2023-12 - Canonical, Red Hat, Cisco, Microsoft, Google, Jenkins, GitHub Published on March 27, 2023

Advisory Week

Week 12, 2023

Ubuntu Security Notices

Graphviz vulnerabilities: USN-5971-1 Linux kernel vulnerabilities: USN-5970-1 gif2apng vulnerabilities: USN-5969-1 amanda regression: USN-5966-2 amanda vulnerabilities: USN-5966-1 Apache HTTP Server vulnerability: USN-5942-2 GitPython vulnerability: USN-5968-1 object-path vulnerabilities: USN-5967-1 TigerVNC vulnerability: USN-5965-1 SoX regression: USN-5904-2 Ruby vulnerability: USN-5806-3 curl vulnerabilities: USN-5964-1 Vim vulnerabilities: USN-5963-1

Red Hat Security Advisory

Moderate: Red Hat OpenShift GitOps security update: RHSA-2023:1454 / RHSA-2023:1453 / RHSA-2023:1452 Moderate: Red Hat OpenShift Service Mesh Containers for 2.3.2 security update: RHSA-2023:1448 Important: firefox security update: RHSA-2023:1444 / RHSA-2023:1445 / RHSA-2023:1367 / RHSA-2023:1364 / RHSA-2023:1336 / RHSA-2023:1333 Important: thunderbird security update: RHSA-2023:1443 / RHSA-2023:1407 / RHSA-2023:1404 / RHSA-2023:1403 / RHSA-2023:1402 / RHSA-2023:1401 Important: openssl security update: RHSA-2023:1441 / RHSA-2023:1440 / RHSA-2023:1439 / RHSA-2023:1438 / RHSA-2023:1437 / RHSA-2023:1405 / RHSA-2023:1335 Important: nss security update: RHSA-2023:1436 / RHSA-2023:1406 / RHSA-2023:1370 / RHSA-2023:1369 / RHSA-2023:1366 / RHSA-2023:1332 Important: kpatch-patch security update: RHSA-2023:1435 Important: Migration Toolkit for Containers (MTC) 1.7.8 security and bug fix update: RHSA-2023:1428 Important: OpenShift Container Platform 4.11.32 security and extras update: RHSA-2023:1297 Moderate: OpenShift Container Platform 4.12.8 security update: RHSA-2023:1268 Important: openssl security and bug fix update: RHSA-2023:1199 Important: nss security and bug fix update: RHSA-2023:1368 / RHSA-2023:1365 Important: OpenShift Container Platform 4.12.8 security update: RHSA-2023:1270 Critical: Red Hat Process Automation Manager 7.13.2 security update: RHSA-2023:1334

Cisco Security Advisory

Cisco Access Point Software Command Injection Vulnerability Cisco IOS XE Software Web UI Path Traversal Vulnerability Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability Cisco IOS XE Software Privilege Escalation Vulnerability Cisco IOS XE SD-WAN Software Command Injection Vulnerability Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability Cisco DNA Center Privilege Escalation Vulnerability Cisco DNA Center Information Disclosure Vulnerability Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability Cisco Access Point Software Denial of Service Vulnerability Cisco Access Point Software Association Request Denial of Service Vulnerability

Microsoft Security

Microsoft March 2023 Security Update Guide Chromium: CVE-2023-1528 Use after free in Passwords Chromium: CVE-2023-1529 Out of bounds memory access in WebHID Chromium: CVE-2023-1530 Use after free in PDF Chromium: CVE-2023-1531 Use after free in ANGLE Chromium: CVE-2023-1532 Out of bounds read in GPU Video Chromium: CVE-2023-1533 Use after free in WebProtect Chromium: CVE-2023-1534 Out of bounds read in ANGLE Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability: CVE-2023-28261 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability: CVE-2023-28286 Windows Snipping Tool Information Disclosure Vulnerability: CVE-2023-28303

