Open Source Vulnerabilities

tang

tang - security update

qemu-guest-agent, qemu-img, qemu-kvm, qemu-kvm-audio-pa, qemu-kvm-block-blkio, qemu-kvm-block-curl, qemu-kvm-block-rbd, qemu-kvm-common, qemu-kvm-core, qemu-kvm-device-display-virtio-gpu, qemu-kvm-device-display-virtio-gpu-ccw, qemu-kvm-device-display-virtio-gpu-pci, qemu-kvm-device-display-virtio-vga, qemu-kvm-device-usb-host, qemu-kvm-device-usb-redirect, qemu-kvm-docs, qemu-kvm-tools, qemu-kvm-ui-egl-headless, qemu-kvm-ui-opengl, qemu-pr-helper

Moderate: qemu-kvm security, bug fix, and enhancement update

trapperkeeper-webserver-jetty9-clojure

trapperkeeper-webserver-jetty9-clojure - security update

containernetworking-plugins

Moderate: containernetworking-plugins security and bug fix update

libvirt, libvirt-client, libvirt-client-qemu, libvirt-daemon, libvirt-daemon-common, libvirt-daemon-config-network, libvirt-daemon-config-nwfilter, libvirt-daemon-driver-interface, libvirt-daemon-driver-network, libvirt-daemon-driver-nodedev, libvirt-daemon-driver-nwfilter, libvirt-daemon-driver-qemu, libvirt-daemon-driver-secret, libvirt-daemon-driver-storage, libvirt-daemon-driver-storage-core, libvirt-daemon-driver-storage-disk, libvirt-daemon-driver-storage-iscsi, libvirt-daemon-driver-storage-logical, libvirt-daemon-driver-storage-mpath, libvirt-daemon-driver-storage-rbd, libvirt-daemon-driver-storage-scsi, libvirt-daemon-kvm, libvirt-daemon-lock, libvirt-daemon-log, libvirt-daemon-plugin-lockd, libvirt-daemon-plugin-sanlock, libvirt-daemon-proxy, libvirt-devel, libvirt-docs, libvirt-libs, libvirt-nss

Moderate: libvirt security, bug fix, and enhancement update

autocorr-af, autocorr-bg, autocorr-ca, autocorr-cs, autocorr-da, autocorr-de, autocorr-dsb, autocorr-el, autocorr-en, autocorr-es, autocorr-fa, autocorr-fi, autocorr-fr, autocorr-ga, autocorr-hr, autocorr-hsb, autocorr-hu, autocorr-is, autocorr-it, autocorr-ja, autocorr-ko, autocorr-lb, autocorr-lt, autocorr-mn, autocorr-nl, autocorr-pl, autocorr-pt, autocorr-ro, autocorr-ru, autocorr-sk, autocorr-sl, autocorr-sr, autocorr-sv, autocorr-tr, autocorr-vi, autocorr-vro, autocorr-zh, libreoffice, libreoffice-base, libreoffice-calc, libreoffice-core, libreoffice-data, libreoffice-draw, libreoffice-emailmerge, libreoffice-filters, libreoffice-gdb-debug-support, libreoffice-graphicfilter, libreoffice-gtk3, libreoffice-help-ar, libreoffice-help-bg, libreoffice-help-bn, libreoffice-help-ca, libreoffice-help-cs, libreoffice-help-da, libreoffice-help-de, libreoffice-help-dz, libreoffice-help-el, libreoffice-help-en, libreoffice-help-eo, libreoffice-help-es, libreoffice-help-et, libreoffice-help-eu, libreoffice-help-fi, libreoffice-help-fr, libreoffice-help-gl, libreoffice-help-gu, libreoffice-help-he, libreoffice-help-hi, libreoffice-help-hr, libreoffice-help-hu, libreoffice-help-id, libreoffice-help-it, libreoffice-help-ja, libreoffice-help-ko, libreoffice-help-lt, libreoffice-help-lv, libreoffice-help-nb, libreoffice-help-nl, libreoffice-help-nn, libreoffice-help-pl, libreoffice-help-pt-BR, libreoffice-help-pt-PT, libreoffice-help-ro, libreoffice-help-ru, libreoffice-help-si, libreoffice-help-sk, libreoffice-help-sl, libreoffice-help-sv, libreoffice-help-ta, libreoffice-help-tr, libreoffice-help-uk, libreoffice-help-zh-Hans, libreoffice-help-zh-Hant, libreoffice-impress, libreoffice-langpack-af, libreoffice-langpack-ar, libreoffice-langpack-as, libreoffice-langpack-bg, libreoffice-langpack-bn, libreoffice-langpack-br, libreoffice-langpack-ca, libreoffice-langpack-cs, libreoffice-langpack-cy, libreoffice-langpack-da, libreoffice-langpack-de, libreoffice-langpack-dz, libreoffice-langpack-el, libreoffice-langpack-en, libreoffice-langpack-eo, libreoffice-langpack-es, libreoffice-langpack-et, libreoffice-langpack-eu, libreoffice-langpack-fa, libreoffice-langpack-fi, libreoffice-langpack-fr, libreoffice-langpack-fy, libreoffice-langpack-ga, libreoffice-langpack-gl, libreoffice-langpack-gu, libreoffice-langpack-he, libreoffice-langpack-hi, libreoffice-langpack-hr, libreoffice-langpack-hu, libreoffice-langpack-id, libreoffice-langpack-it, libreoffice-langpack-ja, libreoffice-langpack-kk, libreoffice-langpack-kn, libreoffice-langpack-ko, libreoffice-langpack-lt, libreoffice-langpack-lv, libreoffice-langpack-mai, libreoffice-langpack-ml, libreoffice-langpack-mr, libreoffice-langpack-nb, libreoffice-langpack-nl, libreoffice-langpack-nn, libreoffice-langpack-nr, libreoffice-langpack-nso, libreoffice-langpack-or, libreoffice-langpack-pa, libreoffice-langpack-pl, libreoffice-langpack-pt-BR, libreoffice-langpack-pt-PT, libreoffice-langpack-ro, libreoffice-langpack-ru, libreoffice-langpack-si, libreoffice-langpack-sk, libreoffice-langpack-sl, libreoffice-langpack-sr, libreoffice-langpack-ss, libreoffice-langpack-st, libreoffice-langpack-sv, libreoffice-langpack-ta, libreoffice-langpack-te, libreoffice-langpack-th, libreoffice-langpack-tn, libreoffice-langpack-tr, libreoffice-langpack-ts, libreoffice-langpack-uk, libreoffice-langpack-ve, libreoffice-langpack-xh, libreoffice-langpack-zh-Hans, libreoffice-langpack-zh-Hant, libreoffice-langpack-zu, libreoffice-math, libreoffice-ogltrans, libreoffice-opensymbol-fonts, libreoffice-pdfimport, libreoffice-pyuno, libreoffice-sdk, libreoffice-sdk-doc, libreoffice-ure, libreoffice-ure-common, libreoffice-wiki-publisher, libreoffice-writer, libreoffice-x11, libreoffice-xsltfilter, libreofficekit

