USN-5756-2: Linux kernel (GKE) vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-5757-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5757-1 advisory. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5755-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5755-2 advisory. It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to CVE-2022-0924

Summary LibTIFF is not used directly by IBM App Connect Enterprise Certified Container but is present in the DesignerAuthoring image used for mapping assistance, which may be vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to CVE-2022-27406

Summary FreeType is not used directly by IBM App Connect Enterprise Certified Container but is present as an operating system module in the DesignerAuthoring image used for mapping assistance. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance ma...

Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5752-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5752-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a use- after-fr...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : snapd vulnerability (USN-5753-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5753-1 advisory. The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private...

Debian dla-3214 : libraw-bin - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3214 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3214-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3214-1] libraw security update

Debian LTS Advisory DLA-3214-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne November 30, 2022 https://wiki.debian.org/LTS Package : libraw Version : 0.19.2-2+deb10u2 CVE ID : CVE-2020-15503 This update adds size checks to thumbnail extraction. Prior to these...

USN-5745-2 shadow regression

USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update reverts the security fix pending further investigation. We apologize fo...

Debian dla-3213 : krb5-admin-server - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3213 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3213-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 18.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5728-3)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5728-3 advisory. Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential...

Debian dla-3210 : gerbv - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3210 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected]...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : shadow regression (USN-5745-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5745-2 advisory. USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in...

[SECURITY] [DLA-3210-1] gerbv security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3211-1] frr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3211-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 28, 2022 https://wiki.debian.org/LTS -...

Debian dla-3211 : frr - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3211 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3211-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : shadow vulnerability (USN-5745-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5745-1 advisory. Florian Weimer discovered that shadow was not properly copying and removing user directory trees, which could lead to a race...

Debian dla-3212 : python-twisted - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3212 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3212-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 16.04 ESM / 18.04 LTS : libICE vulnerability (USN-5744-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5744-1 advisory. It was discovered that libICE was using a weak mechanism to generate the session cookies. A local attacker could possibly use this issue to perform a...