chore: Auto-update chart README [skip ci]
This commit is contained in:
truecharts-bot
@@ -11,6 +11,31 @@ hide:
|
||||
|
||||
##### Scan Results
|
||||
|
||||
#### Chart Object: code-server/templates/common.yaml
|
||||
|
||||
|
||||
|
||||
| Type | Misconfiguration ID | Check | Severity | Explaination | Links |
|
||||
|:----------------|:------------------:|:-----------:|:------------------:|-----------------------------------------|-----------------------------------------|
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv001">https://avd.aquasec.com/misconfig/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV001 | Process can elevate its own privileges | MEDIUM | <details><summary>Expand...</summary> A program inside the container can elevate its own privileges and run as root, which might give the program control over the container and node. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.allowPrivilegeEscalation' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv001">https://avd.aquasec.com/misconfig/ksv001</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/misconfig/ksv003">https://avd.aquasec.com/misconfig/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV003 | Default capabilities not dropped | LOW | <details><summary>Expand...</summary> The container should drop all default capabilities and add only those that are needed for its execution. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should add 'ALL' to 'securityContext.capabilities.drop' </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/">https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/</a><br><a href="https://avd.aquasec.com/misconfig/ksv003">https://avd.aquasec.com/misconfig/ksv003</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv012">https://avd.aquasec.com/misconfig/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV012 | Runs as root user | MEDIUM | <details><summary>Expand...</summary> 'runAsNonRoot' forces the running image to run as a non-root user to ensure least privileges. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsNonRoot' to true </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv012">https://avd.aquasec.com/misconfig/ksv012</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/misconfig/ksv014">https://avd.aquasec.com/misconfig/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV014 | Root file system is not read-only | LOW | <details><summary>Expand...</summary> An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.readOnlyRootFilesystem' to true </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/">https://kubesec.io/basics/containers-securitycontext-readonlyrootfilesystem-true/</a><br><a href="https://avd.aquasec.com/misconfig/ksv014">https://avd.aquasec.com/misconfig/ksv014</a><br></details> |
|
||||
| Kubernetes Security Check | KSV017 | Privileged container | HIGH | <details><summary>Expand...</summary> Privileged containers share namespaces with the host system and do not offer any security. They should be used exclusively for system containers that require high privileges. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.privileged' to false </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline">https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline</a><br><a href="https://avd.aquasec.com/misconfig/ksv017">https://avd.aquasec.com/misconfig/ksv017</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | LOW | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/misconfig/ksv020">https://avd.aquasec.com/misconfig/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV020 | Runs with low user ID | LOW | <details><summary>Expand...</summary> Force the container to run with user ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsUser' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/misconfig/ksv020">https://avd.aquasec.com/misconfig/ksv020</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | LOW | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'RELEASE-NAME-code-server' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/misconfig/ksv021">https://avd.aquasec.com/misconfig/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV021 | Runs with low group ID | LOW | <details><summary>Expand...</summary> Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table. <br> <hr> <br> Container 'autopermissions' of Deployment 'RELEASE-NAME-code-server' should set 'securityContext.runAsGroup' > 10000 </details>| <details><summary>Expand...</summary><a href="https://kubesec.io/basics/containers-securitycontext-runasuser/">https://kubesec.io/basics/containers-securitycontext-runasuser/</a><br><a href="https://avd.aquasec.com/misconfig/ksv021">https://avd.aquasec.com/misconfig/ksv021</a><br></details> |
|
||||
| Kubernetes Security Check | KSV030 | Default Seccomp profile not set | LOW | <details><summary>Expand...</summary> The RuntimeDefault/Localhost seccomp profile must be required, or allow specific additional profiles. <br> <hr> <br> Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv030">https://avd.aquasec.com/misconfig/ksv030</a><br></details> |
|
||||
| Kubernetes Security Check | KSV030 | Default Seccomp profile not set | LOW | <details><summary>Expand...</summary> The RuntimeDefault/Localhost seccomp profile must be required, or allow specific additional profiles. <br> <hr> <br> Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault' </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv030">https://avd.aquasec.com/misconfig/ksv030</a><br></details> |
|
||||
| Kubernetes Security Check | KSV105 | Containers must not set runAsUser to 0 | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root UID. <br> <hr> <br> securityContext.runAsUser should be set to a value greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv105">https://avd.aquasec.com/misconfig/ksv105</a><br></details> |
|
||||
