5.noarch.rpm 75c7f77a20aecf85ec3d912b1bd3528bc134e72105ce592df637d097c8c7778d python39-more-itertools-8.5.0-2.module_el8.4.0+2369+c6fb4bc5.noarch.rpm af4bc378375f2bc33c1f126e783088330492da73ac370d7e8bf4206f0d7748d0 python39-packaging-20.4-4.module_el8.4.0+2369+c6fb4bc5.noarch.rpm e9fb3ae9d1988012a97fe760b926551470bd7376ed26ba365fe1b66d96e73754 python39-pluggy-0.13.1-3.module_el8.4.0+2369+c6fb4bc5.noarch.rpm 5469bc1d59d737f607675c50fedb25fe648032d3684c26610e10a8ad95c268d8 python39-py-1.10.0-1.module_el8.4.0+2369+c6fb4bc5.noarch.rpm c39a9e8974d88d5b6f7b3d029e62d8ceb7f1aa78a248f79c7becfccccf914ccf python39-pybind11-2.6.1-2.module_el8.4.0+2369+c6fb4bc5.x86_64.rpm 3f57c3366b31172bd3a9a849edc90a6cca7fb61b84bc5e075b22b179881f0cbb python39-pybind11-devel-2.6.1-2.module_el8.4.0+2369+c6fb4bc5.x86_64.rpm c29466cb50e3528480d3b72c7a6fd9fa50c1b30da6326f71802c7517e5ee973c python39-pyparsing-2.4.7-5.module_el8.4.0+2369+c6fb4bc5.noarch.rpm 0199eccc8829ba3297b86cce40b2fc372a4b38a357d7c04dc67c29c14631df12 python39-pytest-6.0.2-2.module_el8.4.0+2369+c6fb4bc5.noarch.rpm 1d061b8ff9422b06215d6d6f215279f9f0679f5af40499711276da3fabed738a python39-wcwidth-0.2.5-3.module_el8.4.0+2369+c6fb4bc5.noarch.rpm c54c0a385095431031fda307cd7d93d91a6966467d743f1e38486a89636bef7d ALBA-2021:1612 Copyright 2021 AlmaLinux OS 0 2 None

An update for avahi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default avahi-compat-howl-0.7-20.el8.i686.rpm 02ef76d78e933220edbba6b2e57af7de29069417c11f110a9b2b038bb160e182 avahi-compat-howl-0.7-20.el8.x86_64.rpm bd01c74384b5f7cfe6445f777b46781628238ad4ce0760fc9dbfe3b03a606d8c avahi-compat-howl-devel-0.7-20.el8.i686.rpm 2590c485030627b41b21137b39ced1529fa45a597dcf4f9609c189b4b96cc400 avahi-compat-howl-devel-0.7-20.el8.x86_64.rpm 07f905f309808abb4c075d9ef4c8e3584e0b614b71b3400199b74f8269e6a571 avahi-compat-libdns_sd-0.7-20.el8.i686.rpm e4718d14171c39cfd6a5cf95aa0fef66aa07118c9665167dcd1e996e09b68aca avahi-compat-libdns_sd-0.7-20.el8.x86_64.rpm b9c113881b11a5b1c541db162875d3321fadac944d2815d230f68c5298078935 avahi-compat-libdns_sd-devel-0.7-20.el8.i686.rpm 7af561343d49e26d231f1c24f82acdf42b0e50bd69308f0ff442d15984d98dc5 avahi-compat-libdns_sd-devel-0.7-20.el8.x86_64.rpm d6f88824cf17e4f9c7f6e44a6d1c46ed2c126fca2c0e964c928f7dbb0cad4343 avahi-devel-0.7-20.el8.i686.rpm e777c56f2276cd06860660e81bed8c20a220220cd7e44fb78979956080d504a3 avahi-devel-0.7-20.el8.x86_64.rpm 8ef75020d1fccf791ed81dd0be27a896ef22753288f1e5b94677f03e4443c80b avahi-glib-devel-0.7-20.el8.i686.rpm 686a0adc6460031242dc1bb6afe125a3702ab9984dc6a00185542f58e2ede6cc avahi-glib-devel-0.7-20.el8.x86_64.rpm 94f216fbb0351e60b88cef9c1cca80d614e5d00806bf08207fbb93ebc5445f09 avahi-gobject-devel-0.7-20.el8.i686.rpm 0bc180cca7b09abb97bbcae0f313e0908ab98dafe9913f800d10ebe57fe7a177 avahi-gobject-devel-0.7-20.el8.x86_64.rpm caee1aa464b93085d5a3bf9171505b8db09517add5f661e075e3ce33fc853ea6 avahi-ui-0.7-20.el8.i686.rpm f2e0a8aa3d17a8de4c6f7d456748840a15287a1e3cdd5e700db01499afe6ba3f avahi-ui-0.7-20.el8.x86_64.rpm 3eb2d6c547e9075dabc7e948f374214016767c981a16b60822c6d05e4222af0a avahi-ui-devel-0.7-20.el8.i686.rpm c7a75fdb45389b35dd8f3524b2e502294cdf26683e595feb20e3e4195551098f avahi-ui-devel-0.7-20.el8.x86_64.rpm b4c64f1c4ae330023795ff0e6641ef9e0f5ebea7a0c7b266780ffcce2669fa44 ALSA-2021:1627 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for TrouSerS is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

TrouSerS is an implementation of the Trusted Computing Group's Software Stack (TSS) specification. TrouSerS enables the user to write applications that make use of the Trusted Platform Module (TPM) hardware. The following packages have been upgraded to a later upstream version: trousers (0.3.15). (BZ#1725782) Security Fix(es): * trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root (CVE-2020-24331) * trousers: tss user can be used to create or corrupt existing files, this could lead to DoS (CVE-2020-24332) * trousers: fails to drop the root gid privilege when no longer needed (CVE-2020-24330) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default trousers-devel-0.3.15-1.el8.i686.rpm 6caeaeb42292dcdeecace7d08cd46e28096f79028e4203a90abbec86055f1544 trousers-devel-0.3.15-1.el8.x86_64.rpm da3bfc3f80060dc54f67c3b0e558267a7bc2f1587c99a5ae71a97d7ba5758f91 ALBA-2021:1594 Copyright 2021 AlmaLinux OS 0 3 None

An update for RDMA stack is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libfabric-devel-1.11.2-1.el8.i686.rpm 2e2501254c1b10fef4713036ce3e5c9498e0ed7162d8ffb2379c6a4661be284c libfabric-devel-1.11.2-1.el8.x86_64.rpm 0a30fdf6d9edf8b278bd72a322e77f54459963d43e0934b42c71af4c6706f047 libpsm2-devel-11.2.185-1.el8.x86_64.rpm 87e4528f0c26e7b0754c29d51a6e325c7654fde938c532e9643df032025c32e1 opensm-devel-3.3.23-4.el8.i686.rpm bc749de8220b7b9006e3f644153e26be3ef03db3e4de3d347ddcf0a358b38e88 opensm-devel-3.3.23-4.el8.x86_64.rpm c834a101bd3197602ef47fe4f906890f364a51580e1c1b2cf1b431707a9dcb00 python3-openmpi-4.0.5-3.el8.x86_64.rpm ecf7e330e9b4dd712643e87a5c401bf9bde038908392d0940772c10c91509124 ALSA-2021:1758 Copyright 2021 AlmaLinux OS 0 5 Low

An update for exiv2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 (0.27.3). (BZ#1880984) Security Fix(es): * exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default exiv2-devel-0.27.3-2.el8.i686.rpm 8e618524117a0f18661529904ff4c8d7815847a571cc52d8ff918989d148cb1f exiv2-devel-0.27.3-2.el8.x86_64.rpm 2fcb62622ab94828cb7fa8f55feeea093006e965f73c6563f671d7b197718b07 exiv2-doc-0.27.3-2.el8.noarch.rpm e16cc0ae939168e40f19bd7a96479634fd0ad40b7d04c72fbf81dc9d19989b8c ALBA-2021:1837 Copyright 2021 AlmaLinux OS 0 2 None

An update for liblangtag is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default liblangtag-devel-0.6.2-8.el8.i686.rpm bed976986673f3437f97faea14570ca1567d3856b2dd3b346d8afad140f5fa6a liblangtag-devel-0.6.2-8.el8.x86_64.rpm 180b29fd9aefa7eeb4fc4b4bbae1ada0a1aea0747cff13181399204d836e68a0 liblangtag-doc-0.6.2-8.el8.noarch.rpm 0b82dcb3a4b2ea830e369fd4167a6c2f11a9e03ea8dc667f7e4517a88f8f7ec0 liblangtag-gobject-0.6.2-8.el8.i686.rpm 8be1610d922d0fd7b7068bde99cb5cf99a3f233213c22656e2ba876d24ec79db liblangtag-gobject-0.6.2-8.el8.x86_64.rpm 1547a27813cf42afb54af40ab030a2df549d920e173f60dccb5454379d0120b3 ALSA-2021:2170 Copyright 2021 AlmaLinux OS 0 2 Important

An update for glib2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits (CVE-2021-27219) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Refcounting issue causes crashes and slow workarounds (BZ#1953553) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glib2-doc-2.56.4-10.el8_4.noarch.rpm 1364c2eabcab5549e2846782671952d99dedc906f58668bcf1c2105a6f5ce8e1 glib2-static-2.56.4-10.el8_4.i686.rpm 3b5c8aa8c65c522a6bbb375dc55aabfb0e41b69a0e8f2614f310acecdeee685a glib2-static-2.56.4-10.el8_4.x86_64.rpm 9b4040395c0d4cf05bafc5c0d51770b2e6240b8501b1032dc4e4546f0cf50ad3 ALSA-2021:2168 Copyright 2021 AlmaLinux OS 0 4 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu->run (CVE-2021-3501) * kernel: nitro_enclaves stale file descriptors on failed usercopy (CVE-2021-3543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * OVS mistakenly using local IP as tun_dst for VXLAN packets (?) (BZ#1944667) * Selinux: The task calling security_set_bools() deadlocks with itself when it later calls selinux_audit_rule_match(). (BZ#1945123) * [mlx5] tc flower mpls match options does not work (BZ#1952061) * mlx5: missing patches for ct.rel (BZ#1952062) * CT HWOL: with OVN/OVS, intermittently, load balancer hairpin TCP packets get dropped for seconds in a row (BZ#1952065) * [Lenovo 8.3 bug] Blackscreen after clicking on "Settings" icon from top-right corner. (BZ#1952900) * AlmaLinux 8.x missing uio upstream fix. (BZ#1952952) * Turbostat doesn't show any measured data on AMD Milan (BZ#1952987) * P620 no sound from front headset jack (BZ#1954545) * AlmaLinux kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps. (BZ#1955188) * [net/sched] connection failed with DNAT + SNAT by tc action ct (BZ#1956458) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.3.1.el8_4.x86_64.rpm 464672eb2123327f08331c856911c6ea233e61d4f34ed9c37e6ea2d46f7aa4c4 True ALSA-2021:2363 Copyright 2021 AlmaLinux OS 0 3 Important

An update for gupnp is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible. Security Fix(es): * gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services (CVE-2021-33516) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gupnp-devel-1.0.6-2.el8_4.i686.rpm 976df14b3d007dfa5c447cc9a18dc5760623efb8b1e8890bb2837c501f1db5b9 gupnp-devel-1.0.6-2.el8_4.x86_64.rpm 3342e7b49e85148c659a08dd9c41671feef9380b36e63250398c12667cdaa2a0 ALSA-2021:2583 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for the python38:3.8 and python38-devel:3.8 modules is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * PyYAML: incomplete fix for CVE-2020-1747 (CVE-2020-14343) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_1_python38-devel python38-atomicwrites-1.3.0-8.module_el8.4.0+2510+cb4d423d.noarch.rpm 7196b9593e19f8812925418970959f3cb7d251c03f85f0b508924251b46b8af6 python38-attrs-19.3.0-3.module_el8.4.0+2510+cb4d423d.noarch.rpm 6da280809bfa3b6eba05e96eda5c2d2edb326ee54011e8a41df616849d6ac46a python38-more-itertools-7.2.0-5.module_el8.4.0+2510+cb4d423d.noarch.rpm 4f1e59f90577e6e9d0af6525a16f4a1e8c701ac8214bfbad36ade37fd63cf386 python38-packaging-19.2-3.module_el8.4.0+2510+cb4d423d.noarch.rpm f34928e8e73dcce4f215bf34baae2fbbe2a2ba6de1c68102baf8e143becc2d75 python38-pluggy-0.13.0-3.module_el8.4.0+2510+cb4d423d.noarch.rpm 3e345f71e04f7b488a1e05b6afd728d743add599dd8c092cadc54f75cbbb682f python38-py-1.8.0-8.module_el8.4.0+2510+cb4d423d.noarch.rpm 2c4ac35905ea9ed42523032ab27e3ffc425dd00f57488c1f7f2811c8c231c0bc python38-pyparsing-2.4.5-3.module_el8.4.0+2510+cb4d423d.noarch.rpm 11485b2466b0a42013cc36d16d4d5def2b515e1d46bf59a1b205bca05e305121 python38-pytest-4.6.6-3.module_el8.4.0+2510+cb4d423d.noarch.rpm f1873182f0c7fd6538a39558692cf4cdde4c9994939c55425753305a3068251c python38-wcwidth-0.1.7-16.module_el8.4.0+2510+cb4d423d.noarch.rpm c56d0ea86ad36a56d9d4ee0aac3fca1db2772b5b00d262cff34ce7989b6d7cbf ALSA-2021:2570 Copyright 2021 AlmaLinux OS 0 7 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan (CVE-2021-33034) * kernel: security bypass in certs/blacklist.c and certs/system_keyring.c (CVE-2020-26541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * [ESXi][AlmaLinux-8] VMXNET3 v4 causes invalid checksums of inner packets of VXLAN tunnel (BZ#1960702) * fnic crash from invalid request pointer (BZ#1961705) * GFS2: Failed FS thaw call makes the entire snapshot failed. (BZ#1961849) * dm writecache: fix performance degradation in ssd mode (BZ#1962241) * Kernel BUG with act_ct and IP fragments (BZ#1963940) * core: backports from upstream (BZ#1963952) * Hibernate resume on AlmaLinux fails in Amazon EC2 C5.18xlarge instance (BZ#1964930) * [SanityOnly] panic caused by i40e_msix_clean_rings (BZ#1964962) * tc reclassification limit is too low for OVN (BZ#1965148) * tc action ct nat src addr does not work while used with ct nat dst addr together (BZ#1965150) * CNB: Rebase/update TC subsystem for AlmaLinux 8.5 (BZ#1965457) * sctp: crash due to use after free of sctp_transport structure (BZ#1965632) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.7.1.el8_4.x86_64.rpm 934a56661708bf7d07cde916651275b6c31bc34089b9c4523cadf82cfb27e986 True ALBA-2021:2576 Copyright 2021 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * [NMCI] Automatic connection not removed when veth device gets removed (BZ#1965336) * [SNO][assisted-operator][nmstate] Bond Interface is down when booting from the discovery ISO (BZ#1965337) * NetworkManager doesn't honour tlb_dynamic_lb=0 when creating a bonding device with mode=balance-alb (BZ#1965948) * Provide a way to ignore existing TC qdiscs and filters (BZ#1972566) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.30.0-9.el8_4.i686.rpm 21cb9e263963b204757872f0921eb2e8e20968d98cf4d491db852bfcf588bebc NetworkManager-libnm-devel-1.30.0-9.el8_4.x86_64.rpm 382a816623e76759aac564747ecb9df734535e6635212a8f859f42a6fe1e3e3e ALBA-2021:2573 Copyright 2021 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files. Bug Fix(es) and Enhancement(s): * bad client message causes closed connection and released leases (BZ#1965481) * Expose sanlock_inquire() in python bindings (BZ#1965483) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.3-3.el8_4.i686.rpm 9c4337be41c0d2a2d89211b0365732686165ad77343a121fa47298b3d0a551c9 sanlock-devel-3.8.3-3.el8_4.x86_64.rpm 6bce389a83c32edc1fbf70c6910b38d4647a6fe7683e5f246a8159ecb07e3574 ALBA-2021:2571 Copyright 2021 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources. Bug Fix(es) and Enhancement(s): * Wrong default debug level of sssd tools (BZ#1942438) * IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 (BZ#1945654) * SSSD not detecting subdomain from AD forest (AlmaLinux 8.3) (BZ#1945655) * No gpo found and ad_gpo_implicit_deny set to True still permits user login (BZ#1945656) * pam_sss_gss.so doesn't work with large kerberos tickets (BZ#1949170) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.4.0-9.el8_4.1.i686.rpm 3dd5ff8007dc6af22b7ac26caaa823c5ea6b80361e148d76267cb394797d1fc0 libsss_nss_idmap-devel-2.4.0-9.el8_4.1.x86_64.rpm b287230ac1db8a1b0e5e28578a2971b32e63687dab2f2830152d372a5ed6e8d4 ALSA-2021:2776 Copyright 2021 AlmaLinux OS 0 3 Important

An update for java-1.8.0-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066) (CVE-2021-2388) * OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432) (CVE-2021-2341) * OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967) (CVE-2021-2369) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 90965cdffdf076a400ae7368a91800c58a417dd5c5ca1e260a08c7c2270e063c java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 5028eeb536a1cc99bbc06b76e6999d321195051566b311f5ad7363a010095b35 java-1.8.0-openjdk-demo-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 57e8559c36f1f5b4d2f1a6fdd95d52adde4a53cacd3aa2f575385db8d477e595 java-1.8.0-openjdk-devel-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 96e63fef50a766472b164992fecc27a594d24e087e02831875d8f49ff2cc2abf java-1.8.0-openjdk-devel-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 124f937031dd45b332d07b880a24be12f3a2adaa3003a6e9c8f4eb13bbff5402 java-1.8.0-openjdk-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 744bb9b1d1651031d22a77435e82bfad0ef87259bf2eb044f2d27423b8f84b02 java-1.8.0-openjdk-headless-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm e9d615f8127dae67b3528d5765699d81a96e3c72f456ffea2ceec6701635d41d java-1.8.0-openjdk-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 2284b56298b371f903478250e6c200cec11139452d760040ac372ccea46e6fbb java-1.8.0-openjdk-src-fastdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm c4cb69d5b670261d30c57f729f7e19a577d993b4f8d16d6e0da2ef1068c68b55 java-1.8.0-openjdk-src-slowdebug-1.8.0.302.b08-0.el8_4.x86_64.rpm 0f11f08c0acea122f14eecadf296088dea097e63b1af147034fefc52f9171640 ALSA-2021:2781 Copyright 2021 AlmaLinux OS 0 4 Important

