Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    OESA-2022-1880
    Fix available
    Packages

    kernel

    Summary

    kernel security update

    Published
    2 Sept 2022
    SUSE-SU-2022:2998-1
    Fix available
    Packages

    ImageMagick, ImageMagick, ImageMagick

    Summary

    Security update for ImageMagick

    Published
    2 Sept 2022
    SUSE-SU-2022:2997-1
    Fix available
    Packages

    python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg, python-pyxdg

    Summary

    Security update for python-pyxdg

    Published
    2 Sept 2022
    SUSE-SU-2022:2996-1
    Fix available
    Packages

    gdk-pixbuf, gdk-pixbuf, gdk-pixbuf, gdk-pixbuf, gdk-pixbuf

    Summary

    Security update for gdk-pixbuf

    Published
    2 Sept 2022
    SUSE-SU-2022:2995-1
    Fix available
    Packages

    gdk-pixbuf, gdk-pixbuf

    Summary

    Security update for gdk-pixbuf

    Published
    2 Sept 2022
    SUSE-SU-2022:2993-1
    Fix available
    Packages

    freerdp, freerdp, freerdp

    Summary

    Security update for freerdp

    Published
    2 Sept 2022
    CVE-2022-29158
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-29063
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-25813
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-25371
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-25370
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    PYSEC-2022-261
    Fix available
    Packages

    apache-airflow

    Summary

    Published
    2 Sept 2022
    PYSEC-2022-263
    Fix available
    Packages

    apache-airflow

    Summary

    Published
    2 Sept 2022
    CVE-2022-38054
    No fix available
    Packages

    Summary

    Session Fixation

    Published
    2 Sept 2022
    CVE-2022-38170
    Fix available
    Packages

    Summary

    Overly permissive umask for daemons

    Published
    2 Sept 2022
    Packages

    linux, linux, linux

    Summary

    Published
    2 Sept 2022
    CVE-2022-39190
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    Packages

    linux, linux, linux

    Summary

    Published
    2 Sept 2022
    CVE-2022-39189
    Fix available
    Packages

    Summary

    Published
    2 Sept 2022
    Packages

    linux, linux, linux

    Summary

    Published
    2 Sept 2022
    CVE-2022-37679
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36637
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36636
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36609
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    AZL-10858
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-39188 affecting package kernel for versions less than 5.15.67.1-4

    Published
    2 Sept 2022
    AZL-10859
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-39189 affecting package kernel for versions less than 5.15.67.1-4

    Published
    2 Sept 2022
    AZL-10860
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-39190 affecting package kernel for versions less than 5.15.67.1-4

    Published
    2 Sept 2022
    Packages

    linux-hwe-edge, linux-aws-5.4, linux-azure-5.4, linux-dell300x, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    2 Sept 2022
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-aws-5.4, linux-azure, linux-azure-5.3, linux-azure-5.4, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-edge, linux-ibm-5.4, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-oracle-5.4, linux-raspi-5.4, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux, linux-aws, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-azure-fde, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-gke, linux-gkeop, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-ibm, linux-intel-5.13, linux-iot, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-xilinx-zynqmp, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    2 Sept 2022
    Packages

    linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-gcp-5.15, linux-gke-5.15, linux-gkeop-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.14, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    2 Sept 2022
    BELL-CVE-2022-39188
    No fix available
    Packages

    Summary

    CVE-2022-39188 does not affect BellSoft software

    Published
    2 Sept 2022
    BELL-CVE-2022-39189
    No fix available
    Packages

    Summary

    CVE-2022-39189 does not affect BellSoft software

    Published
    2 Sept 2022
    BELL-CVE-2022-39190
    No fix available
    Packages

    Summary

    CVE-2022-39190 does not affect BellSoft software

    Published
    2 Sept 2022
    USN-5216-1
    Fix available
    Packages

    node-hosted-git-info, node-hosted-git-info

    Summary

    node-hosted-git-info vulnerability

    Published
    2 Sept 2022
    CVE-2022-39194
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    Packages

    bluez, bluez, bluez

    Summary

    Published
    2 Sept 2022
    Packages

    bluez, bluez, bluez

    Summary

    Published
    2 Sept 2022
    Packages

    bluez, bluez, bluez

    Summary

    Published
    2 Sept 2022
    Packages

    bluez, bluez, bluez

    Summary

    Published
    2 Sept 2022
    CVE-2022-36600
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36594
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36593
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2022-36759
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    UBUNTU-CVE-2022-39170
    No fix available
    Packages

    dwarfutils, dwarfutils, dwarfutils, dwarfutils, dwarfutils, dwarfutils, dwarfutils

    Summary

    Published
    2 Sept 2022
    CVE-2022-39170
    Fix available
    Packages

    Summary

    Published
    2 Sept 2022
    CVE-2021-25657
    No fix available
    Packages

    Summary

    Published
    2 Sept 2022
    USN-5594-1
    Fix available
    Packages

    linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency

    Summary

    linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-ibm, linux-kvm, linux-lowlatency vulnerabilities

    Published
    2 Sept 2022
    GHSA-2mh7-qxcw-q39g
    Fix available
    Packages

    francoisjacquet/rosariosis

    Summary

    francoisjacquet/rosariosis vulnerable to Cross-Site Scripting (XSS)

    Published
    2 Sept 2022
    GHSA-fjjw-82xw-vfc2
    Fix available
    Packages

    org.apache.shenyu:shenyu-common

    Summary

    Apache ShenYu Admin has insecure permissions

    Published
    2 Sept 2022
    GHSA-rf3f-3p37-2qh4
    Fix available
    Packages

    python-scciclient

    Summary

    python-scciclient vulnerable to Man-in-the-middle (MITM) attacks

    Published
    2 Sept 2022