Open Source Vulnerabilities

DataEase has a privilege bypass vulnerability

Blind SSRF When Uploading Presentation in BigBlueButton

LookupResources may return partial results in spicedb

OpenFGA denial of service die to circular relationship

jquery, jquery, jquery, jquery

tinymce, tinymce, tinymce

github.com/notaryproject/notation-go

Verification bypass in github.com/notaryproject/notation-go

exim4, exim4-base, exim4-config, exim4-daemon-heavy, exim4-daemon-light, exim4-dev, eximon4

Fix CVE(s): CVE-2021-38371

binutils, binutils-aarch64-linux-gnu, binutils-alpha-linux-gnu, binutils-arm-linux-gnueabi, binutils-arm-linux-gnueabihf, binutils-dev, binutils-doc, binutils-hppa-linux-gnu, binutils-hppa64-linux-gnu, binutils-m68k-linux-gnu, binutils-mips-linux-gnu, binutils-mips64-linux-gnuabi64, binutils-mips64el-linux-gnuabi64, binutils-mipsel-linux-gnu, binutils-multiarch, binutils-multiarch-dev, binutils-powerpc-linux-gnu, binutils-powerpc-linux-gnuspe, binutils-powerpc64-linux-gnu, binutils-powerpc64le-linux-gnu, binutils-s390x-linux-gnu, binutils-sh4-linux-gnu, binutils-source, binutils-sparc64-linux-gnu

Fix CVE(s): CVE-2023-25584, CVE-2017-12450, CVE-2023-25588, CVE-2023-25585

exim, exim-greylist, exim-mon, exim-mysql, exim-pgsql

exim: Fix of CVE-2021-38371

exim, exim-greylist, exim-mon, exim-mysql, exim-pgsql

exim: Fix of CVE-2021-38371

github.com/corazawaf/coraza/v3, github.com/corazawaf/coraza/v2

Coraza has potential denial of service vulnerability

clamav

Memcpy-param-overlap in repeat

fluent-bit

Heap-use-after-free in mk_event_timeout_destroy

python39, python39-core, python39, python39-core, python39-documentation, python39, python39-core, python39-documentation

Security update for python39

python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python, python-base, python-doc, python-base

Security update for python

python-requests, python-requests, python-requests, python-requests

Security update for python-requests

sccache, sccache, sccache, sccache, sccache, sccache, sccache

Security update for sccache

openssl

Security update for openssl

openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0, openssl-1_0_0

Security update for openssl-1_0_0

WordPress Connections Business Directory Plugin <= 10.4.36 is vulnerable to Cross Site Scripting (XSS)

lmdb-rs

impl `FromMdbValue` for bool is unsound

postgresql-jdbc, postgresql-jdbc, postgresql-jdbc, postgresql-jdbc

postgresql-jdbc security update

Denial of Service in jgraph/drawio