Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    ALSA-2022:1814
    Fix available
    Packages

    gnome-shell

    Summary

    Low: gnome-shell security and bug fix update

    Published
    10 May 2022
    RLSA-2022:1814
    Fix available
    Packages

    gnome-shell

    Summary

    Low: gnome-shell security and bug fix update

    Published
    10 May 2022
    ALBA-2022:1806
    Fix available
    Packages

    cockpit-machines, cockpit-packagekit, cockpit-pcp, cockpit-storaged

    Summary

    cockpit-appstream bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1804
    Fix available
    Packages

    osbuild, osbuild-luks2, osbuild-lvm2, osbuild-ostree, osbuild-selinux, python3-osbuild

    Summary

    osbuild bug fix and enhancement update

    Published
    10 May 2022
    ALSA-2022:1801
    Fix available
    Packages

    gfbgraph

    Summary

    Moderate: gfbgraph security update

    Published
    10 May 2022
    RLSA-2022:1801
    Fix available
    Packages

    gfbgraph

    Summary

    Moderate: gfbgraph security update

    Published
    10 May 2022
    ALBA-2022:1800
    Fix available
    Packages

    accountsservice, accountsservice-devel, accountsservice-libs

    Summary

    accountsservice bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1794
    Fix available
    Packages

    libmemcached, libmemcached-devel, libmemcached-libs

    Summary

    libmemcached bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1790
    Fix available
    Packages

    libpinyin, libpinyin-data, libpinyin-devel, libzhuyin

    Summary

    libpinyin bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1789
    Fix available
    Packages

    certmonger

    Summary

    certmonger bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1787
    Fix available
    Packages

    lorax-templates-rhel

    Summary

    lorax-templates-rhel bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1785
    Fix available
    Packages

    composer-cli, lorax, lorax-composer, lorax-lmc-novirt, lorax-lmc-virt, lorax-templates-generic

    Summary

    lorax bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1784
    Fix available
    Packages

    js-d3-flame-graph

    Summary

    js-d3-flame-graph bug fix and enhancement update

    Published
    10 May 2022
    ALSA-2022:1781
    Fix available
    Packages

    grafana

    Summary

    Low: grafana security, bug fix, and enhancement update

    Published
    10 May 2022
    RLSA-2022:1781
    Fix available
    Packages

    grafana

    Summary

    Low: grafana security, bug fix, and enhancement update

    Published
    10 May 2022
    ALBA-2022:1780
    Fix available
    Packages

    anaconda, anaconda-core, anaconda-dracut, anaconda-gui, anaconda-install-env-deps, anaconda-tui, anaconda-widgets

    Summary

    anaconda bug fix and enhancement update

    Published
    10 May 2022
    ALSA-2022:1777
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3-devel, webkit2gtk3-jsc, webkit2gtk3-jsc-devel

    Summary

    Moderate: webkit2gtk3 security, bug fix, and enhancement update

    Published
    10 May 2022
    RLSA-2022:1777
    Fix available
    Packages

    webkit2gtk3

    Summary

    Moderate: webkit2gtk3 security, bug fix, and enhancement update

    Published
    10 May 2022
    ALBA-2022:1771
    Fix available
    Packages

    gdm, gdm-devel, gdm-pam-extensions-devel

    Summary

    gdm bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1770
    Fix available
    Packages

    evince, evince-browser-plugin, evince-devel, evince-libs, evince-nautilus

    Summary

    evince bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1765
    Fix available
    Packages

