2022-30 - Mozilla, Red Hat, Google, GitHub Published on August 1, 2022

Advisory Week

Week 30, 2022

National Cyber Awareness System

CISA Adds One Known Exploited Vulnerability to Catalog CISA Releases Log4Shell-Related MAR Samba Releases Security Updates

Mozilla Security Advisories

Security Vulnerabilities fixed in Thunderbird 102.1 mfsa2022-32 Security Vulnerabilities fixed in Thunderbird 91.12 mfsa2022-31 Security Vulnerabilities fixed in Firefox ESR 91.12 mfsa2022-29 Security Vulnerabilities fixed in Firefox ESR 102.1 mfsa2022-30 Security Vulnerabilities fixed in Firefox 103 mfsa2022-28

Red Hat Security Advisory

(RHSA-2022:5759) Moderate: rh-mariadb105-galera and rh-mariadb105-mariadb security and bugfix update (RHSA-2022:5758) Important: OpenJDK 17.0.4 Security Update for Portable Linux Builds (RHSA-2022:5757) Important: OpenJDK 17.0.4 security update for Windows Builds (RHSA-2022:5756) Important: OpenJDK 11.0.16 security update for Windows Builds (RHSA-2022:5755) Important: OpenJDK 11.0.16 Security Update for Portable Linux Builds (RHSA-2022:5753) Important: OpenJDK 8u342 Windows builds release and security update (RHSA-2022:5699) Moderate: Secondary Scheduler Operator for Red Hat OpenShift 1.0.1 security update (RHSA-2022:5738) Important: Django 3.2.14 Security Update (RHSA-2022:5736) Important: java-17-openjdk security, bug fix, and enhancement update (RHSA-2022:5726) Important: java-17-openjdk security, bug fix, and enhancement update (RHSA-2022:5717) Important: grafana security update (RHSA-2022:5719) Important: grafana security update (RHSA-2022:5718) Important: grafana security update (RHSA-2022:5716) Important: grafana security update (RHSA-2022:5720) Important: grafana security update (RHSA-2022:5709) Important: java-1.8.0-openjdk security, bug fix, and enhancement update (RHSA-2022:5704) Moderate: ACS 3.71 enhancement and security update (RHSA-2022:5703) Important: Red Hat Ansible Automation Platform 1.2 security update (RHSA-2022:5702) Important: Red Hat Ansible Automation Platform 2.1.2 security and bug fix update (RHSA-2022:5700) Important: java-1.8.0-openjdk security update (RHSA-2022:5701) Important: java-1.8.0-openjdk security update (RHSA-2022:5697) Important: java-1.8.0-openjdk security and bug fix update (RHSA-2022:5698) Important: java-1.8.0-openjdk security, bug fix, and enhancement update (RHSA-2022:5696) Important: java-1.8.0-openjdk security, bug fix, and enhancement update (RHSA-2022:5695) Important: java-11-openjdk security, bug fix, and enhancement update (RHSA-2022:5664) Important: OpenShift Container Platform 4.10.24 bug fix and security update

Google Security Advisories

Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop Chrome Releases: Stable Channel Update for Desktop

Github Security Advisories

[GHSA-4rx6-g5vg-5f3j] Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow [GHSA-32ff-4g79-vgfc] Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings [GHSA-hrgx-p36p-89q4] PrestaShop eval injection possible if shop vulnerable to SQL injection [GHSA-9x8m-2xpf-crp3] Scrapy before v2.6.2 and v1.8.3 vulnerable to one proxy sending credentials to another [GHSA-c8rp-cgf4-937w] mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack [GHSA-2cpx-6pqp-wf35] fs2-io skips mTLS client verification [GHSA-xq3c-8gqm-v648] async-graphql / async-graphql - @DOS GraphQL Nested Fragments overflow [GHSA-5834-xv5q-cgfw] Shopware vulnerable to persistent XSS in customer module [GHSA-8274-h5jp-97vr] Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack