PT-2022-29215

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to an MTU regression in the xfrm module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.305,...

PT-2022-29196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-29175

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to an MTU regression in the xfrm module. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.15 and fixed in Linux Kernel...

PT-2022-28979

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to an MTU regression in the xfrm component. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.15 and fixed in Linux Kern...

SUSE-SU-2022:0844-1 Security update for expat

This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 bsc1196784...

OPENSUSE-SU-2022:0844-1 Security update for expat

This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 bsc1196784...

SUSE-SU-2022:0842-1 Security update for expat

This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 bsc1196784...

libxml2:xml: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4891983217295360 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: xml Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

freeradius:fuzzer_dhcpv4: Heap-buffer-overflow in __covrec_C8414D37CAD6D4CD

Detailed Report: https://oss-fuzz.com/testcase?key=4683877908611072 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv4 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000001177 Crash State: covrecC8414D37CAD6D4C...

[SECURITY] [DSA 5085-2] expat regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5085-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2022 https://www.debian.org/security/faq -...

DSA-5085-2 expat - regression update

Bulletin has no description...

USN-5320-1 expat vulnerabilities and regression

USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required. This update address this regression and several other vulnerabilities. It was discovered that Expat incorrectly handled certain files. An attacker could possibly use...

libxslt:xslt: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5588474844020736 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ghostscript:gstoraster_fuzzer: Crash in pdfi_count_cff_index

Detailed Report: https://oss-fuzz.com/testcase?key=4696419984867328 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62cff772e358 Crash State: pdficountcffindex...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Detailed Report: https://oss-fuzz.com/testcase?key=5042514933972992 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in spgetcc

Detailed Report: https://oss-fuzz.com/testcase?key=6721440936755200 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62a000005050 Crash State: spgetcc gsscantok...

USN-5292-4: snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

USN-5292-4 snapd regression

USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did not properly manage the permissions for...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in check_user_password_preR5

Detailed Report: https://oss-fuzz.com/testcase?key=6657097855533056 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fc81a1c1840 Crash State:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=5548306321768448 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...