Open Source Vulnerabilities

hylafax+, hylafax+

Security update for hylafax+

salt

Exposure of Resource to Wrong Sphere in salt

libvips

UNKNOWN READ in void jxl::CopyImageTo<int>

net-snmp

UNKNOWN WRITE in sprint_realloc_hinted_integer

salt

salt - regression update

php

Updated php packages fix security vulnerability

rust

Updated rust packages fix security vulnerability

arpwatch

Updated arpwatch packages fix security vulnerability

wireshark

Updated wireshark packages fix security vulnerability

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerability

postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql13, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql14, postgresql, postgresql13, postgresql14, postgresql, postgresql13, postgresql14

Security update for postgresql, postgresql13, postgresql14

lldb-eval

Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

arrow

Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit

firebird3.0

firebird3.0 - security update

github.com/edgexfoundry/app-functions-sdk-go/v2, github.com/edgexfoundry/app-functions-sdk-go, github.com/edgexfoundry/app-service-configurable

Broken encryption in EdgeX Foundry

thinkjs

SQL Injection in thinkjs

onionshare-cli

Remote unauthenticated attackers able to upload files in Onionshare

onionshare-cli

Information disclosure vulnerability in OnionShare

OPCFoundation.NetStandard.Opc.Ua.Core

Improper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core

oro/crm, oro/crm

The disqualify lead action may be executed without CSRF token check

facade/ignition, facade/ignition

Incorrect Access Control in Ignition

json-schema

json-schema is vulnerable to Prototype Pollution

librecad, librecad, librecad

librecad, librecad, librecad, librecad, librecad

validator

Inefficient Regular Expression Complexity in Validator.js

com.fasterxml.jackson.core:jackson-databind

Unsafe Deserialization in jackson-databind

github.com/cloudflare/cfrpki

Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki

quagga

CVE-2021-44038 affecting package quagga 1.2.4-16

quagga

CVE-2021-44038 affecting package quagga 1.2.4-15

gerbv, gerbv