2022-25 - Canonical, Red Hat, nodejs, Cisco, Microsoft Published on June 27, 2022

Advisory Week

Week 25, 2022

Ubuntu Security Notices

USN-5487-3: Apache HTTP Server regression

USN-5492-1: Vim vulnerability

USN-5487-2: Apache HTTP Server regression

USN-5491-1: Squid vulnerability

USN-5490-1: Protocol Buffers vulnerability

USN-5489-1: QEMU vulnerabilities

USN-5488-1: OpenSSL vulnerability

USN-5487-1: Apache HTTP Server vulnerabilities

USN-5486-1: Intel Microcode vulnerabilities

Red Hat Security Advisory

(RHSA-2022:5187) Important: Red Hat OpenShift GitOps security update

(RHSA-2022:5192) Important: Red Hat OpenShift GitOps security update

(RHSA-2022:5188) Important: RHACS 3.69 security update

(RHSA-2022:5029) Moderate: Red Hat build of Eclipse Vert.x 4.2.7 security update

(RHSA-2022:5116) Moderate: Red Hat OpenStack Platform 16.2 (puppet-firewall) security update

(RHSA-2022:5115) Moderate: Red Hat OpenStack Platform 16.2 (python-django20) security update

(RHSA-2022:5114) Moderate: Red Hat OpenStack Platform 16.2 (openstack-barbican) security update

(RHSA-2022:5163) Low: httpd:2.4 security update

(RHSA-2022:5162) Important: postgresql security update

(RHSA-2022:5157) Important: kernel security and bug fix update

(RHSA-2022:5153) Important: Red Hat OpenShift GitOps security update

(RHSA-2022:5152) Important: Red Hat OpenShift GitOps security update

(RHSA-2022:4999) Moderate: OpenShift Container Platform 3.11.715 packages and security update

(RHSA-2022:5132) Important: RHACS 3.68 security update

Node.js Security Advisories

OpenSSL update assessment, and Node.js project plans

Cisco Security Advisory

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

Microsoft Security

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Chromium: CVE-2022-2165 Insufficient data validation in URL formatting

Chromium: CVE-2022-2164 Inappropriate implementation in Extensions API

Chromium: CVE-2022-2163 Use after free in Cast UI and Toolbar

Chromium: CVE-2022-2162 Insufficient policy enforcement in File System API

Chromium: CVE-2022-2161 Use after free in WebApp Provider

Chromium: CVE-2022-2160 Insufficient policy enforcement in DevTools

Chromium: CVE-2022-2158 Type Confusion in V8

Chromium: CVE-2022-2157 Use after free in Interest groups

Chromium: CVE-2022-2156 Use after free in Base

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability