Open Source Vulnerabilities

drupal/core

drupal/core

xen, xen, xen, xen

Security update for xen

java-11-openjdk, java-11-openjdk-demo, java-11-openjdk-demo-fastdebug, java-11-openjdk-demo-slowdebug, java-11-openjdk-devel, java-11-openjdk-devel-fastdebug, java-11-openjdk-devel-slowdebug, java-11-openjdk-fastdebug, java-11-openjdk-headless, java-11-openjdk-headless-fastdebug, java-11-openjdk-headless-slowdebug, java-11-openjdk-javadoc, java-11-openjdk-javadoc-zip, java-11-openjdk-jmods, java-11-openjdk-jmods-fastdebug, java-11-openjdk-jmods-slowdebug, java-11-openjdk-slowdebug, java-11-openjdk-src, java-11-openjdk-src-fastdebug, java-11-openjdk-src-slowdebug, java-11-openjdk-static-libs, java-11-openjdk-static-libs-fastdebug, java-11-openjdk-static-libs-slowdebug

Important: java-11-openjdk security update

java-11-openjdk

Important: java-11-openjdk security update

java-17-openjdk, java-17-openjdk-demo, java-17-openjdk-demo-fastdebug, java-17-openjdk-demo-slowdebug, java-17-openjdk-devel, java-17-openjdk-devel-fastdebug, java-17-openjdk-devel-slowdebug, java-17-openjdk-fastdebug, java-17-openjdk-headless, java-17-openjdk-headless-fastdebug, java-17-openjdk-headless-slowdebug, java-17-openjdk-javadoc, java-17-openjdk-javadoc-zip, java-17-openjdk-jmods, java-17-openjdk-jmods-fastdebug, java-17-openjdk-jmods-slowdebug, java-17-openjdk-slowdebug, java-17-openjdk-src, java-17-openjdk-src-fastdebug, java-17-openjdk-src-slowdebug, java-17-openjdk-static-libs, java-17-openjdk-static-libs-fastdebug, java-17-openjdk-static-libs-slowdebug

Important: java-17-openjdk security and bug fix update

java-17-openjdk

Important: java-17-openjdk security and bug fix update

kernel-default, kernel-source, kernel-syms

Security update for the Linux Kernel

qemu

Security update for qemu

golang

CVE-2022-28327 affecting package golang for versions less than 1.18.3-1

golang

CVE-2022-27536 affecting package golang 1.27.1-1

golang

CVE-2022-27536 affecting package golang 1.26.7-1

golang

CVE-2022-24675 affecting package golang for versions less than 1.18.3-1

golang-1.18, golang-1.18, golang-1.17, golang-1.18

golang-1.18, golang-1.18, golang-1.17, golang-1.18

kgraft-patch-SLE12-SP5_Update_23

Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5)

bash, bash, bash, bash

bash vulnerability

dcraw

Security update for dcraw

nbd

Security update for nbd

gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip, gzip

Security update for gzip

apisix/jwt-auth may leak secrets in error response

GraphicsMagick

Security update for GraphicsMagick

SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL, SDL

Security update for SDL

gzip, gzip

Security update for gzip

netty

Security update for netty

kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_44, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_44, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_44, kernel-default, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_44, kernel-default, kernel-source, kernel-syms, kgraft-patch-SLE12-SP3_Update_44, kernel-default, kernel-source, kernel-syms

Security update for the Linux Kernel

kernel-livepatch-SLE15-SP3_Update_15

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

kgraft-patch-SLE12-SP4_Update_25

Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4)

libigl

Invalid-free in igl::MshLoader::~MshLoader

org.seleniumhq.selenium:selenium-grid, org.seleniumhq.selenium:selenium-server

Selenium Server (Grid) CSRF

github.com/hashicorp/consul, github.com/hashicorp/consul, github.com/hashicorp/consul

Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector

com.liferay.portal:release.portal.bom, com.liferay.portal:release.portal.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay:com.liferay.site.browser.web, com.liferay.portal:com.liferay.portal.impl

Liferay Portal and Liferay DXP fails to check permissions to view sites/groups

com.liferay:com.liferay.asset.taglib, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category

git

Command injection in ruby-git

github.com/mattermost/mattermost-server/v6

Insecure plugin handling in Mattermost

github.com/mattermost/mattermost-server/v6

Improper Control of a Resource Through its Lifetime in Mattermost