Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 1,473 articles for you...
217
security advisorysecurity updatesecurity issueOracle Linux 8 ELSA-2025-1675 critical: bind security patch
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-1675 http://linux.oracle.com/errata/ELSA-2025-1675.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: bind-9.11.36-16.el8_10.4.x86_64.rpm bind-chroot-9.11.36-16.el8_10.4.x86_64.rpm bind-devel-9.11.36-16.el8_10.4.i686.rpm bind-devel-9.11.36-16.el8_10.4.x86_64.rpm bind-export-devel-9.11.36-16.el8_10.4.i686.rpm bind-export-devel-9.11.36-16.el8_10.4.x86_64.rpm bind-export-libs-9.11.36-16.el8_10.4.i686.rpm bind-export-libs-9.11.36-16.el8_10.4.x86_64.rpm bind-libs-9.11.36-16.el8_10.4.i686.rpm bind-libs-9.11.36-16.el8_10.4.x86_64.rpm bind-libs-lite-9.11.36-16.el8_10.4.i686.rpm bind-libs-lite-9.11.36-16.el8_10.4.x86_64.rpm bind-license-9.11.36-16.el8_10.4.noarch.rpm bind-lite-devel-9.11.36-16.el8_10.4.i686.rpm bind-lite-devel-9.11.36-16.el8_10.4.x86_64.rpm bind-pkcs11-9.11.36-16.el8_10.4.x86_64.rpm bind-pkcs11-devel-9.11.36-16.el8_10.4.i686.rpm bind-pkcs11-devel-9.11.36-16.el8_10.4.x86_64.rpm bind-pkcs11-libs-9.11.36-16.el8_10.4.i686.rpm bind-pkcs11-libs-9.11.36-16.el8_10.4.x86_64.rpm bind-pkcs11-utils-9.11.36-16.el8_10.4.x86_64.rpm bind-sdb-9.11.36-16.el8_10.4.x86_64.rpm bind-sdb-chroot-9.11.36-16.el8_10.4.x86_64.rpm bind-utils-9.11.36-16.el8_10.4.x86_64.rpm python3-bind-9.11.36-16.el8_10.4.noarch.rpm aarch64: bind-9.11.36-16.el8_10.4.aarch64.rpm bind-chroot-9.11.36-16.el8_10.4.aarch64.rpm bind-devel-9.11.36-16.el8_10.4.aarch64.rpm bind-export-devel-9.11.36-16.el8_10.4.aarch64.rpm bind-export-libs-9.11.36-16.el8_10.4.aarch64.rpm bind-libs-9.11.36-16.el8_10.4.aarch64.rpm bind-libs-lite-9.11.36-16.el8_10.4.aarch64.rpm bind-license-9.11.36-16.el8_10.4.noarch.rpm bind-lite-devel-9.11.36-16.el8_10.4.aarch64.rpm bind-pkcs11-9.11.36-16.el8_10.4.aarch64.rpm bind-pkcs11-devel-9.11.36-16.el8_10.4.aarch64.rpm bind-pkcs11-libs-9.11.36-16.el8_10.4.aarch64.rpm bind-pkcs11-utils-9.11.36-16.el8_10.4.aarch64.rpm bind-sdb-9.11.36-16.el8_10.4.aarch64.rpm bind-sdb-chroot-9.11.36-16.el8_10.4.aarch64.rpm bind-utils-9.11.36-16.el8_10.4.aarch64.rpm python3-bind-9.11.36-16.el8_10.4.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//bind-9.11.36-16.el8_10.4.src.rpm Related CVEs: CVE-2024-11187 Description ofchanges: [32:9.11.36-16.4] - Change patches applying to use -P parameter [32:9.11.36-16.3] - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended _______________________________________________ El-errata mailing list
Feb 24, 2025
•Critical
Oracle
98
security advisorysecurity issueimportantRed Hat Enterprise Linux 8.6: RHSA-2023-5531-01 Important TLS Bypass
