# Vulnerabilities published in 2021


- [SUSE-SU-2021:1409-1](https://insights.sbomify.com/SUSE-SU-2021-1409-1/): Security update for giflib (not scored)
- [SUSE-SU-2021:1401-1](https://insights.sbomify.com/SUSE-SU-2021-1401-1/): Security update for gdm (not scored)
- [SUSE-SU-2021:1123-1](https://insights.sbomify.com/SUSE-SU-2021-1123-1/): Security update for fwupdate (not scored)
- [SUSE-SU-2021:1113-1](https://insights.sbomify.com/SUSE-SU-2021-1113-1/): Security update for tpm2-tss-engine (not scored)
- [SUSE-SU-2021:1111-1](https://insights.sbomify.com/SUSE-SU-2021-1111-1/): Security update for fwupdate (not scored)
- [SUSE-SU-2021:1104-1](https://insights.sbomify.com/SUSE-SU-2021-1104-1/): Security update for fwupdate (not scored)
- [SUSE-SU-2021:1103-1](https://insights.sbomify.com/SUSE-SU-2021-1103-1/): Security update for fwupdate (not scored)
- [SUSE-SU-2021:1010-1](https://insights.sbomify.com/SUSE-SU-2021-1010-1/): Security update for OpenIPMI (not scored)
- [SUSE-SU-2021:0714-1](https://insights.sbomify.com/SUSE-SU-2021-0714-1/): Security update for freeradius-server (not scored)
- [SUSE-SU-2021:0713-1](https://insights.sbomify.com/SUSE-SU-2021-0713-1/): Security update for freeradius-server (not scored)
- [SUSE-SU-2021:0689-1](https://insights.sbomify.com/SUSE-SU-2021-0689-1/): Security update for bind (not scored)
- [SUSE-SU-2021:0658-1](https://insights.sbomify.com/SUSE-SU-2021-0658-1/): Security update for rpmlint (not scored)
- [SUSE-SU-2021:0647-1](https://insights.sbomify.com/SUSE-SU-2021-0647-1/): Security update for csync2 (not scored)
- [SUSE-SU-2021:0597-1](https://insights.sbomify.com/SUSE-SU-2021-0597-1/): Security update for rpmlint (not scored)
- [SUSE-SU-2021:0565-1](https://insights.sbomify.com/SUSE-SU-2021-0565-1/): Security update for pcp (not scored)
- [SUSE-SU-2021:0431-1](https://insights.sbomify.com/SUSE-SU-2021-0431-1/): Security update for MozillaFirefox (not scored)
- [SUSE-SU-2021:0430-1](https://insights.sbomify.com/SUSE-SU-2021-0430-1/): Security update for MozillaFirefox (not scored)
- [SUSE-SU-2021:0352-1](https://insights.sbomify.com/SUSE-SU-2021-0352-1/): Security update for java-11-openjdk (not scored)
- [SUSE-SU-2021:0290-1](https://insights.sbomify.com/SUSE-SU-2021-0290-1/): Test update for SLE-Micro (not scored)
- [SUSE-SU-2021:0275-1](https://insights.sbomify.com/SUSE-SU-2021-0275-1/): Security update for java-11-openjdk (not scored)
- [SUSE-SU-2021:0194-1](https://insights.sbomify.com/SUSE-SU-2021-0194-1/): Security update for stunnel (not scored)
- [SUSE-SU-2021:0127-1](https://insights.sbomify.com/SUSE-SU-2021-0127-1/): Security update for open-iscsi (not scored)
- [RUSTSEC-2021-0158](https://insights.sbomify.com/RUSTSEC-2021-0158/): XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags (not scored)
- [RUSTSEC-2021-0157](https://insights.sbomify.com/RUSTSEC-2021-0157/): Incorrect escaping for `url("")` functions in CSS style attributes (not scored)
- [RUSTSEC-2021-0153](https://insights.sbomify.com/RUSTSEC-2021-0153/): `encoding` is unmaintained (not scored)
- [RUSTSEC-2021-0151](https://insights.sbomify.com/RUSTSEC-2021-0151/): ncollide2d is unmaintained (not scored)
- [RUSTSEC-2021-0150](https://insights.sbomify.com/RUSTSEC-2021-0150/): ncollide3d is unmaintained (not scored)
- [RUSTSEC-2021-0149](https://insights.sbomify.com/RUSTSEC-2021-0149/): nphysics2d is unmaintained (not scored)
- [RUSTSEC-2021-0148](https://insights.sbomify.com/RUSTSEC-2021-0148/): nphysics3d is unmaintained (not scored)
- [RUSTSEC-2021-0146](https://insights.sbomify.com/RUSTSEC-2021-0146/): Crate `twoway` deprecated by the author (not scored)
- [RUSTSEC-2021-0142](https://insights.sbomify.com/RUSTSEC-2021-0142/): dotenv is Unmaintained (not scored)
- [RUSTSEC-2021-0141](https://insights.sbomify.com/RUSTSEC-2021-0141/): dotenv is Unmaintained (not scored)
- [RUSTSEC-2021-0140](https://insights.sbomify.com/RUSTSEC-2021-0140/): rusttype is Unmaintained (not scored)
- [RUSTSEC-2021-0139](https://insights.sbomify.com/RUSTSEC-2021-0139/): ansi_term is Unmaintained (not scored)
- [RUSTSEC-2021-0137](https://insights.sbomify.com/RUSTSEC-2021-0137/): sodiumoxide is deprecated (not scored)
- [RUSTSEC-2021-0136](https://insights.sbomify.com/RUSTSEC-2021-0136/): `sass-rs` has been deprecated (not scored)
- [RUSTSEC-2021-0134](https://insights.sbomify.com/RUSTSEC-2021-0134/): rental is unmaintained, author has moved on (not scored)
- [RUSTSEC-2021-0133](https://insights.sbomify.com/RUSTSEC-2021-0133/): cargo-download is unmaintained (not scored)
- [RUSTSEC-2021-0127](https://insights.sbomify.com/RUSTSEC-2021-0127/): serde_cbor is unmaintained (not scored)
- [RUSTSEC-2021-0099](https://insights.sbomify.com/RUSTSEC-2021-0099/): Crate has been renamed to `cosmrs` (not scored)
- [RUSTSEC-2021-0096](https://insights.sbomify.com/RUSTSEC-2021-0096/): spirv_headers is unmaintained, use spirv instead (not scored)
- [RUSTSEC-2021-0064](https://insights.sbomify.com/RUSTSEC-2021-0064/): `cpuid-bool` has been renamed to `cpufeatures` (not scored)
- [RUSTSEC-2021-0062](https://insights.sbomify.com/RUSTSEC-2021-0062/): project abandoned; migrate to the `aes-siv` crate (not scored)
- [RUSTSEC-2021-0061](https://insights.sbomify.com/RUSTSEC-2021-0061/): `aes-ctr` has been merged into the `aes` crate (not scored)
- [RUSTSEC-2021-0060](https://insights.sbomify.com/RUSTSEC-2021-0060/): `aes-soft` has been merged into the `aes` crate (not scored)
- [RUSTSEC-2021-0059](https://insights.sbomify.com/RUSTSEC-2021-0059/): `aesni` has been merged into the `aes` crate (not scored)
- [RUSTSEC-2021-0034](https://insights.sbomify.com/RUSTSEC-2021-0034/): office is unmaintained, use calamine instead (not scored)
- [RUSTSEC-2021-0025](https://insights.sbomify.com/RUSTSEC-2021-0025/): crate has been renamed to `qjsonrpc` (not scored)
- [RUSTSEC-2021-0024](https://insights.sbomify.com/RUSTSEC-2021-0024/): crate has been renamed to `sn_api` (not scored)
- [RUSTSEC-2021-0002](https://insights.sbomify.com/RUSTSEC-2021-0002/): interfaces2 is unmaintained, use interfaces instead (not scored)
- [PSF-2021-5](https://insights.sbomify.com/PSF-2021-5/): ftplib should not use the host from the PASV response (not scored)
