Open Source Vulnerabilities

https://github.com/pytorch/pytorch/.github/actions/filter-test-configs

Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)

linux-buildinfo-4.15.0-213-tuxcare.els1-generic, linux-buildinfo-4.15.0-213-tuxcare.els1-lowlatency, linux-cloud-tools-4.15.0-213-tuxcare.els1, linux-cloud-tools-4.15.0-213-tuxcare.els1-generic, linux-cloud-tools-4.15.0-213-tuxcare.els1-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.15.0-213-tuxcare.els1, linux-headers-4.15.0-213-tuxcare.els1-generic, linux-headers-4.15.0-213-tuxcare.els1-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.15.0-213-tuxcare.els1-generic, linux-image-unsigned-4.15.0-213-tuxcare.els1-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.15.0-213-tuxcare.els1-generic, linux-modules-4.15.0-213-tuxcare.els1-lowlatency, linux-modules-extra-4.15.0-213-tuxcare.els1-generic, linux-source, linux-source-4.15.0, linux-tools-4.15.0-213-tuxcare.els1, linux-tools-4.15.0-213-tuxcare.els1-generic, linux-tools-4.15.0-213-tuxcare.els1-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

Update of alt-php

linux-buildinfo-4.15.0-213-tuxcare.els1-generic, linux-buildinfo-4.15.0-213-tuxcare.els1-lowlatency, linux-cloud-tools-4.15.0-213-tuxcare.els1, linux-cloud-tools-4.15.0-213-tuxcare.els1-generic, linux-cloud-tools-4.15.0-213-tuxcare.els1-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.15.0-213-tuxcare.els1, linux-headers-4.15.0-213-tuxcare.els1-generic, linux-headers-4.15.0-213-tuxcare.els1-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.15.0-213-tuxcare.els1-generic, linux-image-unsigned-4.15.0-213-tuxcare.els1-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.15.0-213-tuxcare.els1-generic, linux-modules-4.15.0-213-tuxcare.els1-lowlatency, linux-modules-extra-4.15.0-213-tuxcare.els1-generic, linux-source, linux-source-4.15.0, linux-tools-4.15.0-213-tuxcare.els1, linux-tools-4.15.0-213-tuxcare.els1-generic, linux-tools-4.15.0-213-tuxcare.els1-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency

Update of alt-php

bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

kernel: Fix of 20 CVEs

bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

kernel: Fix of 18 CVEs

gitpython

GitPython blind local file inclusion

borgbackup

Archive spoofing vulnerability in borgbackup

find-exec

Command Injection Vulnerability in find-exec

vim, vim, vim

Security update for vim

xen, xen, xen, xen

Security update for xen

xen, xen, xen

Security update for xen

xen, xen, xen

Security update for xen

imagemagick, imagemagick-6-common, imagemagick-6-doc, imagemagick-6.q16, imagemagick-6.q16hdri, imagemagick-common, imagemagick-doc, libimage-magick-perl, libimage-magick-q16-perl, libimage-magick-q16hdri-perl, libmagick++-6-headers, libmagick++-6.q16-7, libmagick++-6.q16-dev, libmagick++-6.q16hdri-7, libmagick++-6.q16hdri-dev, libmagick++-dev, libmagickcore-6-arch-config, libmagickcore-6-headers, libmagickcore-6.q16-3, libmagickcore-6.q16-3-extra, libmagickcore-6.q16-dev, libmagickcore-6.q16hdri-3, libmagickcore-6.q16hdri-3-extra, libmagickcore-6.q16hdri-dev, libmagickcore-dev, libmagickwand-6-headers, libmagickwand-6.q16-3, libmagickwand-6.q16-dev, libmagickwand-6.q16hdri-3, libmagickwand-6.q16hdri-dev, libmagickwand-dev, perlmagick

Update of alt-php

libssl-dev, libssl-doc, libssl1.1, openssl

Fix CVE(s): CVE-2023-3817

intel-microcode

Fix CVE(s): CVE-2022-40982, CVE-2023-23908, CVE-2022-41804

imagemagick, imagemagick-6.q16, imagemagick-common, imagemagick-doc, libimage-magick-perl, libimage-magick-q16-perl, libmagick++-6-headers, libmagick++-6.q16-5v5, libmagick++-6.q16-dev, libmagick++-dev, libmagickcore-6-arch-config, libmagickcore-6-headers, libmagickcore-6.q16-2, libmagickcore-6.q16-2-extra, libmagickcore-6.q16-dev, libmagickcore-dev, libmagickwand-6-headers, libmagickwand-6.q16-2, libmagickwand-6.q16-dev, libmagickwand-dev, perlmagick

Update of alt-php

libssl-dev, libssl-doc, libssl1.0.0, openssl

Fix CVE(s): CVE-2023-3817

restrictedpython, restrictedpython, restrictedpython

xrdp, xrdp, xrdp

borgbackup, borgbackup, borgbackup

borgbackup

restrictedpython

restrictedpython, restrictedpython

xrdp, xrdp, xrdp, xrdp, xrdp, xrdp

borgbackup, borgbackup, borgbackup, borgbackup, borgbackup

intel-microcode

Fix CVE(s): CVE-2022-41804, CVE-2023-23908, CVE-2022-40982

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

openssl: Fix of CVE-2023-3817

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

openssl: Fix of CVE-2023-3817

amanda, amanda-client, amanda-devel, amanda-server

Update of amanda

Improper handling of session establishment errors in xrdp

microcode_ctl

microcode_ctl: Fix of CVE-2022-40982

Command Injection Vulnerability in find-exec

Archive spoofing vulnerability in borgbackup

amanda, amanda-client, amanda-devel, amanda-server

Update of amanda

Sandbox escape via various forms of "format" in RestrictedPython