Open Source Vulnerabilities

org.keycloak:keycloak-core

Duplicate Advisory: Keycloak vulnerable to Cross-Site Scripting (XSS)

barbican

openstack-barbican Denial of Service vulnerability

sosreport

sosreport Exposure of Sensitive Information vulnerability

ghostscript

Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

libraw

Use-of-uninitialized-value in init_main_qtable

ghostscript

Heap-buffer-overflow in Ins_NPUSHW

lcms

Negative-size-param in PackChunkyBytes

Grafana Image Renderer leaking files

sofia-sip

sofia-sip - security update

dpdk

dpdk - security update

libzstd

libzstd vulnerability

lz4-sys

lz4-sys vulnerable to memory corruption via issue in liblz4

github.com/ElrondNetwork/elrond-go

elrond-go MultiESDTNFTTransfer call on a SC address with missing function name

go.pinniped.dev

Pinniped Supervisor Insufficient Session Expiration vulnerability

github.com/fluxcd/flux2

Flux CLI Workload Injection

org.jsoup:jsoup

jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

linux, linux, linux

binutils, binutils, binutils, binutils, binutils, binutils, binutils, binutils

samba, samba, samba, samba, samba, samba, samba, samba

samba, samba, samba

kernel

CVE-2022-3078 affecting package kernel for versions less than 5.15.70.1-1

samba

CVE-2022-32743 affecting package samba 4.12.5-7

undertow

linux, linux, linux

linux, linux, linux

python-keystonemiddleware, python-keystonemiddleware, python-keystonemiddleware

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

linux, linux, linux

barbican, barbican, barbican

linux, linux, linux