VARIoT IoT vulnerabilities database

The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Password= and uiViewTools_PasswordConfirm= substrings. ASUS DSL-N17U There is an authentication vulnerability in modem firmware.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. ASUS DSL-N17U is a router from ASUS Corporation of China. An unauthorized attacker can modify the admin password by submitting specially crafted content to Advanced_System_Content.asp

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter firmware content and device configuration. This vulnerability is the same as CNVD-2020-68651. (DoS) It may be in a state. Shenzhen Qiaoan Technology Co., Ltd. is a professional R&D and manufacturer of surveillance cameras, specializing in the production of Qiaoan surveillance, Qiaoan surveillance cameras, etc. Several webcams of Shenzhen Qiaoan Technology Co., Ltd. have information disclosure vulnerabilities, which can be exploited by attackers to obtain sensitive information

The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. Description: Service Telemetry Framework (STF) provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally. Bugs fixed (https://bugzilla.redhat.com/): 2107342 - CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read 5. Bugs fixed (https://bugzilla.redhat.com/): 1918750 - CVE-2021-3114 golang: crypto/elliptic: incorrect operations on the P-224 curve 1945703 - "Guest OS Info" availability in VMI describe is flaky 1958816 - [2.6.z] KubeMacPool fails to start due to OOM likely caused by a high number of Pods running in the cluster 1963275 - migration controller null pointer dereference 1965099 - Live Migration double handoff to virt-handler causes connection failures 1965181 - CDI importer doesn't report AwaitingVDDK like it used to 1967086 - Cloning DataVolumes between namespaces fails while creating cdi-upload pod 1967887 - [2.6.6] nmstate is not progressing on a node and not configuring vlan filtering that causes an outage for VMs 1969756 - Windows VMs fail to start on air-gapped environments 1970372 - Virt-handler fails to verify container-disk 1973227 - segfault in virt-controller during pdb deletion 1974084 - 2.6.6 containers 1975212 - No Virtual Machine Templates Found [EDIT - all templates are marked as depracted] 1975727 - [Regression][VMIO][Warm] The third precopy does not end in warm migration 1977756 - [2.6.z] PVC keeps in pending when using hostpath-provisioner 1982760 - [v2v] no kind VirtualMachine is registered for version \"kubevirt.io/v1\" i... 1986989 - OpenShift Virtualization 2.6.z cannot be upgraded to 4.8.0 initially deployed starting with <= 4.8 5. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: glibc security, bug fix, and enhancement update Advisory ID: RHSA-2021:1585-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:1585 Issue date: 2021-05-18 CVE Names: CVE-2016-10228 CVE-2019-9169 CVE-2019-25013 CVE-2020-27618 CVE-2021-3326 ==================================================================== 1. Summary: An update for glibc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the glibc library must be restarted, or the system rebooted. 5. Bugs fixed (https://bugzilla.redhat.com/): 1428290 - CVE-2016-10228 glibc: iconv program can hang when invoked with the -c option 1684057 - CVE-2019-9169 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read 1704868 - CVE-2016-10228 glibc: iconv: Fix converter hangs and front end option parsing for //TRANSLIT and //IGNORE [rhel-8] 1855790 - glibc: Update Intel CET support from upstream 1856398 - glibc: Build with -moutline-atomics on aarch64 1868106 - glibc: Transaction ID collisions cause slow DNS lookups in getaddrinfo 1871385 - glibc: Improve auditing implementation (including DT_AUDIT, and DT_DEPAUDIT) 1871387 - glibc: Improve IBM POWER9 architecture performance 1871394 - glibc: Fix AVX2 off-by-one error in strncmp (swbz#25933) 1871395 - glibc: Improve IBM Z (s390x) Performance 1871396 - glibc: Improve use of static TLS surplus for optimizations. Package List: Red Hat Enterprise Linux AppStream (v. 8): aarch64: compat-libpthread-nonshared-2.28-151.el8.aarch64.rpm glibc-debuginfo-2.28-151.el8.aarch64.rpm glibc-utils-2.28-151.el8.aarch64.rpm ppc64le: compat-libpthread-nonshared-2.28-151.el8.ppc64le.rpm glibc-debuginfo-2.28-151.el8.ppc64le.rpm glibc-debuginfo-common-2.28-151.el8.ppc64le.rpm glibc-utils-2.28-151.el8.ppc64le.rpm s390x: compat-libpthread-nonshared-2.28-151.el8.s390x.rpm glibc-debuginfo-2.28-151.el8.s390x.rpm glibc-debuginfo-common-2.28-151.el8.s390x.rpm glibc-utils-2.28-151.el8.s390x.rpm x86_64: compat-libpthread-nonshared-2.28-151.el8.x86_64.rpm glibc-debuginfo-2.28-151.el8.x86_64.rpm glibc-debuginfo-common-2.28-151.el8.x86_64.rpm glibc-utils-2.28-151.el8.x86_64.rpm Red Hat Enterprise Linux BaseOS (v. 8): Source: glibc-2.28-151.el8.src.rpm aarch64: glibc-2.28-151.el8.aarch64.rpm glibc-all-langpacks-2.28-151.el8.aarch64.rpm glibc-common-2.28-151.el8.aarch64.rpm glibc-debuginfo-2.28-151.el8.aarch64.rpm glibc-devel-2.28-151.el8.aarch64.rpm glibc-headers-2.28-151.el8.aarch64.rpm glibc-langpack-aa-2.28-151.el8.aarch64.rpm glibc-langpack-af-2.28-151.el8.aarch64.rpm glibc-langpack-agr-2.28-151.el8.aarch64.rpm glibc-langpack-ak-2.28-151.el8.aarch64.rpm glibc-langpack-am-2.28-151.el8.aarch64.rpm glibc-langpack-an-2.28-151.el8.aarch64.rpm glibc-langpack-anp-2.28-151.el8.aarch64.rpm glibc-langpack-ar-2.28-151.el8.aarch64.rpm glibc-langpack-as-2.28-151.el8.aarch64.rpm glibc-langpack-ast-2.28-151.el8.aarch64.rpm glibc-langpack-ayc-2.28-151.el8.aarch64.rpm glibc-langpack-az-2.28-151.el8.aarch64.rpm glibc-langpack-be-2.28-151.el8.aarch64.rpm glibc-langpack-bem-2.28-151.el8.aarch64.rpm glibc-langpack-ber-2.28-151.el8.aarch64.rpm glibc-langpack-bg-2.28-151.el8.aarch64.rpm glibc-langpack-bhb-2.28-151.el8.aarch64.rpm glibc-langpack-bho-2.28-151.el8.aarch64.rpm glibc-langpack-bi-2.28-151.el8.aarch64.rpm glibc-langpack-bn-2.28-151.el8.aarch64.rpm glibc-langpack-bo-2.28-151.el8.aarch64.rpm glibc-langpack-br-2.28-151.el8.aarch64.rpm glibc-langpack-brx-2.28-151.el8.aarch64.rpm glibc-langpack-bs-2.28-151.el8.aarch64.rpm glibc-langpack-byn-2.28-151.el8.aarch64.rpm glibc-langpack-ca-2.28-151.el8.aarch64.rpm glibc-langpack-ce-2.28-151.el8.aarch64.rpm glibc-langpack-chr-2.28-151.el8.aarch64.rpm glibc-langpack-cmn-2.28-151.el8.aarch64.rpm glibc-langpack-crh-2.28-151.el8.aarch64.rpm glibc-langpack-cs-2.28-151.el8.aarch64.rpm glibc-langpack-csb-2.28-151.el8.aarch64.rpm glibc-langpack-cv-2.28-151.el8.aarch64.rpm glibc-langpack-cy-2.28-151.el8.aarch64.rpm glibc-langpack-da-2.28-151.el8.aarch64.rpm glibc-langpack-de-2.28-151.el8.aarch64.rpm glibc-langpack-doi-2.28-151.el8.aarch64.rpm glibc-langpack-dsb-2.28-151.el8.aarch64.rpm glibc-langpack-dv-2.28-151.el8.aarch64.rpm glibc-langpack-dz-2.28-151.el8.aarch64.rpm glibc-langpack-el-2.28-151.el8.aarch64.rpm glibc-langpack-en-2.28-151.el8.aarch64.rpm glibc-langpack-eo-2.28-151.el8.aarch64.rpm glibc-langpack-es-2.28-151.el8.aarch64.rpm glibc-langpack-et-2.28-151.el8.aarch64.rpm glibc-langpack-eu-2.28-151.el8.aarch64.rpm glibc-langpack-fa-2.28-151.el8.aarch64.rpm glibc-langpack-ff-2.28-151.el8.aarch64.rpm glibc-langpack-fi-2.28-151.el8.aarch64.rpm glibc-langpack-fil-2.28-151.el8.aarch64.rpm glibc-langpack-fo-2.28-151.el8.aarch64.rpm glibc-langpack-fr-2.28-151.el8.aarch64.rpm glibc-langpack-fur-2.28-151.el8.aarch64.rpm glibc-langpack-fy-2.28-151.el8.aarch64.rpm glibc-langpack-ga-2.28-151.el8.aarch64.rpm glibc-langpack-gd-2.28-151.el8.aarch64.rpm glibc-langpack-gez-2.28-151.el8.aarch64.rpm glibc-langpack-gl-2.28-151.el8.aarch64.rpm glibc-langpack-gu-2.28-151.el8.aarch64.rpm glibc-langpack-gv-2.28-151.el8.aarch64.rpm glibc-langpack-ha-2.28-151.el8.aarch64.rpm glibc-langpack-hak-2.28-151.el8.aarch64.rpm glibc-langpack-he-2.28-151.el8.aarch64.rpm glibc-langpack-hi-2.28-151.el8.aarch64.rpm glibc-langpack-hif-2.28-151.el8.aarch64.rpm glibc-langpack-hne-2.28-151.el8.aarch64.rpm glibc-langpack-hr-2.28-151.el8.aarch64.rpm glibc-langpack-hsb-2.28-151.el8.aarch64.rpm glibc-langpack-ht-2.28-151.el8.aarch64.rpm glibc-langpack-hu-2.28-151.el8.aarch64.rpm glibc-langpack-hy-2.28-151.el8.aarch64.rpm glibc-langpack-ia-2.28-151.el8.aarch64.rpm glibc-langpack-id-2.28-151.el8.aarch64.rpm glibc-langpack-ig-2.28-151.el8.aarch64.rpm glibc-langpack-ik-2.28-151.el8.aarch64.rpm glibc-langpack-is-2.28-151.el8.aarch64.rpm glibc-langpack-it-2.28-151.el8.aarch64.rpm glibc-langpack-iu-2.28-151.el8.aarch64.rpm glibc-langpack-ja-2.28-151.el8.aarch64.rpm glibc-langpack-ka-2.28-151.el8.aarch64.rpm glibc-langpack-kab-2.28-151.el8.aarch64.rpm glibc-langpack-kk-2.28-151.el8.aarch64.rpm glibc-langpack-kl-2.28-151.el8.aarch64.rpm glibc-langpack-km-2.28-151.el8.aarch64.rpm glibc-langpack-kn-2.28-151.el8.aarch64.rpm glibc-langpack-ko-2.28-151.el8.aarch64.rpm glibc-langpack-kok-2.28-151.el8.aarch64.rpm glibc-langpack-ks-2.28-151.el8.aarch64.rpm glibc-langpack-ku-2.28-151.el8.aarch64.rpm glibc-langpack-kw-2.28-151.el8.aarch64.rpm glibc-langpack-ky-2.28-151.el8.aarch64.rpm glibc-langpack-lb-2.28-151.el8.aarch64.rpm glibc-langpack-lg-2.28-151.el8.aarch64.rpm glibc-langpack-li-2.28-151.el8.aarch64.rpm glibc-langpack-lij-2.28-151.el8.aarch64.rpm glibc-langpack-ln-2.28-151.el8.aarch64.rpm glibc-langpack-lo-2.28-151.el8.aarch64.rpm glibc-langpack-lt-2.28-151.el8.aarch64.rpm glibc-langpack-lv-2.28-151.el8.aarch64.rpm glibc-langpack-lzh-2.28-151.el8.aarch64.rpm glibc-langpack-mag-2.28-151.el8.aarch64.rpm glibc-langpack-mai-2.28-151.el8.aarch64.rpm glibc-langpack-mfe-2.28-151.el8.aarch64.rpm glibc-langpack-mg-2.28-151.el8.aarch64.rpm glibc-langpack-mhr-2.28-151.el8.aarch64.rpm glibc-langpack-mi-2.28-151.el8.aarch64.rpm glibc-langpack-miq-2.28-151.el8.aarch64.rpm glibc-langpack-mjw-2.28-151.el8.aarch64.rpm glibc-langpack-mk-2.28-151.el8.aarch64.rpm glibc-langpack-ml-2.28-151.el8.aarch64.rpm glibc-langpack-mn-2.28-151.el8.aarch64.rpm