| Kubernetes Security Check | KSV105 | Containers must not set runAsUser to 0 | LOW | <details><summary>Expand...</summary> Containers should be forbidden from running with a root UID. <br> <hr> <br> securityContext.runAsUser should be set to a value greater than 0 </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv105">https://avd.aquasec.com/misconfig/ksv105</a><br></details> |
|
||||
| Kubernetes Security Check | KSV106 | Container capabilities must only include NET_BIND_SERVICE | LOW | <details><summary>Expand...</summary> Containers must drop ALL capabilities, and are only permitted to add back the NET_BIND_SERVICE capability. <br> <hr> <br> container should drop all </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv106">https://avd.aquasec.com/misconfig/ksv106</a><br></details> |
|
||||
| Kubernetes Security Check | KSV106 | Container capabilities must only include NET_BIND_SERVICE | LOW | <details><summary>Expand...</summary> Containers must drop ALL capabilities, and are only permitted to add back the NET_BIND_SERVICE capability. <br> <hr> <br> container should drop all </details>| <details><summary>Expand...</summary><a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted">https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted</a><br><a href="https://avd.aquasec.com/misconfig/ksv106">https://avd.aquasec.com/misconfig/ksv106</a><br></details> |
|
||||
|
||||
## Containers
|
||||
|
||||
@@ -186,7 +211,7 @@ hide:
|
||||
| libsqlite3-0 | CVE-2021-45346 | MEDIUM | 3.34.1-3 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2021-45346">https://access.redhat.com/security/cve/CVE-2021-45346</a><br><a href="https://github.com/guyinatuxedo/sqlite3_record_leaking">https://github.com/guyinatuxedo/sqlite3_record_leaking</a><br><a href="https://security.netapp.com/advisory/ntap-20220303-0001/">https://security.netapp.com/advisory/ntap-20220303-0001/</a><br><a href="https://sqlite.org/forum/forumpost/53de8864ba114bf6">https://sqlite.org/forum/forumpost/53de8864ba114bf6</a><br></details> |
|
||||
| libsqlite3-0 | CVE-2021-36690 | LOW | 3.34.1-3 | | <details><summary>Expand...</summary><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36690</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2021-36690">https://nvd.nist.gov/vuln/detail/CVE-2021-36690</a><br><a href="https://ubuntu.com/security/notices/USN-5403-1">https://ubuntu.com/security/notices/USN-5403-1</a><br><a href="https://www.oracle.com/security-alerts/cpujan2022.html">https://www.oracle.com/security-alerts/cpujan2022.html</a><br><a href="https://www.sqlite.org/forum/forumpost/718c0a8d17">https://www.sqlite.org/forum/forumpost/718c0a8d17</a><br></details> |
|
||||
| libss2 | CVE-2022-1304 | HIGH | 1.46.2-2 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1304">https://access.redhat.com/security/cve/CVE-2022-1304</a><br><a href="https://bugzilla.redhat.com/show_bug.cgi?id=2069726">https://bugzilla.redhat.com/show_bug.cgi?id=2069726</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304</a><br><a href="https://marc.info/?l=linux-ext4&m=165056234501732&w=2">https://marc.info/?l=linux-ext4&m=165056234501732&w=2</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1304">https://nvd.nist.gov/vuln/detail/CVE-2022-1304</a><br><a href="https://ubuntu.com/security/notices/USN-5464-1">https://ubuntu.com/security/notices/USN-5464-1</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-1292 | CRITICAL | 1.1.1n-0+deb11u1 | 1.1.1n-0+deb11u2 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1292">https://access.redhat.com/security/cve/CVE-2022-1292</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html</a><br><a href="https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html">https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1292">https://nvd.nist.gov/vuln/detail/CVE-2022-1292</a><br><a href="https://security.netapp.com/advisory/ntap-20220602-0009/">https://security.netapp.com/advisory/ntap-20220602-0009/</a><br><a href="https://ubuntu.com/security/notices/USN-5402-1">https://ubuntu.com/security/notices/USN-5402-1</a><br><a href="https://ubuntu.com/security/notices/USN-5402-2">https://ubuntu.com/security/notices/USN-5402-2</a><br><a href="https://www.debian.org/security/2022/dsa-5139">https://www.debian.org/security/2022/dsa-5139</a><br><a href="https://www.openssl.org/news/secadv/20220503.txt">https://www.openssl.org/news/secadv/20220503.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-1292 | CRITICAL | 1.1.1n-0+deb11u1 | 1.1.1n-0+deb11u2 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1292">https://access.redhat.com/security/cve/CVE-2022-1292</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/</a><br><a href="https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html">https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1292">https://nvd.nist.gov/vuln/detail/CVE-2022-1292</a><br><a href="https://security.netapp.com/advisory/ntap-20220602-0009/">https://security.netapp.com/advisory/ntap-20220602-0009/</a><br><a href="https://ubuntu.com/security/notices/USN-5402-1">https://ubuntu.com/security/notices/USN-5402-1</a><br><a href="https://ubuntu.com/security/notices/USN-5402-2">https://ubuntu.com/security/notices/USN-5402-2</a><br><a href="https://www.debian.org/security/2022/dsa-5139">https://www.debian.org/security/2022/dsa-5139</a><br><a href="https://www.openssl.org/news/secadv/20220503.txt">https://www.openssl.org/news/secadv/20220503.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2022-2068 | MEDIUM | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2068">https://access.redhat.com/security/cve/CVE-2022-2068</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7</a><br><a href="https://ubuntu.com/security/notices/USN-5488-1">https://ubuntu.com/security/notices/USN-5488-1</a><br><a href="https://www.openssl.org/news/secadv/20220621.txt">https://www.openssl.org/news/secadv/20220621.txt</a><br></details> |
|
||||
