November 2023 - Announce - AlmaLinux List Archives

Resend: AlmaLinux 9.3 Stable now available!
by benny Vasquez 13 Nov '23

13 Nov '23

Sending again due to a problem with our mailing lists. Sorry for those of you who get a duplicate! Hi all! The AlmaLinux OS Foundation is proud to announce the general availability of AlmaLinux OS 9.3 <https://mirrors.almalinux.org/isos.html> codenamed "Shamrock Pampas Cat"! Installation ISOs are available on the mirrors now for all 4 architectures: - Intel/AMD (x86_64) <https://mirrors.almalinux.org/isos/x86_64/9.3.html> - ARM64 (aarch64) <https://mirrors.almalinux.org/isos/aarch64/9.3.html> - IBM PowerPC (ppc64le) <https://mirrors.almalinux.org/isos/ppc64le/9.3.html> - IBM Z (s390x) <https://mirrors.almalinux.org/isos/s390x/9.3.html> Torrents are available as well at: - Intel/AMD (x86_64) <https://repo.almalinux.org/almalinux/9.3/isos/x86_64/AlmaLinux-9.3-x86_64.t…> - ARM64 (aarch64) <https://repo.almalinux.org/almalinux/9.3/isos/aarch64/AlmaLinux-9.3-aarch64…> - IBM PowerPC (ppc64le) <https://repo.almalinux.org/almalinux/9.3/isos/ppc64le/AlmaLinux-9.3-ppc64le…> - IBM Z (s390x) <https://repo.almalinux.org/almalinux/9.3/isos/s390x/AlmaLinux-9.3-s390x.tor…> ISOs, Live Images, Cloud and Containers <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> AlmaLinux also offers a variety of Cloud, Container, and Live Images. The builds for these get kicked off as soon as the public repository is ready. *The following images are expected to be available shortly.* We will post a separate "Images Update" announcement soon, to keep the community informed. - Docker <https://wiki.almalinux.org/containers/docker-images.html#about-almalinux-do…> images including Platform and UBIs alternatives. We provide a wide variety of containers for your use. Please see our Docker Official Image <https://hub.docker.com/_/almalinux> as well as all AlmaLinux images <https://hub.docker.com/u/almalinux>. - LXC/LXD <https://images.linuxcontainers.org/images/almalinux/> - Live Media <https://wiki.almalinux.org/LiveMedia.html> for GNOME, GNOME-mini, KDE, XFCE, MATE and more. - Cloud Images - AWS AMIs <https://wiki.almalinux.org/cloud/AWS.html> for x86_64 and Graviton Instances - Azure <https://wiki.almalinux.org/cloud/Azure.html> Images for in standard and HPC flavors for x86_64 and aarch64 - Google Cloud <https://wiki.almalinux.org/cloud/Google.html> - Generic Cloud/Cloud-init <https://wiki.almalinux.org/cloud/Generic-cloud-on-local.html> for all 4 architectures - Open Nebula <https://wiki.almalinux.org/cloud/OpenNebula.html> for all 4 architectures - Oracle Cloud Infrastructure <https://wiki.almalinux.org/cloud/OCI.html> for x86_64 and aarch64 - Vagrant Boxes <https://app.vagrantup.com/almalinux>: - Libvirt - VirtualBox - Hyper-V - VMWare - Parallels - Raspberry Pi <https://wiki.almalinux.org/documentation/raspberry-pi.html> - Windows Subsystem for Linux <https://wiki.almalinux.org/documentation/wsl.html> Release Notes and More Information <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> AlmaLinux 9.3 aims to improve flexibility and reliability, as well as to enhance security across hybrid environments. This release continues simplifying automation and system management. Web console enhancements simplify management tasks. Additionally, users can configure health check actions for Podman containers and vsock devices in virtual machines. Application Streams updates provide developers with flexibility and customization options without affecting the platform's stability. The 9.3 offers enhanced security and compliance. Additionally, it provides enhanced flexibility, stability, and reliability needed to support hybrid cloud innovation. You can read more about this release by checking out the Release Notes <https://wiki.almalinux.org/release-notes/9.3.html>. Join us on Mastodon! <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> Have you jumped on Mastodon yet? Follow us! @almalinux@fosstodon.org <https://fosstodon.org/@almalinux> Pitch In <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> Join us in the AlmaLinux Community Chat <https://chat.almalinux.org/> to get any assistance you need and help others. You can also post a question on our 9.3 Forum <https://almalinux.discourse.group/c/devel/36-category/36>, on our AlmaLinux Community on Reddit <https://reddit.com/r/almalinux>, or catch us on Twitter <https://twitter.com/almalinux>. Please report any bugs you may see on the Bug Tracker <https://bugs.almalinux.org/>. Enjoy the release and have fun! benny Vasquez Chair, Board of Directors @AlmaLinux OS Foundation *I am sending this message now because it suits me, but I don’t expect that you will read, respond to, or act on it outside of comfortable hours for your time zone.*

