Open Source Vulnerabilities

postfix, postfix-bdb, postfix, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix-bdb, postfix, postfix, postfix, postfix-bdb, postfix, postfix-bdb

Security update for postfix

winter/wn-backend-module

Winter CMS Local File Inclusion through Server Side Template Injection

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8

Mattermost viewing archived public channels permissions vulnerability

github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6

Mattermost notified all users in the channel when using WebSockets to respond individually

github.com/mattermost/mattermost/server/v8

Mattermost allows demoted guests to change group names

polkit, polkit, polkit, polkit, polkit, polkit, polkit, polkit

Security update for polkit

vmm-sys-util

`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access

qemu, qemu, qemu

qemu, qemu

qemu

CVE-2023-6693 affecting package qemu for versions less than 8.2.0-13

qemu

CVE-2023-6693 affecting package qemu for versions less than 6.2.0-21

qemu

Details of archived public channels are leaked to members of another team

Lack of restriction to manage group names for freshly demoted guests

Keywords that trigger mentions are leaked to other users

libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org, libssh2_org

Security update for libssh2_org

thunderbird, thunderbird

thunderbird vulnerabilities

,

Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()

gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad, gstreamer-plugins-bad

Security update for gstreamer-plugins-bad

webkit2gtk3-soup2, webkit2gtk3-soup2, webkit2gtk3, webkit2gtk3, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3-soup2, webkit2gtk3-soup2, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4

Security update for webkit2gtk3

webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3, webkit2gtk3

Security update for webkit2gtk3

webkit2gtk3, webkit2gtk3, webkit2gtk3

Security update for webkit2gtk3

follow-redirects

Follow Redirects improperly handles URLs in the url.parse() function

Perl: perl for windows binary hijacking vulnerability

node-follow-redirects, node-follow-redirects, node-follow-redirects

js-jquery

CVE-2023-26159 affecting package js-jquery 3.5.0-4

python-tensorboard

CVE-2023-26159 affecting package python-tensorboard for versions less than 2.16.2-1

js-jquery

CVE-2023-26159 affecting package js-jquery 3.5.0-4

reaper

CVE-2023-26159 affecting package reaper for versions less than 3.1.1-8

node-follow-redirects, node-follow-redirects, node-follow-redirects

firefox

firefox vulnerabilities