Open Source Vulnerabilities

Kernel

s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup

Kernel

drm/gma500: Fix BUG: sleeping function called from invalid context errors

Kernel

drm/gma500: Fix WARN_ON(lock->magic != lock) error

Kernel

fsdax: Fix infinite loop in dax_iomap_rw()

Kernel

i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()

Kernel

i2c: mux: harden i2c_mux_alloc() against integer overflows

Kernel

ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0

ndpi

Stack-buffer-overflow in check_content_type_and_change_protocol

sleuthkit

Memcpy-param-overlap in tsk_fs_load_file_action

opensips

Heap-buffer-overflow in dprint

colord

Updated colord packages fix security vulnerability

dbus

Updated dbus packages fix security vulnerability

kitty

Updated kitty packages fix security vulnerability

libvncserver, italc

Updated libvncserver packages fix security vulnerability

php

Updated php packages fix security vulnerability

unbound

Updated unbound packages fix security vulnerability

enlightenment

Updated enlightenment packages fix security vulnerability

python3, python-pip

Updated python3 packages fix security vulnerability

linux, linux, linux

linux-hwe-edge, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-xilinx-zynqmp, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-5.19, linux-azure-6.2, linux-azure-fde, linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-gke, linux-gkeop, linux-hwe-5.19, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.19, linux-lowlatency-hwe-6.2, linux-nvidia, linux-oem-5.17, linux-oem-6.0, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-bluefield, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

CVE-2022-3435 does not affect BellSoft software

hunspell

Heap-buffer-overflow in AffixMgr::compound_check

mapserver

Heap-buffer-overflow in msSetError

ndpi

Heap-buffer-overflow in ndpi_search_irc_tcp

Remote Denial of Service via Tasks endpoint in fat_free_crm

openjpeg

openjpeg vulnerabilities

tiny-csrf

tiny-csrf has openly visible CSRF tokens

fat_free_crm

Fat Free CRM vulnerable to Remote Denial of Service via Tasks endpoint

puppet-module-puppetlabs-mysql, puppet-module-puppetlabs-mysql, puppet-module-puppetlabs-mysql

puppet-module-puppetlabs-apt, puppet-module-puppetlabs-apt, puppet-module-puppetlabs-apt

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder, zoneminder, zoneminder, zoneminder

zoneminder, zoneminder, zoneminder, zoneminder, zoneminder, zoneminder