Open Source Vulnerabilities

Prototype Pollution vulnerability in @clickbar/dot-diver

opensc, opensc, opensc

opensc

CVE-2023-4535 affecting package opensc for versions less than 0.25.1-3

opensc

CVE-2023-4535 affecting package opensc for versions less than 0.23.0-2

opensc, opensc, opensc

opensc, opensc, opensc

opensc

CVE-2023-40661 affecting package opensc for versions less than 0.25.1-3

opensc

CVE-2023-40660 affecting package opensc for versions less than 0.25.1-3

opensc

CVE-2023-40660 affecting package opensc for versions less than 0.23.0-4

opensc

CVE-2023-40661 affecting package opensc for versions less than 0.23.0-5

opensc, opensc, opensc, opensc, opensc, opensc

opensc, opensc

opensc, opensc

SQUID-2021:8 Denial of Service in Gopher gateway

Opensc: multiple memory issues with pkcs15-init (enrollment tool)

Opensc: potential pin bypass when card tracks its own login state

Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys

openssl, openssl, openssl

openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl, openssl

openssl-fips-provider

CVE-2023-5678 affecting package openssl-fips-provider 3.1.2-2

cloud-hypervisor-cvm

CVE-2023-5678 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

kata-containers

CVE-2023-5678 affecting package kata-containers for versions less than 3.2.0.azl1-1

openssl

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28

edk2

CVE-2023-5678 affecting package edk2 for versions less than 20230301gitf80f052277c8-38

edk2

CVE-2023-5678 affecting package edk2 for versions less than 20230301gitf80f052277c8-38

openssl

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28

hvloader

CVE-2023-5678 affecting package hvloader for versions less than 1.0.1-9

cloud-hypervisor-cvm

CVE-2023-5678 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1

openssl, openssl, openssl, openssl

openssl, edk2, openssl, openssl, openssl, openssl1.0, edk2, openssl, openssl, openssl, edk2, openssl, openssl, edk2, openssl, nodejs, openssl, openssl, edk2, openssl

squid, squid

Security update for squid

squid, squid, squid, squid

Security update for squid

Denial of Service via Link Preview in /api/v4/redirect_location

Excessive time spent in DH check / generation with large Q parameter value

Password hash in response body after username update

Denial of Service via crashing the Calls Plugin

Calico Typha hangs during unclean TLS handshake

Rapid7 Velociraptor Reflected XSS

kernel-default, kernel-default-base, kernel-default, kernel-default-base, kernel-64kb, kernel-default, kernel-default-base, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP4_Update_20, kernel-default, kernel-default, kernel-default, kernel-default-base, kernel-default, kernel-default-base, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel

gitlab, gitlab-agent, gitlab-agent, gitlab-agent, gitlab-agent

gitlab, gitlab-agent, gitlab-agent, gitlab-agent, gitlab-agent

gitlab

wasmedge

Segv on unknown address in FunctionCompiler::compileReturn

kernel-default, kernel-livepatch-SLE15-SP2_Update_42, kernel-default, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-preempt, kernel-source, kernel-syms

Security update for the Linux Kernel

redis, redis, redis, redis, redis, redis, redis, redis, redis, redis

Security update for redis

kernel-default, kernel-default-base, kernel-64kb, kernel-default, kernel-default-base, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP5_Update_7, kernel-default, kernel-default, dtb-aarch64, kernel-64kb, kernel-debug, kernel-default, kernel-default-base, kernel-docs, kernel-kvmsmall, kernel-obs-build, kernel-obs-qa, kernel-source, kernel-syms, kernel-zfcpdump

Security update for the Linux Kernel