Open Source Vulnerabilities

Post SMTP < 2.1.4 - Admin+ Stored Cross-Site Scripting

kernel-azure, kernel-source-azure, kernel-syms-azure, kernel-azure, kernel-source-azure, kernel-syms-azure

Security update for the Linux Kernel

python-rsa, python-rsa, python-rsa

Security update for python-rsa

virtualbox, virtualbox-kmp

Security update for virtualbox

389-ds, 389-ds

Security update for 389-ds

hunspell

Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

smarty/smarty, smarty/smarty

Smarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto

pimcore/pimcore

Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users

steal

steal vulnerable to Prototype Pollution via requestedVersion variable

parse-url

parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

topthink/framework

ThinkPHP deserialization vulnerability

rdiffweb

rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access

steal

steal vulnerable to Prototype Pollution via key variable in babel.js

steal

steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments

steal

steal vulnerable to Prototype Pollution via optionName variable

steal

steal vulnerable to Regular Expression Denial of Service via input variable

mariadb-10.3

mariadb-10.3 - security update

Stack Buffer Overflow in Jettison

Stack Buffer Overflow in Jettison

bzip2

bzip2 - bugfix update

libraw

libraw - security update