Open Source Vulnerabilities

com.fasterxml.woodstox:woodstox-core, com.fasterxml.woodstox:woodstox-core

Denial of Service due to parser crash

com.fasterxml.woodstox:woodstox-core, com.fasterxml.woodstox:woodstox-core

Denial of Service via stack overflow

com.fasterxml.woodstox:woodstox-core, com.fasterxml.woodstox:woodstox-core

Denial of Service via stack overflow

org.codehaus.jettison:jettison

Jettison parser crash by stackoverflow

com.fasterxml.woodstox:woodstox-core, com.fasterxml.woodstox:woodstox-core

Denial of Service due to parser crash

com.fasterxml.woodstox:woodstox-core, com.fasterxml.woodstox:woodstox-core

Denial of Service due to parser crash

com.thoughtworks.xstream:xstream

Duplicate Advisory: Denial of Service due to parser crash

Kernel

scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

Kernel

gadgetfs: ep_io - wait until IRQ finishes

craftcms/cms

Craft CMS Stored Cross-site Scripting in User Addresses Title

craftcms/cms

Craft CMS Cross site Scripting vulnerability

Kernel

habanalabs/gaudi: fix shift out of bounds

@budibase/worker, @budibase/builder, @budibase/bbui

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

Kernel

cxl: Fix a memory leak in an error handling path

craftcms/cms

Craft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page

steal

steal vulnerable to Prototype Pollution

craftcms/cms, craftcms/cms

Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts

Kernel

um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups

swift-nio

Invalid-free in function signature specialization <Arg

Kernel

dmaengine: dw-axi-dmac: do not print NULL LLI during error

hunspell

Heap-double-free in HashMgr::~HashMgr

Kernel

csky/kprobe: reclaim insn_slot on kprobe unregistration

Kernel

dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

Kernel

dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed

Kernel

drivers:md:fix a potential use-after-free bug

Kernel

ext4: avoid remove directory when directory is corrupted

Kernel

ext4: avoid resizing to a partial cluster size

Kernel

lib/list_debug.c: Detect uninitialized lists

Kernel

tty: serial: Fix refcount leak bug in ucc_uart.c

Kernel

mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

Kernel

RISC-V: Add fast call path of crash_kexec()

Heap-based Buffer Overflow in vim/vim

connman

connman - security update

Kernel

ALSA: timer: Use deferred fasync helper

Kernel

kbuild: dummy-tools: avoid tmpdir leak in dummy gcc

Kernel

xfrm: policy: fix metadata dst->dev xmit null pointer dereference

Kernel

kprobes: don't call disarm_kprobe() for disabled kprobes

Kernel

smb3: check xattr value length earlier

Kernel

xfrm: fix refcount leak in __xfrm_policy_check()

Kernel

rose: check NULL rose_loopback_neigh->loopback

Kernel

f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

Kernel

NFSv4.2 fix problems with __nfs42_ssc_open

Kernel

powerpc/64: Init jump labels before parse_early_param()

Kernel

video: fbdev: i740fb: Check the argument of i740_calc_vclk()

Kernel

venus: pm_helpers: Fix warning in OPP during probe

Kernel

ice: xsk: prohibit usage of non-balanced queue id

Kernel

nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout

Kernel

net/mlx5: Avoid false positive lockdep warning by adding lock_class_key

Kernel

netfilter: flowtable: fix stuck flows on cleanup due to pending work

Kernel

net: Fix data-races around weight_p and dev_weight_[rt]x_bias.