| libssl1.1 | CVE-2007-6755 | LOW | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/">http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/</a><br><a href="http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html">http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html</a><br><a href="http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html">http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html</a><br><a href="http://rump2007.cr.yp.to/15-shumow.pdf">http://rump2007.cr.yp.to/15-shumow.pdf</a><br><a href="http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/">http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/</a><br><a href="http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect">http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect</a><br><a href="http://www.securityfocus.com/bid/63657">http://www.securityfocus.com/bid/63657</a><br><a href="https://access.redhat.com/security/cve/CVE-2007-6755">https://access.redhat.com/security/cve/CVE-2007-6755</a><br><a href="https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html">https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html</a><br></details> |
|
||||
| libssl1.1 | CVE-2010-0928 | LOW | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/">http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/</a><br><a href="http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf">http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf</a><br><a href="http://www.networkworld.com/news/2010/030410-rsa-security-attack.html">http://www.networkworld.com/news/2010/030410-rsa-security-attack.html</a><br><a href="http://www.osvdb.org/62808">http://www.osvdb.org/62808</a><br><a href="http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/">http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/</a><br><a href="https://access.redhat.com/security/cve/CVE-2010-0928">https://access.redhat.com/security/cve/CVE-2010-0928</a><br><a href="https://exchange.xforce.ibmcloud.com/vulnerabilities/56750">https://exchange.xforce.ibmcloud.com/vulnerabilities/56750</a><br></details> |
|
||||
@@ -224,7 +249,7 @@ hide:
|
||||
| openssh-client | CVE-2020-14145 | LOW | 1:8.4p1-5 | | <details><summary>Expand...</summary><a href="http://www.openwall.com/lists/oss-security/2020/12/02/1">http://www.openwall.com/lists/oss-security/2020/12/02/1</a><br><a href="https://access.redhat.com/security/cve/CVE-2020-14145">https://access.redhat.com/security/cve/CVE-2020-14145</a><br><a href="https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d">https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14145">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14145</a><br><a href="https://docs.ssh-mitm.at/CVE-2020-14145.html">https://docs.ssh-mitm.at/CVE-2020-14145.html</a><br><a href="https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1">https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1</a><br><a href="https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py">https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py</a><br><a href="https://linux.oracle.com/cve/CVE-2020-14145.html">https://linux.oracle.com/cve/CVE-2020-14145.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2021-4368.html">https://linux.oracle.com/errata/ELSA-2021-4368.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-14145">https://nvd.nist.gov/vuln/detail/CVE-2020-14145</a><br><a href="https://security.gentoo.org/glsa/202105-35">https://security.gentoo.org/glsa/202105-35</a><br><a href="https://security.netapp.com/advisory/ntap-20200709-0004/">https://security.netapp.com/advisory/ntap-20200709-0004/</a><br><a href="https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/">https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/</a><br><a href="https://www.fzi.de/fileadmin/user_upload/2020-06-26-FSA-2020-2.pdf">https://www.fzi.de/fileadmin/user_upload/2020-06-26-FSA-2020-2.pdf</a><br></details> |
|
||||
| openssh-client | CVE-2020-15778 | LOW | 1:8.4p1-5 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/articles/5284081">https://access.redhat.com/articles/5284081</a><br><a href="https://access.redhat.com/security/cve/CVE-2020-15778">https://access.redhat.com/security/cve/CVE-2020-15778</a><br><a href="https://github.com/cpandya2909/CVE-2020-15778">https://github.com/cpandya2909/CVE-2020-15778</a><br><a href="https://github.com/cpandya2909/CVE-2020-15778/">https://github.com/cpandya2909/CVE-2020-15778/</a><br><a href="https://news.ycombinator.com/item?id=25005567">https://news.ycombinator.com/item?id=25005567</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-15778">https://nvd.nist.gov/vuln/detail/CVE-2020-15778</a><br><a href="https://security.netapp.com/advisory/ntap-20200731-0007/">https://security.netapp.com/advisory/ntap-20200731-0007/</a><br><a href="https://www.openssh.com/security.html">https://www.openssh.com/security.html</a><br></details> |
|
||||
| openssh-client | CVE-2021-36368 | LOW | 1:8.4p1-5 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2021-36368">https://access.redhat.com/security/cve/CVE-2021-36368</a><br><a href="https://bugzilla.mindrot.org/show_bug.cgi?id=3316">https://bugzilla.mindrot.org/show_bug.cgi?id=3316</a><br><a href="https://docs.ssh-mitm.at/trivialauth.html">https://docs.ssh-mitm.at/trivialauth.html</a><br><a href="https://github.com/openssh/openssh-portable/pull/258">https://github.com/openssh/openssh-portable/pull/258</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2021-36368">https://nvd.nist.gov/vuln/detail/CVE-2021-36368</a><br><a href="https://security-tracker.debian.org/tracker/CVE-2021-36368">https://security-tracker.debian.org/tracker/CVE-2021-36368</a><br><a href="https://www.openssh.com/security.html">https://www.openssh.com/security.html</a><br></details> |
|
||||
