Open Source Vulnerabilities

Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences

kernel-rt

Important: kernel-rt security and bug fix update

firefox

Important: firefox security update

dotnet6.0

Moderate: .NET 6.0 security update

httpd, mod_http2, mod_md

Moderate: httpd:2.4 security update

blurhash

blurhash: panic on parsing crafted blurhash inputs

phonenumber

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

kernel-livepatch-SLE15-SP4-RT_Update_8, kernel-livepatch-SLE15-SP5-RT_Update_1

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)

kernel-livepatch-SLE15-SP4-RT_Update_1, kernel-livepatch-SLE15-SP5-RT_Update_0

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

kernel-livepatch-SLE15-SP4-RT_Update_9

Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4)

kernel-livepatch-SLE15-SP4-RT_Update_7

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

python-brotlipy

Security update for python-brotlipy

python-brotlipy, python-brotlipy

Security update for python-brotlipy

kernel-livepatch-SLE15-SP4-RT_Update_5

Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

chromium, chromium, chromium, chromium

Security update for chromium

mpfr4, mpfr4

nodejs, nodejs, nodejs

nodejs vulnerabilities

Incorrect Authorization in GitLab

blamer

blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API

jodit

Jodit Editor vulnerable to cross-site scripting

librenms/librenms

Cross site scripting in librenms

github.com/nats-io/nats-server

NATS nats-server allows directory traversal via unintended path to a management action

nats-server, nats-server, nats-server

Cross-site Scripting (XSS) - DOM in librenms/librenms

neos/media-browser, neos/media-browser, neos/media-browser, neos/media-browser, neos/media-browser

Neos CMS Cross Site Scripting vulnerability

frr

frr - security update

libyang

libyang - security update

openjdk-11

openjdk-11 - security update

pg_repack, pgaudit, postgres-decoderbufs, postgresql, postgresql-contrib, postgresql-docs, postgresql-plperl, postgresql-plpython3, postgresql-pltcl, postgresql-private-devel, postgresql-private-libs, postgresql-server, postgresql-server-devel, postgresql-static, postgresql-test, postgresql-test-rpm-macros, postgresql-upgrade, postgresql-upgrade-devel

Moderate: postgresql:15 security update

SLOF, hivex, hivex, hivex-devel, hivex-devel, libguestfs, libguestfs-appliance, libguestfs-bash-completion, libguestfs-devel, libguestfs-gfs2, libguestfs-gobject, libguestfs-gobject-devel, libguestfs-inspect-icons, libguestfs-java, libguestfs-java-devel, libguestfs-javadoc, libguestfs-man-pages-ja, libguestfs-man-pages-uk, libguestfs-rescue, libguestfs-rsync, libguestfs-tools, libguestfs-tools-c, libguestfs-winsupport, libguestfs-xfs, libiscsi, libiscsi, libiscsi-devel, libiscsi-devel, libiscsi-utils, libiscsi-utils, libnbd, libnbd, libnbd-bash-completion, libnbd-devel, libnbd-devel, libtpms, libtpms-devel, libvirt, libvirt-client, libvirt-daemon, libvirt-daemon-config-network, libvirt-daemon-config-nwfilter, libvirt-daemon-driver-interface, libvirt-daemon-driver-network, libvirt-daemon-driver-nodedev, libvirt-daemon-driver-nwfilter, libvirt-daemon-driver-qemu, libvirt-daemon-driver-secret, libvirt-daemon-driver-storage, libvirt-daemon-driver-storage-core, libvirt-daemon-driver-storage-disk, libvirt-daemon-driver-storage-gluster, libvirt-daemon-driver-storage-iscsi, libvirt-daemon-driver-storage-iscsi-direct, libvirt-daemon-driver-storage-logical, libvirt-daemon-driver-storage-mpath, libvirt-daemon-driver-storage-rbd, libvirt-daemon-driver-storage-scsi, libvirt-daemon-kvm, libvirt-dbus, libvirt-dbus, libvirt-devel, libvirt-docs, libvirt-libs, libvirt-lock-sanlock, libvirt-nss, libvirt-wireshark, lua-guestfs, nbdfuse, nbdfuse, nbdkit, nbdkit-bash-completion, nbdkit-basic-filters, nbdkit-basic-plugins, nbdkit-curl-plugin, nbdkit-devel, nbdkit-example-plugins, nbdkit-gzip-filter, nbdkit-gzip-plugin, nbdkit-linuxdisk-plugin, nbdkit-nbd-plugin, nbdkit-python-plugin, nbdkit-server, nbdkit-ssh-plugin, nbdkit-tar-filter, nbdkit-tar-plugin, nbdkit-tmpdisk-plugin, nbdkit-vddk-plugin, nbdkit-xz-filter, netcf, netcf, netcf-devel, netcf-devel, netcf-libs, netcf-libs, ocaml-hivex, ocaml-hivex, ocaml-hivex-devel, ocaml-hivex-devel, ocaml-libguestfs, ocaml-libguestfs-devel, ocaml-libnbd, ocaml-libnbd, ocaml-libnbd-devel, ocaml-libnbd-devel, perl-Sys-Guestfs, perl-Sys-Virt, perl-Sys-Virt, perl-hivex, perl-hivex, python3-hivex, python3-hivex, python3-libguestfs, python3-libnbd, python3-libnbd, python3-libvirt, qemu-guest-agent, qemu-img, qemu-kvm, qemu-kvm-block-curl, qemu-kvm-block-gluster, qemu-kvm-block-iscsi, qemu-kvm-block-rbd, qemu-kvm-block-ssh, qemu-kvm-common, qemu-kvm-core, qemu-kvm-docs, qemu-kvm-hw-usbredir, qemu-kvm-tests, qemu-kvm-ui-opengl, qemu-kvm-ui-spice, ruby-hivex, ruby-hivex, ruby-libguestfs, seabios, seabios-bin, seavgabios-bin, sgabios, sgabios-bin, supermin, supermin-devel, swtpm, swtpm-devel, swtpm-libs, swtpm-tools, swtpm-tools-pkcs11, virt-dib, virt-v2v, virt-v2v-bash-completion, virt-v2v-man-pages-ja, virt-v2v-man-pages-uk

Important: virt:rhel and virt-devel:rhel security and bug fix update

Judy, Judy, galera, mariadb, mariadb-backup, mariadb-common, mariadb-devel, mariadb-embedded, mariadb-embedded-devel, mariadb-errmsg, mariadb-gssapi-server, mariadb-oqgraph-engine, mariadb-server, mariadb-server-galera, mariadb-server-utils, mariadb-test

Moderate: mariadb:10.3 security, bug fix, and enhancement update