Open Source Vulnerabilities

bind

Important: bind security update

java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

java-1.8.0-openjdk bug fix and enhancement update

java-11-openjdk-demo-fastdebug, java-11-openjdk-demo-slowdebug, java-11-openjdk-devel-fastdebug, java-11-openjdk-devel-slowdebug, java-11-openjdk-fastdebug, java-11-openjdk-headless-fastdebug, java-11-openjdk-headless-slowdebug, java-11-openjdk-jmods-fastdebug, java-11-openjdk-jmods-slowdebug, java-11-openjdk-slowdebug, java-11-openjdk-src-fastdebug, java-11-openjdk-src-slowdebug, java-11-openjdk-static-libs-fastdebug, java-11-openjdk-static-libs-slowdebug

java-11-openjdk bug fix and enhancement update

bind-dyndb-ldap, custodia, custodia, opendnssec, opendnssec, python3-custodia, python3-custodia, python3-jwcrypto, python3-jwcrypto, python3-jwcrypto, python3-kdcproxy, python3-kdcproxy, python3-pyusb, python3-pyusb, python3-pyusb, python3-qrcode, python3-qrcode, python3-qrcode, python3-qrcode-core, python3-qrcode-core, python3-qrcode-core, python3-yubico, python3-yubico, python3-yubico, softhsm, softhsm, softhsm-devel, softhsm-devel

Important: idm:DL1 security update

bind-dyndb-ldap, custodia, ipa, ipa-healthcheck, opendnssec, python-jwcrypto, python-jwcrypto, python-kdcproxy, python-qrcode, python-yubico, python-yubico, pyusb, pyusb, slapi-nis, softhsm

Important: idm:DL1 security update

libecap, libecap-devel

Important: squid:4 security update

libecap, squid

Important: squid:4 security update

github.com/seccomp/libseccomp-golang

Improper Input Validation in libseccomp-golang

github.com/rancher/rancher, github.com/rancher/rancher, github.com/rancher/rancher

Rancher Vulnerable to Cross-site Request Forgery (CSRF)

github.com/rancher/rancher

Cross-site request forgery in github.com/rancher/rancher

github.com/apache/trafficcontrol

Improper Authentication in Apache Traffic Control

github.com/kubernetes/kube-state-metrics, k8s.io/kube-state-metrics

Duplicate Advisory: k8s.io/kube-state-metrics Exposure of Sensitive Information

k8s.io/kube-state-metrics

Exposure of sensitive information in k8s.io/kube-state-metrics

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

XML Entity Expansion and Improper Input Validation in Kubernetes API server

github.com/apache/thrift

Out-of-bounds read in Apache Thrift

github.com/mholt/archiver

Path Traversal in MHolt Archiver

code.cloudfoundry.org/gorouter

Cloud Foundry Routing Improper Input Validation vulnerability

github.com/documize/community

Cross-site Scripting in Documize

github.com/lightningnetwork/lnd

Improper Access Control in Lightning Network Daemon

k8s.io/kubernetes, k8s.io/kubernetes, k8s.io/kubernetes

Kubernetes kubectl cp Vulnerable to Symlink Attack

github.com/proglottis/gpgme

GPGME Go wrapper contains Use After Free

golang.org/x/crypto

Improper Verification of Cryptographic Signature in golang.org/x/crypto

gst-plugins-base1.0, gst-plugins-base1.0, gst-plugins-base1.0

gst-plugins-base1.0 vulnerability

cflow, cflow, cflow

cflow, cflow, cflow, cflow, cflow, cflow, cflow

djvulibre

djvulibre vulnerabilities

mpv, mpv, mpv

mpv, mpv, mpv, mpv

kernel-rt

Security update for the Linux Kernel

ceph, ceph, ceph

libxml2, libxml2, libxml2

,

libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2

openldap, openldap, openldap

openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap, openldap