An update for python3 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: python3 security update Advisory ID: RHSA-2023:5531-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5531 Issue date: 2023-10-09 CVE Names: CVE-2023-40217 ===================================================================== 1. Summary: An update for python3 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2235789 - CVE-2023-40217 python: TLS handshake bypass 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.6): aarch64: platform-python-debug-3.6.8-47.el8_6.2.aarch64.rpm platform-python-devel-3.6.8-47.el8_6.2.aarch64.rpm python3-debuginfo-3.6.8-47.el8_6.2.aarch64.rpm python3-debugsource-3.6.8-47.el8_6.2.aarch64.rpm python3-idle-3.6.8-47.el8_6.2.aarch64.rpm python3-tkinter-3.6.8-47.el8_6.2.aarch64.rpm ppc64le: platform-python-debug-3.6.8-47.el8_6.2.ppc64le.rpm platform-python-devel-3.6.8-47.el8_6.2.ppc64le.rpm python3-debuginfo-3.6.8-47.el8_6.2.ppc64le.rpm python3-debugsource-3.6.8-47.el8_6.2.ppc64le.rpm python3-idle-3.6.8-47.el8_6.2.ppc64le.rpm python3-tkinter-3.6.8-47.el8_6.2.ppc64le.rpm s390x: platform-python-debug-3.6.8-47.el8_6.2.s390x.rpm platform-python-devel-3.6.8-47.el8_6.2.s390x.rpm python3-debuginfo-3.6.8-47.el8_6.2.s390x.rpm python3-debugsource-3.6.8-47.el8_6.2.s390x.rpm python3-idle-3.6.8-47.el8_6.2.s390x.rpm python3-tkinter-3.6.8-47.el8_6.2.s390x.rpm x86_64: platform-python-3.6.8-47.el8_6.2.i686.rpm platform-python-debug-3.6.8-47.el8_6.2.i686.rpm platform-python-debug-3.6.8-47.el8_6.2.x86_64.rpm platform-python-devel-3.6.8-47.el8_6.2.i686.rpm platform-python-devel-3.6.8-47.el8_6.2.x86_64.rpm python3-debuginfo-3.6.8-47.el8_6.2.i686.rpm python3-debuginfo-3.6.8-47.el8_6.2.x86_64.rpm python3-debugsource-3.6.8-47.el8_6.2.i686.rpm python3-debugsource-3.6.8-47.el8_6.2.x86_64.rpm python3-idle-3.6.8-47.el8_6.2.i686.rpm python3-idle-3.6.8-47.el8_6.2.x86_64.rpm python3-test-3.6.8-47.el8_6.2.i686.rpm python3-tkinter-3.6.8-47.el8_6.2.i686.rpm python3-tkinter-3.6.8-47.el8_6.2.x86_64.rpm Red Hat Enterprise Linux BaseOS EUS(v.8.6): Source: python3-3.6.8-47.el8_6.2.src.rpm aarch64: platform-python-3.6.8-47.el8_6.2.aarch64.rpm python3-debuginfo-3.6.8-47.el8_6.2.aarch64.rpm python3-debugsource-3.6.8-47.el8_6.2.aarch64.rpm python3-libs-3.6.8-47.el8_6.2.aarch64.rpm python3-test-3.6.8-47.el8_6.2.aarch64.rpm ppc64le: platform-python-3.6.8-47.el8_6.2.ppc64le.rpm python3-debuginfo-3.6.8-47.el8_6.2.ppc64le.rpm python3-debugsource-3.6.8-47.el8_6.2.ppc64le.rpm python3-libs-3.6.8-47.el8_6.2.ppc64le.rpm python3-test-3.6.8-47.el8_6.2.ppc64le.rpm s390x: platform-python-3.6.8-47.el8_6.2.s390x.rpm python3-debuginfo-3.6.8-47.el8_6.2.s390x.rpm python3-debugsource-3.6.8-47.el8_6.2.s390x.rpm python3-libs-3.6.8-47.el8_6.2.s390x.rpm python3-test-3.6.8-47.el8_6.2.s390x.rpm x86_64: platform-python-3.6.8-47.el8_6.2.x86_64.rpm python3-debuginfo-3.6.8-47.el8_6.2.i686.rpm python3-debuginfo-3.6.8-47.el8_6.2.x86_64.rpm python3-debugsource-3.6.8-47.el8_6.2.i686.rpm python3-debugsource-3.6.8-47.el8_6.2.x86_64.rpm python3-libs-3.6.8-47.el8_6.2.i686.rpm python3-libs-3.6.8-47.el8_6.2.x86_64.rpm python3-test-3.6.8-47.el8_6.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2023-40217 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJlJBu+AAoJENzjgjWX9erETsAQAKhY4n2S1DHnsBPu5N1gwk21 MsOEGKvSk9fOL8+2T4FZIlqTwakdudj/HfpeD8ieoNI5NGQo0/CdlCUpg3cf2yxK 0UK5FEr/wKwVVKB0tTuwge7PHSuWvqVPKfqxtPdgJZRsXbJ4eNBh65fOFJ7Z7kiY +uKnqy8BnqEGt87uiO8HuphfoN7sLK7aWj6jsXpVm8lyJ3BLNqcxeUgM6iyrJmf6 nKTlKirIrSgKGgPfU6G7+WJGQHWP+gOKqmrnbeu6QwslP21uWsC3DNHLaGDFx5aZ cM4F+wxgZ+S+a4ZTfT2d5XKcdp459gD2IiZ8oAftschQPR9WIdP4kOD2p47qd/3k g9dH5lU+rinhZxLqXUyS5V1kd386p5ZjeUbX9Dv76k7DbGOoDEOlR5mK4ENrDstN WjYV+mREy51UNmrql0G8aZPDVmuIMmjLPq1KUGkW61MIOEaTcaKGxikIN/J2TYxm C5D92+qGV1zvbLHd2Bh7MmvrzC45F8TKIDXAw4x0cNDEF3y/DeiSXrzlBxTNG9KD 3jVnVV1LIu75qp5ZcM7z6y1UC+kSCTif56NWVGN5SDTzlUs6Uhyotw5Q6KSfHQLL EdujROpFBQRi/f0cAQHLFCp453A7Dl9sSkVps8BZJQj2s+1097JG4RYGebnNvK9K 9eFj8JEdpxo7J3c5VZH9 =fmrV -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 09, 2023
•Important
Red Hat
98
security advisoryred hatsecurity fixRedHat OpenShift Serverless 1.30.1 RHSA-2023-5479-01 Critical HTTP Issue
Red Hat OpenShift Serverless 1.30.1 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: Release of OpenShift Serverless Client kn 1.30.1 security update Advisory ID: RHSA-2023:5479-01 Product: Red Hat OpenShift Serverless Advisory URL: https://access.redhat.com/errata/RHSA-2023:5479 Issue date: 2023-10-05 CVE Names: CVE-2023-4853 ===================================================================== 1. Summary: Red Hat OpenShift Serverless 1.30.1 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Openshift Serverless 1 on RHEL 8Base - ppc64le, s390x, x86_64 3. Description: Red Hat OpenShift Serverless Client kn 1.30.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.30.1. The kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux platforms. This release includes security and bug fixes, and enhancements. Security Fix(es): * quarkus: HTTP security policy bypass (CVE-2023-4853) For further information about CVE-2023-4853, see the Red Hat Security Bulletin linked to in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously releasederrata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2238034 - CVE-2023-4853 quarkus: HTTP security policy bypass 6. Package List: Openshift Serverless 1 on RHEL 8Base: Source: openshift-serverless-clients-1.9.2-3.el8.src.rpm ppc64le: openshift-serverless-clients-1.9.2-3.el8.ppc64le.rpm s390x: openshift-serverless-clients-1.9.2-3.el8.s390x.rpm x86_64: openshift-serverless-clients-1.9.2-3.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-4853 https://access.redhat.com/security/vulnerabilities/RHSB-2023-002 https://access.redhat.com/security/updates/classification#important https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 https://docs.redhat.com/en/documentation/red_hat_openshift_serverless/1.33 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJlHypFAAoJENzjgjWX9erE8dYP/0f2bxOTsczhrQ+AB4503Rl0 roHKG2ZfmKrhNfNCL1v6POQ0iXQryhxU0Uv3t3Vp25dzy5JZyiUoVwugKLkkrISs iFxReqOp336nDs9OIUSMgmMMSYRbhiteMpSR/Z0dFH/kTqsEHHa0YaneVq0x0y8w 2A4oG01A8vAX5WwJJmemIrsJn5ygRm9unKNO2SRleM5Wjbt1gV5ufpKxfY4PvaR+ Z7H7CmqC1A7hzDmZRyGBv8ScKTlBT1fJomBqhEMHSi2PrfH9D4rvGIi+CTF0r30n 3wAaH6CukubiPBms7FEQV5Bgt6XDdtUV7FWaKVLaPjPhboUXKCwGE2gwUkZXp7Wt cV+Uk5NP9/60WYf6WIcqentfy8yARX0Vackh0hIm2YgIXphZ1Oa49Y4KU2lQcijy FXa3CYspd34BNxi96B6WhjYm7LQVPl4zKpeP3PquS1HJNnyOOgH7vtARZGaxn3GK vNMcnP+rUD7sucDicy5fsRF6Fq0wIZHSr0iXSmwc+2YmzSPgRdl0nYXb+0Z0j8Wj IdoHBRifgsHcLjABfeyPqV83fEYXv+dxR5GHgmxrulbw/AdkubYE7koFcgPiFQtB INQM+pfSh8jvieS2ksLvVVTNtj23EPjhmoyCErR1DniUOMhT/8d8ZUuIeVP+p7E9 ONO2EX/B4jH2twYWiKbW =VuSI -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 05, 2023
•Important
Red Hat
98
security advisoryRed Hat Enterprise Linuxsecurity impactRed Hat: RHSA-2023:5475-01 Important: Thunderbird Security Issues
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2023:5475-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5475 Issue date: 2023-10-05 CVE Names: CVE-2023-3600 CVE-2023-5169 CVE-2023-5171 CVE-2023-5176 CVE-2023-5217 ===================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score,acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2222652 - CVE-2023-3600 firefox: use-after-free in workers 2240893 - CVE-2023-5169 Mozilla: Out-of-bounds write in PathOps 2240894 - CVE-2023-5171 Mozilla: Use-after-free in Ion Compiler 2240896 - CVE-2023-5176 Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 2241191 - CVE-2023-5217 libvpx: Heap buffer overflow in vp8 encoding in libvpx 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: thunderbird-115.3.1-1.el7_9.src.rpm x86_64: thunderbird-115.3.1-1.el7_9.x86_64.rpm thunderbird-debuginfo-115.3.1-1.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): Source: thunderbird-115.3.1-1.el7_9.src.rpm ppc64le: thunderbird-115.3.1-1.el7_9.ppc64le.rpm thunderbird-debuginfo-115.3.1-1.el7_9.ppc64le.rpm x86_64: thunderbird-115.3.1-1.el7_9.x86_64.rpm thunderbird-debuginfo-115.3.1-1.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: thunderbird-115.3.1-1.el7_9.src.rpm x86_64: thunderbird-115.3.1-1.el7_9.x86_64.rpm thunderbird-debuginfo-115.3.1-1.el7_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-3600 https://access.redhat.com/security/cve/CVE-2023-5169 https://access.redhat.com/security/cve/CVE-2023-5171 https://access.redhat.com/security/cve/CVE-2023-5176 https://access.redhat.com/security/cve/CVE-2023-5217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . Morecontact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlHyo5AAoJENzjgjWX9erErHgP/RecI+C2vPcgutXV+SQkJCFP 4Ys7eizV95uyuNE1hveNkkfESiYubhz1lzJTXvw1C+cVdSGrXfBoLfEkyAqRYelH iX2LdMb9eHNaCxh+TFvslmzvxFwSZVRjxOp5LRitqO++RskvrnZipTZfijz9V4Wv iFuT3LPsxFZHI0L0hcjzGqafUV/QWiaHKNmzaUA1FaITs0crZgCBf6LpDWH+I5IJ cS4qqMuw6cop4WOQk20slPNWL38yA+kvGeNi9zAnC36i47+AsDTsXasur4aRpYPU vID5C2rCaVz3jt40DrH04evUXVb4//lu2rLQXaP+7ALLWkdeOcy83MrJ+otzK3Lf yN+5d8ajxB+M4MMQKhKQlhHcNzIo85nfA9+LUFKeaxB4PmAl4mHDbouhe+dFAmHs jnY/gY3lsRQ2tcic3R9NF5I5Jane+XhTGhVQcVyuX6plCThzib+3i0VYwtvKfhrg qNDFXhxeBGzQBUYGGzb2wISj5DnBpkX6igMnFtS49nf2eEeii+hdhIQIdMRgWwy9 arMD/DHZMo1Aq/EDRMw74+gO5LMouemP6tszJClNhkAAc3UTKy5fRrE7jiI3qgL5 WzRqNUV+qBAScTJUD21WSbosdTleadjfiUfgDEOrP5OgGlQpIsUE6AvXVx6ebGji 9DRa0mOSRIF6itYY5nAp =CqNY -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 05, 2023
•Important
Red Hat
98
security advisoryupdateRed Hat Enterprise LinuxRed Hat 9: RHSA-2023-5462-01 Important: Python3.9 TLS Bypass
