Ubuntu: Security Advisory (USN-288-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3090-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4182-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5051-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libpng:libpng_read_fuzzer: Use-of-uninitialized-value in png_do_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5179162188447744 Project: libpng Fuzzing Engine: libFuzzer Fuzz Target: libpngreadfuzzer Job Type: libfuzzermsanlibpng Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngdoexpand OSSFUZZpngdoreadtransformatio...

Ubuntu 20.04 LTS : Varnish Cache regression (USN-5474-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5474-2 advisory. USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for CVE-2020-11653 was incomplete. This update fixes the problem. Tenable has extracted t...

USN-5474-2 varnish regression

USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for CVE-2020-11653 was incomplete. This update fixes the problem. Original advisory details: It was discovered that Varnish Cache could have an assertion failure when a TLS termination proxy uses PROXY version 2. A remote...

PT-2025-25870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A regression was introduced in the Linux kernel by a recent commit, causing a NULL dereference when reading the power supply sysfs. This issue arose from a stale sysfs entry that was not...

podman: Security regression of CVE-2020-14370 due to source code management issue

The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

Detailed Report: https://oss-fuzz.com/testcase?key=5983542454124544 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

jackson-modules-java8:DatatypeFuzzer: Security exception in DatatypeFuzzer.fuzzerTestOneInput

Project: https://github.com/FasterXML/jackson-modules-java8.git Detailed Report: https://oss-fuzz.com/testcase?key=5125706576691200 Project: jackson-modules-java8 Fuzzing Engine: libFuzzer Fuzz Target: DatatypeFuzzer Job Type: libfuzzerasanjackson-modules-java8 Platform Id: linux Crash Type:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr

Detailed Report: https://oss-fuzz.com/testcase?key=5527081739485184 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=4669183308201984 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

Ubuntu 22.04 LTS : PyJWT regression (USN-5526-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5526-2 advisory. USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This...

USN-5526-2: PyJWT regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

USN-5526-2 pyjwt regression

USN-5526-1 fixed vulnerabilities in PyJWT. Unfortunately this caused a regression by incrementing the internal package version number on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Aapo Oksman discovered that PyJWT incorrectly...

SUSE: Security Advisory (SUSE-SU-2022:2824-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2824-1 Security update for compat-openssl098

This update for compat-openssl098 fixes the following issues: - Fixed a regression caused by unknown option passed to 'openssl x509' from crehash...

PT-2022-37518

Name of the Vulnerable Software and Affected Versions compat-openssl098 affected versions not specified Description The issue is related to a regression caused by an unknown option passed to 'openssl x509' from c rehash. Recommendations At the moment, there is no information about a newer version...

lcms:cms_profile_fuzzer: Crash in _cmsWriteUInt16Array

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4609861400264704 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsprofilefuzzer Job Type: libfuzzermsanlcms Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x718000010000 Crash Stat...