Red Hat OpenShift Container Platform release 4.8.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.8.

- Updated to latest upstream (100.0.2)

New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).

Rebase to version 10.40

New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).

- Updated to latest upstream (100.0.2)

New upstream release for v2.14.0. See release notes at [NEWS](https://github.com/coreos/ignition/blob/main/NEWS).

An update that fixes 15 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 15 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

Prototype pollution in Top-Level Await implementation. (CVE-2022-1802) Untrusted input used in JavaScript object indexing, leading to prototype pollution. (CVE-2022-1529)

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. (CVE-2022-30333) References:

An update that fixes two vulnerabilities is now available.

Max Justicz reported a directory traversal vulnerability in Dpkg::Source::Archive in dpkg, the Debian package management system. This affects extracting untrusted source packages in the v2 and v3 source package formats that include a debian.tar.

Max Justicz reported a directory traversal vulnerability in Dpkg::Source::Archive in dpkg, the Debian package management system. This affects extracting untrusted source packages in the v2 and v3 source package formats that include a debian.tar.

An update that fixes one vulnerability is now available.

An update that fixes 15 vulnerabilities is now available.

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

This update upgrades Firefox to version 91.9.1 ESR. * Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution (CVE-2022-1529) * Mozilla: Prototype pollution in Top-Level Await implementation (CVE-2022-1802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 [More...]