An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: python3.9 security update Advisory ID: RHSA-2023:5462-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5462 Issue date: 2023-10-05 CVE Names: CVE-2023-40217 ===================================================================== 1. Summary: An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, whichincludes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2235789 - CVE-2023-40217 python: TLS handshake bypass 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): aarch64: python3-devel-3.9.16-1.el9_2.2.aarch64.rpm python3-tkinter-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.aarch64.rpm noarch: python-unversioned-command-3.9.16-1.el9_2.2.noarch.rpm ppc64le: python3-devel-3.9.16-1.el9_2.2.ppc64le.rpm python3-tkinter-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debugsource-3.9.16-1.el9_2.2.ppc64le.rpm s390x: python3-devel-3.9.16-1.el9_2.2.s390x.rpm python3-tkinter-3.9.16-1.el9_2.2.s390x.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.s390x.rpm python3.9-debugsource-3.9.16-1.el9_2.2.s390x.rpm x86_64: python3-devel-3.9.16-1.el9_2.2.i686.rpm python3-devel-3.9.16-1.el9_2.2.x86_64.rpm python3-tkinter-3.9.16-1.el9_2.2.x86_64.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.i686.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.x86_64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.i686.rpm python3.9-debugsource-3.9.16-1.el9_2.2.x86_64.rpm Red Hat Enterprise Linux BaseOS (v.9): Source: python3.9-3.9.16-1.el9_2.2.src.rpm aarch64: python3-3.9.16-1.el9_2.2.aarch64.rpm python3-libs-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.aarch64.rpm ppc64le: python3-3.9.16-1.el9_2.2.ppc64le.rpm python3-libs-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debugsource-3.9.16-1.el9_2.2.ppc64le.rpm s390x: python3-3.9.16-1.el9_2.2.s390x.rpm python3-libs-3.9.16-1.el9_2.2.s390x.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.s390x.rpm python3.9-debugsource-3.9.16-1.el9_2.2.s390x.rpm x86_64: python3-3.9.16-1.el9_2.2.x86_64.rpm python3-libs-3.9.16-1.el9_2.2.i686.rpm python3-libs-3.9.16-1.el9_2.2.x86_64.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.i686.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.x86_64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.i686.rpm python3.9-debugsource-3.9.16-1.el9_2.2.x86_64.rpm Red Hat Enterprise Linux CRB (v.9): aarch64: python3-debug-3.9.16-1.el9_2.2.aarch64.rpm python3-idle-3.9.16-1.el9_2.2.aarch64.rpm python3-test-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.aarch64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.aarch64.rpm ppc64le: python3-debug-3.9.16-1.el9_2.2.ppc64le.rpm python3-idle-3.9.16-1.el9_2.2.ppc64le.rpm python3-test-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.ppc64le.rpm python3.9-debugsource-3.9.16-1.el9_2.2.ppc64le.rpm s390x: python3-debug-3.9.16-1.el9_2.2.s390x.rpm python3-idle-3.9.16-1.el9_2.2.s390x.rpm python3-test-3.9.16-1.el9_2.2.s390x.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.s390x.rpm python3.9-debugsource-3.9.16-1.el9_2.2.s390x.rpm x86_64: python3-3.9.16-1.el9_2.2.i686.rpm python3-debug-3.9.16-1.el9_2.2.i686.rpm python3-debug-3.9.16-1.el9_2.2.x86_64.rpm python3-idle-3.9.16-1.el9_2.2.i686.rpm python3-idle-3.9.16-1.el9_2.2.x86_64.rpm python3-test-3.9.16-1.el9_2.2.i686.rpm python3-test-3.9.16-1.el9_2.2.x86_64.rpm python3-tkinter-3.9.16-1.el9_2.2.i686.