Open Source Vulnerabilities

sentry

Sentry vulnerable to incorrect credential validation on OAuth token requests

github.com/supranational/blst

Blst has logical error in SigValidate in Go bindings

openssh, openssh-askpass, openssh-cavs, openssh-clients, openssh-keycat, openssh-ldap, openssh-server, pam_ssh_agent_auth

openssh: Fix of CVE-2023-38408

ctdb, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-devel, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-devel, samba-krb5-printing, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

samba: Fix of 2 CVEs

openssh, openssh-askpass, openssh-cavs, openssh-clients, openssh-keycat, openssh-ldap, openssh-server, pam_ssh_agent_auth

openssh: Fix of CVE-2023-38408

github.com/hashicorp/consul

Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers

Sentry vulnerable to incorrect credential validation on OAuth token requests

uthenticode signature validation bypass vulnerability

uthenticode EKU validation bypass

grpcio, grpcio, grpcio, grpcio, grpc, grpc, grpc, grpc

Excessive Iteration in gRPC

linux, linux, linux

kernel

CVE-2023-4273 affecting package kernel for versions less than 5.15.131.1-2

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-nvidia-6.2, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-starfive-5.19, linux-xilinx-zynqmp, linux-bluefield, linux-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

CVE-2023-4273 does not affect BellSoft software

JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access

ses, ses, ses, ses, ses, ses

SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution