USN-4038-3: bzip2 regression

USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We apologize for the inconvenience. Original advisory details: It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use...

USN-4038-3 bzip2 regression

USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We apologize for the inconvenience. Original advisory details: It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use...

HackerOne: Custom Field Attributes may be created and updated for customers with Custom Field Trial enabled

The Custom Field feature is currently only available for customers on the Enterprise product edition. A trial period can be given by enabling the custom-fields-trial feature for programs who are not on that product edition yet. However, when enabling this feature, the incorrect ordering of an ACL...

cryptofuzz/cryptofuzz-openssl-110-noasm: Stack-buffer-overflow in RC5_32_set_key

Detailed report: https://oss-fuzz.com/testcase?key=5636104176271360 Project: cryptofuzz Fuzzer: libFuzzercryptofuzzcryptofuzz-openssl-110-noasm Fuzz target binary: cryptofuzz-openssl-110-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash...

OPENSUSE-SU-2019:1690-1 Security update for irssi

This update for irssi fixes the following issues: irssi was updated to 1.1.3: - CVE-2019-13045: Fix a use after free issue when sending the SASL login on automatic and manual reconnects 1055, 1058 boo1139802 - Fix regression of 779 where autologignoretargets would not matching itemless windows...

icu/collator_rulebased_fuzzer: Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5695958395912192 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow...

DLA-1837-2 rdesktop - regression update

Bulletin has no description...

icu/collator_rulebased_fuzzer: Crash in icu_64::UCharsTrie::branchNext

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5649936613376000 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash...

Ubuntu: Security Advisory (USN-4041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ffmpeg/ffmpeg_AV_CODEC_ID_HYMT_fuzzer: Crash in decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5710295743332352 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDHYMTfuzzer Fuzz target binary: ffmpegAVCODECIDHYMTfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

ffmpeg/ffmpeg_AV_CODEC_ID_DXV_fuzzer: Heap-buffer-overflow in dxt1_block_internal

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5670831067234304 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDDXVfuzzer Fuzz target binary: ffmpegAVCODECIDDXVfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash...

USN-4041-2: Linux kernel (HWE) update

USN-4041-1 provided updates for the Linux kernel in Ubuntu. This update provides the corresponding updates for the Linux kernel for Ubuntu 16.04 ESM. USN-4017-2 fixed vulnerabilities in the Linux kernel. Unfortunately, the update introduced a regression that interfered with networking application...

USN-4041-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon update

USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu. Unfortunately, the update introduced a regression that interfered with networking applications that setup very low SOSNDBUF values. This update fixes the problem. We apologize for the inconvenience. Jonathan Looney discovered that t...

wget2/wget_options_fuzzer: Stack-buffer-overflow in _compare_tag

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5670699290591232 Project: wget2 Fuzzer: libFuzzerwget2wgetoptionsfuzzer Fuzz target binary: wgetoptionsfuzzer Job Type: libfuzzerasanwget2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 8...

chakra: Crash in int JsUtil::BaseDictionary<void*, unsigned int, Memory::RecyclerNonLeafAllocator

Detailed report: https://oss-fuzz.com/testcase?key=5727599193489408 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00008fff8800 Crash State: int JsUtil::BaseDictionary :: Sanitizer: address ASAN Regressed:...

icu/collator_compare_fuzzer: Heap-buffer-overflow in collator_compare_fuzzer.cpp

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=5703701391474688 Project: icu Fuzzer: libFuzzericucollatorcomparefuzzer Fuzz target binary: collatorcomparefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow WRITE...

[SECURITY] [DLA 1835-2] python3.4 regression update

Package : python3.4 Version : 3.4.2-1+deb8u4 CVE ID : CVE-2019-9740 CVE-2019-9947 Debian Bug : 931044 The update issued as DLA-1835-1 caused a regression in the http.client library in Python 3.4 which was broken by the patch intended to fix CVE-2019-9740 and CVE-2019-9947. For Debian 8 "Jessie",...

Debian DLA-1835-2 : python3.4 regression update

The update issued as DLA-1835-1 caused a regression in the http.client library in Python 3.4 which was broken by the patch intended to fix CVE-2019-9740 and CVE-2019-9947. For Debian 8 'Jessie', this problem has been fixed in version 3.4.2-1+deb8u4. We recommend that you upgrade your python3.4...

DLA-1835-2 python3.4 - regression update

Bulletin has no description...

Debian DLA-1833-2 : bzip2 regression update

The original fix for CVE-2019-12900 in bzip2, a high-quality block-sorting file compressor, introduces regressions when extracting certain lbzip2 files which were created with a buggy libzip2. Please see https://bugs.debian.org/931278 for more information. For Debian 8 'Jessie', this problem has...