Open Source Vulnerabilities

chromium-browser-stable

Updated chromium-browser-stable packages fix security vulnerability

suricata

Heap-buffer-overflow in DetectGetLastSMFromMpmLists

libjxl

Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

systemd

Use-of-uninitialized-value in json_buildv

fluent-bit

Heap-use-after-free in mk_event_timeout_destroy

libmodbus

libmodbus - security update

thunderbird

thunderbird - security update

ruby-rack

ruby-rack - security update

flac

flac - security update

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-3099 affecting package vim for versions less than 9.0.0490-1

vim, vim, vim, vim, vim

exiv2

Heap-buffer-overflow in Exiv2::MemIo::read

ghostscript

Heap-use-after-free in xps_tifsSeekProc

ghostscript

UNKNOWN READ in stream_finalize

apache-airflow

Apache Airflow Session Fixation vulnerability

apache-airflow

Apache Airflow exposes arbitrary file content

Use After Free in vim/vim

rails

rails - security update

ghostscript

ghostscript - security update

libvncserver, libvncserver, libvncserver

tightvnc, x11vnc, libvncserver, italc, tightvnc, x11vnc, libvncserver, italc, tightvnc, x11vnc, libvncserver, tightvnc, veyon, x11vnc, libvncserver, tightvnc, veyon, x11vnc, tightvnc, veyon, x11vnc, tightvnc, veyon, x11vnc, tightvnc, veyon, x11vnc, tightvnc, veyon, x11vnc

os_socketaddr

`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr

linux-aws

linux-aws vulnerability

davs2, davs2

linux-oem-5.17

linux-oem-5.17 vulnerabilities

indy-node

Indy's NODE_UPGRADE transaction vulnerable to remote code execution

linux-aws-5.4, linux-azure-5.4

linux-aws-5.4, linux-azure-5.4 vulnerabilities

influxdb, influxdb, influxdb

influxdb, influxdb, influxdb, influxdb, influxdb

k8s.io/apimachinery

Unbounded recursion in JSON parsing in k8s.io/apimachinery

matrix-synapse

matrix-synapse

matrix-synapse, matrix-synapse, matrix-synapse

Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules

webkit2

Updated webkit2 packages fix security vulnerability

ytnef

Updated ytnef packages fix security vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Databasir

PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)

github.com/gagliardetto/binary

Resource exhaustion in github.com/gagliardetto/binary