PT-2022-34251 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.209 through 5.4.210 Description: The issue is related to a regression in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. It was introduced in version v5.4.209 and fixed in...

PT-2022-34075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.136 Description: A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...

Elrond-go has improper initialization

Impact Read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only...

GHSA-MV8X-668M-53FG Elrond-go has improper initialization

Impact Read only calls between contracts can generate smart contracts results. For example, if contract A calls in read only mode contract B and the called function will make changes upon the contract's B state, the state will be altered for contract B as if the call was not made in the read-only...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6476675893821440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

[SECURITY] [DLA 3093-2] rails regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3093-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2022 https://wiki.debian.org/LTS -...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6601431271997440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

DLA-3093-2 rails - regression update

Bulletin has no description...

Ubuntu 16.04 ESM / 18.04 LTS : poppler regression (USN-5606-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5606-2 advisory. USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for...

USN-5606-2 poppler regression

USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM. We apologize for the inconvenience. Original advisory details: It was discovered that poppler incorrectly...

USN-5583-2 systemd regression

USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that systemd incorrectly handled certain DNS...

USN-5583-2: systemd regression

USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a regression by introducing networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that systemd incorrectly handled certain DNS...

hunspell:affdicfuzzer: Heap-use-after-free in AffixMgr::prefix_check

Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=6148273701781504 Project: hunspell Fuzzing Engine: honggfuzz Fuzz Target: affdicfuzzer Job Type: honggfuzzasanhunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

geos:fuzz_geo2: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

Detailed Report: https://oss-fuzz.com/testcase?key=6314252360613888 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerasangeos Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6150004b9318 Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5192374665478144 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

Detailed Report: https://oss-fuzz.com/testcase?key=5426429646471168 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62a000323a2c Crash State:...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in init_main_qtable

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5385305294766080 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libyang:lyd_parse_mem_json: Crash in log_vprintf

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4912893090463744 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6020bebf0a4e Crash...

zeek:zeek-packet-fuzzer: Heap-buffer-overflow in zeek::String::String

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5556559643541504 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-packet-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60200099f873...

Ubuntu: Security Advisory (USN-4182-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...