Google Security Advisories

Chrome Releases: Stable Channel Update for Desktop

Jenkins Security Advisories

Jenkins Security Advisory 2023-03-21

Github Security Advisories

[GHSA-vq67-rp93-65qf] Interactive `run` permission prompt spoofing via improper ANSI neutralization [GHSA-gwvm-vrp4-4pp5] angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend [GHSA-cpmr-mw4j-99r7] Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/ [GHSA-wp72-7hj9-5265] Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs [GHSA-xg73-94fp-g449] Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs [GHSA-8vxc-r5wp-vgvc] Versionize::deserialize implementation for FamStructWrapper is lacking bound checks, potentially leading to out of bounds memory accesses [GHSA-93vr-9q9m-pj8p] TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch [GHSA-qjqc-vqcf-5qvj] TensorFlow vulnerable to seg fault in `tf.raw_ops.Print` [GHSA-7jvm-xxmr-v5cw] TensorFlow vulnerable to integer overflow in EditDistance [GHSA-64jg-wjww-7c5w] TensorFlow has Null Pointer Error in TensorArrayConcatV2 [GHSA-6hg6-5c2q-7rcr] TensorFlow has Heap-buffer-overflow in AvgPoolGrad [GHSA-558h-mq8x-7q9g] TensorFlow has Null Pointer Error in SparseSparseMaximum [GHSA-f637-vh3r-vfh2] TensorFlow has Floating Point Exception in AudioSpectrogram [GHSA-fqm2-gh8w-gr68] TensorFlow vulnerable to segfault when opening multiframe gif [GHSA-gw97-ff7c-9v96] TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation [GHSA-rcf8-g8jv-vg6p] TensorFlow has Floating Point Exception in AvgPoolGrad with XLA [GHSA-49rq-hwc3-x77w] TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize [GHSA-j5w9-hmfh-4cr6] TensorFlow has segmentation fault in tfg-translate [GHSA-94mm-g2mv-8p7r] TensorFlow has Null Pointer Error in LookupTableImportV2 [GHSA-647v-r7qq-24fh] TensorFlow has Floating Point Exception in TensorListSplit with XLA [GHSA-gf97-q72m-7579] TensorFlow has Null Pointer Error in RandomShuffle with XLA enable [GHSA-7x4v-9gxg-9hwj] TensorFlow has Segfault in Bincount with XLA [GHSA-6wfh-89q8-44jq] TensorFlow has null dereference on ParallelConcat with XLA [GHSA-f49c-87jh-g47q] TensorFlow has double free in Fractional(Max/Avg)Pool [GHSA-5w96-866f-6rm8] TensorFlow has Floating Point Exception in TFLite in conv kernel [GHSA-68v3-g9cm-rmm6] TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad [GHSA-c25x-cm9x-qqgx] Deno improperly handles resizable ArrayBuffer [GHSA-493p-pfq6-5258] json-smart Uncontrolled Recursion vulnerabilty [GHSA-qrrg-gw7w-vp76] Grafana Stored Cross-site Scripting in Graphite FunctionDescription tooltip [GHSA-mfvg-qwcw-qvc8] baserCMS allows any file to be uploaded [GHSA-h4cc-fxpp-pgw9] baserCMS File Uploader Remote Code Execution (RCE) vulnerability [GHSA-vfgq-g5x8-g595] Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process [GHSA-2q5c-qw9c-fmvq] Argo CD authenticated but unauthorized users may enumerate Application names via the API [GHSA-8vg2-wf3q-mwv7] directus vulnerable to Insertion of Sensitive Information into Log File [GHSA-5mqj-xc49-246p] crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb [GHSA-vf7q-g2pv-jxvx] Pimcore vulnerable to improper quoting of filters in Custom Reports [GHSA-42c3-wvww-gcqj] Pimcore Remote Code Execution vulnerability in Search function [GHSA-9324-jv53-9cc8] dio vulnerable to CRLF injection with HTTP method string [GHSA-7mjv-x3jf-545x] cloudflared's Installer has Local Privilege Escalation Vulnerability [GHSA-fcmm-54jp-7vf6] Frontier's modexp precompile is slow for even modulus [GHSA-29pr-6jr8-q5jm] Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` [GHSA-6f27-3p6c-p5jc] `cilium-cli` disables etcd authorization for clustermesh clusters [GHSA-rwmf-w63j-p7gv] CairoSVG improperly processes SVG files loaded from external resources [GHSA-c24f-2j3g-rg48] kaml has potential denial of service while parsing input with anchors and aliases [GHSA-xrqq-wqh4-5hg2] svg-sanitizer has Cross-site Scripting Bypass [GHSA-rcg9-hrhx-6q69] Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field [GHSA-66cm-c7ch-5j8q] Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects [GHSA-42x8-2v53-pqmj] Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents