Open Source Vulnerabilities

golang

CVE-2022-41717 affecting package golang for versions less than 1.17.13-2,1.18.8-2,1.21.6-1

nmi

CVE-2022-41717 affecting package nmi for versions less than 1.8.17-1

sriov-network-device-plugin

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.6.2-2

prometheus

CVE-2022-41717 affecting package prometheus for versions less than 2.37.9-1

moby-cli

CVE-2022-41717 affecting package moby-cli for versions less than 24.0.9-1

gh

CVE-2022-41717 affecting package gh for versions less than 2.13.0-2

containerized-data-importer

CVE-2022-41717 affecting package containerized-data-importer for versions less than 1.55.0-20

azcopy

CVE-2022-41717 affecting package azcopy for versions less than 10.24.0-1

golang

CVE-2022-41717 affecting package golang for versions less than 1.21.6-1

golang-1.10, golang-1.13, golang-1.10, golang-1.6, golang-1.18, golang-1.10, golang-1.13, golang-1.16, golang-1.8, golang-1.9, golang-1.13, golang-1.16, golang-1.18, golang-1.14, golang-1.13, golang-1.17, golang-1.18

Excessive memory growth in net/http and golang.org/x/net/http2

stdlib, golang.org/x/net

Excessive memory growth in net/http and golang.org/x/net/http2

github.com/containers/podman/v4

Buildah (as part of Podman) vulnerable to Link Following

github.com/containers/podman/v4

Buildah (as part of Podman) vulnerable to Path Traversal

libxml2, libxml2-devel, libxml2-static, python3-libxml2

libxml2: Fix of 2 CVEs

libxml2, libxml2-devel, libxml2-static, python3-libxml2

libxml2: Fix of 2 CVEs

libxml2, libxml2-devel, libxml2-python, libxml2-static

libxml2: Fix of 2 CVEs

protobuf

protobuf vulnerabilities

libxml2, libxml2-devel, libxml2-python, libxml2-static

libxml2: Fix of 2 CVEs

rabbitmq-server, rabbitmq-server, rabbitmq-server, rabbitmq-server

Security update for rabbitmq-server

python2.7, python2.7, python3.5

python2.7, python3.5 vulnerability

bind9, bind9-doc, bind9-host, bind9utils, dnsutils, host, libbind-dev, libbind-export-dev, libbind9-140, libdns-export162, libdns162, libirs-export141, libirs141, libisc-export160, libisc160, libisccc-export140, libisccc140, libisccfg-export140, libisccfg140, liblwres141, lwresd

Fix CVE(s): CVE-2016-6170, CVE-2016-2775

imagemagick, imagemagick-6.q16, imagemagick-common, imagemagick-doc, libimage-magick-perl, libimage-magick-q16-perl, libmagick++-6-headers, libmagick++-6.q16-5v5, libmagick++-6.q16-dev, libmagick++-dev, libmagickcore-6-arch-config, libmagickcore-6-headers, libmagickcore-6.q16-2, libmagickcore-6.q16-2-extra, libmagickcore-6.q16-dev, libmagickcore-dev, libmagickwand-6-headers, libmagickwand-6.q16-2, libmagickwand-6.q16-dev, libmagickwand-dev, perlmagick

Fix CVE(s): CVE-2021-20224

libxml2, libxml2-dev, libxml2-doc, libxml2-utils, python-libxml2

Fix CVE(s): CVE-2022-40303, CVE-2022-40304

java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk

Security update for java-1_8_0-openjdk

busybox, busybox

Security update for busybox

busybox, busybox, busybox-links

Security update for busybox

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah

golang-github-containers-buildah, golang-github-containers-buildah, golang-github-containers-buildah