Open Source Vulnerabilities

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix CVE(s): CVE-2022-21515

intel-microcode

Fix CVE(s): CVE-2022-21127, CVE-2021-0127, CVE-2022-21151, CVE-2022-21166, CVE-2021-33120, CVE-2021-33117, CVE-2022-21125, CVE-2021-0146, CVE-2021-0145, CVE-2022-21123

dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

Fixed CVE-2022-30550 in dovecot

dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

Fixed CVE-2022-30550 in dovecot

libxml2, libxml2, libxml2

libxml2 vulnerability

Password disclosure in log file in Nextcloud Mail App

Unauthenticated SSRF in 3rd party module "cerdic/csstidy"

openjdk-8

openjdk-8 vulnerabilities

Federated share accepting/declining is not logged in audit log in Nextcloud Server

Missing brute force protection on cloud federation sharing in Nextcloud Server

mod-wsgi, mod-wsgi, mod-wsgi

mod-wsgi vulnerability

gnutls28, gnutls28, gnutls28

gnutls28 vulnerabilities

python-django, python-django

python-django vulnerability

openjdk-17, openjdk-8, openjdk-lts, openjdk-17, openjdk-8, openjdk-lts, openjdk-17, openjdk-18, openjdk-8, openjdk-lts

openjdk-8, openjdk-lts, openjdk-17, openjdk-18 vulnerabilities

Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar

python-ujson, python-ujson, python-ujson, python-ujson, python-ujson, python-ujson

Security update for python-ujson

go1.18, go1.18, go1.18, go1.18

Security update for go1.18

go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17, go1.17

Security update for go1.17

interledger-packet

Interledger is Unmaintained

v4l2loopback, v4l2loopback, v4l2loopback

v4l2loopback, v4l2loopback, v4l2loopback, v4l2loopback, v4l2loopback, v4l2loopback, v4l2loopback

php

Important: php security update

Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Path Traversal in plankanban/planka

Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf

Security update for qpdf

qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf, qpdf

Security update for qpdf

u-boot, u-boot-rpi3, u-boot, u-boot-rpi3, u-boot, u-boot, u-boot-rpi3, u-boot, u-boot, u-boot-rpi3

Security update for u-boot

u-boot, u-boot-rpi3, u-boot, u-boot-rpi3

Security update for u-boot

harfbuzz, harfbuzz

Security update for harfbuzz

harfbuzz

Security update for harfbuzz

harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz, harfbuzz

Security update for harfbuzz

User Group Privilege Escalation

Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin

Apache JSPWiki CSRF in UserPreferences.jsp

Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp