Security Bugs

src:wabt wabt: CVE-2023-30300

upstream fixed-upstream security

src:enigma enigma: Embded and use lua copy (outdated)

security

fakeroot Fw: fakeroot: Shared library and command injections in multiple arguments

security

src:qemu qemu: CVE-2023-1386: 9pfs: not dropping SUID/SGID bits from local binaries can potentially lead to guest and/or host privilege escalation

security upstream

src:grpc grpc: CVE-2023-33953

security

src:grpc grpc: CVE-2023-32732

security

src:grpc grpc: CVE-2023-4785

security

src:shiro shiro: CVE-2023-46750

security

src:hamster-time-tracker hamster-time-tracker: CVE-2023-36250

security

src:libcrypto++ libcrypto++: CVE-2022-48570

security

src:libcrypto++ libcrypto++: CVE-2023-50979

security

src:libcrypto++ libcrypto++: CVE-2023-50981

security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

src:gearmand gearmand contains a broken, oudated, embedded copy of AX_BOOST_BASE

security

src:libstb libstb: CVE-2023-47212

security

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

simple-cdd when set BOOT_TIMEOUT, md5sum of ./boot/grub/grub.cfg not match md5sum.txt which in iso

security

src:golang-github-lucas-clemente-quic-go golang-github-lucas-clemente-quic-go: CVE-2024-22189

upstream security

ftp.debian.org code-signing: insufficient check that file["file"] doesn't escape package via symlinks

security

src:libde265 libde265: CVE-2024-38949 CVE-2024-38950

upstream fixed-upstream security