Breadcrumbs

Security Fixes 11.09.260

Firefox

  • Updated Mozilla Firefox to 115.7 ESR

  • Fixes for mfsa2024-02, also known as:
    CVE-2024-0741, CVE-2024-0742, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755.

  • Fixes for mfsa2023-54, also known as:
    CVE-2023-6856, CVE-2023-6865, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6860, CVE-2023-6867, CVE-2023-6861, CVE-2023-6862, CVE-2023-6863, CVE-2023-6864.

  • Fixes for mfsa2023-50, also known as:
    CVE-2023-6204, CVE-2023-6205, CVE-2023-6206, CVE-2023-6207, CVE-2023-6208, CVE-2023-6209, CVE-2023-6212.

Base system

  • Updated ca-certificates to version 20240203.

  • Fixed a privilege escalation in setup_cmd utility.

  • Fixed bluez security issue CVE-2023-45866.

  • Fixed pam security issue CVE-2024-22365.

  • Fixed xorg-server security issues CVE-2024-21886, CVE-2024-21885, CVE-2024-0409, CVE-2024-0408, CVE-2024-0229 and CVE-2023-6816.

  • Fixed gnutls28 security issues CVE-2024-0567 and CVE-2024-0553.

  • Fixed openldap security issue CVE-2023-2953.

  • Fixed openssl security issues CVE-2024-0727, CVE-2023-6237, CVE-2023-6129 and CVE-2023-5678.

  • Fixed xerces-c security issues CVE-2023-37536 and CVE-2018-1311.

  • Fixed mysql-8.0 security issues CVE-2024-20985, CVE-2024-20984, CVE-2024-20983, CVE-2024-20982, CVE-2024-20981, CVE-2024-20978, CVE-2024-20977, CVE-2024-20976, CVE-2024-20974, CVE-2024-20973, CVE-2024-20972, CVE-2024-20971, CVE-2024-20970, CVE-2024-20969, CVE-2024-20967, CVE-2024-20966, CVE-2024-20965, CVE-2024-20964, CVE-2024-20963, CVE-2024-20962, CVE-2024-20961 and CVE-2024-20960.

  • Fixed paramiko security issue CVE-2023-48795.

  • Fixed pillow security issues CVE-2023-50447 and CVE-2023-44271.

  • Fixed pycryptodome security issue CVE-2023-52323.

  • Fixed qtbase-opensource-src security issue CVE-2023-51714.

  • Fixed qemu security issues CVE-2023-6693 and CVE-2023-6683.

  • Fixed zulu17-ca security issues CVE-2024-20932, CVE-2024-20926, CVE-2024-20925, CVE-2024-20923, CVE-2024-20922, CVE-2024-20918, CVE-2024-20952, CVE-2024-20945, CVE-2024-20921 and CVE-2024-20919.

  • Fixed curl security issue CVE-2024-0853.

  • Fixed expat security issues CVE-2023-52426 and CVE-2023-52425.

  • Fixed webkit2gtk security issues CVE-2024-23222, CVE-2024-23213, CVE-2024-23206, CVE-2023-42833, CVE-2023-40414 and CVE-2014-1745.

  • Fixed libde265 security issues CVE-2022-43253, CVE-2022-43252, CVE-2022-43248, CVE-2022-43243, CVE-2022-43242, CVE-2022-43241, CVE-2022-43240, CVE-2022-43239, CVE-2022-43238, CVE-2022-43237, CVE-2022-43236, CVE-2022-43235, CVE-2022-1253, CVE-2021-36411, CVE-2021-36410, CVE-2021-36409, CVE-2021-36408 and CVE-2021-35452.

  • Fixed gst-plugins-bad1.0 security issues CVE-2024-0444, CVE-2023-44446, CVE-2023-44429, CVE-2023-40476, CVE-2023-40475 and CVE-2023-40474.

  • Fixed bind9 security issues CVE-2023-5679, CVE-2023-5517, CVE-2023-50868, CVE-2023-50387 and CVE-2023-4408.

  • Fixed shadow security issue CVE-2023-4641.

  • Fixed qtbase-opensource-src security issue CVE-2024-25580.

  • Fixed libde265 security issues CVE-2023-25221, CVE-2023-24758, CVE-2023-24757, CVE-2023-24756, CVE-2023-24755, CVE-2023-24754, CVE-2023-24752, CVE-2023-24751, CVE-2022-47665, CVE-2022-43250, CVE-2022-43249, CVE-2022-43245 and CVE-2022-43244.

  • Fixed libpq5 security issue CVE-2024-0985.

  • Fixed libtiff5 security issues CVE-2023-6228, CVE-2023-6277 and CVE-2023-52356.

  • Fixed dnsmasq security issues CVE-2023-50868 and CVE-2023-50387.

  • Fixed python-cryptography security issue CVE-2023-50782.

  • Fixed less security issue CVE-2022-48624.

  • Fixed libuv1 security issue CVE-2024-24806.

  • Fixed libssh1.1 security issues 2023-3446 and CVE-2023-3817.