Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CLSA-2022-1659644194
    Fix available
    Packages

    tzdata, tzdata-java

    Summary

    Update of tzdata

    Published
    4 Aug 2022
    CLSA-2022-1659643989
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-21540, CVE-2022-34169

    Published
    4 Aug 2022
    CLSA-2022-1659643853
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-slowdebug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-34169, CVE-2022-21540, CVE-2022-21541

    Published
    4 Aug 2022
    CLSA-2022-1659643786
    Fix available
    Packages

    tzdata, tzdata-java

    Summary

    Update of tzdata

    Published
    4 Aug 2022
    CVE-2022-35858
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35142
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35143
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35144
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34993
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CLSA-2022-1659639100
    Fix available
    Packages

    vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

    Summary

    Fixed CVEs in vim: CVE-2022-2345, CVE-2022-2344, CVE-2022-2343, CVE-2022-2522

    Published
    4 Aug 2022
    CLSA-2022-1659638964
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Fixed CVE-2021-21702 in php

    Published
    4 Aug 2022
    CLSA-2022-1659638796
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

    Published
    4 Aug 2022
    CVE-2022-35929
    Fix available
    Packages

    Summary

    False positive signature verification in cosign

    Published
    4 Aug 2022
    CVE-2022-34970
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CLSA-2022-1659637855
    Fix available
    Packages

    vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

    Summary

    Fixed CVEs in vim: CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

    Published
    4 Aug 2022
    CLSA-2022-1659637689
    Fix available
    Packages

    php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

    Summary

    Fixed CVE-2021-21702 in php

    Published
    4 Aug 2022
    CLSA-2022-1659636917
    Fix available
    Packages

    java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

    Summary

    Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21540, CVE-2022-21541, CVE-2022-34169

    Published
    4 Aug 2022
    CVE-2022-35735
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35728
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35272
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35245
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35243
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35241
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35240
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-35236
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34865
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34862
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34851
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34844
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34655
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-34651
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-33968
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-33962
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-33947
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-33203
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-32455
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-31473
    No fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CVE-2022-30535
    Fix available
    Packages

    Summary

    Published
    4 Aug 2022
    CLSA-2022-1659636773
    Fix available
    Packages

    vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

    Summary

    Fix CVE(s): CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

    Published
    4 Aug 2022
    CLSA-2022-1659636700
    Fix available
    Packages

    libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

    Summary

    Fix CVE(s): CVE-2022-21515

    Published
    4 Aug 2022
    CLSA-2022-1659636455
    Fix available
    Packages

    intel-microcode

    Summary

    Fix CVE(s): CVE-2022-21127, CVE-2021-0127, CVE-2022-21151, CVE-2022-21166, CVE-2021-33120, CVE-2021-33117, CVE-2022-21125, CVE-2021-0146, CVE-2021-0145, CVE-2022-21123

    Published
    4 Aug 2022
    CLSA-2022-1659635964
    Fix available
    Packages

    dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

    Summary

    Fixed CVE-2022-30550 in dovecot

    Published
    4 Aug 2022
    CLSA-2022-1659635856
    Fix available
    Packages

    dovecot, dovecot-devel, dovecot-mysql, dovecot-pgsql, dovecot-pigeonhole

    Summary

    Fixed CVE-2022-30550 in dovecot

    Published
    4 Aug 2022
    USN-5548-1
    Fix available
    Packages

    libxml2, libxml2, libxml2

    Summary

    libxml2 vulnerability

    Published
    4 Aug 2022
    CVE-2022-31119
    Fix available
    Packages

    Summary

    Password disclosure in log file in Nextcloud Mail App

    Published
    4 Aug 2022
    CVE-2022-31132
    Fix available
    Packages

    Summary

    Unauthenticated SSRF in 3rd party module "cerdic/csstidy"

    Published
    4 Aug 2022
    USN-5546-2
    Fix available
    Packages

    openjdk-8

    Summary

    openjdk-8 vulnerabilities

    Published
    4 Aug 2022
    CVE-2022-31120
    Fix available
    Packages

    Summary

    Federated share accepting/declining is not logged in audit log in Nextcloud Server

    Published
    4 Aug 2022
    CVE-2022-31118
    Fix available
    Packages

    Summary

    Missing brute force protection on cloud federation sharing in Nextcloud Server

    Published
    4 Aug 2022
    USN-5551-1
    Fix available
    Packages

    mod-wsgi, mod-wsgi, mod-wsgi

    Summary

    mod-wsgi vulnerability

    Published
    4 Aug 2022