Open Source Vulnerabilities

kernel-livepatch-SLE15-SP5_Update_29

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5)

lz4, lz4, lz4, lz4

arrow

Heap-buffer-overflow in std::__1::pair<int, arrow::util::RleBitPackedParser::ControlFlow> arrow::util::R

tryton-sao, tryton-sao

tryton-sao - security update

python-pypdf

python311-pypdf-6.1.3-1.1 on GA media

openbao

openbao-2.4.3-1.1 on GA media

micropython

micropython-1.26.0-2.1 on GA media

java-17-openjdk

java-17-openjdk-17.0.17.0-1.1 on GA media

java-11-openjdk

java-11-openjdk-11.0.29.0-1.1 on GA media

bind

bind-9.20.15-1.1 on GA media

bind9, bind9

bind9 - security update

python-internetarchive, python-internetarchive

python-internetarchive - security update

chromium, chromium

chromium - security update

kernel-livepatch-SLE15-SP5_Update_25

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5)

gst-plugins-good1.0, gst-plugins-good1.0

gst-plugins-good1.0 vulnerability

Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl

pypdf, pypdf

pypdf, pypdf

python-authlib, python-authlib, python-authlib

pypdf, pypdf, pypdf

pypdf, pypdf, pypdf

python-authlib, python-authlib, python-authlib, python-authlib

binary_vec_io

binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

pypdf manipulated LZWDecode streams can exhaust RAM

pypdf affected by possible infinite loop when reading DCT inline images without EOF marker

com.liferay:com.liferay.search.experiences.service

Liferay Portal and DXP are Missing Authorization in Collection Provider

com.liferay:com.liferay.dynamic.data.mapping.web

Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting (XSS)

Authlib : JWE zip=DEF decompression bomb enables DoS

OpenBao and Vault Leak []byte Fields in Audit Logs

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

BookLore Media API Authentication Bypass

VDO.Ninja Reflected XSS Vulnerability in control.html

FastGPT File Reading Node SSRF Vulnerability

aiomysql, aiomysql, aiomysql

linux, linux, linux

aiomysql, aiomysql, aiomysql, aiomysql, aiomysql

openssl

Updated openssl packages fix a security vulnerability

haproxy

Updated haproxy packages fix security vulnerability & bugs

python-django

Updated python-django packages fix a security vulnerability

nginx

Updated nginx package fixes security vulnerability

github.com/openbao/openbao

OpenBao and Vault Leak []byte Fields in Audit Logs

org.sakaiproject.kernel:sakai-kernel-impl

Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl

pypdf

pypdf can exhaust RAM via manipulated LZWDecode streams