SUSE-SU-2024:0576-1 Security update for dpdk

This update for dpdk fixes the following issues: - Fixed a regression caused by incomplete fix for CVE-2022-2132 bsc1219187...

SUSE: Security Advisory (SUSE-SU-2024:0554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:0554-1 Security update for dpdk

This update for dpdk fixes the following issues: - Fixed a regression caused by incomplete fix for CVE-2022-2132 bsc1219187...

SUSE-SU-2024:0531-1 Security update for dpdk

This update for dpdk fixes the following issues: - Fixed a regression caused by incomplete fix for CVE-2022-2132 bsc1219187...

SUSE-SU-2024:0529-1 Security update for dpdk

This update for dpdk fixes the following issues: - Fixed a regression caused by incomplete fix for CVE-2022-2132 bsc1219187...

icu:date_time_pattern_generator_fuzzer: Stack-buffer-overflow in icu_75::StringPiece::StringPiece

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5596466030641152 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: datetimepatterngeneratorfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ 10 Crash...

USN-6610-2 firefox regressions

USN-6610-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potential...

mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_memsearch

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4655387206811648 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6030000003ed Crash State:...

rpm security update

4.14.3-28.0.2 - Import additional patches to fix regressions with CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 patchset Orabug: 36256318 4.14.3-28.0.1 - Fixed infinte loop for dbcreate with error check Orabug: 36202920 4.14.3-28 - Backport file handling code from rpm-4.19 to fix...

USN-6587-4 xorg-server, xwayland regression

USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processing the DeviceFocusEvent and...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=6480690367496192 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

USN-6591-2 postfix update

USN-6591-1 fixed vulnerabilities in Postfix. A fix with less risk of regression has been made available since the last update. This update updates the fix and aligns with the latest configuration guidelines regarding this vulnerability. We apologize for the inconvenience. Original advisory detail...

USN-6587-3: X.Org X Server regression

USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processin...

USN-6587-3 xorg-server, xwayland regression

USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processin...

freeradius:fuzzer_radius: Heap-buffer-overflow in __covrec_BA08AAE21B0190C6

Detailed Report: https://oss-fuzz.com/testcase?key=6730709070839808 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerradius Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x613000000c06 Crash State: covrecBA08AAE21B0190C...

njs:njs_process_script_fuzzer: Use-of-uninitialized-value in njs_utf8_decode

Project: http://hg.nginx.org/njs Detailed Report: https://oss-fuzz.com/testcase?key=4844091804286976 Project: njs Fuzzing Engine: libFuzzer Fuzz Target: njsprocessscriptfuzzer Job Type: libfuzzermsannjs Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

apache-poi:POIXSSFFuzzer: Security exception in java.base/java.util.ArrayList.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5323556686725120 Project: apache-poi Fuzzing Engine: libFuzzer Fuzz Target: POIXSSFFuzzer Job Type: libfuzzerasanapache-poi Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.ArrayList...

libpcap:fuzz_both: Use-of-uninitialized-value in pcapint_filter_with_aux_data

Project: https://github.com/the-tcpdump-group/libpcap.git Detailed Report: https://oss-fuzz.com/testcase?key=5185152170917888 Project: libpcap Fuzzing Engine: libFuzzer Fuzz Target: fuzzboth Job Type: libfuzzermsanlibpcap Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

DLA-3709-2 squid - regression update

Bulletin has no description...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in RTSP_UnpackURL

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4835096515379200 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7f922080182...