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.i686.rpm python3.9-debuginfo-3.9.16-1.el9_2.2.x86_64.rpm python3.9-debugsource-3.9.16-1.el9_2.2.i686.rpm python3.9-debugsource-3.9.16-1.el9_2.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-40217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJlHtXUAAoJENzjgjWX9erE2UkQAJhB22PnalrgLFvE6/cMHA/m kMuS+5V7bLUKmgg+zZy7JxXjW6tM/3RMUyoldTcRfc4r7AMd6SDCXZ+/g/WmtNm7 a7P3rGYQCL1xA8gL74b9Gzbop7gYvAMSSoXbuCUwBw/nGp0qrA9zzp4OYIHl8hIR MpvRPUBLF+jFhoSv0G7xOsVbfMLb53PQmJNQ0Cru9ADyoAlB6OkvQZBryGXkuz4l E/UtrSQ+cnjViuvTAPXQ0ItaFmjTfaG2VWN4HHeDzJtgvt9g4mWHVJgobAnG+Kyi JS9OoAu3W/5oQhxxwz2cfO+t/rATFDosSRuCjPDx1HV6yI+WMODUM8P/uqaOJYCz Gf/mtNMc5aLNe/I7PgjixNRzR/J82oVSSqVjjZuf5mr7mhzJLwuqyT8Z2Sd7jNxK L136Lkn7o9IyJ1xGzSb/zC0UgY+I5HTAxU5PF7WLkkRhCcm3rEOmVmXoKdQtBELM 50FXmofk+geGyxezI2oj0+PHzhU22l0ysrJYNv19q13ejZ4KgK8/VYPistyujmej Jtx7lrbVuCWvfAjT2sh7rj8JdmQpWqXRNwJ2kVWb1QbfYaVaBasrqhn69hDmSKia pqgHt0e38lhdKXfbGlVceY+GB7SplyDV8Ynz74F6M7A3kKJvmtf/ZFHb7XKO+3zw vyX9umjTAs+p8XrX5Xx2 =Yw5U -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 05, 2023
•Important
Red Hat
98
security advisoryupdateimportantRed Hat: RHSA-2023-5439-01 Important: Thunderbird Security Impact
An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2023:5439-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5439 Issue date: 2023-10-04 CVE Names: CVE-2023-3600 CVE-2023-5169 CVE-2023-5171 CVE-2023-5176 CVE-2023-5217 ===================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4.Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2222652 - CVE-2023-3600 firefox: use-after-free in workers 2240893 - CVE-2023-5169 Mozilla: Out-of-bounds write in PathOps 2240894 - CVE-2023-5171 Mozilla: Use-after-free in Ion Compiler 2240896 - CVE-2023-5176 Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 2241191 - CVE-2023-5217 libvpx: Heap buffer overflow in vp8 encoding in libvpx 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.9.0): Source: thunderbird-115.3.1-1.el9_0.src.rpm aarch64: thunderbird-115.3.1-1.el9_0.aarch64.rpm thunderbird-debuginfo-115.3.1-1.el9_0.aarch64.rpm thunderbird-debugsource-115.3.1-1.el9_0.aarch64.rpm ppc64le: thunderbird-115.3.1-1.el9_0.ppc64le.rpm thunderbird-debuginfo-115.3.1-1.el9_0.ppc64le.rpm thunderbird-debugsource-115.3.1-1.el9_0.ppc64le.rpm s390x: thunderbird-115.3.1-1.el9_0.s390x.rpm thunderbird-debuginfo-115.3.1-1.el9_0.s390x.rpm thunderbird-debugsource-115.3.1-1.el9_0.s390x.rpm x86_64: thunderbird-115.3.1-1.el9_0.x86_64.rpm thunderbird-debuginfo-115.3.1-1.el9_0.x86_64.rpm thunderbird-debugsource-115.3.1-1.el9_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-3600 https://access.redhat.com/security/cve/CVE-2023-5169 https://access.redhat.com/security/cve/CVE-2023-5171 https://access.redhat.com/security/cve/CVE-2023-5176 https://access.redhat.com/security/cve/CVE-2023-5217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 RedHat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlHYRpAAoJENzjgjWX9erEDQgP/0G/EvIj3zBNje0yWbcdD0qC iDBIrI3zoaLx9OsaxbA7pOMkZvd3esHwXRV9rIJs4M2Wuzrok1kHJLP3ix7kYtt7 YXrba5RpkOIfhEQCbneXKL0JM7oCthSMFLUii2dKhjbWRrvee78BSOR+DmqChvv1 0Avef3CRB6n4BEToLHfkPVuKA0+65ABR6gBdggew6JUFntA5DgKv0JDxXBLk05HA