Open Source Vulnerabilities

rdiffweb

rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

snipe/snipe-it

Snipe-IT vulnerable to Improper Authentication

Use After Free in vim/vim

vim, vim, vim

vim, vim, vim, vim, vim, vim, vim

vim

CVE-2022-3234 affecting package vim for versions less than 9.0.0490-1

vim, vim, vim

rdiffweb

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

mupdf, mupdf

Security update for mupdf

Cross-site Scripting (XSS) - Stored in librenms/librenms

mupdf, mupdf

Security update for mupdf

Improper Authentication in snipe/snipe-it

Kernel

ALSA: bcd2000: Fix a UAF bug on the error path of probing

Kernel

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

Kernel

KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

Kernel

drm/nouveau: fix another off-by-one in nvbios_addr

Kernel

netfilter: nf_tables: fix null deref due to zeroed list head

Kernel

usbnet: Fix linkwatch use-after-free on disconnect

Kernel

btrfs: reject log replay if there is unsupported RO compat flag

Kernel

scsi: sg: Allow waiting for commands to complete on removed device

Kernel

md-raid10: fix KASAN warning

Kernel

MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

Kernel

spmi: trace: fix stack-out-of-bound access in SPMI tracing functions

Kernel

Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Kernel

dm raid: fix address sanitizer warning in raid_status

Kernel

ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h

Kernel

ext4: fix use-after-free in ext4_xattr_set_entry

Kernel

ext4: make sure ext4_append() always allocates new block

Kernel

net_sched: cls_route: remove from list when handle is 0

Kernel

pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map

Kernel

vsock: Fix memory leak in vsock_connect()

Kernel

irqchip/tegra: Fix overflow implicit truncation warnings

Kernel

usb: host: ohci-ppc-of: Fix refcount leak bug

Kernel

gadgetfs: ep_io - wait until IRQ finishes

Kernel

cxl: Fix a memory leak in an error handling path

Kernel

xfrm: fix refcount leak in __xfrm_policy_check()

Kernel

kprobes: don't call disarm_kprobe() for disabled kprobes

Kernel

drivers:md:fix a potential use-after-free bug

Kernel

ext4: avoid remove directory when directory is corrupted

Kernel

rose: check NULL rose_loopback_neigh->loopback

Kernel

ext4: avoid resizing to a partial cluster size

Kernel

tty: serial: Fix refcount leak bug in ucc_uart.c

Kernel

mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start

Kernel

ALSA: timer: Use deferred fasync helper

Kernel

powerpc/64: Init jump labels before parse_early_param()

Kernel

net: Fix a data-race around sysctl_tstamp_allow_data.

Kernel

video: fbdev: i740fb: Check the argument of i740_calc_vclk()