glibc-langpack-mni-2.28-151.el8.aarch64.rpm glibc-langpack-mr-2.28-151.el8.aarch64.rpm glibc-langpack-ms-2.28-151.el8.aarch64.rpm glibc-langpack-mt-2.28-151.el8.aarch64.rpm glibc-langpack-my-2.28-151.el8.aarch64.rpm glibc-langpack-nan-2.28-151.el8.aarch64.rpm glibc-langpack-nb-2.28-151.el8.aarch64.rpm glibc-langpack-nds-2.28-151.el8.aarch64.rpm glibc-langpack-ne-2.28-151.el8.aarch64.rpm glibc-langpack-nhn-2.28-151.el8.aarch64.rpm glibc-langpack-niu-2.28-151.el8.aarch64.rpm glibc-langpack-nl-2.28-151.el8.aarch64.rpm glibc-langpack-nn-2.28-151.el8.aarch64.rpm glibc-langpack-nr-2.28-151.el8.aarch64.rpm glibc-langpack-nso-2.28-151.el8.aarch64.rpm glibc-langpack-oc-2.28-151.el8.aarch64.rpm glibc-langpack-om-2.28-151.el8.aarch64.rpm glibc-langpack-or-2.28-151.el8.aarch64.rpm glibc-langpack-os-2.28-151.el8.aarch64.rpm glibc-langpack-pa-2.28-151.el8.aarch64.rpm glibc-langpack-pap-2.28-151.el8.aarch64.rpm glibc-langpack-pl-2.28-151.el8.aarch64.rpm glibc-langpack-ps-2.28-151.el8.aarch64.rpm glibc-langpack-pt-2.28-151.el8.aarch64.rpm glibc-langpack-quz-2.28-151.el8.aarch64.rpm glibc-langpack-raj-2.28-151.el8.aarch64.rpm glibc-langpack-ro-2.28-151.el8.aarch64.rpm glibc-langpack-ru-2.28-151.el8.aarch64.rpm glibc-langpack-rw-2.28-151.el8.aarch64.rpm glibc-langpack-sa-2.28-151.el8.aarch64.rpm glibc-langpack-sah-2.28-151.el8.aarch64.rpm glibc-langpack-sat-2.28-151.el8.aarch64.rpm glibc-langpack-sc-2.28-151.el8.aarch64.rpm glibc-langpack-sd-2.28-151.el8.aarch64.rpm glibc-langpack-se-2.28-151.el8.aarch64.rpm glibc-langpack-sgs-2.28-151.el8.aarch64.rpm glibc-langpack-shn-2.28-151.el8.aarch64.rpm glibc-langpack-shs-2.28-151.el8.aarch64.rpm glibc-langpack-si-2.28-151.el8.aarch64.rpm glibc-langpack-sid-2.28-151.el8.aarch64.rpm glibc-langpack-sk-2.28-151.el8.aarch64.rpm glibc-langpack-sl-2.28-151.el8.aarch64.rpm glibc-langpack-sm-2.28-151.el8.aarch64.rpm glibc-langpack-so-2.28-151.el8.aarch64.rpm glibc-langpack-sq-2.28-151.el8.aarch64.rpm glibc-langpack-sr-2.28-151.el8.aarch64.rpm glibc-langpack-ss-2.28-151.el8.aarch64.rpm glibc-langpack-st-2.28-151.el8.aarch64.rpm glibc-langpack-sv-2.28-151.el8.aarch64.rpm glibc-langpack-sw-2.28-151.el8.aarch64.rpm glibc-langpack-szl-2.28-151.el8.aarch64.rpm glibc-langpack-ta-2.28-151.el8.aarch64.rpm glibc-langpack-tcy-2.28-151.el8.aarch64.rpm glibc-langpack-te-2.28-151.el8.aarch64.rpm glibc-langpack-tg-2.28-151.el8.aarch64.rpm glibc-langpack-th-2.28-151.el8.aarch64.rpm glibc-langpack-the-2.28-151.el8.aarch64.rpm glibc-langpack-ti-2.28-151.el8.aarch64.rpm glibc-langpack-tig-2.28-151.el8.aarch64.rpm glibc-langpack-tk-2.28-151.el8.aarch64.rpm glibc-langpack-tl-2.28-151.el8.aarch64.rpm glibc-langpack-tn-2.28-151.el8.aarch64.rpm glibc-langpack-to-2.28-151.el8.aarch64.rpm glibc-langpack-tpi-2.28-151.el8.aarch64.rpm glibc-langpack-tr-2.28-151.el8.aarch64.rpm glibc-langpack-ts-2.28-151.el8.aarch64.rpm glibc-langpack-tt-2.28-151.el8.aarch64.rpm glibc-langpack-ug-2.28-151.el8.aarch64.rpm glibc-langpack-uk-2.28-151.el8.aarch64.rpm glibc-langpack-unm-2.28-151.el8.aarch64.rpm glibc-langpack-ur-2.28-151.el8.aarch64.rpm glibc-langpack-uz-2.28-151.el8.aarch64.rpm glibc-langpack-ve-2.28-151.el8.aarch64.rpm glibc-langpack-vi-2.28-151.el8.aarch64.rpm glibc-langpack-wa-2.28-151.el8.aarch64.rpm glibc-langpack-wae-2.28-151.el8.aarch64.rpm glibc-langpack-wal-2.28-151.el8.aarch64.rpm glibc-langpack-wo-2.28-151.el8.aarch64.rpm glibc-langpack-xh-2.28-151.el8.aarch64.rpm glibc-langpack-yi-2.28-151.el8.aarch64.rpm glibc-langpack-yo-2.28-151.el8.aarch64.rpm glibc-langpack-yue-2.28-151.el8.aarch64.rpm glibc-langpack-yuw-2.28-151.el8.aarch64.rpm glibc-langpack-zh-2.28-151.el8.aarch64.rpm glibc-langpack-zu-2.28-151.el8.aarch64.rpm glibc-locale-source-2.28-151.el8.aarch64.rpm glibc-minimal-langpack-2.28-151.el8.aarch64.rpm libnsl-2.28-151.el8.aarch64.rpm nscd-2.28-151.el8.aarch64.rpm nss_db-2.28-151.el8.aarch64.rpm ppc64le: glibc-2.28-151.el8.ppc64le.rpm glibc-all-langpacks-2.28-151.el8.ppc64le.rpm glibc-common-2.28-151.el8.ppc64le.rpm glibc-debuginfo-2.28-151.el8.ppc64le.rpm glibc-debuginfo-common-2.28-151.el8.ppc64le.rpm glibc-devel-2.28-151.el8.ppc64le.rpm glibc-headers-2.28-151.el8.ppc64le.rpm glibc-langpack-aa-2.28-151.el8.ppc64le.rpm glibc-langpack-af-2.28-151.el8.ppc64le.rpm glibc-langpack-agr-2.28-151.el8.ppc64le.rpm glibc-langpack-ak-2.28-151.el8.ppc64le.rpm glibc-langpack-am-2.28-151.el8.ppc64le.rpm glibc-langpack-an-2.28-151.el8.ppc64le.rpm glibc-langpack-anp-2.28-151.el8.ppc64le.rpm glibc-langpack-ar-2.28-151.el8.ppc64le.rpm glibc-langpack-as-2.28-151.el8.ppc64le.rpm glibc-langpack-ast-2.28-151.el8.ppc64le.rpm glibc-langpack-ayc-2.28-151.el8.ppc64le.rpm glibc-langpack-az-2.28-151.el8.ppc64le.rpm glibc-langpack-be-2.28-151.el8.ppc64le.rpm glibc-langpack-bem-2.28-151.el8.ppc64le.rpm glibc-langpack-ber-2.28-151.el8.ppc64le.rpm glibc-langpack-bg-2.28-151.el8.ppc64le.rpm glibc-langpack-bhb-2.28-151.el8.ppc64le.rpm glibc-langpack-bho-2.28-151.el8.ppc64le.rpm glibc-langpack-bi-2.28-151.el8.ppc64le.rpm glibc-langpack-bn-2.28-151.el8.ppc64le.rpm glibc-langpack-bo-2.28-151.el8.ppc64le.rpm glibc-langpack-br-2.28-151.el8.ppc64le.rpm glibc-langpack-brx-2.28-151.el8.ppc64le.rpm glibc-langpack-bs-2.28-151.el8.ppc64le.rpm glibc-langpack-byn-2.28-151.el8.ppc64le.rpm glibc-langpack-ca-2.28-151.el8.ppc64le.rpm glibc-langpack-ce-2.28-151.el8.ppc64le.rpm glibc-langpack-chr-2.28-151.el8.ppc64le.rpm glibc-langpack-cmn-2.28-151.el8.ppc64le.rpm glibc-langpack-crh-2.28-151.el8.ppc64le.rpm glibc-langpack-cs-2.28-151.el8.ppc64le.rpm glibc-langpack-csb-2.28-151.el8.ppc64le.rpm glibc-langpack-cv-2.28-151.el8.ppc64le.rpm glibc-langpack-cy-2.28-151.el8.ppc64le.rpm glibc-langpack-da-2.28-151.el8.ppc64le.rpm glibc-langpack-de-2.28-151.el8.ppc64le.rpm glibc-langpack-doi-2.28-151.el8.ppc64le.rpm glibc-langpack-dsb-2.28-151.el8.ppc64le.rpm glibc-langpack-dv-2.28-151.el8.ppc64le.rpm glibc-langpack-dz-2.28-151.el8.ppc64le.rpm glibc-langpack-el-2.28-151.el8.ppc64le.rpm glibc-langpack-en-2.28-151.el8.ppc64le.rpm glibc-langpack-eo-2.28-151.el8.ppc64le.rpm glibc-langpack-es-2.28-151.el8.ppc64le.rpm glibc-langpack-et-2.28-151.el8.ppc64le.rpm glibc-langpack-eu-2.28-151.el8.ppc64le.rpm glibc-langpack-fa-2.28-151.el8.ppc64le.rpm glibc-langpack-ff-2.28-151.el8.ppc64le.rpm glibc-langpack-fi-2.28-151.el8.ppc64le.rpm glibc-langpack-fil-2.28-151.el8.ppc64le.rpm glibc-langpack-fo-2.28-151.el8.ppc64le.rpm glibc-langpack-fr-2.28-151.el8.ppc64le.rpm glibc-langpack-fur-2.28-151.el8.ppc64le.rpm glibc-langpack-fy-2.28-151.el8.ppc64le.rpm glibc-langpack-ga-2.28-151.el8.ppc64le.rpm glibc-langpack-gd-2.28-151.el8.ppc64le.rpm glibc-langpack-gez-2.28-151.el8.ppc64le.rpm glibc-langpack-gl-2.28-151.el8.ppc64le.rpm glibc-langpack-gu-2.28-151.el8.ppc64le.rpm glibc-langpack-gv-2.28-151.el8.ppc64le.rpm glibc-langpack-ha-2.28-151.el8.ppc64le.rpm glibc-langpack-hak-2.28-151.el8.ppc64le.rpm glibc-langpack-he-2.28-151.el8.ppc64le.rpm glibc-langpack-hi-2.28-151.el8.ppc64le.rpm glibc-langpack-hif-2.28-151.el8.ppc64le.rpm glibc-langpack-hne-2.28-151.el8.ppc64le.rpm glibc-langpack-hr-2.28-151.el8.ppc64le.rpm glibc-langpack-hsb-2.28-151.el8.ppc64le.rpm glibc-langpack-ht-2.28-151.el8.ppc64le.rpm glibc-langpack-hu-2.28-151.el8.ppc64le.rpm glibc-langpack-hy-2.28-151.el8.ppc64le.rpm glibc-langpack-ia-2.28-151.el8.ppc64le.rpm glibc-langpack-id-2.28-151.el8.ppc64le.rpm glibc-langpack-ig-2.28-151.el8.ppc64le.rpm glibc-langpack-ik-2.28-151.el8.ppc64le.rpm glibc-langpack-is-2.28-151.el8.ppc64le.rpm glibc-langpack-it-2.28-151.el8.ppc64le.rpm glibc-langpack-iu-2.28-151.el8.ppc64le.rpm glibc-langpack-ja-2.28-151.el8.ppc64le.rpm glibc-langpack-ka-2.28-151.el8.ppc64le.rpm glibc-langpack-kab-2.28-151.el8.ppc64le.rpm glibc-langpack-kk-2.28-151.el8.ppc64le.rpm glibc-langpack-kl-2.28-151.el8.ppc64le.rpm glibc-langpack-km-2.28-151.el8.ppc64le.rpm glibc-langpack-kn-2.28-151.el8.ppc64le.rpm glibc-langpack-ko-2.28-151.el8.ppc64le.rpm glibc-langpack-kok-2.28-151.el8.ppc64le.rpm glibc-langpack-ks-2.28-151.el8.ppc64le.rpm glibc-langpack-ku-2.28-151.el8.ppc64le.rpm glibc-langpack-kw-2.28-151.el8.ppc64le.rpm glibc-langpack-ky-2.28-151.el8.ppc64le.rpm glibc-langpack-lb-2.28-151.el8.ppc64le.rpm glibc-langpack-lg-2.28-151.el8.ppc64le.rpm glibc-langpack-li-2.28-151.el8.ppc64le.rpm glibc-langpack-lij-2.28-151.el8.ppc64le.rpm glibc-langpack-ln-2.28-151.el8.ppc64le.rpm glibc-langpack-lo-2.28-151.el8.ppc64le.rpm glibc-langpack-lt-2.28-151.el8.ppc64le.rpm glibc-langpack-lv-2.28-151.el8.ppc64le.rpm glibc-langpack-lzh-2.28-151.el8.ppc64le.rpm glibc-langpack-mag-2.28-151.el8.ppc64le.rpm glibc-langpack-mai-2.28-151.el8.ppc64le.rpm glibc-langpack-mfe-2.28-151.el8.ppc64le.rpm glibc-langpack-mg-2.28-151.el8.ppc64le.rpm glibc-langpack-mhr-2.28-151.el8.ppc64le.rpm glibc-langpack-mi-2.28-151.el8.ppc64le.rpm glibc-langpack-miq-2.28-151.el8.ppc64le.rpm glibc-langpack-mjw-2.28-151.el8.ppc64le.rpm glibc-langpack-mk-2.28-151.el8.ppc64le.rpm glibc-langpack-ml-2.28-151.el8.ppc64le.rpm glibc-langpack-mn-2.28-151.el8.ppc64le.rpm glibc-langpack-mni-2.28-151.el8.ppc64le.rpm glibc-langpack-mr-2.28-151.el8.ppc64le.rpm glibc-langpack-ms-2.28-151.el8.ppc64le.rpm glibc-langpack-mt-2.28-151.el8.ppc64le.rpm glibc-langpack-my-2.28-151.el8.ppc64le.rpm glibc-langpack-nan-2.28-151.el8.ppc64le.rpm glibc-langpack-nb-2.28-151.el8.ppc64le.rpm glibc-langpack-nds-2.28-151.el8.ppc64le.rpm glibc-langpack-ne-2.28-151.el8.ppc64le.rpm glibc-langpack-nhn-2.28-151.el8.ppc64le.rpm glibc-langpack-niu-2.28-151.el8.ppc64le.rpm glibc-langpack-nl-2.28-151.el8.ppc64le.rpm glibc-langpack-nn-2.28-151.el8.ppc64le.rpm glibc-langpack-nr-2.28-151.el8.ppc64le.rpm glibc-langpack-nso-2.28-151.el8.ppc64le.rpm glibc-langpack-oc-2.28-151.el8.ppc64le.rpm glibc-langpack-om-2.28-151.el8.ppc64le.rpm glibc-langpack-or-2.28-151.el8.ppc64le.rpm glibc-langpack-os-2.28-151.el8.ppc64le.rpm glibc-langpack-pa-2.28-151.el8.ppc64le.rpm glibc-langpack-pap-2.28-151.el8.ppc64le.rpm glibc-langpack-pl-2.28-151.el8.ppc64le.rpm glibc-langpack-ps-2.28-151.el8.ppc64le.rpm glibc-langpack-pt-2.28-151.el8.ppc64le.rpm glibc-langpack-quz-2.28-151.el8.ppc64le.rpm glibc-langpack-raj-2.28-151.el8.ppc64le.rpm glibc-langpack-ro-2.28-151.el8.ppc64le.rpm glibc-langpack-ru-2.28-151.el8.ppc64le.rpm glibc-langpack-rw-2.28-151.el8.ppc64le.rpm glibc-langpack-sa-2.28-151.el8.ppc64le.rpm glibc-langpack-sah-2.28-151.el8.ppc64le.rpm glibc-langpack-sat-2.28-151.el8.ppc64le.rpm glibc-langpack-sc-2.28-151.el8.ppc64le.rpm glibc-langpack-sd-2.28-151.el8.ppc64le.rpm glibc-langpack-se-2.28-151.el8.ppc64le.rpm glibc-langpack-sgs-2.28-151.el8.ppc64le.rpm glibc-langpack-shn-2.28-151.el8.ppc64le.rpm glibc-langpack-shs-2.28-151.el8.ppc64le.rpm glibc-langpack-si-2.28-151.el8.ppc64le.rpm glibc-langpack-sid-2.28-151.el8.ppc64le.rpm glibc-langpack-sk-2.28-151.el8.ppc64le.rpm glibc-langpack-sl-2.28-151.el8.ppc64le.rpm glibc-langpack-sm-2.28-151.el8.ppc64le.rpm glibc-langpack-so-2.28-151.el8.ppc64le.rpm glibc-langpack-sq-2.28-151.el8.ppc64le.rpm glibc-langpack-sr-2.28-151.el8.ppc64le.rpm glibc-langpack-ss-2.28-151.el8.ppc64le.rpm glibc-langpack-st-2.28-151.el8.ppc64le.rpm glibc-langpack-sv-2.28-151.el8.ppc64le.rpm glibc-langpack-sw-2.28-151.el8.ppc64le.rpm glibc-langpack-szl-2.28-151.el8.ppc64le.rpm glibc-langpack-ta-2.28-151.el8.ppc64le.rpm glibc-langpack-tcy-2.28-151.el8.ppc64le.rpm glibc-langpack-te-2.28-151.el8.ppc64le.rpm glibc-langpack-tg-2.28-151.el8.ppc64le.rpm glibc-langpack-th-2.28-151.el8.ppc64le.rpm glibc-langpack-the-2.28-151.el8.ppc64le.rpm glibc-langpack-ti-2.28-151.el8.ppc64le.rpm glibc-langpack-tig-2.28-151.el8.ppc64le.rpm glibc-langpack-tk-2.28-151.el8.ppc64le.rpm glibc-langpack-tl-2.28-151.el8.ppc64le.rpm glibc-langpack-tn-2.28-151.el8.ppc64le.rpm glibc-langpack-to-2.28-151.el8.ppc64le.rpm glibc-langpack-tpi-2.28-151.el8.ppc64le.rpm glibc-langpack-tr-2.28-151.el8.ppc64le.rpm glibc-langpack-ts-2.28-151.el8.ppc64le.rpm glibc-langpack-tt-2.28-151.el8.ppc64le.rpm glibc-langpack-ug-2.28-151.el8.ppc64le.rpm glibc-langpack-uk-2.28-151.el8.ppc64le.rpm glibc-langpack-unm-2.28-151.el8.ppc64le.rpm glibc-langpack-ur-2.28-151.el8.ppc64le.rpm glibc-langpack-uz-2.28-151.el8.ppc64le.rpm glibc-langpack-ve-2.28-151.el8.ppc64le.rpm glibc-langpack-vi-2.28-151.el8.ppc64le.rpm glibc-langpack-wa-2.28-151.el8.ppc64le.rpm glibc-langpack-wae-2.28-151.el8.ppc64le.rpm glibc-langpack-wal-2.28-151.el8.ppc64le.rpm glibc-langpack-wo-2.28-151.el8.ppc64le.rpm glibc-langpack-xh-2.28-151.el8.ppc64le.rpm glibc-langpack-yi-2.28-151.el8.ppc64le.rpm glibc-langpack-yo-2.28-151.el8.ppc64le.rpm glibc-langpack-yue-2.28-151.el8.ppc64le.rpm glibc-langpack-yuw-2.28-151.el8.ppc64le.rpm glibc-langpack-zh-2.28-151.el8.ppc64le.rpm glibc-langpack-zu-2.28-151.el8.ppc64le.rpm glibc-locale-source-2.28-151.el8.ppc64le.rpm glibc-minimal-langpack-2.28-151.el8.ppc64le.rpm libnsl-2.28-151.el8.ppc64le.rpm nscd-2.28-151.el8.ppc64le.rpm nss_db-2.28-151.el8.ppc64le.rpm s390x: glibc-2.28-151.el8.s390x.rpm glibc-all-langpacks-2.28-151.el8.s390x.rpm glibc-common-2.28-151.el8.s390x.rpm glibc-debuginfo-2.28-151.el8.s390x.rpm glibc-debuginfo-common-2.28-151.el8.s390x.rpm glibc-devel-2.28-151.el8.s390x.rpm glibc-headers-2.28-151.el8.s390x.rpm glibc-langpack-aa-2.28-151.el8.s390x.rpm glibc-langpack-af-2.28-151.el8.s390x.rpm glibc-langpack-agr-2.28-151.el8.s390x.rpm glibc-langpack-ak-2.28-151.el8.s390x.rpm glibc-langpack-am-2.28-151.el8.s390x.rpm glibc-langpack-an-2.28-151.el8.s390x.rpm glibc-langpack-anp-2.28-151.el8.s390x.rpm glibc-langpack-ar-2.28-151.el8.s390x.rpm glibc-langpack-as-2.28-151.el8.s390x.rpm glibc-langpack-ast-2.28-151.el8.s390x.rpm glibc-langpack-ayc-2.28-151.el8.s390x.rpm glibc-langpack-az-2.28-151.el8.s390x.rpm glibc-langpack-be-2.28-151.el8.s390x.rpm glibc-langpack-bem-2.28-151.el8.s390x.rpm glibc-langpack-ber-2.28-151.el8.s390x.rpm glibc-langpack-bg-2.28-151.el8.s390x.rpm glibc-langpack-bhb-2.28-151.el8.s390x.rpm glibc-langpack-bho-2.28-151.el8.s390x.rpm glibc-langpack-bi-2.28-151.el8.s390x.rpm glibc-langpack-bn-2.28-151.el8.s390x.rpm glibc-langpack-bo-2.28-151.el8.s390x.rpm glibc-langpack-br-2.28-151.el8.s390x.rpm glibc-langpack-brx-2.28-151.el8.s390x.rpm glibc-langpack-bs-2.28-151.el8.s390x.rpm glibc-langpack-byn-2.28-151.el8.s390x.rpm glibc-langpack-ca-2.28-151.el8.s390x.rpm glibc-langpack-ce-2.28-151.el8.s390x.rpm glibc-langpack-chr-2.28-151.el8.s390x.rpm glibc-langpack-cmn-2.28-151.el8.s390x.rpm glibc-langpack-crh-2.28-151.el8.s390x.rpm glibc-langpack-cs-2.28-151.el8.s390x.rpm glibc-langpack-csb-2.28-151.el8.s390x.rpm glibc-langpack-cv-2.28-151.el8.s390x.rpm glibc-langpack-cy-2.28-151.el8.s390x.rpm glibc-langpack-da-2.28-151.el8.s390x.rpm glibc-langpack-de-2.28-151.el8.s390x.rpm glibc-langpack-doi-2.28-151.el8.s390x.rpm glibc-langpack-dsb-2.28-151.el8.s390x.rpm glibc-langpack-dv-2.28-151.el8.s390x.rpm glibc-langpack-dz-2.28-151.el8.s390x.rpm glibc-langpack-el-2.28-151.el8.s390x.rpm glibc-langpack-en-2.28-151.el8.s390x.rpm glibc-langpack-eo-2.28-151.el8.s390x.rpm glibc-langpack-es-2.28-151.el8.s390x.rpm glibc-langpack-et-2.28-151.el8.s390x.rpm glibc-langpack-eu-2.28-151.el8.s390x.rpm glibc-langpack-fa-2.28-151.el8.s390x.rpm glibc-langpack-ff-2.28-151.el8.s390x.rpm glibc-langpack-fi-2.28-151.el8.s390x.rpm glibc-langpack-fil-2.28-151.el8.s390x.rpm glibc-langpack-fo-2.28-151.el8.s390x.rpm glibc-langpack-fr-2.28-151.el8.s390x.rpm glibc-langpack-fur-2.28-151.el8.s390x.rpm glibc-langpack-fy-2.28-151.el8.s390x.rpm glibc-langpack-ga-2.28-151.el8.s390x.rpm glibc-langpack-gd-2.28-151.el8.s390x.rpm glibc-langpack-gez-2.28-151.el8.s390x.rpm glibc-langpack-gl-2.28-151.el8.s390x.rpm glibc-langpack-gu-2.28-151.el8.s390x.rpm glibc-langpack-gv-2.28-151.el8.s390x.rpm glibc-langpack-ha-2.28-151.el8.s390x.rpm glibc-langpack-hak-2.28-151.el8.s390x.rpm glibc-langpack-he-2.28-151.el8.s390x.rpm glibc-langpack-hi-2.28-151.el8.s390x.rpm glibc-langpack-hif-2.28-151.el8.s390x.rpm glibc-langpack-hne-2.28-151.el8.s390x.rpm glibc-langpack-hr-2.28-151.el8.s390x.rpm glibc-langpack-hsb-2.28-151.el8.s390x.rpm glibc-langpack-ht-2.28-151.el8.s390x.rpm glibc-langpack-hu-2.28-151.el8.s390x.rpm glibc-langpack-hy-2.28-151.el8.s390x.rpm glibc-langpack-ia-2.28-151.el8.s390x.rpm glibc-langpack-id-2.28-151.el8.s390x.rpm glibc-langpack-ig-2.28-151.el8.s390x.rpm glibc-langpack-ik-2.28-151.el8.s390x.rpm glibc-langpack-is-2.28-151.el8.s390x.rpm glibc-langpack-it-2.28-151.el8.s390x.rpm glibc-langpack-iu-2.28-151.el8.s390x.rpm glibc-langpack-ja-2.28-151.el8.s390x.rpm glibc-langpack-ka-2.28-151.el8.s390x.rpm glibc-langpack-kab-2.28-151.el8.s390x.rpm glibc-langpack-kk-2.28-151.el8.s390x.rpm glibc-langpack-kl-2.28-151.el8.s390x.rpm glibc-langpack-km-2.28-151.el8.s390x.rpm glibc-langpack-kn-2.28-151.el8.s390x.rpm glibc-langpack-ko-2.28-151.el8.s390x.rpm glibc-langpack-kok-2.28-151.el8.s390x.rpm glibc-langpack-ks-2.28-151.el8.s390x.rpm glibc-langpack-ku-2.28-151.el8.s390x.rpm glibc-langpack-kw-2.28-151.el8.s390x.rpm glibc-langpack-ky-2.28-151.el8.s390x.rpm glibc-langpack-lb-2.28-151.el8.s390x.rpm glibc-langpack-lg-2.28-151.el8.s390x.rpm glibc-langpack-li-2.28-151.el8.s390x.rpm glibc-langpack-lij-2.28-151.el8.s390x.rpm glibc-langpack-ln-2.28-151.el8.s390x.rpm glibc-langpack-lo-2.28-151.el8.s390x.rpm glibc-langpack-lt-2.28-151.el8.s390x.rpm glibc-langpack-lv-2.28-151.el8.s390x.rpm glibc-langpack-lzh-2.28-151.el8.s390x.rpm glibc-langpack-mag-2.28-151.el8.s390x.rpm glibc-langpack-mai-2.28-151.el8.s390x.rpm glibc-langpack-mfe-2.28-151.el8.s390x.rpm glibc-langpack-mg-2.28-151.el8.s390x.rpm glibc-langpack-mhr-2.28-151.el8.s390x.rpm glibc-langpack-mi-2.28-151.el8.s390x.rpm glibc-langpack-miq-2.28-151.el8.s390x.rpm glibc-langpack-mjw-2.28-151.el8.s390x.rpm glibc-langpack-mk-2.28-151.el8.s390x.rpm glibc-langpack-ml-2.28-151.el8.s390x.rpm glibc-langpack-mn-2.28-151.el8.s390x.rpm glibc-langpack-mni-2.28-151.el8.s390x.rpm glibc-langpack-mr-2.28-151.el8.s390x.rpm glibc-langpack-ms-2.28-151.el8.s390x.rpm glibc-langpack-mt-2.28-151.el8.s390x.rpm glibc-langpack-my-2.28-151.el8.s390x.rpm glibc-langpack-nan-2.28-151.el8.s390x.rpm glibc-langpack-nb-2.28-151.el8.s390x.rpm glibc-langpack-nds-2.28-151.el8.s390x.rpm glibc-langpack-ne-2.28-151.el8.s390x.rpm glibc-langpack-nhn-2.28-151.el8.s390x.rpm glibc-langpack-niu-2.28-151.el8.s390x.rpm glibc-langpack-nl-2.28-151.el8.s390x.rpm glibc-langpack-nn-2.28-151.el8.s390x.rpm glibc-langpack-nr-2.28-151.el8.s390x.rpm glibc-langpack-nso-2.28-151.el8.s390x.rpm glibc-langpack-oc-2.28-151.el8.s390x.rpm glibc-langpack-om-2.28-151.el8.s390x.rpm glibc-langpack-or-2.28-151.el8.s390x.rpm glibc-langpack-os-2.28-151.el8.s390x.rpm glibc-langpack-pa-2.28-151.el8.s390x.rpm glibc-langpack-pap-2.28-151.el8.s390x.rpm glibc-langpack-pl-2.28-151.el8.s390x.rpm glibc-langpack-ps-2.28-151.el8.s390x.rpm glibc-langpack-pt-2.28-151.el8.s390x.rpm glibc-langpack-quz-2.28-151.el8.s390x.rpm glibc-langpack-raj-2.28-151.el8.s390x.rpm glibc-langpack-ro-2.28-151.el8.s390x.rpm glibc-langpack-ru-2.28-151.el8.s390x.rpm glibc-langpack-rw-2.28-151.el8.s390x.rpm glibc-langpack-sa-2.28-151.el8.s390x.rpm glibc-langpack-sah-2.28-151.el8.s390x.rpm glibc-langpack-sat-2.28-151.el8.s390x.rpm glibc-langpack-sc-2.28-151.el8.s390x.rpm glibc-langpack-sd-2.28-151.el8.s390x.rpm glibc-langpack-se-2.28-151.el8.s390x.rpm glibc-langpack-sgs-2.28-151.el8.s390x.rpm glibc-langpack-shn-2.28-151.el8.s390x.rpm glibc-langpack-shs-2.28-151.el8.s390x.rpm glibc-langpack-si-2.28-151.el8.s390x.rpm glibc-langpack-sid-2.28-151.el8.s390x.rpm glibc-langpack-sk-2.28-151.el8.s390x.rpm glibc-langpack-sl-2.28-151.el8.s390x.rpm glibc-langpack-sm-2.28-151.el8.s390x.rpm glibc-langpack-so-2.28-151.el8.s390x.rpm glibc-langpack-sq-2.28-151.el8.s390x.rpm glibc-langpack-sr-2.28-151.el8.s390x.rpm glibc-langpack-ss-2.28-151.el8.s390x.rpm glibc-langpack-st-2.28-151.el8.s390x.rpm glibc-langpack-sv-2.28-151.el8.s390x.rpm glibc-langpack-sw-2.28-151.el8.s390x.rpm glibc-langpack-szl-2.28-151.el8.s390x.rpm glibc-langpack-ta-2.28-151.el8.s390x.rpm glibc-langpack-tcy-2.28-151.el8.s390x.rpm glibc-langpack-te-2.28-151.el8.s390x.rpm glibc-langpack-tg-2.28-151.el8.s390x.rpm glibc-langpack-th-2.28-151.el8.s390x.rpm glibc-langpack-the-2.28-151.el8.s390x.rpm glibc-langpack-ti-2.28-151.el8.s390x.rpm glibc-langpack-tig-2.28-151.el8.s390x.rpm glibc-langpack-tk-2.28-151.el8.s390x.rpm glibc-langpack-tl-2.28-151.el8.s390x.rpm glibc-langpack-tn-2.28-151.el8.s390x.rpm glibc-langpack-to-2.28-151.el8.s390x.rpm glibc-langpack-tpi-2.28-151.el8.s390x.rpm glibc-langpack-tr-2.28-151.el8.s390x.rpm glibc-langpack-ts-2.28-151.el8.s390x.rpm glibc-langpack-tt-2.28-151.el8.s390x.rpm glibc-langpack-ug-2.28-151.el8.s390x.rpm glibc-langpack-uk-2.28-151.el8.s390x.rpm glibc-langpack-unm-2.28-151.el8.s390x.rpm glibc-langpack-ur-2.28-151.el8.s390x.rpm glibc-langpack-uz-2.28-151.el8.s390x.rpm glibc-langpack-ve-2.28-151.el8.s390x.rpm glibc-langpack-vi-2.28-151.el8.s390x.rpm glibc-langpack-wa-2.28-151.el8.s390x.rpm glibc-langpack-wae-2.28-151.el8.s390x.rpm glibc-langpack-wal-2.28-151.el8.s390x.rpm glibc-langpack-wo-2.28-151.el8.s390x.rpm glibc-langpack-xh-2.28-151.el8.s390x.rpm glibc-langpack-yi-2.28-151.el8.s390x.rpm glibc-langpack-yo-2.28-151.el8.s390x.rpm glibc-langpack-yue-2.28-151.el8.s390x.rpm glibc-langpack-yuw-2.28-151.el8.s390x.rpm glibc-langpack-zh-2.28-151.el8.s390x.rpm glibc-langpack-zu-2.28-151.el8.s390x.rpm glibc-locale-source-2.28-151.el8.s390x.rpm glibc-minimal-langpack-2.28-151.el8.s390x.rpm libnsl-2.28-151.el8.s390x.rpm nscd-2.28-151.el8.s390x.rpm nss_db-2.28-151.el8.s390x.rpm x86_64: glibc-2.28-151.el8.i686.rpm glibc-2.28-151.el8.x86_64.rpm glibc-all-langpacks-2.28-151.el8.x86_64.rpm glibc-common-2.28-151.el8.x86_64.rpm glibc-debuginfo-2.28-151.el8.i686.rpm glibc-debuginfo-2.28-151.el8.x86_64.rpm glibc-debuginfo-common-2.28-151.el8.i686.rpm glibc-debuginfo-common-2.28-151.el8.x86_64.rpm glibc-devel-2.28-151.el8.i686.rpm glibc-devel-2.28-151.el8.x86_64.rpm glibc-headers-2.28-151.el8.i686.rpm glibc-headers-2.28-151.el8.x86_64.rpm glibc-langpack-aa-2.28-151.el8.x86_64.rpm glibc-langpack-af-2.28-151.el8.x86_64.rpm glibc-langpack-agr-2.28-151.el8.x86_64.rpm glibc-langpack-ak-2.28-151.el8.x86_64.rpm glibc-langpack-am-2.28-151.el8.x86_64.rpm glibc-langpack-an-2.28-151.el8.x86_64.rpm glibc-langpack-anp-2.28-151.el8.x86_64.rpm glibc-langpack-ar-2.28-151.el8.x86_64.rpm glibc-langpack-as-2.28-151.el8.x86_64.rpm glibc-langpack-ast-2.28-151.el8.x86_64.rpm glibc-langpack-ayc-2.28-151.el8.x86_64.rpm glibc-langpack-az-2.28-151.el8.x86_64.rpm glibc-langpack-be-2.28-151.el8.x86_64.rpm glibc-langpack-bem-2.28-151.el8.x86_64.rpm glibc-langpack-ber-2.28-151.el8.x86_64.rpm glibc-langpack-bg-2.28-151.el8.x86_64.rpm glibc-langpack-bhb-2.28-151.el8.x86_64.rpm glibc-langpack-bho-2.28-151.el8.x86_64.rpm glibc-langpack-bi-2.28-151.el8.x86_64.rpm glibc-langpack-bn-2.28-151.el8.x86_64.rpm glibc-langpack-bo-2.28-151.el8.x86_64.rpm glibc-langpack-br-2.28-151.el8.x86_64.rpm glibc-langpack-brx-2.28-151.el8.x86_64.rpm glibc-langpack-bs-2.28-151.el8.x86_64.rpm glibc-langpack-byn-2.28-151.el8.x86_64.rpm glibc-langpack-ca-2.28-151.el8.x86_64.rpm glibc-langpack-ce-2.28-151.el8.x86_64.rpm glibc-langpack-chr-2.28-151.el8.x86_64.rpm glibc-langpack-cmn-2.28-151.el8.x86_64.rpm glibc-langpack-crh-2.28-151.el8.x86_64.rpm glibc-langpack-cs-2.28-151.el8.x86_64.rpm glibc-langpack-csb-2.28-151.el8.x86_64.rpm glibc-langpack-cv-2.28-151.el8.x86_64.rpm glibc-langpack-cy-2.28-151.el8.x86_64.rpm glibc-langpack-da-2.28-151.el8.x86_64.rpm glibc-langpack-de-2.28-151.el8.x86_64.rpm glibc-langpack-doi-2.28-151.el8.x86_64.rpm glibc-langpack-dsb-2.28-151.el8.x86_64.rpm glibc-langpack-dv-2.28-151.el8.x86_64.rpm glibc-langpack-dz-2.28-151.el8.x86_64.rpm glibc-langpack-el-2.28-151.el8.x86_64.rpm glibc-langpack-en-2.28-151.el8.x86_64.rpm glibc-langpack-eo-2.28-151.el8.x86_64.rpm glibc-langpack-es-2.28-151.el8.x86_64.rpm glibc-langpack-et-2.28-151.el8.x86_64.rpm glibc-langpack-eu-2.28-151.el8.x86_64.rpm glibc-langpack-fa-2.28-151.el8.x86_64.rpm glibc-langpack-ff-2.28-151.el8.x86_64.rpm glibc-langpack-fi-2.28-151.el8.x86_64.rpm glibc-langpack-fil-2.28-151.el8.x86_64.rpm glibc-langpack-fo-2.28-151.el8.x86_64.rpm glibc-langpack-fr-2.28-151.el8.x86_64.rpm glibc-langpack-fur-2.28-151.el8.x86_64.rpm glibc-langpack-fy-2.28-151.el8.x86_64.rpm glibc-langpack-ga-2.28-151.el8.x86_64.rpm glibc-langpack-gd-2.28-151.el8.x86_64.rpm glibc-langpack-gez-2.28-151.el8.x86_64.rpm glibc-langpack-gl-2.28-151.el8.x86_64.rpm glibc-langpack-gu-2.28-151.el8.x86_64.rpm glibc-langpack-gv-2.28-151.el8.x86_64.rpm glibc-langpack-ha-2.28-151.el8.x86_64.rpm glibc-langpack-hak-2.28-151.el8.x86_64.rpm glibc-langpack-he-2.28-151.el8.x86_64.rpm glibc-langpack-hi-2.28-151.el8.x86_64.rpm glibc-langpack-hif-2.28-151.el8.x86_64.rpm glibc-langpack-hne-2.28-151.el8.x86_64.rpm glibc-langpack-hr-2.28-151.el8.x86_64.rpm glibc-langpack-hsb-2.28-151.el8.x86_64.rpm glibc-langpack-ht-2.28-151.el8.x86_64.rpm glibc-langpack-hu-2.28-151.el8.x86_64.rpm glibc-langpack-hy-2.28-151.el8.x86_64.rpm glibc-langpack-ia-2.28-151.el8.x86_64.rpm glibc-langpack-id-2.28-151.el8.x86_64.rpm glibc-langpack-ig-2.28-151.el8.x86_64.rpm glibc-langpack-ik-2.28-151.el8.x86_64.rpm glibc-langpack-is-2.28-151.el8.x86_64.rpm glibc-langpack-it-2.28-151.el8.x86_64.rpm glibc-langpack-iu-2.28-151.el8.x86_64.rpm glibc-langpack-ja-2.28-151.el8.x86_64.rpm glibc-langpack-ka-2.28-151.el8.x86_64.rpm glibc-langpack-kab-2.28-151.el8.x86_64.rpm glibc-langpack-kk-2.28-151.el8.x86_64.rpm glibc-langpack-kl-2.28-151.el8.x86_64.rpm glibc-langpack-km-2.28-151.el8.x86_64.rpm glibc-langpack-kn-2.28-151.el8.x86_64.rpm glibc-langpack-ko-2.28-151.el8.x86_64.rpm glibc-langpack-kok-2.28-151.el8.x86_64.rpm glibc-langpack-ks-2.28-151.el8.x86_64.rpm glibc-langpack-ku-2.28-151.el8.x86_64.rpm glibc-langpack-kw-2.28-151.el8.x86_64.rpm glibc-langpack-ky-2.28-151.el8.x86_64.rpm glibc-langpack-lb-2.28-151.el8.x86_64.rpm glibc-langpack-lg-2.28-151.el8.x86_64.rpm glibc-langpack-li-2.28-151.el8.x86_64.rpm glibc-langpack-lij-2.28-151.el8.x86_64.rpm glibc-langpack-ln-2.28-151.el8.x86_64.rpm glibc-langpack-lo-2.28-151.el8.x86_64.rpm glibc-langpack-lt-2.28-151.el8.x86_64.rpm glibc-langpack-lv-2.28-151.el8.x86_64.rpm glibc-langpack-lzh-2.28-151.el8.x86_64.rpm glibc-langpack-mag-2.28-151.el8.x86_64.rpm glibc-langpack-mai-2.28-151.el8.x86_64.rpm glibc-langpack-mfe-2.28-151.el8.x86_64.rpm glibc-langpack-mg-2.28-151.el8.x86_64.rpm glibc-langpack-mhr-2.28-151.el8.x86_64.rpm glibc-langpack-mi-2.28-151.el8.x86_64.rpm glibc-langpack-miq-2.28-151.el8.x86_64.rpm glibc-langpack-mjw-2.28-151.el8.x86_64.rpm glibc-langpack-mk-2.28-151.el8.x86_64.rpm glibc-langpack-ml-2.28-151.el8.x86_64.rpm glibc-langpack-mn-2.28-151.el8.x86_64.rpm glibc-langpack-mni-2.28-151.el8.x86_64.rpm glibc-langpack-mr-2.28-151.el8.x86_64.rpm glibc-langpack-ms-2.28-151.el8.x86_64.rpm glibc-langpack-mt-2.28-151.el8.x86_64.rpm glibc-langpack-my-2.28-151.el8.x86_64.rpm glibc-langpack-nan-2.28-151.el8.x86_64.rpm glibc-langpack-nb-2.28-151.el8.x86_64.rpm glibc-langpack-nds-2.28-151.el8.x86_64.rpm glibc-langpack-ne-2.28-151.el8.x86_64.rpm glibc-langpack-nhn-2.28-151.el8.x86_64.rpm glibc-langpack-niu-2.28-151.el8.x86_64.rpm glibc-langpack-nl-2.28-151.el8.x86_64.rpm glibc-langpack-nn-2.28-151.el8.x86_64.rpm glibc-langpack-nr-2.28-151.el8.x86_64.rpm glibc-langpack-nso-2.28-151.el8.x86_64.rpm glibc-langpack-oc-2.28-151.el8.x86_64.rpm glibc-langpack-om-2.28-151.el8.x86_64.rpm glibc-langpack-or-2.28-151.el8.x86_64.rpm glibc-langpack-os-2.28-151.el8.x86_64.rpm glibc-langpack-pa-2.28-151.el8.x86_64.rpm glibc-langpack-pap-2.28-151.el8.x86_64.rpm glibc-langpack-pl-2.28-151.el8.x86_64.rpm glibc-langpack-ps-2.28-151.el8.x86_64.rpm glibc-langpack-pt-2.28-151.el8.x86_64.rpm glibc-langpack-quz-2.28-151.el8.x86_64.rpm glibc-langpack-raj-2.28-151.el8.x86_64.rpm glibc-langpack-ro-2.28-151.el8.x86_64.rpm glibc-langpack-ru-2.28-151.el8.x86_64.rpm glibc-langpack-rw-2.28-151.el8.x86_64.rpm glibc-langpack-sa-2.28-151.el8.x86_64.rpm glibc-langpack-sah-2.28-151.el8.x86_64.rpm glibc-langpack-sat-2.28-151.el8.x86_64.rpm glibc-langpack-sc-2.28-151.el8.x86_64.rpm glibc-langpack-sd-2.28-151.el8.x86_64.rpm glibc-langpack-se-2.28-151.el8.x86_64.rpm glibc-langpack-sgs-2.28-151.el8.x86_64.rpm glibc-langpack-shn-2.28-151.el8.x86_64.rpm glibc-langpack-shs-2.28-151.el8.x86_64.rpm glibc-langpack-si-2.28-151.el8.x86_64.rpm glibc-langpack-sid-2.28-151.el8.x86_64.rpm glibc-langpack-sk-2.28-151.el8.x86_64.rpm glibc-langpack-sl-2.28-151.el8.x86_64.rpm glibc-langpack-sm-2.28-151.el8.x86_64.rpm glibc-langpack-so-2.28-151.el8.x86_64.rpm glibc-langpack-sq-2.28-151.el8.x86_64.rpm glibc-langpack-sr-2.28-151.el8.x86_64.rpm glibc-langpack-ss-2.28-151.el8.x86_64.rpm glibc-langpack-st-2.28-151.el8.x86_64.rpm glibc-langpack-sv-2.28-151.el8.x86_64.rpm glibc-langpack-sw-2.28-151.el8.x86_64.rpm glibc-langpack-szl-2.28-151.el8.x86_64.rpm glibc-langpack-ta-2.28-151.el8.x86_64.rpm glibc-langpack-tcy-2.28-151.el8.x86_64.rpm glibc-langpack-te-2.28-151.el8.x86_64.rpm glibc-langpack-tg-2.28-151.el8.x86_64.rpm glibc-langpack-th-2.28-151.el8.x86_64.rpm glibc-langpack-the-2.28-151.el8.x86_64.rpm glibc-langpack-ti-2.28-151.el8.x86_64.rpm glibc-langpack-tig-2.28-151.el8.x86_64.rpm glibc-langpack-tk-2.28-151.el8.x86_64.rpm glibc-langpack-tl-2.28-151.el8.x86_64.rpm glibc-langpack-tn-2.28-151.el8.x86_64.rpm glibc-langpack-to-2.28-151.el8.x86_64.rpm glibc-langpack-tpi-2.28-151.el8.x86_64.rpm glibc-langpack-tr-2.28-151.el8.x86_64.rpm glibc-langpack-ts-2.28-151.el8.x86_64.rpm glibc-langpack-tt-2.28-151.el8.x86_64.rpm glibc-langpack-ug-2.28-151.el8.x86_64.rpm glibc-langpack-uk-2.28-151.el8.x86_64.rpm glibc-langpack-unm-2.28-151.el8.x86_64.rpm glibc-langpack-ur-2.28-151.el8.x86_64.rpm glibc-langpack-uz-2.28-151.el8.x86_64.rpm glibc-langpack-ve-2.28-151.el8.x86_64.rpm glibc-langpack-vi-2.28-151.el8.x86_64.rpm glibc-langpack-wa-2.28-151.el8.x86_64.rpm glibc-langpack-wae-2.28-151.el8.x86_64.rpm glibc-langpack-wal-2.28-151.el8.x86_64.rpm glibc-langpack-wo-2.28-151.el8.x86_64.rpm glibc-langpack-xh-2.28-151.el8.x86_64.rpm glibc-langpack-yi-2.28-151.el8.x86_64.rpm glibc-langpack-yo-2.28-151.el8.x86_64.rpm glibc-langpack-yue-2.28-151.el8.x86_64.rpm glibc-langpack-yuw-2.28-151.el8.x86_64.rpm glibc-langpack-zh-2.28-151.el8.x86_64.rpm glibc-langpack-zu-2.28-151.el8.x86_64.rpm glibc-locale-source-2.28-151.el8.x86_64.rpm glibc-minimal-langpack-2.28-151.el8.x86_64.rpm libnsl-2.28-151.el8.i686.rpm libnsl-2.28-151.el8.x86_64.rpm nscd-2.28-151.el8.x86_64.rpm nss_db-2.28-151.el8.i686.rpm nss_db-2.28-151.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v. 8): aarch64: glibc-benchtests-2.28-151.el8.aarch64.rpm glibc-debuginfo-2.28-151.el8.aarch64.rpm glibc-nss-devel-2.28-151.el8.aarch64.rpm glibc-static-2.28-151.el8.aarch64.rpm nss_hesiod-2.28-151.el8.aarch64.rpm ppc64le: glibc-benchtests-2.28-151.el8.ppc64le.rpm glibc-debuginfo-2.28-151.el8.ppc64le.rpm glibc-debuginfo-common-2.28-151.el8.ppc64le.rpm glibc-nss-devel-2.28-151.el8.ppc64le.rpm glibc-static-2.28-151.el8.ppc64le.rpm nss_hesiod-2.28-151.el8.ppc64le.rpm s390x: glibc-benchtests-2.28-151.el8.s390x.rpm glibc-debuginfo-2.28-151.el8.s390x.rpm glibc-debuginfo-common-2.28-151.el8.s390x.rpm glibc-nss-devel-2.28-151.el8.s390x.rpm glibc-static-2.28-151.el8.s390x.rpm nss_hesiod-2.28-151.el8.s390x.rpm x86_64: glibc-benchtests-2.28-151.el8.x86_64.rpm glibc-debuginfo-2.28-151.el8.i686.rpm glibc-debuginfo-2.28-151.el8.x86_64.rpm glibc-debuginfo-common-2.28-151.el8.i686.rpm glibc-debuginfo-common-2.28-151.el8.x86_64.rpm glibc-nss-devel-2.28-151.el8.i686.rpm glibc-nss-devel-2.28-151.el8.x86_64.rpm glibc-static-2.28-151.el8.i686.rpm glibc-static-2.28-151.el8.x86_64.rpm nss_hesiod-2.28-151.el8.i686.rpm nss_hesiod-2.28-151.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-10228 https://access.redhat.com/security/cve/CVE-2019-9169 https://access.redhat.com/security/cve/CVE-2019-25013 https://access.redhat.com/security/cve/CVE-2020-27618 https://access.redhat.com/security/cve/CVE-2021-3326 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/ 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYKPuENzjgjWX9erEAQi9vw//WZ4SvQsaE50S6H2/awuIPpTwqS9G8F1e Rb3LxhoDtMidhwTtLX7GxvPUngmjG9gD9F2ySLYYltNYXGeI4RaRwwgaAJbJuaEG POBR+tUKvTr/2qgNOuvvTkI5VIVSuFHL4szD4DLpntnD4fBVWTrKrSy4ZBmuH8lD 65l2JvjTQgwxqFIIEbZz6quulCLYY7y080tLKJPCIqBTJWsS7VR3/4jo8YGwzls0 u7zMsDcAhx7Y5mFSjZEds+KyT0kYQUW8N7SioeEKwfz3jteEbx7I+vyQUOYy9FZn o13BjgNrfNktX6jV48d9Mj/t1+YGFYRu7GIuct9EjYLs4qE9LIKn8MCxVE3uwT+P o4BlYwuXKZ5xBHBwU5nIElfttpyBynX6JuDXI9uw4On2p2ZWp4sqOwxm2Hpg3mK0 Bl5QR3sf3xIfnK8ZqEfR98H4QlY9bAwnLup2SgAxCiEPxsXlxBLeLRbaDlWBrvL2 6KhUSLKCWNO3qAlDzVsqxbTXdbfVXkTut4bhdJz6tqfSD9fYpfqrMuSTQyKWMFm9 FJ/l7yctRxZKC4D5CMrc+YAe9R/LLzokU83R9NA4NoViASuVXkYP6sBli0U9A8aw FTGqEOMIdVrT7C1C4NHM7dZgnAvjL22CbavMzjdnAySMRQxl5Je+vuK6jiZqTFwQ ouzI0iwzGJs=R8FH -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Bugs fixed (https://bugzilla.redhat.com/): 1897635 - CVE-2020-28362 golang: math/big: panic during recursive division of very large numbers 1918750 - CVE-2021-3114 golang: crypto/elliptic: incorrect operations on the P-224 curve 5. JIRA issues fixed (https://issues.jboss.org/): TRACING-1725 - Elasticsearch operator reports x509 errors communicating with ElasticSearch in OpenShift Service Mesh project 6. Description: Red Hat Advanced Cluster Management for Kubernetes 2.2.4 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_mana gement_for_kubernetes/2.2/html/release_notes/ Security fixes: * redisgraph-tls: redis: integer overflow when configurable limit for maximum supported bulk input size is too big on 32-bit platforms (CVE-2021-21309) * console-header-container: nodejs-netmask: improper input validation of octal input data (CVE-2021-28092) * console-container: nodejs-is-svg: ReDoS via malicious string (CVE-2021-28918) Bug fixes: * RHACM 2.2.4 images (BZ# 1957254) * Enabling observability for OpenShift Container Storage with RHACM 2.2 on OCP 4.7 (BZ#1950832) * ACM Operator should support using the default route TLS (BZ# 1955270) * The scrolling bar for search filter does not work properly (BZ# 1956852) * Limits on Length of MultiClusterObservability Resource Name (BZ# 1959426) * The proxy setup in install-config.yaml is not worked when IPI installing with RHACM (BZ# 1960181) * Unable to make SSH connection to a Bitbucket server (BZ# 1966513) * Observability Thanos store shard crashing - cannot unmarshall DNS message (BZ# 1967890) 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. Bugs fixed (https://bugzilla.redhat.com/): 1932634 - CVE-2021-21309 redis: integer overflow when configurable limit for maximum supported bulk input size is too big on 32-bit platforms 1939103 - CVE-2021-28092 nodejs-is-svg: ReDoS via malicious string 1944827 - CVE-2021-28918 nodejs-netmask: improper input validation of octal input data 1950832 - Enabling observability for OpenShift Container Storage with RHACM 2.2 on OCP 4.7 1952150 - [DDF] It would be great to see all the options available for the bucket configuration and which attributes are mandatory 1954506 - [DDF] Table does not contain data about 20 clusters. Now it's difficult to estimate CPU usage with larger clusters 1954535 - Reinstall Submariner - No endpoints found on one cluster 1955270 - ACM Operator should support using the default route TLS 1956852 - The scrolling bar for search filter does not work properly 1957254 - RHACM 2.2.4 images 1959426 - Limits on Length of MultiClusterObservability Resource Name 1960181 - The proxy setup in install-config.yaml is not worked when IPI installing with RHACM. 1963128 - [DDF] Please rename this to "Amazon Elastic Kubernetes Service" 1966513 - Unable to make SSH connection to a Bitbucket server 1967357 - [DDF] When I clicked on this yaml, I get a HTTP 404 error. 1967890 - Observability Thanos store shard crashing - cannot unmarshal DNS message 5. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: glibc: Multiple vulnerabilities Date: July 06, 2021 Bugs: #764176, #767718, #772425, #792261 ID: 202107-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities in glibc could result in Denial of Service. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-libs/glibc < 2.33-r1 >= 2.33-r1 Description =========== Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact ====== An attacker could cause a possible Denial of Service condition. Workaround ========== There is no known workaround at this time. Resolution ========== All glibc users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/glibc-2.33-r1" References ========== [ 1 ] CVE-2019-25013 https://nvd.nist.gov/vuln/detail/CVE-2019-25013 [ 2 ] CVE-2020-27618 https://nvd.nist.gov/vuln/detail/CVE-2020-27618 [ 3 ] CVE-2021-27645 https://nvd.nist.gov/vuln/detail/CVE-2021-27645 [ 4 ] CVE-2021-3326 https://nvd.nist.gov/vuln/detail/CVE-2021-3326 [ 5 ] CVE-2021-33574 https://nvd.nist.gov/vuln/detail/CVE-2021-33574 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. This advisory contains the container images for Red Hat OpenShift Container Platform 4.7.13. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHSA-2021:2122 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-rel ease-notes.html This update fixes the following bug among others: * Previously, resources for the ClusterOperator were being created early in the update process, which led to update failures when the ClusterOperator had no status condition while Operators were updating. This bug fix changes the timing of when these resources are created. As a result, updates can take place without errors. (BZ#1959238) Security Fix(es): * gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation (CVE-2021-3121) You may download the oc tool and use it to inspect release image metadata as follows: (For x86_64 architecture) $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.13-x86_64 The image digest is sha256:783a2c963f35ccab38e82e6a8c7fa954c3a4551e07d2f43c06098828dd986ed4 (For s390x architecture) $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.13-s390x The image digest is sha256:4cf44e68413acad063203e1ee8982fd01d8b9c1f8643a5b31cd7ff341b3199cd (For ppc64le architecture) $ oc adm release info quay.io/openshift-release-dev/ocp-release:4.7.13-ppc64le The image digest is sha256:d47ce972f87f14f1f3c5d50428d2255d1256dae3f45c938ace88547478643e36 All OpenShift Container Platform 4.7 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster - -between-minor.html#understanding-upgrade-channels_updating-cluster-between - -minor 3. Solution: For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-rel ease-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster - -cli.html 4. Bugs fixed (https://bugzilla.redhat.com/): 1921650 - CVE-2021-3121 gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation 1923268 - [Assisted-4.7] [Staging] Using two both spelling "canceled" "cancelled" 1947216 - [AWS] Missing iam:ListAttachedRolePolicies permission in permissions.go 1953963 - Enable/Disable host operations returns cluster resource with incomplete hosts list 1957749 - ovn-kubernetes pod should have CPU and memory requests set but not limits 1959238 - CVO creating cloud-controller-manager too early causing upgrade failures 1960103 - SR-IOV obliviously reboot the node 1961941 - Local Storage Operator using LocalVolume CR fails to create PV's when backend storage failure is simulated 1962302 - packageserver clusteroperator does not set reason or message for Available condition 1962312 - Deployment considered unhealthy despite being available and at latest generation 1962435 - Public DNS records were not deleted when destroying a cluster which is using byo private hosted zone 1963115 - Test verify /run filesystem contents failing 5