g7RkNrip69oBdGtBZAp547HOyz2u+Nb2UxTyJOj8tUsFCCePP7AgV0+5qIhxNja4 PSw68PMJQeTcep00bZwpjmRwm+UqdGlHlz3WPvT/D19YbY5RKcXotNgIV0ATbrBq AFX91T8ckA7mC4qiD2UF4INfcTifhIUejLacdxV/Dl1CJoywUDHcKhzllMC9dSAs ijLzXupu7Ttkbsl0Sv0wq6fDqbK7ROxm6v/x97vonK51Y+i7dr+/yjbyK5IhimQd JErtvZj1KFkU4gsWE6yudCRRS0fmyG5FfOjARYhKaV0JsFHLm6K8wBjdceScxOWq FAz/ZcXzIfkVqc2gc9eAOFDM0lvzpEcy6LzvqKA1oShKuiCdVXdepNtmxiSWVzj0 opG7A5ICjtxBC5YS4A1Djqvz0QyF0hLUpQphSfAovf5RDLmEnW3cE8UhVrfO9Vq8 MVtr73ByYuii+31SU4MX =Nbe8 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 04, 2023
•Important
Red Hat
98
security advisoryRed Hat Enterprise LinuximportantRed Hat Enterprise Linux 8: RHSA-2023:5433-01 Important Firefox Update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: firefox security update Advisory ID: RHSA-2023:5433-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5433 Issue date: 2023-10-04 CVE Names: CVE-2023-3600 CVE-2023-5169 CVE-2023-5171 CVE-2023-5176 CVE-2023-5217 ===================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 115.3.1 ESR. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to theCVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2222652 - CVE-2023-3600 firefox: use-after-free in workers 2240893 - CVE-2023-5169 Mozilla: Out-of-bounds write in PathOps 2240894 - CVE-2023-5171 Mozilla: Use-after-free in Ion Compiler 2240896 - CVE-2023-5176 Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 2241191 - CVE-2023-5217 libvpx: Heap buffer overflow in vp8 encoding in libvpx 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: firefox-115.3.1-1.el8_8.src.rpm aarch64: firefox-115.3.1-1.el8_8.aarch64.rpm firefox-debuginfo-115.3.1-1.el8_8.aarch64.rpm firefox-debugsource-115.3.1-1.el8_8.aarch64.rpm ppc64le: firefox-115.3.1-1.el8_8.ppc64le.rpm firefox-debuginfo-115.3.1-1.el8_8.ppc64le.rpm firefox-debugsource-115.3.1-1.el8_8.ppc64le.rpm s390x: firefox-115.3.1-1.el8_8.s390x.rpm firefox-debuginfo-115.3.1-1.el8_8.s390x.rpm firefox-debugsource-115.3.1-1.el8_8.s390x.rpm x86_64: firefox-115.3.1-1.el8_8.x86_64.rpm firefox-debuginfo-115.3.1-1.el8_8.x86_64.rpm firefox-debugsource-115.3.1-1.el8_8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-3600 https://access.redhat.com/security/cve/CVE-2023-5169 https://access.redhat.com/security/cve/CVE-2023-5171 https://access.redhat.com/security/cve/CVE-2023-5176 https://access.redhat.com/security/cve/CVE-2023-5217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat,Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlHYRhAAoJENzjgjWX9erENHUQAJE8Z7NRSUuXMBazzosAEJjG buTCE3nT23Vihx1BCdKvOdk9yjSL60nDV5WBC/xHy6wmQBxEVveDiokd5jCMN1Q0 1Jew1v4GDtTF3b1AEJ7LhEboMFyyaArelGjGJ7b5hfTtMY8K0hk0LRS7d4vtMWG3 gfWoBIavp8Q+yIXyTPsJpNKdJpZdv7I9T6ol4fR3rG+ku6BquIAmS7//SP8mcrIK XRt0hUdWwC0+xccWm5IoAKlcBezefWwojL4OVs6t0tDJA5WWnsn+DprOhqiSIK1S dc/93FDSacqMEbMuwO3gqlmnir1grUAGHjnnxu4LgKKjj27KDXoY+lMqg4cZp1Dm UgTrKZJLwDJTTKUFqjTMBpbfXNJPvL20srYNhLjkB7tVGClwhH9WSz8FZh0W3/8L vT++hUw+7GWY6MdeNECFtgjanXRTfcSsQh3hnfOOndYGsrRE8Y6t7mBrHFA3ANW+ 6vMi8cYdIhN0ossErCjMUpYbtLvu0BpWyneqsrEiLWrRX11XaVQHfD//bvJ4+1Ci qJuRcoC+PPjNcn2aS1q+tk19R0QCsZnILix0DgK0NVywuO2xFeUZb5CJB3QLOtJW 3uR10FehqEVKQmzW6ALoW+B6zEn1awM03uWQdq0tJYt04fYAtWEJkAF8tzFhHdE2 YJuuNtWolvnlG3k9aiRh =dsVK -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 04, 2023