An update for java-11-openjdk is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066) (CVE-2021-2388) * OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432) (CVE-2021-2341) * OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967) (CVE-2021-2369) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-11-openjdk-demo-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 5553c5514d55f54e08e9203aff67ae61c0de5cc30675a835cc14292c1316aa52 java-11-openjdk-demo-slowdebug-11.0.12.0.7-0.el8_4.x86_64.rpm f9ef5bbf764ba1a18af3bd8cbabbaadd45d409fc021f8e0d1e2e176570492ead java-11-openjdk-devel-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 3792aebb75693b709d26964371ce5f6bf613e5728b2e2fd469241ef11f333a85 java-11-openjdk-devel-slowdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 56d172b76671b62b91e2d52c7d4c8765d5e11b2d7c5c8979fa50b076f9db5e7a java-11-openjdk-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 35ec2811a52655748726c6bf8759350398fc3b0676e2b0797dc477bf82e91bb2 java-11-openjdk-headless-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 6894ac756e4c3a0baab8cf70e848ba8efdff3256ca93bf7beae03f234e7a9f0a java-11-openjdk-jmods-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm a3abb1d5e5ac1983499b5bce622721d6c25c7b6cb3695c80b80d2a53514f36d1 java-11-openjdk-jmods-slowdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 26f2830d8fb2535b4a6f48f5cd7d0bc670210b3972d9643a9e4f3f64bf3427a7 java-11-openjdk-slowdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 3fecd1860d88bc626f1696105357ea9cffe9893a6892c864eb0f236bf603c86d java-11-openjdk-src-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 50df7c07724a4a92a5928e4a14bfb8396d455e460ddec107b3877ce89e227bc1 java-11-openjdk-static-libs-fastdebug-11.0.12.0.7-0.el8_4.x86_64.rpm b87feedbd4918fca7791ccb5adf6cb2135b9b487144870f601f21e15d497dfc0 java-11-openjdk-static-libs-slowdebug-11.0.12.0.7-0.el8_4.x86_64.rpm 00276a3bd4cf4505ff8449f7a6b4519f587270c93840b40a8d4c6539f7825e1d ALSA-2021:2714 Copyright 2021 AlmaLinux OS 0 5 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909) * kernel: race condition for removal of the HCI controller (CVE-2021-32399) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * pinctrl_emmitsburg: improper configuration (BZ#1963984) * [Ampere] locking/qrwlock: Fix ordering in queued_write_lock_slowpath (BZ#1964419) * AlmaLinux8.4 - [P10] [NPIV Multi queue Test kernel- 4.18.0-283.el8.ibmvfc_11022021.ppc64le] DLPAR operation fails for ibmvfc on Denali (ibmvfc/dlpar/AlmaLinux8.4) (BZ#1964697) * Every server is displaying the same power levels for all of our i40e 25G interfaces. 10G interfaces seem to be correct. Ethtool version is 5.0 (BZ#1967099) * backport fixes for Connection Tracking offload (BZ#1968679) * fm10k: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969910) * ixgbevf: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969911) * ena: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969913) * b44, bnx2, bnx2x, bnxt, tg3: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969914) * e1000, e1000e: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969915) * ice: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969917) * igb: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969919) * igbvf: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969920) * igc: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969921) * ixgbe: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969922) * i40e: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969923) * iavf: removal of MODULE_VERSION deemed improper for y-stream release (BZ#1969925) * Backport netlink extack tracepoint (BZ#1972938) * [AlmaLinux8.4] kernel panic when create NPIV port on qedf driver (BZ#1974968) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-305.10.2.el8_4.x86_64.rpm f4b29a9e07613cb8d56a7e9936b7dfee80a1fe228b0edede3549dbe43fe85ffd True ALEA-2020:4540 Copyright 2021 AlmaLinux OS 0 2 None

An update for device-mapper-multipath is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-multipath-devel-0.8.4-5.el8.i686.rpm 41cfe774978ce994a964025d60401cc42e8ae3113ae13c82ebc7e85a12661ba8 device-mapper-multipath-devel-0.8.4-5.el8.x86_64.rpm f87ba92bece7348779cd797b2b47cde70e916f8ed365e26598ede031b7730078 ALBA-2020:4548 Copyright 2021 AlmaLinux OS 0 2 None

An update for gpgme is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gpgme-devel-1.13.1-3.el8.i686.rpm 69794622df34a31d343d78f78f7dd455831fb89d1baa923add1fb767bc488dbd gpgme-devel-1.13.1-3.el8.x86_64.rpm b25bb236246006939df141756af41e06384c8f28fbcea0fe6c54c12de6a5e48d gpgmepp-devel-1.13.1-3.el8.i686.rpm 5d8f06c9d7cb573a00cce77e97c514385cae65d8a9335b2ab5d2d3f3a40d1b37 gpgmepp-devel-1.13.1-3.el8.x86_64.rpm b4f100faeb4c668d198da31ff380764772f7e526494e57f7976122c21383601f ALBA-2021:0555 Copyright 2021 AlmaLinux OS 0 2 None

An update for samba is now available for AlmaLinux

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fix(es) and Enhancement(s): * DFS links broken in 4.12 (BZ#1903555) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.12.3-14.el8_3.i686.rpm 05adad8bc30d5ac7b8198cb2475e25a0f6f4298b3bbd76351be80e5987ca24c1 libsmbclient-devel-4.12.3-14.el8_3.x86_64.rpm 33146ffc08c3a34c81b8332ca728d6156c667a8957e201ad603168f1bacf786e libwbclient-devel-4.12.3-14.el8_3.i686.rpm d98d88a4ed7f1cf7c1a9c5d5f2f3eadf8122fbdfbfedf3723b82d698da604f69 libwbclient-devel-4.12.3-14.el8_3.x86_64.rpm 35b6e52af6fc3e1e538833e0d1548c30f266c6254c928516d3c58f4b1490e6bd ALEA-2020:5501 Copyright 2021 AlmaLinux OS 0 2 None

An update for openscap is now available for AlmaLinux

The OpenSCAP suite enables integration of the Security Content Automation Protocol (SCAP) line of standards. The openscap packages provide the OpenSCAP library and the oscap utility that provides various SCAP capabilities. Bug Fix(es) and Enhancement(s): * Enable YAML probe to work with sets of values (BZ#1895715) * Can't build profile with specific platform set (BZ#1896676) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openscap-engine-sce-devel-1.3.3-6.el8_3.alma.i686.rpm 155e64cc0fec817af6e4b963ec35678ec3102d49e7418cad6d6c22db085098c0 openscap-engine-sce-devel-1.3.3-6.el8_3.alma.x86_64.rpm bda8da07a1a232862e54cd39e53d15e661bb39f85bdbcb93d561bc6ec78daab3 ALSA-2020:4649 Copyright 2021 AlmaLinux OS 0 3 Low

An update for bogofilter, evolution, evolution-data-server, evolution-mapi, and openchange is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications. OpenChange provides libraries to access Microsoft Exchange servers using native protocols. Security Fix(es): * evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evolution-data-server-doc-3.28.5-14.el8.noarch.rpm e187a2d0d8b1590fc91fe3b44b7e44de06f77c907f3abecd756f1392043e9e8c evolution-data-server-perl-3.28.5-14.el8.x86_64.rpm 2342e87c6ca2f5d306c34d22983a5bbb3f7876d281d7fd4a2d7cc94c21729055 evolution-data-server-tests-3.28.5-14.el8.i686.rpm e11a63fc708d99a54c212f3d598163a979bff95f6f0f853f53527651f19ce997 evolution-data-server-tests-3.28.5-14.el8.x86_64.rpm fdc55207c1f7e7c3c4caa8b410d71717ac263cd225ca41ceb5819d85a5d55de4 evolution-devel-3.28.5-14.el8.i686.rpm f247b202a6ac87cfcc732c6cd6f3bd59273019522332796b95233299dfb23ac9 evolution-devel-3.28.5-14.el8.x86_64.rpm bb5059fec5f56c294b4b6e9dffd2b1b53517d2bc6f228a87f39f52536b4c6a15 ALSA-2020:3385 Copyright 2021 AlmaLinux OS 0 3 Important

An update for libvncserver is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Security Fix(es): * libvncserver: websocket decoding buffer overflow (CVE-2017-18922) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvncserver-devel-0.9.11-15.el8_2.1.i686.rpm 23ca90b2e5400eb009ee50b9853c0672e5c366c2fdaad6e9979c1b613518fd64 libvncserver-devel-0.9.11-15.el8_2.1.x86_64.rpm 09243ba908528f98ddbdb6466105688fabc9215bc2c07f0d21bbe43c31073bc3 ALSA-2020:4445 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for librabbitmq is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fix(es): * librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow (CVE-2019-18609) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librabbitmq-devel-0.9.0-2.el8.i686.rpm 59f9d058af720cd4f2c55c2b617dbe6c48a7bd372696fe9b09d0c1d5d3e152a8 librabbitmq-devel-0.9.0-2.el8.x86_64.rpm 0ea97f587a1fcbdf5571895654c9aa89ffaf00a4c4850384f00cc20f410f2b78 ALSA-2020:4443 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for libarchive is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers. Security Fix(es): * libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c (CVE-2019-19221) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libarchive-devel-3.3.2-9.el8.i686.rpm 3b7851a47441d3031cd1f1be3cc4197772fa31561f48d9e00496d9b7b3f34e4d libarchive-devel-3.3.2-9.el8.x86_64.rpm b730cb8906dcef2bf0e0f3335b4041fabd684bc683e954044d8666e2d368d821 ALBA-2020:4575 Copyright 2021 AlmaLinux OS 0 2 None

An update for util-linux is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmount-devel-2.32.1-24.el8.i686.rpm 796770ea56773cc0dceecbe32d661b9c329d1845f00e6668d1804676bda2cd12 libmount-devel-2.32.1-24.el8.x86_64.rpm 9eaee0092bb98be44774dfcbf5758546af743aafb37960a9aff7ed5e1ad7fed5 ALEA-2020:1680 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencv is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencv-3.4.6-5.el8.i686.rpm e49654c3998e9f63329ae2dfd57c129be02077709f8d84b650f05264f8f3d3ed opencv-3.4.6-5.el8.x86_64.rpm a7bffeb2a7d79055f2933787645d802977c4cccd5186127d8b8546f5658885f5 opencv-devel-3.4.6-5.el8.i686.rpm 66287ecf1558076ca793e77b78d9d1ff3a23a4222b785dfcb48d461f28032e6f opencv-devel-3.4.6-5.el8.x86_64.rpm f4d9383fd20dcf3acb13edba36edb8dbb5da1d26dc008eb1b1ec9efe6883e7c0 ALBA-2020:4606 Copyright 2021 AlmaLinux OS 0 2 None

An update for kronosnet is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libknet1-1.16-1.el8.i686.rpm 1a077e15d3293526f7edd7f14be3eb3d77a7d33cd18f3879a14dedc718d34f05 libknet1-1.16-1.el8.x86_64.rpm b09a6fcd986fa9f009c12909d526078d61cf8b4e54de31d728969f32ffff8133 libknet1-devel-1.16-1.el8.i686.rpm e671ba29f176f5c39f6f6905d292c2e55684ed5a9c3809c90dc021f006e728b7 libknet1-devel-1.16-1.el8.x86_64.rpm 19c03f6924726530551483e654f411224d2f43e382b4f0149c300e7d09747c2c ALEA-2020:4456 Copyright 2021 AlmaLinux OS 0 2 None

An update for rdma-core is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libfabric-devel-1.10.0-1.el8.i686.rpm 36df8802578e7e36e9484b0de415fbac271cd44ad15e95ffcf903feca8528fdb libfabric-devel-1.10.0-1.el8.x86_64.rpm c50f4f5fcbe85bc18ee473a273b0217ccf55b99c7ea81169bc7acdaba52ed40d libpsm2-devel-11.2.91-1.el8.x86_64.rpm d3b41911939fed2f62576f09c5543dbc95c304079b0dd4f9e8d7caf85c3ef36c opensm-devel-3.3.23-1.el8.i686.rpm 6d8350079c2be0cd4020610d229e22205a982120af03d5bf9e14ae668988e139 opensm-devel-3.3.23-1.el8.x86_64.rpm feea81dd42da890dc6e37ec6e226de1ceec93a3099ee66a797dd6cab3a1a5aa6 python3-openmpi-4.0.3-3.el8.x86_64.rpm 5c3cfe60290837da0950428aec5915134649d9c78d0fa72b9d23394764d80216 ALSA-2020:1880 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for glib2 and ibus is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The Intelligent Input Bus (IBus) is an input method framework for multilingual input in Unix-like operating systems. Security Fix(es): * ibus: missing authorization allows local attacker to access the input bus of another user (CVE-2019-14822) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glib2-doc-2.56.4-8.el8.noarch.rpm bbf6cedd4f551061fdb85e6af5a42f94e577189ed8f6a0e837c89672d7a38770 glib2-static-2.56.4-8.el8.i686.rpm d25f8584616c5b654bd71d10b5bcc7f46d6765bd01d05b2c5cdea7b735758cd7 glib2-static-2.56.4-8.el8.x86_64.rpm a718dd9d0f37305045a73b5c7e48cf1fb86f571994f0b404435555a7c4b8f4f6 ALBA-2020:4602 Copyright 2021 AlmaLinux OS 0 2 None

An update for iscsi-initiator-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iscsi-initiator-utils-devel-6.2.0.878-5.gitd791ce0.el8.i686.rpm 1735c3a768c85f443f6682c9285ed856e6a653e39805e97169bf5b0db09d932a iscsi-initiator-utils-devel-6.2.0.878-5.gitd791ce0.el8.x86_64.rpm cfd35582ad6b0524b0ba21ee41f1e82548d8578ed8d922c0ccba061274d369a4 ALSA-2020:4547 Copyright 2021 AlmaLinux OS 0 5 Low

An update for libpcap is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. The following packages have been upgraded to a later upstream version: libpcap (1.9.1). (BZ#1806422) Security Fix(es): * libpcap: Resource exhaustion during PHB header length validation (CVE-2019-15165) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpcap-devel-1.9.1-4.el8.i686.rpm a753469e89d8c27cb411d6379dad4ea665c5218fff32c7464a1ebef7411ff26f libpcap-devel-1.9.1-4.el8.x86_64.rpm c603370d236911aad713d23fde5261c4508fd0185be0efa92ae3b7801a360c06 ALBA-2020:5504 Copyright 2021 AlmaLinux OS 0 2 None

An update for xorg-x11-server is now available for AlmaLinux

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Bug Fix(es) and Enhancement(s): * [DELL 8.2 BUG]The modesetting driver does not gracefully handle missing connectors on EnterVT (BZ#1883491) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default xorg-x11-server-devel-1.20.8-6.1.el8_3.i686.rpm 9be465301054b0228a64c08b198eaa678b4deaec74d07f24fc4e72e7fffcf102 xorg-x11-server-devel-1.20.8-6.1.el8_3.x86_64.rpm 32f9ce51d94d0fc4b31b821d3fff2fceb0b5540c2234f1895e411f2b53984715 xorg-x11-server-source-1.20.8-6.1.el8_3.noarch.rpm 16eadb26ea6ff9fc2a72b810fec50998aef1666d27f08b118b0261461cdb9fc4 ALBA-2020:3056 Copyright 2021 AlmaLinux OS 0 6 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2019.5-2.20200421.git67f4838.el8.i686.rpm 956c604a70bcaad1882e4836807b5cbb2cd4cefbf96b1ad0c9de3bce819246ea spirv-tools-libs-2019.5-2.20200421.git67f4838.el8.i686.rpm dd6a63ffebbbca46fa2e0f97a525d7fa8c48b40fc22860700b62c635b434dda7 ALBA-2020:4574 Copyright 2021 AlmaLinux OS 0 2 None

An update for shim is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default shim-unsigned-x64-15-9.el8.alma.x86_64.rpm 529e37816071f1debb571ab4791199a5e961891ac8fc70fe7077cde8a00f3658 ALBA-2020:4644 Copyright 2021 AlmaLinux OS 0 2 None

An update for texlive is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texlive-lib-devel-20180414-19.el8.i686.rpm 29b1a1727d61520dda1970be90091dd4f89d470b99d893a3b5e035ce07a3127d texlive-lib-devel-20180414-19.el8.x86_64.rpm 74972123fcb47e42d06d23b001c9e998d87a9775aa5b7bf3773ddd7fbb3f3dbb ALBA-2019:3363 Copyright 2021 AlmaLinux OS 0 2 None

An update for sendmail is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sendmail-milter-devel-8.15.2-32.el8.i686.rpm 7a3a76b25725fc9721fa2f45e208b83a70d297ff4d4dd3aefd6a7ffa03329631 sendmail-milter-devel-8.15.2-32.el8.x86_64.rpm 3962627aa992c2f7dd6c500a5da7880ecc0937e1b0ec85c9ec4eb476cdd2bb71 ALBA-2021:0556 Copyright 2021 AlmaLinux OS 0 2 None

An update for glibc is now available for AlmaLinux

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Bug Fix(es) and Enhancement(s): * glibc: Transaction ID collisions cause slow DNS lookups in getaddrinfo (BZ#1904153) * glibc: memcpy calls are slower for AMD processors on AlmaLinux 8 than AlmaLinux 7 (BZ#1913750) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glibc-benchtests-2.28-127.el8_3.2.x86_64.rpm 611450da5f47d8aea96a991ffbbedb586977563a7ab510c206350c4ab7d3b4c1 True glibc-nss-devel-2.28-127.el8_3.2.i686.rpm 50315be355afcded928018deaff351ae93f95f1afa15c768b608a4a5f69f5996 True glibc-nss-devel-2.28-127.el8_3.2.x86_64.rpm 3044ad1d6ac0d3044dcb1be7391ee884eaf51f374d6c0e896275fc44c288b775 True glibc-static-2.28-127.el8_3.2.i686.rpm e18fdaac9df389cccd178365a8b4b84c4e693062945d03e5e2d44df442215125 True glibc-static-2.28-127.el8_3.2.x86_64.rpm 1759633005b521546e3dc2b766b5ae832bec9a35f45620adbbd8bd01aac1d05b True nss_hesiod-2.28-127.el8_3.2.i686.rpm d7873094f8f54faed6430e7afd5ab47efeda8fbf07b30ba13e749aab8d4a7b48 True nss_hesiod-2.28-127.el8_3.2.x86_64.rpm 3deecf97b1fb21720df6f7340c135061200ba26b725b981a497a61118a6b4511 True ALBA-2020:4668 Copyright 2021 AlmaLinux OS 0 2 None

An update for bcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bcc-devel-0.14.0-4.el8.x86_64.rpm f1338b1f502cfc0510742b21158376c5c7ba7f103cbefad1a2923d73c840eb04 bcc-doc-0.14.0-4.el8.noarch.rpm 5e33ce346aac0d72db3cfb9220c5c9caee5badeb2611079389f722cc2cb876ff ALBA-2020:1664 Copyright 2021 AlmaLinux OS 0 2 None

