Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    AZL-41814
    Fix available
    Packages

    hvloader

    Summary

    CVE-2022-2097 affecting package hvloader for versions less than 1.0.1-2

    Published
    5 Jul 2022
    AZL-10109
    Fix available
    Packages

    openssl

    Summary

    CVE-2022-2097 affecting package openssl for versions less than 1.1.1k-20

    Published
    5 Jul 2022
    SUSE-SU-2022:2265-1
    Fix available
    Packages

    dpdk, dpdk, dpdk, dpdk, dpdk-thunderx

    Summary

    Security update for dpdk

    Published
    5 Jul 2022
    CVE-2022-2097
    Fix available
    Packages

    Summary

    AES OCB fails to encrypt some bytes

    Published
    5 Jul 2022
    DEBIAN-CVE-2022-2309
    Fix available
    Packages

    libxml2, libxml2, libxml2, lxml, lxml, lxml

    Summary

    Published
    5 Jul 2022
    ALPINE-CVE-2022-2309
    Fix available
    Packages

    libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, libxml2, py3-lxml, py3-lxml, py3-lxml, py3-lxml, py3-lxml, py3-lxml, py3-lxml, py3-lxml

    Summary

    Published
    5 Jul 2022
    AZL-10058
    Fix available
    Packages

    libxml2

    Summary

    CVE-2022-2309 affecting package libxml2 for versions less than 2.10.0-1

    Published
    5 Jul 2022
    AZL-10059
    Fix available
    Packages

    python-lxml

    Summary

    CVE-2022-2309 affecting package python-lxml for versions less than 4.9.1-1

    Published
    5 Jul 2022
    PYSEC-2022-230
    Fix available
    Packages

    lxml

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-2309
    Fix available
    Packages

    lxml, lxml, lxml, libxml2, lxml, libxml2, lxml

    Summary

    Published
    5 Jul 2022
    CVE-2022-2309
    Fix available
    Packages

    Summary

    NULL Pointer Dereference in lxml/lxml

    Published
    5 Jul 2022
    CVE-2022-2306
    Fix available
    Packages

    Summary

    Insufficient Session Expiration in heroiclabs/nakama

    Published
    5 Jul 2022
    SUSE-SU-2022:2263-1
    Fix available
    Packages

    ImageMagick, ImageMagick, ImageMagick, ImageMagick

    Summary

    Security update for ImageMagick

    Published
    5 Jul 2022
    OSV-2022-533
    Fix available
    Packages

    libvpx

    Summary

    Check failed in CheckUnwind

    Published
    5 Jul 2022
    OSV-2022-532
    No fix available
    Packages

    unicorn

    Summary

    Null-dereference READ

    Published
    5 Jul 2022
    GHSA-fx4w-v43j-vc45
    Fix available
    Packages

    typeorm

    Summary

    SQL injection in typeORM

    Published
    5 Jul 2022
    GHSA-q6mp-562x-ggvv
    Fix available
    Packages

    microweber/microweber

    Summary

    Cross-site Scripting in microweber

    Published
    5 Jul 2022
    GHSA-p64x-8rxx-wf6q
    Fix available
    Packages

    django, django

    Summary

    Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

    Published
    5 Jul 2022
    OSV-2022-531
    Fix available
    Packages

    perfetto

    Summary

    Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor

    Published
    5 Jul 2022
    CVE-2022-31836
    No fix available
    Packages

    Summary

    Published
    5 Jul 2022
    DSA-5177-1
    Fix available
    Packages

    ldap-account-manager

    Summary

    ldap-account-manager - security update

    Published
    5 Jul 2022
    CVE-2022-2304
    Fix available
    Packages

    Summary

    Stack-based Buffer Overflow in vim/vim

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34485
    Fix available
    Packages

    firefox, mozjs52, mozjs38, firefox, mozjs68, mozjs52, mozjs78, mozjs91

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34484
    Fix available
    Packages

    firefox, thunderbird, mozjs52, mozjs38, firefox, thunderbird, mozjs68, mozjs52, mozjs78, mozjs91, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34483
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34482
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34481
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34480
    Fix available
    Packages

    nss, nss, firefox, nss, firefox, nss, thunderbird, nss, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34479
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34477
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34476
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34475
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34474
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34473
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34472
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34471
    Fix available
    Packages

    firefox, firefox

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34470
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-34468
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-2200
    Fix available
    Packages

    firefox, thunderbird, firefox, thunderbird, thunderbird

    Summary

    Published
    5 Jul 2022
    UBUNTU-CVE-2022-2097
    Fix available
    Packages

    edk2, openssl, openssl, openssl, openssl, openssl, openssl, nodejs, openssl

    Summary

    Published
    5 Jul 2022
    DEBIAN-CVE-2022-34918
    Fix available
    Packages

    linux, linux, linux

    Summary

    Published
    4 Jul 2022
    CVE-2022-34918
    No fix available
    Packages

    Summary

    Published
    4 Jul 2022
    AZL-10075
    Fix available
    Packages

    kernel

    Summary

    CVE-2022-34918 affecting package kernel for versions less than 5.15.55.1-1

    Published
    4 Jul 2022
    UBUNTU-CVE-2022-34918
    Fix available
    Packages

    linux-aws, linux-azure, linux-lts-xenial, linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-kvm, linux-oracle, linux-hwe-edge, linux-fips, linux-fips, linux, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-dell300x, linux-gcp-4.15, linux-gcp-5.4, linux-gke-5.4, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi-5.4, linux-raspi2, linux-snapdragon, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-bluefield, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg-5.15, linux-iot, linux-kvm, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle, linux-oracle-5.15, linux-raspi, linux-riscv-5.15, linux-aws-5.11, linux-aws-5.13, linux-aws-5.8, linux-azure-5.11, linux-azure-5.13, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.13, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.13, linux-hwe-5.8, linux-intel-5.13, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.13, linux-oracle-5.8, linux-raspi2, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oracle, linux-raspi, linux-realtime, linux-riscv, linux-realtime, linux-raspi-realtime

    Summary

    Published
    4 Jul 2022
    BELL-CVE-2022-34918
    No fix available
    Packages

    Summary

    CVE-2022-34918 does not affect BellSoft software

    Published
    4 Jul 2022
    CVE-2022-34829
    No fix available
    Packages

    Summary

    Published
    4 Jul 2022
    CLSA-2022-1656962023
    Fix available
    Packages

    openssh, openssh-askpass, openssh-clients, openssh-ldap, openssh-server, pam_ssh_agent_auth

    Summary

    Fixed CVE-2016-10009 in openssh-5.3p1

    Published
    4 Jul 2022
    CLSA-2022-1656961923
    Fix available
    Packages

    curl, libcurl, libcurl-devel

    Summary

    Fixed CVE-2022-27782 in curl

    Published
    4 Jul 2022
    CLSA-2022-1656961578
    Fix available
    Packages

    curl, libcurl, libcurl-devel

    Summary

    Fixed CVE-2022-27782 in curl

    Published
    4 Jul 2022
    CLSA-2022-1656959440
    Fix available
    Packages

    openssh, openssh-askpass, openssh-clients, openssh-ldap, openssh-server, pam_ssh_agent_auth

    Summary

    Fixed CVE-2016-10009 in openssh-5.3p1

    Published
    4 Jul 2022