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow command injection by setting a specially crafted network configuration. This vulnerability is the same as CNVD-2020-68652. (DoS) It may be in a state. Shenzhen Qiaoan Technology Co., Ltd. is a professional R&D and manufacturer of surveillance cameras, specializing in the production of Qiaoan surveillance, Qiaoan surveillance cameras, etc. Several webcams of Shenzhen Qiaoan Technology Co., Ltd. have information disclosure vulnerabilities, which can be exploited by attackers to obtain sensitive information

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. binutils Has NULL A pointer dereference vulnerability exists.Denial of service (DoS) It may be put into a state. GNU Binutils (GNU Binary Utilities or binutils) is a set of programming language tool programs developed by the GNU community. The program is primarily designed to handle object files in various formats and provides linkers, assemblers, and other tools for object files and archives. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binutils: Multiple vulnerabilities Date: July 10, 2021 Bugs: #678806, #761957, #764170 ID: 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Binutils, the worst of which could result in a Denial of Service condition. Background ========== The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/binutils < 2.35.2 >= 2.35.2 Description =========== Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binutils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.35.2" References ========== [ 1 ] CVE-2019-9070 https://nvd.nist.gov/vuln/detail/CVE-2019-9070 [ 2 ] CVE-2019-9071 https://nvd.nist.gov/vuln/detail/CVE-2019-9071 [ 3 ] CVE-2019-9072 https://nvd.nist.gov/vuln/detail/CVE-2019-9072 [ 4 ] CVE-2019-9073 https://nvd.nist.gov/vuln/detail/CVE-2019-9073 [ 5 ] CVE-2019-9074 https://nvd.nist.gov/vuln/detail/CVE-2019-9074 [ 6 ] CVE-2019-9075 https://nvd.nist.gov/vuln/detail/CVE-2019-9075 [ 7 ] CVE-2019-9076 https://nvd.nist.gov/vuln/detail/CVE-2019-9076 [ 8 ] CVE-2019-9077 https://nvd.nist.gov/vuln/detail/CVE-2019-9077 [ 9 ] CVE-2020-19599 https://nvd.nist.gov/vuln/detail/CVE-2020-19599 [ 10 ] CVE-2020-35448 https://nvd.nist.gov/vuln/detail/CVE-2020-35448 [ 11 ] CVE-2020-35493 https://nvd.nist.gov/vuln/detail/CVE-2020-35493 [ 12 ] CVE-2020-35494 https://nvd.nist.gov/vuln/detail/CVE-2020-35494 [ 13 ] CVE-2020-35495 https://nvd.nist.gov/vuln/detail/CVE-2020-35495 [ 14 ] CVE-2020-35496 https://nvd.nist.gov/vuln/detail/CVE-2020-35496 [ 15 ] CVE-2020-35507 https://nvd.nist.gov/vuln/detail/CVE-2020-35507 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-24 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5

