GHSA-75CJ-JPMC-WM6C vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-rc, linux-vmware...

aliby (>=0.1.18, <=0.1.55), aliby-baby (>=0.1.11, <=0.1.17) +36 more potentially affected by CVE-2022-35969 via tensorflow (2.9.0)

tensorflow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aliby =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.0.0, =1.3.0, =0.3.0, =1.2.0, =0.0.6, =0.0.9 - gcvit-tensorflow 1.2.1 - genericsnn 1.0.1...

Microsoft Joins Open Source Security Foundation

Microsoft has invested in the security of open-source software for many years and today I’m excited to share that Microsoft is joining industry partners to create the Open Source Security Foundation OpenSSF, a new cross-industry collaboration hosted at the Linux Foundation. The OpenSSF brings...