Open Source Vulnerabilities

bind9, bind9, bind9

bind, bind, bind, bind, bind, bind, bind, bind, bind, bind, bind, bind, bind

bind

CVE-2022-0396 affecting package bind for versions less than 9.16.29-1

tzdata, tzdata-java

tzdata bug fix and enhancement update

java-1_7_1-ibm

Security update for java-1_7_1-ibm

xen, xen, xen

Security update for xen

xen

Security update for xen

xen, xen, xen

Security update for xen

ckeditor

ckeditor vulnerabilities

openssl

Updated openssl packages fix security vulnerability

swtpm

Updated swtpm packages fix security vulnerability

cyrus-sasl

Updated cyrus-sasl packages fix security vulnerability

sphinx

Updated sphinx packages fix security vulnerability

java-1_7_0-ibm

Security update for java-1_7_0-ibm

linux-lts-xenial, linux-aws, linux-azure, linux-hwe, linux, linux-aws, linux-azure-4.15, linux, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-ibm-5.4, linux-hwe-5.4, linux-oem, linux-aws, linux-azure, linux, linux-gcp, linux-gke, linux-gkeop, linux-ibm

Kernel Live Patch Security Notice

Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

linux, linux, linux

kernel

CVE-2022-27666 affecting package kernel for versions less than 5.15.32.1-3

hyperv-daemons

CVE-2022-27666 affecting package hyperv-daemons for versions less than 5.15.92.1-1

linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-realtime, linux-raspi-realtime

pnpm

Untrusted Search Path in PNPM

poetry

Poetry before v1.1.9 contains Untrusted Search Path

microweber/microweber

Integer Overflow or Wraparound in Microweber

showdoc/showdoc

Unrestricted Upload of File with Dangerous Type in ShowDoc

simple-plist

Prototype Pollution in simple-plist

python-oslo.utils, python-oslo.utils, python-oslo.utils

radare2, radare2, radare2, radare2, radare2, radare2

linux-aws, linux-lts-xenial, linux, linux-aws, linux-kvm

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Use After Free in op_is_set_bp in radareorg/radare2

faker

Removal of functional code in faker.js

mitmproxy

Insufficient Protection against HTTP Request Smuggling in mitmproxy

electron, electron, electron, electron, electron

Renderers can obtain access to random bluetooth device without permission in Electron

faust, faust, faust

faust, faust, faust, faust, faust, faust, faust

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2021-3737

tcpreplay, tcpreplay, tcpreplay

asterisk, ring

pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject, pjproject