7558 matches found
USN-5966-2: amanda regression
USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in amanda until a better fix is provided. We apologize for the inconvenience. Original advisory details: Maher Azzouzi discovered an information...
USN-5871-2: Git regression | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5871-1 fixed vulnerabilities in Git. A backport fixing part of the vulnerability in CVE-2023-22490 was required. This update fix this for Ubuntu 18.04 LTS. Original advisory details: It was discovered...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda regression (USN-5966-2)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5966-2 advisory. USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update...
libavc:avc_enc_fuzzer: Use-of-uninitialized-value in Codec::encodeFrames
Project: https://android.googlesource.com/platform/external/libavc https://github.com/ittiam-systems/libavc.git Detailed Report: https://oss-fuzz.com/testcase?key=5923692197838848 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcencfuzzer Job Type: libfuzzermsanlibavc Platform Id: linux...
OPENSUSE-SU-2023:0077-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-24580: Prevent DOS in file uploads. boo1208082 update to 1.11.15 CVE-2018-14574: Fixed Open redirect possibility in CommonMiddleware boo1102680 Fixed WKBWriter.write and writehex for empty polygons on GEOS 3.6.1+ Fixed a...
[SECURITY] [DLA 3315-2] sox regression update
Debian LTS Advisory DLA-3315-2 [email protected] https://www.debian.org/lts/security/ Helmut Grohne March 20, 2023 https://wiki.debian.org/LTS Package : sox Version : 14.4.2+git20190427-1+deb10u2 Debian Bug : 1032082 One of the security fixes released as DLA 3315 introduced a regression...
DLA-3315-2 sox - regression update
Bulletin has no description...
[SECURITY] [DLA 3357-2] imagemagick regression update
From: imagemagick To: [email protected] Subject: SECURITY DLA 3357-2 imagemagick regression update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3357-2 [email protected] https://www.debian.org/lts/security/ Bastien...
DLA-3357-2 imagemagick - regression update
Bulletin has no description...
curl:curl_fuzzer_rtsp: Heap-buffer-overflow in rtsp_rtp_readwrite
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5949742902542336 Project: curl Fuzzing Engine: libFuzzer Fuzz Target: curlfuzzerrtsp Job Type: libfuzzerasani386curl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0xf19001fe...
[SECURITY] [DSA 5356-2] sox regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5356-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2023 https://www.debian.org/security/faq -...
DSA-5356-2 sox - regression update
Bulletin has no description...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
mruby:mruby_fuzzer: Crash in mrb_exc_get_id
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6488601444876288 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff8008 Crash State:...
serenity:FuzzJPEGLoader: Bad-cast to AK::Array<AK::TypeErasedParameter, 0>Gfx::handle_color_transform in Gfx::decode_jpeg
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6414214651838464 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzJPEGLoader Job Type: libfuzzerubsanserenity Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7ffc0b58ecc8...
mruby:mruby_fuzzer: Use-of-uninitialized-value in mrb_obj_iv_set_force
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4698611440287744 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
cyclonedds:fuzz_type_object: Heap-use-after-free in ddsi_type_unref_impl_locked
Project: https://github.com/eclipse-cyclonedds/cyclonedds.git Detailed Report: https://oss-fuzz.com/testcase?key=5523793927077888 Project: cyclonedds Fuzzing Engine: afl Fuzz Target: fuzztypeobject Job Type: aflasancyclonedds Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address...
SUSE-SU-2023:0683-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874...
CentOS: Security Advisory for bpftool (CESA-2023:1091)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...