Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2020-26263
    Fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-17526
    Fix available
    Packages

    Summary

    Published
    21 Dec 2020
    PYSEC-2020-143
    Fix available
    Packages

    tlslite-ng

    Summary

    Published
    21 Dec 2020
    PYSEC-2020-22
    Fix available
    Packages

    apache-airflow

    Summary

    Published
    21 Dec 2020
    UBUNTU-CVE-2020-26263
    No fix available
    Packages

    tlslite-ng, tlslite-ng

    Summary

    Published
    21 Dec 2020
    GHSA-wvcv-832q-fjg7
    Fix available
    Packages

    tlslite-ng

    Summary

    RSA weakness in tslite-ng

    Published
    21 Dec 2020
    GHSA-4cch-wxpw-8p28
    Fix available
    Packages

    com.thoughtworks.xstream:xstream

    Summary

    Server-Side Forgery Request can be activated unmarshalling with XStream

    Published
    21 Dec 2020
    GHSA-jfvx-7wrx-43fh
    Fix available
    Packages

    com.thoughtworks.xstream:xstream

    Summary

    XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling

    Published
    21 Dec 2020
    GHSA-vqqx-jw6p-q3rf
    Fix available
    Packages

    typo3/cms-core, typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms, typo3/cms

    Summary

    Cross-Site Scripting in Fluid view helpers

    Published
    21 Dec 2020
    CVE-2020-3999
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-27846
    Fix available
    Packages

    ,

    Summary

    Published
    21 Dec 2020
    CVE-2019-16959
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    GHSA-5fw9-fq32-wv5p
    Fix available
    Packages

    node-notifier

    Summary

    OS Command Injection in node-notifier

    Published
    21 Dec 2020
    CVE-2020-35276
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-35275
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-35274
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-35273
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-26049
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    SUSE-SU-2020:3897-1
    Fix available
    Packages

    ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark, venv-openstack-barbican, venv-openstack-cinder, venv-openstack-designate, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark

    Summary

    Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark

    Published
    21 Dec 2020
    RUSTSEC-2020-0105
    Fix available
    Packages

    abi_stable

    Summary

    Update unsound DrainFilter and RString::retain

    Published
    21 Dec 2020
    SUSE-SU-2020:3895-1
    Fix available
    Packages

    ceph, ceph

    Summary

    Security update for ceph

    Published
    21 Dec 2020
    SUSE-SU-2020:1220-1
    Fix available
    Packages

    ghostscript, libspectre, ghostscript, libspectre, ghostscript, libspectre, ghostscript, libspectre, ghostscript, libspectre

    Summary

    Security update for ghostscript

    Published
    21 Dec 2020
    Packages

    curl-openssl1

    Summary

    Security update for curl

    Published
    21 Dec 2020
    SUSE-SU-2020:3892-1
    Fix available
    Packages

    slurm_20_02

    Summary

    Security update for slurm_20_02

    Published
    21 Dec 2020
    Packages

    MozillaFirefox

    Summary

    Security update for MozillaFirefox

    Published
    21 Dec 2020
    CVE-2020-35590
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    CVE-2020-35589
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    Packages

    webkit2gtk3

    Summary

    Security update for webkit2gtk3

    Published
    21 Dec 2020
    Packages

    webkit2gtk3

    Summary

    Security update for webkit2gtk3

    Published
    21 Dec 2020
    CVE-2020-29447
    No fix available
    Packages

    Summary

    Published
    21 Dec 2020
    DLA-2503-1
    Fix available
    Packages

    node-ini

    Summary

    node-ini - security update

    Published
    21 Dec 2020
    Packages

    gcc7

    Summary

    Security update for gcc7

    Published
    20 Dec 2020
    Packages

    gcc7

    Summary

    Security update for gcc7

    Published
    20 Dec 2020
    Packages

    openssh, openssh-askpass-gnome

    Summary

    Security update for openssh

    Published
    20 Dec 2020
    MGASA-2020-0464
    Fix available
    Packages

    openjpeg2

    Summary

    Updated openjpeg2 packages fix security vulnerabilities

    Published
    20 Dec 2020
    RUSTSEC-2020-0095
    No fix available
    Packages

    difference

    Summary

    difference is unmaintained

    Published
    20 Dec 2020
    RUSTSEC-2020-0108
    Fix available
    Packages

    eventio

    Summary

    Soundness issue: Input<R> can be misused to create data race to an object

    Published
    20 Dec 2020
    CVE-2020-35579
    No fix available
    Packages

    Summary

    Published
    20 Dec 2020
    CVE-2020-35573
    Fix available
    Packages

    Summary

    Published
    20 Dec 2020
    Packages

    postsrsd, postsrsd, postsrsd

    Summary

    Published
    20 Dec 2020
    Packages

    postsrsd, postsrsd, postsrsd, postsrsd

    Summary

    Published
    20 Dec 2020
    DLA-2501-1
    Fix available
    Packages

    influxdb

    Summary

    influxdb - security update

    Published
    20 Dec 2020
    DLA-2502-1
    Fix available
    Packages

    postsrsd

    Summary

    postsrsd - security update

    Published
    20 Dec 2020
    Packages

    PackageKit

    Summary

    Security update for PackageKit

    Published
    19 Dec 2020
    RUSTSEC-2020-0106
    Fix available
    Packages

    multiqueue2

    Summary

    Queues allow non-Send types to be sent to other threads, allowing data races

    Published
    19 Dec 2020
    Packages

    slurm

    Summary

    Security update for slurm_18_08

    Published
    19 Dec 2020
    OSV-2020-2276
    Fix available
    Packages

    opensc

    Summary

    Negative-size-param in tcos_decipher

    Published
    19 Dec 2020
    OSV-2020-2274
    Fix available
    Packages

    openh264

    Summary

    Heap-buffer-overflow in McCopyWidthEq4_c

    Published
    19 Dec 2020
    OSV-2020-2273
    Fix available
    Packages

    perfetto

    Summary

    Stack-buffer-overflow in perfetto::trace_processor::MemoryTrackerSnapshotParser::EmitRows

    Published
    19 Dec 2020
    DSA-4817-1
    Fix available
    Packages

    php-pear

    Summary

    php-pear - security update

    Published
    19 Dec 2020