Open Source Vulnerabilities

java-25-openjdk

Important: java-25-openjdk security update

podman

Important: podman security update

kernel

Important: kernel security, bug fix, and enhancement update

buildah

Important: buildah security update

skopeo

Important: skopeo security update

brotli

Important: brotli security update

xdg-dbus-proxy

Important: xdg-dbus-proxy security update

laravel/framework

TuxCare security update for laravel/framework (1 CVE)

java-17-openjdk

Important: java-17-openjdk security update for Rocky Linux 8

libreswan

Important: libreswan security update

apache-commons-collections, apache-commons-collections, apache-commons-collections, apache-commons-lang, apache-commons-lang, apache-commons-net, apache-commons-net, apache-commons-net, bea-stax, bea-stax, glassfish-fastinfoset, glassfish-fastinfoset, glassfish-jaxb, glassfish-jaxb, glassfish-jaxb-api, glassfish-jaxb-api, jackson-annotations, jackson-core, jackson-core, jackson-databind, jackson-databind, jackson-jaxrs-providers, jackson-modules-base, jakarta-commons-httpclient, jakarta-commons-httpclient, jakarta-commons-httpclient, javassist, javassist, javassist, pki-servlet-engine, pki-servlet-engine, relaxngDatatype, relaxngDatatype, slf4j, slf4j, slf4j, slf4j, slf4j, stax-ex, stax-ex, velocity, velocity, velocity, xalan-j2, xalan-j2, xalan-j2, xerces-j2, xerces-j2, xerces-j2, xml-commons-apis, xml-commons-apis, xml-commons-apis, xml-commons-apis, xml-commons-resolver, xml-commons-resolver, xml-commons-resolver, xmlstreambuffer, xmlstreambuffer, xsom, xsom

Important: pki-deps:10.6 security update

thunderbird

Important: thunderbird security update

gcc-toolset-15-gcc

Moderate: gcc-toolset-15-gcc security update

libXrender

Important: libXrender security update

libXi

Moderate: libXi security update

libXtst

Important: libXtst security update

webkit2gtk3

Important: webkit2gtk3 security update

brotli

Important: brotli security update

python-urllib3

Important: python-urllib3 security update

emacs

Important: emacs security update

juniper_warp

Unbounded memory use on large request bodies

sn-releases

`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

wasmtime

Unchecked memory usage in transferring borrowed resources between components

wasmtime

Cross-engine type confusion with host-created struct-types-with-supertypes

wasmtime

Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

wasmtime-wasi-http

wasi-http p2: outgoing content-length can be invalid or not match body

wasmtime-wasi

wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving

umoci

@opentelemetry/propagator-jaeger

TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

tflintenv-fips

terraform-1.11

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)

wordpress, wordpress

wordpress, wordpress

nextcloud-server-35

nextcloud-server-35

nextcloud-server-34

nextcloud-server-34

nextcloud-server-33, nextcloud-server-33

nextcloud-server-33, nextcloud-server-33

snyk-cli, snyk-cli

snyk-cli, snyk-cli

php-8.4-pdo_snowflake, php-8.4-pdo_snowflake

php-8.3-pdo_snowflake, php-8.3-pdo_snowflake

php-8.2-pdo_snowflake, php-8.2-pdo_snowflake

kafka-native

kafka-native

java-cacerts-bcfks