Open Source Vulnerabilities

glib

CVE-2023-32665 affecting package glib for versions less than 2.71.0-4

glib

CVE-2023-29499 affecting package glib for versions less than 2.71.0-4

glib

CVE-2023-32611 affecting package glib for versions less than 2.71.0-4

CVE-2023-32665 does not affect BellSoft software

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-allwinner-5.19, linux-aws-5.19, linux-azure-5.19, linux-azure-fde-5.19, linux-gcp-5.19, linux-hwe-5.19, linux-lowlatency-hwe-5.19, linux-oem-5.17, linux-oem-6.0, linux-riscv, linux-riscv-5.19, linux-starfive-5.19

CVE-2023-29499 does not affect BellSoft software

CVE-2023-32611 does not affect BellSoft software

CVE-2023-32636 does not affect BellSoft software

CVE-2023-32643 does not affect BellSoft software

kgraft-patch-SLE12-SP5_Update_37, kernel-livepatch-SLE15-SP1_Update_33

Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)

phpipam Header redirect

wasmtime, wasmtime, wasmtime

Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

,

,

G_variant_byteswap() can take a long time with some non-normal inputs

,

Gvariant offset table entry size is not checked in is_normal()

,

Gvariant deserialisation does not match spec for non-normal data

gawk, gawk, gawk, gawk, gawk

gawk vulnerability

p7zip, p7zip, p7zip, p7zip, p7zip

dbus

dbus vulnerability

hamster-time-tracker, hamster-time-tracker, hamster-time-tracker

hamster-time-tracker, hamster-time-tracker, hamster-time-tracker, hamster-time-tracker

pocketmine/pocketmine-mp, pocketmine/pocketmine-mp

PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)

pocketmine/pocketmine-mp

PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey

org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-http

Jetty accepts "+" prefixed value in Content-Length

org.eclipse.jetty:jetty-servlets, org.eclipse.jetty:jetty-servlets, org.eclipse.jetty:jetty-servlets, org.eclipse.jetty.ee10:jetty-ee10-servlets, org.eclipse.jetty.ee9:jetty-ee9-servlets, org.eclipse.jetty.ee8:jetty-ee8-servlets

Jetty vulnerable to errant command quoting in CGI Servlet

io.undertow:undertow-core, io.undertow:undertow-core

Undertow denial of service vulnerability

undertow

undertow, undertow, undertow, undertow, undertow, undertow, undertow

libssh2, libssh2, libssh2, libssh2

libssh2 vulnerability

Undertow: infinite loop in sslconduit during close

modsecurity-apache, modsecurity-apache, modsecurity-apache, modsecurity-apache, modsecurity-apache

modsecurity-apache vulnerabilities

serenity

Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

movim

libwebp, libwebp

libwebp vulnerability