An update for openblas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openblas-Rblas-0.3.3-5.el8.x86_64.rpm 378c5a0c2714bf4b83a8f6ac1601a5217fdc7840718f632f780f2bafaf153c05 openblas-devel-0.3.3-5.el8.i686.rpm 8f285f556d62ca67e791d6259c7163127abac74a29e2f29b156bfd1d5ee47133 openblas-devel-0.3.3-5.el8.x86_64.rpm f9b2f96a67739eda372432579d27a319c746aca53fffad11834783f847b65bcb openblas-openmp-0.3.3-5.el8.i686.rpm 73d5a68ac254b57641f3ba33785fd05eae87928d55a296ccfdd4d88b1e8f7024 openblas-openmp-0.3.3-5.el8.x86_64.rpm 31b3a97df9c25fb8b0d903c46911c29c4ab29e49ee37d55eeb5e06b88dc32837 openblas-openmp64-0.3.3-5.el8.x86_64.rpm 2818548294a94ce86834a3faff4b735b58d531ac2b97314b95966f9438cd0cbe openblas-openmp64_-0.3.3-5.el8.x86_64.rpm 6f352591c81bb7f9bcb3adaa27cb512aae6f1eaf004691843c36dbdc20f125c8 openblas-serial64-0.3.3-5.el8.x86_64.rpm 13fbc51f50ba768e288baa7090ba3d440670c07c7b4cacd4de6fa029333d9ca5 openblas-serial64_-0.3.3-5.el8.x86_64.rpm a083812c263bcfc84eb7021811737bd9ec52e6bc84bd6909bbab8d4c56224660 openblas-static-0.3.3-5.el8.i686.rpm 5d24f2b8740329b1141a4c2199505f3ad729c160278c03b71953984d1d9740c9 openblas-static-0.3.3-5.el8.x86_64.rpm b49cf78953c21fa0a7681a73cc655e244aee19669b959cf1dabd690739ac7873 openblas-threads64-0.3.3-5.el8.x86_64.rpm d6158072204d330f20624bd12a10dc93112b1a6d045802b6f403b3d1ae46d4b6 openblas-threads64_-0.3.3-5.el8.x86_64.rpm 15c8a6fefc6509c7fb82f8c513cf6c9c417f4c971add1e2acf769b5cdce00a05 ALBA-2020:4569 Copyright 2021 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.3.0-9.el8.i686.rpm 81382e3deb50a85e9b6037057e80fe7013f0d6686606ee6a39ce0050b8c4cde6 libsss_nss_idmap-devel-2.3.0-9.el8.x86_64.rpm 5c0dbdcfa6d63e0674d7586f0593019b7d392a446c518a0a3a100eaf242409f7 ALSA-2020:4643 Copyright 2021 AlmaLinux OS 0 2 Low

An update for poppler is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc (CVE-2019-14494) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default poppler-cpp-0.66.0-27.el8.i686.rpm 1d17317df6955ad54e4981f6d11142dddc6bbe09d90084ca21617b3d14b2471b poppler-cpp-0.66.0-27.el8.x86_64.rpm d4212873588c2032ed25a7fbb12a25d4c79467dd2076f32127e8207225122d9d poppler-cpp-devel-0.66.0-27.el8.i686.rpm fda0eec2b1b946486170a0e991136b0e9607aaf0a83ea0ed9b7bc2895f5bb61a poppler-cpp-devel-0.66.0-27.el8.x86_64.rpm 138252dc01eac0a7ddac61f47d7cefdab6013f24dce1c2badd190db55b294a74 poppler-devel-0.66.0-27.el8.i686.rpm 4835b664b5220a4b1fe1a8b81e4cbedbfa16107557fe661fd112d7e6f1d04629 poppler-devel-0.66.0-27.el8.x86_64.rpm b924bce1901c9dbca3f2cd4a0042d20772f2a24601d4a05ed460a21a9f9b8514 poppler-glib-devel-0.66.0-27.el8.i686.rpm 4952f293318c86b2ede65081f7f7d0fd3395ba7c55225c45a097061bd42e5e69 poppler-glib-devel-0.66.0-27.el8.x86_64.rpm a35c18f4568325762630a8dfde07a12974df3c28821a2ee32af25ee5b913762e poppler-qt5-0.66.0-27.el8.i686.rpm 5d090f674d6776a1e5502351a2c7f31aa12677614349552fca193f152332fcca poppler-qt5-0.66.0-27.el8.x86_64.rpm 909f7db56d8dafdc8bf306b507b1cf48a8cda4a288ece7ded3ef311588e44e3e poppler-qt5-devel-0.66.0-27.el8.i686.rpm 9f97a36291102b2450cf51c4238a08a205feac098428c234533818c3f788d082 poppler-qt5-devel-0.66.0-27.el8.x86_64.rpm 0a54aaebcb16c3726517fcc21d5140a6a25d40faa4463ea9279239d64f4bdc8f ALBA-2019:3531 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsepol is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsepol-static-2.9-1.el8.i686.rpm c9c49bb652ac9b99dfeff6cd81e86528be6d0c454284d2d597294664823786c7 libsepol-static-2.9-1.el8.x86_64.rpm 5f5c34d265be534d7c0abfe2cbed9f3b22c6100a706807ae19a8208b73aa7f98 ALEA-2020:1844 Copyright 2021 AlmaLinux OS 0 3 None

An update for OpenIPMI is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default OpenIPMI-devel-2.0.27-1.el8.i686.rpm 38eeb658a00c00cefec0b464db495e8361bb7c0b3255b26701f8f4cb220eae5c OpenIPMI-devel-2.0.27-1.el8.x86_64.rpm ded77c0a6f79c2a89e6691b2c8995acbd8f916dcc0159ddf30981685daba487f ALBA-2019:3512 Copyright 2021 AlmaLinux OS 0 4 None

An update for TPM 2.0 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tpm2-abrmd-devel-2.1.1-3.el8.i686.rpm 291da9efaac3998941ec3417a081383e641eee2665b9bb03c2ec93a0f039195b tpm2-abrmd-devel-2.1.1-3.el8.x86_64.rpm 5fea17b9b1390273c9a3be516088791eb0f1a2249274cbac3ec95fbe0ac8dd73 ALBA-2020:4530 Copyright 2021 AlmaLinux OS 0 3 None

An update for nfs-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-35.el8.i686.rpm 8092d1f7dca02d533ae29cdfb0520c03257c31d09c3465f71fe89085ceeaffde libnfsidmap-devel-2.3.3-35.el8.x86_64.rpm 08a64abbde9e23e33dfd860ca3594a79e0cac023df4030375932ca2f164ad22a ALBA-2020:4504 Copyright 2021 AlmaLinux OS 0 2 None

An update for gcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-plugin-devel-8.3.1-5.1.el8.alma.i686.rpm 05e7d08b8d102dd51cccf3a8ac1c032713972b3fed28624900fe09ccd495f11c gcc-plugin-devel-8.3.1-5.1.el8.alma.x86_64.rpm 7c8538c6c5648fbc3855f08265c36fc6d8438c9eeaab6274cb38e803a9fd8853 libstdc++-static-8.3.1-5.1.el8.alma.i686.rpm 9f0fbaef2c3af3cfea43581a373ccadcc7c622b4da98373f69822217ed8611c6 libstdc++-static-8.3.1-5.1.el8.alma.x86_64.rpm 9d40603b0565509da19aea2915c94705e0569e72d70e276e4c4692acc2436c74 ALBA-2020:1824 Copyright 2021 AlmaLinux OS 0 3 None

An update for augeas is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default augeas-devel-1.12.0-5.el8.i686.rpm 2b59d43759e67d6b401c006de472942bf6d18f1660847009593691cb684cc895 augeas-devel-1.12.0-5.el8.x86_64.rpm 733ae14e8bc8b7a9a4c1fd410a4af8372f8d05d7086769bea652b8db9a28ca92 ALBA-2020:4441 Copyright 2021 AlmaLinux OS 0 2 None

An update for glusterfs is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glusterfs-api-devel-6.0-37.2.el8.x86_64.rpm 4b77226db1f1233a047b22040d6b4296152e5ef22c834f4b72b606f5deeefeaf glusterfs-devel-6.0-37.2.el8.x86_64.rpm 14227d0107d3fe083f4742892600272186e840279e978bbe3c54dc82a2bf8d90 ALBA-2020:4581 Copyright 2021 AlmaLinux OS 0 2 None

An update for libdb is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdb-cxx-5.3.28-39.el8.i686.rpm 850ef531f36fb947e23b30be4592c3f4f39ffe946640c3b5be8ebcc901351f5c libdb-cxx-5.3.28-39.el8.x86_64.rpm 0acaded09380da4e961c255d43ab51a7818ffa2c9a86e73e1ecc76eb6988674f libdb-cxx-devel-5.3.28-39.el8.i686.rpm 62abb8f6805615a93430bab5512166a2a5c15082eee62b9d884092d1b9fecbe5 libdb-cxx-devel-5.3.28-39.el8.x86_64.rpm f883f2366f1fe4d537dc50e4a77e7fc9cb913ca7befaeacb29046124c384e42c libdb-devel-doc-5.3.28-39.el8.noarch.rpm df0490facf3d01a645179e731183f6fc65972ba44fcbdbc4632be6b37ae47825 libdb-sql-5.3.28-39.el8.i686.rpm b3f937f3a492d971a79ba5baf2ffa3c47dc5e76592338ee42fce57976f09eb03 libdb-sql-5.3.28-39.el8.x86_64.rpm 7a8595cab31bfd781cb4d8477240c5a094e1a3652fd248ca0e7e52dbd6aa66d7 libdb-sql-devel-5.3.28-39.el8.i686.rpm a8c4f107ecf2476868b4d3a46d0612e60351c63fd6bd216bedd012b47a5b1703 libdb-sql-devel-5.3.28-39.el8.x86_64.rpm 3bdea045fcd097f6e6e375484998115cea88b5bc46a10b53209305acd7b454ad ALEA-2020:4571 Copyright 2021 AlmaLinux OS 0 2 None

An update for elfutils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default elfutils-devel-static-0.180-1.el8.i686.rpm f7178c5f343473a72101d27d072ef156f67c439bdaeb571feb4db70a1ce08756 elfutils-devel-static-0.180-1.el8.x86_64.rpm 2307acb24cac81b796dfabf272b9bded122cc54a605aa3570cfabfcf561b0056 elfutils-libelf-devel-static-0.180-1.el8.i686.rpm 5a7c12a92a2dcacfa16b9f15dc94b167e98e591734007e0dbda75f4bdd3adf97 elfutils-libelf-devel-static-0.180-1.el8.x86_64.rpm ecd94a89f84879c002a4983ea89355bad22a467863fb03f1d3cbff1b8b53e4c5 ALSA-2020:4763 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for dovecot is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fix(es): * dovecot: command followed by sufficient number of newlines leads to use-after-free (CVE-2020-10958) * dovecot: sending mail with empty quoted localpart leads to DoS (CVE-2020-10967) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dovecot-2.3.8-4.el8.i686.rpm 9324049119e6a1e8d40ac4da979dfb9b56249f208e1b18149b3c7389a0a7014e dovecot-devel-2.3.8-4.el8.i686.rpm 3d51c176a4cecd1b28c998c9b0b27fb62da44a76a9977735c89ef85caf62b562 dovecot-devel-2.3.8-4.el8.x86_64.rpm e64405f9af4301a9bb5704b0206ef51b5c6ef8b21d812731881fdb68694f5475 ALSA-2020:4628 Copyright 2021 AlmaLinux OS 0 4 Low

An update for libreoffice, libcmis, and liborcus is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite. The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893) Security Fix(es): * libreoffice: 'stealth mode' remote resource restrictions bypass (CVE-2020-12802) * libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libreoffice-sdk-6.3.6.2-3.el8.alma.x86_64.rpm 143535ccf197cb6d5d852ca23de2cc1c7fa9cd8a08d00d5d99d9ddace8c27944 libreoffice-sdk-doc-6.3.6.2-3.el8.alma.x86_64.rpm 23d91d944b3fa30a9b703d4e2c6b5b07ff08d9ad9a6bc61c6134b5705068ed92 ALBA-2020:4637 Copyright 2021 AlmaLinux OS 0 2 None

An update for cups-filters is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default cups-filters-devel-1.20.0-20.el8.i686.rpm 4d7e1459e6876fd9eab9492562b47c83aaec68791f8083073d38ff8db029865d cups-filters-devel-1.20.0-20.el8.x86_64.rpm 3096f6752db95a22882befb99da9de49c986cb57447f924045dbb06bc4cea930 ALBA-2020:4591 Copyright 2021 AlmaLinux OS 0 2 None

An update for libstoragemgmt is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libstoragemgmt-devel-1.8.3-2.el8.i686.rpm deab6216b1d5b91a99873ad1dae6d99b49ffd6c874691964490b12734d57bd55 libstoragemgmt-devel-1.8.3-2.el8.x86_64.rpm 620e46f0289c2577e2386fe80c590e8f7a14854cd2542206ef3b4500d0bb965d ALBA-2020:4531 Copyright 2021 AlmaLinux OS 0 2 None

An update for file is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default file-devel-5.33-16.el8.i686.rpm 36d58b6a3e0b294a3c44d4d4d15a7c6b6c15837850724111aea519055503d46a file-devel-5.33-16.el8.x86_64.rpm a03f01ec7051d8d969b493ebe04f8cf7158b195e10507758fbdd3b611b2e274d ALBA-2021:0554 Copyright 2021 AlmaLinux OS 0 2 None

An update for lvm2 is now available for AlmaLinux

The lvm2 packages include complete support for handling read and write operations on physical volumes, creating volume groups from one or more physical volumes, and creating one or more logical volumes in volume groups. Bug Fix(es) and Enhancement(s): * lvmvdo(7) manpage bugs (manpage needs refinement) (BZ#1895081) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-devel-1.02.171-5.el8_3.2.i686.rpm 1178f50b472785a7a75b47a5d19036d89a61fd40ad7f904bbd157ac2271a6151 device-mapper-devel-1.02.171-5.el8_3.2.x86_64.rpm 066f7e96f83e174da462ff1bcae6a42c694c638af5899c448de512e3909e4180 device-mapper-event-devel-1.02.171-5.el8_3.2.i686.rpm d86db7d8282cd6ea41bcc60cbf1d1d06c4d3fcf21e927c19e7fc5f5197764cdc device-mapper-event-devel-1.02.171-5.el8_3.2.x86_64.rpm 88646ba91462818f494efab4738129e88e73fca1ef1f7a910cb397941b3f1cbf lvm2-devel-2.03.09-5.el8_3.2.i686.rpm dd177d0f4c782b686c7cf2fb6d9dfb61675446edb53097c0f51a015f8e9af615 lvm2-devel-2.03.09-5.el8_3.2.x86_64.rpm 99db6b04f1e97b47272e63fac70bdf29287d8f2893a95ec94887e18343668831 ALBA-2020:1654 Copyright 2021 AlmaLinux OS 0 3 None

An update for dyninst is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dyninst-devel-10.1.0-4.el8.i686.rpm 44c0b479be28b78186dc357c8e131c652436ddebc5ff45a10552a4afa898844b dyninst-devel-10.1.0-4.el8.x86_64.rpm d00a2c0b4cc90964299426ddd303a9b1b2596d0905b563889ee99dcf9f0173b6 dyninst-doc-10.1.0-4.el8.x86_64.rpm 0ab506a9062f4cf654daca53480dac364ef968bc64c0c19e749d20a51b168d3e dyninst-static-10.1.0-4.el8.i686.rpm 23c948ff38156f249c7650f814102db5f46a045e35e5e2a347df4cae9221907c dyninst-static-10.1.0-4.el8.x86_64.rpm bf12d792d1e12adc232c430b7f64995cf700f5ad292cd540e3e46a1bd8621428 dyninst-testsuite-10.1.0-4.el8.x86_64.rpm be97b8c77d86614aeca37f2fbc91a2cc91e4f593de325b96284fb44a1674a4a0 ALBA-2020:4589 Copyright 2021 AlmaLinux OS 0 2 None

An update for libsemanage is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsemanage-devel-2.9-3.el8.x86_64.rpm 1976b1bca212d6b2eb113ebbf983ab80cb3e89c70e4b33336d982466bbf41478 ALBA-2020:4635 Copyright 2021 AlmaLinux OS 0 2 None

An update for ghostscript is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ghostscript-doc-9.25-7.el8.noarch.rpm 65387f1dd6e929fca160db21aef0865007d6aa854c1026131d8c99f3fd0c7003 ghostscript-tools-dvipdf-9.25-7.el8.x86_64.rpm 0661595d192004e73627118071080dd2f99c002298fd367338f6a985a97f8f74 ghostscript-tools-fonts-9.25-7.el8.x86_64.rpm 0fa452b59ad0a2f4289de2dc21f63356852a6e0a2bc71b44e84c1c883b786228 ghostscript-tools-printing-9.25-7.el8.x86_64.rpm 37be3dab93488d5db5d97ee8c9cd56a3eff0bdbb5673f093c3decc0b7b2055be libgs-devel-9.25-7.el8.i686.rpm 036fac14bef4bc348e3d85599afc06a7e4a7eb5ae4b3b7360c6c1bf29f7dc4d6 libgs-devel-9.25-7.el8.x86_64.rpm f0fe5e3b86b032481202cc49ec02e35858f47631f672a9a9c4dd6e0a380b77cc ALSA-2021:0558 Copyright 2021 AlmaLinux OS 0 9 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: locking issue in drivers/tty/tty_jobctrl.c can lead to an use-after-free (CVE-2020-29661) * kernel: performance counters race condition use-after-free (CVE-2020-14351) * kernel: ICMP rate limiting can be used for DNS poisoning attack (CVE-2020-25705) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Final fixes + drop alpha_support flag requirement for Tigerlake (BZ#1882620) * OVS complains Invalid Argument on TCP packets going into conntrack (BZ#1892744) * BUG: using smp_processor_id() in preemptible [00000000] code: handler106/3082 (BZ#1893281) * Icelake performance - add intel_idle: Customize IceLake server support to AlmaLinux-8 (BZ#1897183) * [mlx5] IPV6 TOS rewrite flows are not getting offloaded in HW (BZ#1897688) * AlmaLinux 8.3 SAS - multipathd fails to re-establish paths during controller random reset (BZ#1900112) * AlmaLinux8.3 Beta - AlmaLinux8.3 hangs on dbginfo.sh execution, crash dump generated (mm-) (BZ#1903019) * Win10 guest automatic reboot after migration in Win10 and WSL2 on AMD hosts (BZ#1905084) * block, dm: fix IO splitting for stacked devices (BZ#1905136) * Failed to hotplug scsi-hd disks (BZ#1905214) * PCI quirk needed to prevent GPU hang (BZ#1906516) * AlmaLinux8.2 - various patches to stabilize the OPAL error log processing and the powernv dump processing (ESS) (BZ#1907301) * pmtu not working with tunnels as bridge ports and br_netfilter loaded (BZ#1907576) * [ThinkPad X13/T14/T14s AMD]: Kdump failed (BZ#1907775) * NFSv4 client improperly handles interrupted slots (BZ#1908312) * NFSv4.1 client ignores ERR_DELAY during LOCK recovery, could lead to data corruption (BZ#1908313) * [Regression] AlmaLinux8.2 - [kernel 148.el8] cpu (sys) time regression in SAP HANA 2.0 benchmark benchInsertSubSelectPerformance (BZ#1908519) * AlmaLinux8: kernel-rt: kernel BUG at kernel/sched/deadline.c:1462! (BZ#1908731) * SEV VM hang at efi_mokvar_sysfs_init+0xa9/0x19d during boot (BZ#1909243) * C6gn support requires "Ensure dirty bit is preserved across pte_wrprotect" patch (BZ#1909577) * [Lenovo 8.3 & 8.4 Bug] [Regression] No response from keyboard and mouse when boot from tboot kernel (BZ#1911555) * Kernel crash with krb5p (BZ#1912478) * [AlmaLinux8] Need additional backports for FIPS 800-90A DRBG entropy seeding source (BZ#1912872) * [Hyper-V][AlmaLinux-8] Request to included a commit that adds a timeout to vmbus_wait_for_unload (BZ#1913528) * Host becomes unresponsive during stress-ng --cyclic test rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: (BZ#1913964) * AlmaLinux8.4: Backport upstream RCU patches up to v5.6 (BZ#1915638) * Missing mm backport to fix regression introduced by another mm backport (BZ#1915814) * [Hyper-V][AlmaLinux-8]video: hyperv_fb: Fix the cache type when mapping the VRAM Edit (BZ#1917711) * ionic 0000:39:00.0 ens2: IONIC_CMD_Q_INIT (40) failed: IONIC_RC_ERROR (-5) (BZ#1918372) * [certification] mlx5_core depends on tls triggering TAINT_TECH_PREVIEW even if no ConnectX-6 card is present (BZ#1918743) * kvm-rhel8.3 [AMD] - system crash observed while powering on virtual machine with attached VF interfaces. (BZ#1919885) Enhancement(s): * [Mellanox 8.4 FEAT] mlx5: Add messages when VF-LAG fails to start (BZ#1892344) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-240.15.1.el8_3.x86_64.rpm add5a9c8240aa251cfb8c00fbb82a4d03064449c36c7fb3f847cdc1116d8b193 True ALBA-2020:4639 Copyright 2021 AlmaLinux OS 0 2 None

