huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2022-31117: python-ujson: Potential double free of buffer during string decoding
Component: python-ujson
Severity: Moderate
CWE: CWE-415 (Double Free)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-02T00:00:00+00:00

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.


Affected upstream versions: < 5.4.0
Fixed upstream versions: 5.4.0
Upstream repository: https://github.com/ultrajson/ultrajson
Upstream fix commit: 9c20de0f77b391093967e25d01fb48671104b15b
CVE-2022-31129: moment: inefficient parsing algorithm resulting in DoS
Component: moment
Severity: Important
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-06T00:00:00+00:00

A flaw was found in the Moment.js package. Users who pass user-provided strings without sanity length checks to the moment constructor are vulnerable to regular expression denial of service (ReDoS) attacks.

Statement: Red Hat Fuse provides the affected software but does not use the functionality and as such its impact has been downgraded to Low.

Red Hat Advanced Cluster Management for Kubernetes (RHACM) ships a vulnerable version of the moment library. However, this affected functionality is restricted behind OAuth, reducing the impact to Moderate.

Red Hat Satellite ships a vulnerable version of the moment library. However, this only affects a specific component (qpid-dispatch), reducing the impact to Moderate.

Red Hat Ceph Storage (RHCS) ships a vulnerable version of the moment library, however, it is not directly used and is a transitive dependency from Angular. In addition, the impact would only be to the grafana browser, and not the underlying RHCS system, which reduces the impact to Moderate. 

Red Hat OpenShift Service Mesh (OSSM) ships a vulnerable version of the moment library, however, it is not directly used, and as such, the impact has been lowered to Moderate.

Red Hat OpenShift distributed tracing ships a vulnerable version of the moment library, however, it is not directly used, and as such, the impact has been lowered to Moderate.

In Logging Subsystem for Red Hat OpenShift the vulnerable moment nodejs package is bundled in the ose-logging-kibana6 container as a transitive dependency, hence the direct impact is reduced to Moderate.

In OpenShift Container Platform 4 the vulnerabile moment package is a third party dependency, hence the direct impact is reduced to Moderate.

In Quay IO 3.10 and above, no version of affected momentjs is present.

Affected upstream versions:  >= 2.18.0, < 2.29.4
Fixed upstream versions: 2.29.4
Upstream repository: https://github.com/moment/moment
Upstream fix commit: 9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3
CVE-2022-31130: grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
Component: grafana
Severity: Moderate
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-10-14T00:00:00+00:00

A flaw was found in Grafana's use of the GitLab data source plugin, leaking the API key to gitlab. This can result in the destination plugin receiving a Grafana user's authentication token, which could be used by an attacker.


Affected upstream versions: < 8.5.14, >= 9.0.0, < 9.1.8
Fixed upstream versions: v8.5.14
Upstream repository: https://github.com/grafana/grafana
Upstream fix commit: 4dd56e4dabce10007bf4ba1059bf54178c35b177
CVE-2022-31163: rubygem-tzinfo: arbitrary code execution
Component: rubygem-tzinfo
Severity: Important
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-07-22T00:00:00+00:00

A flaw was found in rubygem-tzinfo. When using the Timezone.get function, it fails to validate time zone identifiers correctly, allowing a new line character input within the identifier. This flaw allows an attacker to use the new line character and write any code, which will be executed within the Ruby process.


Affected upstream versions: < 0.3.61, >= 1.0.0, < 1.2.10
Fixed upstream versions: v0.3.61
Upstream repository: https://github.com/tzinfo/tzinfo
Upstream fix commit: 9eddbb5c0e682736f61d0dd803b6031a5db9eadf
CVE-2022-31197: postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names
Component: postgresql
Severity: Moderate
CWE: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
CVSS v3: 8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Public date: 2022-08-03T00:00:00+00:00

A flaw was found in PostgresQL. This flaw allows an attacker to benefit from a miss escaping character and leads to a SQL injection attack due to Java.sql.ResultRow.refreshRow() implementation from PGSQL.