| openssl | CVE-2022-1292 | CRITICAL | 1.1.1n-0+deb11u1 | 1.1.1n-0+deb11u2 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1292">https://access.redhat.com/security/cve/CVE-2022-1292</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html</a><br><a href="https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html">https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1292">https://nvd.nist.gov/vuln/detail/CVE-2022-1292</a><br><a href="https://security.netapp.com/advisory/ntap-20220602-0009/">https://security.netapp.com/advisory/ntap-20220602-0009/</a><br><a href="https://ubuntu.com/security/notices/USN-5402-1">https://ubuntu.com/security/notices/USN-5402-1</a><br><a href="https://ubuntu.com/security/notices/USN-5402-2">https://ubuntu.com/security/notices/USN-5402-2</a><br><a href="https://www.debian.org/security/2022/dsa-5139">https://www.debian.org/security/2022/dsa-5139</a><br><a href="https://www.openssl.org/news/secadv/20220503.txt">https://www.openssl.org/news/secadv/20220503.txt</a><br></details> |
|
||||
| openssl | CVE-2022-1292 | CRITICAL | 1.1.1n-0+deb11u1 | 1.1.1n-0+deb11u2 | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1292">https://access.redhat.com/security/cve/CVE-2022-1292</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/</a><br><a href="https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html">https://mta.openssl.org/pipermail/openssl-announce/2022-May/000224.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1292">https://nvd.nist.gov/vuln/detail/CVE-2022-1292</a><br><a href="https://security.netapp.com/advisory/ntap-20220602-0009/">https://security.netapp.com/advisory/ntap-20220602-0009/</a><br><a href="https://ubuntu.com/security/notices/USN-5402-1">https://ubuntu.com/security/notices/USN-5402-1</a><br><a href="https://ubuntu.com/security/notices/USN-5402-2">https://ubuntu.com/security/notices/USN-5402-2</a><br><a href="https://www.debian.org/security/2022/dsa-5139">https://www.debian.org/security/2022/dsa-5139</a><br><a href="https://www.openssl.org/news/secadv/20220503.txt">https://www.openssl.org/news/secadv/20220503.txt</a><br></details> |
|
||||
| openssl | CVE-2022-2068 | MEDIUM | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2068">https://access.redhat.com/security/cve/CVE-2022-2068</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9</a><br><a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7</a><br><a href="https://ubuntu.com/security/notices/USN-5488-1">https://ubuntu.com/security/notices/USN-5488-1</a><br><a href="https://www.openssl.org/news/secadv/20220621.txt">https://www.openssl.org/news/secadv/20220621.txt</a><br></details> |
|
||||
| openssl | CVE-2007-6755 | LOW | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/">http://arstechnica.com/security/2013/09/stop-using-nsa-influence-code-in-our-product-rsa-tells-customers/</a><br><a href="http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html">http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html</a><br><a href="http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html">http://blog.cryptographyengineering.com/2013/09/the-many-flaws-of-dualecdrbg.html</a><br><a href="http://rump2007.cr.yp.to/15-shumow.pdf">http://rump2007.cr.yp.to/15-shumow.pdf</a><br><a href="http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/">http://stream.wsj.com/story/latest-headlines/SS-2-63399/SS-2-332655/</a><br><a href="http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect">http://threatpost.com/in-wake-of-latest-crypto-revelations-everything-is-suspect</a><br><a href="http://www.securityfocus.com/bid/63657">http://www.securityfocus.com/bid/63657</a><br><a href="https://access.redhat.com/security/cve/CVE-2007-6755">https://access.redhat.com/security/cve/CVE-2007-6755</a><br><a href="https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html">https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html</a><br></details> |
|
||||
| openssl | CVE-2010-0928 | LOW | 1.1.1n-0+deb11u1 | | <details><summary>Expand...</summary><a href="http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/">http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/</a><br><a href="http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf">http://www.eecs.umich.edu/%7Evaleria/research/publications/DATE10RSA.pdf</a><br><a href="http://www.networkworld.com/news/2010/030410-rsa-security-attack.html">http://www.networkworld.com/news/2010/030410-rsa-security-attack.html</a><br><a href="http://www.osvdb.org/62808">http://www.osvdb.org/62808</a><br><a href="http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/">http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/</a><br><a href="https://access.redhat.com/security/cve/CVE-2010-0928">https://access.redhat.com/security/cve/CVE-2010-0928</a><br><a href="https://exchange.xforce.ibmcloud.com/vulnerabilities/56750">https://exchange.xforce.ibmcloud.com/vulnerabilities/56750</a><br></details> |
|
||||
@@ -329,10 +354,13 @@ hide:
|
||||
| vim-common | CVE-2022-1796 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1796">https://access.redhat.com/security/cve/CVE-2022-1796</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796</a><br><a href="https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5">https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5</a><br><a href="https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e">https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1796">https://nvd.nist.gov/vuln/detail/CVE-2022-1796</a><br></details> |
|
||||
| vim-common | CVE-2022-1886 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1886">https://access.redhat.com/security/cve/CVE-2022-1886</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886</a><br><a href="https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7">https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7</a><br><a href="https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a">https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1886">https://nvd.nist.gov/vuln/detail/CVE-2022-1886</a><br></details> |
