====== Updating System Modules and Components in VEOS 8.8 ======

===== Updated Modules =====

  * Python: updated from version 3.6 to 3.9.
  * Nginx: updated from version 1.16.1 to 1.20.1.
  * Node.js: updated from version 14.x to 18.x.

===== Updated Components =====

  * PHP: updated from version 7.2.24 to 7.2.34.
  * Ruby: updated from version 2.5.9 to 3.1.2.
  * MariaDB: updated from version 10.3 to 10.5.
  * LLVM: updated from version 14.0.6 to 16.0.6.

===== Performance and Debugging Tools =====

  * NetworkManager: updated to version 1.40.16-4.el8_8.

===== Security Updates =====
  * Kernel Update: 
    * The kernel has been updated from version 4.18.0-425.19.2 to 4.18.0-477.13.1.
    * Vulnerabilities in nf_tables and other netfilter components have been addressed (CVE-2023-32233, CVE-2023-0386).
    * Enhanced buffer overflow protection in NFSv2 and NFSv3 (CVE-2022-43945).
    * Strengthened data integrity checks in crypto: jitter and crypto: hmac for FIPS mode.
    * Updated kernel configuration parameters to prevent privilege escalation and data leaks.
  * Libreswan:
    * Fixed an issue in handling IKEv1 packets (aggressive mode) to prevent potential vulnerabilities.
  * SELinux: 
    * Updated from version 3.14.3-117 to 3.14.3-139. 
    * Fixed file handling in the opencryptoki cryptographic library located in /dev/shm.
    * Allowed httpd access to tokens in /dev/shm.
    * Updated policies for system_cronjob_t and rpm_script_t.

===== Package Changes =====

==== Added ====

  * efitools: Tools for working with EFI.
  * perl-IO-Tty: Dependencies for working with TTY.
  * perl-YAML-LibYAML: YAML support for Perl.
  * sbsigntools: Tools for signing Secure Boot.
  * perl-IO-stringy: Tools for working with text data as file descriptors.
  * perl-IPC-Run: Process and stream management (stdin, stdout, stderr) in Perl.

==== Removed ====
  * dvd+rw-tools: Replaced with more modern utilities.
  * perl-Digest-SHA1: Replaced with modern cryptographic libraries.
  * zabbix: Deprecated monitoring package.
  * guava20: Java library with extended collections, thread utilities, caching, and string processing.