Open Source Vulnerabilities

singularity

Insecure permissions (777) are set on $HOME/

fribidi

stack-based buffer overflow flaw was found in the Fribidi package

qt6-qtwebengine

Use after free in Picture In Picture in Google Chrome prior to 124

vlc

integer overflow in the VNC module in VideoLAN VLC Media Player through 3

singularity

Sylabs Singularity 3

intel-ucode, intel-ucode, intel-ucode, intel-ucode

Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

singularity

Sylabs Singularity 3

qt5-qtwebengine, qt6-qtwebengine

Type confusion in ANGLE in Google Chrome prior to 124

intel-ucode, intel-ucode, intel-ucode, intel-ucode, intel-ucode, intel-ucode

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

singularity

Sylabs Singularity 3

qt5-qtwebengine, qt6-qtwebengine

Use after free in V8 in Google Chrome prior to 124

helm

Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources)

singularity

Sylabs Singularity through 3

intel-ucode, intel-ucode

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

qt5-qtwebengine, qt6-qtwebengine

Out of bounds read in Fonts in Google Chrome prior to 124

helm

Helm is open-source software which is essentially "The Kubernetes Package Manager"

singularity

Sylabs Singularity 3

intel-ucode, intel-ucode

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

qt5-qtwebengine, qt6-qtwebengine

Use after free in QUIC in Google Chrome prior to 124

intel-ucode, intel-ucode

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access

singularity

Singularity (an open source container platform) from version 3

qt6-qtwebengine

Use after free in Visuals in Google Chrome prior to 124

intel-ucode, intel-ucode

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access

umoci, singularity

Open Container Initiative umoci before 0

qt5-qtwebengine, qt6-qtwebengine

Use after free in ANGLE in Google Chrome prior to 124

intel-ucode, intel-ucode

Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service via local access

singularity

Singularity is an open source container platform

qt6-qtwebengine

Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124

intel-ucode, intel-ucode

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

singularity

Security fix for GHSA-77vh-xpmg-72qh applied in: singularity 3.8.5-r0

dovecot

flaw was found in dovecot 2

qt6-qtwebengine

Type Confusion in V8 in Google Chrome prior to 125

intel-ucode, intel-ucode

Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access

yajl

There's a memory leak in yajl 2

dovecot

specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service

skopeo, podman, singularity

OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content

qt6-qtwebengine

Out of bounds write in Streams API in Google Chrome prior to 125

intel-ucode, intel-ucode

Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local a...

dovecot

denial of service flaw was found in dovecot before 2

podman, singularity

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

intel-ucode, intel-ucode

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potent...

qt5-qtwebengine, qt6-qtwebengine

Use after free in Media Session in Google Chrome prior to 125

dovecot

It was discovered that Dovecot before versions 2

podman, singularity

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

intel-ucode, intel-ucode

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privile...

dovecot

In Dovecot before 2

podman, singularity

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

intel-ucode, intel-ucode

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access

znc

ZNC before 1

dovecot

JSON encoder in Dovecot before 2