Open Source Vulnerabilities

kernel-livepatch-SLE15-SP3_Update_19

Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)

shiro, shiro

shiro, shiro, shiro, shiro, shiro, shiro, shiro

opensc

Stack-buffer-overflow in sc_asn1_read_tag

parse-path

Authorization Bypass in parse-path

admidio/admidio

Cross-site Scripting in admidio

ruby-mysql

Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

dompdf/dompdf

Server-Side Request Forgery in dompdf/dompdf

espeak-ng

Stack-buffer-overflow in LookupThousands

firefox-esr, firefox-esr

firefox-esr - security update

ublock-origin

ublock-origin - security update

firejail

firejail - security update

io.spray:spray-json_2.10, io.spray:spray-json_2.11, io.spray:spray-json_2.11.0-RC4, io.spray:spray-json_2.12, io.spray:spray-json_2.12.0-M3, io.spray:spray-json_2.12.0-M5, io.spray:spray-json_2.12.0-RC1, io.spray:spray-json_2.12.0-RC2, io.spray:spray-json_2.13.0-M2, io.spray:spray-json_2.13.0-M4, io.spray:spray-json_2.13.0-M5, io.spray:spray-json_2.9.3

Uncontrolled Resource Consumption in Spray JSON

Authentication Bypass Vulnerability

,

Kernel

netfilter: nf_tables: disallow non-stateful expression in sets earlier

Kernel

ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe

Kernel

drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()

Kernel

x86/delay: Fix the wrong asm constraint in delay_loop()

Kernel

dm stats: add cond_resched when looping over entries

Kernel

dm crypt: make printing of the key constant-time

Kernel

x86/pm: Fix false positive kmemleak report in msr_build_context()

Kernel

drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes

Kernel

ipw2x00: Fix potential NULL dereference in libipw_xmit()

Kernel

NFC: NULL out the dev->rfkill to prevent UAF

Kernel

drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()

Kernel

ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix

Kernel

drm/amd/pm: fix double free in si_parse_power_table()

Kernel

ALSA: jack: Access input_dev under mutex

Kernel

regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt

Kernel

drm/msm/hdmi: check return value after calling platform_get_resource_byname()