icu:collator_rulebased_fuzzer: Crash in icu_70::UCharsTrie::branchNext

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5448661421654016 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f26c3fa77e0 Cras...

Security Bulletin: Multiple vulnerabilities in ICU libraries used in IBM DataPower Gateway

Summary IBM has addressed the following vulnerabilities in the ICU libraries used by drouter: CVE-2014-8147, CVE-2014-8146, CVE-2017-14952, CVE-2020-10531, Vulnerability Details CVEID: CVE-2014-8147 DESCRIPTION: ICU Project ICU4C library could allow a local attacker execute arbitrary code on the...

icu:uloc_canonicalize_fuzzer: Stack-use-after-scope in uprv_stricmp_70

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=4509226890821632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: uloccanonicalizefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-use-after-scope READ 1 Crash Address:...

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

CVE-2021-39176

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

CVE-2021-39176

CVE-2021-39176 (detect-character-encoding) affects the detect-character-encoding library (ICU-based) up to version 0.3.0. The root cause is that allocated memory is not released, leading to memory exhaustion. The issue has been patched in v0.3.1. Related advisories (GitHub GHSA, OSV, Red Hat, NVD...

CVE-2021-39176: Missing Release of Memory after Effective Lifetime

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

SUSE-SU-2021:2777-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...

org.elasticsearch:elasticsearch-analysis-icu (0.10.0), org.elasticsearch:elasticsearch-client-groovy (0.10.0) +4 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.10.0)

org.elasticsearch:elasticsearch MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.10.0 -...

org.elasticsearch:elasticsearch-analysis-icu (0.14.1), org.elasticsearch:elasticsearch-cloud-aws (0.14.1) +10 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.14.1)

org.elasticsearch:elasticsearch MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.7), org.elasticsearch:elasticsearch-cloud-aws (0.17.7) +11 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.17.7)

org.elasticsearch:elasticsearch MAVEN version 0.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.7 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.8.0), org.elasticsearch:elasticsearch-client-groovy (0.8.0) +4 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.8.0)

org.elasticsearch:elasticsearch MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.8.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

co.diji:elasticsearch-mocksolrplugin (1.1.3), com.aconex.scrutineer:scrutineer (>=1.0.1, <=1.0.4) +6 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.19.3)

org.elasticsearch:elasticsearch MAVEN version 0.19.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.3 - com.aconex.scrutineer:scrutineer =1.0.1, =1.5.0,...

Security fix for the ALT Linux 10 package node version 14.17.4-alt1

14.17.4-alt1 built Aug. 2, 2021 Vitaly Lipatov in task 281579 July 30, 2021 Vitaly Lipatov - new version 14.17.4 with rpmrb script - CVE-2021-22930: Use after free on close http2 on stream canceling High - set npm = 6.14.14 - restore minimum ICU version to 65...

OPENSUSE-SU-2021:1785-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: - Upgrade to version 13.3: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

Security update for postgresql12 (moderate)

openSUSE Security Update: Security update for postgresql12 Announcement ID: openSUSE-SU-2021:1994-1 Rating: moderate References: 1179945 1183118 1183168 1185924 1185925 1185926 Cross-References: CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 CVSS scores: CVE-2021-32027 NVD : 8.8...

org.elasticsearch:elasticsearch-analysis-icu (0.12.0), org.elasticsearch:elasticsearch-cloud-aws (0.12.0) +10 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.12.0)

org.elasticsearch:elasticsearch MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.18.3), org.elasticsearch:elasticsearch-cloud-aws (0.18.3) +11 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.18.3)

org.elasticsearch:elasticsearch MAVEN version 0.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.3 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...