Open Source Vulnerabilities

Denial of service in mattermost mobile apps and server via emoji reactions

nonebot2

NoneBot Potential Information Leak in User-Constructed Message Templates

Incorrect Authorization leads to Channel Member Count Leak

Missing authorization allows users to access arbitrary security levels on Jira through webhooks (Jira Plugin)

CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)

linux-intel-iotg

linux-intel-iotg vulnerabilities

bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

kernel: Fix of 11 CVEs

getgrav/grav

Cross-site scripting (XSS) vulnerability in Grav

zabbix, zabbix, zabbix

zabbix, zabbix, zabbix, zabbix

python-Pillow, python-Pillow

Security update for python-Pillow

xorg-server, xorg-server, xorg-server, xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland, xwayland, xwayland, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-x11-server

CVE-2024-0229 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2024-0229 affecting package xorg-x11-server for versions less than 1.20.10-12

python3, python3-base, python3, python3-base, python3, python3-base, python3, python3-base

Security update for python3

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

libuv, nodejs, libuv, nodejs, nodejs, libuv, nodejs

postgresql15, postgresql16

kernel, kmod-xtables-addons, kmod-virtualbox, gnome-applets, mate-applets

Updated kernel packages fix security vulnerabilities and other bugs