Open Source Vulnerabilities

libxml2

CVE-2024-25062 affecting package libxml2 for versions less than 2.11.5-4

libxml2

CVE-2024-25062 affecting package libxml2 for versions less than 2.10.4-4

libxml2, libxml2, libxml2, libxml2, libxml2

linux, linux, linux

linux, linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-4.15, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-kvm, linux-oem, linux-oracle, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.11, linux-aws-5.13, linux-aws-5.15, linux-aws-5.8, linux-azure, linux-azure-5.11, linux-azure-5.13, linux-azure-5.15, linux-azure-5.8, linux-azure-fde, linux-azure-fde-5.15, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.15, linux-gcp-5.8, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.15, linux-hwe-5.8, linux-ibm, linux-ibm-5.15, linux-intel-5.13, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.15, linux-oracle-5.8, linux-raspi, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.15, linux-riscv-5.8, linux-xilinx-zynqmp, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-allwinner-5.19, linux-aws, linux-aws-5.19, linux-aws-6.2, linux-aws-6.5, linux-aws-6.8, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-6.5, linux-azure-6.8, linux-azure-fde, linux-azure-fde-5.19, linux-azure-fde-6.2, linux-azure-fde-6.8, linux-gcp, linux-gcp-5.19, linux-gcp-6.2, linux-gcp-6.5, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-5.19, linux-hwe-6.2, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.2, linux-nvidia-6.5, linux-nvidia-6.8, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oem-5.17, linux-oem-6.0, linux-oem-6.1, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-oracle-6.8, linux-raspi, linux-realtime, linux-riscv, linux-riscv-5.19, linux-riscv-6.5, linux-riscv-6.8, linux-starfive-5.19, linux-starfive-6.2, linux-starfive-6.5, linux-xilinx-zynqmp, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-realtime-6.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-6.14, linux-aws-6.17, linux-aws-7.0, linux-azure, linux-azure-6.11, linux-azure-6.14, linux-azure-6.17, linux-azure-7.0, linux-azure-fde, linux-azure-fde-6.14, linux-azure-fde-6.17, linux-azure-fde-7.0, linux-azure-nvidia, linux-azure-nvidia-6.14, linux-gcp, linux-gcp-6.11, linux-gcp-6.14, linux-gcp-6.17, linux-gcp-7.0, linux-gke, linux-gkeop, linux-hwe-6.11, linux-hwe-6.14, linux-hwe-6.17, linux-hwe-7.0, linux-ibm, linux-intel, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-nvidia, linux-nvidia-6.11, linux-nvidia-6.17, linux-nvidia-7.0, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oem-6.11, linux-oem-6.14, linux-oem-6.17, linux-oem-6.8, linux-oracle, linux-oracle-6.14, linux-oracle-6.17, linux-oracle-7.0, linux-raspi, linux-raspi-realtime, linux-realtime, linux-riscv, linux-riscv-6.14, linux-riscv-6.17, linux-riscv-7.0, linux-vmware, linux-xilinx, linux-bluefield, linux-raspi-realtime, linux-realtime, linux-realtime-6.14, linux-realtime-6.17, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-ibm, linux-nvidia, linux-nvidia-bos, linux-oem-7.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv

glibc

Updated glibc packages fix security vulnerabilities

dracut

Updated dracut package fixes enabling microcode

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerabilities

nss, firefox, firefox-l10n

Updated nss and firefox packages fix some security vulnerabilities

perl

Updated perl packages fix a security vulnerability

openssl

Updated openssl packages fix security vulnerabilities

x11-server, x11-server-xwayland, tigervnc

Updated x11-server, x11-server-xwayland and tigervnc fix security issues

htslib

Heap-buffer-overflow in hts_log

clamav

Heap-buffer-overflow in pdf_finalize_string

runc, runc

runc - security update

curl, curl, curl, curl, curl, curl, curl, curl

curl, curl

curl

CVE-2024-0853 affecting package curl for versions less than 8.8.0-1

curl

CVE-2024-0853 affecting package curl for versions less than 8.8.0-1

OCSP verification bypass with TLS session reuse

Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4

docker, docker

System.Security.Cryptography.Xml, System.Security.Cryptography.Xml, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-musl-arm

.NET Information Disclosure Vulnerability

remark-images-download

Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

zmarkdown

Local File Inclusion vulnerability in zmarkdown

ckb, ckb, ckb, ckb, ckb

Nervos CKB Permit load cell data from memory

ckb

Nervos CKB Pool does not remove the conflicting transactions from the statistics