Open Source Vulnerabilities

Kernel

btrfs: do not WARN_ON() if we have PageError set

Kernel

btrfs: fallback to blocking mode when doing async dio over multiple extents

Kernel

btrfs: do not start relocation until in progress drops are done

Kernel

arm64: entry.S: Add ventry overflow sanity checks

Kernel

xen/xenbus: don't let xenbus_grant_ring() remove grants in error case

Kernel

xen/gnttab: fix gnttab_end_foreign_access() without page specified

Kernel

xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

grok

Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM

github.com/ethereum/go-ethereum

Denial of service in go-ethereum

set-in

Prototype Pollution in set-in

libnested

Prototype Pollution in libnested

bodymen

Prototype Pollution in bodymen

github.com/valyala/fasthttp

Path traversal in github.com/valyala/fasthttp

git

Code injection in npm git

post-loader

Arbitrary code execution in post-loader

guake

Command injection in guake

notevil, argencoders-notevil

Sandbox escape in notevil and argencoders-notevil

sails

Prototype Pollution in Sails.js

accesslog

Code injection in accesslog

SinGooCMS.Utility

Deserialization of Untrusted Data in SinGooCMS.Utility

minimist, minimist

Prototype Pollution in minimist

bind9, bind9

bind9 - security update

chromium

chromium - security update

bind9

bind9 - security update

python-treq

python-treq - security update

paramiko, paramiko, paramiko

paramiko

paramiko, paramiko, paramiko, paramiko, paramiko

gradio

node-qs

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

Fix of CVE: CVE-2022-0778

apcu-panel, libzip, libzip-devel, libzip-tools, php, php-bcmath, php-cli, php-common, php-dba, php-dbg, php-devel, php-embedded, php-enchant, php-ffi, php-fpm, php-gd, php-gmp, php-intl, php-json, php-ldap, php-mbstring, php-mysqlnd, php-odbc, php-opcache, php-pdo, php-pear, php-pecl-apcu, php-pecl-apcu-devel, php-pecl-rrd, php-pecl-xdebug, php-pecl-zip, php-pgsql, php-process, php-snmp, php-soap, php-xml, php-xmlrpc

Fix of CVE: CVE-2021-21708

openssl, openssl-devel, openssl-libs, openssl-perl, openssl-static

Fix of CVE: CVE-2022-0778

php, php-bcmath, php-cli, php-common, php-dba, php-dbg, php-devel, php-embedded, php-enchant, php-ffi, php-fpm, php-gd, php-gmp, php-intl, php-json, php-ldap, php-mbstring, php-mysqlnd, php-odbc, php-opcache, php-pdo, php-pgsql, php-process, php-snmp, php-soap, php-xml, php-xmlrpc

Fix of CVE: CVE-2021-21708

libssl-dev, libssl-doc, libssl1.0.0, openssl

Fix CVE(s): CVE-2022-0778

openssl, openssl-devel, openssl-perl, openssl-static

Fixed CVE-2022-0778 in openssl

openssl, openssl-devel, openssl-perl, openssl-static

Fix of CVE: CVE-2022-0778