Fedora Extra Packages for Enterprise Linux

• CVE-2021-4435 High 7.7 Yarn: untrusted search path 0.3%
• CVE-2023-6395 Medium 6.7 Mock: privilege escalation for users that can access mock configuration 1.6%
• CVE-2023-4255 Medium 5.5 W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) 0.3%
• CVE-2023-4256 Medium 5.5 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c 0.3%
• CVE-2023-3430 High 7.5 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp 1.2%
• CVE-2022-4132 Medium 5.9 Memory leak on tls connections 0.7%
• CVE-2023-32611 Medium 5.5 G_variant_byteswap() can take a long time with some non-normal inputs 0.4%
• CVE-2023-29499 Medium 5.5 Gvariant offset table entry size is not checked in is_normal() 0.8%
• CVE-2023-32665 Medium 5.5 Gvariant deserialisation does not match spec for non-normal data 0.4%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%
• CVE-2023-4135 Medium 6.0 Out-of-bounds read information disclosure vulnerability 0.4%
• CVE-2023-3180 Medium 6.0 Heap buffer overflow in virtio_crypto_sym_op_helper() 0.2%
• CVE-2023-1386 Low 3.3 Qemu: 9pfs: suid/sgid bits not dropped on file write 0.2%
• CVE-2023-38253 Medium 4.7 W3m: out of bounds read in growbuf_to_str() at w3m/indep.c 0.4%
• CVE-2023-3354 High 7.5 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 1.6%
• CVE-2023-34432 High 7.8 Heap-buffer-overflow in src/formats_i.c 0.4%
• CVE-2023-34318 High 7.8 Heap-buffer-overflow in src/hcom.c 0.3%
• CVE-2023-32627 Medium 6.2 Floating point exception in src/voc.c 0.3%
• CVE-2023-26590 Medium 6.2 Floating point exception in src/aiff.c 0.2%