Security Bugs

(Total: 1353, 1181-1200, 65.5361 ms)

#	Comment	Popcon	Updated	Title
#1011338 important done	2	162	about 4 years ago	golang-gopkg-yaml.v3 CVE-2022-28948 - crash when attempting to deserialize invalid input stable testing
#980892 important done	2	2	about 4 years ago	civicrm-common CVE-2021-21252 embedded copy of jquery.validate.js vulnerable to ReDoS stable
#1001057 serious done	5	986	about 4 years ago	grub2 CVE-2022-28735 grub2: shim_lock verifier allows non-kernel files to be loaded
#1012275 serious done	8	5079	about 4 years ago	firefox new upstream version fixes possible RCE security holes unstable
#1011984 normal done	4	94278	about 4 years ago	liblouis CVE-2022-31783
#1008009 important done	2	94278	about 4 years ago	liblouis CVE-2022-26981
#990900 important done	3	166453	about 4 years ago	avahi CVE-2021-3502 stable
#986018 important done	7	166453	about 4 years ago	avahi CVE-2021-3502: reachable assertion in avahi_s_host_name_resolver_start when trying to resolve badly-formatted hostnames stable
#987422 normal done	2	13695	about 4 years ago	caca-utils caca-utils has mailcap entries with quoted %-escapes stable
#988950 grave done	2	2	about 4 years ago	src:golang-github-nats-io-jwt CVE-2020-26892 CVE-2020-26521
#1005389 important done	2	1416	about 4 years ago	rails CVE-2022-23633 stable
#1001817 important done	2	1416	about 4 years ago	rails CVE-2021-44528: Possible Open Redirect in Host Authorization Middleware stable
#1011458 grave done	2	7	about 4 years ago	snowflake CVE-2022-29222 - fails to reject untrustworthy client certificates due to missing checks on private key
#1011457 important done	2	7	about 4 years ago	snowflake CVE-2022-29189 CVE-2022-29190 - infinite loop and excessive memory usage in vendor pion DTLS
#945876 important done	3	5885	about 4 years ago	dia CVE-2019-19451 stable testing
#987402 normal done	2	5437	about 4 years ago	dia dia has mailcap entries with quoted %-escapes stable testing unstable
#946161 important done	2	5885	about 4 years ago	dia CVE-2019-19451: Endless loop on filenames with invalid encoding can be used for denial-of-service stable testing
#1010619 grave done	7	202518	about 4 years ago	rsyslog CVE-2022-24903: Potential heap buffer overflow in TCP syslog server (receiver) components stable
#1010837 grave done	4	19091	about 4 years ago	unrar CVE-2022-30333 (unrar file write vulnerability) patch not yet available for Debian 10 packages stable
#1004691 grave done	3	127365	about 4 years ago	samba CVE-2021-43566 stable

(Total: 1353, 1181-1200, 65.5361 ms)