|
||||
| vim-common | CVE-2022-1927 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1927">https://access.redhat.com/security/cve/CVE-2022-1927</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)</a><br><a href="https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777">https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br></details> |
|
||||
| vim-common | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br></details> |
|
||||
| vim-common | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br><a href="https://ubuntu.com/security/notices/USN-5492-1">https://ubuntu.com/security/notices/USN-5492-1</a><br></details> |
|
||||
| vim-common | CVE-2022-2124 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2124">https://access.redhat.com/security/cve/CVE-2022-2124</a><br><a href="https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f">https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f</a><br><a href="https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42">https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| vim-common | CVE-2022-2125 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2125">https://access.redhat.com/security/cve/CVE-2022-2125</a><br><a href="https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f">https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f</a><br><a href="https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705">https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705</a><br></details> |
|
||||
| vim-common | CVE-2022-2126 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2126">https://access.redhat.com/security/cve/CVE-2022-2126</a><br><a href="https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8">https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8</a><br><a href="https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e">https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| vim-common | CVE-2022-2175 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e">https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e</a><br><a href="https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55">https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55</a><br></details> |
|
||||
| vim-common | CVE-2022-2182 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e">https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e</a><br><a href="https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8">https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8</a><br></details> |
|
||||
| vim-common | CVE-2022-2183 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa">https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa</a><br><a href="https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975">https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975</a><br></details> |
|
||||
| vim-tiny | CVE-2022-0318 | CRITICAL | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-0318">https://access.redhat.com/security/cve/CVE-2022-0318</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318</a><br><a href="https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc">https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc</a><br><a href="https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08">https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0318.html">https://linux.oracle.com/cve/CVE-2022-0318.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-0894.html">https://linux.oracle.com/errata/ELSA-2022-0894.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-0318">https://nvd.nist.gov/vuln/detail/CVE-2022-0318</a><br><a href="https://ubuntu.com/security/notices/USN-5433-1">https://ubuntu.com/security/notices/USN-5433-1</a><br></details> |
|
||||
| vim-tiny | CVE-2022-1154 | CRITICAL | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1154">https://access.redhat.com/security/cve/CVE-2022-1154</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154</a><br><a href="https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5">https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5</a><br><a href="https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425">https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425</a><br><a href="https://linux.oracle.com/cve/CVE-2022-1154.html">https://linux.oracle.com/cve/CVE-2022-1154.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-1552.html">https://linux.oracle.com/errata/ELSA-2022-1552.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1154">https://nvd.nist.gov/vuln/detail/CVE-2022-1154</a><br><a href="https://ubuntu.com/security/notices/USN-5433-1">https://ubuntu.com/security/notices/USN-5433-1</a><br></details> |
|
||||
| vim-tiny | CVE-2021-3872 | HIGH | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2021-3872">https://access.redhat.com/security/cve/CVE-2021-3872</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3872">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3872</a><br><a href="https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b">https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b</a><br><a href="https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8">https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3872.html">https://linux.oracle.com/cve/CVE-2021-3872.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-0366.html">https://linux.oracle.com/errata/ELSA-2022-0366.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2021-3872">https://nvd.nist.gov/vuln/detail/CVE-2021-3872</a><br><a href="https://ubuntu.com/security/notices/USN-5147-1">https://ubuntu.com/security/notices/USN-5147-1</a><br></details> |
|
||||
@@ -402,10 +430,13 @@ hide:
|
||||
