Open Source Vulnerabilities

openjdk-8, openjdk-9, openjdk-lts, openjdk-17, openjdk-8, openjdk-17, openjdk-8, openjdk-lts, openjdk-13, openjdk-16, openjdk-17, openjdk-18, openjdk-21, openjdk-8, openjdk-lts

,

exim, exim-greylist, exim-mon, exim-mysql, exim-pgsql

Update of exim

exim, exim-greylist, exim-mon, exim-mysql, exim-pgsql

Update of exim

cups, cups-bsd, cups-client, cups-common, cups-core-drivers, cups-daemon, cups-ipp-utils, cups-ppdc, cups-server-common, libcups2, libcups2-dev, libcupscgi1, libcupsimage2, libcupsimage2-dev, libcupsmime1, libcupsppdc1

Fix CVE(s): CVE-2023-4504

cups, cups-bsd, cups-client, cups-common, cups-core-drivers, cups-daemon, cups-ipp-utils, cups-ppdc, cups-server-common, libcups2, libcups2-dev, libcupscgi1, libcupscgi1-dev, libcupsimage2, libcupsimage2-dev, libcupsmime1, libcupsmime1-dev, libcupsppdc1, libcupsppdc1-dev

Fix CVE(s): CVE-2023-4504

urllib3, urllib3

urllib3's request body not stripped after redirect from 303 status changes request method to GET

python-urllib3, python-urllib3, python-urllib3

py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3, py3-urllib3

python-pip

CVE-2023-45803 affecting package python-pip for versions less than 24.2-1

python-urllib3

CVE-2023-45803 affecting package python-urllib3 for versions less than 2.0.7-1

python3

CVE-2023-45803 affecting package python3 for versions less than 3.9.19-14

python-urllib3

CVE-2023-45803 affecting package python-urllib3 for versions less than 1.26.18-1

py3-urllib3, py3-urllib3

urllib3

python-pip, python-urllib3, python-urllib3, python-pip, python-urllib3, python-pip, python-pip, python-urllib3, python-pip, python-urllib3, python-pip

SQL Injection in nocodb

Request body not stripped after redirect in urllib3

pmix, pmix, pmix

pmix vulnerability

opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc, opensc

Security update for opensc

idle-python3.5, libpython3.5, libpython3.5-dev, libpython3.5-minimal, libpython3.5-stdlib, libpython3.5-testsuite, python3.5, python3.5-dev, python3.5-doc, python3.5-examples, python3.5-minimal, python3.5-venv

Fix CVE(s): CVE-2022-48566

com.liferay.commerce:com.liferay.commerce.address.content.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module

buildah

Security update for buildah