Open Source Vulnerabilities

dmidecode

Moderate: dmidecode security update

ncurses, ncurses-base, ncurses-c++-libs, ncurses-compat-libs, ncurses-devel, ncurses-libs, ncurses-term

Moderate: ncurses security update

iwl100-firmware, iwl1000-firmware, iwl105-firmware, iwl135-firmware, iwl2000-firmware, iwl2030-firmware, iwl3160-firmware, iwl3945-firmware, iwl4965-firmware, iwl5000-firmware, iwl5150-firmware, iwl6000-firmware, iwl6000g2a-firmware, iwl6000g2b-firmware, iwl6050-firmware, iwl7260-firmware, libertas-sd8686-firmware, libertas-sd8787-firmware, libertas-usb8388-firmware, libertas-usb8388-olpc-firmware, linux-firmware

Moderate: linux-firmware security update

thunderbird

Important: thunderbird security update

frr, frr-selinux

Important: frr security and bug fix update

libwebp, libwebp-devel, libwebp-tools

Important: libwebp security update

bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-doc, kernel-headers, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-modules, kernel-zfcpdump-modules-extra, perf, python3-perf

Important: kernel security, bug fix, and enhancement update

SQLpage vulnerable to public exposure of database credentials

@frangoteam/fuxa

A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

Pow Mnesia cache doesn't invalidate all expired keys on startup

vyper

vyper

camp, camp, camp, camp, camp, camp, camp

Vyper vulnerable to memory corruption in certain builtins utilizing `msize`

Vyper has incorrect re-entrancy lock when key is empty string

libxml2, libxml2-python, libxml2-python, libxml2, libxml2-python

Security update for libxml2

libxml2, libxml2, python-libxml2, libxml2, python-libxml2

Security update for libxml2

MozillaThunderbird, MozillaThunderbird, MozillaThunderbird, MozillaThunderbird, MozillaThunderbird, MozillaThunderbird

Security update for MozillaThunderbird

cross-nvptx-gcc7, gcc7, gcc7, gcc7

Security update for gcc7

gcc12, gcc12, gcc12, gcc12, gcc12, gcc12, gcc12, gcc12, cross-nvptx-gcc12, gcc12, gcc12-testresults, cross-nvptx-gcc12, gcc12, gcc12, gcc12, gcc12, cross-nvptx-gcc12, gcc12, gcc12-testresults, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, cross-nvptx-gcc12, gcc12, gcc12, gcc12, gcc12, gcc12, cross-nvptx-gcc12, gcc12, gcc12, gcc12, cross-nvptx-gcc12, gcc12, gcc12-testresults

Security update for gcc12

vyper

Vyper has incorrect re-entrancy lock when key is empty string

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2023-4735, CVE-2023-4733

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

vim: Fix of CVE-2023-4733

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

vim: Fix of CVE-2023-4733

binutils, binutils, binutils

binutils vulnerabilities

kernel-livepatch-SLE15-SP4_Update_15, kernel-livepatch-SLE15-SP5_Update_2

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)

glibc, glibc, glibc

glibc, glibc, glibc

glibc

CVE-2023-4806 affecting package glibc for versions less than 2.38-11

glibc

CVE-2023-4527 affecting package glibc for versions less than 2.38-11

glibc

CVE-2023-4806 affecting package glibc for versions less than 2.35-6

glibc, glibc, glibc, glibc

glibc, glibc, glibc, glibc

eglibc, glibc, glibc, glibc, glibc