ELSA-2021-4464

ELSA-2021-4464 - dnf security and bug fix update

Type:SECURITY
Impact:MODERATE
Release Date:2021-11-16

Description


dnf
[4.7.0-4.0.1]
-Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
- Replaced upstream bugzilla reporting reference. [Orabug: 32829849]

[4.7.0-4]
- Update translations (RhBug:1961632)

[4.7.0-3]
- Improve signature checking using rpmkeys (RhBug:1967454)

[4.7.0-2]
- Fix covscan issue: dnf/rpm/miscutils.py: fix usage of _()

[4.7.0-1]
- Update to 4.7.0
- New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
- Fix module remove --all when no match spec (RhBug:1904490)
- Make an error message more informative (RhBug:1814831)
- Expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
- Print additional information when verifying GPG key using DNS
- Enhanced detection of plugins removed in transaction (RhBug:1929163)
- Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
- Keep reason when package is removed (RhBug:1921063)
- Improve mechanism for application of security filters (RhBug:1918475)
- [API] Add new method for reset of security filters
- Remove hardcoded logfile permissions (RhBug:1910084)
- Preserve file mode during log rotation (RhBug:1910084)
- Increase loglevel in case of invalid config options
- Prevent traceback (catch ValueError) if pkg is from cmdline
- Check for specific key string when verifing signatures (RhBug:1915990)
- Use rpmkeys binary to verify package signature (RhBug:1915990)
- [doc] Improve description of modular filtering
- [doc] deprecated alias for dnf repoquery --deplist
- [doc] Describe install with just a name and obsoletes (RhBug:1902279)
- [doc] Fix: 'sslcacert' contains path to the file
- [doc] Added proxy ssl configuration options, increase libdnf require
- [doc] Update documentation for module_obsoletes and module_stream_switch
- [doc] Improve documentation for Hotfix repositories
- [doc] fix: 'makecache' command downloads only enabled repositories
- [doc] Add info that maximum parallel downloads is 20
- [doc] installonly_limit documentation follows behavior
- [doc] Add documentation for config option sslverifystatus (RhBug:1814383)
- The noroot plugin no longer exists, remove mention


