Open Source Vulnerabilities

CVE-2022-2873 does not affect BellSoft software

CVE-2021-3659 does not affect BellSoft software

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

rpm, rpm, rpm, rpm, rpm, rpm, rpm, rpm

u-boot, u-boot-rpiarm64, u-boot, u-boot-avnetultra96rev1, u-boot-bananapim64, u-boot-dragonboard410c, u-boot-dragonboard820c, u-boot-evb-rk3399, u-boot-firefly-rk3399, u-boot-geekbox, u-boot-hikey, u-boot-khadas-vim, u-boot-khadas-vim2, u-boot-libretech-ac, u-boot-libretech-cc, u-boot-ls1012afrdmqspi, u-boot-mvebudb-88f3720, u-boot-mvebudbarmada8k, u-boot-mvebuespressobin-88f3720, u-boot-mvebumcbin-88f8040, u-boot-nanopia64, u-boot-odroid-c2, u-boot-odroid-c4, u-boot-odroid-n2, u-boot-orangepipc2, u-boot-p2371-2180, u-boot-p2771-0000-500, u-boot-p3450-0000, u-boot-pine64plus, u-boot-pinebook, u-boot-pinebook-pro-rk3399, u-boot-pineh64, u-boot-pinephone, u-boot-poplar, u-boot-rock-pi-4-rk3399, u-boot-rock-pi-n10-rk3399pro, u-boot-rock64-rk3328, u-boot-rock960-rk3399, u-boot-rockpro64-rk3399, u-boot-rpi3, u-boot-rpi4, u-boot-rpiarm64, u-boot-xilinxzynqmpvirt, u-boot-xilinxzynqmpzcu102rev10

Security update for u-boot

u-boot, u-boot-rpiarm64, u-boot, u-boot-avnetultra96rev1, u-boot-bananapim64, u-boot-dragonboard410c, u-boot-dragonboard820c, u-boot-evb-rk3399, u-boot-firefly-rk3399, u-boot-geekbox, u-boot-hikey, u-boot-khadas-vim, u-boot-khadas-vim2, u-boot-libretech-ac, u-boot-libretech-cc, u-boot-ls1012afrdmqspi, u-boot-mvebudb-88f3720, u-boot-mvebudbarmada8k, u-boot-mvebuespressobin-88f3720, u-boot-mvebumcbin-88f8040, u-boot-nanopia64, u-boot-odroid-c2, u-boot-odroid-c4, u-boot-odroid-n2, u-boot-orangepipc2, u-boot-p2371-2180, u-boot-p2771-0000-500, u-boot-p3450-0000, u-boot-pine64plus, u-boot-pinebook, u-boot-pinebook-pro-rk3399, u-boot-pineh64, u-boot-pinephone, u-boot-poplar, u-boot-rock-pi-4-rk3399, u-boot-rock64-rk3328, u-boot-rock960-rk3399, u-boot-rockpro64-rk3399, u-boot-rpi3, u-boot-rpi4, u-boot-rpiarm64, u-boot-xilinxzynqmpvirt, u-boot-xilinxzynqmpzcu102rev10

Security update for u-boot

Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

Directorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending

gimp, gimp

Security update for gimp

java-1.7.0-openjdk, java-1.7.0-openjdk-demo, java-1.7.0-openjdk-devel, java-1.7.0-openjdk-javadoc, java-1.7.0-openjdk-src

Fixed 50 CVEs in java-1.7.0-openjdk

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

systemd-presets-common-SUSE

Security update for systemd-presets-common-SUSE

systemd-presets-common-SUSE, systemd-presets-common-SUSE, systemd-presets-common-SUSE, systemd-presets-common-SUSE, systemd-presets-common-SUSE, systemd-presets-common-SUSE

Security update for systemd-presets-common-SUSE

Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-2581 in vim

java-1.7.0-openjdk, java-1.7.0-openjdk-demo, java-1.7.0-openjdk-devel, java-1.7.0-openjdk-javadoc, java-1.7.0-openjdk-src

Fixed 50 CVEs in java-1.7.0-openjdk

exim4, exim4-base, exim4-config, exim4-daemon-heavy, exim4-daemon-light, exim4-dev, eximon4

Fix CVE(s): CVE-2022-37452, CVE-2022-37451

curl, libcurl3, libcurl3-gnutls, libcurl3-nss, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev

Fix CVE(s): CVE-2022-32208

libxslt, libxslt, libxslt

libxslt vulnerabilities

octoprint

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez, bluez

Security update for bluez

Unverified Password Change in octoprint/octoprint

exim4, exim4, exim4, exim4

exim4 vulnerability

Weak Password Requirements in notrinos/notrinoserp

open-iscsi

Security update for open-iscsi

wireshark

Stack-buffer-overflow in get_transaction

notrinos/notrinos-erp

Exposure of password hashes in notrinos/notrinos-erp

yetiforce/yetiforce-crm

Cross site scripting in yetiforce/yetiforce-crm

org.apache.flume.flume-ng-sources:flume-jms-source

Remote code execution in Apache Flume

apache-commons-jxpath

Security exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPosition

NULL Pointer Dereference in vim/vim

jetty9

jetty9 - security update

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

Exposure of Private Personal Information to an Unauthorized Actor in notrinos/notrinoserp

apache-commons-jxpath

Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize

osquery

Heap-buffer-overflow in sqlite3VdbeExec

kicad

kicad - security update

rhonabwy, rhonabwy

rhonabwy

teeworlds

Updated teeworlds packages fix security vulnerability

wavpack

Updated wavpack packages fix security vulnerability