GSD-2022-1006128 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1005993 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005817 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005547 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v4.19.255 and fixed in versio...

PT-2022-34251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.209 through 5.4.210 Description: The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v5.4.209 and fixed in...

PT-2022-34075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.136 Description: A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

PT-2022-33805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.59 through 5.15.60 Description A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

GHSA-MV8X-668M-53FG Elrond-go has improper initialization

Impact Read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only...

Elrond-go has improper initialization

Impact Read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6476675893821440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

[SECURITY] [DLA 3093-2] rails regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3093-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2022 https://wiki.debian.org/LTS -...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6601431271997440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

DLA-3093-2 rails - regression update

Bulletin has no description...

Ubuntu 16.04 ESM / 18.04 LTS : poppler regression (USN-5606-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5606-2 advisory. USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for...

USN-5606-2 poppler regression

USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM. We apologize for the inconvenience. Original advisory details: It was discovered that poppler incorrectly...

USN-5583-2: systemd regression

USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that systemd incorrectly handled certain DNS...

USN-5583-2 systemd regression

USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that systemd incorrectly handled certain DNS...

hunspell:affdicfuzzer: Heap-use-after-free in AffixMgr::prefix_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=6148273701781504 Project: hunspell Fuzzing Engine: honggfuzz Fuzz Target: affdicfuzzer Job Type: honggfuzzasanhunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

geos:fuzz_geo2: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

Detailed Report: https://oss-fuzz.com/testcase?key=6314252360613888 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerasangeos Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6150004b9318 Crash State:...