| vim-tiny | CVE-2022-1796 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1796">https://access.redhat.com/security/cve/CVE-2022-1796</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796</a><br><a href="https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5">https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5</a><br><a href="https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e">https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1796">https://nvd.nist.gov/vuln/detail/CVE-2022-1796</a><br></details> |
|
||||
| vim-tiny | CVE-2022-1886 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1886">https://access.redhat.com/security/cve/CVE-2022-1886</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886</a><br><a href="https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7">https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7</a><br><a href="https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a">https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1886">https://nvd.nist.gov/vuln/detail/CVE-2022-1886</a><br></details> |
|
||||
| vim-tiny | CVE-2022-1927 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1927">https://access.redhat.com/security/cve/CVE-2022-1927</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)</a><br><a href="https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777">https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br><a href="https://ubuntu.com/security/notices/USN-5492-1">https://ubuntu.com/security/notices/USN-5492-1</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2124 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2124">https://access.redhat.com/security/cve/CVE-2022-2124</a><br><a href="https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f">https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f</a><br><a href="https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42">https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2125 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2125">https://access.redhat.com/security/cve/CVE-2022-2125</a><br><a href="https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f">https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f</a><br><a href="https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705">https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2126 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2126">https://access.redhat.com/security/cve/CVE-2022-2126</a><br><a href="https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8">https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8</a><br><a href="https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e">https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2175 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e">https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e</a><br><a href="https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55">https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2182 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e">https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e</a><br><a href="https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8">https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8</a><br></details> |
|
||||
| vim-tiny | CVE-2022-2183 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa">https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa</a><br><a href="https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975">https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975</a><br></details> |
|
||||
| xxd | CVE-2022-0318 | CRITICAL | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-0318">https://access.redhat.com/security/cve/CVE-2022-0318</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0318</a><br><a href="https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc">https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc</a><br><a href="https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08">https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08</a><br><a href="https://linux.oracle.com/cve/CVE-2022-0318.html">https://linux.oracle.com/cve/CVE-2022-0318.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-0894.html">https://linux.oracle.com/errata/ELSA-2022-0894.html</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-0318">https://nvd.nist.gov/vuln/detail/CVE-2022-0318</a><br><a href="https://ubuntu.com/security/notices/USN-5433-1">https://ubuntu.com/security/notices/USN-5433-1</a><br></details> |
|
||||
| xxd | CVE-2022-1154 | CRITICAL | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1154">https://access.redhat.com/security/cve/CVE-2022-1154</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154</a><br><a href="https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5">https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5</a><br><a href="https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425">https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425</a><br><a href="https://linux.oracle.com/cve/CVE-2022-1154.html">https://linux.oracle.com/cve/CVE-2022-1154.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-1552.html">https://linux.oracle.com/errata/ELSA-2022-1552.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html">https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C2CQXRLBIC4S7JQVEIN5QXKQPYWB5E3J/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAIQTUO35U5WO2NYMY47637EMCVDJRSL/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1154">https://nvd.nist.gov/vuln/detail/CVE-2022-1154</a><br><a href="https://ubuntu.com/security/notices/USN-5433-1">https://ubuntu.com/security/notices/USN-5433-1</a><br></details> |
|
||||
