Security fix for CVE-2022-27404, CVE-2022-27405 and CVE-2022-27406.

Security fixes for CVE-2022-1769, CVE-2022-1733

Security fix for CVE-2022-27404, CVE-2022-27405 and CVE-2022-27406.

kernel: cgroups v1 release_agent feature may allow privilege escalation (CVE-2022-0492) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * kernel panic in mlx5_ib driver SL/CentOS 7.9 VM * [SL-7.9] Get Call Trace about "kernel/timer.c:1270 requeue_timers+0x15e/0x170" on specified [More...]

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

An update that fixes one vulnerability is now available.

An update that fixes 11 vulnerabilities is now available.

An update that fixes 18 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

OpenLDAP could be made to perform arbitrary modifications to the database.

An update that fixes one vulnerability is now available.

An update that solves one vulnerability and has one errata is now available.

An update that fixes 6 vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

Upstream details at : https://access.redhat.com/errata/RHSA-2022:4642

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer overflow/Address boundary error in the jpeg_read_scanlines

Potential SQL injection in QuerySet.annotate(), aggregate(), and extra() (CVE-2022-28346) Potential SQL injection via QuerySet.explain(**options) on PostgreSQL QuerySet.explain() (CVE-2022-28347)

oslo.utils could be made to expose sensitive information if it received a specially crafted input (CVE-2022-0718) References: - https://bugs.mageia.org/show_bug.cgi?id=30254