Open Source Vulnerabilities
trafficserver
trafficserver - security update
requests-xml
requests-xml XML External Entity Injection vulnerability
requests-xml
requests-xml XML External Entity Injection vulnerability
py-xml
py-xml XML External Entity Injection vulnerability
py-xml
py-xml XML External Entity Injection vulnerability
easy-parse
easy-parse XML External Entity Injection vulnerability
easy-parse
easy-parse XML External Entity Injection vulnerability
linux-buildinfo-4.4.0-241-tuxcare.els12-generic, linux-buildinfo-4.4.0-241-tuxcare.els12-lowlatency, linux-cloud-tools-4.4.0-241-tuxcare.els12, linux-cloud-tools-4.4.0-241-tuxcare.els12-generic, linux-cloud-tools-4.4.0-241-tuxcare.els12-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-241-tuxcare.els12, linux-headers-4.4.0-241-tuxcare.els12-generic, linux-headers-4.4.0-241-tuxcare.els12-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-241-tuxcare.els12-generic, linux-image-unsigned-4.4.0-241-tuxcare.els12-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-241-tuxcare.els12-generic, linux-modules-4.4.0-241-tuxcare.els12-lowlatency, linux-modules-extra-4.4.0-241-tuxcare.els12-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-241-tuxcare.els12, linux-tools-4.4.0-241-tuxcare.els12-generic, linux-tools-4.4.0-241-tuxcare.els12-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency
Fix of 5 CVEs
linux-buildinfo-4.4.0-241-tuxcare.els12-generic/ linux-buildinfo-4.4.0-241-tuxcare.els12-lowlatency/ linux-cloud-tools-4.4.0-241-tuxcare.els12/ linux-cloud-tools-4.4.0-241-tuxcare.els12-generic/ linux-cloud-tools-4.4.0-241-tuxcare.els12-lowlatency/ linux-cloud-tools-common/ linux-cloud-tools-generic/ linux-cloud-tools-lowlatency/ linux-crashdump/ linux-doc/ linux-generic/ linux-headers-4.4.0-241-tuxcare.els12/ linux-headers-4.4.0-241-tuxcare.els12-generic/ linux-headers-4.4.0-241-tuxcare.els12-lowlatency/ linux-headers-generic/ linux-headers-lowlatency/ linux-image-generic/ linux-image-lowlatency/ linux-image-unsigned-4.4.0-241-tuxcare.els12-generic/ linux-image-unsigned-4.4.0-241-tuxcare.els12-lowlatency/ linux-libc-dev/ linux-lowlatency/ linux-modules-4.4.0-241-tuxcare.els12-generic/ linux-modules-4.4.0-241-tuxcare.els12-lowlatency/ linux-modules-extra-4.4.0-241-tuxcare.els12-generic/ linux-source/ linux-source-4.4.0/ linux-tools-4.4.0-241-tuxcare.els12/ linux-tools-4.4.0-241-tuxcare.els12-generic/ linux-tools-4.4.0-241-tuxcare.els12-lowlatency/ linux-tools-common/ linux-tools-generic/ linux-tools-host/ linux-tools-lowlatency
Fix of 5 CVEs
linux-buildinfo-4.4.0-241-tuxcare.els12-generic, linux-buildinfo-4.4.0-241-tuxcare.els12-lowlatency, linux-cloud-tools-4.4.0-241-tuxcare.els12, linux-cloud-tools-4.4.0-241-tuxcare.els12-generic, linux-cloud-tools-4.4.0-241-tuxcare.els12-lowlatency, linux-cloud-tools-common, linux-cloud-tools-generic, linux-cloud-tools-lowlatency, linux-crashdump, linux-doc, linux-generic, linux-headers-4.4.0-241-tuxcare.els12, linux-headers-4.4.0-241-tuxcare.els12-generic, linux-headers-4.4.0-241-tuxcare.els12-lowlatency, linux-headers-generic, linux-headers-lowlatency, linux-image-generic, linux-image-lowlatency, linux-image-unsigned-4.4.0-241-tuxcare.els12-generic, linux-image-unsigned-4.4.0-241-tuxcare.els12-lowlatency, linux-libc-dev, linux-lowlatency, linux-modules-4.4.0-241-tuxcare.els12-generic, linux-modules-4.4.0-241-tuxcare.els12-lowlatency, linux-modules-extra-4.4.0-241-tuxcare.els12-generic, linux-source, linux-source-4.4.0, linux-tools-4.4.0-241-tuxcare.els12, linux-tools-4.4.0-241-tuxcare.els12-generic, linux-tools-4.4.0-241-tuxcare.els12-lowlatency, linux-tools-common, linux-tools-generic, linux-tools-host, linux-tools-lowlatency
Fix of 5 CVEs
linux-buildinfo-4.4.0-241-tuxcare.els12-generic/ linux-buildinfo-4.4.0-241-tuxcare.els12-lowlatency/ linux-cloud-tools-4.4.0-241-tuxcare.els12/ linux-cloud-tools-4.4.0-241-tuxcare.els12-generic/ linux-cloud-tools-4.4.0-241-tuxcare.els12-lowlatency/ linux-cloud-tools-common/ linux-cloud-tools-generic/ linux-cloud-tools-lowlatency/ linux-crashdump/ linux-doc/ linux-generic/ linux-headers-4.4.0-241-tuxcare.els12/ linux-headers-4.4.0-241-tuxcare.els12-generic/ linux-headers-4.4.0-241-tuxcare.els12-lowlatency/ linux-headers-generic/ linux-headers-lowlatency/ linux-image-generic/ linux-image-lowlatency/ linux-image-unsigned-4.4.0-241-tuxcare.els12-generic/ linux-image-unsigned-4.4.0-241-tuxcare.els12-lowlatency/ linux-libc-dev/ linux-lowlatency/ linux-modules-4.4.0-241-tuxcare.els12-generic/ linux-modules-4.4.0-241-tuxcare.els12-lowlatency/ linux-modules-extra-4.4.0-241-tuxcare.els12-generic/ linux-source/ linux-source-4.4.0/ linux-tools-4.4.0-241-tuxcare.els12/ linux-tools-4.4.0-241-tuxcare.els12-generic/ linux-tools-4.4.0-241-tuxcare.els12-lowlatency/ linux-tools-common/ linux-tools-generic/ linux-tools-host/ linux-tools-lowlatency
Fix of 5 CVEs
Upgrading doesn't prevent exploiting vulnerable XWiki documents
Upgrading doesn't prevent exploiting vulnerable XWiki documents
Code injection through NotificationRSSService in XWiki Platform
Code injection through NotificationRSSService in XWiki Platform
Code injection in icon themes of XWiki Platform
curl, libcurl3-gnutls, libcurl3-nss, libcurl4, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev
Fix CVE(s): CVE-2023-28322, CVE-2023-28321
curl/ libcurl3-gnutls/ libcurl3-nss/ libcurl4/ libcurl4-doc/ libcurl4-gnutls-dev/ libcurl4-nss-dev/ libcurl4-openssl-dev
Fix CVE(s): CVE-2023-28322, CVE-2023-28321
busybox, busybox-initramfs, busybox-static, busybox-syslogd, udhcpc, udhcpd
Fix CVE(s): CVE-2022-28391
busybox/ busybox-initramfs/ busybox-static/ busybox-syslogd/ udhcpc/ udhcpd
Fix CVE(s): CVE-2022-28391
exim4, exim4-base, exim4-config, exim4-daemon-heavy, exim4-daemon-light, exim4-dev, eximon4
Fix CVE(s): CVE-2021-38371
exim4/ exim4-base/ exim4-config/ exim4-daemon-heavy/ exim4-daemon-light/ exim4-dev/ eximon4
Fix CVE(s): CVE-2021-38371
curl, libcurl3, libcurl3-gnutls, libcurl3-nss, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev
Fix CVE(s): CVE-2023-28322
curl/ libcurl3/ libcurl3-gnutls/ libcurl3-nss/ libcurl4-doc/ libcurl4-gnutls-dev/ libcurl4-nss-dev/ libcurl4-openssl-dev
Fix CVE(s): CVE-2023-28322
lemon, sqlite, sqlite-analyzer, sqlite-devel, sqlite-doc, sqlite-libs, sqlite-tcl
sqlite: Fix of CVE-2020-24736
lemon/ sqlite/ sqlite-analyzer/ sqlite-devel/ sqlite-doc/ sqlite-libs/ sqlite-tcl
sqlite: Fix of CVE-2020-24736
libtiff
CVE-2023-26966 affecting package libtiff for versions less than 4.5.1-1
libtiff
CVE-2023-26966 affecting package libtiff for versions less than 4.5.1-1
libtiff
CVE-2023-25433 affecting package libtiff for versions less than 4.5.1-1
libtiff
CVE-2023-25433 affecting package libtiff for versions less than 4.5.1-1
mysql, mysql-common, mysql-devel, mysql-errmsg, mysql-libs, mysql-server, mysql-test
mysql: Fix of 37 CVEs
mysql/ mysql-common/ mysql-devel/ mysql-errmsg/ mysql-libs/ mysql-server/ mysql-test
mysql: Fix of 37 CVEs
curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal
curl: Fix of 2 CVEs
curl/ curl-minimal/ libcurl/ libcurl-devel/ libcurl-minimal
curl: Fix of 2 CVEs
lemon, sqlite, sqlite-analyzer, sqlite-devel, sqlite-doc, sqlite-libs, sqlite-tcl
sqlite: Fix of CVE-2020-24736
lemon/ sqlite/ sqlite-analyzer/ sqlite-devel/ sqlite-doc/ sqlite-libs/ sqlite-tcl
sqlite: Fix of CVE-2020-24736
mysql, mysql-common, mysql-devel, mysql-errmsg, mysql-libs, mysql-server, mysql-test
mysql: Fix of 37 CVEs
mysql/ mysql-common/ mysql-devel/ mysql-errmsg/ mysql-libs/ mysql-server/ mysql-test
mysql: Fix of 37 CVEs
curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal
curl: Fix of 2 CVEs
curl/ curl-minimal/ libcurl/ libcurl-devel/ libcurl-minimal
curl: Fix of 2 CVEs
HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml
HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml
User access not updated with privilege change in Tuleap
