2022-18 - Mozilla, Canonical, Red Hat, nodejs, Cisco Published on May 9, 2022

Advisory Week

Week 18, 2022

Mozilla Security Advisories

Security Vulnerabilities fixed in Thunderbird 91.9 mfsa2022-18 Security Vulnerabilities fixed in Firefox 100 mfsa2022-16 Security Vulnerabilities fixed in Firefox ESR 91.9 mfsa2022-17

Ubuntu Security Notices

USN-5259-2: Cron vulnerabilities USN-5405-1: jbig2dec vulnerabilities USN-5404-1: Rsyslog vulnerability USN-5403-1: SQLite vulnerability USN-5400-3: MySQL regression USN-5354-2: Twisted vulnerability USN-5395-2: networkd-dispatcher regression USN-5402-1: OpenSSL vulnerabilities USN-5400-2: MySQL vulnerabilities USN-5401-1: DPDK vulnerabilities USN-5390-2: Linux kernel (Raspberry Pi) vulnerabilities USN-5400-1: MySQL vulnerabilities USN-5399-1: libvirt vulnerabilities USN-5382-2: libinput vulnerability

Red Hat Security Advisory

(RHSA-2022:1739) Moderate: Red Hat OpenShift Service Mesh 2.1.2.1 containers security update (RHSA-2022:1734) Moderate: Migration Toolkit for Containers (MTC) 1.7.1 security and bug fix update (RHSA-2022:1730) Important: thunderbird security update (RHSA-2022:1727) Important: thunderbird security update (RHSA-2022:1726) Important: thunderbird security update (RHSA-2022:1725) Important: thunderbird security update (RHSA-2022:1724) Important: thunderbird security update (RHSA-2022:1716) Moderate: Red Hat Ceph Storage 4.3 Security and Bug Fix update (RHSA-2022:1715) Moderate: Red Hat Advanced Cluster Management 2.3.10 security updates and bug fixes (RHSA-2022:1620) Important: OpenShift Container Platform 4.6.57 packages and security update (RHSA-2022:1713) Moderate: security update for rh-sso-7/sso75-openshift-rhel8 container image (RHSA-2022:1711) Moderate: Red Hat Single Sign-On 7.5.2 security update on RHEL 7 (RHSA-2022:1712) Moderate: Red Hat Single Sign-On 7.5.2 security update on RHEL 8 (RHSA-2022:1709) Moderate: Red Hat Single Sign-On 7.5.2 security update (RHSA-2022:1708) Important: Satellite 6.10.5 Async Bug Fix Update (RHSA-2022:1703) Important: firefox security update (RHSA-2022:1705) Important: firefox security update (RHSA-2022:1704) Important: firefox security update (RHSA-2022:1702) Important: firefox security update (RHSA-2022:1701) Important: firefox security update (RHSA-2022:1622) Moderate: OpenShift Container Platform 4.6.57 security and extras update (RHSA-2022:1681) Moderate: Red Hat Advanced Cluster Management 2.4.4 security updates and bug fixes (RHSA-2022:1676) Important: gzip security update (RHSA-2022:1600) Moderate: OpenShift Container Platform 4.10.12 security update (RHSA-2022:1520) Important: Red Hat JBoss Web Server 5.6.2 Security Update (RHSA-2022:1519) Important: Red Hat JBoss Web Server 5.6.2 Security Update (RHSA-2022:1664) Moderate: Red Hat Software Collections security update (RHSA-2022:1665) Important: gzip security update (RHSA-2022:1663) Moderate: python27-python and python27-python-pip security update (RHSA-2022:1662) Important: rh-maven36-maven-shared-utils security update (RHSA-2022:1661) Important: zlib security update (RHSA-2022:1660) Moderate: Red Hat OpenShift support for Windows Containers 2.0.5 [security update]

Node.js Security Advisories

OpenSSL update assessment, and Node.js project plans

Cisco Security Advisory

Cisco SD-WAN vManage Software Information Disclosure Vulnerability Cisco Enterprise NFV Infrastructure Software Vulnerabilities Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities Cisco Small Business RV Series Routers Command Injection Vulnerabilities Cisco Small Business RV Series Routers Remote Code Execution Vulnerability ClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 2022 ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 2022 ClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022 ClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 2022