Open Source Vulnerabilities

Users login enumeration by unauthenticated user in GLPI

Privilege Escalation from technician to super-admin in GLPI

Sensitive fields enumeration through API in GLPI

Account takeover via SQL Injection in UI layout preferences in GLPI

Denial of service from circular relationship definitions in OpenFGA

Temporary storage of plaintext passwords during password changes in matrix synapse

Improper validation of receipts allows forged read receipts in matrix synapse

Path traversal in Jumpserver

Random seed leakage in Jumpserver

Denial of service via Kubernetes annotations in specific Cilium configurations

Bypass of namespace restrictions in CiliumNetworkPolicy

github.com/sagernet/sing-box, github.com/sagernet/sing-box, github.com/sagernet/sing

sing-box vulnerable to improper authentication in the SOCKS inbound

vyper

Vyper's `_abi_decode` input not validated in complex expressions

Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem

matrix-synapse

matrix-synapse vulnerable to improper validation of receipts allows forged read receipts

matrix-synapse

matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes

_abi_decode input not validated in complex expressions in Vyper

linux-bluefield

linux-bluefield vulnerabilities

Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

Cilium NetworkPolicy bypass via pod labels

httpd, httpd-devel, httpd-manual, httpd-tools, mod_ldap, mod_proxy_html, mod_session, mod_ssl

httpd: Fix of 4 CVEs

Inefficient Regular Expression Complexity in get-func-name

binutils, binutils-aarch64-linux-gnu, binutils-alpha-linux-gnu, binutils-arm-linux-gnueabi, binutils-arm-linux-gnueabihf, binutils-common, binutils-dev, binutils-doc, binutils-for-build, binutils-for-host, binutils-hppa-linux-gnu, binutils-hppa64-linux-gnu, binutils-i686-gnu, binutils-i686-kfreebsd-gnu, binutils-i686-linux-gnu, binutils-ia64-linux-gnu, binutils-m68k-linux-gnu, binutils-mips-linux-gnu, binutils-mips64-linux-gnuabi64, binutils-mips64-linux-gnuabin32, binutils-mips64el-linux-gnuabi64, binutils-mips64el-linux-gnuabin32, binutils-mipsel-linux-gnu, binutils-mipsisa32r6-linux-gnu, binutils-mipsisa32r6el-linux-gnu, binutils-mipsisa64r6-linux-gnuabi64, binutils-mipsisa64r6-linux-gnuabin32, binutils-mipsisa64r6el-linux-gnuabi64, binutils-mipsisa64r6el-linux-gnuabin32, binutils-multiarch, binutils-multiarch-dev, binutils-powerpc-linux-gnu, binutils-powerpc-linux-gnuspe, binutils-powerpc64-linux-gnu, binutils-powerpc64le-linux-gnu, binutils-riscv64-linux-gnu, binutils-s390x-linux-gnu, binutils-sh4-linux-gnu, binutils-source, binutils-sparc64-linux-gnu, binutils-x86-64-kfreebsd-gnu, binutils-x86-64-linux-gnu, binutils-x86-64-linux-gnux32, libbinutils

Fix CVE(s): CVE-2022-45703

binutils, binutils-aarch64-linux-gnu, binutils-alpha-linux-gnu, binutils-arm-linux-gnueabi, binutils-arm-linux-gnueabihf, binutils-dev, binutils-doc, binutils-hppa-linux-gnu, binutils-hppa64-linux-gnu, binutils-m68k-linux-gnu, binutils-mips-linux-gnu, binutils-mips64-linux-gnuabi64, binutils-mips64el-linux-gnuabi64, binutils-mipsel-linux-gnu, binutils-multiarch, binutils-multiarch-dev, binutils-powerpc-linux-gnu, binutils-powerpc-linux-gnuspe, binutils-powerpc64-linux-gnu, binutils-powerpc64le-linux-gnu, binutils-s390x-linux-gnu, binutils-sh4-linux-gnu, binutils-source, binutils-sparc64-linux-gnu

Fix CVE(s): CVE-2022-45703

github.com/cilium/cilium, github.com/cilium/cilium, github.com/cilium/cilium

Kubernetes users may update Pod labels to bypass network policy

bind, bind, bind

Security update for bind

open-vm-tools, open-vm-tools

Security update for open-vm-tools

libwebp, libwebp, libwebp, libwebp, libwebp, libwebp, libwebp, libwebp

Security update for libwebp

quagga, quagga, quagga

Security update for quagga

ImageMagick

Security update for ImageMagick

postfix

Security update for postfix

linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-oracle

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-oracle vulnerabilities

wire, wire

Security update for wire

cacti, cacti-spine, cacti, cacti-spine, cacti, cacti-spine, cacti, cacti-spine, cacti, cacti-spine

Security update for cacti, cacti-spine

open-vm-tools

Important: open-vm-tools security update

dmidecode

Moderate: dmidecode security update

libwebp

Important: libwebp security update

kernel

Important: kernel security, bug fix, and enhancement update

open-vm-tools

Important: open-vm-tools security update

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

kernel-livepatch-SLE15-SP2_Update_31

Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)

cups, cups

cups vulnerability

kernel-livepatch-SLE15-SP4-RT_Update_8, kernel-livepatch-SLE15-SP5-RT_Update_1

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)

kernel-livepatch-SLE15-SP1_Update_34

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1)

kernel-rt, kernel-rt

Security update for the Linux Kernel

kernel-livepatch-SLE15-SP4-RT_Update_6

Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4)

Use-after-free in Linux kernel's netfilter: nf_tables component

netatalk, netatalk

Security update for netatalk

wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark, wireshark

Security update for wireshark

bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

kernel: Fix of 25 CVEs