Open Source Vulnerabilities

java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

java-1.8.0-openjdk: Fix of 8 CVEs

java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

java-1.8.0-openjdk: Fix of 8 CVEs

slurm, slurm, slurm

Security update for slurm

slurm_22_05, slurm_22_05, slurm_22_05, slurm_22_05

Security update for slurm_22_05

github.com/apache/servicecomb-service-center

Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability

org.springframework.cloud:spring-cloud-contract-shade, org.springframework.cloud:spring-cloud-contract-shade, org.springframework.cloud:spring-cloud-contract-shade

Spring Cloud Contract vulnerable to local information disclosure

github.com/apache/servicecomb-service-center

Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls2, mbedtls2, mbedtls2, mbedtls2, mbedtls2, mbedtls3

mbedtls, mbedtls, mbedtls

mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls2, mbedtls2, mbedtls2, mbedtls2, mbedtls2, mbedtls3

mbedtls, mbedtls, mbedtls

hvloader

CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6

hvloader

CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6

mbedtls, mbedtls, mbedtls, mbedtls

mbedtls, mbedtls, mbedtls, mbedtls

OCSP verification bypass with TLS session reuse

slurm_23_02, slurm_23_02, slurm_23_02

Security update for slurm_23_02

slurm

Security update for slurm

slurm_20_02

Security update for slurm_20_02

opensc, opensc

opencryptoki, opencryptoki, opencryptoki

opencryptoki

CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3

opencryptoki

CVE-2024-0914 affecting package opencryptoki 3.17.0-1

opencryptoki, opencryptoki, opencryptoki, opencryptoki, opencryptoki, opencryptoki, opencryptoki, opencryptoki

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

github.com/hashicorp/vault, github.com/hashicorp/vault, github.com/hashicorp/vault, github.com/hashicorp/vault

HashiCorp Vault Authentication bypass

go.etcd.io/etcd, go.etcd.io/etcd

Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV records

go.etcd.io/etcd, go.etcd.io/etcd

Etcd Gateway can include itself as an endpoint resulting in resource exhaustion

,

libssh, libssh-config, libssh-devel

Moderate: libssh security update

gnutls, gnutls-c++, gnutls-dane, gnutls-devel, gnutls-utils

Moderate: gnutls security update

,

glibc

glibc

glibc

curl

debian-security-support

debian-security-support - security update

firefox-esr

firefox-esr - security update

openjdk-11

openjdk-11 - security update

evm, evm-core, evm, evm, evm, evm, evm, evm-core, evm-core, evm-core, evm-core, evm-core

Memory over-allocation in evm crate