Open Source Vulnerabilities

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

chromium, chromium, chromium

libecap, libecap, libecap-devel, libecap-devel, squid

Important: squid:4 security update

bluez, bluez, bluez, bluez, bluez

golang-1.20, golang-1.21, golang-1.20, golang-1.21

golang-1.20, golang-1.21, golang-1.20, golang-1.21

pydrive2, pydrive2

PyDrive2's unsafe YAML deserialization in LoadSettingsFile allows arbitrary code execution

tokio-boring

tokio-boring vulnerable to resource exhaustion via memory leak

haproxy, haproxy

Security update for haproxy

github.com/canonical/lxd, github.com/canonical/lxd

Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true

vite, vite, vite

Vite XSS vulnerability in `server.transformIndexHtml` via URL payload

github.com/ecies/go/v2

github.com/ecies/go vulnerable to possible private key restoration

tj-actions/branch-names

tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

github.com/lestrrat-go/jwx, github.com/lestrrat-go/jwx/v2

lestrrat-go/jwx's malicious parameters in JWE can cause a DOS

linux-aws-6.2, linux-azure-6.2, linux-azure-fde-6.2

linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde-6.2, linux-lowlatency, linux-oracle, linux-raspi, linux-starfive vulnerabilities

microsoft/microsoft-graph-beta

Test code in published microsoft-graph-beta package exposes phpinfo()

microsoft/microsoft-graph-core

Test code in published microsoft-graph-core package exposes phpinfo()

microsoft/microsoft-graph, microsoft/microsoft-graph

Test code in published microsoft-graph package exposes phpinfo()

Test code in published microsoft-graph-core package exposes phpinfo()

Test code in published microsoft-graph package exposes phpinfo()

samba

Updated samba packages fix security vulnerabilities

linux-oem-6.1

linux-oem-6.1 vulnerabilities

pydrive2

pydrive2, pydrive2

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Server-Side Request Forgery in espocrm

Unsafe YAML deserialization in PyDrive2

org.xwiki.contrib.changerequest:application-changerequest-default

Data leak of password hash through change requests

linux-buildinfo-4.4.0-249-tuxcare.els20-generic, linux-buildinfo-4.4.0-249-tuxcare.els20-lowlatency, linux-cloud-tools-4.4.0-249-tuxcare.els20, linux-cloud-tools-4.4.0-249-tuxcare.els20-generic, linux-cloud-tools-4.4.0-249-tuxcare.els20-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-249-tuxcare.els20, linux-headers-4.4.0-249-tuxcare.els20-generic, linux-headers-4.4.0-249-tuxcare.els20-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-249-tuxcare.els20-generic, linux-image-unsigned-4.4.0-249-tuxcare.els20-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-249-tuxcare.els20-generic, linux-modules-4.4.0-249-tuxcare.els20-lowlatency, linux-modules-extra-4.4.0-249-tuxcare.els20-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-249-tuxcare.els20, linux-tools-4.4.0-249-tuxcare.els20-generic, linux-tools-4.4.0-249-tuxcare.els20-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

Fix of 8 CVEs

org.elasticsearch:elasticsearch-hadoop, org.elasticsearch:elasticsearch-hadoop

Elasticsearch-hadoop Unsafe Deserialization

jupyter-server

jupyter-server errors include tracebacks with path information

github.com/traefik/traefik/v2, github.com/traefik/traefik/v3

Traefik docker container using 100% CPU

linux-buildinfo-4.4.0-249-tuxcare.els20-generic, linux-buildinfo-4.4.0-249-tuxcare.els20-lowlatency, linux-cloud-tools-4.4.0-249-tuxcare.els20, linux-cloud-tools-4.4.0-249-tuxcare.els20-generic, linux-cloud-tools-4.4.0-249-tuxcare.els20-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-249-tuxcare.els20, linux-headers-4.4.0-249-tuxcare.els20-generic, linux-headers-4.4.0-249-tuxcare.els20-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-249-tuxcare.els20-generic, linux-image-unsigned-4.4.0-249-tuxcare.els20-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-249-tuxcare.els20-generic, linux-modules-4.4.0-249-tuxcare.els20-lowlatency, linux-modules-extra-4.4.0-249-tuxcare.els20-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-249-tuxcare.els20, linux-tools-4.4.0-249-tuxcare.els20-generic, linux-tools-4.4.0-249-tuxcare.els20-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

Fix of 8 CVEs

github.com/traefik/traefik/v2, github.com/traefik/traefik/v3

Traefik vulnerable to potential DDoS via ACME HTTPChallenge

github.com/traefik/traefik/v2, github.com/traefik/traefik/v3

Traefik incorrectly processes fragment in the URL, leads to Authorization Bypass