USN-3509-3 linux, linux-aws, linux-kvm, linux-raspi2 regression

USN-3509-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. Unfortunately, it also introduced a regression that prevented the Ceph network filesystem from being used. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Mohamed Ghannam...

Ubuntu: Security Advisory (USN-3509-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gdal/gdal_fuzzer: Crash in extpdstemplate

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5287456308985856 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00002072b678 Crash...

CVE-2017-11305

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

Information disclosure

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

CVE-2017-11305

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

UBUNTU-CVE-2017-11305

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

CVE-2017-11305

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

CVE-2017-11305

The CVE-2017-11305 entry refers to a regression in Adobe Flash Player up to version 27.0.0.187 that causes the unintended reset of the global settings preference file when a user clears browser data. Connected sources confirm this regression affecting Flash Player and document affected releases (...

[SECURITY] [DLA 1203-2] xrdp regression update

Package : xrdp Version : 0.5.0-2+deb7u3 A regression was added by the patch introduced in version 0.5.0-2+deb7u2 to fix CVE-2017-16927: xrdp-sesman started to segfault in libscp. For Debian 7 "Wheezy", these problems have been fixed in version 0.5.0-2+deb7u3. We recommend that you upgrade your xr...

DLA-1203-2 xrdp - regression update

Bulletin has no description...

CVE-2017-11305: Undefined Security Weakness

A regression affecting Adobe Flash Player version 27.0.0.187 and earlier versions causes the unintended reset of the global settings preference file when a user clears browser data...

wpantund/wpantund-fuzz: Heap-use-after-free in nl::wpantund::SpinelNCPTaskGetNetworkTopology::parse_child_entry

Detailed report: https://oss-fuzz.com/testcase?key=6322864912334848 Project: wpantund Fuzzer: libFuzzerwpantundwpantund-fuzz Fuzz target binary: wpantund-fuzz Job Type: libfuzzerasanwpantund Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6310000377f5 Crash State:...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Detailed report: https://oss-fuzz.com/testcase?key=4646937367150592 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::GetComment Archive::ViewComme...

PT-2017-11908 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 27.0.0.187 Description: A regression in Adobe Flash Player causes the unintended reset of the global settings preference file when a user clears browser data. This issue allows attackers to affect the...

gdal/gdal_filesystem_fuzzer: Crash in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5620335064907776 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

llvm/clang-fuzzer: Stack-buffer-overflow in clang::expandUCNs

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5041559499177984 Project: llvm Fuzzer: libFuzzerllvmclang-fuzzer Fuzz target binary: clang-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash...

open62541/fuzz_binary_message: Crash in copyAttributeIntoNode

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6657398270853120 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

gdal/mitab_tab_fuzzer: Heap-buffer-overflow in TABFile::GetINDFileRef

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5521673424994304 Project: gdal Fuzzer: libFuzzergdalmitabtabfuzzer Fuzz target binary: mitabtabfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

chakra: Stack-use-after-scope in char16_t const* PlatformAgnostic::Intl::FormatNumber<double>

Project: https://github.com/Microsoft/ChakraCore.git Detailed report: https://oss-fuzz.com/testcase?key=5972830278647808 Project: chakra Fuzzer: jsfuzzer Job Type: asanchakra Platform Id: linux Crash Type: Stack-use-after-scope READ 3 Crash Address: 0x7f9ca422b8c0 Crash State: char16t const...