Open Source Vulnerabilities

dotnet6.0

Moderate: .NET 6.0 security update

squid

Critical: squid security update

nginx

Moderate: nginx:1.22 security update

binutils

Moderate: binutils security update

libecap, squid

Critical: squid:4 security update

dotnet6.0

Moderate: .NET 6.0 security update

Important: Satellite 6.14 security and bug fix update

github.com/juanfont/headscale

Headscale writes bearer tokens to info-level logs

apache-poi

Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

fluent-bit

Segv on unknown address in flb_sds_cat_safe

mupdf, mupdf

Security update for mupdf

openvpn, openvpn, openvpn

openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn

openvpn, openvpn, openvpn

openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn

Gitsign's Rekor public keys fetched from upstream API instead of local TUF client.

kube-vip-cloud-provider

CVE-2023-47108 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

moby-containerd-cc

CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.7-3

ig

CVE-2023-47108 affecting package ig for versions less than 0.30.0-1

docker-compose

CVE-2023-47108 affecting package docker-compose for versions less than 2.27.0-1

docker-buildx

CVE-2023-47108 affecting package docker-buildx for versions less than 0.14.0-1

containerd

CVE-2023-47108 affecting package containerd for versions less than 1.7.13-3

moby-containerd-cc

CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3

golang-opentelemetry-contrib, golang-opentelemetry-contrib, golang-opentelemetry-contrib

Statamic CMS remote code execution via front-end form uploads

DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

symfony, symfony, symfony

symfony, symfony, symfony

piccolo

symfony, symfony, symfony, symfony, symfony, symfony

symfony

symfony, symfony, symfony, symfony

piccolo SQL Injection via named transaction savepoints

Symfony potential Cross-site Scripting in WebhookController

Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters

clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav, clamav

Security update for clamav

grub, grub

kernel-azure, kernel-source-azure, kernel-syms-azure, kernel-azure, kernel-source-azure, kernel-syms-azure

Security update for the Linux Kernel

Symfony possible session fixation vulnerability