CVE-2022-49083 iommu/omap: Fix regression in probe for NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fix regression in probe for NULL pointer dereference Commit 3f6634d997db "iommu: Use right way to retrieve iommuops" started triggering a NULL pointer dereference for some omap variants: iommuprobedevice from...

CVE-2022-49083

CVE-2022-49083 concerns a kernel-level regression in the iommu/omap path that can trigger a NULL pointer dereference during device probe. The issue arises when a commit altered probe behavior (3f6634d997db) so that omap iommu probe returns 0 instead of ERR_PTR(-ENODEV), making probe_iommu_group-&...

libucl:ucl_add_string_fuzzer: Object-size in ucl_array_append

Project: https://github.com/vstakhov/libucl.git Detailed Report: https://oss-fuzz.com/testcase?key=5508733199515648 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

net-snmp:snmp_parse_args_fuzzer: Heap-buffer-overflow in se_add_pair

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6363303932919808 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpparseargsfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_parse_args_fuzzer: Heap-buffer-overflow in snmp_in_options

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6384743772127232 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseargsfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

DLA-4052-2 postgresql-13 - regression update

Bulletin has no description...

ndpi:fuzz_ndpi_reader_pl7m_internal: Crash in ndpi_free_flow_data

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=6499999051743232 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireaderpl7minternal Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xfffffffffffffff2...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Use-of-uninitialized-value in av_buffer_unref

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5434110676107264 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

tinysparql:fuzz_rdf_turtle: Heap-buffer-overflow in g_utf8_strlen

Project: https://gitlab.gnome.org/GNOME/tinysparql.git Detailed Report: https://oss-fuzz.com/testcase?key=5414021276958720 Project: tinysparql Fuzzing Engine: libFuzzer Fuzz Target: fuzzrdfturtle Job Type: libfuzzerasantinysparql Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

SUSE CVE-2022-2196

A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM L0 advertising eIBRS support to L1. An attacker at L2 with code...

SUSE CVE-2024-39884

A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PH...

rust-toolset:rhel8 bug fix and enhancement update

An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc,...

USN-6846-3: Ansible regression

USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansible incorrectly handled certain inputs when using towercallback parameter. If a user...

USN-7256-2 ruby2.7 regression

USN-7256-1 fixed vulnerabilities in Ruby. The update introduced a minor regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an...

Ubuntu 16.04 LTS / 18.04 LTS : Ansible regression (USN-6846-3)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6846-3 advisory. USN-6846-1 fixed vulnerabilities in ansible. The update introduced a regression in ansible. This update fixes the problem. We apologize for the...

[SECURITY] [DLA 4038-2] dcmtk regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-2 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 12, 2025 https://wiki.debian.org/LTS -...

net-snmp:snmp_parse_args_fuzzer: Index-out-of-bounds in ada_fuzz_header.h

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5749472080756736 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseargsfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type:...

DLA-4038-2 dcmtk - regression update

Bulletin has no description...

DLA-4018-2 ruby2.7 - regression update

Bulletin has no description...

USN-7206-4 rsync regression

USN-7206-3 fixed vulnerabilities in rsync for Ubuntu 24.10. The update introduced a regression in rsync. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle...