Open Source Vulnerabilities

kernel

CVE-2022-2380 affecting package kernel for versions less than 5.15.67.1-4

linux-azure, linux-aws-hwe, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws, linux-azure-4.15, linux-dell300x, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

linux-aws-5.4, linux-azure-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux, linux-aws, linux-azure, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-azure-fde, linux-gcp, linux-gke, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

linux-aws

linux-aws vulnerabilities

git, git, git

git vulnerabilities

squid, squid, squid, squid, squid, squid

Security update for squid

gmp, libnettle

Security update for gmp, gnutls, libnettle

rhonabwy, rhonabwy

rhonabwy

drupal/entity_print

ganga

Ganga allows absolute path traversal

openssl-1_1

Security update for openssl-1_1

codecov

opera, opera

Security update for opera

kernel-default, kernel-default, kgraft-patch-SLE12-SP5_Update_33, kernel-docs, kernel-obs-build, kernel-default, kernel-source, kernel-syms, kernel-default, kernel-source, kernel-syms, kernel-default

Security update for the Linux Kernel

kernel-default, kernel-source, kernel-syms

Security update for the Linux Kernel

cifs-utils, cifs-utils

Security update for cifs-utils

x11-server

Updated x11-server packages fix security vulnerabilities

Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)

uriparser

uriparser vulnerabilities

kernel-rt

Important: kernel-rt security and bug fix update

kernel

Important: kernel security, bug fix, and enhancement update

libjxl

Heap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRow

mruby

Heap-buffer-overflow in mrb_bint_to_s

fluent-bit

Heap-use-after-free in jsmn_parse

skia

UNKNOWN WRITE in SkMaskBlurFilter::blur

svelte

Svelte vulnerable to XSS when using objects during server-side rendering

github.com/argoproj/argo-cd, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2

Argo CD improper access control bug can allow malicious user to escalate privileges to admin level

sigs.k8s.io/aws-iam-authenticator

aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9

ameos/ameos_tarteaucitron

Cross site scripting in ameos_tarteaucitron