Open Source Vulnerabilities

Kernel

be2net: Fix buffer overflow in be_get_module_eeprom

Kernel

ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.

Kernel

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

Kernel

ip: Fix data-races around sysctl_ip_prot_sock.

Kernel

udp: Fix a data-race around sysctl_udp_l3mdev_accept.

Kernel

ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

Kernel

tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

Kernel

tcp: Fix data-races around sysctl_tcp_recovery.

Kernel

tcp: Fix a data-race around sysctl_tcp_early_retrans.

Kernel

tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

Kernel

tcp: Fix data-races around sysctl_tcp_max_reordering.

Kernel

gpio: gpio-xilinx: Fix integer overflow

Kernel

spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers

Kernel

KVM: Don't null dereference ops->destroy

Kernel

mm/mempolicy: fix uninit-value in mpol_rebind_policy()

Kernel

crypto: qat - fix memory leak in RSA

Kernel

perf/x86/intel/lbr: Fix unchecked MSR access error on HSW

Kernel

crypto: qat - add param check for DH

Kernel

crypto: qat - add param check for RSA

libredwg

Heap-buffer-overflow in dynapi_set_helper

libredwg

Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

ghostscript

UNKNOWN WRITE in pdfi_repair_file

libredwg

Heap-buffer-overflow in dwg_geojson_feature

libpgjava, libpgjava

libpgjava - security update

oqs

Post-Quantum Key Encapsulation Mechanism SIKE broken

libtirpc, libtirpc, libtirpc

libtirpc security update

kernel, kernel, kernel

kernel security update

netcdf

netcdf security update

python-ldap, python-ldap

python-ldap security update

qemu, qemu, qemu

qemu security update

python-lxml, python-lxml, python-lxml

python-lxml security update

protobuf-c

protobuf-c security update

flatpak-builder

flatpak-builder security update

qt5-qtbase, qt5-qtbase

qt5-qtbase security update

openjdk-1.8.0, openjdk-1.8.0, openjdk-1.8.0

openjdk-1.8.0 security update

evolution-data-server, evolution-data-server

evolution-data-server security update

httpd, httpd, httpd

httpd security update

github.com/containrrr/shoutrrr

Panic on crafted messages in github.com/containrrr/shoutrrr

github.com/flyteorg/flyteadmin

Improper validation of access tokens in github.com/flyteorg/flyteadmin

github.com/ipld/go-car, github.com/ipld/go-car/v2

Denial of service via malformed CAR data in github.com/ipld/go-car and go-car/v2

libredwg

Heap-double-free in dwg_free_common_entity_data

github.com/runatlantis/atlantis

Atlantis Events vulnerable to Timing Attack

org.eclipse.californium:californium-core, org.eclipse.californium:californium-core

Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch

chia-blockchain

chia-blockchain tokens can be inflated to an arbitrary extent