| xxd | CVE-2021-3872 | HIGH | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2021-3872">https://access.redhat.com/security/cve/CVE-2021-3872</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3872">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3872</a><br><a href="https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b">https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b</a><br><a href="https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8">https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8</a><br><a href="https://linux.oracle.com/cve/CVE-2021-3872.html">https://linux.oracle.com/cve/CVE-2021-3872.html</a><br><a href="https://linux.oracle.com/errata/ELSA-2022-0366.html">https://linux.oracle.com/errata/ELSA-2022-0366.html</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html">https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2021-3872">https://nvd.nist.gov/vuln/detail/CVE-2021-3872</a><br><a href="https://ubuntu.com/security/notices/USN-5147-1">https://ubuntu.com/security/notices/USN-5147-1</a><br></details> |
|
||||
@@ -475,10 +506,13 @@ hide:
|
||||
| xxd | CVE-2022-1796 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1796">https://access.redhat.com/security/cve/CVE-2022-1796</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1796</a><br><a href="https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5">https://github.com/vim/vim/commit/28d032cc688ccfda18c5bbcab8b50aba6e18cde5</a><br><a href="https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e">https://huntr.dev/bounties/f6739b58-49f9-4056-a843-bf76bbc1253e</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1796">https://nvd.nist.gov/vuln/detail/CVE-2022-1796</a><br></details> |
|
||||
| xxd | CVE-2022-1886 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1886">https://access.redhat.com/security/cve/CVE-2022-1886</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1886</a><br><a href="https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7">https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7</a><br><a href="https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a">https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-1886">https://nvd.nist.gov/vuln/detail/CVE-2022-1886</a><br></details> |
|
||||
| xxd | CVE-2022-1927 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-1927">https://access.redhat.com/security/cve/CVE-2022-1927</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1927</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010</a><br><a href="https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)">https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)</a><br><a href="https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777">https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/</a><br><a href="https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/">https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/</a><br></details> |
|
||||
| xxd | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br></details> |
|
||||
| xxd | CVE-2022-2042 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2042">https://access.redhat.com/security/cve/CVE-2022-2042</a><br><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042">https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2042</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835</a><br><a href="https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)">https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835 (v8.2.5072)</a><br><a href="https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba">https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba</a><br><a href="https://ubuntu.com/security/notices/USN-5492-1">https://ubuntu.com/security/notices/USN-5492-1</a><br></details> |
|
||||
| xxd | CVE-2022-2124 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2124">https://access.redhat.com/security/cve/CVE-2022-2124</a><br><a href="https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f">https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f</a><br><a href="https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42">https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| xxd | CVE-2022-2125 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2125">https://access.redhat.com/security/cve/CVE-2022-2125</a><br><a href="https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f">https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f</a><br><a href="https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705">https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705</a><br></details> |
|
||||
| xxd | CVE-2022-2126 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://access.redhat.com/security/cve/CVE-2022-2126">https://access.redhat.com/security/cve/CVE-2022-2126</a><br><a href="https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8">https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8</a><br><a href="https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e">https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e</a><br><a href="https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html">https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html</a><br></details> |
|
||||
| xxd | CVE-2022-2175 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e">https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e</a><br><a href="https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55">https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55</a><br></details> |
|
||||
| xxd | CVE-2022-2182 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e">https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e</a><br><a href="https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8">https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8</a><br></details> |
|
||||
| xxd | CVE-2022-2183 | LOW | 2:8.2.2434-3+deb11u1 | | <details><summary>Expand...</summary><a href="https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa">https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa</a><br><a href="https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975">https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975</a><br></details> |
|
||||
|
||||
**gobinary**
|
||||
|
||||
|
||||
Reference in New Issue
Block a user