There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34. binutils Has NULL A pointer dereference vulnerability exists.Denial of service (DoS) It may be put into a state. GNU Binutils (GNU Binary Utilities or binutils) is a set of programming language tool programs developed by the GNU community. The program is primarily designed to handle object files in various formats and provides linkers, assemblers, and other tools for object files and archives. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binutils: Multiple vulnerabilities Date: July 10, 2021 Bugs: #678806, #761957, #764170 ID: 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Binutils, the worst of which could result in a Denial of Service condition. Background ========== The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/binutils < 2.35.2 >= 2.35.2 Description =========== Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binutils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.35.2" References ========== [ 1 ] CVE-2019-9070 https://nvd.nist.gov/vuln/detail/CVE-2019-9070 [ 2 ] CVE-2019-9071 https://nvd.nist.gov/vuln/detail/CVE-2019-9071 [ 3 ] CVE-2019-9072 https://nvd.nist.gov/vuln/detail/CVE-2019-9072 [ 4 ] CVE-2019-9073 https://nvd.nist.gov/vuln/detail/CVE-2019-9073 [ 5 ] CVE-2019-9074 https://nvd.nist.gov/vuln/detail/CVE-2019-9074 [ 6 ] CVE-2019-9075 https://nvd.nist.gov/vuln/detail/CVE-2019-9075 [ 7 ] CVE-2019-9076 https://nvd.nist.gov/vuln/detail/CVE-2019-9076 [ 8 ] CVE-2019-9077 https://nvd.nist.gov/vuln/detail/CVE-2019-9077 [ 9 ] CVE-2020-19599 https://nvd.nist.gov/vuln/detail/CVE-2020-19599 [ 10 ] CVE-2020-35448 https://nvd.nist.gov/vuln/detail/CVE-2020-35448 [ 11 ] CVE-2020-35493 https://nvd.nist.gov/vuln/detail/CVE-2020-35493 [ 12 ] CVE-2020-35494 https://nvd.nist.gov/vuln/detail/CVE-2020-35494 [ 13 ] CVE-2020-35495 https://nvd.nist.gov/vuln/detail/CVE-2020-35495 [ 14 ] CVE-2020-35496 https://nvd.nist.gov/vuln/detail/CVE-2020-35496 [ 15 ] CVE-2020-35507 https://nvd.nist.gov/vuln/detail/CVE-2020-35507 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-24 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34. binutils Has NULL A pointer dereference vulnerability exists.Denial of service (DoS) It may be put into a state. GNU Binutils (GNU Binary Utilities or binutils) is a set of programming language tool programs developed by the GNU community. The program is primarily designed to handle object files in various formats and provides linkers, assemblers, and other tools for object files and archives. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binutils: Multiple vulnerabilities Date: July 10, 2021 Bugs: #678806, #761957, #764170 ID: 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Binutils, the worst of which could result in a Denial of Service condition. Background ========== The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/binutils < 2.35.2 >= 2.35.2 Description =========== Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binutils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.35.2" References ========== [ 1 ] CVE-2019-9070 https://nvd.nist.gov/vuln/detail/CVE-2019-9070 [ 2 ] CVE-2019-9071 https://nvd.nist.gov/vuln/detail/CVE-2019-9071 [ 3 ] CVE-2019-9072 https://nvd.nist.gov/vuln/detail/CVE-2019-9072 [ 4 ] CVE-2019-9073 https://nvd.nist.gov/vuln/detail/CVE-2019-9073 [ 5 ] CVE-2019-9074 https://nvd.nist.gov/vuln/detail/CVE-2019-9074 [ 6 ] CVE-2019-9075 https://nvd.nist.gov/vuln/detail/CVE-2019-9075 [ 7 ] CVE-2019-9076 https://nvd.nist.gov/vuln/detail/CVE-2019-9076 [ 8 ] CVE-2019-9077 https://nvd.nist.gov/vuln/detail/CVE-2019-9077 [ 9 ] CVE-2020-19599 https://nvd.nist.gov/vuln/detail/CVE-2020-19599 [ 10 ] CVE-2020-35448 https://nvd.nist.gov/vuln/detail/CVE-2020-35448 [ 11 ] CVE-2020-35493 https://nvd.nist.gov/vuln/detail/CVE-2020-35493 [ 12 ] CVE-2020-35494 https://nvd.nist.gov/vuln/detail/CVE-2020-35494 [ 13 ] CVE-2020-35495 https://nvd.nist.gov/vuln/detail/CVE-2020-35495 [ 14 ] CVE-2020-35496 https://nvd.nist.gov/vuln/detail/CVE-2020-35496 [ 15 ] CVE-2020-35507 https://nvd.nist.gov/vuln/detail/CVE-2020-35507 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-24 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34. binutils There are input validation vulnerabilities, heap-based buffer overflow vulnerabilities, and out-of-bounds read vulnerabilities.Service operation interruption (DoS) It may be in a state. GNU Binutils (GNU Binary Utilities or binutils) is a set of programming language tool programs developed by the GNU community. The program is primarily designed to handle object files in various formats and provides linkers, assemblers, and other tools for object files and archives. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binutils: Multiple vulnerabilities Date: July 10, 2021 Bugs: #678806, #761957, #764170 ID: 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Binutils, the worst of which could result in a Denial of Service condition. Background ========== The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/binutils < 2.35.2 >= 2.35.2 Description =========== Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binutils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.35.2" References ========== [ 1 ] CVE-2019-9070 https://nvd.nist.gov/vuln/detail/CVE-2019-9070 [ 2 ] CVE-2019-9071 https://nvd.nist.gov/vuln/detail/CVE-2019-9071 [ 3 ] CVE-2019-9072 https://nvd.nist.gov/vuln/detail/CVE-2019-9072 [ 4 ] CVE-2019-9073 https://nvd.nist.gov/vuln/detail/CVE-2019-9073 [ 5 ] CVE-2019-9074 https://nvd.nist.gov/vuln/detail/CVE-2019-9074 [ 6 ] CVE-2019-9075 https://nvd.nist.gov/vuln/detail/CVE-2019-9075 [ 7 ] CVE-2019-9076 https://nvd.nist.gov/vuln/detail/CVE-2019-9076 [ 8 ] CVE-2019-9077 https://nvd.nist.gov/vuln/detail/CVE-2019-9077 [ 9 ] CVE-2020-19599 https://nvd.nist.gov/vuln/detail/CVE-2020-19599 [ 10 ] CVE-2020-35448 https://nvd.nist.gov/vuln/detail/CVE-2020-35448 [ 11 ] CVE-2020-35493 https://nvd.nist.gov/vuln/detail/CVE-2020-35493 [ 12 ] CVE-2020-35494 https://nvd.nist.gov/vuln/detail/CVE-2020-35494 [ 13 ] CVE-2020-35495 https://nvd.nist.gov/vuln/detail/CVE-2020-35495 [ 14 ] CVE-2020-35496 https://nvd.nist.gov/vuln/detail/CVE-2020-35496 [ 15 ] CVE-2020-35507 https://nvd.nist.gov/vuln/detail/CVE-2020-35507 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-24 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34. binutils There is a vulnerability in the use of uninitialized resources.Information is obtained and denial of service (DoS) It may be put into a state. GNU Binutils (GNU Binary Utilities or binutils) is a set of programming language tool programs developed by the GNU community. The program is primarily designed to handle object files in various formats and provides linkers, assemblers, and other tools for object files and archives. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Binutils: Multiple vulnerabilities Date: July 10, 2021 Bugs: #678806, #761957, #764170 ID: 202107-24 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Binutils, the worst of which could result in a Denial of Service condition. Background ========== The GNU Binutils are a collection of tools to create, modify and analyse binary files. Many of the files use BFD, the Binary File Descriptor library, to do low-level manipulation. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-devel/binutils < 2.35.2 >= 2.35.2 Description =========== Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Binutils users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=sys-devel/binutils-2.35.2" References ========== [ 1 ] CVE-2019-9070 https://nvd.nist.gov/vuln/detail/CVE-2019-9070 [ 2 ] CVE-2019-9071 https://nvd.nist.gov/vuln/detail/CVE-2019-9071 [ 3 ] CVE-2019-9072 https://nvd.nist.gov/vuln/detail/CVE-2019-9072 [ 4 ] CVE-2019-9073 https://nvd.nist.gov/vuln/detail/CVE-2019-9073 [ 5 ] CVE-2019-9074 https://nvd.nist.gov/vuln/detail/CVE-2019-9074 [ 6 ] CVE-2019-9075 https://nvd.nist.gov/vuln/detail/CVE-2019-9075 [ 7 ] CVE-2019-9076 https://nvd.nist.gov/vuln/detail/CVE-2019-9076 [ 8 ] CVE-2019-9077 https://nvd.nist.gov/vuln/detail/CVE-2019-9077 [ 9 ] CVE-2020-19599 https://nvd.nist.gov/vuln/detail/CVE-2020-19599 [ 10 ] CVE-2020-35448 https://nvd.nist.gov/vuln/detail/CVE-2020-35448 [ 11 ] CVE-2020-35493 https://nvd.nist.gov/vuln/detail/CVE-2020-35493 [ 12 ] CVE-2020-35494 https://nvd.nist.gov/vuln/detail/CVE-2020-35494 [ 13 ] CVE-2020-35495 https://nvd.nist.gov/vuln/detail/CVE-2020-35495 [ 14 ] CVE-2020-35496 https://nvd.nist.gov/vuln/detail/CVE-2020-35496 [ 15 ] CVE-2020-35507 https://nvd.nist.gov/vuln/detail/CVE-2020-35507 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202107-24 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5

Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not authorized by Dell, can be used by a physically present attacker to reset BIOS passwords and BIOS-managed Hard Disk Drive (HDD) passwords. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to bypass security restrictions for BIOS Setup configuration, HDD access and BIOS pre-boot authentication. Dell BIOS Contains a vulnerability in the password management function.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Dell Client Commercial and Dell Consumer are a series of workstation equipment from Dell in the United States

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites. DELL Dell Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell (DELL). The offering includes Wyse endpoint centralized management, asset tracking and automatic device discovery

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with high privileges could exploit this vulnerability to store malicious HTML or JavaScript code while creating the Enduser. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. The offering includes Wyse endpoint centralized management, asset tracking and automatic device discovery

Dell Wyse Management Suite versions prior to 3.1 contain a stored cross-site scripting vulnerability. A remote authenticated malicious user with low privileges could exploit this vulnerability to store malicious HTML or JavaScript code under the device tag. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. The offering includes Wyse endpoint centralized management, asset tracking and automatic device discovery

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains an out-of-bounds read vulnerability.Information is obtained and denial of service (DoS) It may be put into a state

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product has an open redirect.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Qualcomm Graphics是美国高通（Qualcomm）公司的一个用于处理器上的图形支撑固件. Qualcomm Graphics 存在输入验证错误漏洞，该漏洞源于不正确的检查返回错误而导致的内存损坏。以下产品及版本受到影响：APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096AU, AQT1000, AR8031, AR8035, AR8151, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, PM215, PM3003A, PM4125, PM439, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8909, PM8916, PM8937, PM8940, PM8953, PM8996, PM8998, PMC1000H, PMD9655, PME605, PMI632, PMI8937, PMI8952, PMI8994, PMI8996, PMI8998, PMK7350, PMK8001, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM855AU, PMM8996AU, PMR525, PMR735A, PMR735B, PMW3100, PMX20, PMX24, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1000, QBT1500, QBT2000, QCA4020, QCA6174A, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595AU, QCA6696, QCA8337, QCA9377, QCA9379, QCC1110, QCM2290, QCM4290, QCM6125, QCS2290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QDM2301, QDM2302, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET5100M, QET6100, QET6110, QFE2101, QFE2520, QFE2550, QFE3340, QFE4301, QFE4302, QFE4303, QFE4305, QFE4308, QFE4309, QFE4320, QFE4373FC, QFS2530, QFS2580, QFS2608, QFS2630, QLN1020, QLN1021AQ, QLN1030, QLN1031, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4340, QPA4360, QPA4361, QPA5373, QPA5460, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM2630, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5541, QPM5577, QPM5579, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6325, QPM6375, QPM6582, QPM6585, QPM6621, QPM6670, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSM8250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC800S, QTC800T, QTC801S, QTM525, QTM527, Qualcomm215, RGR7640AU, RSW8577, SA415M, SA515M, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SD 455, SD 636, SD 675, SD 8C, SD 8CX, SD205, SD210, SD429, SD439, SD450, SD460, SD632, SD660, SD662, SD665, SD670, SD675, SD690 5G, SD710, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD820, SD821, SD835, SD845, SD855, SD865 5G, SD888 5G, SDA429W, SDM429W, SDM630, SDM830, SDR051, SDR052, SDR425, SDR660, SDR660G, SDR675, SDR735, SDR735G, SDR8150, SDR8250, SDR845, SDR865, SDW2500, SDW3100, SDX20, SDX20M, SDX24, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM4350, SM6250, SM6250P, SM7250P, SM7350, SMB1350, SMB1351, SMB1354, SMB1355, SMB1357, SMB1358, SMB1360, SMB1380, SMB1381, SMB1390, SMB1394, SMB1395, SMB1396, SMB1398, SMB231, SMB2351, SMR525, SMR526, WCD9326, WCD9335, WCD9340, WCD9341, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3620, WCN3660, WCN3660B, WCN3680, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6856, WGR7640, WSA8810, WSA8815, WSA8830, WSA8835, WTR2955, WTR2965, WTR3905, WTR3925, WTR3950, WTR4905, WTR5975, WTR6955

Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables. plural Qualcomm The product contains a vulnerability related to an error in the calculation of the buffer size.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains a vulnerability related to the use of freed memory and a vulnerability related to race conditions.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Qualcomm Dsp Service是美国高通（Qualcomm）公司的一个满足移动平台对多媒体和调制解调器功能、深层嵌入式处理需求的数字信号处理器. Qualcomm DSP Services 存在资源管理错误漏洞，该漏洞源于重复重新打开设备驱动程序，竞态条件导致Use after free。以下产品及版本受到影响：APQ8009W, APQ8017, APQ8053, AQT1000, AR8031, AR8035, CSR8811, CSRA6620, CSRA6640, FSM10055, FSM10056, IPQ6010, IPQ6018, IPQ6028, IPQ8074A, IPQ8076A, IPQ8174, MSM8909W, MSM8917, MSM8953, PM215, PM3003A, PM4125, PM439, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM855P, PM8909, PM8937, PM8953, PM8998, PMC1000H, PMD9655, PMI632, PMI8937, PMI8952, PMI8998, PMK7350, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM855AU, PMP8074, PMR525, PMR735A, PMR735B, PMW3100, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6175A, QCA6310, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA8072, QCA8075, QCA8081, QCA8337, QCC1110, QCN5021, QCN5022, QCN5024, QCN5052, QCN5054, QCN5124, QCN5154, QCN9000, QCN9022, QCN9024, QCN9074, QCS405, QCS410, QCS610, QDM2301, QDM2302, QDM2305, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET4200AQ, QET5100, QET5100M, QET6100, QET6110, QFE2101, QFE2520, QFE2550, QFE3340, QFE4301, QFE4302, QFE4303, QFE4305, QFE4308, QFE4309, QFE4320, QFE4373FC, QFS2530, QFS2580, QFS2608, QFS2630, QLN1020, QLN1021AQ, QLN1030, QLN1031, QLN1036AQ, QLN4640, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, QPA4340, QPA4360, QPA4361, QPA5373, QPA5461, QPA5580, QPA5581, QPA6560, QPA8673, QPA8675, QPA8686, QPA8801, QPA8802, QPA8803, QPA8821, QPA8842, QPM2630, QPM4621, QPM4630, QPM4640, QPM4641, QPM4650, QPM5541, QPM5577, QPM5579, QPM5620, QPM5621, QPM5641, QPM5657, QPM5658, QPM5670, QPM5677, QPM5679, QPM5870, QPM5875, QPM6325, QPM6375, QPM6582, QPM6585, QPM6621, QPM6670, QPM8820, QPM8830, QPM8870, QPM8895, QSM7250, QSM8250, QSW6310, QSW8573, QSW8574, QTC410S, QTC800H, QTC800S, QTC801S, QTM525, QTM527, Qualcomm215, RSW8577, SA515M, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SD 675, SD 8C, SD 8CX, SD205, SD210, SD429, SD439, SD460, SD632, SD660, SD662, SD665, SD670, SD675, SD690 5G, SD710, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD845, SD855, SD865 5G, SD888 5G, SDA429W, SDR051, SDR052, SDR425, SDR660, SDR660G, SDR675, SDR735, SDR735G, SDR8150, SDR8250, SDR865, SDW3100, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM4350, SM6250, SM6250P, SM7250P, SM7350, SMB1351, SMB1354, SMB1355, SMB1358, SMB1380, SMB1381, SMB1390, SMB1394, SMB1395, SMB1396, SMB1398, SMB2351, SMR525, SMR526, WCD9326, WCD9335, WCD9340, WCD9341, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6856, WGR7640, WSA8810, WSA8815, WSA8830, WSA8835, WTR2955, WTR2965, WTR3925, WTR4905, WTR5975, WTR6955

Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product contains an out-of-bounds read vulnerability.Denial of service (DoS) It may be put into a state

Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking. plural Qualcomm The product is vulnerable to integer overflow.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music. plural Qualcomm The product contains an out-of-bounds read vulnerability.Information is obtained and denial of service (DoS) It may be put into a state