7558 matches found
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync regression (USN-7206-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7206-2 advisory. USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update...
[SECURITY] [DSA 5843-2] rsync regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5843-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 16, 2025 https://www.debian.org/security/faq -...
DSA-5843-2 rsync - regression update
Bulletin has no description...
CVE-2024-57843
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnetrqalloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.highorderallocdisable value is 1, then the frag always get a page when do refill...
CVE-2024-57843
CVE-2024-57843 concerns the Linux kernel’s virtio-net driver, specifically virtnet_rq_alloc. The defect arises when a fragment is exactly one page and the combined size of the buffer and virtnet_rq_dma (which reserves 16 bytes at the start of a new fragment) exceeds a page, causing an overflow. T...
gdal:gdal_fuzzer: Heap-buffer-overflow in void std::__1::vector<unsigned short, std::__1::allocator<unsigned short>>::__co
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4670068138508288 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x516000006c00 Crash...
DEBIAN-CVE-2024-56633
In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Fix the skmemuncharge logic in tcpbpfsendmsg The current sk memory accounting logic in SKREDIRECT is pre-uncharging tosend bytes, which is either msg-sg.size or a smaller value applybytes. Potential problems with this...
UBUNTU-CVE-2024-56569
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stacktracefilter When executing the following command: echo "write:mod:ext3" /sys/kernel/tracing/stacktracefilter The current mod command causes a null pointer dereference. While comm...
CVE-2024-56569
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stacktracefilter When executing the following command: echo "write:mod:ext3" /sys/kernel/tracing/stacktracefilter The current mod command causes a null pointer dereference. While comm...
vulkan-loader:settings_fuzzer: Crash in loader_delete_layer_list_and_properties
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4732216520802304 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...
simdutf:conversion: Heap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_latin1
Project: https://github.com/simdutf/simdutf.git Detailed Report: https://oss-fuzz.com/testcase?key=4942454003924992 Project: simdutf Fuzzing Engine: libFuzzer Fuzz Target: conversion Job Type: libfuzzerasansimdutf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...
SUSE-SU-2024:4389-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2021-3156: Fixed regression in CVE bsc1234371...
Oracle Linux 9 : edk2:20240524 (ELSA-2024-11219)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11219 advisory. 20240524-6.0.1.el95.3 - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch RHEL-58631 - Resolves: RHEL-58631 Regression HTTP Boot fails to work wi...
Fedora 41 : subversion (2024-93e88b1c0d)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-93e88b1c0d advisory. This release contains a fix for a security issue: CVE-2024-46901 See https://subversion.apache.org/security/CVE-2024-46901-advisory.txt for more...
Ubuntu 20.04 LTS : PHP regression (USN-7157-2)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7157-2 advisory. USN-7157-1 fixed vulnerabilities in PHP. The patch for CVE-2024-8932 caused a regression in php7.4. This update fixes the problem. Tenable has extracted the...
Docker Security Advisory: AuthZ Plugin Bypass Regression in Docker Engine (CVE-2024-41110)
Brocade Security Team has become aware that Certain versions of Docker Engine have a security vulnerability that could allow an attacker to bypass authorization plugins AuthZ under specific circumstances. The base likelihood of this being exploited is low. Detail Docker’s default authorization...
SUSE CVE-2024-53846
OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and...
[SECURITY] [DLA 3988-2] jinja2 regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3988-2 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 09, 2024 https://wiki.debian.org/LTS -...
DLA-3988-2 jinja2 - regression update
Bulletin has no description...
shaderc:shaderc_fdp_fuzzer: Crash in glslang::TInfoSinkBase::location
Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=5582249824681984 Project: shaderc Fuzzing Engine: libFuzzer Fuzz Target: shadercfdpfuzzer Job Type: libfuzzerasanshaderc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8000 Cras...