Open Source Vulnerabilities

gdm

gdm bug fix and enhancement update

libiscsi, libiscsi-devel, libiscsi-utils, libvirt-dbus, netcf, netcf-devel, netcf-libs, qemu-guest-agent, qemu-img, qemu-kvm, qemu-kvm-block-curl, qemu-kvm-block-gluster, qemu-kvm-block-iscsi, qemu-kvm-block-rbd, qemu-kvm-block-ssh, qemu-kvm-common, qemu-kvm-core, sgabios

virt:rhel and virt-devel:rhel bug fix update

custodia, ipa-client, ipa-client-common, ipa-client-epn, ipa-client-samba, ipa-common, ipa-healthcheck-core, ipa-python-compat, ipa-selinux, opendnssec, python3-custodia, python3-ipaclient, python3-ipalib, python3-jwcrypto, python3-jwcrypto, python3-jwcrypto, python3-kdcproxy, python3-pyusb, python3-pyusb, python3-pyusb, python3-qrcode, python3-qrcode, python3-qrcode, python3-qrcode-core, python3-qrcode-core, python3-qrcode-core, python3-yubico, python3-yubico, python3-yubico, slapi-nis, softhsm, softhsm-devel

idm:DL1 bug fix update

ldapjdk, ldapjdk-javadoc, pki-acme, pki-base, pki-base-java, pki-ca, pki-kra, pki-server, pki-symkey, pki-tools, python3-pki

pki-core:10.6 bug fix update

cloud-init

cloud-init bug fix and enhancement update

python3-suds

python-suds bug fix and enhancement update

Judy, Judy, Judy, galera, galera, mariadb, mariadb, mariadb-backup, mariadb-backup, mariadb-common, mariadb-common, mariadb-devel, mariadb-devel, mariadb-embedded, mariadb-embedded, mariadb-embedded-devel, mariadb-embedded-devel, mariadb-errmsg, mariadb-errmsg, mariadb-gssapi-server, mariadb-gssapi-server, mariadb-oqgraph-engine, mariadb-oqgraph-engine, mariadb-pam, mariadb-pam, mariadb-server, mariadb-server, mariadb-server-galera, mariadb-server-galera, mariadb-server-utils, mariadb-server-utils, mariadb-test, mariadb-test

Moderate: mariadb:10.5 security, bug fix, and enhancement update

Judy, galera, mariadb

Moderate: mariadb:10.5 security, bug fix, and enhancement update

galera, Judy, mariadb

Moderate: mariadb:10.3 security and bug fix update

Judy, Judy, Judy, galera, galera, mariadb, mariadb, mariadb-backup, mariadb-backup, mariadb-common, mariadb-common, mariadb-devel, mariadb-devel, mariadb-embedded, mariadb-embedded, mariadb-embedded-devel, mariadb-embedded-devel, mariadb-errmsg, mariadb-errmsg, mariadb-gssapi-server, mariadb-gssapi-server, mariadb-oqgraph-engine, mariadb-oqgraph-engine, mariadb-server, mariadb-server, mariadb-server-galera, mariadb-server-galera, mariadb-server-utils, mariadb-server-utils, mariadb-test, mariadb-test

Moderate: mariadb:10.3 security and bug fix update

kernel-rt

Important: kernel-rt security and bug fix update

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Moderate: vim security update

vim

Moderate: vim security update

alsa-sof-firmware, alsa-sof-firmware-debug

alsa-sof-firmware bug fix and enhancement update

kernel

Important: kernel security and bug fix update

kernel-tools-libs-devel

Important: kernel security and bug fix update

NetworkManager-cloud-setup, NetworkManager-libnm-devel

NetworkManager bug fix and enhancement update

device-mapper-multipath-devel

device-mapper-multipath bug fix and enhancement update

python3-sanlock, sanlk-reset, sanlock, sanlock-devel

sanlock bug fix and enhancement update

polkit, polkit-devel, polkit-docs, polkit-libs

Moderate: polkit security update

polkit

Moderate: polkit security update

mingw32-glib2, mingw32-glib2-static, mingw64-glib2, mingw64-glib2-static

mingw-glib2 bug fix and enhancement update

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-lowlatency, linux-oracle

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-kvm, linux-lowlatency vulnerabilities

com.adobe.acs:acs-aem-commons

Page Compare Reflected Cross-site Scripting (XSS) vulnerability

openjdk-17, openjdk-17, openjdk-17

openjdk-17 vulnerabilities

openjdk-lts, openjdk-lts, openjdk-lts

openjdk-lts vulnerabilities

git, git, git

git regression

gzip

Important: gzip security update

gzip

Important: gzip security update

xen, xen, xen, xen, xen, xen

Security update for xen

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt, kernel-rt, kernel-rt

Security update for the Linux Kernel

kernel-rt, kernel-rt_debug, kernel-source-rt, kernel-syms-rt

Security update for the Linux Kernel

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder

libredwg

Heap-buffer-overflow in decode_preR13_section_hdr

ndpi

Heap-buffer-overflow in ndpi_search_raknet

grok

Stack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<i

neorazorx/facturascripts

Cross site scripting in facturascripts

element-plus

element-plus vulnerable to cross-site scripting (XSS) via el-table-column

gibbon

Server side request forgery in gibbon

ejs

ejs template injection vulnerability

com.liferay:com.liferay.journal.content.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via web content template names

com.liferay:com.liferay.layout.seo.web, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via the site name

czproject/git-php

Command injection in czproject/git-php

dng_sdk

Stack-use-after-scope in RefCopyBytes

libredwg

Heap-buffer-overflow in dwg_encode_VERTEX_2D

FreeRDP Server authentication might allow invalid credentials to pass

openjdk-8, icedtea-web, openjdk-9, openjdk-17, openjdk-8, openjdk-lts, icedtea-web, openjdk-17, openjdk-8, openjdk-lts, icedtea-web, openjdk-13, openjdk-16, icedtea-web, openjdk-17, openjdk-18, openjdk-8, openjdk-lts, icedtea-web, icedtea-web, icedtea-web