ELSA-2022-7950

ELSA-2022-7950 - Image Builder security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2022-11-22

Description

cockpit-composer
[41-1.0.1]
- Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922]

[41-1]
- New upstream release

[40-1]
- New upstream release

[39-1]
- New upstream release

[38-1]
- New upstream release

[37-1]
- New upstream release

[35-1]
- New upstream release

[34-1]
- New upstream release

[33-1]
- Add support for OCI upload target
- Update translations
- Update dependencies

[32-1]
- Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
- Improve user account modal responsiveness
- Update tests
- Update minor NPM dependencies
- Update translation files

[31-1]
- Add new ostree image types
- Improve loading state when waiting for api responses
- Improve notification system
- Improve test stability
- Update NPM dependencies
- Update translations

[30-3]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[30-2]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[30-1]
- Add and update translations
- Update NPM dependencies
- Improve test reliability

[28-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[28-1]
- Use sentence case rather than title case
- Add and update tests
- Update translations from weblate
- Update minor NPM dependencies

[27-1]
- Improve test reliability
- Update translations from weblate
- Update minor NPM dependencies

[26-1]
- Add additional form validation for the Create Image Wizard
- Improve page size dropdown styling
- Update minor NPM dependencies
- Improve code styling
- Improve test reliability

osbuild
[65-1]
- New upstream release

[64-1]
- New upstream release

[63-1]
- New upstream release

[62-1]
- New upstream release

[61-1]
- New upstream release

[60-1]
- New upstream release

[59-1]
- New upstream release

[58-1]
- New upstream release

[57-1]
- New upstream release

[56-1]
- New upstream release

[55-1]
- New upstream release

[54-1]
- New upstream release

[53-1]
- New upstream release

[52-1]
- New upstream release

[50-1]
- New upstream release

[49-1]
- New upstream release

[48-1]
- New upstream release

[47-1]
- New upstream release

[46-1]
- New upstream release

[45-1]
- New upstream release

[44-1]
- New upstream release

[43-1]
- New upstream release

[42-1]
- New upstream release

[39-1]
- New upstream release

[35-1]
- Upstream release 35

[34-1]
- Upstream release 34

[33-1]
- Upstream release 33

[32-1]
- Upstream release 32

[31-1]
- Upstream release 31

[30-1]
- Upstream release 30
- Many new stages for building ostree-based raw images
- Bootiso.mono stage was deprecated and split into smaller stages
- Mounts are now represented as an array in a manifest
- Various bug fixes and improvements to various stages

[29-2]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[29-1]
- Upstream release 29
- Adds host services
- Adds modprobe and logind stage

[27-3]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[27-2]
- Include Fedora 35 runner (upstream commit 337e0f0)

[27-1]
- Upstream release 27
- Various bug fixes related to the new container and installer
stages introdcued in version 25 and 26.

[26-1]
- Upstream release 26
- Support for building boot isos
- Grub stage gained support for saved_entry to fix grub tooling

[25-1]
- Upstream release 25
- First tech preview of the new manifest format. Includes
various new stages and inputs to be able to build ostree
commits contained in a oci archive.

[24-1]
- Upstream release 24
- Turn on dependency generator for everything but runners
- Include new input binaries

[23-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[23-1]
- Upstream release 23
- Do not mangle shebangs for assemblers, runners & stages.