An update for memkind is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default memkind-devel-1.10.0-10.el8.x86_64.rpm 99ab381181f6687bed8d9eec06b0ccd79e030cd85438dad9ed7b39f617c38e1d ALSA-2020:4647 Copyright 2021 AlmaLinux OS 0 7 Moderate

An update for freerdp and vinagre is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. The vinagre packages provide the Vinagre remote desktop viewer for the GNOME desktop. The following packages have been upgraded to a later upstream version: freerdp (2.1.1). (BZ#1834287) Security Fix(es): * freerdp: Out of bound read in cliprdr_server_receive_capabilities (CVE-2020-11018) * freerdp: Out of bound read/write in usb redirection channel (CVE-2020-11039) * freerdp: out-of-bounds read in update_read_icon_info function (CVE-2020-11042) * freerdp: out-of-bounds read in autodetect_recv_bandwidth_measure_results function (CVE-2020-11047) * freerdp: Out-of-bounds read in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c. (CVE-2020-13396) * freerdp: Out-of-bounds read in security_fips_decrypt in libfreerdp/core/security.c (CVE-2020-13397) * freerdp: Out of bound read in update_recv could result in a crash (CVE-2020-11019) * freerdp: Integer overflow in VIDEO channel (CVE-2020-11038) * freerdp: Out of bound access in clear_decompress_subcode_rlex (CVE-2020-11040) * freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu (CVE-2020-11041) * freerdp: out of bound read in rfx_process_message_tileset (CVE-2020-11043) * freerdp: double free in update_read_cache_bitmap_v3_order function (CVE-2020-11044) * freerdp: out of bounds read in update_read_bitmap_data function (CVE-2020-11045) * freerdp: out of bounds seek in update_read_synchronize function could lead out of bounds read (CVE-2020-11046) * freerdp: out-of-bounds read could result in aborting the session (CVE-2020-11048) * freerdp: out-of-bound read of client memory that is then passed on to the protocol parser (CVE-2020-11049) * freerdp: stream out-of-bounds seek in rdp_read_font_capability_set could lead to out-of-bounds read (CVE-2020-11058) * freerdp: out-of-bounds read in cliprdr_read_format_list function (CVE-2020-11085) * freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function (CVE-2020-11086) * freerdp: out-of-bounds read in ntlm_read_AuthenticateMessage (CVE-2020-11087) * freerdp: out-of-bounds read in ntlm_read_NegotiateMessage (CVE-2020-11088) * freerdp: out-of-bounds read in irp functions (CVE-2020-11089) * freerdp: out-of-bounds read in gdi.c (CVE-2020-11522) * freerdp: out-of-bounds read in bitmap.c (CVE-2020-11525) * freerdp: Stream pointer out of bounds in update_recv_secondary_order could lead out of bounds read later (CVE-2020-11526) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freerdp-devel-2.1.1-1.el8.i686.rpm 039cd71e74b668f1ff3e4a068cfe6aeb22d4e4b878a3ee16429467bac5b82af8 freerdp-devel-2.1.1-1.el8.x86_64.rpm 0d2fb3b5aa877db896f5c722897ff18b72f635c5c2f7603e1f4f0aaab5158d64 ALSA-2020:4844 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for fontforge is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Security Fix(es): * fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default fontforge-20170731-15.el8.i686.rpm 22a1244c9ee94f8ddb2863a01587b263892196091a647a1832a377dd724eae94 fontforge-20170731-15.el8.x86_64.rpm e999711c1e075d00be50c3d4512c1f6fc216973231b5e6d5df5907429a62402a ALBA-2021:0563 Copyright 2021 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * Bond port been deattached when attaching this bond to a new linux bridge (BZ#1915832) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.26.0-13.el8_3.i686.rpm cacf7852513663c56cf59e6c02dd898f30a6360de06cc3168711f79f18541b27 NetworkManager-libnm-devel-1.26.0-13.el8_3.x86_64.rpm dfae9217fec71706121a4b2f11771c43599056e7e5eab273ef9c02d993e167a4 ALEA-2020:4818 Copyright 2021 AlmaLinux OS 0 4 None

An update for spice is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spice-server-devel-0.14.3-3.el8.i686.rpm 8ce31386c9bb67736db7501733ef0786b313fd09032ee662539eb26174a2db25 spice-server-devel-0.14.3-3.el8.x86_64.rpm 232d42d54ac81dc463899559886eecbc9432e71c1e209876b0136337037e47ef ALBA-2019:3638 Copyright 2021 AlmaLinux OS 0 2 None

An update for trousers is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tpm-tools-devel-1.3.9-7.el8.i686.rpm a8591106efd9fd4d0cf25d99c6c4c23a8a14faf019d93e69a704ef8b0cfbceed tpm-tools-devel-1.3.9-7.el8.x86_64.rpm c7ce0b93b203313cf33d9602e872eda534a2722881012b80fe2767b2c633c817 trousers-devel-0.3.14-4.el8.i686.rpm 697ecca9b84fc4b7d5117f7eb0c8cb46dd4e549dd3ceff9adf66dbabf48073aa trousers-devel-0.3.14-4.el8.x86_64.rpm 7ba8a6787b041eaaf52aa48ae0ee0f01385e399d790e53fcb00766c608b72f78 ALBA-2020:4562 Copyright 2021 AlmaLinux OS 0 2 None

An update for bluez is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bluez-libs-devel-5.52-1.el8.alma.i686.rpm eeba113f32321e7f1035204cc9a81dde7db26bd6e0b25d362ba52b87a1b9acf5 bluez-libs-devel-5.52-1.el8.alma.x86_64.rpm 6f49e0c829bb8b663bc6629bc1f2fc962cd4ad595fb0f6df9c755d113b208e91 ALEA-2020:1767 Copyright 2021 AlmaLinux OS 0 5 None

An update for flatpak is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default geoclue2-devel-2.5.5-1.el8.i686.rpm c6e0c531af0134858e9db15266265c836b7347a7903449da14c8b1d1858149e4 geoclue2-devel-2.5.5-1.el8.x86_64.rpm d0f23640bd1fd4e37eb1459c05e403f65280491099196b67b4df4fb69d418ba1 ALBA-2020:4588 Copyright 2021 AlmaLinux OS 0 2 None

An update for libbpf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libbpf-devel-0.0.8-4.el8.i686.rpm 37a543590530ab55cdb7b24f901b093cf43103713eb9a5940a33749c8e01f6a6 libbpf-devel-0.0.8-4.el8.x86_64.rpm 98e4b5f7b297857ad9772d789dd066bb39e2170d0db4d7019f516774bd46258f libbpf-static-0.0.8-4.el8.i686.rpm 097c182b038bd9cd1c46f40585a3c9292e89b4cdf2e017fa82890284b7758f5e libbpf-static-0.0.8-4.el8.x86_64.rpm e559e9d134e4dc16dae849ce69baa4f7c1cf468504276a5b84b1df5921452b07 ALBA-2021:0561 Copyright 2021 AlmaLinux OS 0 2 None

An update for kmod is now available for AlmaLinux

The kmod packages provide various programs needed for automatic loading and unloading of modules under 2.6, 3.x, and later kernels, as well as other module management programs. Bug Fix(es) and Enhancement(s): * Symbolic links are not created after applying an errata kernel (BZ#1915253) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kmod-devel-25-16.el8_3.1.i686.rpm 6608d8e47c816b2fd31cb16317ddb4f55ec52da8b87e251cc406c1732e4e4937 kmod-devel-25-16.el8_3.1.x86_64.rpm e0b26f608a9bbc861d737568b33e4813cd29435bd98dc7b93b6abccb0461385b ALBA-2020:4845 Copyright 2021 AlmaLinux OS 0 2 None

An update for dwarves is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dwarves-1.17-1.el8.x86_64.rpm 8495ef565a94960aa06cd6dfafcdf4b89c233c2fabe20265ca7da193376b1d5d libdwarves1-1.17-1.el8.i686.rpm 0bf2b8c054ab4aa83f289b1fd35720ddbb815c8b0265435b029f7dcc3cc93283 libdwarves1-1.17-1.el8.x86_64.rpm 03940b8a32cfd5bce5962d048c200449b555056e1f839ef6d1fc918f37c2be02 ALSA-2020:4690 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for qt5-qtbase, qt5-qttools, and qt5-qtwebsockets is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fix(es): * qt: XML entity expansion vulnerability (CVE-2015-9541) * qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS (CVE-2018-21035) * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0569) * qt: files placed by attacker can influence the working directory and lead to malicious code execution (CVE-2020-0570) * qt5: incorrectly calls SSL_shutdown() in OpenSSL mid-handshake causing denial of service in TLS applications (CVE-2020-13962) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qt5-qtbase-static-5.12.5-6.el8.i686.rpm 6d2ada93bc5119a88eb282fa9ea6b862c12d9091f0cb8407d755fbeb88f11b27 qt5-qtbase-static-5.12.5-6.el8.x86_64.rpm bdad9b6b54fcc7ab9f0c6bba183f41ac575b36c0aca0a189b06636873abc7453 qt5-qttools-static-5.12.5-2.el8.i686.rpm ab9a111b516d3e15a955184de790c62dfd7e1068e894db237183df840c9fb42b qt5-qttools-static-5.12.5-2.el8.x86_64.rpm f55373b68b0cd18b6bc2827dcd09c2836834f0d415da2f5d7007172a0f835c7d ALBA-2020:4478 Copyright 2021 AlmaLinux OS 0 2 None

An update for iproute is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iproute-devel-5.3.0-5.el8.i686.rpm 32796524f62b2dc61ffe53447affb9d8a2d4adfecc26d5fb67e3bdb9f98da0c2 iproute-devel-5.3.0-5.el8.x86_64.rpm 788568fb07721d6286e89e39fc183c172485c59bcc5a58665a881d162e8002cc ALEA-2021:0532 Copyright 2021 AlmaLinux OS 0 3 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2020.5-2.20201031.gitf7da527.el8.x86_64.rpm 018fab59f08872b480a3d7bdffef78426871456be34dbbdc303bd7243bc928d5 ALBA-2021:0539 Copyright 2021 AlmaLinux OS 0 2 None

An update for libblockdev is now available for AlmaLinux

The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID. Bug Fix(es) and Enhancement(s): * libblockdev doesn't run external utilities with LC_ALL=C and fails to parse their localized output (BZ#1895286) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libblockdev-crypto-devel-2.24-2.el8_3.i686.rpm 806abb3e8fd6a0ee9e36dcba1bac3ea9f20427c15fdca79ff6968fe9ce5eafc8 libblockdev-crypto-devel-2.24-2.el8_3.x86_64.rpm 8469bf06d6c4ca6f9584f83aa6bec2c5594c0865ddba2a4214b26848eb0eaef8 libblockdev-devel-2.24-2.el8_3.i686.rpm 7ab5f12326ee82c4f173143c430aa10e3c5f80429d47a95211f2900194d80a67 libblockdev-devel-2.24-2.el8_3.x86_64.rpm da8b7bad6d065ece4c51b438e83c6b3ce3fb9b158d946f77c4f35dd9c72f0ba6 libblockdev-fs-devel-2.24-2.el8_3.i686.rpm 0d839e62c5fe059d2490a1c9c5c4a662cdb4bf845af86223d0f56909329ad185 libblockdev-fs-devel-2.24-2.el8_3.x86_64.rpm 5df449b75af7419fb95020b00ee699b353f341419ba8801b57e4dacbaf1e4419 libblockdev-loop-devel-2.24-2.el8_3.i686.rpm b56ac30092dcf5bf4a762490120bc62fe1123f419e7715cbba17ee13267876cb libblockdev-loop-devel-2.24-2.el8_3.x86_64.rpm 1aa2bac51f9ab26156173fa15a68e71f62ebc388c34fc6f4ce9d4c68f1e3932e libblockdev-lvm-devel-2.24-2.el8_3.i686.rpm 451189d61207fd45ef19afaf50936634ac6ee897fe8b74dfa962fbb738e209be libblockdev-lvm-devel-2.24-2.el8_3.x86_64.rpm 456edf5ed3d573d8bd3360c213d1d4813e55cd3706ee835574e292bfc6646f74 libblockdev-mdraid-devel-2.24-2.el8_3.i686.rpm 16d65a8631b7f6ea76f7bd1c011e52fce7b95f003c0378043724f7e634e578b8 libblockdev-mdraid-devel-2.24-2.el8_3.x86_64.rpm 38e9eeaa7b95572e78a38184c24361cec216b64ba8878e090fc5212cdf698010 libblockdev-part-devel-2.24-2.el8_3.i686.rpm f463ea13a69cd3f139f1033745488433f4d162a9df7246ecacc4ed366e3e715b libblockdev-part-devel-2.24-2.el8_3.x86_64.rpm 9b24f1683d063fa8307781d373c918b78670e1319d763c6a4afc9200f62c85b0 libblockdev-swap-devel-2.24-2.el8_3.i686.rpm fe06a633f0467ad2c511330e29c5335d9850efcd03990d90ec1bc33323a07e99 libblockdev-swap-devel-2.24-2.el8_3.x86_64.rpm b9207c03710bdb485caacc78b2242cad4654f75b49e1e03fbb4863675c90566d libblockdev-utils-devel-2.24-2.el8_3.i686.rpm 895a5a595e4b7957169553a466f16ac2c4f73d8b0510604f504ce08798618b2d libblockdev-utils-devel-2.24-2.el8_3.x86_64.rpm 4b5e64745e770cf359cbcf04f221e33e69cbeea594372db1113414428b2d3a0e libblockdev-vdo-devel-2.24-2.el8_3.i686.rpm 35e21f9fd10800b9564d8828111fe61745bb54a8678b4bcf6dadeaec217e4417 libblockdev-vdo-devel-2.24-2.el8_3.x86_64.rpm c17a87c876ad1a751feb9fcd318df12206565bbc33f039f650153b09f93df245 ALBA-2020:4595 Copyright 2021 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.2-1.el8.i686.rpm 241b38f0bd478444aec33a69531ae1618ceccd18e6940e54768c370266868e46 sanlock-devel-3.8.2-1.el8.x86_64.rpm bcb905d332b0a2a6887336b9e08d1f45025c545462613ea7658e38369521f726 ALBA-2020:3657 Copyright 2021 AlmaLinux OS 0 3 None

An update for zlib is now available for AlmaLinux

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Bug Fix(es) and Enhancement(s): * AlmaLinux8.2 - zlib on s390x may produce incomplete raw (but not gzip/zlib) streams (BZ#1860952) * AlmaLinux8.2 - raw zlib test failed with DFLTCC_LEVEL_MASK set to 0x1ff (BZ#1862108) * AlmaLinux8.2 - Fix support for IBM Z hardware-accelerated deflate (zlib) (BZ#1867876) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zlib-static-1.2.11-16.el8_2.i686.rpm e2120fc54d7540faaaf833169269582edc7167e3d2beda3040913e9c059ab103 zlib-static-1.2.11-16.el8_2.x86_64.rpm cc0eb42ed84a0b053b5439bb9a090cb91b3c87bd5b18e89a6f3f203535f693fb ALSA-2020:4431 Copyright 2021 AlmaLinux OS 0 6 Moderate

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use after free in the video driver leads to local privilege escalation (CVE-2019-9458) * kernel: use-after-free in drivers/bluetooth/hci_ldisc.c (CVE-2019-15917) * kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg (CVE-2019-15925) * kernel: memory leak in ccp_run_sha_cmd() (CVE-2019-18808) * kernel: Denial Of Service in the __ipmi_bmc_register() (CVE-2019-19046) * kernel: out-of-bounds write in ext4_xattr_set_entry (CVE-2019-19319) * Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid (CVE-2019-19332) * kernel: use-after-free in ext4_put_super (CVE-2019-19447) * kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free (CVE-2019-19524) * kernel: race condition caused by a malicious USB device in the USB character device driver layer (CVE-2019-19537) * kernel: use-after-free in serial_ir_init_module() (CVE-2019-19543) * kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry (CVE-2019-19767) * kernel: use-after-free in debugfs_remove (CVE-2019-19770) * kernel: out-of-bounds write via crafted keycode table (CVE-2019-20636) * kernel: possible use-after-free due to a race condition in cdev_get (CVE-2020-0305) * kernel: out-of-bounds read in in vc_do_resize function (CVE-2020-8647) * kernel: use-after-free in n_tty_receive_buf_common function (CVE-2020-8648) * kernel: invalid read location in vgacon_invert_region function (CVE-2020-8649) * kernel: uninitialized kernel data leak in userspace coredumps (CVE-2020-10732) * kernel: SELinux netlink permission check bypass (CVE-2020-10751) * kernel: out-of-bounds write in mpol_parse_str (CVE-2020-11565) * kernel: mishandles invalid descriptors in drivers/media/usb/gspca/xirlink_cit.c (CVE-2020-11668) * kernel: buffer overflow in mt76_add_fragment function (CVE-2020-12465) * kernel: xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write which could result in crash and data coruption (CVE-2020-12659) * kernel: sg_write function lacks an sg_remove_request call in a certain failure case (CVE-2020-12770) * kernel: possible to send arbitrary signals to a privileged (suidroot) parent process (CVE-2020-12826) * kernel: referencing inode of removed superblock in get_futex_key() causes UAF (CVE-2020-14381) * kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS (CVE-2020-25641) * kernel: kernel pointer leak due to WARN_ON statement in video driver leads to local information disclosure (CVE-2019-9455) * kernel: null pointer dereference in dlpar_parse_cc_property (CVE-2019-12614) * kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c (CVE-2019-16231) * kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c (CVE-2019-16233) * kernel: memory leak in af9005_identify_state() function (CVE-2019-18809) * kernel: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function (CVE-2019-19056) * kernel: memory leak in the crypto_report() function (CVE-2019-19062) * kernel: Two memory leaks in the rtl_usb_probe() function (CVE-2019-19063) * kernel: A memory leak in the rtl8xxxu_submit_int_urb() function (CVE-2019-19068) * kernel: A memory leak in the predicate_parse() function (CVE-2019-19072) * kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c (CVE-2019-19533) * kernel: Null pointer dereference in drop_sysctl_table() (CVE-2019-20054) * kernel: kernel stack information leak on s390/s390x (CVE-2020-10773) * kernel: possibility of memory disclosure when reading the file /proc/sys/kernel/rh_features (CVE-2020-10774) * kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field (CVE-2020-10942) * kernel: sync of excessive duration via an XFS v5 image with crafted metadata (CVE-2020-12655) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-240.el8.x86_64.rpm ad958429fc2e2a8973ff4610c42e00e85454890cfa63b47f877e5ec60dfc6dfe True ALBA-2019:3676 Copyright 2021 AlmaLinux OS 0 3 None

