Open Source Vulnerabilities

gnutls

Updated gnutls packages fix security vulnerabilities

gpac

Updated gpac packages fix security vulnerabilities

microcode

Updated microcode fixes bugs and a security vulnerability

postfix

Updated postfix packages fix a security vulnerability

pam

Updated pam packages fix a security vulnerability

kernel-linus

Updated kernel-linus fixes security vulnerabilities and many bugs

october/october

October CMS Cross-site Scripting vulnerability

micronaut-core management endpoints vulnerable to drive-by localhost attack

composer, composer, composer, composer, composer, composer

composer, composer, composer

icingaweb2-module-director, icingaweb2-module-director, icingaweb2-module-director

icingaweb2-module-director, icingaweb2-module-director, icingaweb2-module-director

composer

dirac

jackson-databind

Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

icingaweb2-module-incubator base implementation for HTML forms is susceptible to CSRF

checkstyle

Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst

php

Heap-use-after-free in fuzzer_execute_ex

threetenbp

Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse

Icinga Director configuration is susceptible to Cross-Site Request Forgery

node-ip, node-ip, node-ip, node-ip

clamav

libgit2, libgit2

libgit2 - security update

Code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php in Composer

SSRF in Sentry via Phabricator integration

TokenManager not checking permissions on cached tokens in DIRAC