2022-14 - Mozilla, Canonical, Red Hat, Cisco, Microsoft, Google, GitHub Published on April 11, 2022

Advisory Week

Week 14, 2022

Mozilla Security Advisories

Security Vulnerabilities fixed in Firefox ESR 91.8 mfsa2022-14 Security Vulnerabilities fixed in Firefox 99 mfsa2022-13 Security Vulnerabilities fixed in Thunderbird 91.8 mfsa2022-15

Ubuntu Security Notices

USN-5370-1: Firefox vulnerabilities USN-5369-1: oslo.utils vulnerability USN-5366-1: FriBidi vulnerabilities USN-5368-1: Linux kernel vulnerabilities USN-5365-1: H2 vulnerabilities USN-5364-1: Waitress vulnerability

Red Hat Security Advisory

(RHSA-2022:1287) Important: firefox security update (RHSA-2022:1285) Important: firefox security update (RHSA-2022:1286) Important: firefox security update (RHSA-2022:1284) Important: firefox security update (RHSA-2022:1283) Important: firefox security update (RHSA-2022:1158) Important: OpenShift Container Platform 4.9.27 bug fix and security update (RHSA-2022:1162) Important: OpenShift Container Platform 4.10.8 bug fix and security update (RHSA-2022:1275) Important: Red Hat OpenShift Service Mesh 2.1.2 security update (RHSA-2022:1276) Important: Red Hat OpenShift Service Mesh 2.0.9 security update (RHSA-2022:1264) Important: Red Hat OpenStack Platform 13.0 (python-waitress) security update (RHSA-2022:1263) Important: RHV-H security update (redhat-virtualization-host) 4.3.22 (RHSA-2022:1254) Important: Red Hat OpenStack Platform 16.1 (python-waitress) security update (RHSA-2022:1253) Important: Red Hat OpenStack Platform 16.2 (python-waitress) security update (RHSA-2022:1198) Important: kernel security, bug fix, and enhancement update (RHSA-2022:1199) Important: kernel-rt security and bug fix update (RHSA-2022:1213) Important: kernel security update (RHSA-2022:1209) Important: kernel-rt security and bug fix update (RHSA-2022:1186) Important: kpatch-patch security update (RHSA-2022:1185) Important: kpatch-patch security update (RHSA-2022:1174) Moderate: Red Hat Ceph Storage 5.1 Security, Enhancement, and Bug Fix update (RHSA-2022:1173) Important: httpd security update

Cisco Security Advisory

Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability Cisco Webex Meetings Java Deserialization Vulnerability Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability Cisco Web Security Appliance Filter Bypass Vulnerability Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability

Microsoft Security

Chromium: CVE-2022-1232 Type Confusion in V8

Google Security Advisories

Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop

Github Security Advisories

[GHSA-g27j-74fp-xfpr] Insecure default value for CORS configuration [GHSA-xmjj-3c76-5w84] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus [GHSA-5jfw-35xp-5m42] Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown [GHSA-m87f-39q9-6f55] Sensitive Auth & Cookie data stored in Jupyter server logs [GHSA-jj47-x69x-mxrm] Reallocation bug can trigger heap memory corruption [GHSA-7vrm-3jc8-5wwm] Incorrect Comparison in Vyper [GHSA-c2jg-hw38-jrqq] Inconsistent Interpretation of HTTP Requests in twisted.web [GHSA-8hfj-j24r-96c4] Path Traversal: 'dir/../../filename' in moment.locale [GHSA-fx5p-f64h-93xc] Opened exploitable ports in default docker-compose.yaml in go-ipfs