Open Source Vulnerabilities

dracut-saltboot, golang-github-lusitaniae-apache_exporter, grafana, mgr-daemon, spacecmd, spacewalk-client-tools, uyuni-common-libs, golang-github-lusitaniae-apache_exporter, golang-github-lusitaniae-apache_exporter, golang-github-lusitaniae-apache_exporter, golang-github-lusitaniae-apache_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, dracut-saltboot, golang-github-lusitaniae-apache_exporter, spacecmd, dracut-saltboot, golang-github-lusitaniae-apache_exporter, spacecmd

Security update for SUSE Manager Client Tools

mgr-daemon, spacecmd, spacewalk-backend, spacewalk-certs-tools, spacewalk-client-tools, spacewalk-web, susemanager-build-keys, susemanager-tftpsync-recv, uyuni-common-libs, cobbler, drools, image-sync-formula, inter-server-sync, locale-formula, python-magic, python-schema, python-urlgrabber, reprepro, saltboot-formula, spacecmd, spacewalk-admin, spacewalk-backend, spacewalk-certs-tools, spacewalk-client-tools, spacewalk-java, spacewalk-search, spacewalk-setup, spacewalk-utils, spacewalk-web, subscription-matcher, susemanager, susemanager-build-keys, susemanager-docs_en, susemanager-schema, susemanager-sls, susemanager-sync-data, susemanager-tftpsync, uyuni-common-libs, uyuni-reportdb-schema

Security update for SUSE Manager Server 4.3

golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-lusitaniae-apache_exporter, golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter, grafana, kiwi-desc-saltboot, mgr-daemon, spacecmd, spacewalk-client-tools, uyuni-common-libs, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter

Security update for SUSE Manager Client Tools

golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter, golang-github-prometheus-node_exporter

Security update for golang-github-prometheus-node_exporter

telnet, telnet, telnet, telnet, telnet, telnet, telnet, telnet

Security update for telnet

.netrc parser out-of-bounds access

HSTS bypass via IDN

HTTP proxy double free

POST following PUT confusion

curl

curl

curl, curl, curl, curl, curl

linux, linux, linux

kernel

CVE-2022-43750 affecting package kernel for versions less than 5.15.77.1-1

linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2, linux-azure-fde, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-6.2, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

ghostscript

Stack-use-after-return in gs_type2_interpret

jackson-databind

Security exception in jaz.Zer.<clinit>

guava

Security exception in com.google.common.hash.Hashing$ConcatenatedHashFunction.makeHash

Apache IoTDB prior to 0.13.3 allows DoS

The Apache Linkis JDBC EngineConn module has a RCE Vulnerability

Ruby on Rails _table.html.erb cross site scripting

Winter vulnerable to Prototype Pollution in Snowboard framework

Twisted vulnerable to NameVirtualHost Host header injection

Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow

Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free

Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow

Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference

Metabase vulnerable to circumvention of Locked parameter in Signed Embedding

Discourse Patreon vulnerable to improper validation of email during Patreon authentication

Execution with Unnecessary Privileges in JupyterApp

Axiomatic Bento4 mp42hevc WriteSample heap-based overflow

Axiomatic Bento4 mp4edit Create memory leak

Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak

Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow

Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free

Business Logic Errors in ikus060/rdiffweb

chromium

chromium - security update

tomcat9

tomcat9 - security update

,

Metabase vulnerable to arbitrary SQL execution from queryhash

Metabase vulnerable to Remote Code Execution via H2

Metabase SSO users able to circumvent IdP login by doing password reset

Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs

vim autocmd quickfix.c qf_update_buffer use after free

Bazel leaks user credentials through the remote assets API

libdatetime-timezone-perl

libdatetime-timezone-perl - new timezone database

wordpress

wordpress - security update