Security Fixes 11.07.140
VMware Horizon
- Updated Horizon Client to version 2203 8.5.0-19586897
Teradici PCoIP Client
- Updated Teradici PCoIP Ultra client to version 22.04.
Chromium
Fixed Chromium browser security issues:
- Updated Chromium browser to version 101.0.4951.64
Firefox
- Updated Mozilla Firefox to version 91.9.0 ESR
- Fixes for mfsa2022-17, also known as
CVE-2022-29914, CVE-2022-29909, CVE-2022-29916,
CVE-2022-29911, CVE-2022-29912, CVE-2022-29917. - Fixes for mfsa2022-14, also known as
CVE-2022-1097, CVE-2022-28281, CVE-2022-1196, CVE-2022-28282,
CVE-2022-28285, CVE-2022-28286, CVE-2022-24713, CVE-2022-28289. - Fixes for mfsa2022-11, also known as
CVE-2022-26383, CVE-2022-26384, CVE-2022-26387,
CVE-2022-26381, CVE-2022-26386.
Base system
Fixed curl security issues:
- Fixed ghostscript security issue CVE-2019-25059.
- Fixed libsdl1.2 security issue CVE-2021-33657.
- Fixed libsepol security issues CVE-2021-36087, CVE-2021-36086, CVE-2021-36085, and CVE-2021-36084.
- Fixed bash security issue CVE-2019-18276.
Fixed zulu8-ca security issues:
- Fixed rsyslog security issue CVE-2022-24903.
Fixed mysql-5.7 security issues:
- Fixed sqlite3 security issue CVE-2021-36690.
- Fixed openssl1.0 security issue CVE-2022-1292.
- Fixed openssl security issue CVE-2022-1292.
- Fixed dbus security issue CVE-2020-35512.
- Fixed nss security issue CVE-2020-25648.
- Fixed dnsmasq security issue CVE-2022-0934.
- Fixed cifs-utils security issues CVE-2022-29869 and CVE-2022-27239.
- Fixed libxml2 security issue CVE-2022-29824.
- Fixed cifs-utils security issues CVE-2022-29869 and CVE-2022-27239.
- Fixed openldap security issue CVE-2022-29155.
- Fixed pcre3 security issues CVE-2020-14155 and CVE-2019-20838.
Fixed tiff security issues:
- Updated Intel microcode to version 20220510.
- Updated AMD microcode to version from 20220408.
- Fixed security issue CVE-2022-21151.
- Fixed sshd security issue CVE-2002-20001 (Denial of Service).
Added new registry key to prevent D(HE)ater CVE-2002-20001 DoS attacks:
- Fixed Nvidia security issues CVE-2022-28181, CVE-2022-28182, CVE-2022-28183, and CVE-2022-28184.