An update for the hwloc module is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default hwloc-devel-1.11.9-3.el8.i686.rpm edc8ab2f28a766a0fe261ddab5a6c107e0940c6dc3784e778eb92af5928801f3 hwloc-devel-1.11.9-3.el8.x86_64.rpm df030e5aec5dc0a237a64aeb7d197e332a9a271677a6333fbcee79d6736c26c5 ALBA-2019:3523 Copyright 2021 AlmaLinux OS 0 2 None

An update for ima-evm-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ima-evm-utils-devel-1.1-5.el8.i686.rpm 5ef2386e13be43998faa3f0aee1305667bc82f2a98956083994545aadd20fc27 ima-evm-utils-devel-1.1-5.el8.x86_64.rpm 4a52cde39432afec5efe08d1ee0272d4620deaf7cebaf40ea69929fb88b2f56b ALEA-2020:4749 Copyright 2021 AlmaLinux OS 0 3 None

An update for udisks2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libudisks2-devel-2.9.0-3.el8.x86_64.rpm 190f7169e6739bc4e0ef59cbffe057f62ee1ab19c39efcdd4cc2872cddb02963 ALBA-2020:4527 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.14.0-5.el8.i686.rpm 01f49a9b3a418a72b83d5a1e3c44491234c8927884471b46a5d0df56127164fc opencryptoki-devel-3.14.0-5.el8.x86_64.rpm 2b5e65725904987b0d7c268a7af4c671bcda3ac1054d35baec8bf92086e3b186 ALBA-2020:4736 Copyright 2021 AlmaLinux OS 0 2 None

An update for corosync is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default corosync-vqsim-3.0.3-4.el8.x86_64.rpm e27425fc51dc13380fc33bea6b8e80315001bf76cce46f6f77688430fab504c8 ALBA-2020:4787 Copyright 2021 AlmaLinux OS 0 2 None

An update for crash is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default crash-devel-7.2.8-7.el8.alma.i686.rpm a7ba9af5b04f5f356619c31752985680b70434ff9d06cf8df317cc3e8b86639f crash-devel-7.2.8-7.el8.alma.x86_64.rpm e1058e23172a68ac6278e9221b4b3de03b006c90bd0b96ccd89e827639c1bca0 ALSA-2021:1093 Copyright 2021 AlmaLinux OS 0 11 Important

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466) * kernel: SCSI target (LIO) write to any block on ILO backstore (CVE-2020-28374) * kernel: Use after free via PI futex state (CVE-2021-3347) * kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c (CVE-2021-26708) * kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) * kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) * Kernel: KVM: host stack overflow due to lazy update IOAPIC (CVE-2020-27152) * kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * race condition when creating child sockets from syncookies (BZ#1915529) * On System Z, a hash needs state randomized for entropy extraction (BZ#1915816) * scsi: target: core_tmr_abort_task() reporting multiple aborts for the same se_cmd->tag (BZ#1918354) * [mlx5] VF interface stats are not reflected in "ip -s link show" / "ifconfig <vf>" commands (BZ#1921060) * Win10 guest automatic reboot after migration in Win10 and WSL2 on Intel hosts (BZ#1923281) * [AlmaLinux 8.3] Repeated messages - Unable to burst-read optrom segment (BZ#1924222) * Backport bug fix RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz (BZ#1924691) * [Cisco 8.3] AlmaLinux/Cent 8.2 fNIC driver needs a patch fix that addresses crash (BZ#1925186) * AlmaLinux8.3 - The kernel misdetects zCX with z/VM (BZ#1925508) * Backport 22e4663e91 ("mm/slub: fix panic in slab_alloc_node()") (BZ#1925511) * SCTP "Address already in use" when no active endpoints from AlmaLinux 8.2 onwards (BZ#1927521) * lpfc: Fix initial FLOGI failure due to BBSCN not supported (BZ#1927921) * [mm] mm, oom: remove oom_lock from oom_reaper (BZ#1929738) * Unexpected thread movement with AMD Milan compared to Rome (BZ#1929740) * rpmbuild cannot build the userspace RPMs in the kernel package when the kernel itself is not built (BZ#1929910) * [Regression] AlmaLinux8.2 - ISST-LTE:pVM:diapvmlp83:sum:memory DLPAR fails to add memory on multiple trials[mm/memory_hotplug.c:1163] (mm-) (BZ#1930168) * Configuring the system with non-RT kernel will hang the system (BZ#1930735) * Upstream Patch for Gracefully handle DMAR units with no supported address widthsx86/vt-d (BZ#1932199) * gfs2: Deadlock between gfs2_{create_inode,inode_lookup} and delete_work_func (BZ#1937109) * Failing on tsx-ctrl when the flag doesn't change anything (BZ#1939013) Enhancement(s): * RFE: Backport all Audit enhancements and fixes up to version 5.10-rc1 (BZ#1907520) * AlmaLinux8.4: Update the target driver (BZ#1918363) * [Mellanox 8.4 FEAT] mlx5: Hairpin Support in Switch Mode (BZ#1924689) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-240.22.1.el8_3.x86_64.rpm c6f96dc06a59cf7a0a5ec3786d1ef1518792e2eb3b1e14ef64941f4db208e486 True ALBA-2021:1090 Copyright 2021 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files. Bug Fix(es) and Enhancement(s): * Support 50 concurrent add_lockspace operations (BZ#1912923) * Expose reading and writing LVB in the python bindings (BZ#1920150) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.2-4.el8_3.i686.rpm e8bf626f36352a1ef60c93e07e66afe38da03100c64c0540f275dcc500da26d0 sanlock-devel-3.8.2-4.el8_3.x86_64.rpm 803346090cb103fbdea215dcb4bd039a475ce2c442dca497f25c29f15f84fa60 ALBA-2021:1092 Copyright 2021 AlmaLinux OS 0 4 None

An update for zlib is now available for AlmaLinux

The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Bug Fix(es) and Enhancement(s): * AlmaLinux8.1 - zlib: DFLTCC compression level switching issues (BZ#1926104) * AlmaLinux8.2 - zlib: inflateSyncPoint() returns an incorrect result on z15 (BZ#1932270) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zlib-static-1.2.11-16.2.el8_3.i686.rpm a0fcb8d9e416a7248a4d6330f45f51b6dc333e7d57448b48cec8728d91c53558 zlib-static-1.2.11-16.2.el8_3.x86_64.rpm 06be9fd45ceaae06073d92d010351cc5433e3583aabe1fbd0bef449197167af9 ALBA-2021:1099 Copyright 2021 AlmaLinux OS 0 2 None

An update for NetworkManager is now available for AlmaLinux

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. Bug Fix(es) and Enhancement(s): * NetworkManager doesn't initialize an interface, reports startup complete when booting for the first time (BZ#1940071) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.26.0-14.el8_3.i686.rpm 4a0830d1ab9987189b49d9497e4845d237ae92a0459d572b9fe3f81c27628fc4 NetworkManager-libnm-devel-1.26.0-14.el8_3.x86_64.rpm 0a9964406ab185489b6745f1cb2e01071b7749d459deeba22e2b5a807b08d4ff ALBA-2020:4758 Copyright 2021 AlmaLinux OS 0 2 None

An update for libosinfo is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvirt-glib-3.0.0-1.el8.i686.rpm 45f0b5750da70a337a1479026136027c3ba0a9efc4781882356a0d6d2dd6aa1f ALBA-2021:4260 Copyright 2021 AlmaLinux OS 0 2 None

An update for qatlib is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default qatlib-devel-21.05.0-2.el8.x86_64.rpm 571460aca72e5b3cf99101b3f6140e4e1dc99b7bf8eaa7aba4a34be77d2dd8ea ALBA-2021:4407 Copyright 2021 AlmaLinux OS 0 2 None

An update for libcomps is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libcomps-devel-0.1.16-2.el8.i686.rpm b3031a1b159d8943867aad4eb163b37bc65c71a0a34e0524f21ba62a73990ac5 libcomps-devel-0.1.16-2.el8.x86_64.rpm 9f4fcd0010bf2cc7ca61662b54aded883cb14b955eab26bc692d0083f32fee19 ALBA-2021:4429 Copyright 2021 AlmaLinux OS 0 2 None

An update for librepo is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default librepo-devel-1.14.0-2.el8.i686.rpm fe54f28063c69645de4b98d096aad4ea21022f784a7c6cb5282d0f5738a331c1 librepo-devel-1.14.0-2.el8.x86_64.rpm 72fb1e588c2ea6fbaa9e85fbe43330e26049862023fee57c4e2fad9310deba86 ALEA-2021:4192 Copyright 2021 AlmaLinux OS 0 2 None

An update for openscap is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openscap-engine-sce-devel-1.3.5-6.el8.alma.i686.rpm efd6c7e65403b758a5171bd27b3c340bbfe1f0fa55f1d2af58417ef8ecf14ae5 openscap-engine-sce-devel-1.3.5-6.el8.alma.x86_64.rpm f296cfacc881577bd42d792e2e946fa05bf3630b557a675e476c9b3548ff321a ALSA-2021:4408 Copyright 2021 AlmaLinux OS 0 3 Low

An update for libsolv is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsolv-devel-0.7.19-1.el8.i686.rpm 791af36b2326ed3691dfd5826777d7212c7f6a3f145b56db41cd180488135fd5 libsolv-devel-0.7.19-1.el8.x86_64.rpm e1ab2e15d3772e0cbe873fb243a08e855aa6fd4d884f2cd12227bcd8667d224b libsolv-tools-0.7.19-1.el8.x86_64.rpm ed73fa2ecd6aaa8e3ee2db9ffd825e2dfe604791d9c4d676cda59162d6c986e2 ALSA-2021:4325 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for lasso is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages. Security Fix(es): * lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lasso-devel-2.6.0-12.el8.i686.rpm 30c6adba7b80bfdea2a4cd354a09865a6fdce9c2cce4c1d3c61c670e54139b7f lasso-devel-2.6.0-12.el8.x86_64.rpm 15a8b753274f639801b8813ae80b50d190518c6b5d4e8c5ff89b9e270734def7 ALBA-2021:4412 Copyright 2021 AlmaLinux OS 0 2 None

An update for RDMA stack is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libfabric-devel-1.12.1-1.el8.i686.rpm 2cc26f05af82ede8caa879724b573063d22c9566da38bc964a8d676979482b4e libfabric-devel-1.12.1-1.el8.x86_64.rpm 6ce5432a5c1cb29dce65b583c3f2573a3155c860d1049aadec7b70aa68f1648c opensm-devel-3.3.24-1.el8.i686.rpm 76c1a549c1a295627f15b1717d414e118ce5ea314d943f802278f06706fc8712 opensm-devel-3.3.24-1.el8.x86_64.rpm a42ad4405125e6795741ba4d77bfd9471739f5973903f1b6375dbf94426cec15 python3-mpich-3.4.1-1.el8.x86_64.rpm 2c9a9839423ffe4e52bec21646c37db3236a60a8c2d289b6d51e068088f849a3 python3-openmpi-4.1.1-2.el8.x86_64.rpm 34c5624a20d208e03ff19df08360762b888403a5dc84a42a026d0f2f63f5d50d ALBA-2021:4448 Copyright 2021 AlmaLinux OS 0 2 None

An update for opencryptoki is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default opencryptoki-devel-3.16.0-5.el8.i686.rpm c7505704d16b0aa59ef916ab4c71562e90752bd0802219fcc9bf08f15cda01ca opencryptoki-devel-3.16.0-5.el8.x86_64.rpm 93f09983f16d9460994aa2d8dfe6c7a8c394d5e8d556103ffd66c09b9ca01510 ALBA-2021:4458 Copyright 2021 AlmaLinux OS 0 2 None

An update for gpgme is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gpgme-devel-1.13.1-9.el8.i686.rpm 2fe0c19d67d0a1864d2edc541a4de8b7e575568bef5841b02a3974cad3952712 gpgme-devel-1.13.1-9.el8.x86_64.rpm 670e6d697b5766af8c0e6941bfc6eeb7473b01c5ff01c6912dfa88db21fb9114 gpgmepp-devel-1.13.1-9.el8.i686.rpm ad812459720874c73444954cbe87a454c9c35ff2c985716dad619d361e29e9de gpgmepp-devel-1.13.1-9.el8.x86_64.rpm 1993c7d0f600e23e9ae5d99c496d8418a1bcf16608110dc7d0ac1f30ee7ef848 qgpgme-devel-1.13.1-9.el8.i686.rpm 3db5b3c984092425abd306c10c440aa65367ed1d0c845192ed8679f4b792b109 qgpgme-devel-1.13.1-9.el8.x86_64.rpm ff28d5c9eaf885552263f6426515834f255777333310f2b2a57bfc8a61cd219d ALSA-2021:4381 Copyright 2021 AlmaLinux OS 0 5 Moderate

An update for GNOME is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300) Security Fix(es): * webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558) * LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918) * webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788) * webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789) * webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799) * webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801) * webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844) * webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870) * webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871) * webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775) * webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779) * webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution (CVE-2021-21806) * webkitgtk: Integer overflow leading to arbitrary code execution (CVE-2021-30663) * webkitgtk: Memory corruption leading to arbitrary code execution (CVE-2021-30665) * webkitgtk: Logic issue leading to leak of sensitive user information (CVE-2021-30682) * webkitgtk: Logic issue leading to universal cross site scripting attack (CVE-2021-30689) * webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers (CVE-2021-30720) * webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30734) * webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack (CVE-2021-30744) * webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30749) * webkitgtk: Type confusion leading to arbitrary code execution (CVE-2021-30758) * webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30795) * webkitgtk: Insufficient checks leading to arbitrary code execution (CVE-2021-30797) * webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30799) * webkitgtk: User may be unable to fully delete browsing history (CVE-2020-29623) * gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (CVE-2020-36241) * gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (incomplete CVE-2020-36241 fix) (CVE-2021-28650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default LibRaw-devel-0.19.5-3.el8.i686.rpm 53512b765de8ea98b40c4a95ce98af3ab00a88169bbad21737b12a9e99d54d76 LibRaw-devel-0.19.5-3.el8.x86_64.rpm 78b00af7239c06283617894892d4b7ef28c385ae0314cbb530d2167569f1207b accountsservice-devel-0.6.55-2.el8.i686.rpm ec06bb263abcfff3781cb1da669f17ebb19c8f35278a36c09d28b822cef5f163 accountsservice-devel-0.6.55-2.el8.x86_64.rpm 71888c60ede07da8cb4f1a9d98edb577f19e70e1da816677baf7d5372ba8b2b5 gnome-software-3.36.1-10.el8.i686.rpm 1f0f3065ca8b922c183ef6c1401b479591779b632899da3e3e522d4e3431844d gnome-software-devel-3.36.1-10.el8.i686.rpm 791a6b3ac180e6199498b3ae4309e17224513f86ad2eb74f0f486b10ee57feeb gnome-software-devel-3.36.1-10.el8.x86_64.rpm 9b68b6a5c14f40d904a23f228a3902685bf8a72bd77ce6e8f09e54a17a94b72f mutter-devel-3.32.2-60.el8.i686.rpm 73eb23af302cea1491754668cc5d9181e5318aa4967692357b43d752e4186ecf mutter-devel-3.32.2-60.el8.x86_64.rpm b4e2561f9f8d1bb050c051911869d377f2303df742bfe045fa3c169b25224391 ALBA-2021:4285 Copyright 2021 AlmaLinux OS 0 2 None

An update for libvoikko is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libvoikko-devel-4.1.1-3.el8.i686.rpm 8dfde896b350dcb0dc54e6fe53aeac8c81464e4bbbf49cb0b568421af39a7dd0 libvoikko-devel-4.1.1-3.el8.x86_64.rpm 0dca036d5f8581b369a7b9e53d17c8f002a9f6939df26b09bc62ca6ce7524c5c ALEA-2021:4335 Copyright 2021 AlmaLinux OS 0 2 None

An update for tesseract is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tesseract-devel-4.1.1-2.el8.i686.rpm a33935cd72f0e195d84c708937b851502565bfc95d6c787d325baa1f17df0cee tesseract-devel-4.1.1-2.el8.x86_64.rpm 6a0958a5f2ebefb3ba4034011f22128bac9a4bb3d22378365f63a39fa225f752 ALEA-2021:4473 Copyright 2021 AlmaLinux OS 0 2 None

An update for accel-config is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default accel-config-devel-3.1-1.el8.i686.rpm a85fa2350c339840ba4f4db46cb116bb39d186f152c5587954059311018482c8 accel-config-devel-3.1-1.el8.x86_64.rpm ee528d532d1b355d003d192a36c91c918667eca1d981f546ba896432435ed159 ALBA-2021:4440 Copyright 2021 AlmaLinux OS 0 2 None

An update for bluez is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bluez-libs-devel-5.56-2.el8.alma.i686.rpm a4be91916dd9a6f308886ba5226e2b71875e257b91c4631d5c1e613041a6fe29 bluez-libs-devel-5.56-2.el8.alma.x86_64.rpm 5caff5dbdbf4d5047bbcd2ca6be38554fd63fff1249628a7b54bd8c861800b8d ALSA-2021:4464 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for dnf, dnf-plugins-core, and libdnf is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

dnf is a package manager that allows users to manage packages on their systems. It supports RPMs, modules and comps groups & environments. Security Fix(es): * libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libdnf-devel-0.63.0-3.el8.i686.rpm 8df55edebb6a782d84d33c6da8285469fa1264882928357ed6b14b014d911cf4 libdnf-devel-0.63.0-3.el8.x86_64.rpm 0d5b60edb8dea5d27768d05c1c4aa72f9720f8689486e609b9089495f8e226f6 ALBA-2021:4403 Copyright 2021 AlmaLinux OS 0 3 None

