Mojolicious is a Perl Web Application Framework built around the familiar Model-View-Controller philosophy. It supports a simple single file mode via Mojolicious::Lite, RESTful routes, plugins, Perl-ish templates, session management, signed cookies, a testing framework, internationalization, first

Backport fix for CVE-2024-6239.

Update to 1.26.19, fixes CVE-2024-0444.

Update to 1.26.19, fixes CVE-2024-0444.

A vulnerability was discovered in GNU Emacs, the extensible, customisable, self-documenting display editor. The org-link-expand-abbrev function expanded a %(…) link abbrev even

A vulnerability was discovered in Org-mode, a GNU Emacs major mode for keeping notes, authoring documents, and maintaining to-do lists. The org-link-expand-abbrev function expanded a %(…) link abbrev even

rebuild for rhbz#2292712

Fix CVE-2024-2698 and CVE-2024-3183

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Multiple vulnerabilities havebenn fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images.

* bsc#1216896 * bsc#1216897 * bsc#1216899 * bsc#1216900

It was discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2019-11471) Reza Mirzazade Farkhani discovered that libheif incorrectly handled certain image data. An attacker could possibly use this issue to crash

Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338).

Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image. References:

Update to Emacs 29.4, fixing CVE-2024-39331.

The 6.9.6 stable kernel update contains a number of important fixes across the tree.

Several security issues were fixed in FontForge.

Wget could be made to connect to a different host than expected.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

OpenSSL could be made to consume resources and cause long delays if it processed certain input.

update to 126.0.6478.126 High CVE-2024-6290: Use after free in Dawn High CVE-2024-6291: Use after free in Swiftshader High CVE-2024-6292: Use after free in Dawn High CVE-2024-6293: Use after free in Dawn

Several security issues were fixed in the Linux kernel.

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Multiple vulnerabilities were found in git, a fast, scalable and distributed revision control system. CVE-2019-1387

libheif could be made to crash if it opened a specially crafted file.

* bsc#1065729 * bsc#1141539 * bsc#1174585 * bsc#1181674 * bsc#1187716

* bsc#1224158 Cross-References: * CVE-2017-17507 * CVE-2018-11205

* bsc#1224458 * bsc#1225552 Cross-References: * CVE-2024-4741

* bsc#1225491 Cross-References: * CVE-2024-33871

* bsc#1225491 Cross-References: * CVE-2024-33871

* bsc#1216594 * bsc#1216598 * bsc#1226586 Cross-References:

Hibernate could be made to expose sensitive information.

* bsc#1226134 Cross-References: * CVE-2024-37535

* bsc#1226423 Cross-References: * CVE-2024-38394

* bsc#1226423 Cross-References: * CVE-2024-38394

* bsc#1225971 Cross-References: * CVE-2024-20696

* bsc#1089090 Cross-References: * CVE-2018-9918

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691)