Rebase / Update to 115.3.1 ; https://www.thunderbird.net/en- US/thunderbird/115.0/whatsnew/ ; https://support.mozilla.org/en- US/kb/thunderbird-115-supernova-faq ; https://www.thunderbird.net/en- US/thunderbird/115.2.3/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/115.3.0/releasenotes/ ; https://www.thunderbird.net/en-
Archive for October, 2023
Downstream fixes for CVE-2021-40266 CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-40263
Debian: DSA-5519-1: grub2 security update
Maxim Suhanov discovered multiple vulnerabilities in GURB2’s code to handle NTFS filesystems, which may result in a Secure Boot bypass. For the oldstable distribution (bullseye), these problems have been fixed
Ubuntu 6416-2: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
RedHat: RHSA-2023-5485:01 Important: Red Hat JBoss Enterprise Application
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
RedHat: RHSA-2023-5486:01 Important: Red Hat JBoss Enterprise Application
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
RedHat: RHSA-2023-5491:01 Moderate: Red Hat AMQ Broker 7.11.2 release and
Red Hat AMQ Broker 7.11.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
RedHat: RHSA-2023-5476:01 Important: glibc security update
An update for glibc is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
RedHat: RHSA-2023-5479:01 Important: Release of OpenShift Serverless Client
Red Hat OpenShift Serverless 1.30.1 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
RedHat: RHSA-2023-5480:01 Important: Release of OpenShift Serverless Logic
Release of OpenShift Serverless Operator 1.30.1 and OpenShift Serverless Logic 1.30.0 SP1 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Debian: DSA-5518-1: libvpx security update
It was discovered that missing input sanitising in the encoding support in libvpx, a multimedia library for the VP8 and VP9 video codecs, may result in denial of service.
Debian: DSA-5517-1: libx11 security update
Multiple security vulnerabilities were discovered in libx11, the X11 client-side library, which may result in denial of service or the execution of arbitrary code.
Debian: DSA-5516-1: libxpm security update
Multiple security vulnerabilities were discovered in libxpm, the X11 pixmap library, which may result in denial of service or the execution of arbitrary code.
Ubuntu 6396-2: Linux kernel (KVM) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6419-1: jQuery UI vulnerabilities
Several security issues were fixed in jQuery UI.
Ubuntu 6417-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6416-1: Linux kernel vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 6415-1: Linux kernel (OEM) vulnerabilities
Several security issues were fixed in the Linux kernel.
Debian: DSA-5515-1: chromium security update
A security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Debian: DSA-5514-1: glibc security update
The Qualys Research Labs discovered a buffer overflow in the dynamic loader’s processing of the GLIBC_TUNABLES environment variable. An attacker can exploit this flaw for privilege escalation.
WordPress 6.4 Beta 2 is now ready for testing! This version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, it is recommended you evaluate Beta 2 on a test server and site.
Debian: DSA-5513-1: thunderbird security update
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the
Debian: DSA-5512-1: exim4 security update
Several vulnerabilities were discovered in Exim, a mail transport agent, which could result in remote code execution if the EXTERNAL or SPA/NTLM authenticators are used.
WP Briefing: Episode 63: A WordPress 6.4 Sneak Peek
Join WordPress Executive Director, Josepha Haden Chomphosy, as she offers an exclusive preview of the upcoming WordPress 6.4 release, accompanied by special guest Sarah Norris, one of the Editor Tech leads for this release. Don’t miss this opportunity for an insider’s look!
Debian: DSA-5511-1: mosquitto security update
Several security vulnerabilities have been discovered in mosquitto, a MQTT compatible message broker, which may be abused for a denial of service attack. CVE-2021-34434