Related CVEs


CVE-2021-3445

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) dnf-4.7.0-4.0.1.el8.src.rpmb0e0157becc2b92050726ed7393e190502a0f1d8e418a6d0937ef5dd4843d214-ol8_aarch64_baseos_latest
dnf-4.7.0-4.0.1.el8.src.rpmb0e0157becc2b92050726ed7393e190502a0f1d8e418a6d0937ef5dd4843d214-ol8_aarch64_u5_baseos_base
dnf-plugins-core-4.0.21-3.0.1.el8.src.rpm7afb3222c4a0c2c0f70abae5e09f0467955e20227d8af676dc3053bdae0dea31-ol8_aarch64_baseos_latest
dnf-plugins-core-4.0.21-3.0.1.el8.src.rpm7afb3222c4a0c2c0f70abae5e09f0467955e20227d8af676dc3053bdae0dea31-ol8_aarch64_u5_baseos_base
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_aarch64_baseos_latest
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_aarch64_codeready_builder
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_aarch64_u5_baseos_base
dnf-4.7.0-4.0.1.el8.noarch.rpm9209af0962520b8f13f28ceaaad51d9cc5cf53bdf2fc56b440d44158170250d1-ol8_aarch64_baseos_latest
dnf-4.7.0-4.0.1.el8.noarch.rpm9209af0962520b8f13f28ceaaad51d9cc5cf53bdf2fc56b440d44158170250d1-ol8_aarch64_u5_baseos_base
dnf-automatic-4.7.0-4.0.1.el8.noarch.rpm63f7959b4006fb6fbea3396d5b32a16bafbde17b9abd1f46f83006a7c09518dc-ol8_aarch64_baseos_latest
dnf-automatic-4.7.0-4.0.1.el8.noarch.rpm63f7959b4006fb6fbea3396d5b32a16bafbde17b9abd1f46f83006a7c09518dc-ol8_aarch64_u5_baseos_base
dnf-data-4.7.0-4.0.1.el8.noarch.rpmda52555ca0f8d8a7f63e7f4f34491d8c0d23555f26a5a4311f47f89c3f886e20-ol8_aarch64_baseos_latest
dnf-data-4.7.0-4.0.1.el8.noarch.rpmda52555ca0f8d8a7f63e7f4f34491d8c0d23555f26a5a4311f47f89c3f886e20-ol8_aarch64_u5_baseos_base
dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm715e9346f8d2eca47fd7467cd3376b56d472588de13368bda030c685ab5c6d32-ol8_aarch64_baseos_latest
dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm715e9346f8d2eca47fd7467cd3376b56d472588de13368bda030c685ab5c6d32-ol8_aarch64_u5_baseos_base
libdnf-0.63.0-3.0.1.el8.aarch64.rpm8ab0aaeb5343e7f9c322a47bf17cc895ca7ae1a6b835285add2b978e7a56e655-ol8_aarch64_baseos_latest
libdnf-0.63.0-3.0.1.el8.aarch64.rpm8ab0aaeb5343e7f9c322a47bf17cc895ca7ae1a6b835285add2b978e7a56e655-ol8_aarch64_u5_baseos_base
libdnf-devel-0.63.0-3.0.1.el8.aarch64.rpmf5961b47eb973341075096249b5b44b7ab6c36a1d667c906370e84279f969509-ol8_aarch64_codeready_builder
python3-dnf-4.7.0-4.0.1.el8.noarch.rpmde2d6782868b83963c7d40d88f304a2737bf79e374d307c215c33b6bf036b9a1-ol8_aarch64_baseos_latest
python3-dnf-4.7.0-4.0.1.el8.noarch.rpmde2d6782868b83963c7d40d88f304a2737bf79e374d307c215c33b6bf036b9a1-ol8_aarch64_u5_baseos_base
python3-dnf-plugin-post-transaction-actions-4.0.21-3.0.1.el8.noarch.rpmf4b500d4c239795bc8a6e710934ab880542f33b085dd44eb6147187135177917-ol8_aarch64_baseos_latest
python3-dnf-plugin-post-transaction-actions-4.0.21-3.0.1.el8.noarch.rpmf4b500d4c239795bc8a6e710934ab880542f33b085dd44eb6147187135177917-ol8_aarch64_u5_baseos_base
python3-dnf-plugin-versionlock-4.0.21-3.0.1.el8.noarch.rpmc62904388ab82ff41cdd9db5175fcdd47ac8ba6bd482d471fc1db85c25e4ad63-ol8_aarch64_baseos_latest
python3-dnf-plugin-versionlock-4.0.21-3.0.1.el8.noarch.rpmc62904388ab82ff41cdd9db5175fcdd47ac8ba6bd482d471fc1db85c25e4ad63-ol8_aarch64_u5_baseos_base