An update for nfs-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnfsidmap-devel-2.3.3-46.el8.i686.rpm ee52193bbec788753700d6bd3cbd1e6d97f6412688f8fa6b3094d8cb43dec1b0 libnfsidmap-devel-2.3.3-46.el8.x86_64.rpm cc3ff8c35d11c2a13b12e7c31a830d2a3076e0844b3671d40787ee334a8a13bb ALSA-2021:4256 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for graphviz is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains. Security Fix(es): * graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (CVE-2020-18032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default graphviz-devel-2.40.1-43.el8.i686.rpm abddac29dd7ab2be245c54020edaefd4fc5bfacc12d1a828eb4cb29d1d624e30 graphviz-devel-2.40.1-43.el8.x86_64.rpm cbcd7c14d738a1a626a621d64cc079ffa5c27cde77a5db517c68d8546a45e7b3 graphviz-doc-2.40.1-43.el8.x86_64.rpm a137fa7996b80f7d95547f22199c3cde0056c207b9fe17b93a5ed6f481cdf055 graphviz-gd-2.40.1-43.el8.i686.rpm c58b639e17d4fac73feb3f46749f6123bb9fb0f5a55b31643a29a3aca48a2a31 graphviz-gd-2.40.1-43.el8.x86_64.rpm c8d711a7e162c47a420004510e82c8b2f4d614d627d7b525d7d7bfb944c553c4 graphviz-python3-2.40.1-43.el8.x86_64.rpm 45e3634ed1b81776c89135b39dd87d000396c4d9fd756f3a6c6cbf9a8d18cf13 ALBA-2021:4155 Copyright 2021 AlmaLinux OS 0 2 None

An update for evince is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evince-devel-3.28.4-14.el8.i686.rpm 7bf2ea4250ab685b04921db692d74844f3aaf91f658afa35848337af92b164e0 evince-devel-3.28.4-14.el8.x86_64.rpm 9362d754eb2668d4432932c5b76a2be13249a94acb00e762e7f104650faf5e06 poppler-cpp-20.11.0-3.el8.i686.rpm c7caa3d49def6ee321c678d218fde156db2e85f4d8a67f59b753500e45e1e87b poppler-cpp-20.11.0-3.el8.x86_64.rpm f672a52d73304a43a44a47c2a3822434caca6daf851dbb84f1c6ed5addd82e96 poppler-cpp-devel-20.11.0-3.el8.i686.rpm 1a4424d6df7b647acb9717cb8116bd63c5585e08d898d7317ea49b8bbb194ebe poppler-cpp-devel-20.11.0-3.el8.x86_64.rpm 2dfe63e734b626ab95a4076cb7f731c70e2cff13b19a642f742845331e9d0a3f poppler-devel-20.11.0-3.el8.i686.rpm 5efeb3889e8ef475897bf1396f96bf2425394824e2ffa7ab21610eb349f2eacf poppler-devel-20.11.0-3.el8.x86_64.rpm 672fbc43bfb62941c4956ad1ebfc008ebc8728554518ec886e9dc0788136f0b0 poppler-glib-devel-20.11.0-3.el8.i686.rpm a3157c42eebbc44d58f6c2dd5f51551e16f7044a1e7a4fcb954dd86de2deb19e poppler-glib-devel-20.11.0-3.el8.x86_64.rpm 34d2252bb6114afcefddd1f9b1f3ca1e3abaa16bb97d71f2439ef684ceedf44e poppler-qt5-20.11.0-3.el8.i686.rpm a0317043700009ad76644baae2d407f21f1a6d45474abcc46707ff6147bf2bb0 poppler-qt5-20.11.0-3.el8.x86_64.rpm 2fa983ad21e501db08fdac1511ce18afbd51683434ab0329684cdc85f7e77b92 poppler-qt5-devel-20.11.0-3.el8.i686.rpm d5407841dde3d34a73399d4624408a943143525dde18b23dc226c7db5edf8aa5 poppler-qt5-devel-20.11.0-3.el8.x86_64.rpm 512e4ba2b2a6534694d499a75c9afb915548fab07fa2250ae898ecafd7723efd ALSA-2021:3253 Copyright 2021 AlmaLinux OS 0 2 Important

An update for libsndfile is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): * libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution (CVE-2021-3246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsndfile-devel-1.0.28-10.el8_4.1.i686.rpm f1df4ddddf0da9017cf1ae85f40d30d977b79be67e87e356495ed7e90af3cf83 libsndfile-devel-1.0.28-10.el8_4.1.x86_64.rpm bfba28389d3443b9ff9381a38c2441360e475d9c846f6a1188ef249186c46ce6 ALBA-2021:4253 Copyright 2021 AlmaLinux OS 0 2 None

An update for cups-filters is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default cups-filters-devel-1.20.0-27.el8.i686.rpm 263d3cb5a53d35b6345a9bbfc2f73052ee903d1ae5f75d79d1098c45ff647e45 cups-filters-devel-1.20.0-27.el8.x86_64.rpm 8338e6a54988ef4144ab61afbac799198e5f0cd9a6f694cf880096e9476314ba ALSA-2021:4519 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for autotrace is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

AutoTrace is a program for converting bitmaps to vector graphics. Security Fix(es): * autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005) * autotrace: integer overflow in input-bmp.c (CVE-2019-19004) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default autotrace-0.31.1-53.el8.i686.rpm fc2f1f4c55a9aaac4dcd1b2dec8e28d36965a04d00a592a92477747d0ec2bcfe autotrace-0.31.1-53.el8.x86_64.rpm 894be813c851c1f1344ac2d11f5b54b5e5267bb77737e9458ecf66fbb2570afc ALSA-2021:4288 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libjpeg-turbo is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: Stack-based buffer overflow in the "transform" component (CVE-2020-17541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default turbojpeg-devel-1.5.3-12.el8.i686.rpm 70c9e7b12fcc822a7bf5b03e6b1ff680912e6084ec74b22ca19ff029f8f0d158 turbojpeg-devel-1.5.3-12.el8.x86_64.rpm b66fb403b300852d9ed32228bddd57788aa8cf5165ffa123f63c990d18fa9452 ALBA-2021:4182 Copyright 2021 AlmaLinux OS 0 2 None

An update for udisks2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libudisks2-devel-2.9.0-7.el8.i686.rpm 678e12e5168f1a13b660ce4f4a55496a1bed5eada164080df5550c1449c3f58e libudisks2-devel-2.9.0-7.el8.x86_64.rpm a355bf131609690ac766cf9ef72212bc38bb23a247b3b6179df6886125deede0 ALSA-2021:4173 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for exiv2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. The following packages have been upgraded to a later upstream version: exiv2 (0.27.4). (BZ#1989860) Security Fix(es): * exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482) * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457) * exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458) * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464) * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470) * exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473) * exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS (CVE-2021-31292) * exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463) * exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623) * exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617) * exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618) * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default exiv2-devel-0.27.4-5.el8.i686.rpm 2d31978fde8c789366f24aaf8f083c24742b3e34f080a4a9ba409259101a6a8a exiv2-devel-0.27.4-5.el8.x86_64.rpm aacca13ecba08f865e94685461c8f97c1d9e1f17c133036a06760bdd0a47c6d5 exiv2-doc-0.27.4-5.el8.noarch.rpm 816b9050cd4ec0cb523eb89966d3b59d692db2ce6baf9f9b0d2db72cb17238d0 ALEA-2021:4522 Copyright 2021 AlmaLinux OS 0 4 None

An update for dotnet5.0-build-reference-packages is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet5.0-build-reference-packages-0-11.20210607git5f10a4b.el8.x86_64.rpm f22c5931e629fabdf1c1f7002a189876a1e43a4ed4f2a0bb282a5462c690a844 ALBA-2021:4377 Copyright 2021 AlmaLinux OS 0 2 None

An update for quota is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default quota-devel-4.04-14.el8.i686.rpm 0864b1434aaf3a4e59a5ae2a37ca5ceafc25f178f44619ed64377fa95566c391 quota-devel-4.04-14.el8.x86_64.rpm a698875d891d99af3332f1e065dd58cdda1af5d5b45665a9ab766bb4aaae2416 ALEA-2021:4234 Copyright 2021 AlmaLinux OS 0 3 None

An update for mesa and wayland library packages is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mesa-libOSMesa-devel-21.1.5-1.el8.i686.rpm 25bae6e22ccec2e0b6897489ce0a95cdd45edd90250b9fee15516dfce068e832 mesa-libOSMesa-devel-21.1.5-1.el8.x86_64.rpm e4929c3d74bdbf1b6c544e63cff0865eb908eaa81df87c38edfc547e20308370 mesa-libgbm-devel-21.1.5-1.el8.i686.rpm 34e1611abe3999344914363bb37d48d11ad3c7de1c1b7f4c33d8043c27e10bbd mesa-libgbm-devel-21.1.5-1.el8.x86_64.rpm c0dd6a58bcc9a793eddbd1f7ca606a6f7ab170f74987fd0375ba6fcd27afa135 xorg-x11-server-devel-1.20.11-2.el8.i686.rpm 5a458348aabce42226b19e2c773906d0fec1cbd40cef281c29cdcbf94f809a7f xorg-x11-server-devel-1.20.11-2.el8.x86_64.rpm 6ce8b2cdbd1cf2a9ec0bd4dbf380b35624bedb4c876cda9589ca4e94c79e7c7a xorg-x11-server-source-1.20.11-2.el8.noarch.rpm c719aab591be14ed5ccd8f6d5cc743763768253135c22a8840ca16135701f8a0 ALSA-2021:4235 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for jasper is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard. Security Fix(es): * jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828) * jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272) * jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926) * jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default jasper-devel-2.0.14-5.el8.i686.rpm 90542fa9ba87781c059c0348bf1323c856abae4896a2cb38119677334ac846a1 jasper-devel-2.0.14-5.el8.x86_64.rpm 0a3847e660dbcc8cff51db91ecbbd14a1c1bdc415cfd1ca7714c582d7448853f ALBA-2021:4475 Copyright 2021 AlmaLinux OS 0 2 None

An update for freeipmi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freeipmi-devel-1.6.8-1.el8.i686.rpm 4a41122042afa439486ae0efce7341b536a3817fda7f19681008881922be8704 freeipmi-devel-1.6.8-1.el8.x86_64.rpm 5793bfdcb5882628c01883ce074866d9e1eddbb947738a1100a14bac1cfef693 ALBA-2021:4206 Copyright 2021 AlmaLinux OS 0 2 None

An update for libblockdev is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libblockdev-crypto-devel-2.24-7.el8.i686.rpm 1f7885c62293ac5afda67cd8b54d9ae2d0627ed0284c52b9307e4827f1504b55 libblockdev-crypto-devel-2.24-7.el8.x86_64.rpm c222e0ff2654b7e4246ee4ca728de1c9ab3b901b78331edb3061fbc7526b6ddf libblockdev-devel-2.24-7.el8.i686.rpm b7393c2376cdb7bb334a9662ef4c59e856a394495a880465d7f342bf0270f3f1 libblockdev-devel-2.24-7.el8.x86_64.rpm 12f3fe93cac9286463415e5258cab4525ffbf5afb85d71c70d05f4a4a0cda2ee libblockdev-fs-devel-2.24-7.el8.i686.rpm 7218fd98e7550dfd5d22f6eceb0d2ce0b7132e245ad1a0e2199c48ebc6d04cdc libblockdev-fs-devel-2.24-7.el8.x86_64.rpm edafb66db079f2c682b4116234b489cfeaa5bc14f11198bd7c8afd4e34d5a663 libblockdev-loop-devel-2.24-7.el8.i686.rpm c2f7cce0ea708c86d6e438a09872e715279d870e19839ba177790065aa29a2dc libblockdev-loop-devel-2.24-7.el8.x86_64.rpm 7e787f453bedd9a4c74fbd2f79f360875adbaccf63cf2742d25c3571071504fa libblockdev-lvm-devel-2.24-7.el8.i686.rpm 88887b3bf0db79c7133760b3f42072d3aa19947f9e78520651a3d94a565a5705 libblockdev-lvm-devel-2.24-7.el8.x86_64.rpm 4c51653364935ef41669885e59e9b306f9b7b22738f2e0abc65a321898214925 libblockdev-mdraid-devel-2.24-7.el8.i686.rpm 02bd34b763cbc686ab115007035ffa6ca174d352846676cbee8d8d40ab43e19d libblockdev-mdraid-devel-2.24-7.el8.x86_64.rpm 1bd013f22f18fbcac6650aa46ba77bdc9b065a7894d5b7de8eea2152c72d506d libblockdev-part-devel-2.24-7.el8.i686.rpm 970c623c47053c0d4bc22bff765d064b1fdd88a527bbd530b36b1a320d10eb1e libblockdev-part-devel-2.24-7.el8.x86_64.rpm c4133231ee578a6f3570098b5e6d204e664203f6fb29214978a4eff3978c006e libblockdev-swap-devel-2.24-7.el8.i686.rpm 88c796b19d474ce3bc7ef9c3569e0d4474ed3e98b684ada1deda8c31151a46e8 libblockdev-swap-devel-2.24-7.el8.x86_64.rpm afe527a908b1ab35ed83418b3bbeaf00ae09029e3a7c853fcda5e1bbc0123cac libblockdev-utils-devel-2.24-7.el8.i686.rpm 70214ce833c6b4cba86e78d14f379ead645b7d3c9fa0468827da74357e898b36 libblockdev-utils-devel-2.24-7.el8.x86_64.rpm 8be56a9b27b5f43943b2c7154a082f5d101f08451803d1142db32168e12f3d07 libblockdev-vdo-devel-2.24-7.el8.i686.rpm 7f18a56462113afa2b595e1ad09feb23a5d275b67b5eaa4132740ec826b131e1 libblockdev-vdo-devel-2.24-7.el8.x86_64.rpm 7b8110f27b1c13397238dc59a40b0c7662d9d4e5a4079d77f2a4e7f1790c526d ALEA-2021:4488 Copyright 2021 AlmaLinux OS 0 3 None

An update for hwloc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default hwloc-devel-2.2.0-3.el8.i686.rpm 913df1dff172650dc78da45fd4aa8959bf15cac756e8c06580adadc340feff99 hwloc-devel-2.2.0-3.el8.x86_64.rpm 2b691b8574f234c3f151773d32639ef1f59615ef7e607e7f5d0e0db9e9492ca7 ALBA-2021:4523 Copyright 2021 AlmaLinux OS 0 2 None

An update for cppcheck is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default cppcheck-2.4-1.el8.x86_64.rpm 137662a23c01cd79771626fe23e5ca7a60b694a10436f7a9abe4803c4f4207a8 ALBA-2021:4190 Copyright 2021 AlmaLinux OS 0 2 None

An update for wireshark is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default wireshark-devel-2.6.2-14.el8.i686.rpm f0d7cd443c96da610da0cb9bb530b078aaf735d6fff671782a5259fb994a1c72 wireshark-devel-2.6.2-14.el8.x86_64.rpm 11d7f45e9f42df91a6bde339676275875169a89f63c2e11bfbbc1b314b46e4aa ALEA-2021:4450 Copyright 2021 AlmaLinux OS 0 2 None

An update for tss2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default tss2-devel-1.6.0-1.el8.i686.rpm 655cec3e5bc2df0aac5a25ad1c5f8749a551868a48b1c76392037008959e15c5 tss2-devel-1.6.0-1.el8.x86_64.rpm 0b2c70f79bd6be2124b612a0f178dca164ab79acd1308deed0cad145e537181d ALBA-2021:4389 Copyright 2021 AlmaLinux OS 0 2 None

An update for iproute is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iproute-devel-5.12.0-4.el8.i686.rpm 0556b8e34fc3d370f6dd7ac7c1184b5927ad4a469f94fc524ef54338f3324f9b iproute-devel-5.12.0-4.el8.x86_64.rpm b29666e71ac9eeb4ba8fd114cef4810a7d9bc447455bc556655dfae6fb9c92ff ALBA-2021:4169 Copyright 2021 AlmaLinux OS 0 2 None

An update for corosync is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default corosync-vqsim-3.1.5-1.el8.x86_64.rpm 2d7141ecbc681a70d6975f53ee5a77578e96a1713776ffb5a50ce278acdbf88a ALSA-2021:4386 Copyright 2021 AlmaLinux OS 0 4 Low

An update for gcc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fix(es): * libiberty: Integer overflow in demangle_template() function (CVE-2018-20673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default gcc-plugin-devel-8.5.0-3.el8.alma.i686.rpm bdf08b81e8c62f1a3647972958e2311d51521a02a7aad22eb71edb6fface3e54 gcc-plugin-devel-8.5.0-3.el8.alma.x86_64.rpm 631674e98598fa24651ea3460a4d1b9d12112c52af7ef267836e45474494abed libstdc++-static-8.5.0-3.el8.alma.i686.rpm cd31ce7b49123c0f6996a122a6b08a16c87787cd2524c1f9e0118714b021e5fd libstdc++-static-8.5.0-3.el8.alma.x86_64.rpm a9940e2f3134b97e4b13f1a6414006a62466a30b2658dec779595e89d6a226b9 ALBA-2021:4483 Copyright 2021 AlmaLinux OS 0 2 None

An update for OpenIPMI is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default OpenIPMI-devel-2.0.31-3.el8.i686.rpm 103ce4d0e30e19ac9858aee03089561243714ce5ac9a7befdef7db27a07835f1 OpenIPMI-devel-2.0.31-3.el8.x86_64.rpm c09435d16e05f3720b01c2fad0d18dc74a767eaf9a047397f5b8d936639f2428 ALBA-2021:4391 Copyright 2021 AlmaLinux OS 0 2 None

An update for kmod is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kmod-devel-25-18.el8.i686.rpm fd7684f955cdf6170d5f3364477413de98f273f5d70570aac82d35a8ebe6c0b0 kmod-devel-25-18.el8.x86_64.rpm ca3ac8554fc439d85b7d9cc042766113d1cf4106b9af79745f2403dfef7af4ed ALSA-2021:4382 Copyright 2021 AlmaLinux OS 0 2 Moderate

An update for json-c is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

JSON-C implements a reference counting object model that allows users to easily construct JavaScript Object Notation (JSON) objects in C, output them as JSON formatted strings, and parse JSON formatted strings back into the C representation of JSON objects. Security Fix(es): * json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default json-c-doc-0.13.1-2.el8.noarch.rpm 33e7a0c1fe4ae2ceaeed0241ac97fae87af80642e5237d023906edde6823bef5 ALBA-2021:4232 Copyright 2021 AlmaLinux OS 0 2 None

