[SECURITY] [DLA 3114-2] mariadb-10.3 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3114-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 30, 2022 https://wiki.debian.org/LTS -...

DLA-3114-2 mariadb-10.3 - regression update

Bulletin has no description...

USN-5583-2: systemd regression | Cloud Foundry

Severity Unknown Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing netowrking problems for some users. This update fixes the problem. We apologize for the inconvenience...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-buffer-overflow in onig_node_str_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6274681082871808 Project: fluent-bit Fuzzing Engine: afl Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: aflasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ 4...

SUSE: Security Advisory (SUSE-SU-2022:3401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

janino:ExpressionEvaluatorFuzzer: Security exception in org.codehaus.janino.Parser.parseConditionalExpression

Project: https://github.com/janino-compiler/janino.git Detailed Report: https://oss-fuzz.com/testcase?key=5447721989570560 Project: janino Fuzzing Engine: libFuzzer Fuzz Target: ExpressionEvaluatorFuzzer Job Type: libfuzzerasanjanino Platform Id: linux Crash Type: Security exception Crash Address...

jackson-databind:ReadTreeFuzzer: Security exception in com.fasterxml.jackson.core.JsonPointer._parseTail

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6555163569815552 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ReadTreeFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Security exception...

guava:HashingFuzzer: Security exception in HashingFuzzer.fuzzerTestOneInput

Project: https://github.com/google/guava.git Detailed Report: https://oss-fuzz.com/testcase?key=4901819231109120 Project: guava Fuzzing Engine: libFuzzer Fuzz Target: HashingFuzzer Job Type: libfuzzerasanguava Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

mongoose:fuzz: Dynamic-stack-buffer-overflow in rx_icmp

Project: https://github.com/cesanta/mongoose.git Detailed Report: https://oss-fuzz.com/testcase?key=6545699273048064 Project: mongoose Fuzzing Engine: afl Fuzz Target: fuzz Job Type: aflasanmongoose Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE Crash Address: 0x7ffcb47a8e78...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in s_file_write_flush

Detailed Report: https://oss-fuzz.com/testcase?key=6661891795058688 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x614000027d98 Crash State:...

ffmpeg:ffmpeg_AV_CODEC_ID_TRUEHD_fuzzer: Heap-buffer-overflow in ff_mlp_pack_output

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4644322217164800 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDTRUEHDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

USN-5613-2 vim regression

USN-5613-1 fixed vulnerabilities in Vim. Unfortunately that update failed to include binary packages for some architectures. This update fixes that regression. We apologize for the inconvenience. Original advisory details: It was discovered that Vim was not properly performing bounds checks when...

Ubuntu 20.04 LTS : Vim regression (USN-5613-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5613-2 advisory. USN-5613-1 fixed vulnerabilities in Vim. Unfortunately that update failed to include binary packages for some architectures. This update fixes that...

GSD-2022-1006128 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1005993 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005817 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005547 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

Bluetooth: L2CAP: Fix l2capglobalchanbypsm regression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.59 through 5.15.60 Description A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2022-34386

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v4.19.255 and fixed in versio...

PT-2022-34251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.209 through 5.4.210 Description: The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v5.4.209 and fixed in...