[SECURITY] [DSA 5758-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5758-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 26, 2024 https://www.debian.org/security/faq -...

DSA-5758-1 trafficserver - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5758-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dsa-5758 : trafficserver - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5758 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5758-1 [email protected] https://www.debian.org/securit...

trafficserver:fuzz_http3frame: Use-of-uninitialized-value in Http3FrameFactory::create

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4793610426449920 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp3frame Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

Fedora: Security Advisory (FEDORA-2024-2243c5abee)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-77fe791124)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : trafficserver (2024-77fe791124)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-77fe791124 advisory. Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296 Tenable has extracted the preceding description block directly from...

Fedora 39 : trafficserver (2024-2243c5abee)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2243c5abee advisory. Update to upstream 9.2.5 Resolves CVE-2023-38522, CVE-2024-35161, CVE-2024-35296 Tenable has extracted the preceding description block directly from...

trafficserver:fuzz_json: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4997017683165184 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasantrafficserver Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7d9b981c8b41 Crash State: NULL Sanitizer: address ASAN...

Fedora: Security Advisory (FEDORA-2024-111a8a624b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-40770 · Git +1 · Trafficserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ink filepath merge, layout relative, and...

trafficserver:fuzz_yamlcpp: Use-of-uninitialized-value in YAML::Stream::Stream

Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=5689205717008384 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzyamlcpp Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Debian: Security Advisory (DLA-3799-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3799-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3799-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 28, 2024 https://wiki.debian.org/LTS -...

Debian dla-3799 : trafficserver - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3799 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3799-1 [email protected] https://www.debian.org/lts/security/...

DLA-3799-1 trafficserver - security update

Bulletin has no description...

Debian: Security Advisory (DSA-5659-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-5659-1 trafficserver - security update

Bulletin has no description...

Fedora 38 : trafficserver (2024-d0acf8d109)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d0acf8d109 advisory. Update to upstream 9.2.4, resolves CVE-2024-31309 CONTINUATION frames DoS Tenable has extracted the preceding description block directly from the...