Open Source Vulnerabilities

,

No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Discourse vulnerable to incomplete quote causing a topic to crash in the browser

Discourse user profile location and website fields were not sufficiently length-limited

Discourse moderators can edit themes via the API

Discourse vulnerable to RCE via admins uploading maliciously zipped file

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fixed CVEs in bind: CVE-2022-38177, CVE-2022-38178, CVE-2022-2795

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fixed CVEs in bind: CVE-2022-38178, CVE-2022-38177, CVE-2022-2795

bind, bind-chroot, bind-devel, bind-libs, bind-sdb, bind-utils

Fixed CVE-2022-2795 in bind

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-3256 in vim

bind, bind-chroot, bind-devel, bind-libs, bind-sdb, bind-utils

Fixed CVE-2022-2795 in bind

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-3256 in vim

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-3256

bind9, bind9-doc, bind9-host, bind9utils, dnsutils, host, libbind-dev, libbind-export-dev, libbind9-140, libdns-export162, libdns162, libirs-export141, libirs141, libisc-export160, libisc160, libisccc-export140, libisccc140, libisccfg-export140, libisccfg140, liblwres141, lwresd

Fix CVE(s): CVE-2022-38177, CVE-2022-2795

isolated-vm has vulnerable CachedDataOptions in API

github.com/peterzen/goresolver

Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver

github.com/peterzen/goresolver

Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver

uclibc, uclibc, uclibc

uclibc-ng

CVE-2022-29503 affecting package uclibc-ng for versions less than 1.0.43-1

python-matrix-nio, python-matrix-nio, python-matrix-nio

python-matrix-nio, python-matrix-nio, python-matrix-nio, python-matrix-nio

matrix-js-sdk

Improper beacon events in matrix-js-sdk can result in availability issues

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder

d3-color

d3-color vulnerable to ReDoS

krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl

Security update for krb5-appl

node-matrix-js-sdk

thunderbird, thunderbird, node-matrix-js-sdk, node-matrix-js-sdk, thunderbird, node-matrix-js-sdk

kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15, kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15, kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

vim, vim, vim, vim, vim, vim, vim

vim, vim, vim

vim

CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1

vim, vim, vim

matrix-sdk-crypto

matrix-sdk Impersonation of room keys

dpdk, dpdk, dpdk

dpdk security update

slurm, slurm, slurm, slurm

Security update for slurm