An update for dyninst is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dyninst-devel-11.0.0-3.el8.i686.rpm 0de806faad4cce204db1e1c130572aeb996bd5ef9e398b82b8b7d987b644adea dyninst-devel-11.0.0-3.el8.x86_64.rpm f12da6e3da6596fad578953701661907dc9fbe06180c572e20fd2e141652f8c5 dyninst-doc-11.0.0-3.el8.x86_64.rpm 81d08ae6dc1bad434dfea592e5899e3d902f6e6d075150b1fd8db2f9aa9d7c2b dyninst-static-11.0.0-3.el8.i686.rpm a1a67b31467764b77f460c0a86a98ed16836c69e74ff383c08c0b598febc031a dyninst-static-11.0.0-3.el8.x86_64.rpm b0f7625957a8bde41bf056ddb18365b49c693e341e3316b91ae7c8824f5efa92 dyninst-testsuite-11.0.0-3.el8.x86_64.rpm ce9e5bc4ea6bb28e7386cc5c5bdc13753faa706bc7793694031b7499061de07b ALBA-2021:4224 Copyright 2021 AlmaLinux OS 0 2 None

An update for libwacom is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libwacom-devel-1.6-3.el8.i686.rpm 197fdd98265f97eddecebe4d84aac7bbf2ac4c503293968aea3440859c3f8dd5 libwacom-devel-1.6-3.el8.x86_64.rpm 4f5deb7f536d8d61ba9b368e97ba8b3afedff83bda4fc919ac55a1df61baf904 ALSA-2021:4241 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libtiff is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files. Security Fix(es): * libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523) * libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524) * libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521) * libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libtiff-tools-4.0.9-20.el8.x86_64.rpm 546d65f029d64f24038d0c0d2d816199f32fdf3ab98804941d47dc51d1c2f0b0 ALEA-2021:4366 Copyright 2021 AlmaLinux OS 0 2 None

An update for libstoragemgmt is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libstoragemgmt-devel-1.9.1-1.el8.i686.rpm 0050c347cfa1b116fcbe298541199e70c1a7862296594f5f0398947afdd35ee6 libstoragemgmt-devel-1.9.1-1.el8.x86_64.rpm af3592a9eb5161c6654a304ca48f26e5796b5562985955e8a412ccf33a128c9c ALSA-2021:4316 Copyright 2021 AlmaLinux OS 0 2 Low

An update for zziplib is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The zziplib is a lightweight library to easily extract data from zip files. Security Fix(es): * zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default zziplib-devel-0.13.68-9.el8.i686.rpm 323dfc3babd7fc11857b451976d7a8db2cee8f4515ec381f8af8ec7604a998a6 zziplib-devel-0.13.68-9.el8.x86_64.rpm b7f706796dcf957aa0976f30f24b8b6a1ffdb8288266733dfaf50388f7bdb553 ALBA-2021:4186 Copyright 2021 AlmaLinux OS 0 2 None

An update for freerdp is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default freerdp-devel-2.2.0-2.el8.i686.rpm 14c84bd5d04499bbc0e03ef461e6f72ccc5bd5cee92d570a200768368ef833b4 freerdp-devel-2.2.0-2.el8.x86_64.rpm df26c5abd3c06186177f3b3b9d3baa43439affb3685cbde58593da33216bdee6 ALBA-2021:4348 Copyright 2021 AlmaLinux OS 0 2 None

An update for brasero is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default brasero-devel-3.12.2-5.el8.i686.rpm f693644b56b72d2c3ec9dd38b7a5f7ca1d9cec72d9786ffce3d6ac36aa5f7b2d brasero-devel-3.12.2-5.el8.x86_64.rpm 999ff29273c331752426ff0b39279210fe7b352b15c5ee66a61f496cc3e8336e ALSA-2021:4385 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for glib2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fix(es): * glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800) * glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink (CVE-2021-28153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glib2-doc-2.56.4-156.el8.noarch.rpm 9c1768046011f22363084ee89f74f1073bcbdbff0562e07a6b44000b73da21c7 glib2-static-2.56.4-156.el8.i686.rpm 523564a759339fa36b99580b94f7259473d46629207d2f9172d5b2c890243b61 glib2-static-2.56.4-156.el8.x86_64.rpm ecaf979cc056761dfc48e9cb842312411e2118fcb69ffd8428c254281c509092 ALEA-2021:4286 Copyright 2021 AlmaLinux OS 0 2 None

An update for lpsolve is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lpsolve-5.5.2.0-21.el8.i686.rpm b90a493f7ea091d6699e60f34949e776c4f546e51ad89f6e9e2e3683fee06ce8 lpsolve-devel-5.5.2.0-21.el8.i686.rpm 74939785ebb6ceb027ccf7cb4e8375e97d7e10244bab6f2a381403fa8bea4423 lpsolve-devel-5.5.2.0-21.el8.x86_64.rpm a6575aec5ab12ef8c0bbd8cb68b9baf4fe1f0d6307b32c030a76ca2cc6c2febe ALBA-2021:4490 Copyright 2021 AlmaLinux OS 0 2 None

An update for util-linux is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmount-devel-2.32.1-28.el8.i686.rpm 80f7331fa6ce464f8fab74c34d344f8a18ceb58f170e7c0f3bf1ce46d43cff33 libmount-devel-2.32.1-28.el8.x86_64.rpm 3b64b8aba5d6aefd485a7ea40e3aa3a5cce3a815cd97e6a80e75fd53352de199 ALSA-2021:4251 Copyright 2021 AlmaLinux OS 0 4 Moderate

An update for openjpeg2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0). Security Fix(es): * openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389) * openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814) * openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823) * openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575) * openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727) * openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785) * openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845) * openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847) * openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973) * openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824) * openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842) * openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843) * openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845) * openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default openjpeg2-devel-2.4.0-4.el8.i686.rpm 1db7e11b8f8b662b9012afc7673bbdcef3eab69bea84132682c3a869e4889096 openjpeg2-devel-2.4.0-4.el8.x86_64.rpm eb9636f0b9ea78ce1f44644612d04161fa527bdd94dbe8cf834cfab3fbc2655a openjpeg2-tools-2.4.0-4.el8.i686.rpm 4fc177c317c576c98da8ef24f15b6fc0aeccdc7d3ca62eec7a5c58dcc76c5bd1 ALBA-2021:4446 Copyright 2021 AlmaLinux OS 0 2 None

An update for iscsi-initiator-utils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default iscsi-initiator-utils-devel-6.2.1.4-4.git095f59c.el8.i686.rpm 22fb847ca8b393f1d3ab264fe29c1a61e8398941d63f42a04aa367cdc7d4482e iscsi-initiator-utils-devel-6.2.1.4-4.git095f59c.el8.x86_64.rpm 4ee075eb68808a31376602bb2b2c12dc2a9deb8bf6cef2e79ff6d59290004f1f ALSA-2021:4361 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for NetworkManager is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services. The following packages have been upgraded to a later upstream version: NetworkManager (1.32.10). (BZ#1934465) Security Fix(es): * systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured (CVE-2020-13529) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default NetworkManager-libnm-devel-1.32.10-4.el8.i686.rpm 3e561c7e966e521871ed3ce4c10b0eedde8a7c6f03da4ec6d53336fa7afff5f9 NetworkManager-libnm-devel-1.32.10-4.el8.x86_64.rpm 4b57765793fbe90373fd83398a653db4b7d20cd9d3cbe47ef4ea25dd6882a375 ALBA-2021:4505 Copyright 2021 AlmaLinux OS 0 2 None

An update for mobile-broadband-provider-info is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mobile-broadband-provider-info-devel-20210805-1.el8.noarch.rpm 7e9402853c7e477c910ad467c8cd82e46f29ed2a18c9cb28fa9f06b390c71d28 ALEA-2021:4491 Copyright 2021 AlmaLinux OS 0 2 None

An update for libbpf is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libbpf-devel-0.4.0-1.el8.i686.rpm 0d8d86951bfc6f0f2187a4adb6153ee45dc467cb97dfe3e8813577f2689a3820 libbpf-devel-0.4.0-1.el8.x86_64.rpm 6455b3b6fadd457b2b4f51fc9107e6bf4f28e7db9afd35abdb644ba42e62eb03 libbpf-static-0.4.0-1.el8.i686.rpm fb64e0515163148de83826cc88b36e5e2ed2ded2096529ef73431eefcfe8f688 libbpf-static-0.4.0-1.el8.x86_64.rpm c021de0ab09656f93b92a9bb12be42ac10e85467c75c8474205daa5f8cbda837 ALSA-2021:4374 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for file is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats. Security Fix(es): * file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default file-devel-5.33-20.el8.i686.rpm 7c7c8e69ec1d3002bc851c1bce409904035d192f425af44f51e44d0e7638385c file-devel-5.33-20.el8.x86_64.rpm 84dc568f39dcc71ceef18160bbdaad0b499e6cf6e1ddc6233eabc8333acbcb5f ALSA-2021:4356 Copyright 2021 AlmaLinux OS 0 28 Moderate

An update for kernel is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: out-of-bounds reads in pinctrl subsystem (CVE-2020-0427) * kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502) * kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503) * kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504) * kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586) * kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587) * kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588) * kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139) * kernel: accepting plaintext data frames in protected networks (CVE-2020-26140) * kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141) * kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143) * kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144) * kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145) * kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777) * kernel: locking inconsistency in tty_io.c and tty_jobctrl.c can lead to a read-after-free (CVE-2020-29660) * kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function via a long SSID value (CVE-2020-36158) * kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() (CVE-2020-36386) * kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129) * kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348) * kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489) * kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564) * kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573) * kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600) * kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679) * kernel: Mounting overlayfs inside an unprivileged user namespace can reveal files (CVE-2021-3732) * kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194) * kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133) * kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950) * kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971) * kernel: protection can be bypassed to leak content of kernel memory (CVE-2021-29155) * kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646) * kernel: lack a full memory barrier may lead to DoS (CVE-2021-29650) * kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440) * kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory (CVE-2021-31829) * kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier (CVE-2021-33200) * kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146) * kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147) * kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check (CVE-2020-29368) * kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635) * kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659) * kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239) * kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916) codeready-builder-for-rhel-8-x86_64-rpms__8_0_default kernel-tools-libs-devel-4.18.0-348.el8.x86_64.rpm 8fd8d7bda93df3971b4c4291f48e77b85b531ce3a9fe8e63f0f6f8cc197808cf True ALEA-2021:4524 Copyright 2021 AlmaLinux OS 0 2 None

An update for dwarves is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dwarves-1.21-0.el8.x86_64.rpm 18371059a862a19975b046ef6b7b77267eb8539851772829ebbc2e23d04ddedd libdwarves1-1.21-0.el8.i686.rpm 4780bb2c29fe997af1471b8ffe8920ce31c774a922dcfc3715d6eed89995235b libdwarves1-1.21-0.el8.x86_64.rpm 5ace00a1283d00a8a25135981e63fe53c19ed318ee3b30e8dbe343eee526970e ALBA-2021:4346 Copyright 2021 AlmaLinux OS 0 2 None

An update for vulkan is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default spirv-tools-devel-2021.3-1.20210825.git1fbed83.el8.i686.rpm e6eed092abe3c465617090f3aa18f8a109ff6746e8b020a302f6998e4949204d spirv-tools-devel-2021.3-1.20210825.git1fbed83.el8.x86_64.rpm 14d6f46ae5204b3900a37e98376439db5616ead81b5afd4fba2b78c5d93dc3e4 spirv-tools-libs-2021.3-1.20210825.git1fbed83.el8.i686.rpm 9ae8f314f738010aed2f1eef2cb022ba8fae7aab0dea0473304ef8b37e74a8de ALSA-2021:4510 Copyright 2021 AlmaLinux OS 0 4 Low

An update for lua is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: segmentation fault in getlocal and setlocal functions in ldebug.c (CVE-2020-24370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default lua-5.3.4-12.el8.i686.rpm 7d90b3c05b44591db6644cffd11abff1ae1e4ab17501e3e55cf7005e94d5df24 lua-devel-5.3.4-12.el8.i686.rpm 9b1d9aff3313d15f4838230077e03b4f7695c05787d6c5fce6cb690f1c982883 lua-devel-5.3.4-12.el8.x86_64.rpm 4d4bdd94869eace913b5a9e1b9c3b60163bc83c1150f537ab4c669d7764cd92c ALBA-2021:4431 Copyright 2021 AlmaLinux OS 0 2 None

An update for lvm2 is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-devel-1.02.177-10.el8.i686.rpm e36e7706adfcf8134ac09e2007c2e16aaafd0a67be8a55e05046b4d2887e3d55 device-mapper-devel-1.02.177-10.el8.x86_64.rpm 9086be44d8068bfe90ccb627acd746ace13b28cd9dd81fb9261d4db73f4d8343 device-mapper-event-devel-1.02.177-10.el8.i686.rpm c7b67d2dcedb74a7de162b5fcbe439865480c72a7fb458223067d5b330dad0d6 device-mapper-event-devel-1.02.177-10.el8.x86_64.rpm 320c8900b142e054eb9f25ccdfba50d6cc3ce22afb7049a7abf9b45dbc5e8b46 lvm2-devel-2.03.12-10.el8.i686.rpm 992975004926cd09a97a364959aabf4ac5c13e6bd09c7e0f344c4ae4af2a679c lvm2-devel-2.03.12-10.el8.x86_64.rpm ad3e0003b184910d2645ccc23396d2ebcddba89af5922eb049874771bf6e1c91 ALBA-2021:4371 Copyright 2021 AlmaLinux OS 0 2 None

An update for libxcrypt is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libxcrypt-static-4.1.1-6.el8.i686.rpm 35c7a89435ada529229119f06de48f10481673bcc0257da3f2a6cc0841ece653 libxcrypt-static-4.1.1-6.el8.x86_64.rpm 0200e9ebe45ef0332a16d28b1e5957ec57118758951e6c6992860b0c1eefcb3d ALSA-2021:4373 Copyright 2021 AlmaLinux OS 0 4 Low

An update for pcre is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

PCRE is a Perl-compatible regular expression library. Security Fix(es): * pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 (CVE-2019-20838) * pcre: Integer overflow when parsing callout numeric arguments (CVE-2020-14155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default pcre-static-8.42-6.el8.i686.rpm a8a6003169f61ce9324ee338f3f726afe3629dd8a9b41950ccd412de342e31b2 pcre-static-8.42-6.el8.x86_64.rpm cd6060b921ecd61ef049422104f8ba6412a1aeeaff14385eccb1aa21a56965c0 ALBA-2021:4362 Copyright 2021 AlmaLinux OS 0 2 None

An update for ModemManager is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ModemManager-1.10.8-4.el8.i686.rpm 152660abbd6c5ef8f7c4ad6b42d4ebd1d33256154a97cd6497e7133855c6c877 ModemManager-devel-1.10.8-4.el8.i686.rpm 8d2039ee2580c3cc54a3c569863d5c34890c908ec134827d2342143ecc72a6fa ModemManager-devel-1.10.8-4.el8.x86_64.rpm d3c8c9539d38eeb90a114a5da7d0f44649d1949733b5f4783e639a8b92b34683 ModemManager-glib-devel-1.10.8-4.el8.i686.rpm 780a2a49d6724dfeeab0322043ab3d0ac198385e7a8f168e893c5225548f9450 ModemManager-glib-devel-1.10.8-4.el8.x86_64.rpm 78e2606c3f69a17df35202d535f0a3e49020b7cf79cff50612d479a963b17a98 ALBA-2021:4435 Copyright 2021 AlmaLinux OS 0 2 None

An update for sssd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsss_nss_idmap-devel-2.5.2-2.el8.i686.rpm f60690ce92f7806100db6b571307607712704f3c8a36615e57661a9f8652c58b libsss_nss_idmap-devel-2.5.2-2.el8.x86_64.rpm 925244dc23f7c2112225d8e9a96f12bba9d49c8b14c66e21de340ef444e3f2df ALBA-2021:4438 Copyright 2021 AlmaLinux OS 0 2 None

An update for samba is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsmbclient-devel-4.14.5-2.el8.i686.rpm beeb6b05b611343b2462dcc04335c6e4d3653b39b0617fb81356ae59be9bf852 libsmbclient-devel-4.14.5-2.el8.x86_64.rpm 0d46eff0a2f1acadec18d5eb5e448f70d6dbd889bbeb889050c86395426a135c libwbclient-devel-4.14.5-2.el8.i686.rpm 77cbc8493b69bf4d33503a7757c05c4e4d31d00a7cd7a07a92ec6b07de048f86 libwbclient-devel-4.14.5-2.el8.x86_64.rpm ab6e03115142bbe070da53689872cd24c18188ae29c45d385f5a1e7ef9fac997 samba-devel-4.14.5-2.el8.i686.rpm e6a6f2da6a9bf9b07805c5893a14e066dd72a940e6ad84cf50b45d0a48a86505 samba-devel-4.14.5-2.el8.x86_64.rpm 0779211dc3f54e51991ec747e8c45207a0a1077d4d95d6805f6089e6f4cf254b ALBA-2021:4219 Copyright 2021 AlmaLinux OS 0 2 None

An update for libinput and libevdev is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libevdev-devel-1.10.0-1.el8.i686.rpm 55e2b106fac9aac7a3a6bfac1f2328ec2a6baf209192abbeca8c408d14d3338e libevdev-devel-1.10.0-1.el8.x86_64.rpm 5576f85a1ab7a5be4a7a2eeecbb0ab84d80d7879294f819024e3255201d20dee libinput-devel-1.16.3-2.el8.i686.rpm be633fe2e3aa378ff891c1cf4e662f337a97cef6598dad66a0c751ca76320302 libinput-devel-1.16.3-2.el8.x86_64.rpm 7b15aec7c0104597cd28d67d037ef70d72bb39a6c0b63c8d9d201897454d8198 ALSA-2021:4172 Copyright 2021 AlmaLinux OS 0 5 Moderate

An update for qt5 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Qt is a software toolkit for developing applications. The following packages have been upgraded to a later upstream version: adwaita-qt (1.2.1), python-qt5 (5.15.0), qgnomeplatform (0.7.1), qt5 (5.15.2), qt5-qt3d (5.15.2), qt5-qtbase (5.15.2), qt5-qtconnectivity (5.15.2), qt5-qtdeclarative (5.15.2), qt5-qtdoc (5.15.2), qt5-qtgraphicaleffects (5.15.2), qt5-qtimageformats (5.15.2), qt5-qtlocation (5.15.2), qt5-qtmultimedia (5.15.2), qt5-qtquickcontrols (5.15.2), qt5-qtquickcontrols2 (5.15.2), qt5-qtscript (5.15.2), qt5-qtsensors (5.15.2), qt5-qtserialbus (5.15.2), qt5-qtserialport (5.15.2), qt5-qtsvg (5.15.2), qt5-qttools (5.15.2), qt5-qttranslations (5.15.2), qt5-qtwayland (5.15.2), qt5-qtwebchannel (5.15.2), qt5-qtwebsockets (5.15.2), qt5-qtx11extras (5.15.2), qt5-qtxmlpatterns (5.15.2), sip (4.19.24). (BZ#1928156) Security Fix(es): * qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (CVE-2021-3481) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default python3-qt5-devel-5.15.0-2.el8.i686.rpm b3b1bdbf5c2f51daa8ae707a86c65bc511c3e867360de579525a9f3046c3854a python3-qt5-devel-5.15.0-2.el8.x86_64.rpm cc3a27776ea5b52af503315d75d0461cbd314227202d93d8b78d535b7bda43e4 python3-sip-devel-4.19.24-2.el8.i686.rpm 5ad7fd4662050e016bdc1e496770790edf0912d038fdb12ee98105e0a489d8d5 python3-sip-devel-4.19.24-2.el8.x86_64.rpm bb7132b9d6b8af84ffa684181b3288bb84be5b6b5704f86fbf1835828d6d336c qt5-devel-5.15.2-1.el8.noarch.rpm 88e8c9476063a97620470dfab7a9e0c710b6e7528e73bcbec17824e9104ea416 qt5-qtbase-static-5.15.2-3.el8.i686.rpm 4fb83c484722514b995039b4c73bf063f05f80a18c5ab996702b29dd6e03f651 qt5-qtbase-static-5.15.2-3.el8.x86_64.rpm f00c6b8d6c2af26ed1576bc2008dfa5ed01835a9cfe180ae292bfe7d8a3a3478 qt5-qtdeclarative-static-5.15.2-2.el8.i686.rpm 62cca88cd2b9e4827aa8803085950145c73faf1cac944a245b8b69dd4e3ceab3 qt5-qtdeclarative-static-5.15.2-2.el8.x86_64.rpm dac766885d3e3a47defe0afc97fdf85f34d8e33f020bd356660e3d3323dab5a0 qt5-qtquickcontrols2-devel-5.15.2-2.el8.i686.rpm d731eb1808b56d5624755fa4a04094056eac3f178f5e8848a1b680062028bad3 qt5-qtquickcontrols2-devel-5.15.2-2.el8.x86_64.rpm b5cf51b836b134627248fe609301e4e86a72eb490338e084f4787655523dcfe5 qt5-qtserialbus-devel-5.15.2-3.el8.i686.rpm c6639d1f7fc3c56d0ef8792a405843460abf7ad06cd2001aad824a83abab3aac qt5-qtserialbus-devel-5.15.2-3.el8.x86_64.rpm 6b1ddeb97ddf596b88ad49145b34a38326cb4415bf8c3f60fb45a3280b6f40f4 qt5-qttools-static-5.15.2-3.el8.i686.rpm 9cad3acd0bc4dd9e43b7cfc6ec1566ef836464d94e6ea068fe058aedc234dbf8 qt5-qttools-static-5.15.2-3.el8.x86_64.rpm f4f035f79a60de22f3a4d1823c2cc261be61b6e0563a3aff360ee6ac85b6dc05 qt5-qtwayland-devel-5.15.2-2.el8.i686.rpm 5c302a75706541a33cb7f2e6b996b25f620311944be1386b9c37f5c73cc5efa8 qt5-qtwayland-devel-5.15.2-2.el8.x86_64.rpm 12898cadc0a968f5dfad74f16f201d6b47ba42ee6a9906f858ca24d2d3439459 ALBA-2021:4180 Copyright 2021 AlmaLinux OS 0 3 None

An update for evolution, evolution-data-server, and evolution-ews is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default evolution-data-server-doc-3.28.5-17.el8.noarch.rpm 6cf1bddd41c6658329f55361fa68918b7b2341ea0c956405d381c24f4fb4e6f9 evolution-data-server-perl-3.28.5-17.el8.x86_64.rpm 6c0346acc461788a778c13a8bb202cda99c3e4f4cf2bdc5420e8ae9318986e1f evolution-data-server-tests-3.28.5-17.el8.i686.rpm 70a2652107364f8231af90e8a478aaa0025482c995302943554595a1ecd3fee1 evolution-data-server-tests-3.28.5-17.el8.x86_64.rpm 821a5339d1c82205bdc4c7f9cbc863907b23f33401ac299ce8e638757f3b456c evolution-devel-3.28.5-18.el8.i686.rpm b0cef1da6666e3096c7908a859a7fa55a2c6663bd2ab3a61c0a2b7419eff4738 evolution-devel-3.28.5-18.el8.x86_64.rpm 162e89f99a3db00e505676556de0212094fff8c867d818d7eeb5a76bb59ebca5 ALBA-2021:4525 Copyright 2021 AlmaLinux OS 0 2 None

An update for mingw-filesystem is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw-filesystem-base-104-3.el8.noarch.rpm 846a92e731ad21c4e6b9b001218ee9a90ea80f0103b2b0870d52357c43531208 mingw32-filesystem-104-3.el8.noarch.rpm f1c0f4da22e6702ae99aa15e9a76bb0edd4dcb9f7fd665978b705d98f32824e6 mingw64-filesystem-104-3.el8.noarch.rpm 4d24f15d89426556973112b30e2ca050ee538e64baa1b4fb92e1f14e18e0c52a ALBA-2021:4422 Copyright 2021 AlmaLinux OS 0 2 None

An update for sanlock is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default sanlock-devel-3.8.4-1.el8.i686.rpm 5132a2e14361055da3dd083d309e4061c890e2766d6ffd5a3fc053f4b0d31c6d sanlock-devel-3.8.4-1.el8.x86_64.rpm ad4d7738b2890e56233028ace78ea262395ba599f3d3d09594c4660ba1c635ea ALBA-2021:4269 Copyright 2021 AlmaLinux OS 0 2 None

An update for papi is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libpfm-static-4.10.1-4.el8.i686.rpm dd49c9a47d9f99960ee84e4ad6b3bc6fedc8f14e705729e3530c3d7dddfb5984 libpfm-static-4.10.1-4.el8.x86_64.rpm 886a343595ae8b11daa1e06f37535479611590d6e8af0296a522c9194755a684 papi-testsuite-5.6.0-14.el8.x86_64.rpm 5398dfca3ff5ac0724fac9a923092b9ef512199899ed78c69fcc5ff7c38dbcd3 python3-libpfm-4.10.1-4.el8.x86_64.rpm 4d3caf98e00abcd22e4f97e436630c0e3cfcef5cbc3134477ba6f6c64ade4d01 ALBA-2021:4199 Copyright 2021 AlmaLinux OS 0 2 None

An update for crash is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default crash-devel-7.3.0-2.el8.alma.i686.rpm b89154d4ee9c8e8012e3fe6d841f6a8a1c6273d0da20cef2066a3787743311e8 crash-devel-7.3.0-2.el8.alma.x86_64.rpm f0788a0eaa6dbd459b876e71365baa83b10f833ca324d4ce432f66aaa0887ae9 ALBA-2021:4433 Copyright 2021 AlmaLinux OS 0 2 None

An update for elfutils is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default elfutils-devel-static-0.185-1.el8.i686.rpm 480d8ce4ca0239fd829d3dfaf8b54346883fc0ddeb743ec647fce18b12b8c702 elfutils-devel-static-0.185-1.el8.x86_64.rpm dfbc07ec90cac56f9b377d1f932cf2f6c4e3c7e0ce2e769daae6035c255d0eca elfutils-libelf-devel-static-0.185-1.el8.i686.rpm 205ce0ce784c15287b6d587b69111d0358374eb38a42c2d9d03c262368956a45 elfutils-libelf-devel-static-0.185-1.el8.x86_64.rpm 1afebac0542d2124f2860a94ad6b939dd9000594fa730836ee21914829dfb7e0 ALEA-2021:4136 Copyright 2021 AlmaLinux OS 0 4 None

An update for java-17-openjdk is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default java-17-openjdk-demo-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 0a55419655b00d0fba3d3c58e7b5078fadc2f74ecd286d6aa6e541924709cb68 java-17-openjdk-demo-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm 9a8845bce12e414a17798749ed78e7642087c6d5ec518dc5854994c6d4ddb9db java-17-openjdk-devel-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 576739974a9b12e357093637bd4c1a193aa04d8af9f30db42f4ff577e3c84a1f java-17-openjdk-devel-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm be8f60da385a96439dd65b5166648131c8c79f7e5d2e8a14db750d4506d5fb85 java-17-openjdk-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 41360033054054eab24c9de8926598ce2505fc003467d27f1d41dd80fdf40212 java-17-openjdk-headless-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 25292940f3904aff749630b3bec67d74c9b08a5c1e45c135d83bd339b4410412 java-17-openjdk-headless-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm 70077a2f8b14c46a86de0b3b9995a4c8bbe41ef3df62a074730d331be2c496e9 java-17-openjdk-jmods-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 3efe5261f57db1d7d21a77071e94447a21a3e50647ee58dc7c5ab1b95d4c19b4 java-17-openjdk-jmods-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm ec77e8158c477727dc3d92b6c96dec3a0fe2ca5948b16fd0a37bbd58177186ed java-17-openjdk-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm 2185f284b0f37ea67dfab47019e2593d8cb82a335ffe9be39520bb6523173798 java-17-openjdk-src-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 66c303ce77ce9210d55016e33010cbb110c38ef4f8c035926580b5db09727a81 java-17-openjdk-src-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm 436d2de6e099eaade67f55cf68b6b6d0a4380a2424244cee7f9e6946e0671fbe java-17-openjdk-static-libs-fastdebug-17.0.0.0.35-4.el8.x86_64.rpm 11a746fe1469405c1e79188ff1c4d8d96d5b8fd6fbb3cdf16c0b8643cde3fea8 java-17-openjdk-static-libs-slowdebug-17.0.0.0.35-4.el8.x86_64.rpm c7306949f5c762f639cc9f0abfcddce830cc3ecc29953284dece3b611081f8da ALEA-2021:4314 Copyright 2021 AlmaLinux OS 0 2 None

An update for flatpak is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default flatpak-1.8.5-4.el8.i686.rpm 5332e8d8cc163faaf43d408a1b827f42569c206c0468c97705a0e0368599fce0 flatpak-devel-1.8.5-4.el8.i686.rpm 2f254ed9b80e30d8e8a3ec6cb05bf1739574549be1a51e5918a8f53b03da65ef flatpak-devel-1.8.5-4.el8.x86_64.rpm 7312aa62c44037550aa83104632fb23265d15eabbf1ac6c9009ab88f92afd82e flatpak-session-helper-1.8.5-4.el8.i686.rpm f85fff81c6aeff8235f1ae4ead22216ba599aaa866d38e23b9fc2b3f70181fa6 ALBA-2021:4205 Copyright 2021 AlmaLinux OS 0 2 None

An update for bcc is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default bcc-devel-0.19.0-4.el8.x86_64.rpm 641cdb578014f04090b901a557a9e878a727274fa92e77463617d3f8ed1aaebd bcc-doc-0.19.0-4.el8.noarch.rpm a81070971b2a92cb75a4845664e15d09160d1513975a3af64778de7ae0a38d55 ALEA-2021:4405 Copyright 2021 AlmaLinux OS 0 2 None

An update for libmodulemd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libmodulemd-devel-2.13.0-1.el8.i686.rpm adf9f3a9da5d87b2a372a1cca656f5218bed8402bc44bd088a5add4e7d152dfe libmodulemd-devel-2.13.0-1.el8.x86_64.rpm 4b178d7aedc08267849b3294e76ce464deb3fc0ca7dfe636b19094549d6e91c0 ALBA-2021:4507 Copyright 2021 AlmaLinux OS 0 2 None

An update for fontconfig is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default fontconfig-devel-doc-2.13.1-4.el8.noarch.rpm f4aaabd796eff4e666fe4575d0c9ff7054d5601ea32916f0dde4fcf62a338fdc ALSA-2021:4339 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for grilo is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Grilo is a framework that provides access to different sources of multimedia content, using a pluggable system. The grilo package contains the core library and elements. Security Fix(es): * grilo: missing TLS certificate verification (CVE-2021-39365) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default grilo-devel-0.3.6-3.el8.i686.rpm 496e9f72e619a17e2f690bc196f53bee5f458cdaa61ddc91293bbcc3f1964cb9 grilo-devel-0.3.6-3.el8.x86_64.rpm 3a0a338976b3960f9b34d6324e87c07987a55de0e92e897ee7dc4659dcfc4cf1 ALSA-2021:4513 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for libsepol is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libsepol library provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies (for example, customizing policy boolean settings). Security Fix(es): * libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084) * libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36085) * libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086) * libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libsepol-static-2.9-3.el8.i686.rpm a9528073bf059f0b0bbe370fd6b0a43c192606d92d13877b0b963fdda9e87c97 libsepol-static-2.9-3.el8.x86_64.rpm 3da02b16eb3851065c08750b2298448c9ea830157c2aae48548da8d8488becc4 ALBA-2021:4290 Copyright 2021 AlmaLinux OS 0 2 None

An update for ibus is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default ibus-devel-1.5.19-13.el8.i686.rpm b75fc3ce8cc3d30d8aef1d9e0ca4e2a49fa8df91cdc543612c316bc92b725461 ibus-devel-1.5.19-13.el8.x86_64.rpm 7792c9a7dc594db26bed9a5dcca0d869830731f57471596d42b3d39471117f97 ibus-devel-docs-1.5.19-13.el8.noarch.rpm f2b75823f6f84a20f420ea4faa4c9a0cf734d978ca0affca1c83cf358640ad49 ALBA-2021:4502 Copyright 2021 AlmaLinux OS 0 2 None

An update for glusterfs is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glusterfs-api-devel-6.0-56.4.el8.x86_64.rpm c41f9f642d83fa208e8fbdd82a8ae2a28bda5da6acf4118be176207313384f73 glusterfs-devel-6.0-56.4.el8.x86_64.rpm ef2a93300e2e06f535af41036eece1f38327b8c99bc1db0af677fe0fab54fc59 ALBA-2021:4166 Copyright 2021 AlmaLinux OS 0 2 None

An update for texlive is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default texlive-lib-devel-20180414-23.el8.i686.rpm 4916a9310fddc93d68b44236a4743fae963689519818ed07ae8243fce884138d texlive-lib-devel-20180414-23.el8.x86_64.rpm a954911edab2ecbf13f02d52f0a51b692f2a9eee5e8f1156f71fb62619fa0f6b ALEA-2021:4322 Copyright 2021 AlmaLinux OS 0 3 None

An update for unicode-ucd is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default unicode-ucd-unihan-11.0.0-2.el8.noarch.rpm 2b5215f78b9af6a7cf28bf99e11f23a01b8c4488bbe62055db11b746ab1ab253 ALBA-2021:4367 Copyright 2021 AlmaLinux OS 0 2 None

An update for device-mapper-multipath is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default device-mapper-multipath-devel-0.8.4-17.el8.i686.rpm 464af4f5b616495c3bfccaaa0962b76f46b86f3c735480f78f4bfb71c676f771 device-mapper-multipath-devel-0.8.4-17.el8.x86_64.rpm 38a3b755dc8bc0960378fc3b2e09d442b86470ca7cfaf0a04bf8c15713038c50 ALSA-2021:4358 Copyright 2021 AlmaLinux OS 0 3 Moderate

An update for glibc is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: Arbitrary read in wordexp() (CVE-2021-35942) * glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c (CVE-2021-27645) * glibc: mq_notify does not handle separately allocated thread attributes (CVE-2021-33574) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default glibc-benchtests-2.28-164.el8.x86_64.rpm 93bbbad41159ef88fa3a030ecea48652905210400e6e49e53750d001938a22df True glibc-nss-devel-2.28-164.el8.i686.rpm a33e59791dcaa9bbdfa9a7dd9fd4891ca69964a749fc67ec3482244a5d44c342 True glibc-nss-devel-2.28-164.el8.x86_64.rpm 934864908fa58eef011db44c9868c3dc4cad74ec6527e89bef64fcf585fa3ba1 True glibc-static-2.28-164.el8.i686.rpm 3655b75cd149b5c92d823a86b983c58d550e5555aace2e2b20bc7549f9424e6f True glibc-static-2.28-164.el8.x86_64.rpm fe0a384700760f839d2f405e94d4c23f38835ae72a8c9872a7b3d37d24f92960 True nss_hesiod-2.28-164.el8.i686.rpm 30b32bdf7554213a9a013b272965022a21ab49e3602c779eefa2b2c1f1cf62d3 True nss_hesiod-2.28-164.el8.x86_64.rpm bb2a52330941aaa106b798d89cf9667eef65e27811cbf8745ba3ed15e4501919 True ALBA-2021:4336 Copyright 2021 AlmaLinux OS 0 2 None

An update for libnma is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default libnma-devel-1.8.32-1.el8.i686.rpm 059179c306f6245aa6db6ec546e0f92bd486b0dac38efb8937d68288d20c15ab libnma-devel-1.8.32-1.el8.x86_64.rpm 77b9aef0347b2339c6a04dfb65db878008b34779453dca22c93d306f33495efa ALEA-2021:4520 Copyright 2021 AlmaLinux OS 0 2 None

An update for po4a is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default po4a-0.63-1.el8.noarch.rpm 5e2724f0a7770d662e57f3f801e76b140f8251f52a4571f5e0ac702d2c3d42eb ALSA-2021:4526 Copyright 2021 AlmaLinux OS 0 3 Important

An update for mingw-glib2 is now available for AlmaLinux AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The following packages have been upgraded to a later upstream version: mingw-glib2 (2.66.7). (BZ#1935248, BZ#1939111) Security Fix(es): * glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits (CVE-2021-27219) * glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform (CVE-2021-27218) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default mingw32-glib2-2.66.7-2.el8.noarch.rpm d8e0299876196e96c196d7a02c458f8f70559aa10c4d4a35e9346f862bee2fd7 mingw32-glib2-static-2.66.7-2.el8.noarch.rpm 208fe35c01e2e82107ef60dcee9e2ef01d5d5ff673a1e1a1835ada921d6739a8 mingw64-glib2-2.66.7-2.el8.noarch.rpm 4d622dca18355fb31ab2b1000ef264c55376804ff6edbe3cd556c55c00e285ce mingw64-glib2-static-2.66.7-2.el8.noarch.rpm c92a26da15e994efdb1ed6d6c9b69ea5b98d6b82656719aee8c1d18633166a63 ALEA-2021:4521 Copyright 2021 AlmaLinux OS 0 2 None

An update for dotnet-build-reference-packages is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default dotnet-build-reference-packages-0-10.20200608gitcd5a8c6.el8.x86_64.rpm 5cf99b7132c625dd377f97d40224853020fd731abf78c143f759cd3f400504cf ALBA-2021:4477 Copyright 2021 AlmaLinux OS 0 2 None

An update for parted is now available for AlmaLinux

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section. codeready-builder-for-rhel-8-x86_64-rpms__8_0_default parted-devel-3.2-39.el8.i686.rpm 99984325cebf45bb78f9b5c376ce630ac3717443251465e3609739d15f67a698 parted-devel-3.2-39.el8.x86_64.rpm 70e270a09d9a14c657a34d9ff9ae3dcbf174bdc0cefc3d70dc57bde3bf7987df