Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230366 * bsc#1232542 * bsc#1232622 * bsc#1232624
fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)
Backport fix for CVE-2024-9287 Update to python-3.11.0.
Update to 2.82.2, fixes CVE-2024-52533.
Update to 5.0.2 fix rhbz#2326888
mpg123 a popular MPEG layer 1/2/3 audio player was afected by a vulnerability. An out-of-bounds write flaw was found in mpg123 when handling crafted
Twisted could allow unintended access to information over the network.
TinyGLTF could be made to crash or run programs as your login if it received specially crafted input.
Pygments could be made to crash if it received specially crafted input.
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
USN-7117-1 caused some regression in needrestart.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Multiple vulnerabilities have been fixed in pypy3, an alternative implementation of the Python 3.x language. CVE-2020-10735
* bsc#1233313 Cross-References: * CVE-2024-21820 * CVE-2024-21853
* bsc#1231347 * bsc#1231428 Cross-References: * CVE-2024-28168
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Update to 3.3.7 - CVE-2024-47533
Update to 131.0.6778.85 * High CVE-2024-11395: Type Confusion in V8 * High CVE-2024-11110: Inappropriate implementation in Blink * Medium CVE-2024-11111: Inapp…
Update to 3.3.7 - CVE-2024-47533
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
* bsc#1231879 * bsc#1233355 Cross-References: * CVE-2024-10458
* bsc#1233282 Cross-References: * CVE-2024-52533