Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in libxmltok.

Several security issues were fixed in Expat.

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

An update that fixes one vulnerability is now available.

* bsc#1228535 * bsc#1230093 Cross-References: * CVE-2024-7264

* bsc#1230093 Cross-References: * CVE-2024-8096

* bsc#1230093 Cross-References: * CVE-2024-8096

* bsc#1225660 * bsc#1227378 * bsc#1227999 * bsc#1228780

Several security issues were fixed in Unbound.

It was discovered that there were a number of issues in Redis, a popular key-value database: * CVE-2023-45145: On startup, Redis began listening on a Unix

* bsc#1229823 Cross-References: * CVE-2024-45230

* bsc#1217070 * bsc#1217952 * bsc#1221400 * bsc#1224323 * bsc#1228553

* bsc#1082555 * bsc#1190317 * bsc#1196516 * bsc#1205462 * bsc#1210629

* bsc#1193629 * bsc#1194111 * bsc#1194765 * bsc#1194869 * bsc#1196261

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1207666 * bsc#1211708 * bsc#1211709 * bsc#1213318 * bsc#1215959

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1227276 * bsc#1227278 * bsc#1227353 Cross-References:

Multiple vulnerabilities have been fixed in the Amanda backup system. CVE-2022-37703

Multiple vulnerabilities have been fixed in bluez library, tools and daemons for using Bluetooth devices. CVE-2021-3658

Integer overflows have been fixed in aom, an AV1 Codec Library. For Debian 11 bullseye, this problem has been fixed in version 1.0.0.errata1-3+deb11u2.

* bsc#1221243 * bsc#1221677 * bsc#1224117 Cross-References:

* bsc#1229821 Cross-References: * CVE-2024-8381 * CVE-2024-8382

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1229013 Cross-References: * CVE-2024-7348

* bsc#1229869 Cross-References: * CVE-2023-45288

* bsc#1217353 Cross-References: * CVE-2023-5752

Sinatra is an open source web framework for Ruby programming language. CVE-2022-29970

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

* bsc#1229823 * bsc#1229824 Cross-References: * CVE-2024-45230

* bsc#1228046 * bsc#1228047 * bsc#1228048 * bsc#1228050 * bsc#1228051

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

Several security issues were fixed in Twisted.

* bsc#1176492 Cross-References: * CVE-2014-10401 * CVE-2014-10402

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.

A vulnerability was discovered in Nokogiri, an open source XML and HTML library for Ruby. An inefficient regular expression was susceptible to excessive backtracking when attempting to detect encoding in HTML documents. This could lead to denial-of-service.

Multiple vulnerabilities were discovered in git, a fast, scalable and distributed revision control system. CVE-2019-1387

* bsc#1224044 Cross-References: * CVE-2024-34397

Path traversal that allowed TZInfo::Timezone.get to load arbitrary files has been fixed in ruby-tzinfo, a Ruby library for working with time zone information.

Fix buffer overrun when giving an offset to Session:receive

Several security issues were fixed in Dovecot.

patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802

Update to upstream 2.1-44. 20240813 Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003605 up to 0x5003707; Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802 up to 0x7002904;

New libpcap packages are available for Slackware 15.0 and -current to fix security issues.

Update to upstream 2.1-44. 20240813 Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision 0x5003605 up to 0x5003707; Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802 up to 0x7002904;

Security fix for CVE-2024-8088

error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145] PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]

error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145] PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558

An update that fixes four vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

* bsc#1227052 Cross-References: * CVE-2024-6104

An update that fixes four vulnerabilities is now available.

Security fix for CVE-2024-8088

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

* bsc#1227353 Cross-References: * CVE-2024-39884

Security fix for CVE-2024-32487 – less with LESSOPEN mishandles n in paths

Several security issues were fixed in the Linux kernel.

* bsc#1228696 * bsc#1228697 * bsc#1228698 Cross-References:

CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email.

CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email.

* bsc#1210619 * bsc#1220145 * bsc#1220537 * bsc#1222685 * bsc#1223059

* bsc#1225202 * bsc#1225302 Cross-References: * CVE-2021-47378

* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202

* bsc#1226463 * bsc#1227138 Cross-References: * CVE-2024-5535

* bsc#1225202 Cross-References: * CVE-2021-47378