Open Source Vulnerabilities

bluez, bluez, bluez, bluez

Security update for bluez

gnutls

Security update for gnutls

gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls, gnutls

Security update for gnutls

spice

Security update for spice

spice, spice, spice

Security update for spice

linux-lts-xenial, linux-aws, linux-azure, linux-aws-hwe, linux-hwe, linux, linux-gcp, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux, linux-gcp-4.15, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-ibm-5.4, linux-hwe-5.4, linux-oem, linux-aws, linux-aws-5.15, linux-azure, linux, linux-gcp-5.15, linux-gcp, linux-gke, linux-gke-5.15, linux-gkeop, linux-ibm, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux, linux-lowlatency

Kernel Live Patch Security Notice

Denial of Service (DoS)

linux-oem-5.14

linux-oem-5.14 vulnerabilities

python-treq, python-treq

Security update for python-treq

twisted

twisted vulnerability

freeciv, freeciv

Security update for freeciv

nim, nim

Security update for nim

c-blosc2

Heap-buffer-overflow in do_job

OPCFoundation.NetStandard.Opc.Ua.Server

Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server

node-opcua

Uncontrolled Resource Consumption in node-opcua

opcua

Uncontrolled Resource Consumption in opcua

pimcore/pimcore

Pimcore Cross-site Scripting (XSS)

node-opcua

node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit

io.gravitee.apim:gravitee-api-management

Path Traversal in Gravitee API Management

asyncua, opcua

Uncontrolled Resource Consumption in asyncua and opcua

com.jflyfox:jflyfox_jfinal

SQL injection in jflyfox jfinal

ansible-runner

ansible-runner vulnerable to Race Condition

org.keycloak:keycloak-core

Keycloak vulnerable to Improper Certificate Validation

com.jflyfox:jflyfox_jfinal

SQL injection in jflyfox jfinal

ansible-runner

ansible-runner has default temporary files written to world R/W locations

org.apache.activemq:artemis-server

HTML Injection in ActiveMQ Artemis Web Console

org.jenkins-ci.plugins:jobConfigHistory

Cross-site Scripting in Jenkins Job Configuration History Plugin

org.jenkins-ci.plugins:git

Improper masking of credentials Jenkins in Git Plugin

org.jenkins-ci.plugins:collabnet

RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin

wasmtime

Segv on unknown address in cranelift_filetests::function_runner::CompiledFunction::call::ha6b9162cd2eNUMBER

opensc

Heap-double-free in sc_pkcs15_encode_df

ghostscript

Heap-use-after-free in pdfi_cidtype2_get_glyph_index

systemd

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, thunderbird, firefox, thunderbird, thunderbird

firefox, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

Moderate: curl security update

apcu-panel, libzip, libzip-devel, libzip-tools, php, php-bcmath, php-cli, php-common, php-dba, php-dbg, php-devel, php-embedded, php-enchant, php-ffi, php-fpm, php-gd, php-gmp, php-intl, php-json, php-ldap, php-mbstring, php-mysqlnd, php-odbc, php-opcache, php-pdo, php-pear, php-pecl-apcu, php-pecl-apcu-devel, php-pecl-rrd, php-pecl-xdebug, php-pecl-zip, php-pgsql, php-process, php-snmp, php-soap, php-xml, php-xmlrpc

Moderate: php:7.4 security update

curl, libcurl, libcurl-devel, libcurl-minimal

Moderate: curl security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

firefox

Important: firefox security update