Open Source Vulnerabilities

, Kernel

bus: mhi: host: Add alignment check for event ring read pointer

, Kernel

bus: mhi: host: Drop chan lock before queuing buffers

, Kernel

dmaengine: fix NULL pointer in channel unregistration function

, Kernel

media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run

, Kernel

mm: migrate: fix getting incorrect page mapping during page migration

, Kernel

mm/sparsemem: fix race in accessing memory_section->usage

, Kernel

serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO

, Kernel

net/mlx5e: Fix peer flow lists handling

, Kernel

drm: Don't unref the same fb many times by mistake due to deadlock handling

github.com/swaggo/http-swagger

Unprotected file upload in github.com/swaggo/http-swagger

cockpit-hq/cockpit

Cockpit CMS Cross-Site Scripting vulnerability

EspoCRM weakness in "Forgot password"

linux, linux, linux, linux

kernel

CVE-2023-52485 affecting package kernel 6.6.157.1-1

kernel

CVE-2023-52485 affecting package kernel 5.15.200.1-1

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia-6.2, linux-nvidia-6.5, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle-6.5, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-raspi-realtime

, Kernel

drm/amd/display: Wake DMCUB before sending a command

linux-lowlatency

linux-lowlatency vulnerabilities

linux-starfive-6.5

linux-starfive-6.5 vulnerabilities

linux-azure

linux-azure vulnerabilities

Cross-Site Scripting vulnerability in Cockpit CMS

RCE in Laragon

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost fails to limit the number of role names

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost allows attackers access to posts in channels they are not a member of

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost race condition

github.com/mattermost/mattermost/server/v8

Mattermost incorrectly allows access individual posts

apache-airflow

Apache Airflow: DAG Code and Import Error Permissions Ignored

linux, linux, linux

kernel

CVE-2024-26607 affecting package kernel 5.15.200.1-1

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-raspi-realtime

nodejs12, nodejs12, nodejs12, nodejs12, nodejs12, nodejs12, nodejs12

Security update for nodejs12

nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14, nodejs14

Security update for nodejs14

nodejs16

Security update for nodejs16

nodejs18, nodejs18, nodejs18, nodejs18, nodejs18, nodejs18, nodejs18

Security update for nodejs18

nodejs16, nodejs16, nodejs16, nodejs16

Security update for nodejs16

nodejs16, nodejs16, nodejs16, nodejs16, nodejs16

Security update for nodejs16

, Kernel

drm/bridge: sii902x: Fix probing race issue

apache-airflow

kernel-livepatch-SLE15-SP5_Update_1

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

apache-commons-codec, apache-commons-io, apache-commons-compress, apache-commons-configuration2, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, sbt, sbt-bootstrap, apache-commons-codec, apache-commons-compress, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-io, apache-commons-codec, apache-commons-io, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-javadoc-plugin, maven-reporting-api, maven-resolver, maven-resources-plugin, xmvn, xmvn-connector, xmvn-mojo, xmvn-tools, apache-commons-codec, apache-commons-compress, apache-commons-configuration2, apache-commons-io, javapackages-meta, maven, maven-assembly-plugin, maven-doxia, maven-doxia-sitetools, maven-jar-plugin, maven-jar-plugin-bootstrap, maven-javadoc-plugin, maven-javadoc-plugin-bootstrap, maven-reporting-api, maven-reporting-impl, maven-resolver, maven-resources-plugin, maven-resources-plugin-bootstrap, sbt, sbt-bootstrap, xmvn, xmvn-connector, xmvn-mojo, xmvn-parent, xmvn-tools

Security update for Java

kernel-abi-whitelists, kernel-doc, kernel-firmware

kernel: Fix of 7 CVEs

kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-headers, perf, python-perf

kernel: Fix of 7 CVEs

Apache Airflow: Dag Code and Import Error Permissions Ignored

kernel-abi-whitelists, kernel-doc, kernel-firmware

kernel: Fix of 7 CVEs

kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-headers, perf, python-perf

kernel: Fix of 7 CVEs