A symlink attack with emergency file saving has been fixed in the text editor nano. For Debian 10 buster, this problem has been fixed in version

* bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854

* bsc#1225551 Cross-References: * CVE-2024-4741

* bsc#1225551 Cross-References: * CVE-2024-4741

* bsc#1222857 * bsc#1222858 * bsc#1226073 Cross-References:

Multiple security issues were discovered in Thunderbird, which could result inthe execution of arbitrary code. For the oldstable distribution (bullseye), these problems have been fixed

Security fix for CVE-2024-3049

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink. (CVE-2024-5742)

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691)

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

sendmail allowed SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports

A vulnerability was discovered in Atril, a simple document viewer designed for the MATE desktop environment. CVE-2023-52076

Unauthorized local user access to the session manager has been fixed in the Plasma Workspace component of the KDE Plasma desktop environment. For Debian 10 buster, this problem has been fixed in version

* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786

* bsc#1226020 Cross-References: * CVE-2024-5171

update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Dawn High CVE-2024-5833: Type Confusion in V8

Security fix for CVE-2024-34055

update to 126.0.6478.55 High CVE-2024-5830: Type Confusion in V8 High CVE-2024-5831: Use after free in Dawn High CVE-2024-5832: Use after free in Dawn High CVE-2024-5833: Type Confusion in V8

Security fix for CVE-2024-34055

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

libndp could be made to crash or run programs if it received specially crafted network traffic.

* bsc#1223356 Cross-References: * CVE-2024-0090 * CVE-2024-0091

* bsc#1219273 Cross-References: * CVE-2023-27534

* bsc#1065729 * bsc#1141539 * bsc#1174585 * bsc#1181674 * bsc#1187716

* bsc#1225365 Cross-References: * CVE-2024-35235

* bsc#1223179 * bsc#1225365 Cross-References: * CVE-2024-35235

Several security issues were fixed in the Linux kernel.

* bsc#1223375 Cross-References: * CVE-2024-4141

* bsc#1224262 Cross-References: * CVE-2024-26306

* bsc#1219823 * bsc#1219826 * bsc#1219851 * bsc#1219852 * bsc#1219854

* bsc#1065729 * bsc#1101816 * bsc#1141539 * bsc#1181674 * bsc#1185902

* bsc#1218501 Cross-References: * CVE-2023-50711

An update that fixes 16 vulnerabilities is now available.

* bsc#1225417 Cross-References: * CVE-2024-33427

* bsc#1222584 * bsc#1223849 Cross-References: * CVE-2024-4418

* bsc#1221401 * bsc#1222330 * bsc#1222332 Cross-References:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

* bsc#1218424 * bsc#1225973 * bsc#1225974 Cross-References:

* bsc#1212475 * bsc#1225973 * bsc#1225974 Cross-References:

* bsc#1224788 Cross-References: * CVE-2024-35195

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

USN-6567-1 introduced a regression in QEMU.

Update to upstream 1.3.2, including fix for CVE-2024-3727

Several security issues were fixed in OpenJDK 21.

Several security issues were fixed in OpenJDK 17.

Several security issues were fixed in OpenJDK 11.

Several security issues were fixed in OpenJDK 8.

* bsc#1225070 Cross-References: * CVE-2024-36039

Fix CVE-2024-36048

This is the May 2024 release for .NET 8. This is a security update for .NET 8. Release notes: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.5/8.0.5.md

Qt 5.15.14 bugfix update. Fix CVE-2024-36048

Qt 5.15.14 bugfix update. Fix CVE-2024-36048

Qt 5.15.14 bugfix update. Fix CVE-2024-36048

* bsc#1217405 Cross-References: * CVE-2023-22084

* bsc#1202031 * bsc#1202033 * bsc#1203643 * bsc#1219823 * bsc#1219826

An update that fixes one vulnerability is now available.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

* bsc#1225417 Cross-References: * CVE-2024-33427

* bsc#1212233 Cross-References: * CVE-2023-3164

* bsc#1224806 Cross-References: * CVE-2024-4453

* bsc#1219823 * bsc#1219826 * bsc#1219851 Cross-References:

* bsc#1221940 * bsc#1223423 * bsc#1223424 * bsc#1223425

fix CVE-2023-36308