Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    AZL-7098
    Fix available
    Packages

    kernel

    Summary

    CVE-2021-45486 affecting package kernel for versions less than 5.15.2.1-1

    Published
    25 Dec 2021
    AZL-7109
    Fix available
    Packages

    kernel

    Summary

    CVE-2021-45485 affecting package kernel for versions less than 5.15.2.1-1

    Published
    25 Dec 2021
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-bluefield, linux-gcp, linux-gke, linux-gkeop, linux-kvm, linux-oem-5.10, linux-oracle, linux-raspi, linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    25 Dec 2021
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-bluefield, linux-gcp, linux-gcp-5.11, linux-gke, linux-gkeop, linux-kvm, linux-oem-5.10, linux-oem-5.13, linux-oracle, linux-oracle-5.11, linux-raspi, linux-riscv-5.11, linux-aws-5.8, linux-azure-5.8, linux-azure-fde-5.15, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.6, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    25 Dec 2021
    Packages

    webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

    Summary

    Published
    25 Dec 2021
    CVE-2021-45483
    No fix available
    Packages

    Summary

    Published
    25 Dec 2021
    Packages

    webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

    Summary

    Published
    25 Dec 2021
    CVE-2021-45482
    No fix available
    Packages

    Summary

    Published
    25 Dec 2021
    Packages

    webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

    Summary

    Published
    25 Dec 2021
    CVE-2021-45481
    No fix available
    Packages

    Summary

    Published
    25 Dec 2021
    Packages

    qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

    Summary

    Published
    25 Dec 2021
    Packages

    qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src

    Summary

    Published
    25 Dec 2021
    Packages

    qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

    Summary

    Published
    25 Dec 2021
    OSV-2021-1759
    Fix available
    Packages

    php

    Summary

    Heap-use-after-free in zend_hash_reverse_apply

    Published
    25 Dec 2021
    OSV-2021-1758
    Fix available
    Packages

    curl

    Summary

    Heap-buffer-overflow in seturl

    Published
    25 Dec 2021
    OSV-2021-1756
    Fix available
    Packages

    curl

    Summary

    Heap-buffer-overflow in Curl_sasl_decode_mech

    Published
    25 Dec 2021
    OSV-2021-1755
    Fix available
    Packages

    c-blosc2

    Summary

    Heap-buffer-overflow in ndlz4_decompress

    Published
    25 Dec 2021
    OSV-2021-1754
    Fix available
    Packages

    ghostscript

    Summary

    UNKNOWN READ in insert_free_size

    Published
    25 Dec 2021
    OSV-2021-1753
    Fix available
    Packages

    ghostscript

    Summary

    UNKNOWN READ in names_string_ref

    Published
    25 Dec 2021
    OSV-2021-1752
    Fix available
    Packages

    ghostscript

    Summary

    Heap-buffer-overflow in s_hex_process

    Published
    25 Dec 2021
    Packages

    linux, linux, linux

    Summary

    Published
    24 Dec 2021
    CVE-2021-45480
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    AZL-41801
    Fix available
    Packages

    hyperv-daemons

    Summary

    CVE-2021-45480 affecting package hyperv-daemons for versions less than 6.6.35.1-1

    Published
    24 Dec 2021
    AZL-7097
    Fix available
    Packages

    kernel

    Summary

    CVE-2021-45480 affecting package kernel for versions less than 5.15.18.1-1

    Published
    24 Dec 2021
    Packages

    linux-hwe-edge, linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux, linux-aws, linux-aws-5.13, linux-azure, linux-azure-5.13, linux-bluefield, linux-gcp, linux-gcp-5.13, linux-gke, linux-gkeop, linux-hwe-5.13, linux-ibm, linux-kvm, linux-oem-5.14, linux-oracle, linux-oracle-5.13, linux-raspi, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-fips, linux-intel-iot-realtime, linux-realtime, linux-raspi-realtime

    Summary

    Published
    24 Dec 2021
    CVE-2021-3977
    Fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-23574
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-23490
    Fix available
    Packages

    Summary

    Published
    24 Dec 2021
    Packages

    logback

    Summary

    Security update for logback

    Published
    24 Dec 2021
    Packages

    log4j12, log4j12-mini

    Summary

    Security update for log4j12

    Published
    24 Dec 2021
    CVE-2021-4072
    Fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-23772
    Fix available
    Packages

    Summary

    Published
    24 Dec 2021
    RUSTSEC-2021-0142
    No fix available
    Packages

    dotenv_codegen

    Summary

    dotenv is Unmaintained

    Published
    24 Dec 2021
    RUSTSEC-2021-0141
    No fix available
    Packages

    dotenv

    Summary

    dotenv is Unmaintained

    Published
    24 Dec 2021
    OESA-2021-1468
    Fix available
    Packages

    xorg-x11-server, xorg-x11-server

    Summary

    xorg-x11-server security update

    Published
    24 Dec 2021
    OESA-2021-1469
    Fix available
    Packages

    kernel, kernel

    Summary

    kernel security update

    Published
    24 Dec 2021
    OESA-2021-1470
    Fix available
    Packages

    grafana, grafana

    Summary

    grafana security update

    Published
    24 Dec 2021
    OESA-2021-1471
    Fix available
    Packages

    lapack, lapack

    Summary

    lapack security update

    Published
    24 Dec 2021
    OESA-2021-1472
    Fix available
    Packages

    netty, netty

    Summary

    netty security update

    Published
    24 Dec 2021
    SUSE-SU-2021:4190-1
    Fix available
    Packages

    elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon-hpe, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, zookeeper, elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-neutron, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove, zookeeper, elasticsearch, kafka, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh, zookeeper

    Summary

    Security update for logstash

    Published
    24 Dec 2021
    CVE-2021-20876
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-20875
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-20874
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-20827
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-20826
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-45474
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-45473
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-45472
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    CVE-2021-45471
    No fix available
    Packages

    Summary

    Published
    24 Dec 2021
    UBUNTU-CVE-2021-45471
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    24 Dec 2021