Open Source Vulnerabilities

clamav-openssl1, clamav, clamav

Security update for clamav

polkit, polkit-devel, polkit-docs, polkit-libs

Fix of CVE: CVE-2021-4034

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fix of CVE: CVE-2021-25214

polkit, polkit-desktop-policy, polkit-devel, polkit-docs

Fix of CVE: CVE-2021-4034

polkit, polkit-desktop-policy, polkit-devel, polkit-docs

Fixed CVE-2021-4034 in polkit

gir1.2-polkit-1.0, libpolkit-agent-1-0, libpolkit-agent-1-dev, libpolkit-backend-1-0, libpolkit-backend-1-dev, libpolkit-gobject-1-0, libpolkit-gobject-1-dev, policykit-1, policykit-1-doc

Fix CVE(s): CVE-2021-4034

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Stored in microweber/microweber

parfait, parfait, parfait-examples, parfait-examples, parfait-javadoc, parfait-javadoc, pcp-parfait-agent, pcp-parfait-agent, si-units, si-units, si-units-javadoc, si-units-javadoc, unit-api, unit-api, unit-api-javadoc, unit-api-javadoc, uom-lib, uom-lib, uom-lib-javadoc, uom-lib-javadoc, uom-parent, uom-parent, uom-se, uom-se, uom-se-javadoc, uom-se-javadoc, uom-systems, uom-systems, uom-systems-javadoc, uom-systems-javadoc

Important: parfait:0.5 security update

parfait, si-units, unit-api, uom-lib, uom-parent, uom-se, uom-systems

Important: parfait:0.5 security update

linux, linux, linux

,

protobuf, protobuf, protobuf

kernel

CVE-2021-22600 affecting package kernel for versions less than 5.15.18.1-1

mysql

CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1

linux-azure, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux-hwe-edge, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-fips, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

CVE-2021-22570 does not affect BellSoft software

protobuf, protobuf, protobuf, protobuf, protobuf

protobuf

xorg-server, xorg-server

xorg-server vulnerabilities

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0361 affecting package vim for versions less than 8.2.4233-1

vim, vim, vim, vim, vim

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

Security update for strongswan

log4j, log4j

Security update for log4j

SQL Injection in star7th/showdoc

Improper Access Control in crater-invoice/crater

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-0359 affecting package vim for versions less than 8.2.4233-1

spip, spip

spip, spip

spip, spip

spip, spip

vim, vim, vim, vim, vim

spip, spip, spip

spip, spip, spip