Open Source Vulnerabilities

openjpeg2

CVE-2023-52356 affecting package openjpeg2 2.3.1-12

openjpeg2

CVE-2023-52356 affecting package openjpeg2 2.3.1-12

libtiff

CVE-2023-52356 affecting package libtiff for versions less than 4.6.0-2

tiff, tiff, tiff

dolibarr

tiff, gdal, tiff, gdal, tiff, qtwebengine-opensource-src, texmaker, tiff, qtwebengine-opensource-src, texmaker, tiff, qtwebengine-opensource-src, texmaker, tiff, qtwebengine-opensource-src, texmaker, qtwebengine-opensource-src, texmaker, texmaker, qtwebengine-opensource-src

gdal, tiff, tiff, gdal, tiff, neuron, qtwebengine-opensource-src, texmaker, tiff, neuron, qtwebengine-opensource-src, texmaker, neuron, qtwebengine-opensource-src, texmaker, tiff

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers

Dolibarr Application Home Page HTML injection vulnerability

Attacker can prevent users from accessing received emails

linux

linux vulnerability

Zulip non-admins can invite new users to streams they would not otherwise be able to add existing users to

mariadb-10.3, mariadb-10.6

mariadb, mariadb-10.3, mariadb-10.6 vulnerabilities

Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

gpac

atril, atril, atril

shim, shim, shim

shim-unsigned-x64

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-3

shim-unsigned-aarch64

CVE-2023-40547 affecting package shim-unsigned-aarch64 for versions less than 15.8-3

shim

CVE-2023-40547 affecting package shim for versions less than 15.8-3

shim

CVE-2023-40547 affecting package shim for versions less than 15.8-1

shim-unsigned-x64

CVE-2023-40547 affecting package shim-unsigned-x64 for versions less than 15.8-1

gpac, gpac, gpac, gpac, gpac, gpac

atril, atril, atril, atril

xorg-x11-server, xorg-x11-server, xorg-x11-server

Security update for xorg-x11-server

jinja2, jinja2, jinja2, jinja2, jinja2

jinja2 vulnerabilities

Shim: rce in http boot support may lead to secure boot bypass

Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Ovirt: authentication bypass

Authentication bypass in vector-admin domain restriction

paramiko, paramiko

paramiko vulnerability

puma

puma vulnerability

filesystem

filesystem-rs may be implicitly unmaintained

Cross-Site Scripting vulnerability in IceHrm

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerabilities

avahi

Updated avahi packages fix security vulnerabilities

MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox