Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability has been discovered in HarfBuzz, which can lead to a denial of service.
Exim could be made to allow response injection if it received a specially crafted response.
Updated to latest upstream (128.0)
* bsc#1217592 Cross-References: * CVE-2023-49083
* bsc#1215823 * bsc#1215831 Cross-References: * CVE-2021-26345
* bsc#1217653 Cross-References: * CVE-2023-45539
* bsc#1217969 Cross-References: * CVE-2023-39804
* bsc#1198146 Cross-References: * CVE-2022-1210
* bsc#1218251 Cross-References: * CVE-2022-4603
OpenSSH could be made to expose timing information over the network.
* bsc#1223414 Cross-References: * CVE-2024-3596
* bsc#1119113 * bsc#1171988 * bsc#1191958 * bsc#1195065 * bsc#1195254
* bsc#1223414 Cross-References: * CVE-2024-3596
* bsc#1156395 * bsc#1171988 * bsc#1176447 * bsc#1176774 * bsc#1181147
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1210619 * bsc#1218487 * bsc#1220145 * bsc#1220537 * bsc#1222685
* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1223059 * bsc#1223363
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225211
* bsc#1220145 * bsc#1223363 * bsc#1223683 * bsc#1225211
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading pe…
Tomcat could allow unintended access to network services.
This update fixes CVE-2024-24791