Statement: User applications that do not invoke the `ResultSet.refreshRow()` method are not impacted.
Red Hat Fuse 7 is now in Maintenance Support Phase and details about its fix should be presented soon. However, Red Hat Fuse Online (Syndesis) does will not contain the fix for this flaw.

Affected upstream versions: >= 42.2.0, < 42.2.26, >= 42.3.0, < 42.4.1
Fixed upstream versions: REL42.4.1
Upstream repository: https://github.com/pgjdbc/pgjdbc
Upstream fix commit: 739e599d52ad80f8dcd6efedc6157859b1a9d637
CVE-2022-31621: mariadb: improper locking due to unreleased lock in the ds_xbstream.cc
Component: mariadb
Severity: Moderate
CWE: CWE-667 (Improper Locking)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-09-08T00:00:00+00:00

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt->dest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.


Affected upstream versions: n/a
Fixed upstream versions: mariadb-10.2.41
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: b1351c15946349f9daa7e5297fb2ac6f3139e4a8
CVE-2022-31622: mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
Component: mariadb
Severity: Moderate
CWE: CWE-404 (Improper Resource Shutdown or Release)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-09-07T00:00:00+00:00

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.


Affected upstream versions: n/a
Fixed upstream versions: mariadb-10.2.42
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2
CVE-2022-31623: mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
Component: mariadb
Severity: Moderate
CWE: CWE-667 (Improper Locking)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-09-07T00:00:00+00:00

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.


Affected upstream versions: n/a
Fixed upstream versions: mariadb-10.2.42
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: 7c30bc38a588b22b01f11130cfe99e7f36accf94
CVE-2022-31624: mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c
Component: mariadb
Severity: Moderate
CWE: CWE-404 (Improper Resource Shutdown or Release)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2021-09-07T00:00:00+00:00

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.


Affected upstream versions: n/a
Fixed upstream versions: mariadb-10.2.41
Upstream repository: https://github.com/MariaDB/server
Upstream fix commit: d627d00b13ab2f2c0954ea7b77202470cb102944
CVE-2022-3165: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion
Component: QEMU
Severity: Moderate
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-09-25T00:00:00+00:00

An integer underflow issue was found in the QEMU built-in VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.

Statement: Red Hat Enterprise Linux 6, 7 and RHEL Advanced Virtualization are not affected by this flaw as they did not include support for the extended clipboard pseudo-encoding (upstream commit 0bf41cab).

Affected upstream versions: Affected 6.1.0 and later. Will be fixed in 7.2.0-rc0.
Fixed upstream versions: v7.2.0
Upstream repository: https://gitlab.com/qemu-project/qemu
Upstream fix commit: d307040b18
CVE-2022-32250: kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-05-31T00:00:00+00:00

A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege escalation issue.

Statement: The latest kernel in RHCOS is kernel-4.18.0-305.49.1.el8 which does not contain the vulnerable code and is not affected, also OCP v4.9 or earlier are not affected.

Affected upstream versions: n/a
Fixed upstream versions: v5.19
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter
Upstream fix commit: 520778042ccca019f3ffa136dd0ca565c486cedd
CVE-2022-32296: kernel: insufficient TCP source port randomness leads to client identification
Component: kernel
Severity: None
CWE: CWE-341 (Predictable from Observable State)
CVSS v3: 0 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N)
Public date: 2022-05-05T00:00:00+00:00

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

Statement: This flaw was found to be a duplicate of CVE-2022-1012. Please see https://access.redhat.com/security/cve/CVE-2022-1012 for information about affected products and security errata.

Affected upstream versions: n/a
Fixed upstream versions: v5.18
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 4c2c8f03a5ab7cb04ec64724d7d176d00bcc91e5
CVE-2022-32323: autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c
Component: autotrace
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L)
Public date: 2022-07-14T00:00:00+00:00

A buffer overflow flaw was found in the autotrace package. This flaw allows an attacker to trick the user into opening a maliciously crafted BMP image, triggering arbitrary code execution or causing the application to crash.

Statement: The inkscape package distributed with Red Hat Enterprise Linux 9 is not affected by this issue. Although it ships autotrace as a bundled dependency, it does not include the affected BMP reader code.

Affected upstream versions: n/a
Fixed upstream versions: 0.31.9
Upstream repository: https://github.com/autotrace/autotrace
Upstream fix commit: 2b44c173027736c64b3f379bd154c41bab745423
CVE-2022-3239: kernel: media: em28xx: initialize refcount before kref_get
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-02-22T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s video4linux driver in how a user triggers the em28xx_usb_probe() for the Empia 28xx-based TV cards. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Affected upstream versions: Linux kernel 5.18-rc1
Fixed upstream versions: v5.18
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: c08eadca1bdfa099e20a32f8fa4b52b2f672236d
CVE-2022-3287: fwupd: world readable password in /etc/fwupd/redfish.conf
Component: fwupd
Severity: Moderate
CWE: CWE-538 (Insertion of Sensitive Information into Externally-Accessible File or Directory)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-09-22T00:00:00+00:00

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.


Affected upstream versions: Fixed in version 1.8.5
Fixed upstream versions: 1.8.5
Upstream repository: https://github.com/fwupd/fwupd
Upstream fix commit: ea676855f2119e36d433fbd2ed604039f53b2091
CVE-2022-33068: harfbuzz: integer overflow in the component hb-ot-shape-fallback.cc
Component: harfbuzz
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2022-06-23T00:00:00+00:00

A vulnerability found in harfbuzz. An integer overflow in the hb-ot-shape-fallback.cc component allows attackers to cause a denial of service (DoS) via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: 4.4.0
Upstream repository: https://github.com/harfbuzz/harfbuzz
Upstream fix commit: 62e803b36173fd096d7ad460dd1d1db9be542593
CVE-2022-33099: lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling
Component: lua
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A vulnerability was found in Lua. During error handling, the luaG_errormsg() component uses slots from EXTRA_STACK. Some errors can recur such as a string overflow while creating an error message in 'luaG_runerror', or a C-stack overflow before calling the message handler, causing a crash that leads to a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v5.4.5
Upstream repository: https://github.com/lua/lua
Upstream fix commit: 42d40581dd919fb134c07027ca1ce0844c670daf
CVE-2022-3358: openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption
Component: openssl
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-10-11T00:00:00+00:00

A flaw was found in OpenSSL, where it incorrectly handles legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialization functions). Instead of using the custom cipher directly, it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However, it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used this way, the OpenSSL encryption/decryption initialization function will match the NULL cipher as equivalent and fetch this from the available providers. This is successful if the default provider has been loaded (or if a third-party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext.

Statement: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 8 ship OpenSSL 1.0 which does not contain the vulnerable code.

Affected upstream versions: Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5)
Fixed upstream versions: 3.0-POST-CLANG-FORMAT-WEBKIT
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b
CVE-2022-33743: kernel: network backend may cause Linux netfront to use freed SKBs (XSA-405)
Component: kernel
Severity: Moderate
CWE: CWE-459 (Incomplete Cleanup)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-07-04T09:00:00+00:00

An incomplete cleanup flaw was found in the Linux kernel’s Xen networking XDP (eXpress Data Path) subsystem. This flaw allows a local user to crash the system.

Statement: Keeping this flaw Moderate, because only a denial of service is possible (A:H) as result of memory leak problem. The memory leak can happen because instead of removing skb, keeping it in the networking stack forever. The CVSS score is higher, than usually for Moderate, because kept "C:H" and "I:H" too in case maybe potentially would be possible privilege escalation too.

