Open Source Vulnerabilities

moby-compose

CVE-2023-48795 affecting package moby-compose for versions less than 2.17.3-5

packer

CVE-2023-48795 affecting package packer for versions less than 1.9.5-3

terraform

CVE-2023-48795 affecting package terraform for versions less than 1.3.2-25

jsch

CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2

moby-engine

CVE-2023-48795 affecting package moby-engine for versions less than 20.10.27-1

cert-manager

CVE-2023-48795 affecting package cert-manager for versions less than 1.12.12-1

cf-cli

CVE-2023-48795 affecting package cf-cli for versions less than 8.7.11-1

erlang

CVE-2023-48795 affecting package erlang for versions less than 26.2.3-1

kubernetes

CVE-2023-48795 affecting package kubernetes for versions less than 1.30.1-1

kubevirt

CVE-2023-48795 affecting package kubevirt for versions less than 1.2.0-9

libssh

CVE-2023-48795 affecting package libssh for versions less than 0.10.6-1

libssh2

CVE-2023-48795 affecting package libssh2 for versions less than 1.11.1-1

nmap

CVE-2023-48795 affecting package nmap for versions less than 7.93-2

packer

CVE-2023-48795 affecting package packer for versions less than 1.9.5-1

docker-buildx

CVE-2023-48795 affecting package docker-buildx for versions less than 0.14.0-1

node-problem-detector

CVE-2023-48795 affecting package node-problem-detector for versions less than 0.8.20-2

python-paramiko

CVE-2023-48795 affecting package python-paramiko 2.12.0-2

trilead-ssh2

CVE-2023-48795 affecting package trilead-ssh2 217.8-2

podman

CVE-2023-48795 affecting package podman 4.1.1-26

trilead-ssh2

CVE-2023-48795 affecting package trilead-ssh2 217.371.vc1d30dc5a_b_32-1

podman

CVE-2023-48795 affecting package podman for versions less than 5.6.1-2

rust

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1

jsch

CVE-2023-48795 affecting package jsch 0.1.55-3

buildah, libssh, libssh2, openssh, podman, buildah, libssh, libssh2, openssh, podman, openssh, openssh

freerdp, freerdp, freerdp, freerdp, freerdp, freerdp

Security update for freerdp

ncurses, ncurses, ncurses

Security update for ncurses

ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses, ncurses

Security update for ncurses

linux, linux, linux

kernel

CVE-2023-6817 affecting package kernel for versions less than 6.6.35.1-5

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-bluefield, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-starfive-6.2, linux-xilinx-zynqmp, linux-bluefield, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi, linux-raspi-realtime

openssh, paramiko, lxd, openssh, golang-go.crypto, paramiko, dropbear, proftpd-dfsg, putty, python-asyncssh, openssh, openssh, lxd, openssh, paramiko, dropbear, golang-go.crypto, openssh-ssh1, proftpd-dfsg, putty, python-asyncssh, openssh, openssh, filezilla, libssh, openssh, paramiko, proftpd-dfsg, python-asyncssh, dropbear, golang-go.crypto, openssh-ssh1, putty, openssh, openssh, dropbear, filezilla, libssh, openssh, openssh-ssh1, paramiko, putty, golang-go.crypto, python-asyncssh, dropbear, filezilla, openssh, openssh-ssh1, paramiko, putty, python-asyncssh, golang-go.crypto, dropbear, golang-go.crypto, openssh-ssh1, proftpd-dfsg, dropbear, openssh-ssh1, proftpd-dfsg, golang-go.crypto

Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

Use-after-free in Linux kernel's netfilter: nf_tables component

tiff, tiff, tiff

libtiff

CVE-2023-6228 affecting package libtiff for versions less than 4.6.0-6

libtiff

CVE-2023-6228 affecting package libtiff for versions less than 4.6.0-6

ansible, ansible, ansible, ansible-core, ansible-core, ansible-core

ansible

CVE-2023-5115 affecting package ansible for versions less than 2.14.11-1