Open Source Vulnerabilities

ntp

ntp security update

ansible

ansible security update

xorg-x11-server

xorg-x11-server security update

redis6

redis6 security update

lapack

lapack security update

logback

logback security update

python-pip

python-pip security update

python-pip

python-pip security update

flink

flink security update

kernel

kernel security update

kernel

kernel security update

golang, golang, golang

golang security update

shim, shim, shim

shim security update

rubygem-bundler

rubygem-bundler security update

grafana

grafana security update

gfbgraph

gfbgraph security update

docker, docker, docker

docker security update

libtiff, libtiff, libtiff

libtiff security update

nodejs

nodejs security update

expat, expat, expat

expat security update

mailman

mailman security update

netty

netty security update

libconfuse, libconfuse, libconfuse

libconfuse security update

kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25, kgraft-patch-SLE12-SP5_Update_24, kgraft-patch-SLE12-SP5_Update_25

Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5)

rdiffweb

Disabled Certificate Validation makes Broker, Proxy Admin Clients vulnerable to MITM attack

Disabled Hostname Verification makes Brokers, Proxies vulnerable to MITM attack

Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM

Apache Pulsar Proxy target broker address isn't validated

Session Fixation in ikus060/rdiffweb

rubygem-rack, rubygem-rack, rubygem-rack, rubygem-rack, rubygem-rack, rubygem-rack, rubygem-rack

Security update for rubygem-rack

Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support

Improper Authentication in Arvados when using PAM as identity provider

nefly-ipx subject to Server-Side Request Forgery and Stored Cross-Site Scripting via Cache Poisoning and Improper Host Validation

Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented

kgraft-patch-SLE12-SP4_Update_27, kgraft-patch-SLE12-SP4_Update_29, kgraft-patch-SLE12-SP4_Update_27, kgraft-patch-SLE12-SP4_Update_29

Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP4)

kgraft-patch-SLE12-SP4_Update_23, kgraft-patch-SLE12-SP4_Update_24, kgraft-patch-SLE12-SP4_Update_25, kgraft-patch-SLE12-SP4_Update_23, kgraft-patch-SLE12-SP4_Update_24, kgraft-patch-SLE12-SP4_Update_25, kgraft-patch-SLE12-SP4_Update_23, kgraft-patch-SLE12-SP4_Update_24, kgraft-patch-SLE12-SP4_Update_25

Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4)

python-jwt

CVE-2022-39227 affecting package python-jwt for versions less than 2.4.0-2

Security issue in fhir-works-on-aws-authz-smart

Python-jwt subject to Authentication Bypass by Spoofing

Parse Server subject to Incorrect Resource Transfer Between Spheres

node-hoek, node-hoek, node-hoek

node-hoek, node-hoek

dpdk, dpdk-thunderx, dpdk, dpdk-thunderx

Security update for dpdk

kitty, kitty, kitty

kitty