The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
Archive for January, 2023
Fedora 36: kernel-headers 2023-3fd7349f60
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
Fedora 36: kernel-tools 2023-3fd7349f60
The 6.1.5 stable kernel rebase contains new features, enhanced hardware support, and a number of important fixes across the tree.
v1.5.1 – fix logging to stdout when –stdout is used *thanks to Eta – update –treshold option accept decimal numbers as parameter – fix crashes when processing certain broken JPEG images – fix memory leaks – fix (logging) output in parallel processing mode
Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
Debian: DSA-5319-1: openvswitch security update
Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, software-based Ethernet virtual switch, which could result in denial of service.
Debian: DSA-5318-1: lava security update
Igor Ponomarev discovered that LAVA, a continuous integration system for deploying operating systems onto physical and virtual hardware for running tests, was suspectible to denial of service via recursive XML entity expansion.
Ubuntu 5804-2: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Debian: DSA-5317-1: chromium security update
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Ubuntu 5804-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5803-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Fedora 37: cacti-spine 2023-788d505ddc
– Update to 1.2.23 – CVE-46169 Release notes: https://www.cacti.net/info/changelog/1.2.23
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstream [security advisory](https://blog.rust- lang.org/2023/01/10/cve-2022-46176.html).
RedHat: RHSA-2023-0163:01 Important: Red Hat JBoss Enterprise Application
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
RedHat: RHSA-2023-0164:01 Important: Red Hat JBoss Enterprise Application
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
RedHat: RHSA-2023-0017:01 Important: OpenShift Container Platform 4.8.56
Red Hat OpenShift Container Platform release 4.8.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8.
Ubuntu 5802-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5800-1: Heimdal vulnerabilities
Several security issues were fixed in Heimdal.
RedHat: RHSA-2023-0160:01 Moderate: rh-postgresql10-postgresql security and
An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
RedHat: RHSA-2023-0114:01 Important: kernel-rt
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
RedHat: RHSA-2023-0110:01 Moderate: sqlite security update
An update for sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
RedHat: RHSA-2023-0123:01 Important: kpatch-patch security update
An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
RedHat: RHSA-2023-0128:01 Moderate: java-1.8.0-ibm security update
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
Fedora 37: phoronix-test-suite 2023-e363201a4c
Security fix for CVE-2022-40704
Update to 6.18. Backport fix for CVE-35065 of bundled glob-parent.
Debian: DSA-5316-1: netty security update
Several out-of-memory, stack overflow or HTTP request smuggling vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework, which may allow attackers to cause a denial of service or bypass restrictions when used as a proxy.
Debian: DSA-5315-1: libxstream-java security update
XStream serializes Java objects to XML and back again. Versions prior to 1.4.15-3+deb11u2 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation of the processed input stream. The attack uses the hash code implementation for
Debian: DSA-5314-1: emacs security update
It was discovered that missing input sanitising in the ctags functionality of Emacs may result in the execution of arbitrary shell commands. For the stable distribution (bullseye), this problem has been fixed in
RedHat: RHSA-2023-0074:01 Important: RHV 4.4 SP1 [ovirt-4.5.3-3] security
Updated RHV packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,