python3-dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm92bdf9890d9d4594eaf4d4b091471ff0c1f5513cce8ba874a24ea4c42c7afdff-ol8_aarch64_baseos_latest
python3-dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm92bdf9890d9d4594eaf4d4b091471ff0c1f5513cce8ba874a24ea4c42c7afdff-ol8_aarch64_u5_baseos_base
python3-hawkey-0.63.0-3.0.1.el8.aarch64.rpmde75a5219b1b58f5ca8828d809955cf28362c6a76be176956509ba11373a2708-ol8_aarch64_baseos_latest
python3-hawkey-0.63.0-3.0.1.el8.aarch64.rpmde75a5219b1b58f5ca8828d809955cf28362c6a76be176956509ba11373a2708-ol8_aarch64_u5_baseos_base
python3-libdnf-0.63.0-3.0.1.el8.aarch64.rpm68410b9edd554d20edeaee6d761c679b66061c7a3b02252b1a6289b2653b26e1-ol8_aarch64_baseos_latest
python3-libdnf-0.63.0-3.0.1.el8.aarch64.rpm68410b9edd554d20edeaee6d761c679b66061c7a3b02252b1a6289b2653b26e1-ol8_aarch64_u5_baseos_base
yum-4.7.0-4.0.1.el8.noarch.rpm65127154b5ce6e16077a5af399e50e446fd13b810d7e8f55d2b3a8da00147dc3-ol8_aarch64_baseos_latest
yum-4.7.0-4.0.1.el8.noarch.rpm65127154b5ce6e16077a5af399e50e446fd13b810d7e8f55d2b3a8da00147dc3-ol8_aarch64_u5_baseos_base
yum-utils-4.0.21-3.0.1.el8.noarch.rpm7b0981daa54bce9e89d6dc4f7e623a6a342011d545e0c8a69bc8fc2beb619e34-ol8_aarch64_baseos_latest
yum-utils-4.0.21-3.0.1.el8.noarch.rpm7b0981daa54bce9e89d6dc4f7e623a6a342011d545e0c8a69bc8fc2beb619e34-ol8_aarch64_u5_baseos_base
Oracle Linux 8 (x86_64) dnf-4.7.0-4.0.1.el8.src.rpmb0e0157becc2b92050726ed7393e190502a0f1d8e418a6d0937ef5dd4843d214-ol8_x86_64_baseos_latest
dnf-4.7.0-4.0.1.el8.src.rpmb0e0157becc2b92050726ed7393e190502a0f1d8e418a6d0937ef5dd4843d214-ol8_x86_64_u5_baseos_base
dnf-plugins-core-4.0.21-3.0.1.el8.src.rpm7afb3222c4a0c2c0f70abae5e09f0467955e20227d8af676dc3053bdae0dea31-ol8_x86_64_baseos_latest
dnf-plugins-core-4.0.21-3.0.1.el8.src.rpm7afb3222c4a0c2c0f70abae5e09f0467955e20227d8af676dc3053bdae0dea31-ol8_x86_64_u5_baseos_base
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_x86_64_baseos_latest
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_x86_64_codeready_builder
libdnf-0.63.0-3.0.1.el8.src.rpm56c4c34232457506db15aac6c0488a1f6406747187ae3175e00b7caaf47b6f8e-ol8_x86_64_u5_baseos_base
dnf-4.7.0-4.0.1.el8.noarch.rpm9209af0962520b8f13f28ceaaad51d9cc5cf53bdf2fc56b440d44158170250d1-ol8_x86_64_baseos_latest
dnf-4.7.0-4.0.1.el8.noarch.rpm9209af0962520b8f13f28ceaaad51d9cc5cf53bdf2fc56b440d44158170250d1-ol8_x86_64_u5_baseos_base
dnf-automatic-4.7.0-4.0.1.el8.noarch.rpm63f7959b4006fb6fbea3396d5b32a16bafbde17b9abd1f46f83006a7c09518dc-ol8_x86_64_baseos_latest
dnf-automatic-4.7.0-4.0.1.el8.noarch.rpm63f7959b4006fb6fbea3396d5b32a16bafbde17b9abd1f46f83006a7c09518dc-ol8_x86_64_u5_baseos_base
dnf-data-4.7.0-4.0.1.el8.noarch.rpmda52555ca0f8d8a7f63e7f4f34491d8c0d23555f26a5a4311f47f89c3f886e20-ol8_x86_64_baseos_latest
dnf-data-4.7.0-4.0.1.el8.noarch.rpmda52555ca0f8d8a7f63e7f4f34491d8c0d23555f26a5a4311f47f89c3f886e20-ol8_x86_64_u5_baseos_base
dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm715e9346f8d2eca47fd7467cd3376b56d472588de13368bda030c685ab5c6d32-ol8_x86_64_baseos_latest
dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm715e9346f8d2eca47fd7467cd3376b56d472588de13368bda030c685ab5c6d32-ol8_x86_64_u5_baseos_base
libdnf-0.63.0-3.0.1.el8.i686.rpm2748129e9935f6dc7c76cb4b78a279c218a1503b11530398747c41f2c4181c8f-ol8_x86_64_baseos_latest
libdnf-0.63.0-3.0.1.el8.i686.rpm2748129e9935f6dc7c76cb4b78a279c218a1503b11530398747c41f2c4181c8f-ol8_x86_64_u5_baseos_base
libdnf-0.63.0-3.0.1.el8.x86_64.rpm35e22157a15f396884d65c80af81e3fe5571df7986f9fcd1a501c5ee4d02c0fc-ol8_x86_64_baseos_latest
libdnf-0.63.0-3.0.1.el8.x86_64.rpm35e22157a15f396884d65c80af81e3fe5571df7986f9fcd1a501c5ee4d02c0fc-ol8_x86_64_u5_baseos_base
libdnf-devel-0.63.0-3.0.1.el8.i686.rpm0eea492e0c32caa5be35bdd7c2bca54b425c366f276d15d96d6ea7cb4366b046-ol8_x86_64_codeready_builder
libdnf-devel-0.63.0-3.0.1.el8.x86_64.rpm57ebd1b566ad03bdfc0c6b26292c3a9b54b102da8fabe47c02804500331c1501-ol8_x86_64_codeready_builder
python3-dnf-4.7.0-4.0.1.el8.noarch.rpmde2d6782868b83963c7d40d88f304a2737bf79e374d307c215c33b6bf036b9a1-ol8_x86_64_baseos_latest
python3-dnf-4.7.0-4.0.1.el8.noarch.rpmde2d6782868b83963c7d40d88f304a2737bf79e374d307c215c33b6bf036b9a1-ol8_x86_64_u5_baseos_base
python3-dnf-plugin-post-transaction-actions-4.0.21-3.0.1.el8.noarch.rpmf4b500d4c239795bc8a6e710934ab880542f33b085dd44eb6147187135177917-ol8_x86_64_baseos_latest
python3-dnf-plugin-post-transaction-actions-4.0.21-3.0.1.el8.noarch.rpmf4b500d4c239795bc8a6e710934ab880542f33b085dd44eb6147187135177917-ol8_x86_64_u5_baseos_base
python3-dnf-plugin-versionlock-4.0.21-3.0.1.el8.noarch.rpmc62904388ab82ff41cdd9db5175fcdd47ac8ba6bd482d471fc1db85c25e4ad63-ol8_x86_64_baseos_latest
python3-dnf-plugin-versionlock-4.0.21-3.0.1.el8.noarch.rpmc62904388ab82ff41cdd9db5175fcdd47ac8ba6bd482d471fc1db85c25e4ad63-ol8_x86_64_u5_baseos_base
python3-dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm92bdf9890d9d4594eaf4d4b091471ff0c1f5513cce8ba874a24ea4c42c7afdff-ol8_x86_64_baseos_latest
python3-dnf-plugins-core-4.0.21-3.0.1.el8.noarch.rpm92bdf9890d9d4594eaf4d4b091471ff0c1f5513cce8ba874a24ea4c42c7afdff-ol8_x86_64_u5_baseos_base
python3-hawkey-0.63.0-3.0.1.el8.x86_64.rpmac27aad6430e586a45fd1491ed3adbfca776a61717dd84c273fc84abb2db282e-ol8_x86_64_baseos_latest
python3-hawkey-0.63.0-3.0.1.el8.x86_64.rpmac27aad6430e586a45fd1491ed3adbfca776a61717dd84c273fc84abb2db282e-ol8_x86_64_u5_baseos_base
python3-libdnf-0.63.0-3.0.1.el8.x86_64.rpm0483c60f3af8f002824a664cdefe98f076a0ebdcb75e8e852fdb3ff8da7025bd-ol8_x86_64_baseos_latest
python3-libdnf-0.63.0-3.0.1.el8.x86_64.rpm0483c60f3af8f002824a664cdefe98f076a0ebdcb75e8e852fdb3ff8da7025bd-ol8_x86_64_u5_baseos_base
yum-4.7.0-4.0.1.el8.noarch.rpm65127154b5ce6e16077a5af399e50e446fd13b810d7e8f55d2b3a8da00147dc3-ol8_x86_64_baseos_latest
yum-4.7.0-4.0.1.el8.noarch.rpm65127154b5ce6e16077a5af399e50e446fd13b810d7e8f55d2b3a8da00147dc3-ol8_x86_64_u5_baseos_base
yum-utils-4.0.21-3.0.1.el8.noarch.rpm7b0981daa54bce9e89d6dc4f7e623a6a342011d545e0c8a69bc8fc2beb619e34-ol8_x86_64_baseos_latest
yum-utils-4.0.21-3.0.1.el8.noarch.rpm7b0981daa54bce9e89d6dc4f7e623a6a342011d545e0c8a69bc8fc2beb619e34-ol8_x86_64_u5_baseos_base



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete