Open Source Vulnerabilities

Stored XSS in Grafana's Unified Alerting

ghostscript

ghostscript security update

libsepol, libsepol

libsepol security update

rubygem-yajl-ruby, rubygem-yajl-ruby, rubygem-yajl-ruby

rubygem-yajl-ruby security update

uboot-tools, uboot-tools, uboot-tools

uboot-tools security update

kernel, kernel, kernel

kernel security update

crash, crash, crash, crash

Security update for crash

kernel-default, kernel-livepatch-SLE15_Update_31, kernel-default, kernel-default, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-vanilla, kernel-default, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-vanilla, kernel-default, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-vanilla, kernel-zfcpdump, kernel-default, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-vanilla

Security update for the Linux Kernel

p11-kit

Security update for p11-kit

p11-kit, p11-kit, p11-kit, p11-kit, p11-kit

Security update for p11-kit

io.fabric8:kubernetes-client, io.fabric8:kubernetes-client, io.fabric8:kubernetes-client, io.fabric8:kubernetes-client, io.fabric8:kubernetes-client, io.fabric8:kubernetes-client, io.fabric8:kubernetes-client

fabric8 kubernetes-client vulnerable

qemu

Heap-use-after-free in op_pci_write

clamav

Memcpy-param-overlap in repeat

llhttp

llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields

llhttp

llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v6

Mattermost users could access some sensitive information via API call

mat2, mat2

mat2 - security update

xen

xen - security update

wpewebkit

wpewebkit - security update

webkit2gtk, webkit2gtk

webkit2gtk - security update

Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

php8.1

autotrace, autotrace

xen, xen, xen

xen, xen, xen, xen, xen, xen, xen, xen, xen, xen, xen, xen

linux, linux, linux

kernel

CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

CVE-2022-23825 does not affect BellSoft software

mplayer, mplayer, mplayer, mplayer, mplayer

toybox, toybox, toybox, toybox

gradle, gradle, gradle, gradle, gradle, gradle, gradle