Open Source Vulnerabilities

krb5

Security update for krb5

python-cjson

Cross-site Scripting in python-cjson

ipa, ipa, ipa, freeipa, freeipa, freeipa

Code injection in FreeIPA

runc, runc, runc

moby-runc

CVE-2021-43784 affecting package moby-runc for versions less than 1.1.0-1

invenio-drafts-resources

invenio-app-rdm

invenio-rdm-records

runc, runc

gitlab

gitlab

grumpydictator/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

mozilla-nss, mozilla-nss

Security update for mozilla-nss

nss, nss-devel, nss-pkcs11-devel, nss-sysinit, nss-tools

Fixed CVE-2021-43527 in nss

idle-python3.5, libpython3.5, libpython3.5-dev, libpython3.5-minimal, libpython3.5-stdlib, libpython3.5-testsuite, python3.5, python3.5-dev, python3.5-doc, python3.5-examples, python3.5-minimal, python3.5-venv

Fix CVE(s): CVE-2021-3426

busybox, busybox-initramfs, busybox-static, busybox-syslogd, udhcpc, udhcpd

Fix CVE(s): CVE-2021-42379, CVE-2021-42378, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386

binutils, binutils-devel

Fix of 56 CVEs

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fix of CVE: CVE-2021-3928, CVE-2021-3927

openldap, openldap-clients, openldap-devel, openldap-servers, openldap-servers-sql

Fix of CVE: CVE-2021-27212