- [OSV-2021-998](https://insights.sbomify.com/OSV-2021-998/): Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<char const*>::__wrap_iter (not scored)
- [OSV-2021-997](https://insights.sbomify.com/OSV-2021-997/): Heap-buffer-overflow in ZSTD_createDDict_advanced (not scored)
- [OSV-2021-991](https://insights.sbomify.com/OSV-2021-991/): Dynamic-stack-buffer-overflow in fmt::v8::detail::dragonbox::umul192_upper64 (not scored)
- [OSV-2021-987](https://insights.sbomify.com/OSV-2021-987/): Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr (not scored)
- [OSV-2021-979](https://insights.sbomify.com/OSV-2021-979/): Heap-buffer-overflow in stbi__convert_16_to_8 (not scored)
- [OSV-2021-977](https://insights.sbomify.com/OSV-2021-977/): Dynamic-stack-buffer-overflow in std::__1::pair<unsigned int, unsigned int>::pair<unsigned int, unsigned int, fal (not scored)
- [OSV-2021-975](https://insights.sbomify.com/OSV-2021-975/): Dynamic-stack-buffer-overflow in CryptDigestUpdateInt (not scored)
- [OSV-2021-973](https://insights.sbomify.com/OSV-2021-973/): Heap-buffer-overflow in blosc_run_decompression_with_context (not scored)
- [OSV-2021-972](https://insights.sbomify.com/OSV-2021-972/): UNKNOWN READ in void mc_chroma<unsigned short> (not scored)
- [OSV-2021-958](https://insights.sbomify.com/OSV-2021-958/): Dynamic-stack-buffer-overflow in mdb_numeric_to_string (not scored)
- [OSV-2021-955](https://insights.sbomify.com/OSV-2021-955/): Stack-buffer-overflow in Buffer_AppendIndentUnchecked (not scored)
- [OSV-2021-950](https://insights.sbomify.com/OSV-2021-950/): Dynamic-stack-buffer-overflow in std::__1::__wrap_iter<hsql::Expr**>::__wrap_iter (not scored)
- [OSV-2021-948](https://insights.sbomify.com/OSV-2021-948/): Use-of-uninitialized-value in residual_coding (not scored)
- [OSV-2021-947](https://insights.sbomify.com/OSV-2021-947/): Dynamic-stack-buffer-overflow in hsql::SQLParserResult::addStatement (not scored)
- [OSV-2021-940](https://insights.sbomify.com/OSV-2021-940/): Heap-buffer-overflow in json_string_unescape (not scored)
- [OSV-2021-939](https://insights.sbomify.com/OSV-2021-939/): Segv on unknown address in helper_uc_tracecode (not scored)
- [OSV-2021-935](https://insights.sbomify.com/OSV-2021-935/): Heap-buffer-overflow in answer_request (not scored)
- [OSV-2021-934](https://insights.sbomify.com/OSV-2021-934/): Heap-buffer-overflow in extract_addresses (not scored)
- [OSV-2021-933](https://insights.sbomify.com/OSV-2021-933/): Heap-buffer-overflow in print_mac (not scored)
- [OSV-2021-932](https://insights.sbomify.com/OSV-2021-932/): Heap-buffer-overflow in resize_packet (not scored)
- [OSV-2021-931](https://insights.sbomify.com/OSV-2021-931/): Heap-buffer-overflow in extract_name (not scored)
- [OSV-2021-929](https://insights.sbomify.com/OSV-2021-929/): Heap-buffer-overflow in extract_name (not scored)
- [OSV-2021-927](https://insights.sbomify.com/OSV-2021-927/): Heap-buffer-overflow in dhcp_reply (not scored)
- [OSV-2021-926](https://insights.sbomify.com/OSV-2021-926/): Heap-use-after-free in zend_gc_addref (not scored)
- [OSV-2021-925](https://insights.sbomify.com/OSV-2021-925/): Stack-buffer-overflow in is_same_net6 (not scored)
- [OSV-2021-924](https://insights.sbomify.com/OSV-2021-924/): Heap-buffer-overflow in check_bad_address (not scored)
- [OSV-2021-921](https://insights.sbomify.com/OSV-2021-921/): Stack-buffer-overflow in bool re2::DFA::InlinedSearchLoop<true, true, true> (not scored)
- [OSV-2021-919](https://insights.sbomify.com/OSV-2021-919/): UNKNOWN READ in v_FindFunction (not scored)
- [OSV-2021-916](https://insights.sbomify.com/OSV-2021-916/): Use-of-uninitialized-value in jxl::ModularFrameDecoder::DecodeAcMetadata (not scored)
- [OSV-2021-915](https://insights.sbomify.com/OSV-2021-915/): Stack-buffer-overflow in sc_asn1_read_tag (not scored)
- [OSV-2021-914](https://insights.sbomify.com/OSV-2021-914/): UNKNOWN READ in mrb_vm_ci_env (not scored)
- [OSV-2021-913](https://insights.sbomify.com/OSV-2021-913/): Heap-buffer-overflow in dispatch (not scored)
- [OSV-2021-912](https://insights.sbomify.com/OSV-2021-912/): Heap-buffer-overflow in mrb_vm_exec (not scored)
- [OSV-2021-909](https://insights.sbomify.com/OSV-2021-909/): Heap-buffer-overflow in OT::CPALV1Tail::serialize (not scored)
- [OSV-2021-908](https://insights.sbomify.com/OSV-2021-908/): Heap-use-after-free in tsk_fs_attr_set_run (not scored)
- [OSV-2021-907](https://insights.sbomify.com/OSV-2021-907/): Heap-buffer-overflow in decode_header_value_literal (not scored)
- [OSV-2021-904](https://insights.sbomify.com/OSV-2021-904/): UNKNOWN READ in helper_uc_tracecode (not scored)
- [OSV-2021-903](https://insights.sbomify.com/OSV-2021-903/): UNKNOWN WRITE in QOutlineMapper::convertPath (not scored)
- [OSV-2021-902](https://insights.sbomify.com/OSV-2021-902/): Heap-buffer-overflow in ebitmap_match_any (not scored)
- [OSV-2021-900](https://insights.sbomify.com/OSV-2021-900/): Negative-size-param in WebPRescalerInit (not scored)
- [OSV-2021-897](https://insights.sbomify.com/OSV-2021-897/): Heap-buffer-overflow in ZSTD_decompressMultiFrame (not scored)
- [OSV-2021-895](https://insights.sbomify.com/OSV-2021-895/): Segv on unknown address in helper_uc_tracecode (not scored)
- [OSV-2021-892](https://insights.sbomify.com/OSV-2021-892/): Heap-buffer-overflow in explicit_bzero (not scored)
- [OSV-2021-891](https://insights.sbomify.com/OSV-2021-891/): Heap-buffer-overflow in __cil_cat_expr_range_to_bitmap_helper (not scored)
- [OSV-2021-887](https://insights.sbomify.com/OSV-2021-887/): Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr (not scored)
- [OSV-2021-882](https://insights.sbomify.com/OSV-2021-882/): Uncaught exception (not scored)
- [OSV-2021-875](https://insights.sbomify.com/OSV-2021-875/): Use-after-poison in AK::RefPtr<AK::StringImpl, AK::RefPtrTraits<AK::StringImpl> >::RefPtr (not scored)
- [OSV-2021-872](https://insights.sbomify.com/OSV-2021-872/): Heap-buffer-overflow in ndpi_set_detected_protocol (not scored)
- [OSV-2021-871](https://insights.sbomify.com/OSV-2021-871/): Heap-use-after-free in jxl::ImageBlender::PrepareBlending (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/2/
