Open Source Vulnerabilities

stdlib

Path traversal via Clean on Windows in path/filepath

stdlib

Session tickets lack random ticket_age_add in crypto/tls

toolchain

Arbitrary code execution via the go command with cgo in cmd/go

toolchain

Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

stdlib

Exposure of client IP addresses in net/http

libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2

libxml2, libxml2, libxml2

,

libxml2

CVE-2016-3709 affecting package libxml2 for versions less than 2.10.4-1

libxml2, libxml2, libxml2

Prototype Pollution in automattic/mongoose

booth, booth, booth

booth

CVE-2022-2553 affecting package booth for versions less than 1.0-8

booth

CVE-2022-2553 affecting package booth for versions less than 1.0-8

booth, booth, booth

libguestfs, libguestfs, libguestfs

Security update for libguestfs

libtirpc, libtirpc

libtirpc vulnerability

kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-headers, perf, python-perf

Fixed CVE-2021-22543 in kernel

kernel-abi-whitelists, kernel-doc, kernel-firmware

Fixed CVE-2021-22543 in kernel

mysql-5.7, mysql-8.0, mysql-8.0

mysql-5.7, mysql-8.0 vulnerabilities

samba

Security update for samba

firefox, firefox

firefox vulnerabilities

juniper

Denial of service on deeply nested fragment requests

crash, crash

Security update for crash

crash

Security update for crash

crash

Security update for crash

xen

Security update for xen

Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector