Open Source Vulnerabilities

tools.devnull:build-notifications

Plaintext Storage of a Password in Jenkins Build Notifications Plugin

org.jenkins-ci.plugins:xfpanel

Cross-site Scripting in Jenkins eXtreme Feedback Panel Plugin

org.jenkins-ci.plugins:ec2-deployment-dashboard

Cross-Site Request Forgery in Jenkins Deployment Dashboard Plugin

awesome_spawn

OS Command Injection in awesome spawn

github.com/open-policy-agent/opa

Denial of service in Open Policy Agent

github.com/open-policy-agent/opa

Denial of service in github.com/open-policy-agent/opa

ghostscript

Segv on unknown address in chunk_free_object

ghostscript

Heap-buffer-overflow in Interp

:unknown:

platform/system/bt, platform/system/bt, platform/system/bt

platform/packages/apps/KeyChain, platform/packages/apps/KeyChain, platform/packages/apps/KeyChain, platform/packages/apps/KeyChain

platform/system/bt, platform/system/bt, platform/system/bt, platform/system/bt

:unknown:

:unknown:

platform/system/bt, platform/system/bt, platform/system/bt

:unknown:

platform/vendor/qcom-opensource/system/bt

:unknown:

platform/system/bt, platform/system/bt

:unknown:

:unknown:

:unknown:

:unknown:

platform/frameworks/base, platform/frameworks/base, platform/frameworks/base, platform/frameworks/base

platform/packages/apps/Settings, platform/packages/apps/Settings, platform/packages/apps/Settings, platform/packages/apps/Settings

:unknown:

isync

isync - security update

Heap-based Buffer Overflow in vim/vim

thunderbird

Important: thunderbird security update

qemu-guest-agent, qemu-img, qemu-kvm, qemu-kvm-audio-pa, qemu-kvm-block-curl, qemu-kvm-block-rbd, qemu-kvm-common, qemu-kvm-core, qemu-kvm-device-display-virtio-gpu, qemu-kvm-device-display-virtio-gpu-ccw, qemu-kvm-device-display-virtio-gpu-gl, qemu-kvm-device-display-virtio-gpu-pci, qemu-kvm-device-display-virtio-gpu-pci-gl, qemu-kvm-device-display-virtio-vga, qemu-kvm-device-display-virtio-vga-gl, qemu-kvm-device-usb-host, qemu-kvm-device-usb-redirect, qemu-kvm-docs, qemu-kvm-tools, qemu-kvm-ui-egl-headless, qemu-kvm-ui-opengl, qemu-pr-helper

Moderate: qemu-kvm security and bug fix update

bsdtar, libarchive, libarchive-devel

Moderate: libarchive security update

bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-extra, perf, python3-perf

Important: kernel security and bug fix update

expat, expat-devel

Moderate: expat security update

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Moderate: vim security update

platform/frameworks/base, platform/frameworks/base

:linux_kernel:Qualcomm

:linux_kernel:

platform/frameworks/opt/telephony, platform/frameworks/opt/telephony, platform/frameworks/opt/telephony, platform/frameworks/opt/telephony

platform/frameworks/base, platform/frameworks/native, platform/frameworks/base, platform/frameworks/native

platform/frameworks/av, platform/frameworks/av

platform/packages/providers/ContactsProvider, platform/packages/providers/ContactsProvider

:linux_kernel:Qualcomm

Unsafe YAML deserialization in opensearch-ruby