Open Source Vulnerabilities

logback, logback, logback

vault-cli

logback, logback, logback

galette

galette

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2021-3984, CVE-2021-3973, CVE-2021-3974, CVE-2021-4019, CVE-2021-4069

openssh-client, openssh-client-ssh1, openssh-server, openssh-sftp-server, ssh, ssh-askpass-gnome, ssh-krb5

Fix CVE(s): CVE-2021-41617

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2021-3927, CVE-2021-3928

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2021-3872, CVE-2021-3875, CVE-2021-3903

libapache2-mod-php7.0, libphp7.0-embed, php7.0, php7.0-bcmath, php7.0-bz2, php7.0-cgi, php7.0-cli, php7.0-common, php7.0-curl, php7.0-dba, php7.0-dev, php7.0-enchant, php7.0-fpm, php7.0-gd, php7.0-gmp, php7.0-imap, php7.0-interbase, php7.0-intl, php7.0-json, php7.0-ldap, php7.0-mbstring, php7.0-mcrypt, php7.0-mysql, php7.0-odbc, php7.0-opcache, php7.0-pgsql, php7.0-phpdbg, php7.0-pspell, php7.0-readline, php7.0-recode, php7.0-snmp, php7.0-soap, php7.0-sqlite3, php7.0-sybase, php7.0-tidy, php7.0-xml, php7.0-xmlrpc, php7.0-xsl, php7.0-zip

Fix CVE(s): CVE-2020-7071, CVE-2020-7068, CVE-2021-21705, CVE-2021-21704, CVE-2021-21703, CVE-2021-21702

bind9, bind9-doc, bind9-host, bind9utils, dnsutils, host, libbind-dev, libbind-export-dev, libbind9-140, libdns-export162, libdns162, libirs-export141, libirs141, libisc-export160, libisc160, libisccc-export140, libisccc140, libisccfg-export140, libisccfg140, liblwres141, lwresd

Fix CVE(s): CVE-2021-25219

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix CVE(s): CVE-2021-35624, CVE-2021-35604

libssl-dev, libssl-doc, libssl1.0.0, openssl

Fix CVE(s): CVE-2021-3712

openjdk-8-demo, openjdk-8-doc, openjdk-8-jdk, openjdk-8-jdk-headless, openjdk-8-jre, openjdk-8-jre-headless, openjdk-8-jre-jamvm, openjdk-8-jre-zero, openjdk-8-source

Fix CVE(s): CVE-2021-2388

openjdk-9-demo, openjdk-9-doc, openjdk-9-jdk, openjdk-9-jdk-headless, openjdk-9-jre, openjdk-9-jre-headless, openjdk-9-source

Fix CVE(s): CVE-2021-2388

pocketmine/pocketmine-mp

Inability to de-op players if listed in ops.txt with non-lowercase letters

org.odpi.egeria:egeria-connector-xtdb

Vulnerable dependency in XTDB connector

@auth0/nextjs-auth0

Open redirect in @auth0/nextjs-auth0

galette

disruptor, jakarta-servlet, log4j

Security update for log4j

binutils, binutils-devel

Fixed 36 CVEs in binutils

plupload

Code injection in plupload

showdoc/showdoc

Open Redirect in showdoc

elgg/elgg, elgg/elgg

Information exposure in elgg

AjaxNetProfessional

Duplicate Advisory: Remote Code Execution in AjaxNetProfessional

org.craftercms:crafter-search

Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search

mailman

Cross Site Request Forgery in mailman

md-to-pdf

Code Injection in md-to-pdf.

merge-deep2

Prototype Pollution in merge-deep2.

snipe/snipe-it

snipe-it is vulnerable to Improper Access Control

comb

Prototype Pollution in comb

com.h2database:h2

Improper Restriction of XML External Entity Reference in com.h2database:h2.

sey

Prototype Pollution in sey

pimcore/pimcore

Cross-site Scripting in pimcore

pimcore/pimcore

pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

pimcore/pimcore

pimcore is vulnerable to Cross-site Scripting

phpservermon/phpservermon

phpservermon is vulnerable to CRLF Injection