Open Source Vulnerabilities

elasticsearch

postgresql13, postgresql11, postgresql15, postgresql13

Updated postgresql packages fix security vulnerabilities

,

,

,

firefox-esr, firefox-esr

firefox-esr - security update

,

ctdb, libnetapi, libnetapi-devel, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-dc, python3-samba-devel, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-dc-libs, samba-dcerpc, samba-devel, samba-krb5-printing, samba-ldb-ldap-modules, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-tools, samba-usershares, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

Moderate: samba security update

squid

Important: squid security update

tor

tor - security update

gnutls28

gnutls28 - security update

nautobot-device-onboarding

Clear Text Credentials Exposed via Onboarding Task

nautobot-device-onboarding

Statamic CMS vulnerable to Cross-site Scripting via uploaded assets

Clear Text Credentials Exposed via Onboarding Task

Nextcloud Mail app vulnerable to Server-Side Request Forgery

Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF

pyload-ng

Download to arbitrary folder can lead to RCE

fastbots

Eval Injection in fastbots

Nextcloud Server user_ldap app logs user passwords in the log file on level debug

github.com/go-jose/go-jose/v3, github.com/square/go-jose

Decryption of malicious PBES2 JWE objects can consume unbounded system resources

Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user

Nextcloud Server admins can change authentication details of user configured external storage

Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V

Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name

linux, linux

capnproto, capnproto

capnproto

CVE-2023-48230 affecting package capnproto 1.0.1-4

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-aws-6.8, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-6.8, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-azure-fde-6.8, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gcp-6.8, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.5, linux-hwe-6.8, linux-ibm-6.8, linux-intel-iot-realtime, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.5, linux-lowlatency-hwe-6.8, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-6.8, linux-oem-5.17, linux-oem-6.0, linux-oem-6.5, linux-oracle-6.5, linux-oracle-6.8, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-riscv-6.8, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-realtime-6.8, linux, linux-aws, linux-aws-6.14, linux-aws-6.17, linux-aws-7.0, linux-azure, linux-azure-6.11, linux-azure-6.14, linux-azure-6.17, linux-azure-7.0, linux-azure-fde, linux-azure-fde-6.14, linux-azure-fde-6.17, linux-azure-fde-7.0, linux-azure-nvidia, linux-azure-nvidia-6.14, linux-gcp, linux-gcp-6.11, linux-gcp-6.14, linux-gcp-6.17, linux-gcp-7.0, linux-gke, linux-gkeop, linux-hwe-6.11, linux-hwe-6.14, linux-hwe-6.17, linux-hwe-7.0, linux-ibm, linux-intel, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-nvidia, linux-nvidia-6.11, linux-nvidia-6.17, linux-nvidia-7.0, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oem-6.11, linux-oem-6.14, linux-oem-6.17, linux-oem-6.8, linux-oracle, linux-oracle-6.14, linux-oracle-6.17, linux-oracle-7.0, linux-raspi, linux-raspi-realtime, linux-realtime, linux-riscv, linux-riscv-6.14, linux-riscv-6.17, linux-riscv-7.0, linux-xilinx, linux-bluefield, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-raspi-realtime, linux-realtime, linux-realtime-6.14, linux-realtime-6.17, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-bos, linux-oem-7.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv

capnproto