OESA-2024-1846 openjpeg2 security update

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...

io.netty.incubator:netty-incubator-codec-ohttp (>=0.0.1.final, <=0.0.12.final) potentially affected by CVE-2024-40642 via io.netty.incubator:netty-incubator-codec-bhttp (>=0.0.1.final, <=0.0.12.final)

io.netty.incubator:netty-incubator-codec-bhttp MAVEN version =0.0.1.final, =0.0.1.final, =0.0.12.final Source cves: CVE-2024-40642 Source advisory: MEND:CVE-2024-40642...

io.netty.incubator:netty-incubator-codec-ohttp (>=0.0.1.final, <=0.0.12.final) potentially affected by CVE-2024-40642 via io.netty.incubator:netty-incubator-codec-bhttp (>=0.0.1.final, <=0.0.12.final)

io.netty.incubator:netty-incubator-codec-bhttp MAVEN version =0.0.1.final, =0.0.1.final, =0.0.12.final Source cves: CVE-2024-40642 Source advisory: OSV:GHSA-Q8F2-HXQ5-CP4H...

io.netty.incubator:netty-incubator-codec-ohttp (>=0.0.1.final, <=0.0.12.final) potentially affected by CVE-2024-40642 via io.netty.incubator:netty-incubator-codec-bhttp (>=0.0.1.final, <=0.0.12.final)

io.netty.incubator:netty-incubator-codec-bhttp MAVEN version =0.0.1.final, =0.0.1.final, =0.0.12.final Source cves: CVE-2024-40642 Source advisory: GHSA-Q8F2-HXQ5-CP4H...

ffmpeg:ffmpeg_AV_CODEC_ID_SNOW_fuzzer: Crash in ff_sad16_mmxext

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5751882631413760 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSNOWfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x780b5e03d00a...

SUSE CVE-2022-48852

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

SUSE CVE-2024-40965

In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clkgetrate during transfer Instead of repeatedly calling clkgetrate for each transfer, lock the clock rate and cache the value. A deadlock has been observed while adding tlv320aic32x4 audio codec to the...

CVE-2022-48852

A flaw was found in Unbind. On Bind, the HDMI codec device is registered but not unregistered on Unbind, leading to a device leakage...

CVE-2024-40964

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41hdaunbind The cs35l41hdaunbind function clears the hdacomponent entry matching it's index and then dereferences the codec pointer held in the first element of the...

DEBIAN-CVE-2022-48852

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

UBUNTU-CVE-2022-48852

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

CVE-2022-48852 drm/vc4: hdmi: Unregister codec device on unbind

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

CVE-2022-48852 drm/vc4: hdmi: Unregister codec device on unbind

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

CVE-2022-48852 drm/vc4: hdmi: Unregister codec device on unbind

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind...

SUSE CVE-2024-40964

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41hdaunbind The cs35l41hdaunbind function clears the hdacomponent entry matching it's index and then dereferences the codec pointer held in the first element of the...

Security Bulletin: IBM Asset Data Dictionary Component uses netty-codec-http-4.1.100.Final.jar which is vulnerable to CVE-2024-29025

Summary IBM Asset Data Dictionary Component uses netty-codec-http-4.1.100.Final.jar which is vulnerable to CVE-2024-29025. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-29025 DESCRIPTION: Netty is vulnerable to a denial of...

CVE-2024-40964

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41hdaunbind The cs35l41hdaunbind function clears the hdacomponent entry matching it's index and then dereferences the codec pointer held in the first element of the...

DEBIAN-CVE-2024-40964

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41hdaunbind The cs35l41hdaunbind function clears the hdacomponent entry matching it's index and then dereferences the codec pointer held in the first element of the...

CVE-2024-40965

In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clkgetrate during transfer Instead of repeatedly calling clkgetrate for each transfer, lock the clock rate and cache the value. A deadlock has been observed while adding tlv320aic32x4 audio codec to the...

CVE-2024-40965

CVE-2024-40965 (Linux kernel: i2c/lpi2c): The provided documents confirm a fix for a deadlock scenario in i2c-lpi2c where repeated clk_get_rate() calls during transfers could lock the clk mutex and cause deadlock when a tlv320aic32x4 codec is added. The resolution caches the clock rate and uses a...