Open Source Vulnerabilities

bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

Fixed CVE-2021-25219 in bind

libserf, libserf-devel, mod_dav_svn, subversion, subversion-devel, subversion-gnome, subversion-javahl, subversion-libs, subversion-perl, subversion-ruby, subversion-tools, utf8proc, utf8proc-devel

Fixed CVE-2022-24070 in subversion-4.module_el8.5.0+2053+ac338b6d.tuxcare.els1

libserf, libserf-devel, mod_dav_svn, subversion, subversion-devel, subversion-gnome, subversion-javahl, subversion-libs, subversion-perl, subversion-ruby, subversion-tools, utf8proc, utf8proc-devel

Fixed CVE-2022-24070 in subversion-4.module_el8.4.0+2052+ac338b6d.tuxcare.els1

java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, CVE-2022-21426, CVE-2022-21496

java-1.8.0-openjdk, java-1.8.0-openjdk-debug, java-1.8.0-openjdk-demo, java-1.8.0-openjdk-demo-debug, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-devel-debug, java-1.8.0-openjdk-headless, java-1.8.0-openjdk-headless-debug, java-1.8.0-openjdk-javadoc, java-1.8.0-openjdk-javadoc-debug, java-1.8.0-openjdk-src, java-1.8.0-openjdk-src-debug

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21496, CVE-2022-21443, CVE-2022-21476, CVE-2022-21426, CVE-2022-21434

cyrus-admin, cyrus-admin-2.4, cyrus-clients, cyrus-clients-2.4, cyrus-common, cyrus-common-2.4, cyrus-dev, cyrus-dev-2.4, cyrus-doc, cyrus-doc-2.4, cyrus-imapd, cyrus-imapd-2.4, cyrus-murder, cyrus-murder-2.4, cyrus-nntpd, cyrus-nntpd-2.4, cyrus-pop3d, cyrus-pop3d-2.4, cyrus-replication, cyrus-replication-2.4, libcyrus-imap-perl, libcyrus-imap-perl24

Fix CVE(s): CVE-2021-33582

patch, patch, patch, patch

Security update for patch

vim

vim vulnerabilities

kernel-firmware, kernel-firmware

Security update for kernel-firmware

MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

kernel, kernel, kernel

kernel security update

trafficserver, trafficserver

trafficserver security update

python-XStatic-jquery-ui

python-XStatic-jquery-ui security update

protobuf

protobuf security update

libtpms, libtpms, libtpms

libtpms security update

flac, flac, flac

flac security update

openjdk-11, openjdk-11, openjdk-11

openjdk-11 security update

fish, fish, fish

fish security update

qemu, qemu

qemu security update

ntfs-3g, ntfs-3g, ntfs-3g

ntfs-3g security update

pcre2, pcre2, pcre2

pcre2 security update

grafana, grafana, grafana

grafana security update

udisks2, udisks2

Security update for udisks2

rubygem-yajl-ruby, rubygem-yajl-ruby

Security update for rubygem-yajl-ruby

hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc, suse-hpc, hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc, suse-hpc

Security update for hdf5, suse-hpc

thunderbird

Important: thunderbird security update

linux-lts-xenial, linux-aws, linux-azure, linux-aws-hwe, linux-hwe, linux, linux-gcp, linux-aws, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux, linux-gcp-4.15, linux-gcp-5.4, linux-gke-4.15, linux-gke-5.4, linux-gkeop-5.4, linux-ibm-5.4, linux-hwe-5.4, linux-oem, linux-aws, linux-azure, linux, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-gcp, linux-gke, linux-ibm, linux, linux-lowlatency

Kernel Live Patch Security Notice

opensc

Heap-buffer-overflow in myeid_create_key

curl

Heap-buffer-overflow in Curl_headers_push

ghostscript

UNKNOWN WRITE in alloc_restore_step_in

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.13, linux-azure-5.13, linux-gcp-5.13, linux-hwe-5.13, linux-hwe-5.15, linux-intel-5.13, linux-lowlatency-hwe-5.15, linux-oem-5.14, linux-oracle-5.13, linux-aws-5.11, linux-aws-5.8, linux-azure-5.11, linux-azure-5.8, linux-gcp-5.11, linux-gcp-5.8, linux-hwe-5.11, linux-hwe-5.8, linux-oem-5.10, linux-oem-5.13, linux-oem-5.6, linux-oracle-5.11, linux-oracle-5.8, linux-riscv, linux-riscv-5.11, linux-riscv-5.8, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-oem-5.17, linux-oracle, linux-raspi, linux-riscv

Use After Free in vim/vim

Limited data exposure for shared external videos in BigBlueButton

Improper access control for pencil annotations in BigBlueButton

Grace period for lock settings in public/private chats in BigBlueButton

Improper access control for breakout rooms in BigBlue Button

Exposure of messages in BigBlueButton public chats

ReDoS on endpoint html5client/useragent in BigBlueButton

solidus_backend, solidus_backend, solidus_backend

CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

org.xwiki.platform:xwiki-platform-filter-ui, org.xwiki.platform:xwiki-platform-filter-ui, org.xwiki.platform:xwiki-platform-filter-ui

Cross-site Scripting in Filter Stream Converter Application in XWiki Platform

golang-github-blevesearch-bleve

golang-github-blevesearch-bleve, golang-github-blevesearch-bleve, golang-github-blevesearch-bleve