1 0

AlmaLinux 9.3 Stable now available!
by benny Vasquez 13 Nov '23

13 Nov '23

Hi all! The AlmaLinux OS Foundation is proud to announce the general availability of AlmaLinux OS 9.3 <https://mirrors.almalinux.org/isos.html> codenamed "Shamrock Pampas Cat"! Installation ISOs are available on the mirrors now for all 4 architectures: - Intel/AMD (x86_64) <https://mirrors.almalinux.org/isos/x86_64/9.3.html> - ARM64 (aarch64) <https://mirrors.almalinux.org/isos/aarch64/9.3.html> - IBM PowerPC (ppc64le) <https://mirrors.almalinux.org/isos/ppc64le/9.3.html> - IBM Z (s390x) <https://mirrors.almalinux.org/isos/s390x/9.3.html> Torrents are available as well at: - Intel/AMD (x86_64) <https://repo.almalinux.org/almalinux/9.3/isos/x86_64/AlmaLinux-9.3-x86_64.t…> - ARM64 (aarch64) <https://repo.almalinux.org/almalinux/9.3/isos/aarch64/AlmaLinux-9.3-aarch64…> - IBM PowerPC (ppc64le) <https://repo.almalinux.org/almalinux/9.3/isos/ppc64le/AlmaLinux-9.3-ppc64le…> - IBM Z (s390x) <https://repo.almalinux.org/almalinux/9.3/isos/s390x/AlmaLinux-9.3-s390x.tor…> ISOs, Live Images, Cloud and Containers <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> AlmaLinux also offers a variety of Cloud, Container, and Live Images. The builds for these get kicked off as soon as the public repository is ready. *The following images are expected to be available shortly.* We will post a separate "Images Update" announcement soon, to keep the community informed. - Docker <https://wiki.almalinux.org/containers/docker-images.html#about-almalinux-do…> images including Platform and UBIs alternatives. We provide a wide variety of containers for your use. Please see our Docker Official Image <https://hub.docker.com/_/almalinux> as well as all AlmaLinux images <https://hub.docker.com/u/almalinux>. - LXC/LXD <https://images.linuxcontainers.org/images/almalinux/> - Live Media <https://wiki.almalinux.org/LiveMedia.html> for GNOME, GNOME-mini, KDE, XFCE, MATE and more. - Cloud Images - AWS AMIs <https://wiki.almalinux.org/cloud/AWS.html> for x86_64 and Graviton Instances - Azure <https://wiki.almalinux.org/cloud/Azure.html> Images for in standard and HPC flavors for x86_64 and aarch64 - Google Cloud <https://wiki.almalinux.org/cloud/Google.html> - Generic Cloud/Cloud-init <https://wiki.almalinux.org/cloud/Generic-cloud-on-local.html> for all 4 architectures - Open Nebula <https://wiki.almalinux.org/cloud/OpenNebula.html> for all 4 architectures - Oracle Cloud Infrastructure <https://wiki.almalinux.org/cloud/OCI.html> for x86_64 and aarch64 - Vagrant Boxes <https://app.vagrantup.com/almalinux>: - Libvirt - VirtualBox - Hyper-V - VMWare - Parallels - Raspberry Pi <https://wiki.almalinux.org/documentation/raspberry-pi.html> - Windows Subsystem for Linux <https://wiki.almalinux.org/documentation/wsl.html> Release Notes and More Information <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> AlmaLinux 9.3 aims to improve flexibility and reliability, as well as to enhance security across hybrid environments. This release continues simplifying automation and system management. Web console enhancements simplify management tasks. Additionally, users can configure health check actions for Podman containers and vsock devices in virtual machines. Application Streams updates provide developers with flexibility and customization options without affecting the platform's stability. The 9.3 offers enhanced security and compliance. Additionally, it provides enhanced flexibility, stability, and reliability needed to support hybrid cloud innovation. You can read more about this release by checking out the Release Notes <https://wiki.almalinux.org/release-notes/9.3.html>. Join us on Mastodon! <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> Have you jumped on Mastodon yet? Follow us! @almalinux@fosstodon.org <https://fosstodon.org/@almalinux> Pitch In <https://github.com/sboldyreva/almalinux.org/blob/9-3-stable/content/blog/20…> Join us in the AlmaLinux Community Chat <https://chat.almalinux.org/> to get any assistance you need and help others. You can also post a question on our 9.3 Forum <https://almalinux.discourse.group/c/devel/36-category/36>, on our AlmaLinux Community on Reddit <https://reddit.com/r/almalinux>, or catch us on Twitter <https://twitter.com/almalinux>. Please report any bugs you may see on the Bug Tracker <https://bugs.almalinux.org/>. Enjoy the release and have fun! benny Vasquez Chair, Board of Directors @AlmaLinux OS Foundation *I am sending this message now because it suits me, but I don’t expect that you will read, respond to, or act on it outside of comfortable hours for your time zone.*

