Open Source Vulnerabilities

poppler, poppler, poppler, poppler, poppler

Security update for poppler

openssl-1_1, openssl-1_1, openssl-1_1, openssl-1_1

Security update for openssl-1_1

qatengine, qatengine

Security update for qatengine

ucode-intel

Security update for ucode-intel

java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk, java-11-openjdk

Security update for java-11-openjdk

gitpython

GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

apache-airflow-providers-apache-drill

apache-airflow-providers-apache-drill Improper Input Validation vulnerability

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost does not validate requesting user permissions before updating admin details

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost fails to sanitize post metadata

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost fails to correctly delete attachments

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost fails to check if user is a guest before performing actions on public playbooks

cloud-init, cloud-init, cloud-init, cloud-init, cloud-init, cloud-init, cloud-init

Feature update for cloud-init

apache-airflow

Apache Airflow Drill Provider Arbitrary File Read Vulnerability

python-git, python-git, python-git

gitpython

python-git, python-git, python-git, python-git, python-git

python-scipy_1_3_3-gnu-hpc, python-scipy_1_3_3-gnu-hpc, python-scipy, python-scipy, python-scipy_1_3_3-gnu-hpc, python-scipy, python-scipy_1_3_3-gnu-hpc, python-scipy, python-scipy_1_3_3-gnu-hpc

Security update for python-scipy

php8.2

php

CVE-2023-3824 affecting package php for versions less than 8.2.8-1

php

CVE-2023-3824 affecting package php for versions less than 8.1.22-1

php8.2

php

CVE-2023-3823 affecting package php for versions less than 8.2.8-1

php

CVE-2023-3823 affecting package php for versions less than 8.1.22-1

php5, php7.0, php7.2, php7.4, php8.1

php5, php7.0, php7.2, php7.4, php8.1

Audit logging fails to sanitize post metadata

Incorrect authorization allows a user manager to update a system admin

A guest user can perform various actions on public playbooks

Attachment of deleted message in a thread remains accessible and downloadable

Buffer overflow and overread in phar_dir_read()

Security issue with external entity loading in XML without enabling it

intel-tensorflow, tensorflow-intel, intel-tensorflow-avx512

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

froxlor/froxlor

Froxlor vulnerable to business logic errors