Open Source Vulnerabilities

Kernel

sysrq: do not omit current cpu when showing backtrace of all active CPUs

Kernel

staging: rtl8712: fix uninit-value in r871xu_drv_init()

Kernel

nbd: fix io hung while disconnecting device

Kernel

cifs: fix potential deadlock in direct reclaim

Kernel

drm/radeon: fix a possible null pointer dereference

Kernel

ceph: flush the mdlog for filesystem sync

Kernel

ceph: fix possible deadlock when holding Fwb to get inline_data

Kernel

nbd: call genl_unregister_family() first in nbd_cleanup()

Kernel

drm/amd/display: Check if modulo is 0 before dividing.

Kernel

s390/gmap: voluntarily schedule during key setting

Kernel

x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data

SQL injection on login page in GLPI

Sensitive Data Exposure on Refused Inventory Files in GLPI

Prototype Pollution in underscore.deep

matrix-synapse

packagekit, packagekit, packagekit

packagekit, packagekit, packagekit, packagekit, packagekit, packagekit, packagekit

matrix-synapse

ipe, ipe, ipe, ipe, ipe, ipe, ipe

matrix-synapse, matrix-synapse, matrix-synapse

ruby-mysql

URL previews can crash Synapse media repositories or Synapse monoliths

apache2, apache2-bin, apache2-data, apache2-dev, apache2-doc, apache2-suexec-custom, apache2-suexec-pristine, apache2-utils

Fix CVE(s): CVE-2022-28615, CVE-2022-26377, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813

curl, libcurl3, libcurl3-gnutls, libcurl3-nss, libcurl4-doc, libcurl4-gnutls-dev, libcurl4-nss-dev, libcurl4-openssl-dev

Fix CVE(s): CVE-2022-27781

httpd, httpd-devel, httpd-manual, httpd-tools, mod_ssl

Fixed CVEs in httpd: CVE-2022-28615, CVE-2022-31813, CVE-2022-26377

httpd, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, mod_http2, mod_ldap, mod_md, mod_proxy_html, mod_session, mod_ssl

Fixed CVEs in mod_http2-3.module_el8.5.0+2060+6f259f31: CVE-2022-26377, CVE-2022-30556, CVE-2022-28615, CVE-2022-30522, CVE-2022-31813

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

Fixed CVEs in curl: CVE-2022-27780, CVE-2022-27782, CVE-2022-27781

curl, curl-minimal, libcurl, libcurl-devel, libcurl-minimal

Fixed CVEs in curl: CVE-2022-27780, CVE-2022-27781, CVE-2022-27782

httpd, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, mod_http2, mod_ldap, mod_md, mod_proxy_html, mod_session, mod_ssl

Fixed CVEs in httpd-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els: CVE-2022-28615, CVE-2022-31813, CVE-2022-30556, CVE-2022-26377, CVE-2022-30522

Server-Side Request Forgery (SSRF) in dompdf/dompdf

dcmtk, dcmtk, dcmtk

dcmtk, dcmtk, dcmtk

dcmtk, dcmtk, dcmtk

dcmtk, dcmtk, dcmtk