Malicious code in lldb-dap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b30b65734b0a9961a35218b38d14cb5fc920ed076b3121fbab31e41262d4693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AZL-39728 CVE-2024-31852 affecting package lldb for versions less than 18.1.2-2

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for module.libomp, module.llvm, clang, libomp, llvm, module.clang, module.compiler-rt, compiler-rt, python-lit, module.lld, module.lldb, module.python-lit, lldb, lld. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

Fedora 39 : clang / compiler-rt / flang / libclc / libcxx / libomp / lld / lldb / etc (2023-67f0f8d186)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-67f0f8d186 advisory. Update to LLVM 17.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora: Security Advisory for lldb (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=6277346723495936 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60c0000c3600 Crash State:...

dotnet7.0 security, bug fix, and enhancement update

7.0.100-0.5.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.5.rc2 - Add lldb as a build dependency - Related: RHBZ2134641 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134641 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 -...

llvm-toolset bug fix and enhancement update

An update is available for llvm-toolset. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...

Malicious Package

Overview lldb-vscode is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in lldb-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9916629b31632e8891a1ad6e398d0a3159ec2c1ba97501fbe7f68b29e77f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4330 Malicious code in lldb-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9916629b31632e8891a1ad6e398d0a3159ec2c1ba97501fbe7f68b29e77f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in lldb-vscode

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=6424124517384192 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60600005b380 Crash State:...

llvm-toolset:rhel8 bug fix update

An update is available for compiler-rt, lldb, lld, llvm, llvm-toolset, clang, libomp, python-lit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LLVM Toolset...

lldb bug fix and enhancement update

An update is available for lldb. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LLDB is a next generation, high-performance debugger. It is built as a set of...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=4735374460583936 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611001052700 Crash State:...

llvm-toolset:rhel8 bug fix and enhancement update

An update is available for compiler-rt, lldb, lld, llvm, llvm-toolset, clang, libomp, python-lit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=6363430154534912 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60c0000c2dc0 Crash State:...

lldb-eval:lldb_vs_lldb_eval_libfuzzer_test: Heap-buffer-overflow in llvm::DataLayout::getIndexedOffsetInType

Detailed Report: https://oss-fuzz.com/testcase?key=5737924226842624 Project: lldb-eval Fuzzing Engine: libFuzzer Fuzz Target: lldbvslldbevallibfuzzertest Job Type: libfuzzerasanlldb-eval Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60800007c980 Crash State:...

ALSA-2021:4743 Moderate: llvm-toolset:rhel8 security update

LLVM Toolset provides the LLVM compiler infrastructure framework, the Clang compiler for the C and C++ languages, the LLDB debugger, and related tools for code analysis. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks...