Open Source Vulnerabilities

Integer Overflow or Wraparound in gpac/gpac

, , ,

, , ,

, , ,

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

htmldoc, htmldoc, htmldoc

htmldoc, htmldoc, htmldoc

htmldoc, htmldoc, htmldoc, htmldoc

htmldoc, htmldoc, htmldoc, htmldoc

vim, vim-athena, vim-athena-py2, vim-common, vim-doc, vim-gnome, vim-gnome-py2, vim-gtk, vim-gtk-py2, vim-gtk3, vim-gtk3-py2, vim-gui-common, vim-nox, vim-nox-py2, vim-runtime, vim-tiny

Fix CVE(s): CVE-2022-2206, CVE-2022-2257, CVE-2022-2286, CVE-2022-2285, CVE-2022-2284, CVE-2022-2287, CVE-2022-2264

libmysqlclient-dev, libmysqlclient20, libmysqld-dev, mysql-client, mysql-client-5.7, mysql-client-core-5.7, mysql-common, mysql-server, mysql-server-5.7, mysql-server-core-5.7, mysql-source-5.7, mysql-testsuite, mysql-testsuite-5.7

Fix CVE(s): CVE-2022-21344, CVE-2022-21270, CVE-2022-21367, CVE-2022-21245, CVE-2022-21303, CVE-2022-21304

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Fixed 7 CVEs in vim

php, php-bcmath, php-cli, php-common, php-dba, php-devel, php-embedded, php-enchant, php-fpm, php-gd, php-imap, php-intl, php-ldap, php-mbstring, php-mysql, php-odbc, php-pdo, php-pgsql, php-process, php-pspell, php-recode, php-snmp, php-soap, php-tidy, php-xml, php-xmlrpc, php-zts

Fixed CVE-2022-31625 in php

thenify, org.webjars.npm:thenify

thenify before 3.3.1 made use of unsafe calls to `eval`.