    pcp, pcp-conf, pcp-devel, pcp-doc, pcp-export-pcp2elasticsearch, pcp-export-pcp2graphite, pcp-export-pcp2influxdb, pcp-export-pcp2json, pcp-export-pcp2spark, pcp-export-pcp2xml, pcp-export-pcp2zabbix, pcp-export-zabbix-agent, pcp-gui, pcp-import-collectl2pcp, pcp-import-ganglia2pcp, pcp-import-iostat2pcp, pcp-import-mrtg2pcp, pcp-import-sar2pcp, pcp-libs, pcp-libs-devel, pcp-pmda-activemq, pcp-pmda-apache, pcp-pmda-bash, pcp-pmda-bcc, pcp-pmda-bind2, pcp-pmda-bonding, pcp-pmda-bpftrace, pcp-pmda-cifs, pcp-pmda-cisco, pcp-pmda-dbping, pcp-pmda-denki, pcp-pmda-dm, pcp-pmda-docker, pcp-pmda-ds389, pcp-pmda-ds389log, pcp-pmda-elasticsearch, pcp-pmda-gfs2, pcp-pmda-gluster, pcp-pmda-gpfs, pcp-pmda-gpsd, pcp-pmda-hacluster, pcp-pmda-haproxy, pcp-pmda-infiniband, pcp-pmda-json, pcp-pmda-libvirt, pcp-pmda-lio, pcp-pmda-lmsensors, pcp-pmda-logger, pcp-pmda-lustre, pcp-pmda-lustrecomm, pcp-pmda-mailq, pcp-pmda-memcache, pcp-pmda-mic, pcp-pmda-mongodb, pcp-pmda-mounts, pcp-pmda-mssql, pcp-pmda-mysql, pcp-pmda-named, pcp-pmda-netcheck, pcp-pmda-netfilter, pcp-pmda-news, pcp-pmda-nfsclient, pcp-pmda-nginx, pcp-pmda-nvidia-gpu, pcp-pmda-openmetrics, pcp-pmda-openvswitch, pcp-pmda-oracle, pcp-pmda-pdns, pcp-pmda-perfevent, pcp-pmda-podman, pcp-pmda-postfix, pcp-pmda-postgresql, pcp-pmda-rabbitmq, pcp-pmda-redis, pcp-pmda-roomtemp, pcp-pmda-rsyslog, pcp-pmda-samba, pcp-pmda-sendmail, pcp-pmda-shping, pcp-pmda-slurm, pcp-pmda-smart, pcp-pmda-snmp, pcp-pmda-sockets, pcp-pmda-statsd, pcp-pmda-summary, pcp-pmda-systemd, pcp-pmda-trace, pcp-pmda-unbound, pcp-pmda-weblog, pcp-pmda-zimbra, pcp-pmda-zswap, pcp-selinux, pcp-system-tools, pcp-testsuite, pcp-zeroconf, perl-PCP-LogImport, perl-PCP-LogSummary, perl-PCP-MMV, perl-PCP-PMDA, python3-pcp

    Summary

    pcp bug fix and enhancement update

    Published
    10 May 2022
    ALSA-2022:1764
    Fix available
    Packages

    python38, python38-Cython, python38-PyMySQL, python38-asn1crypto, python38-atomicwrites, python38-attrs, python38-babel, python38-cffi, python38-chardet, python38-cryptography, python38-debug, python38-devel, python38-idle, python38-idna, python38-jinja2, python38-libs, python38-lxml, python38-markupsafe, python38-mod_wsgi, python38-more-itertools, python38-numpy, python38-numpy-doc, python38-numpy-f2py, python38-packaging, python38-pip, python38-pip-wheel, python38-pluggy, python38-ply, python38-psutil, python38-psycopg2, python38-psycopg2-doc, python38-psycopg2-tests, python38-py, python38-pycparser, python38-pyparsing, python38-pysocks, python38-pytest, python38-pytz, python38-pyyaml, python38-requests, python38-rpm-macros, python38-scipy, python38-setuptools, python38-setuptools-wheel, python38-six, python38-test, python38-tkinter, python38-urllib3, python38-wcwidth, python38-wheel, python38-wheel-wheel

    Summary

    Moderate: python38:3.8 and python38-devel:3.8 security update

    Published
    10 May 2022
    RLSA-2022:1764
    Fix available
    Packages

    babel, Cython, mod_wsgi, numpy, pytest, python38, python3x-pip, python3x-pyparsing, python3x-setuptools, python3x-six, python-asn1crypto, python-atomicwrites, python-pluggy, python-attrs, python-cffi, python-chardet, python-cryptography, python-cryptography, python-idna, python-jinja2, python-lxml, python-markupsafe, python-more-itertools, python-packaging, python-ply, python-psutil, python-psycopg2, python-psycopg2, python-py, python-pycparser, pytz, python-PyMySQL, python-PyMySQL, python-pysocks, python-requests, python-urllib3, python-wcwidth, python-wheel, PyYAML, PyYAML, scipy, scipy

    Summary

    Moderate: python38:3.8 and python38-devel:3.8 security update

    Published
    10 May 2022
    ALBA-2022:1761
    Fix available
    Packages

    gcc-toolset-11-gcc, gcc-toolset-11-gcc-c++, gcc-toolset-11-gcc-gdb-plugin, gcc-toolset-11-gcc-gfortran, gcc-toolset-11-gcc-plugin-devel, gcc-toolset-11-libasan-devel, gcc-toolset-11-libatomic-devel, gcc-toolset-11-libgccjit, gcc-toolset-11-libgccjit-devel, gcc-toolset-11-libgccjit-docs, gcc-toolset-11-libitm-devel, gcc-toolset-11-liblsan-devel, gcc-toolset-11-libquadmath-devel, gcc-toolset-11-libstdc++-devel, gcc-toolset-11-libstdc++-docs, gcc-toolset-11-libtsan-devel, gcc-toolset-11-libubsan-devel, libasan6

    Summary

    gcc-toolset-11-gcc bug fix and enhancement update

    Published
    10 May 2022
    ALEA-2022:1758
    Fix available
    Packages

    network-manager-applet, nm-connection-editor

    Summary

    network-manager-applet bug fix and enhancement update

    Published
    10 May 2022
    ALBA-2022:1757
    Fix available
    Packages

    fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws, fence-agents-apc, fence-agents-apc-snmp, fence-agents-aws, fence-agents-azure-arm, fence-agents-bladecenter, fence-agents-brocade, fence-agents-cisco-mds, fence-agents-cisco-ucs, fence-agents-common, fence-agents-compute, fence-agents-drac5, fence-agents-eaton-snmp, fence-agents-emerson, fence-agents-eps, fence-agents-gce, fence-agents-heuristics-ping, fence-agents-hpblade, fence-agents-ibm-powervs, fence-agents-ibm-vpc, fence-agents-ibmblade, fence-agents-ifmib, fence-agents-ilo-moonshot, fence-agents-ilo-mp, fence-agents-ilo-ssh, fence-agents-ilo2, fence-agents-intelmodular, fence-agents-ipdu, fence-agents-ipmilan, fence-agents-kdump, fence-agents-kubevirt, fence-agents-lpar, fence-agents-mpath, fence-agents-redfish, fence-agents-rhevm, fence-agents-rsa, fence-agents-rsb, fence-agents-sbd, fence-agents-scsi, fence-agents-virsh, fence-agents-vmware-rest, fence-agents-vmware-soap, fence-agents-wti

    Summary

    fence-agents bug fix and enhancement update

    Published
    10 May 2022
    SUSE-SU-2022:1593-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP1_Update_30

    Summary

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1)

    Published
    10 May 2022
    SUSE-SU-2022:1591-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP2_Update_13

    Summary

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2)

    Published
    10 May 2022
    OSV-2022-406
    No fix available
    Packages

    libucl

    Summary

    Heap-buffer-overflow in ucl_object_dtor_unref_single

    Published
    10 May 2022
    GHSA-73rp-q4rx-5grc
    Fix available
    Packages

    microweber/microweber

    Summary

    Incorrect Authorization in microweber

    Published
    10 May 2022
    GHSA-9qmm-4mfr-r3wj
    Fix available
    Packages

    solana_rbpf

    Summary

    Incorrect Calculation in solana_rbpf

    Published
    10 May 2022
    GHSA-w3xg-7q6m-3xwp
    Fix available
    Packages

    wp-graphql/wp-graphql

    Summary

    Improper Access Control in wp-graphql

    Published
    10 May 2022
    GHSA-5cjr-78cq-3wrg
    Fix available
    Packages

    craftcms/cms

    Summary

    Improper account password reset in Craft CMS

    Published
    10 May 2022
    ALSA-2022:2074
    Fix available
    Packages

    ctdb, libsmbclient, libsmbclient-devel, libwbclient, libwbclient-devel, libwbclient-devel, python3-samba, python3-samba-test, samba, samba-client, samba-client-libs, samba-common, samba-common-libs, samba-common-tools, samba-devel, samba-krb5-printing, samba-libs, samba-pidl, samba-test, samba-test-libs, samba-vfs-iouring, samba-winbind, samba-winbind-clients, samba-winbind-krb5-locator, samba-winbind-modules, samba-winexe

    Summary

    Moderate: samba security, bug fix, and enhancement update

    Published
    10 May 2022
    CVE-2022-1537
    Fix available
    Packages

    Summary

    file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/grunt

    Published
    10 May 2022
    ALSA-2022:1939
    Fix available
    Packages

    libecap, libecap-devel, squid

    Summary

    Moderate: squid:4 security and bug fix update

    Published
    10 May 2022
    ALSA-2022:1935
    Fix available
    Packages

    apcu-panel, libzip, libzip-devel, libzip-tools, php, php-bcmath, php-cli, php-common, php-dba, php-dbg, php-devel, php-embedded, php-enchant, php-ffi, php-fpm, php-gd, php-gmp, php-intl, php-json, php-ldap, php-mbstring, php-mysqlnd, php-odbc, php-opcache, php-pdo, php-pear, php-pecl-apcu, php-pecl-apcu-devel, php-pecl-rrd, php-pecl-xdebug, php-pecl-zip, php-pgsql, php-process, php-snmp, php-soap, php-xml, php-xmlrpc

    Summary

    Moderate: php:7.4 security update

    Published
    10 May 2022
    ALSA-2022:1917
    Fix available
    Packages

    xorg-x11-server-Xdmx, xorg-x11-server-Xephyr, xorg-x11-server-Xnest, xorg-x11-server-Xorg, xorg-x11-server-Xvfb, xorg-x11-server-Xwayland, xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-devel, xorg-x11-server-source

    Summary

    Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update

    Published
    10 May 2022
    ALSA-2022:1898
    Fix available
    Packages

    fapolicyd, fapolicyd-selinux

    Summary

    Moderate: fapolicyd security, bug fix, and enhancement update

    Published
    10 May 2022
    ALSA-2022:1762
    Fix available
    Packages

    aardvark-dns, buildah, buildah-tests, cockpit-podman, conmon, container-selinux, containernetworking-plugins, containers-common, crit, crit, criu, criu, criu-devel, criu-devel, criu-libs, criu-libs, crun, fuse-overlayfs, libslirp, libslirp-devel, netavark, oci-seccomp-bpf-hook, podman, podman-catatonit, podman-docker, podman-gvproxy, podman-plugins, podman-remote, podman-tests, python3-criu, python3-criu, python3-podman, runc, skopeo, skopeo-tests, slirp4netns, toolbox, toolbox-tests, udica

    Summary

    Important: container-tools:rhel8 security, bug fix, and enhancement update

    Published
    10 May 2022
    CVE-2022-1629
    Fix available
    Packages

    Summary

    Buffer Over-read in function find_next_quote in vim/vim

    Published
    10 May 2022
    CVE-2022-23705
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-23704
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2021-43712
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-30335
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-29868
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-30524
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-30240
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-30239
    No fix available
    Packages

    Summary

    Published
    9 May 2022
    CVE-2022-29972
    No fix available
    Packages

    Summary

    Published
    9 May 2022