Open Source Vulnerabilities

djvulibre

djvulibre - security update

kryo

Uncaught exception

mruby

Heap-buffer-overflow in mrb_format_float

,

glibc, glibc, glibc

eglibc, glibc, glibc, glibc

CVE-2021-33574 does not affect BellSoft software

libgrss

libgrss, libgrss, libgrss, libgrss, libgrss

privoxy, privoxy, privoxy

linux, linux, linux

,

ffmpeg, ffmpeg, ffmpeg

kernel

CVE-2020-25672 affecting package kernel for versions less than 6.6.35.1-4

kernel

CVE-2020-25672 affecting package kernel for versions less than 5.10.78.1-1

ffmpeg, ffmpeg, ffmpeg

node-ws, node-ws, node-ws

ffmpeg, ffmpeg, ffmpeg

,

ffmpeg, ffmpeg, ffmpeg

,

js-jquery

CVE-2021-32640 affecting package js-jquery 3.5.0-4

ffmpeg

ffmpeg, ffmpeg, ffmpeg

node-ws, node-ws, node-ws, node-ws

libx11, libx11

libx11 vulnerability

org.opennms:opennms

Cross-site Scripting in OpenNMS Horizon

org.opennms:opennms

Cross-site Scripting in OpenNMS Horizon

org.opennms:opennms

Cross-Site Request Forgery in OpenNMS Horizon

org.opennms:opennms, org.opennms:opennms-config

Cross-Site Request Forgery in OpenNMS Horizon

org.wildfly:wildfly-parent

Cross-site Scripting in Wildfly

github.com/opencontainers/runc

mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs

github.com/MichaelMure/git-bug

Arbitrary code execution due to an uncontrolled search path for the git binary

github.com/pion/webrtc/v3

In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication

github.com/oauth2-proxy/oauth2-proxy/v7, github.com/oauth2-proxy/oauth2-proxy

Subdomain checking of whitelisted domains could allow unintended redirects in oauth2-proxy

github.com/ulikunitz/xz

github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)

apport, apport

apport vulnerabilities

ffmpeg, ffmpeg, ffmpeg

,