Open Source Vulnerabilities

Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'

Asterisk Path Traversal vulnerability

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad

xrdp, xrdp

Security update for xrdp

kernel-livepatch-SLE15-SP4_Update_16

Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP4)

org.keycloak:keycloak-model-jpa

Allocation of Resources Without Limits in Keycloak

com.jfinal:jfinal

Cross-site Scripting in JFinalcms

com.jfinal:jfinal

Cross-site Scripting in JFinalcms

com.jfinal:jfinal

Cross-site Scripting in JFinalcms

com.jfinal:jfinal

Cross-site Scripting in JFinalcms

squid, squid, squid, squid, squid, squid

squid, squid, squid

squid

CVE-2023-50269 affecting package squid 5.7-5

squid3, squid3, squid, squid, squid

Speckle Server API Token Privilege Escalation

Keycloak: offline session token dos

vim, vim, vim, vim, vim

vim vulnerabilities

Hono's named path parameters can be overridden in TrieRouter

SQUID-2023:10 Denial of Service in HTTP Request parsing

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2022-48560

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix of 5 CVEs

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix of 5 CVEs

Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2022-48560

Buffer overflow due to use of `strcpy` in `performRtspHandshake`

yajl, yajl

yajl vulnerabilities

Buffer overflow due to use of `strcpy` in `parseUrlAddrFromRtspUrlString`

audiofile, audiofile, audiofile, audiofile, audiofile

audiofile vulnerabilities

kernel-livepatch-SLE15-SP3_Update_27

Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)