Open Source Vulnerabilities

audacity

Updated audacity package fixes security vulnerability

bra

reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

cdr

Reading uninitialized memory can cause UB (`Deserializer::read_vec`)

golang-golang-x-text, golang-golang-x-text, golang-golang-x-text

buildah

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2

multus

CVE-2020-28852 affecting package multus for versions less than 4.0.2-1

golang-golang-x-text, golang-golang-x-text, golang-golang-x-text

buildah

CVE-2020-28851 affecting package buildah for versions less than 1.41.4-2

multus

CVE-2020-28851 affecting package multus for versions less than 4.0.2-1

golang-x-text, google-guest-agent, golang-x-text, golang-golang-x-text, golang-x-text

golang-x-text, google-guest-agent, golang-x-text, golang-golang-x-text, golang-x-text

privoxy, privoxy

Security update for privoxy

cache

Exposes internally used raw pointer

openexr

Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

platform/frameworks/minikin, platform/frameworks/minikin, platform/frameworks/minikin, platform/frameworks/minikin, platform/frameworks/minikin

:linux_kernel:

:unknown:

platform/frameworks/av, platform/frameworks/av, platform/frameworks/av, platform/frameworks/av, platform/frameworks/av