Affected upstream versions: <= v5.18
Fixed upstream versions: v5.19
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/net/xen-netfront.c
Upstream fix commit: f63c2c2032c2e3caad9add3b82cc6e91c376fd26
CVE-2022-3424: kernel: Use after Free in gru_set_context_option leading to kernel panic
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-09-19T08:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Affected upstream versions: unknown
Fixed upstream versions: v6.2
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 643a16a0eb1d6ac23744bb6e90a00fc21148a9dc
CVE-2022-34749: mistune: catastrophic backtracking
Component: mistune
Severity: Moderate
CWE: CWE-1333 (Inefficient Regular Expression Complexity)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-26T00:00:00+00:00

A regular expression denial of service (ReDoS) flaw was found in the asteris emphasis regular expression implementation in Mistune. By sending specially-crafted regex input, a remote attacker could invoke a catastrophic backtrack, resulting in a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v2.0.3
Upstream repository: https://github.com/lepture/mistune
Upstream fix commit: a6d43215132fe4f3d93f8d7e90ba83b16a0838b2
CVE-2022-34918: kernel: heap overflow in nft_set_elem_init()
Component: kernel
Severity: Important
CWE: CWE-1025 (Comparison Using Wrong Factors)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-07-02T14:00:00+00:00

A heap buffer overflow flaw was found in the Linux kernel’s Netfilter subsystem in the way a user provides incorrect input of the NFT_DATA_VERDICT type. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Affected upstream versions: n/a
Fixed upstream versions: v5.19
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git
Upstream fix commit: 7e6bc1f6cabcd30aba0b11219d8e01b952eacbb6
CVE-2022-3509: protobuf-java: Textformat parsing issue leads to DoS
Component: protobuf-java
Severity: Moderate
CWE: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-12-15T00:00:00+00:00

A flaw was found in Textformat in protobuf-java core that can lead to a denial of service. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields can cause objects to convert between mutable and immutable forms, resulting in long garbage collection pauses.


Affected upstream versions: 3.21.0 < 3.21.7, 3.20.0 < 3.20.3, 3.19.0 < 3.19.6, 3.16.0 < 3.16.3
Fixed upstream versions: 3.16.3, 3.19.6, 3.20.3, 3.21.7
Upstream repository: https://github.com/protocolbuffers/protobuf
Upstream fix commit: a3888f53317a8018e7a439bac4abeb8f3425d5e9
CVE-2022-3510: protobuf-java: Message-Type Extensions parsing issue leads to DoS
Component: protobuf-java
Severity: Moderate
CWE: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-12-15T00:00:00+00:00

A flaw was found in Message-Type Extensions in protobuf-java core that can lead to a denial of service. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields can cause objects to convert between mutable and immutable forms, resulting in long garbage collection pauses.


Affected upstream versions: 3.21.0 < 3.21.7, 3.20.0 < 3.20.3, 3.19.0 < 3.19.6, 3.16.0 < 3.16.3
Fixed upstream versions: 3.16.3, 3.19.6, 3.20.3, 3.21.7
Upstream repository: https://github.com/protocolbuffers/protobuf
Upstream fix commit: db7c17803320525722f45c1d26fc08bc41d1bf48
CVE-2022-3517: nodejs-minimatch: ReDoS via the braceExpand function
Component: nodejs-minimatch
Severity: Moderate
CWE: CWE-1333 (Inefficient Regular Expression Complexity)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-02-06T00:00:00+00:00

A vulnerability was found in the nodejs-minimatch package. This flaw allows a Regular Expression Denial of Service (ReDoS) when calling the braceExpand function with specific arguments, resulting in a Denial of Service.


Affected upstream versions: minimatch versions prior to 3.0.5
Fixed upstream versions: v3.0.5
Upstream repository: https://github.com/isaacs/minimatch
Upstream fix commit: a8763f4388e51956be62dc6025cec1126beeb5e6
CVE-2022-3523: Kernel: race when faulting a device private page in memory manager
Component: Kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-09-28T06:30:00+00:00

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211020.

Statement: There was no shipped kernel version that was seen affected by this problem. These files are not built in our source code.

Affected upstream versions: n/a
Fixed upstream versions: v6.1
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 16ce101db85db694a91380aa4c89b25530871d33