Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    SUSE-SU-2023:1908-1
    Fix available
    Packages

    openssl-1_1, openssl-1_1, openssl-1_1

    Summary

    Security update for openssl-1_1

    Published
    19 Apr 2023
    SUSE-SU-2023:1907-1
    Fix available
    Packages

    openssl

    Summary

    Security update for openssl

    Published
    19 Apr 2023
    CVE-2023-2137
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    19 Apr 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    19 Apr 2023
    CVE-2023-2136
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-2135
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    19 Apr 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    19 Apr 2023
    CVE-2023-2134
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    Packages

    chromium, chromium, chromium

    Summary

    Published
    19 Apr 2023
    CVE-2023-2133
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    SUSE-SU-2023:1904-1
    Fix available
    Packages

    grafana, grafana

    Summary

    Security update for grafana

    Published
    19 Apr 2023
    SUSE-SU-2023:1903-1
    Fix available
    Packages

    grafana

    Summary

    Security update for SUSE Manager Client Tools

    Published
    19 Apr 2023
    SUSE-SU-2023:1902-1
    Fix available
    Packages

    grafana

    Summary

    Security update for SUSE Manager Client Tools

    Published
    19 Apr 2023
    USN-6025-1
    Fix available
    Packages

    linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi

    Summary

    linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

    Published
    19 Apr 2023
    USN-6024-1
    Fix available
    Packages

    linux-hwe-5.19

    Summary

    linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.19, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi vulnerabilities

    Published
    19 Apr 2023
    Packages

    pypy3, pypy3, pypy3, python3.11

    Summary

    Published
    19 Apr 2023
    Packages

    python3, python3, python3, python3, python3, python3, python3, python3

    Summary

    Published
    19 Apr 2023
    CVE-2021-28254
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    AZL-35144
    Fix available
    Packages

    python3

    Summary

    CVE-2023-27043 affecting package python3 for versions less than 3.12.3-6

    Published
    19 Apr 2023
    AZL-31167
    Fix available
    Packages

    python3

    Summary

    CVE-2023-27043 affecting package python3 for versions less than 3.9.19-9

    Published
    19 Apr 2023
    Packages

    python2.7, python3.5, python3.4, python2.7, python3.5, python2.7, python3.6, python3.7, python3.8, python3.8, python2.7, python3.9, python3.10, python2.7, python3.11, python3.12

    Summary

    Published
    19 Apr 2023
    DLA-3395-1
    Fix available
    Packages

    golang-1.11

    Summary

    golang-1.11 - security update

    Published
    19 Apr 2023
    DLA-3394-1
    Fix available
    Packages

    asterisk

    Summary

    asterisk - security update

    Published
    19 Apr 2023
    CVE-2023-30463
    Fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-29923
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-29922
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-29921
    No fix available
    Packages

    Summary

    Published
    19 Apr 2023
    ALSA-2023:1879
    Fix available
    Packages

    java-17-openjdk, java-17-openjdk-demo, java-17-openjdk-demo-fastdebug, java-17-openjdk-demo-slowdebug, java-17-openjdk-devel, java-17-openjdk-devel-fastdebug, java-17-openjdk-devel-slowdebug, java-17-openjdk-fastdebug, java-17-openjdk-headless, java-17-openjdk-headless-fastdebug, java-17-openjdk-headless-slowdebug, java-17-openjdk-javadoc, java-17-openjdk-javadoc-zip, java-17-openjdk-jmods, java-17-openjdk-jmods-fastdebug, java-17-openjdk-jmods-slowdebug, java-17-openjdk-slowdebug, java-17-openjdk-src, java-17-openjdk-src-fastdebug, java-17-openjdk-src-slowdebug, java-17-openjdk-static-libs, java-17-openjdk-static-libs-fastdebug, java-17-openjdk-static-libs-slowdebug

    Summary

    Important: java-17-openjdk security and bug fix update

    Published
    19 Apr 2023
    ALSA-2023:1880
    Fix available
    Packages

    java-11-openjdk, java-11-openjdk-demo, java-11-openjdk-demo-fastdebug, java-11-openjdk-demo-slowdebug, java-11-openjdk-devel, java-11-openjdk-devel-fastdebug, java-11-openjdk-devel-slowdebug, java-11-openjdk-fastdebug, java-11-openjdk-headless, java-11-openjdk-headless-fastdebug, java-11-openjdk-headless-slowdebug, java-11-openjdk-javadoc, java-11-openjdk-javadoc-zip, java-11-openjdk-jmods, java-11-openjdk-jmods-fastdebug, java-11-openjdk-jmods-slowdebug, java-11-openjdk-slowdebug, java-11-openjdk-src, java-11-openjdk-src-fastdebug, java-11-openjdk-src-slowdebug, java-11-openjdk-static-libs, java-11-openjdk-static-libs-fastdebug, java-11-openjdk-static-libs-slowdebug

    Summary

    Important: java-11-openjdk security update

    Published
    19 Apr 2023
    CVE-2023-20862
    Fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-22621
    Fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-22893
    Fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-22894
    Fix available
    Packages

    Summary

    Published
    19 Apr 2023
    CVE-2023-29517
    Fix available
    Packages

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer

    Published
    18 Apr 2023
    CVE-2023-29516
    Fix available
    Packages

    Summary

    Code injection from view right on XWiki.AttachmentSelector in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29515
    Fix available
    Packages

    Summary

    Cross-site scripting (XSS) in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29514
    Fix available
    Packages

    Summary

    Code injection in template provider administration in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29513
    Fix available
    Packages

    Summary

    Users can be created even when registration is disabled without validation via the template macro in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29512
    Fix available
    Packages

    Summary

    Code injection in xwiki-platform-web-templates

    Published
    18 Apr 2023
    CVE-2023-29510
    Fix available
    Packages

    Summary

    Code injection via unescaped translations in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29522
    Fix available
    Packages

    Summary

    Code injection from view right on XWiki.ClassSheet in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29521
    Fix available
    Packages

    Summary

    Code injection from account/view through VFS Tree macro in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29520
    Fix available
    Packages

    Summary

    Page render failure due to broken translations in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29519
    Fix available
    Packages

    Summary

    Code injection in org.xwiki.platform:xwiki-platform-attachment-ui

    Published
    18 Apr 2023
    CVE-2023-29518
    Fix available
    Packages

    Summary

    Code injection from view right using Invitation.InvitationCommon in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29523
    Fix available
    Packages

    Summary

    Code injection in display method used in user profiles in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29524
    Fix available
    Packages

    Summary

    Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform

    Published
    18 Apr 2023
    CVE-2023-29525
    Fix available
    Packages

    Summary

    Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform

    Published
    18 Apr 2023