2022-25 - Canonical, Red Hat, nodejs, Cisco, Microsoft Published on June 27, 2022

Advisory Week

Week 25, 2022

Ubuntu Security Notices

USN-5487-3: Apache HTTP Server regression USN-5492-1: Vim vulnerability USN-5487-2: Apache HTTP Server regression USN-5491-1: Squid vulnerability USN-5490-1: Protocol Buffers vulnerability USN-5489-1: QEMU vulnerabilities USN-5488-1: OpenSSL vulnerability USN-5487-1: Apache HTTP Server vulnerabilities USN-5486-1: Intel Microcode vulnerabilities

Red Hat Security Advisory

(RHSA-2022:5187) Important: Red Hat OpenShift GitOps security update (RHSA-2022:5192) Important: Red Hat OpenShift GitOps security update (RHSA-2022:5188) Important: RHACS 3.69 security update (RHSA-2022:5029) Moderate: Red Hat build of Eclipse Vert.x 4.2.7 security update (RHSA-2022:5116) Moderate: Red Hat OpenStack Platform 16.2 (puppet-firewall) security update (RHSA-2022:5115) Moderate: Red Hat OpenStack Platform 16.2 (python-django20) security update (RHSA-2022:5114) Moderate: Red Hat OpenStack Platform 16.2 (openstack-barbican) security update (RHSA-2022:5163) Low: httpd:2.4 security update (RHSA-2022:5162) Important: postgresql security update (RHSA-2022:5157) Important: kernel security and bug fix update (RHSA-2022:5153) Important: Red Hat OpenShift GitOps security update (RHSA-2022:5152) Important: Red Hat OpenShift GitOps security update (RHSA-2022:4999) Moderate: OpenShift Container Platform 3.11.715 packages and security update (RHSA-2022:5132) Important: RHACS 3.68 security update

Node.js Security Advisories

OpenSSL update assessment, and Node.js project plans

Cisco Security Advisory

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

Microsoft Security

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Chromium: CVE-2022-2165 Insufficient data validation in URL formatting Chromium: CVE-2022-2164 Inappropriate implementation in Extensions API Chromium: CVE-2022-2163 Use after free in Cast UI and Toolbar Chromium: CVE-2022-2162 Insufficient policy enforcement in File System API Chromium: CVE-2022-2161 Use after free in WebApp Provider Chromium: CVE-2022-2160 Insufficient policy enforcement in DevTools Chromium: CVE-2022-2158 Type Confusion in V8 Chromium: CVE-2022-2157 Use after free in Interest groups Chromium: CVE-2022-2156 Use after free in Base Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability