漏洞公告

GeoNetwork has reflected XSS through client-side template injection

Open Babel has out-of-bounds write in MSI translationVectors[]

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)

Open Babel has out-of-bounds write in Gaussian translationVectors[]

Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant)

Open Babel has out-of-bounds write in ORCA nAtoms parser

Open Babel has uninitialized pointer dereference in PQS pFormat

Open Babel has uninitialized pointer dereference in MSI atom parser

Open Babel has out-of-bounds write in MOL2 attribute/value parser

Open Babel has out-of-bounds write in PQS coord_file parser

Open Babel has uninitialized pointer dereference in GRO residue parser

Open Babel has out-of-bounds write in CSR PadString (title field)

Open Babel has out-of-bounds write in Gaussian coords_type orientation parser

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

Open Babel has heap buffer overflow in ChemKin ChemKinFormat::CheckSpecies

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

Paymenter has race condition in payWithCredit() that enables credit double-spend

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence