Open Source Vulnerabilities

libucl

Heap-buffer-overflow in ucl_object_dtor_unref_single

mruby

Heap-buffer-overflow in mrb_bint_add

linux-oem-5.17

linux-oem-5.17 vulnerabilities

mruby

Heap-buffer-overflow in mrb_bint_cmp

java-11-openjdk, java-11-openjdk-demo, java-11-openjdk-demo-fastdebug, java-11-openjdk-demo-slowdebug, java-11-openjdk-devel, java-11-openjdk-devel-fastdebug, java-11-openjdk-devel-slowdebug, java-11-openjdk-fastdebug, java-11-openjdk-headless, java-11-openjdk-headless-fastdebug, java-11-openjdk-headless-slowdebug, java-11-openjdk-javadoc, java-11-openjdk-javadoc-zip, java-11-openjdk-jmods, java-11-openjdk-jmods-fastdebug, java-11-openjdk-jmods-slowdebug, java-11-openjdk-slowdebug, java-11-openjdk-src, java-11-openjdk-src-fastdebug, java-11-openjdk-src-slowdebug, java-11-openjdk-static-libs, java-11-openjdk-static-libs-fastdebug, java-11-openjdk-static-libs-slowdebug

Important: java-11-openjdk security, bug fix, and enhancement update

Uncleared cookies on cross-host/cross-origin redirect in undici

wasmtime, cranelift-codegen

Wasmtime vulnerable to Use After Free with `externref`s

Use After Free in Wasmtime

stdlib

Stack exhaustion in Glob on certain paths in io/fs

stdlib

Stack exhaustion when decoding certain messages in encoding/gob

stdlib

Stack exhaustion when reading certain archives in compress/gzip

stdlib

Stack exhaustion when unmarshaling certain documents in encoding/xml

kernel-linus

Updated kernel-linus packages fix security vulnerabilities

kernel, kmod-virtualbox, kmod-xtables-addons

Updated kernel packages fix security vulnerabilities

jqueryui, jqueryui, jqueryui

jqueryui, jqueryui, jqueryui, jqueryui

platform-python, platform-python-debug, platform-python-devel, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

Fixed CVE-2015-20170 in python3

python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

Fixed CVE-2015-20107 in python2-7.module_el8.5.0+2070+77770ab7.tuxcare.els2

platform-python, platform-python-debug, platform-python-devel, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

Fixed CVE-2015-20170 in python3

python2, python2-debug, python2-devel, python2-libs, python2-test, python2-tkinter, python2-tools

Fixed CVE-2015-20170 in python2-4.module_el8.4.0+2071+0b56c8de.tuxcare.els3

python, python-devel, python-libs, python-test, python-tools, tkinter

Fixed CVE-2015-20170 in python

python, python-devel, python-libs, python-test, python-tools, tkinter

Fixed CVE-2015-20170 in python

idle-python2.7, libpython2.7, libpython2.7-dev, libpython2.7-minimal, libpython2.7-stdlib, libpython2.7-testsuite, python2.7, python2.7-dev, python2.7-doc, python2.7-examples, python2.7-minimal

Fix CVE(s): CVE-2015-20107

idle-python3.5, libpython3.5, libpython3.5-dev, libpython3.5-minimal, libpython3.5-stdlib, libpython3.5-testsuite, python3.5, python3.5-dev, python3.5-doc, python3.5-examples, python3.5-minimal, python3.5-venv

Fix CVE(s): CVE-2015-20107

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix CVE(s): CVE-2022-21427, CVE-2022-21417, CVE-2022-21454, CVE-2022-21451, CVE-2022-21444, CVE-2022-21460