AZL-35126 CVE-2023-37920 affecting package python-certifi for versions less than 2023.05.07-1.cm2

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted ...

DEBIAN-CVE-2023-37920

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted ...

PT-2025-53065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6-btrfs-next-134+ Description The Linux kernel contained a flaw in the btrfs subsystem related to the handling of free space tree deletion. Specifically, the code lacked proper synchronization when removi...

roots-web.jp Cross Site Scripting vulnerability OBB-3397682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@roots/bud (2023.3.16), @roots/bud-imagemin (2023.3.16) potentially affected by unknown CVE via @roots/browserslist-config (2023.3.16)

@roots/browserslist-config NPM version 2023.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/browserslist-config and may be impacted: - @roots/bud 2023.3.16 - @roots/bud-imagemin 2023.3.16 Source cves: unknown CVE Source advisory:...

Malicious Package

Overview @roots/browserslist-config is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

@roots/bud-imagemin (2023.0.30) potentially affected by unknown CVE via @roots/bud (2023.0.30)

@roots/bud NPM version 2023.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.0.30 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...

@roots/bud-imagemin (2023.1.31) potentially affected by unknown CVE via @roots/bud (2023.1.31)

@roots/bud NPM version 2023.1.31 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.1.31 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...

@roots/bud-imagemin (2023.2.13) potentially affected by unknown CVE via @roots/bud (2023.2.13)

@roots/bud NPM version 2023.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on @roots/bud and may be impacted: - @roots/bud-imagemin 2023.2.13 Source cves: unknown CVE Source advisory: SNYK:JS-ROOTSBUD-3326363...

Malicious Package

Overview @roots/bud is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

CLSA-2023-1676571485 Update of alt-php

Update ca-certificates database to 20221215: - mozilla/certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle to version 2.60. - The following certificate authorities were added +: + "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" + "GlobalSign Secure Mail Root R45" + "GlobalSign Secure Mail...

CLSA-2023-1676570344 Update of ca-certificates

Update to CKBI 2.60 from NSS 3.86 - Removed: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "DST Root CA X3" - Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Certificate "GlobalSign Root CA - R2" - Certificate "Staat der...

SUSE CVE-2013-4315

Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWEDINCLUDEROOTS setting followed by a .. dot dot in a ssi template tag...

SUSE CVE-2017-14804

The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots...

SUSE CVE-2020-12421

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected even if they were legitimately added by an administrator. This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR 68.10...

SUSE CVE-2020-14039

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

SUSE CVE-2021-25282

An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillarroots.write method is vulnerable to directory traversal...

SUSE CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

PT-2023-35043 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue concerns a qgroup record without old roots populated in btrfs, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been...

PT-2025-37547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Btrfs file system relocation roots. A race condition between quota tree creation and relocation can lead to duplicated quota trees and a...