Open Source Vulnerabilities

ntfs-3g, libguestfs, wimlib, partclone, ntfs-3g-system-compression, testdisk

Updated ntfs-3g packages fix security vulnerability

grafana

Important: grafana security update

grafana

Important: grafana security update

Generation of Error Message Containing Sensitive Information in star7th/showdoc

dolibarr/dolibarr

Cross site scripting in dolibarr

salt

salt - regression update

log4j

Security update for log4j

mruby, mruby, mruby

mruby, mruby, mruby, mruby, mruby, mruby, mruby

windows

Delegate functions are missing `Send` bound

Heap-based Buffer Overflow in mruby/mruby

dolibarr

grok

Heap-buffer-overflow in grk::GrkImage::cieLabToRGB

curl

Heap-buffer-overflow in Curl_sasl_decode_mech

golang.org/x/net/http2

golang.org/x/net/http2 allows uncontrolled memory consumption

thunderbird, thunderbird

thunderbird - security update

giftrans, giftrans, giftrans

giftrans, giftrans, giftrans, giftrans, giftrans, giftrans, giftrans

expat, expat, expat, libxmltok

expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat, expat

expat

CVE-2021-45960 affecting package expat for versions less than 2.4.3-1

expat, coin3, vnc4, vtk, xmlrpc-c, expat, ayttm, cableswig, cadaver, coin3, insighttoolkit, insighttoolkit4, matanza, swish-e, tdom, vnc4, vtk, wbxml2, xmlrpc-c, expat, firefox, cadaver, coin3, matanza, swish-e, tdom, vnc4, wbxml2, xmlrpc-c, expat, firefox, cadaver, matanza, swish-e, tdom, wbxml2, xmlrpc-c, cadaver, expat, firefox, matanza, tdom, wbxml2, swish-e, xmlrpc-c, cadaver, matanza, tdom, wbxml2, swish-e, xmlrpc-c, cadaver, matanza, swish-e, tdom, wbxml2, xmlrpc-c, cadaver, matanza, tdom, wbxml2, xmlrpc-c, swish-e

rustc-serialize

Stack overflow in rustc_serialize when parsing deeply nested JSON

,

ruby2.7

ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby

ruby

CVE-2021-41819 affecting package ruby for versions less than 3.1.2-2

ruby2.3, ruby2.5, ruby2.7, ruby3.0

golang-1.15

golang-golang-x-net, golang-golang-x-net, golang-golang-x-net

,

ruby2.7

ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby, ruby

kured

CVE-2021-44716 affecting package kured for versions less than 1.13.2-1

application-gateway-kubernetes-ingress

CVE-2021-44716 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-19

cf-cli

CVE-2021-44716 affecting package cf-cli for versions less than 8.4.0-16

csi-driver-lvm

CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15

flannel

CVE-2021-44716 affecting package flannel for versions less than 0.14.0-21

git-lfs

CVE-2021-44716 affecting package git-lfs for versions less than 3.1.4-17