[22-1]
- Upstream release 22

[21-1]
- Upstream reelase 21

osbuild-composer
[62.1-1]
- New upstream release

[62-1]
- New upstream release

[60-1]
- New upstream release

[59-1]
- New upstream release

[58-1]
- New upstream release

[57-1]
- New upstream release

[55-1]
- New upstream release

[54-1]
- New upstream release

[53-1]
- New upstream release

[51-1]
- New upstream release

[46-1]
- New upstream release

[45-1]
- New upstream release

[44-1]
- New upstream release

[43-1]
- New upstream release

[42-1]
- New upstream release

[41-1]
- New upstream release

[40-1]
- New upstream release

[39-1]
- New upstream release

[38-1]
- New upstream release

* Tue Nov 02 2021 lavocatt - 37-1
- New upstream release

[36-1]
- New upstream release

[33-1]
- New upstream release

[32-1]
- New upstream release

[31-1]
- New upstream release

[30-2]
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688

[30-1]
- New upstream release

[29-3]
- Rebuilt for RHEL 9 BETA for openssl 3.0
Related: rhbz#1971065

[29-2]
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

[29-1]
- New upstream release

[28-1]
- New upstream release

[27-1]
- New upstream release

[26-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[26-2]
- Fix the compatibility with a new golang-github-azure-storage-blob 0.12

[26-1]
- New upstream release

[25-1]
- New upstream release

[24-1]
- New upstream release

[23-1]
- New upstream release

[22-1]
- New upstream release

weldr-client
[35.5-4]
- tests: Add osbuild-composer repo file for RHEL 9.1
Related: rhbz#2118831

[35.5-3]
- tests: Update tests for osbuild composer changes
Resolves: rhbz#2118831

