USN-5526-2: PyJWT regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

USN-5526-2 pyjwt regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

SUSE: Security Advisory (SUSE-SU-2022:2824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2824-1 Security update for compat-openssl098

This update for compat-openssl098 fixes the following issues: - Fixed a regression caused by unknown option passed to 'openssl x509' from crehash...

PT-2022-37518

Name of the Vulnerable Software and Affected Versions compat-openssl098 affected versions not specified Description The issue is related to a regression caused by an unknown option passed to 'openssl x509' from c rehash. Recommendations At the moment, there is no information about a newer version...

lcms:cms_profile_fuzzer: Crash in _cmsWriteUInt16Array

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4609861400264704 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718000010000 Crash Stat...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::BuildOptionsVal

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5756801487863808 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6050016822b...

jackson-databind:ReadTreeFuzzer: Security exception in com.fasterxml.jackson.core.JsonPointer._parseTail

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6669466951352320 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ReadTreeFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception...

net-snmp:snmp_api_fuzzer: Heap-double-free in ada_fuzz_header.h

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5357436638199808 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpapifuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEDHQ_fuzzer: Heap-buffer-overflow in ff_put_pixels_clamped_c

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4748914632294400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEDHQfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Addres...

libressl:asn1: Heap-buffer-overflow in i2c_ASN1_INTEGER

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=6566404500881408 Project: libressl Fuzzing Engine: afl Fuzz Target: asn1 Job Type: aflasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000032cf...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6496097463304192 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

libyal:libfmos_lzfse_fuzzer: Use-of-uninitialized-value in libfmos_lzfse_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4600023953833984 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfmoslzfsefuzzer Job Type: libfuzzermsanlibyal Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: libfmoslzfsedecompress lzfsefuzzer.cc...

libarchive:libarchive_fuzzer: Heap-use-after-free in archive_read_data

Project: https://github.com/libarchive/libarchive.git Detailed Report: https://oss-fuzz.com/testcase?key=5385866872225792 Project: libarchive Fuzzing Engine: afl Fuzz Target: libarchivefuzzer Job Type: aflasanlibarchive Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address:...

libreoffice:ww6fuzzer: Heap-buffer-overflow in SwModify::Add

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4796119074340864 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

CVE-2022-37434

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

dav1d:dav1d_fuzzer_mt: Use-of-uninitialized-value in cdef_filter_block_c

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5118372618043392 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzermsandav1d Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2022-29154

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

libreoffice:xlsfuzzer: Heap-use-after-free in SfxItemPool::Remove

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5142620459892736 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...

GSD-2022-1004224 nvmet-tcp: fix regression in data_digest calculation

nvmet-tcp: fix regression in datadigest calculation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...