USN-5395-2 networkd-dispatcher regression

USN-5395-1 fixed vulnerabilities in networkd-dispatcher. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that networkd-dispatcher incorrectly handled internal...

poppler:doc_fuzzer: Use-of-uninitialized-value in XRef::readXRefStreamSection

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4738828922912768 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : networkd-dispatcher regression (USN-5395-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5395-2 advisory. USN-5395-1 fixed vulnerabilities in networkd-dispatcher. Unfortunately that update was incomplete and could introduce a regression. This...

upb:file_descriptor_parsenew_fuzzer: Heap-buffer-overflow in upb_strtable_insert

Detailed Report: https://oss-fuzz.com/testcase?key=6720000548798464 Project: upb Fuzzing Engine: libFuzzer Fuzz Target: filedescriptorparsenewfuzzer Job Type: libfuzzerasanupb Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d000000970 Crash State: upbstrtableinsert...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5848657196351488 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

SUSE-SU-2022:1465-1 Security update for libslirp

This update for libslirp fixes the following issues: - CVE-2021-3592: Fixed invalid pointer initialization may lead to information disclosure bootp bsc1187364. - CVE-2021-3594: Fixed invalid pointer initialization may lead to information disclosure udp bsc1187367. - CVE-2021-3595: Fixed invalid...

opensc:fuzz_card: Stack-buffer-overflow in sc_asn1_read_tag

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6103843953311744 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzcard Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f7078d409b6...

USN-5376-3: Git regression

USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use thi...

USN-5376-3 git regression

USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use thi...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Git regression (USN-5376-3)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5376-3 advisory. USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem. Tenable has...

GSD-2022-1001975 iommu/omap: Fix regression in probe for NULL pointer dereference

iommu/omap: Fix regression in probe for NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001682 iommu/omap: Fix regression in probe for NULL pointer dereference

iommu/omap: Fix regression in probe for NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001354 iommu/omap: Fix regression in probe for NULL pointer dereference

iommu/omap: Fix regression in probe for NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001010 iommu/omap: Fix regression in probe for NULL pointer dereference

iommu/omap: Fix regression in probe for NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

flatbuffers:monster_fuzzer: Use-of-uninitialized-value in flatbuffers::Parser::Next

Project: https://github.com/google/flatbuffers.git Detailed Report: https://oss-fuzz.com/testcase?key=5201432904597504 Project: flatbuffers Fuzzing Engine: libFuzzer Fuzz Target: monsterfuzzer Job Type: libfuzzermsanflatbuffers Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4748043003494400 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

Apache Subversion SVN authz protected copyfrom paths regression

...

USN-5320-1: Expat vulnerabilities and regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required. This update address this regression and several...

Slackware: Security Advisory (SSA:2017-091-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2018-142-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...