•Important
Red Hat
98
security advisoryupdateRed Hat Enterprise LinuxRed Hat: RHSA-2023-5428-01 Important: Thunderbird Security Update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2023:5428-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5428 Issue date: 2023-10-04 CVE Names: CVE-2023-3600 CVE-2023-5169 CVE-2023-5171 CVE-2023-5176 CVE-2023-5217 ===================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fix(es): * firefox: use-after-free in workers (CVE-2023-3600) * Mozilla: Out-of-bounds write in PathOps (CVE-2023-5169) * Mozilla: Use-after-free in Ion Compiler (CVE-2023-5171) * Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (CVE-2023-5176) * libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the Referencessection. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2222652 - CVE-2023-3600 firefox: use-after-free in workers 2240893 - CVE-2023-5169 Mozilla: Out-of-bounds write in PathOps 2240894 - CVE-2023-5171 Mozilla: Use-after-free in Ion Compiler 2240896 - CVE-2023-5176 Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 2241191 - CVE-2023-5217 libvpx: Heap buffer overflow in vp8 encoding in libvpx 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: thunderbird-115.3.1-1.el8_8.src.rpm aarch64: thunderbird-115.3.1-1.el8_8.aarch64.rpm thunderbird-debuginfo-115.3.1-1.el8_8.aarch64.rpm thunderbird-debugsource-115.3.1-1.el8_8.aarch64.rpm ppc64le: thunderbird-115.3.1-1.el8_8.ppc64le.rpm thunderbird-debuginfo-115.3.1-1.el8_8.ppc64le.rpm thunderbird-debugsource-115.3.1-1.el8_8.ppc64le.rpm s390x: thunderbird-115.3.1-1.el8_8.s390x.rpm thunderbird-debuginfo-115.3.1-1.el8_8.s390x.rpm thunderbird-debugsource-115.3.1-1.el8_8.s390x.rpm x86_64: thunderbird-115.3.1-1.el8_8.x86_64.rpm thunderbird-debuginfo-115.3.1-1.el8_8.x86_64.rpm thunderbird-debugsource-115.3.1-1.el8_8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-3600 https://access.redhat.com/security/cve/CVE-2023-5169 https://access.redhat.com/security/cve/CVE-2023-5171 https://access.redhat.com/security/cve/CVE-2023-5176 https://access.redhat.com/security/cve/CVE-2023-5217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlHYRgAAoJENzjgjWX9erEMm0P/A0Jsv2xsCVWkDyxBzTQmzI+ ejArRtB/cPJCgXLSDeLYX13gGTSn+rcXqaqdeXXbesaQJNmkW/S9ZOnHWCz3xoJS 3z2/YdIdTxfq1DNi3STeeyBs2XlB0Ud9u7KI8V8KHQ1zDJGihSdXNSaPrDXQyHUH AVEvvtn1gLkmBE1aLSB7yT3PyHaqf+qXi35yJfYiMhRRCTub+28MsYSrV2HoC6Tw ij0yTRAr6iJonJwVZv6NP8/cmzBrAKSiEDUUjCawqppFHs0YCtPpmDmJeTJsRd6h KT5zGw/HejWqQiJEe1KWVhGJ27xNphG2kqln5sirEtDVZ7mlF++5WBDgT7jeSlvY sST4xgW+1JI9bBK9YC4O22oonbLuBwkeJcvVFZtAJnF3YVdEGWVJntbCX0zEaItv RyX827KRdXZ6F1gvGbYs9VmZNEb98PL1IPmZGKz10y6qsWHQybOUStEUNCP5+iim isG0ACQIeWNSlvbKzX+TV1nHMJRRTzgXiFeoNwK//SlCNbatoOoYufcotoPtpuU6 Rc3Kl70V9RdsXTxvpI//4bPz9wAPiZhiKPVyY1GNZZtaVVzfzjz2+1QHneRJJ1UX 7BBthHG6c8RfUuwPCw2WiJmkUoOGi+l1V54OLSjQZc8n7mGFnprILBdOwn3skbJu o7m6IYkmu1L3MKKXvlql =bE/U -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 04, 2023
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!