Open Source Vulnerabilities

libpff, libpff

sqlite3

sqlite3 - security update

openjpeg2

openjpeg2 - security update

libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee

libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee

libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, libraw, darktable, dcraw, exactimage, kodi, rawtherapee, ufraw, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee, darktable, dcraw, exactimage, kodi, rawtherapee

definitions

sqlite, sqlite, sqlite

chromium, chromium, chromium, sqlite3, sqlite3, sqlite3

ceph

CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1

CVE-2018-20346 does not affect BellSoft software

kernel, kernel-userspace-headers, kmod-vboxadditions, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

commons-fileupload:commons-fileupload

Improper Access Control in commons-fileupload

commons-fileupload:commons-fileupload, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Commons FileUpload Denial of service vulnerability

org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

Path Traversal in Hadoop

org.apache.hadoop:hadoop-main

Arbitrary Command Execution in Hadoop

org.apache.hadoop:hadoop-main

Exposure of Sensitive Information in Hadoop

org.apache.hadoop:hadoop-main, org.apache.hadoop:hadoop-main

Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

org.apache.hadoop:hadoop-main

Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss, MozillaFirefox, mozilla-nspr, mozilla-nss

Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

org.apache.karaf:apache-karaf

Improper Privilege Management in Apache Karaf

org.keycloak:keycloak-core

Improper Authentication in Keycloak

com.squareup.retrofit2:retrofit

XML External Entity (XXE) vulnerability in Square Retrofit

com.squareup.retrofit2:retrofit

Directory Traversal vulnerability in Square Retrofit

commons-fileupload:commons-fileupload

High severity vulnerability that affects commons-fileupload:commons-fileupload

mozilla-nspr, mozilla-nss, MozillaFirefox

Security update for MozillaFirefox, mozilla-nspr and mozilla-nss

com.fasterxml.jackson.datatype:jackson-datatype-jsr310

Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353

pykmip

PyKMIP Denial of service vulnerability

org.esigate:esigate-core

Remote Code Execution in esigate-core

easymon

Cross Site Scripting (XSS) vulnerability in easymon