Moderate: libreoffice security update

iwl100-firmware, iwl1000-firmware, iwl105-firmware, iwl135-firmware, iwl2000-firmware, iwl2030-firmware, iwl3160-firmware, iwl5000-firmware, iwl5150-firmware, iwl6000g2a-firmware, iwl6000g2b-firmware, iwl6050-firmware, iwl7260-firmware, libertas-sd8787-firmware, linux-firmware, linux-firmware-whence, netronome-firmware

Important: linux-firmware security, bug fix, and enhancement update

ctdb, libnetapi, libnetapi-devel, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-dc, python3-samba-devel, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-dc-libs, samba-dcerpc, samba-devel, samba-krb5-printing, samba-ldb-ldap-modules, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-tools, samba-usershares, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

Moderate: samba security, bug fix, and enhancement update

libsndfile, libsndfile

Updated libsndfile packages fix a security vulnerability

thunderbird, thunderbird-l10n

Updated thunderbird packages fix security vulnerabilities

nss, firefox, firefox-l10n

Updated nss and firefox packages fix security vulnerabilities

x11-server, x11-server, x11-server-xwayland

Updated x11-server packages fix security vulnerabilities

Remote code execution through the section parameter in Administration as guest in XWiki Platform

Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

Service accounts can see namespaces of other tenants in capsule-proxy

github.com/projectcalico/calico, github.com/projectcalico/calico

Calico Typha denial of service vulnerability

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost-server/v5, github.com/mattermost/mattermost-server

Mattermost password hash disclosure vulnerability

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost vulnerable to excessive memory consumption

github.com/mattermost/mattermost-server/v6, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8, github.com/mattermost/mattermost/server/v8

Mattermost denial of service vulnerability

Unauthorized Access to Private Fields in User Registration API in strapi

squid, squid, squid

exiv2

CVE-2023-44398 affecting package exiv2 for versions less than 0.28.3-1

exiv2

CVE-2023-44398 affecting package exiv2 0.28.0-1

squid

CVE-2023-46728 affecting package squid 5.7-5

squid3, squid3, squid, squid

exiv2

Visual editor persistent Cross-site Scripting (XSS) in MyBB

Out-of-bounds write in exiv2

Missing Authorization in GitLab