grafana-9.0.9-1.fc38
Automatic update for grafana-9.0.9-1.fc38.
* Wed Sep 21 2022 Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.9-1
– update to 9.0.9 tagged upstream community sources, see CHANGELOG
– resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2128565)
knot-resolver-5.5.3-1.el7
Latest upstream version 5.5.3 with fix for CVE-2022-40188
knot-resolver-5.5.3-1.el8
Latest upstream version 5.5.3 with fix for CVE-2022-40188
knot-resolver-5.5.3-1.fc36
Latest upstream version 5.5.3 with fix for CVE-2022-40188
knot-resolver-5.5.3-1.fc37
Latest upstream version 5.5.3 with fix for CVE-2022-40188
knot-resolver-5.5.3-1.el9
Latest upstream version 5.5.3 with fix for CVE-2022-40188
knot-resolver-5.5.3-1.fc35
Latest upstream version 5.5.3 with fix for CVE-2022-40188
bind-9.18.7-1.fc38
bind-dyndb-ldap-11.10-6.fc38
Upstream release notes
python3.6-3.6.15-12.fc38
Automatic update for python3.6-3.6.15-12.fc38.
* Wed Sep 14 2022 Lumír Balhar <lbalhar@redhat.com> – 3.6.15-12
– Fix for CVE-2021-28861
Resolves: rhbz#2120785
redis-7.0.5-1.fc37
Redis 7.0.5 – Released Wed Sep 21 20:00:00 IST 2022
Upgrade urgency: SECURITY, contains fixes to security issues.
Security Fixes:
(CVE-2022-35951) Executing a XAUTOCLAIM command on a stream key in a specific
state, with a specially crafted COUNT argument, may cause an integer overflow,
a subsequent heap overflow, and potentially lead to remote code execution.
The problem affects Redis versions 7.0.0 or newer
[reported by Xion (SeungHyun Lee) of KAIST GoN].
Module API changes
Fix RM_Call execution of scripts when used with M/W/S flags to properly
handle script flags (#11159)
Fix RM_SetAbsExpire and RM_GetAbsExpire API registration (#11025, #8564)
Bug Fixes
Fix a hang when eviction is combined with lazy-free and maxmemory-eviction-tenacity is set to 100 (#11237)
Fix a crash when a replica may attempt to set itself as its master as a result of a manual failover (#11263)
Fix a bug where a cluster-enabled replica node may permanently set its master’s hostname to ‘?’ (#10696)
Fix a crash when a Lua script returns a meta-table (#11032)
Fixes for issues in previous releases of Redis 7.0
Fix redis-cli to do DNS lookup before sending CLUSTER MEET (#11151)
Fix crash when a key is lazy expired during cluster key migration (#11176)
Fix AOF rewrite to fsync the old AOF file when a new one is created (#11004)
Fix some crashes involving a list containing entries larger than 1GB (#11242)
Correctly handle scripts with a non-read-only shebang on a cluster replica (#11223)
Fix memory leak when unloading a module (#11147)
Fix bug with scripts ignoring client tracking NOLOOP (#11052)
Fix client-side tracking breaking protocol when FLUSHDB / FLUSHALL / SWAPDB is used inside MULTI-EXEC (#11038)
Fix ACL: BITFIELD with GET and also SET / INCRBY can be executed with read-only key permission (#11086)
Fix missing sections for INFO ALL when also requesting a module info section (#11291)
