Open Source Vulnerabilities

libjpeg, libjpeg, libjpeg, libjpeg, libjpeg

mariadb-10.0, mariadb-10.1, mariadb-10.3

mariadb-10.0, mariadb-10.1, mariadb-10.3, mariadb-10.6

mariadb-10.0, mariadb-10.1, mariadb-10.3, mariadb-10.6

mariadb-10.0, mariadb-10.1, mariadb-10.3, mariadb-10.6

stdlib

Man-in-the-middle attack with SessionTicketsDisabled in crypto/tls

Cross-site Scripting in the Flamingo theme manager

Cross-site Scripting in XWiki Platform Wiki UI Main Wiki

Path Traversal in XWiki Platform

org.opencastproject:opencast-ingest-service-impl, org.opencastproject:opencast-ingest-service-impl

Limited Authentication Bypass for Media Files

smarty/smarty, smarty/smarty

PHP Code Injection by malicious block or filename in Smarty

drupal/core

neos/neos, neos/neos, neos/neos, neos/neos, neos/neos, neos/neos

XSS in various backend modules due to (un)escaping in JS notification module

github.com/coreos/ignition/v2, github.com/coreos/ignition

Ignition config accessible to unprivileged software on VMware

copy-jdk-configs

Update of copy-jdk-configs

cassproject

Missing Cryptographic Step in cassproject

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

`CHECK` failure in depthwise ops via overflows

java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

Fixed of 5 CVEs in java-1.8.0-openjdk

github.com/pion/dtls, github.com/pion/dtls/v2

Pion/DLTS Accepts Client Certificates Without CertificateVerify

github.com/hyperledger/fabric, github.com/hyperledger/fabric

NULL Pointer Dereference in HyperLedger Fabric

ansible, ansible, ansible

Ansible Exposes Sensitive Information

dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

Fixed CVE-2021-33515 in dovecot

github.com/buger/jsonparser

Denial of Service in jsonparser

com.jfinal:jfinal

JFinal file validation vulnerability

java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

Fixed 5 CVEs in java-1.8.0-openjdk

dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

Fixed CVE-2021-33515 in dovecot

vim

Updated vim packages fix security vulnerability

cockpit

Updated cockpit packages fix security vulnerability

supertux

Updated supertux packages fix security vulnerability

openldap

Updated openldap packages fix security vulnerability

unrar

Updated unrar packages fix security vulnerability

firefox, firefox-l10n, thunderbird, thunderbird-l10n

Updated firefox/thunderbird packages fix security vulnerability

guzzle, guzzle, guzzle, mediawiki, mediawiki, mediawiki

guzzle, guzzle, guzzle

guzzlehttp/guzzle, guzzlehttp/guzzle

Cross-domain cookie leakage in Guzzle

stdlib

DLL injection on Windows in runtime and syscall

kernel-livepatch-SLE15-SP2_Update_24, kernel-livepatch-SLE15-SP3_Update_2

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-0318