Open Source Vulnerabilities

libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng, libpng

libpng1.6, libpng1.6, libpng1.6

libpng, libpng1.6, libpng1.6

tablib

Loaded Databook of Tablib prone to python insertion resulting in command execution

diffoscope

Diffoscope may write to arbitrary locations due to an untrusted archive

pysaml2

pysaml2 Improper Authentication vulnerability

owlmixin

Unsafe deserialization in owlmixin

mlalchemy

Unsafe deserialization in MLAlchemy

cfscrape

cfscrape Improper Input Validation vulnerability

soundtouch, soundtouch, soundtouch

soundtouch, soundtouch, soundtouch

soundtouch, soundtouch, soundtouch

soundtouch, soundtouch, soundtouch

exiv2

django-epiceditor

django-epiceditor vulnerable to XSS in form field

fedmsg

FedMsg not properly completing message validation

mercurial

Mercurial has Incorrect Permission Assignment for Critical Resource

python-fedora

python-fedora vulnerable to an open redirect resulting in loss of CSRF protection

django-make-app

django_make_app is vulnerable to Code Injection

ansible-vault

Code injection in ansible

oslo-middleware, oslo-middleware, oslo-middleware, oslo-middleware, oslo-middleware, oslo-middleware

oslo.middleware Information Disclosure vulnerability

twitter-bootstrap3, twitter-bootstrap3, twitter-bootstrap3

twitter-bootstrap3, twitter-bootstrap3, twitter-bootstrap3

python-openstackdocstheme

CVE-2018-14040 affecting package python-openstackdocstheme 3.0.0-9

python-openstackdocstheme

CVE-2018-14042 affecting package python-openstackdocstheme 3.0.0-9

python-openstackdocstheme

CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8

reaper

CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1

twitter-bootstrap, twitter-bootstrap3, twitter-bootstrap, twitter-bootstrap3

twitter-bootstrap, twitter-bootstrap3, twitter-bootstrap, twitter-bootstrap3

accountsservice, accountsservice, accountsservice

accountsservice, accountsservice, accountsservice

crash, lttng-modules, kernel-azure, kernel-source-azure, kernel-syms-azure, dpdk, dpdk-thunderx, drbd

Initial update for kernel-azure

libopenmpt

Security update for libopenmpt

gdk-pixbuf, gdk-pixbuf, gdk-pixbuf, gdk-pixbuf

Security update for gdk-pixbuf

kgraft-patch-SLE12-SP2_Update_21, kgraft-patch-SLE12-SP2_Update_21

Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2)

hdf5, hdf5, hdf5