1 0

[Security Advisory] ALSA-2023:6194: thunderbird security update (Important)
by AlmaLinux Errata Notifications 10 Nov '23

10 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Important Release date: 2023-11-10 Summary: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.4.1. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6194.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6267: squid:4 security update (Critical)
by AlmaLinux Errata Notifications 09 Nov '23

09 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Critical Release date: 2023-11-09 Summary: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6267.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6187: firefox security update (Important)
by AlmaLinux Errata Notifications 09 Nov '23

09 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Important Release date: 2023-11-09 Summary: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.4.0 ESR. Security Fix(es): * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721) * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4 (CVE-2023-5730) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488) * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724) * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725) * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6187.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6247: .NET 7.0 security update (Moderate)
by AlmaLinux Errata Notifications 09 Nov '23

09 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Moderate Release date: 2023-11-09 Summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6247.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6245: .NET 6.0 security update (Moderate)
by AlmaLinux Errata Notifications 06 Nov '23

06 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Moderate Release date: 2023-11-03 Summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6245.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6236: binutils security update (Moderate)
by AlmaLinux Errata Notifications 06 Nov '23

06 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 8 Type: Security Severity: Moderate Release date: 2023-11-03 Summary: The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fix(es): * binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/8/ALSA-2023-6236.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6246: .NET 7.0 security update (Moderate)
by AlmaLinux Errata Notifications 03 Nov '23

03 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 9 Type: Security Severity: Moderate Release date: 2023-11-03 Summary: .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13. Security Fix(es): * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/9/ALSA-2023-6246.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0

[Security Advisory] ALSA-2023:6266: squid security update (Critical)
by AlmaLinux Errata Notifications 03 Nov '23

03 Nov '23

Hi, You are receiving an AlmaLinux Security update email because you subscribed to receive errata notifications from AlmaLinux. AlmaLinux: 9 Type: Security Severity: Critical Release date: 2023-11-03 Summary: Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846) * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Full details, updated packages, references, and other related information: https://errata.almalinux.org/9/ALSA-2023-6266.html This message is automatically generated, please don’t reply. For further questions, please, contact us via the AlmaLinux community chat: https://chat.almalinux.org/. Want to change your notification settings? Sign in and manage mailing lists on https://lists.almalinux.org. Kind regards, AlmaLinux Team

1 0