Open Source Vulnerabilities

libjpeg6b

libjpeg6b vulnerabilities

linux, linux, linux

linux, linux, linux

kernel

CVE-2022-2078 affecting package kernel for versions less than 5.15.55.1-1

kernel

CVE-2022-1852 affecting package kernel for versions less than 5.15.55.1-1

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15, linux-gke-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.15, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-azure-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-bluefield, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

libjpeg6b

libjpeg6b vulnerabilities

u-boot, u-boot, u-boot

u-boot, u-boot, u-boot, u-boot

org.apache.shiro:shiro-core

Improper Authorization in Apache Shiro

topthink/framework

Deserialization of Untrusted Data in topthink/framework

microweber/microweber

Open Redirect in microweber

getgrav/grav

Code injection in grav

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Moderate: vim security update

libinput, libinput-devel, libinput-utils

Moderate: libinput security update

compat-openssl10

Low: compat-openssl10 security update

libgcrypt, libgcrypt-devel

Moderate: libgcrypt security update

curl, libcurl, libcurl-devel, libcurl-minimal

Moderate: curl security update

expat, expat-devel

Moderate: expat security update

bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-doc, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf

Important: kernel security and bug fix update

apcu-panel, libzip, libzip-devel, libzip-tools, php-pear, php-pecl-apcu, php-pecl-apcu-devel, php-pecl-rrd, php-pecl-xdebug3, php-pecl-zip

ALSA-2022:5468: php:8.0 security update (Important)

Out-of-bounds Read in vim/vim

systemd

systemd - security update

firefox-esr

firefox-esr - security update

linux

linux - security update

silverstripe/assets

Unpublished, protected files can be published via shortcode

silverstripe/framework

Quadratic blowup in Convert::xml2array()

silverstripe/framework

Stored XSS via HTML fields in SilverStripe Framework

silverstripe/framework

Stored XSS in link tags added via XHR in SilverStripe Framework

cloud-init, cloud-init, cloud-init

cloud-init vulnerability

silverstripe/hybridsessions, silverstripe/hybridsessions

Hybridsessions does not expire session id on logout

wasmtime, cranelift-codegen

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

matrix-synapse

URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths