Ubuntu 18.04 LTS : Linux kernel regression (USN-3878-3)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3878-3 advisory. USN-3878-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a regression that could prevent systems with certain graphics chipsets...

[SECURITY] [DSA 5527-2] webkit2gtk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5527-2 [email protected] https://www.debian.org/security/ Alberto Garcia October 20, 2023 https://www.debian.org/security/faq -...

DSA-5527-2 webkit2gtk - regression update

Bulletin has no description...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox regression (USN-4122-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4122-2 advisory. USN-4122-1 fixed vulnerabilities in Firefox. The update caused a regression that resulted in a crash when changing YouTube playback speed in some...

CVE-2023-5625

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products...

SUSE: Security Advisory (SUSE-SU-2023:4110-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4110-1 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaihinet bsc1215286, BZ 28931 Also a regression from a previous update was fixed: - elf: Align argument of munmap to page size bsc1215891, BZ 28676...

[SECURITY] [DSA 5522-3] tomcat9 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5522-3 [email protected] https://www.debian.org/security/ Markus Koschany October 16, 2023 https://www.debian.org/security/faq -...

DSA-5522-3 tomcat9 - regression update

Bulletin has no description...

[SECURITY] [DSA 5522-2] tomcat9 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5522-2 [email protected] https://www.debian.org/security/ Markus Koschany October 12, 2023 https://www.debian.org/security/faq -...

DSA-5522-2 tomcat9 - regression update

Bulletin has no description...

USN-6425-2 samba regression

USN-6425-1 fixed vulnerabilities in Samba. Due to a build issue on Ubuntu 20.04 LTS, the update introduced regressions in macro handling and possibly other functionality. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Sri Nagasubramanian discovered...

bind9:dns_message_checksig_fuzzer: Index-out-of-bounds in add_link

Detailed Report: https://oss-fuzz.com/testcase?key=6464739246735360 Project: bind9 Fuzzing Engine: libFuzzer Fuzz Target: dnsmessagechecksigfuzzer Job Type: libfuzzerubsanbind9 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: addlink dnsqplookup dnsztfind Sanitizer:...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6364110226587648 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

[SECURITY] Fedora 38 Update: libspf2-1.2.11-11.20210922git4915c308.fc38

libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...

kernel security and bug fix update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2023:4517 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in l2capconnect and l2capleconnectreq in net/bluetooth/l2capcore.c CVE-2022-42896 kernel: tcindex: use-after-free vulnerability in traffic control index filter allows...

mbedtls:fuzz_dtlsclient: Heap-buffer-overflow in mbedtls_internal_md5_process

Project: https://github.com/ARMmbed/mbedtls.git https://github.com/catenacyber/mbedtls.git https://github.com/Mbed-TLS/mbedtls.git Detailed Report: https://oss-fuzz.com/testcase?key=4734447737765888 Project: mbedtls Fuzzing Engine: libFuzzer Fuzz Target: fuzzdtlsclient Job Type:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in gx_device_forward_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6021739228037120 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State:...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Index-out-of-bounds in decode_sublayer_hrd

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4685160840560640 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...