Open Source Vulnerabilities

, Kernel

spmi: mediatek: Fix UAF on device remove

, Kernel

ceph: fix deadlock or deadcode of misusing dget()

linux-lts, linux-lts

firefox

firefox regressions

google.golang.org/protobuf, google.golang.org/protobuf/encoding/protojson, google.golang.org/protobuf/internal/encoding/json

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

eza

Duplicate Advisory: eza Potential Heap Overflow Vulnerability for AArch64

plone

Phone information disclosure vulnerability

rust-eza, rust-eza

rust-eza

yard

yard - security update

chromium

chromium - security update

golang-google-protobuf, golang-google-protobuf, golang-google-protobuf

golang-1.19

golang-1.19

golang-1.19

golang-1.19

golang-1.19

golang

CVE-2024-24785 affecting package golang 1.27.1-1

golang

CVE-2024-24783 affecting package golang 1.27.1-1

golang

CVE-2023-45290 affecting package golang 1.27.1-1

golang

CVE-2024-24784 affecting package golang 1.27.1-1

golang

CVE-2023-45289 affecting package golang 1.27.1-1

golang

CVE-2024-24784 affecting package golang 1.26.7-1

golang

CVE-2023-45290 affecting package golang 1.26.7-1

golang

CVE-2024-24785 affecting package golang 1.26.7-1

golang

CVE-2024-24783 affecting package golang 1.26.7-1

moby-engine

CVE-2024-24786 affecting package moby-engine for versions less than 25.0.3-7

moby-containerd-cc

CVE-2024-24786 affecting package moby-containerd-cc for versions less than 1.7.7-5

libcontainers-common

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3

flannel

CVE-2024-24786 affecting package flannel for versions less than 0.24.2-8

docker-cli

CVE-2024-24786 affecting package docker-cli for versions less than 25.0.3-2