Open Source Vulnerabilities

kernel-rt

Important: kernel-rt security and bug fix update

389-ds-base

Moderate: 389-ds:1.4 security update

git-lfs

Moderate: git-lfs security and bug fix update

pgaudit, pg_repack, postgres-decoderbufs, postgres-decoderbufs, postgresql

Moderate: postgresql:12 security update

mecab, mecab-ipadic, mysql

Moderate: mysql:8.0 security, bug fix, and enhancement update

samba

Moderate: samba security and bug fix update

kernel

Important: kernel security, bug fix, and enhancement update

sqlite

Moderate: sqlite security update

jdom, jdom, jdom, jdom, jdom, jdom, jdom, jdom, jdom, jdom

Security update for jdom

zlib

Moderate: zlib security update

gnutls

Moderate: gnutls security update

libraw

Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

gstreamer

Heap-buffer-overflow in parse_subrip

@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

Tasks.org vulnerable to data exfiltration by malicous app or adb

OpenFGA Information Disclosure

@keystone-6/core vulnerable to field-level access-control bypass for multiselect field

Feathers - Query “__proto__” is converted to real prototype

OpenFGA Authorization Bypass

Dependency-Track vulnerable to logging of API keys in clear text when handling API requests using keys with insufficient permissions

Apache Batik prior to 1.16 allows RCE via scripting

Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input

Gin-vue-admin arbitrary file upload vulnerability caused by path traversal

OpenFGA Authorization Bypass

kartverket/github-workflows's run-terraform allows for RCE via terraform plan

GitHub Actions Runner vulnerable to Docker Command Escaping

Kirby CMS vulnerable to user enumeration in the brute force protection

Dataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability

Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application

Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Feathers - SQL injection via attribute aliases

Socket.io - Improper type validation in attachment parsing

Improper Control of Generation of Code ('Code Injection') in Azure CLI

device-mapper-multipath, device-mapper-multipath-devel, device-mapper-multipath-libs, kpartx, libdmmp

Important: device-mapper-multipath security update

thunderbird

Important: thunderbird security update

device-mapper-multipath, device-mapper-multipath-devel, device-mapper-multipath-libs, kpartx

Important: device-mapper-multipath security update

thunderbird

Important: thunderbird security update

kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-extra

Important: kernel-rt security and bug fix update

389-ds-base, 389-ds-base-devel, 389-ds-base-legacy-tools, 389-ds-base-libs, 389-ds-base-snmp, python3-lib389

Moderate: 389-ds:1.4 security update

git-lfs

Moderate: git-lfs security and bug fix update

pg_repack, pg_repack, pgaudit, pgaudit, postgres-decoderbufs, postgres-decoderbufs, postgresql, postgresql-contrib, postgresql-docs, postgresql-plperl, postgresql-plpython3, postgresql-pltcl, postgresql-server, postgresql-server-devel, postgresql-static, postgresql-test, postgresql-test-rpm-macros, postgresql-upgrade, postgresql-upgrade-devel

Moderate: postgresql:12 security update

ctdb, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, python3-samba, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-devel, samba-krb5-printing, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

Moderate: samba security and bug fix update

bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-doc, kernel-headers, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

Important: kernel security, bug fix, and enhancement update

lemon, sqlite, sqlite-devel, sqlite-doc, sqlite-libs

Moderate: sqlite security update

gnutls, gnutls-c++, gnutls-dane, gnutls-devel, gnutls-utils

Moderate: gnutls security update

zlib, zlib-devel, zlib-static

Moderate: zlib security update