Related CVEs

CVE-2022-32189

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	cockpit-composer-41-1.0.1.el9.src.rpm	fbbfc5361d5a3d922affd7dfe5740becf05c28d092f036278d41bda7c3c58ed6	-	ol9_aarch64_appstream
	osbuild-65-1.el9.src.rpm	7f42c1ad712c563032ad531ec8b4e53f8dc06f6d632c3aa0a6c0917e58ff4f73	-	ol9_aarch64_appstream
	osbuild-composer-62.1-1.el9.src.rpm	dbb65982a39b89b9456e8b1c4737f88508aa69690995af0efdd2c68d19ecd0ca	-	ol9_aarch64_appstream
	weldr-client-35.5-4.el9.src.rpm	9bd9835cb4066934d241a5b0a0f108104a780a5b76ca18bbdb9dcb9d9664d0ed	-	ol9_aarch64_appstream
	cockpit-composer-41-1.0.1.el9.noarch.rpm	c505ee21c018db4677e34811d811b94fb77f096746e6c457bc99ee8809becc18	-	ol9_aarch64_appstream
	osbuild-65-1.el9.noarch.rpm	227ba315a76d0826030a6934c26ebb16b0d85bc39cc11f802c7344b4e00444f2	-	ol9_aarch64_appstream
	osbuild-composer-62.1-1.el9.aarch64.rpm	469178cf16e9bb64cf0f31d361aa0a6602d134568e20762bbe348ac80c6fd0f2	-	ol9_aarch64_appstream
	osbuild-composer-core-62.1-1.el9.aarch64.rpm	af68a2e41b3ebef2ae7fde5ddb33e825f181becced4c37fd8dfc2859f325c78b	-	ol9_aarch64_appstream
	osbuild-composer-dnf-json-62.1-1.el9.aarch64.rpm	eb83543bfba824a68b3315797c0212802d658d924632a49790450971963736c5	-	ol9_aarch64_appstream
	osbuild-composer-worker-62.1-1.el9.aarch64.rpm	22ded16da21676a7756c1dfe16a63b772f6ab7915c1f46b3fb6453076a5a79a6	-	ol9_aarch64_appstream
	osbuild-luks2-65-1.el9.noarch.rpm	a71cdcf652d69fabecf70f75afe25d8d54a6c0bab06a9464f6ab6a5fda257fcd	-	ol9_aarch64_appstream
	osbuild-lvm2-65-1.el9.noarch.rpm	0be11ae70d39d1c1acb1758942f23b8174a62336b61db06fe6e25a1473dcf39c	-	ol9_aarch64_appstream
	osbuild-ostree-65-1.el9.noarch.rpm	66681c2ba612cd52662f9eb7c0f1081879b9ac42c2937c182b6e9591bc5345cd	-	ol9_aarch64_appstream
	osbuild-selinux-65-1.el9.noarch.rpm	1b91a19c79caad458ceed23242c7b93e7ff1991fddf6c8ca758383fb9690bac0	-	ol9_aarch64_appstream
	python3-osbuild-65-1.el9.noarch.rpm	a3712061462f6f2b9fba5f866a78a31292147b4bc451803b8b7911ac59e6eb57	-	ol9_aarch64_appstream
	weldr-client-35.5-4.el9.aarch64.rpm	3ef5a1fbb56d449efc32bb7e7d3bcb5890299443d108484985db0cd33e2fd118	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	cockpit-composer-41-1.0.1.el9.src.rpm	fbbfc5361d5a3d922affd7dfe5740becf05c28d092f036278d41bda7c3c58ed6	-	ol9_x86_64_appstream
	osbuild-65-1.el9.src.rpm	7f42c1ad712c563032ad531ec8b4e53f8dc06f6d632c3aa0a6c0917e58ff4f73	-	ol9_x86_64_appstream
	osbuild-composer-62.1-1.el9.src.rpm	dbb65982a39b89b9456e8b1c4737f88508aa69690995af0efdd2c68d19ecd0ca	-	ol9_x86_64_appstream
	weldr-client-35.5-4.el9.src.rpm	9bd9835cb4066934d241a5b0a0f108104a780a5b76ca18bbdb9dcb9d9664d0ed	-	ol9_x86_64_appstream
	cockpit-composer-41-1.0.1.el9.noarch.rpm	c505ee21c018db4677e34811d811b94fb77f096746e6c457bc99ee8809becc18	-	ol9_x86_64_appstream
	osbuild-65-1.el9.noarch.rpm	227ba315a76d0826030a6934c26ebb16b0d85bc39cc11f802c7344b4e00444f2	-	ol9_x86_64_appstream
	osbuild-composer-62.1-1.el9.x86_64.rpm	ee59d07e693533577a8cdf3d6386e2986e28032cef6d98b60bb256be6f71b9a2	-	ol9_x86_64_appstream
	osbuild-composer-core-62.1-1.el9.x86_64.rpm	38236a51975335e101a61dea949cad54b970071918c4d489b3fc122f198b794e	-	ol9_x86_64_appstream
	osbuild-composer-dnf-json-62.1-1.el9.x86_64.rpm	e475897d51884cd5cfeb7b6f5999297371974d79d304597e8b42c2d01100dce5	-	ol9_x86_64_appstream
	osbuild-composer-worker-62.1-1.el9.x86_64.rpm	d257ff317d2b99ef820df5e2f8b94a2f939e88930ae2b2bf4c9808323a98140d	-	ol9_x86_64_appstream
	osbuild-luks2-65-1.el9.noarch.rpm	a71cdcf652d69fabecf70f75afe25d8d54a6c0bab06a9464f6ab6a5fda257fcd	-	ol9_x86_64_appstream
	osbuild-lvm2-65-1.el9.noarch.rpm	0be11ae70d39d1c1acb1758942f23b8174a62336b61db06fe6e25a1473dcf39c	-	ol9_x86_64_appstream
	osbuild-ostree-65-1.el9.noarch.rpm	66681c2ba612cd52662f9eb7c0f1081879b9ac42c2937c182b6e9591bc5345cd	-	ol9_x86_64_appstream
	osbuild-selinux-65-1.el9.noarch.rpm	1b91a19c79caad458ceed23242c7b93e7ff1991fddf6c8ca758383fb9690bac0	-	ol9_x86_64_appstream
	python3-osbuild-65-1.el9.noarch.rpm	a3712061462f6f2b9fba5f866a78a31292147b4bc451803b8b7911ac59e6eb57	-	ol9_x86_64_appstream
	weldr-client-35.5-4.el9.x86_64.rpm	00b259655a4f50529553d4bc3d040c2103cc26cbd7e214391b349cbb3e1db4ef	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team