Open Source Vulnerabilities

firefox

Important: firefox security update

sharp

sharp vulnerable to Command Injection in post-installation over build environment

org.xwiki.platform:xwiki-platform-oldcore

Path Traversal in XWiki Platform

SSH.NET

Weak private key generation in SSH.NET

Missing Role Based Access Control for the REST handlers in bleve/http package

,

cyrus-imapd, cyrus-imapd-devel, cyrus-imapd-utils

Fixed CVE-2021-33582 in cyrus-imapd

cyrus-imapd, cyrus-imapd-devel, cyrus-imapd-utils

Fixed CVE-2021-33582 in cyrus-imapd

idle-python3.5, libpython3.5, libpython3.5-dev, libpython3.5-minimal, libpython3.5-stdlib, libpython3.5-testsuite, python3.5, python3.5-dev, python3.5-doc, python3.5-examples, python3.5-minimal, python3.5-venv

Fix CVE(s): CVE-2022-0391

httpd, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, mod_http2, mod_ldap, mod_md, mod_proxy_html, mod_session, mod_ssl

Fixed CVEs in httpd-43.module_el8.5.0+2046+6f259f31.tuxcare.els4: CVE-2021-33193, CVE-2020-35452

httpd, httpd-devel, httpd-filesystem, httpd-manual, httpd-tools, mod_http2, mod_ldap, mod_md, mod_proxy_html, mod_session, mod_ssl

Fixed CVEs in httpd-39.module_el8.4.0+2047+54659116.1.tuxcare.els5: CVE-2020-35452, CVE-2021-33193

CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

SQL Injection in DHIS2's in OrgUnit program association

hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc, hdf5_1_10_8-gnu-openmpi3-hpc, hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc, hdf5_1_10_8-gnu-openmpi3-hpc

Security update for hdf5

imagemagick, imagemagick, imagemagick

imagemagick vulnerability

pgaudit, pgaudit, pg_repack, postgres-decoderbufs, postgres-decoderbufs, postgresql

Important: postgresql:13 security update

postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14, postgresql14

Security update for postgresql14

webkit2gtk, webkit2gtk

webkit2gtk vulnerabilities

vim, vim, vim

vim security update

hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc, hdf5_1_10_8-gnu-hpc, hdf5_1_10_8-gnu-mpich-hpc, hdf5_1_10_8-gnu-mvapich2-hpc, hdf5_1_10_8-gnu-openmpi2-hpc

Security update for hdf5

Server-Side Request Forgery (SSRF) in gogs/gogs

linux-gcp-5.13, linux-oracle-5.13

linux-gcp-5.13, linux-oracle, linux-oracle-5.13 vulnerabilities

linux-gcp-5.4, linux-gkeop-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4, linux-bluefield, linux-gkeop, linux-oracle, linux-raspi

linux-bluefield, linux-gcp-5.4, linux-gkeop, linux-gkeop-5.4, linux-ibm-5.4, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

ndpi

Heap-buffer-overflow in ndpi_search_http_tcp

org.apache.tika:tika-core

Regular expression denial of service in apache tika

io.whitesource:curekit

Path traversal in CureKit

javaparser

Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

ndpi

Stack-buffer-overflow in tlsCheckUncommonALPN

:unknown:

:unknown:

:unknown:

:linux_kernel:

:linux_kernel:

:unknown:

:unknown:

:unknown:

:unknown:

:unknown: