Important: mingw-freetype and spice-client-win security update
Important: mingw-freetype and spice-client-win security update
Important: kernel security update
Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. <br>Security Fix(es):<br><li> jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. Security Fix(es): jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. <br>Security Fix(es):<br><li> jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. <br>Security Fix(es):<br><li> jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.Security Fix(es): glib: buffer overflow in setconnectmsg() (CVE-2024-52533) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Moderate: java-17-openjdk security update for RHEL 9.0 and 9.2
Moderate: Security and bug fixes for NetworkManager
Moderate: Bug fix of NetworkManager
Important: ruby security update
Low: NetworkManager security update
Moderate: xorg-x11-server-Xwayland security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.<br>Security Fix(es):<br><li> freerdp: Integer Overflow leading to Heap Overflow in freerdpbitmapplanarcontextreset (CVE-2024-22211)</li> <li> freerdp: out-of-bounds read in ncrushdecompress (CVE-2024-32459)</li> <li> freerdp: OutOfBound Read in interleaveddecompress (CVE-2024-32460)</li> <li> freerdp: Integer overflow & OutOfBound Write in cleardecompressresidualdata (CVE-2024-32039)</li> <li> freerdp: integer underflow in nscrledecode (CVE-2024-32040)</li> <li> freerdp: OutOfBound Read in zgfxdecompresssegment (CVE-2024-32041)</li> <li> freerdp: OutOfBound Read in planarskipplanerle (CVE-2024-32458)</li> <li> freerdp: out-of-bounds read (CVE-2024-32662)</li> <li> FreeRDP: ExtractRunLengthRegular out of bound read (CVE-2024-32658)</li> <li> freerdp: zgfxdecompress out of memory (CVE-2024-32660)</li> <li> freerdp: freerdpimagecopy out of bound read (CVE-2024-32659)</li> <li> freerdp: rdpwritelogoninfov1 NULL access (CVE-2024-32661)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.Security Fix(es): glib2: Signal subscription vulnerabilities (CVE-2024-34397) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. Security Fix(es): fontforge: command injection via crafted archives or compressed files (CVE-2024-25082) fontforge: command injection via crafted filenames (CVE-2024-25081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
Moderate: OpenIPMI security update
Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.<br>Security Fix(es):<br><li> flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Important: postgresql security update
Important: python3.12-setuptools security update
Important: python3.12-setuptools security update
Important: kernel security and bug fix update
Important: glibc security update
Moderate: LibRaw security update
Important: varnish security update
LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).Security Fix(es): LibRaw: a heap-buffer-overflow in raw2imageex() (CVE-2023-1729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
MinGW (Minimalist GNU for Windows) is a free and open source software development environment to create Microsoft Windows applications.<br>Security Fix(es):<br><li> binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfdgetl64 (CVE-2023-1579)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
Moderate: mingw-pixman security update
Moderate: sssd security and bug fix update