Open Source Vulnerabilities

Discourse vulnerable to RCE via admins uploading maliciously zipped file

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fixed CVEs in bind: CVE-2022-38177, CVE-2022-38178, CVE-2022-2795

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fixed CVEs in bind: CVE-2022-38178, CVE-2022-38177, CVE-2022-2795

bind, bind-chroot, bind-devel, bind-libs, bind-sdb, bind-utils

Fixed CVE-2022-2795 in bind

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-3256 in vim

bind, bind-chroot, bind-devel, bind-libs, bind-sdb, bind-utils

Fixed CVE-2022-2795 in bind

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed CVE-2022-3256 in vim

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-3256

bind9, bind9-doc, bind9-host, bind9utils, dnsutils, host, libbind-dev, libbind-export-dev, libbind9-140, libdns-export162, libdns162, libirs-export141, libirs141, libisc-export160, libisc160, libisccc-export140, libisccc140, libisccfg-export140, libisccfg140, liblwres141, lwresd

Fix CVE(s): CVE-2022-38177, CVE-2022-2795

isolated-vm has vulnerable CachedDataOptions in API

github.com/peterzen/goresolver

Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver

github.com/peterzen/goresolver

Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver

uclibc, uclibc, uclibc

uclibc-ng

CVE-2022-29503 affecting package uclibc-ng for versions less than 1.0.43-1

python-matrix-nio, python-matrix-nio, python-matrix-nio

python-matrix-nio, python-matrix-nio, python-matrix-nio, python-matrix-nio, python-matrix-nio

matrix-js-sdk

Improper beacon events in matrix-js-sdk can result in availability issues

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder

d3-color

d3-color vulnerable to ReDoS

krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl, krb5-appl

Security update for krb5-appl

node-matrix-js-sdk

thunderbird, thunderbird, node-matrix-js-sdk, node-matrix-js-sdk, thunderbird, node-matrix-js-sdk

kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15, kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15, kernel-livepatch-SLE15-SP3_Update_18, kernel-livepatch-SLE15-SP3_Update_12, kernel-livepatch-SLE15-SP3_Update_15

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-3352 affecting package vim for versions less than 9.0.0614-1

vim, vim, vim

matrix-sdk-crypto

matrix-sdk Impersonation of room keys

dpdk, dpdk, dpdk

dpdk security update

slurm, slurm, slurm, slurm

Security update for slurm

lighttpd, lighttpd, lighttpd, lighttpd

Security update for lighttpd

expat, expat, expat, expat, expat, expat, expat, expat, expat

Security update for expat

kernel-livepatch-SLE15-SP2_Update_29

Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)

Cross-site Scripting (XSS) - Stored in inventree/inventree

kernel-livepatch-SLE15-SP2_Update_27

Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2)