2022-9 - Mozilla, Canonical, Red Hat, Cisco, Microsoft, GitHub Published on March 7, 2022

Advisory Week

Week 9, 2022

Mozilla Security Advisories

Security Vulnerabilities fixed in Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, and Focus 97.3.0 mfsa2022-09

Ubuntu Security Notices

USN-5311-1: containerd vulnerability USN-5300-2: PHP vulnerabilities USN-5312-1: HAProxy vulnerability USN-5310-1: GNU C Library vulnerabilities USN-5309-1: virglrenderer vulnerabilities USN-5307-1: QEMU vulnerabilities USN-5306-1: WebKitGTK vulnerabilities USN-5305-1: MariaDB vulnerabilities USN-5303-1: PHP vulnerability USN-5304-1: PolicyKit vulnerability

Red Hat Security Advisory

(RHSA-2022:0735) Important: Red Hat Advanced Cluster Management 2.4.2 security updates and bug fixes (RHSA-2022:0731) Important: cyrus-sasl security update (RHSA-2022:0730) Important: cyrus-sasl security update (RHSA-2022:0728) Moderate: OpenShift Logging bug fix and security update (5.2.8) (RHSA-2022:0727) Moderate: OpenShift Logging bug fix and security update (5.1.9) (RHSA-2022:0722) Moderate: rh-maven36-httpcomponents-client security update (RHSA-2022:0721) Moderate: OpenShift Logging bug fix and security update (5.3.5) (RHSA-2022:0718) Important: kpatch-patch security update (RHSA-2022:0655) Low: OpenShift Container Platform 4.9.23 bug fix and security update (RHSA-2022:0708) Important: rh-ruby26-ruby security, bug fix, and enhancement update (RHSA-2022:0687) Moderate: OpenShift API for Data Protection (OADP) 1.0.1 security and bug fix update

Cisco Security Advisory

Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability Cisco StarOS Command Injection Vulnerability Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

Microsoft Security

Chromium: CVE-2022-0806 Data leak in Canvas Chromium: CVE-2022-0805 Use after free in Browser Switcher Chromium: CVE-2022-0807 Inappropriate implementation in Autofill Chromium: CVE-2022-0808 Use after free in Chrome OS Shell Chromium: CVE-2022-0809 Out of bounds memory access in WebXR Chromium: CVE-2022-0797 Out of bounds memory access in Mojo Chromium: CVE-2022-0789 Heap buffer overflow in ANGLE Chromium: CVE-2022-0790 Use after free in Cast UI Chromium: CVE-2022-0791 Use after free in Omnibox Chromium: CVE-2022-0792 Out of bounds read in ANGLE Chromium: CVE-2022-0793 Use after free in Views Chromium: CVE-2022-0794 Use after free in WebShare Chromium: CVE-2022-0795 Type Confusion in Blink Layout Chromium: CVE-2022-0796 Use after free in Media Chromium: CVE-2022-0798 Use after free in MediaStream Chromium: CVE-2022-0799 Insufficient policy enforcement in Installer Chromium: CVE-2022-0800 Heap buffer overflow in Cast UI Chromium: CVE-2022-0801 Inappropriate implementation in HTML parser Chromium: CVE-2022-0802 Inappropriate implementation in Full screen mode Chromium: CVE-2022-0803 Inappropriate implementation in Permissions Chromium: CVE-2022-0804 Inappropriate implementation in Full screen mode

Github Security Advisories

[GHSA-fmx4-26r3-wxpf] Integer overflow in cmark-gfm table parsing extension leads to heap memory corruption [GHSA-446w-rrm4-r47f] Exposure of home directory through shescape on Unix with Bash [GHSA-gmv4-r438-p67f] Leading white space bypasses protocol validation [GHSA-rv6r-3f5q-9rgx] Twisted SSH client and server deny of service during SSH handshake. [GHSA-cm9w-c4rj-r2cf] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component [GHSA-crp2-qrr5-8pq7] containerd CRI plugin: Insecure handling of image volumes [GHSA-xvm2-9xvc-hx7f] Improper Restriction of XML External Entity Reference in com.monitorjbl:xlsx-streamer [GHSA-cxf7-qrc5-9446] Remote shell execution vulnerability when applying commands from user input [GHSA-32x6-qvw6-mxj4] Forwarding of confidentials headers to third parties in fluture-node [GHSA-mfjm-vh54-3f96] Cookie-setting is not restricted based on the public suffix list [GHSA-cjvr-mfj7-j4j8] User-set cookies are kept on redirect requests regardless of the target domain [GHSA-7f63-h6g3-7cwm] Cross Site Scripting (XSS) in @finastra/ssr-pages [GHSA-w6cx-qg2q-rvq8] Path Traversal in @finastra/ssr-pages [GHSA-mj6m-246h-9w56] Improper regex in htaccess file [GHSA-j34v-3552-5r7j] Multiple security issues in Pomerium's embedded envoy [GHSA-r5hc-wm3g-hjw6] Server-Side Request Forgery (SSRF) in rudloff/alltube [GHSA-4v37-24gm-h554] Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 [GHSA-xjp4-6w75-qrj7] Remote CLI Command Execution Vulnerability in CodeIgniter4 [GHSA-p93v-m2r2-4387] Denial of service via insufficient metadata validation [GHSA-w4f8-fxq2-j35v] Possible privilege escalation via bash completion script [GHSA-chxf-fjcf-7fwp] Possible filesystem space exhaustion by local users [GHSA-gv9j-4w24-q7vx] Improper random number generation in github.com/coredns/coredns [GHSA-2j6v-xpf3-xvrv] Use of Externally-Controlled Format String in wire-avs