Open Source Vulnerabilities

vantage6

vantage6 does not properly delete linked resources when deleting a collaboration

python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

python2: Fix of CVE-2022-48566

cachethq/cachet

Cachet vulnerable to Authenticated Remote Code Execution

iperf3

iperf3 vulnerability

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

curl: Fix of CVE-2023-38546

python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

python2: Fix of CVE-2022-48566

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

curl: Fix of CVE-2023-38546

undici

Undici's cookie header not cleared on cross-origin redirect in fetch

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful, go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin, go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux, go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho, go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron, go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

curl, libcurl, libcurl-devel

curl: Fix of CVE-2023-38546

@babel/traverse, @babel/traverse, babel-traverse

Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

curl, libcurl, libcurl-devel

curl: Fix of CVE-2023-38546

sysstat

sysstat: Fix of 2 CVEs

python, python-debug, python-devel, python-libs, python-test, python-tools, tkinter

python: Fix of CVE-2022-48566

curl, libcurl, libcurl-devel

curl: Fix of CVE-2023-38546

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2022-48566

exim4, exim4-base, exim4-config, exim4-daemon-heavy, exim4-daemon-light, exim4-dev, eximon4

Fix CVE(s): CVE-2023-42116, CVE-2023-42114

curl, libcurl3, libcurl3-gnutls, libcurl3-nss, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev

Fix CVE(s): CVE-2023-38546

curl, libcurl3-gnutls, libcurl3-nss, libcurl4, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev

Fix CVE(s): CVE-2023-38546

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2022-48566

idle-python3.6, libpython3.6, libpython3.6-dev, libpython3.6-minimal, libpython3.6-stdlib, libpython3.6-testsuite, python3.6, python3.6-dev, python3.6-doc, python3.6-examples, python3.6-minimal, python3.6-venv

Fix CVE(s): CVE-2022-48566

iperf3, iperf3, iperf3

iperf3 vulnerabilities

github.com/grafana/google-sheets-datasource

Google Sheets data source plugin for Grafana information disclosure vulnerability

opensc, opensc, opensc, opensc, opensc

Security update for opensc

grub2, grub2

Security update for grub2

netatalk, netatalk

Security update for netatalk

github.com/grafana/grafana

Grafana privilege escalation vulnerability